last executing test programs:

6m38.139336635s ago: executing program 3 (id=691):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000030601010000000000000000000000000500010007"], 0x1c}}, 0x0)

6m37.984245917s ago: executing program 3 (id=697):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18800, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$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")
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsv0}, {@nobarrier}, {@abort}, {@quota}]}, 0x3, 0x438, &(0x7f0000000d80)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x20000027, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000, @void, @value}, 0x94)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x2)
pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc)

6m37.931156298s ago: executing program 3 (id=698):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x9, 0x0, 0x719, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000690030000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
pipe2(&(0x7f0000000840), 0x0)
fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)

6m37.856032279s ago: executing program 3 (id=703):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x1, 0x368, &(0x7f0000000180)="$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")
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
io_setup(0x2, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000500)=""/173, 0xad)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

6m37.328322526s ago: executing program 3 (id=718):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x169882, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r2}, 0x18)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x202200, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})

6m37.03883296s ago: executing program 3 (id=720):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
pipe2$9p(&(0x7f0000000240), 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x11, @loopback, 0x0, 0x4, 'lblc\x00', 0xf, 0x0, 0x3a}, 0x2c)

6m37.03847768s ago: executing program 32 (id=720):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
pipe2$9p(&(0x7f0000000240), 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x11, @loopback, 0x0, 0x4, 'lblc\x00', 0xf, 0x0, 0x3a}, 0x2c)

5m39.312604937s ago: executing program 2 (id=1827):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x14, &(0x7f00000001c0)='\x00'}, 0x11)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
r2 = socket$nl_generic(0x10, 0x3, 0x10)
semop(0x0, &(0x7f0000000380)=[{0x2, 0xffff, 0x1000}], 0x1)
semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0x7ffd}, {}], 0x2, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0)

5m39.213929998s ago: executing program 2 (id=1830):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000000000000100, 0x14020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x10}, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r2 = io_uring_setup(0xaab, &(0x7f00000003c0)={0x0, 0x2c97, 0x8})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmsg(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x6}, 0x18)

5m39.05068607s ago: executing program 2 (id=1836):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x7, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000010000e1250000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4)
sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

5m39.031104231s ago: executing program 2 (id=1837):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000640)='./file1\x00', 0x4800, &(0x7f0000000240)=ANY=[], 0xfd, 0x11ff, &(0x7f0000000f00)="$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")
mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0)
chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00')
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
wait4(0x0, 0x0, 0x40000000, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00')

5m38.912002022s ago: executing program 2 (id=1842):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000e000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r3}, 0x10)
close(r0)

5m38.745146744s ago: executing program 2 (id=1844):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xb0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'rose0\x00', 0x112})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400})

5m38.691348445s ago: executing program 33 (id=1844):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xb0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'rose0\x00', 0x112})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400})

4.439634122s ago: executing program 0 (id=7736):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe)
r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14)
fcntl$setsig(r2, 0xa, 0x13)
fcntl$setlease(r2, 0x400, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
unshare(0x8000000)
r3 = semget$private(0x0, 0x1, 0x4ac0c2fc29e33682)
semtimedop(r3, &(0x7f0000000100)=[{0x0, 0x1000, 0x1000}], 0x1, 0x0)
unshare(0x2c040000)

4.144165386s ago: executing program 4 (id=7740):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffaecd, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000a080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x18)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/vlan0\x00')
r7 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x24008000)

4.143103496s ago: executing program 6 (id=7741):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x15, 0x0)
mq_notify(r2, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}})
close(0x3)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r5}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000400)='target_cmd_complete\x00', r4, 0x0, 0x7}, 0x18)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x8, &(0x7f0000000040), 0x9, 0x52e, &(0x7f0000000500)="$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")
set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e00000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00A\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES8, @ANYRES32], 0x48)
syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

3.552541744s ago: executing program 0 (id=7743):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000bfa200000000000007020000f8fff7ff013e101708000000000300000095000000000000a36e72792753a4218f94f94d9279f397ff7fc80d71b46dbcc04003000905f9c2c782572d67e6f32b6953d9f2942a2b636209a8185fdeadb5e93a098b4c0be41df441694ca445d37e77a441bce1f20be7ccd1033df8ab8bbdb33c72a6d69fed23c595dbb0224a99e6d493a0c9a174ee3385a6f7dd3e555f5a98852447a88a9179cd9ee7a48bf99ff2a2dc39abfdee2df7d750f5e82aa91412d96312c5eb4b733c4293e8"], 0x0, 0x1dd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x18)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x6, &(0x7f0000000140)={0x14, {{0x29, 0x0, 0x8000000, @private2}}}, 0x88)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffccb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
timer_getoverrun(0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r5, &(0x7f0000004200)='t', 0x1)
sendfile(r5, r3, 0x0, 0x7ffff000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x400080, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00'}, 0x10)
mount_setattr(0xffffffffffffff9c, 0x0, 0x8100, 0x0, 0x0)

3.382455186s ago: executing program 6 (id=7757):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c0002800500010006"], 0x44}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b000000000000"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x0)
r5 = io_uring_setup(0xef9, &(0x7f00000003c0)={0x0, 0x4914, 0x2, 0x8000005, 0x3d7})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
socket(0xf, 0x5, 0xfff)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='.\x00', &(0x7f0000000280), 0x808008, &(0x7f0000000440))
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000002c0)=ANY=[], 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)

3.070196s ago: executing program 4 (id=7749):
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
syz_create_resource$binfmt(0x0)
r0 = msgget(0x1, 0x2b0)
msgrcv(r0, 0x0, 0x0, 0x2, 0x2000)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000010000008a000000c9e7000001000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48)
msgsnd(r0, 0x0, 0x8, 0x800)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote})
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
ioctl$TUNSETFILTEREBPF(r2, 0xb702, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast})
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000)
epoll_pwait(0xffffffffffffffff, &(0x7f00000040c0)=[{}], 0x1, 0x81, &(0x7f0000004100)={[0x3]}, 0x8)

2.684687935s ago: executing program 1 (id=7752):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000500000018"], 0x2c}}, 0x0)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0xfffff05b})
keyctl$clear(0x3, 0xfffffffffffffffd)
add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDDELIO(r4, 0x4b35, 0x755)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x48091)
r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x121041)
write$evdev(r5, &(0x7f0000000040), 0x373)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000480)={'veth0_to_batadv\x00', 0x1000})
ioctl$EVIOCGKEY(r5, 0x80404518, &(0x7f0000000200)=""/36)
openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x0)
lsetxattr$security_selinux(&(0x7f0000000080)='./file1\x00', &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:ssh_keysign_exec_t:s0\x00', 0x28, 0x2)

2.637169296s ago: executing program 1 (id=7753):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x2000000000000096, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r4}, 0x10)
mount_setattr(0xffffffffffffff9c, 0x0, 0x8900, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
epoll_create1(0x0)
poll(&(0x7f0000000100)=[{r1, 0x1009}, {0xffffffffffffffff, 0x8000}, {r4, 0x10}], 0x3, 0x8000007)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000780), 0x1, r5}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00'}, 0x18)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0)

2.564641867s ago: executing program 0 (id=7754):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x0)
io_uring_setup(0x2d58, &(0x7f0000000380)={0x0, 0x62cc, 0x400, 0x8000002, 0x3f7})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
migrate_pages(r2, 0x7, &(0x7f0000000280)=0x3ff, 0x0)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000030701"], 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x1)
ioctl$TCSETS(r5, 0x8924, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ff, 0x0, "5dee000000594000"})
lchown(&(0x7f00000006c0)='./file0\x00', r1, 0xee01)
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000200)=@v3={0x3000000, [{0x46, 0x75}, {0x1, 0x4}], r1}, 0x18, 0x1)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)

2.557617807s ago: executing program 6 (id=7755):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0, 0x0, 0x200000000000000}, 0x18)
syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f00000005c0)='./file1\x00', 0x8205, &(0x7f0000000000)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x15}}, {@stripe}, {@jqfmt_vfsold}, {@errors_remount}, {@quota}, {@noblock_validity}, {@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x16}}]}, 0x1, 0x60a, &(0x7f0000001c40)="$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")
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000006c0)=0xffffffdc)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000700)=@req3={0x1000, 0x8, 0xff, 0x1, 0x1, 0xd52, 0x5}, 0x1c)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0)
set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b70800186518b800968af8ff00000000bfa200000000000007020000f8ffffde6303000002000000b704000000000100850000024300000095f7a9f3261486d5f10c814bf01dde1aa7cb0fe9fc852ccd6c4feab6b1aae021d51a4dbea4f693b09c3fd6a137a564760313d2f41bdbbf26a8dc2d8044c86e3df7ff00175781ab0660f187702a5fd1f42a1eada11641386e6f00000000855759fbca2455bedc7c957d2471cc87e651634fe07c675a9177cbfa760f7f39bd8ff42e052a41c139f89e4f11f5f3064b042508061e9eaa52954b7502dd3725b4b41dea54aaf3d1b8d0d9858e6a13af612f6b7f"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000740))
msgget$private(0x0, 0x440)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x400, &(0x7f0000000080), 0x0, 0x5b4, &(0x7f00000000c0)="$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")
capset(0x0, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f})
setxattr$incfs_id(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000440), 0x0, 0x0, 0x2)

1.717149837s ago: executing program 1 (id=7758):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48d}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d)
r3 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r3, &(0x7f0000006280)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x3d0, @mcast1, 0xd}, 0x1c, 0x0, 0x0, 0x0, 0x48}}], 0x1, 0x0)
io_setup(0x8, &(0x7f0000004200)=<r4=>0x0)
io_pgetevents(r4, 0x3, 0x2, &(0x7f0000000440)=[{}, {}], &(0x7f00000004c0)={0x0, 0x3938700}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000001000)='./file1\x00', 0x0, &(0x7f0000000d80)=ANY=[], 0x3, 0x7b6, &(0x7f0000001040)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@printk={@p, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
add_key(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="550a000000000000611178000000000018"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_emit_ethernet(0x347, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x311, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x12, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e21340"}, {0x0, 0x4, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6"}]}}}}}}, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4)
read(0xffffffffffffffff, &(0x7f0000032440)=""/102364, 0x18fdc)
r5 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={{0x14, 0x3ea}, [], {0x14, 0x3f4}}, 0x28}}, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'batadv_slave_1\x00', @ifru_mtu=0x7})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f00000000800000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32], 0x24}}, 0x0)

1.716828047s ago: executing program 4 (id=7759):
socket$inet_smc(0x2b, 0x1, 0x0)
fchdir(0xffffffffffffffff)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x18)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='cq_drain_complete\x00', r0}, 0x18)
r4 = socket$netlink(0x10, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r7}, 0x18)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x89}]}, 0x10)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
r9 = socket$netlink(0x10, 0x3, 0x0)
close_range(r9, 0xffffffffffffffff, 0x0)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x800000, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8894}, 0x40024)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

1.294377163s ago: executing program 0 (id=7760):
socket(0x10, 0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
clock_gettime(0x0, &(0x7f00000006c0))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRESDEC, @ANYRESOCT, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2ee, &(0x7f00000003c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0xfd12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
fdatasync(r0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@i_version}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@journal_dev={'journal_dev', 0x3d, 0x5}}]}, 0x1, 0x4d5, &(0x7f0000000c00)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)

1.193449124s ago: executing program 1 (id=7762):
mount$9p_virtio(&(0x7f00000008c0), &(0x7f0000000940)='./file2\x00', &(0x7f0000000980), 0x0, &(0x7f00000009c0)={'trans=virtio,', {[{@afid={'afid', 0x3d, 0x17cdbfee}}, {@fscache}, {}, {@cache_none}, {@access_user}, {@version_9p2000}], [{@smackfstransmute={'smackfstransmute', 0x3d, '+%-${'}}]}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x34)
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='auxv\x00')
pread64(r0, 0x0, 0x0, 0x100008)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
close(r2)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c230029)
write$cgroup_type(r2, &(0x7f0000000080), 0xfffffed8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x41, &(0x7f0000000740), 0x44, 0x50a, &(0x7f0000000200)="$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")
r4 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
write$binfmt_register(r5, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)

922.390128ms ago: executing program 1 (id=7763):
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext, 0x0, 0xb2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
sendmmsg(r2, &(0x7f0000002400)=[{{&(0x7f0000000280)=@l2tp6={0xa, 0x0, 0x7600, @private0={0xfc, 0x0, '\x00', 0x1}, 0x32, 0x2}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000300)="44393bd50333640e3ea402f3f6", 0xd}], 0x1, &(0x7f0000000540)}}, {{&(0x7f0000001fc0)=@ll={0x11, 0x17, 0x0, 0x1, 0x6, 0x6, @broadcast}, 0x80, 0x0}}], 0x2, 0x40000)
readv(r0, &(0x7f0000000d80)=[{&(0x7f0000000000)=""/206, 0xce}, {0x0}], 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_mount_image$iso9660(&(0x7f0000000a80), &(0x7f0000000ac0)='./file0\x00', 0x0, &(0x7f0000000b00), 0x1, 0xa47, &(0x7f0000000b40)="$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")
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
writev(r3, &(0x7f0000000080)=[{&(0x7f0000000040)='\\', 0x1}], 0x1)
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000120a03000000000000000000010000000c000640000000000000000520000000120a01020000000000000000070000010900010073797a310000000070000000080a030000000000000000000300000308000b40000000015400058008000140000088640800014000000032080001400000803508000140000000ff08000002080001400000000c0800024000000003080001400000001608000140000000ff0800024000000000ac000000060a050000000000000000000300000708000b40000000030c00034000000000000000052400058008000240000000030800014000000009080002400000000108000140000000110900020073797a30000000000900020073797a300000000008000940000000000900010073797a300000000034000580080001400000005e0800024000000002080002400000000308000140000000f9080001400000001c0800014000000085200000000e0a01040000000000000000050000070900010073797a3100000000d8000000020a0102000000000000000007000009c20006002a58bc758890b8f98d71a35783cebcf54952630b9a37bffb52a21e0363f5e41dc5534265fb97b7eee9e8d71523eaee97caee2291282c76686ebb0a70ab1b125a7c62552eb943b1e402ce1d0df0220afa4107077c2af24ca516e6e3b7c9d397a0b99a78921f25728a2663f74010ba219a4416ea0f98bda5ff15cd700771e121b54e6fea52ba9b521db204fbee360deab638e8fb495b09e6b16ce03ee61813565f5007f8f8121c98b08934bec2da0f27d10000140000001100010000000000000000000500000a63d1f3c58bcc55eae65684f06387fc6530f6e6c4152c9edb958a7e1565ecf131c069bdae66912bbe812f361e0769880792d8c3c5d3fd7f47fee74138c936220d192c2915e5fa91b16fa41a7d84c1119895aa855d9a00"/717], 0x27c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x18)
r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r6, 0x2285, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x943d04a83b3b753)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x10)
preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000008c0)=""/144, 0x90}], 0x1, 0x114e, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)

868.176659ms ago: executing program 5 (id=7764):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000a9eb9af601d93998ce6def0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_open_dev$usbfs(&(0x7f0000000380), 0x8, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
fchmodat(0xffffffffffffff9c, 0x0, 0xfffffed3)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0x2000000}, 0x18)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x88}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xff, 0x7}}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e23, 0x0, 0x4e23], [0x1]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x8, 'snmp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffe7a)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x200000000000011, 0x2, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00')
preadv(r7, 0x0, 0x0, 0x3, 0x0)
io_uring_register$IORING_REGISTER_PROBE(r7, 0x8, &(0x7f0000000a40)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010003007f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000000f80)='oom_score\x00')
recvmmsg(r9, 0x0, 0x0, 0x2000, &(0x7f0000001b00))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r10)
sendmsg$NLBL_CIPSOV4_C_ADD(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="08010000", @ANYRES16=r11, @ANYBLOB="0100000000000000000001000000080001000000000014000480050003000000000005000300000000000800020001000000d00008800c00078008000600000000002400078008000500"], 0x108}}, 0x0)

827.539759ms ago: executing program 4 (id=7765):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$key(0xf, 0x3, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_io_uring_setup(0x24fc, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ_FIXED)
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

696.72949ms ago: executing program 0 (id=7766):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10)
r2 = perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0)
r5 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000001c0)='cpu&00\t<&')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
pipe2$9p(&(0x7f0000001900)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r8}, 0x10)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r9}, 0x10)
r10 = dup(r7)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[], [], 0x6b}})

696.367161ms ago: executing program 6 (id=7767):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x90020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
rt_sigtimedwait(0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, 0x0, &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$eJzs282PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rClJYO9PdLLpxz77lzztN7T3vOPW0AI2sq+yeJ2BoRf0bERD3bXGCq/t/Vy2cXrl0+u5BEtfruP0mt3JXLZxeKosV5W/LMdBqRfpHE7jb1rpw+c3y+Ulk6lednV098NLty+swLx07MH106unRy/6FDBw/MvfzS/hf7EmfWpiu7Pl3es/OtD755+/BXTfG3xNEnU90OPl2t9rm64drWkE7GhtgQ1qUUEdnlKtf6/0SUYu3iTcSbnw+1ccBAVavV6pbOh89VgXtYEs15XR5GRfFBn81/i611EPDq4IYfQ3fptfoEKIv7ar7Vj4xFmpcpt8xv+2kqIt4/9+932RaDeQ4BANDkp2z883y78V8aDzWUuy9fG5qMiPsjYntEPBAROyLiwYha2Ycj4pF11t+6SHLj+Ce92FNgtygb/72Sr201j/+K0V9MlvLctlr85eTIscrSvvw1mY7ypiw/16WOn9/44+tOxxrHf9mW1V+MBfN2XBzb1HzO4vzq/O3E3OjS+YhdY+3iT66vBCQRsTMidvVYx7Fnf9jT6djN4++iD+tM1e8jnqlf/3PREn8h6b4+Ofu/qCztmy3uihv99vuFdzrVf1vx90F2/f/f9v6/Hv9k0rheu7L+Oi789WXHOU2v9/948l4tPZ7v+2R+dfXUXMR4crje6Mb9+9fOLfJF+Sz+6b3t+//2WHsldkdEdhM/GhGPRcTjedufiIgnI2Jvl/h/ff2pD3uPf7Cy+BfXdf3XEuPRuqd9onT8lx+bKp28If5r3a//wVpqOt9zK+9/t9Ku3u5mAAAAuPukEbE1knTmejpNZ2bq35ffEZFWlldWnzuy/PHJxfpvBCYj0uJJ10TD89C5fFpfz5+PiPpXC4rjB/Lnxt+WNtfyMwvLlcVhBw8jbkuH/p/5uzTs1gED5/daMLr0fxhd+j+MLv0fRleb/r95GO0A7rx2n/+fDaEdwJ3X0v8t+8EIMf+H0aX/w+jS/2EkrWyOm/9Ivmui+Es9nn7PJqK8IZoxsESkG6IZGzZRvsv7xfDekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPrpvwAAAP//9gndaw==")
r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r4, 0x2007ffc)
sendfile(r4, r4, 0x0, 0x800000009)
ftruncate(r3, 0x2007ffc)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x1, 0x0, 0x0)
sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000340)={&(0x7f0000000280)}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000a80)={[{@test_dummy_encryption_v1}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@journal_ioprio}, {@jqfmt_vfsv1}, {@norecovery}], [{@context={'context', 0x3d, 'root'}}, {@subj_user={'subj_user', 0x3d, '%{\x1a@+)'}}, {@measure}]}, 0x5, 0x4f8, &(0x7f0000001c80)="$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")
pipe(0x0)

644.201791ms ago: executing program 5 (id=7768):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x598}, {&(0x7f00000007c0)=""/154, 0x4c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x240000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r5, 0x0, 0xf7}, 0x18)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x2, @mcast1, 0x9}, 0x1c)
connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
writev(r6, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1)
ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x1, 0xcc, &(0x7f0000000700)=[{&(0x7f0000000800)=""/215, 0xd7}]}, &(0x7f0000000080)="0000501ef663", 0x0, 0x800004, 0x10030, 0x0, 0x0})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TCGETS2(r9, 0x5434, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080)

643.835911ms ago: executing program 4 (id=7769):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0)
connect$inet(r0, 0x0, 0x0)
write$binfmt_elf64(r0, 0x0, 0x40)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000001200)=@raw={'raw\x00', 0x4001, 0x3, 0x3a8, 0x0, 0x700001b, 0x148, 0x250, 0x148, 0x310, 0x206, 0x240, 0x310, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}}, 0x1ea, 0x1e8, 0x250, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x1, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x2}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6, @local}, 0x10)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000150a01"], 0x2c}}, 0x20000010)
close_range(r4, 0xffffffffffffffff, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r10 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86)
pwritev2(r10, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x17, 0x7800, 0x0, 0x3)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/vcsa\x00'}}, {@subj_user={'subj_user', 0x3d, '/dev/vcsa\x00'}}]}})
writev(r7, &(0x7f0000000a40)=[{&(0x7f00000003c0)="ff071d", 0x3}, {0x0}], 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
fstatfs(r6, &(0x7f0000000340)=""/12)

449.780634ms ago: executing program 4 (id=7770):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x26, &(0x7f0000000680)={0x363347264a160abe, 0x1, 0x46, 0xfdfffffffffffffe})
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x68, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x1ff, 0x4, 0x0, 0x1, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x68}}, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
io_setup(0x610d, &(0x7f00000002c0))
setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000680)={0x10001, {{0xa, 0x4e24, 0xf, @private0, 0x3ff}}, {{0xa, 0x4e22, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x81}}}, 0x108)
sendto$packet(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000440)={0x11, 0x17, r4}, 0x14)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000001000)=ANY=[@ANYBLOB="180058e981640000000800000000000018000200", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af80000f8ffffffb703000000000000b7f0ffffffffffff84000000570000009500000000000000000000000000000056937e57beefd66beebb2b8919d32ae1d05710006dc48733d017e4f3bbd5b71403fe0d6bc9a935f7b8460cd26692ac34"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x200, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020010000000000000020207bff00000000bfa10000000000000b5bbac147801503b702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ac4, @void, @value}, 0x94)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000780)={'dummy0\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r9], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10)
sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0)

448.880544ms ago: executing program 5 (id=7771):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x8000}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000000500ed0002000000070000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r5}, 0x10)
io_setup(0x3, &(0x7f0000000340))
pipe(&(0x7f0000000140)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]})
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000700)='kmem_cache_free\x00', r9}, 0x18)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
splice(r3, 0x0, r7, 0x0, 0x5, 0x0)
read(r6, &(0x7f0000000340)=""/246, 0xf6)
writev(r2, &(0x7f0000000180)=[{&(0x7f0000000000)="8b", 0x1}], 0x1)
ftruncate(r2, 0x9)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'})
setfsuid(0xee00)

447.427714ms ago: executing program 0 (id=7772):
r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x20000023896)
ioctl$TCSETSF(r2, 0x5404, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
pipe2(0x0, 0x0)
gettid()
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x80, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"})

177.084947ms ago: executing program 5 (id=7773):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000c9ffbe366d9b8d2e080066821b00fbff000000000000001d85000000079f57065cfb8aa95cdc950400000000005900cd9f2d5bd60258ad2a928cab0a9812efe0e748a13b44e6848965961ce51b31444542f7bff6308cce4462585aa3e5ebdcb315988b77569ab627c1b88063137591b056dcc4e2b6ede734e142057e"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0x83f, &(0x7f00000004c0)={0x0, 0x7064, 0x400, 0x2, 0x8002ae}, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x81, 0x0)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000280))
write$nci(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="508403c102b306"], 0x7)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000800)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'})
r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000480)={&(0x7f0000000640)="1d7a6b5ac7de86c287bc4e79619c0039a47a92407c8b5b3b9fb1e935ffe4d815087aa2cf4a7059ae200ccf337c3bc83537faac4df95e140ea47f3748ea6507c5ba4a2d3067d77860caa01940146c8b2810b3d930ddd0b9566fff4d7063bbfaf10994bef78fd3152ef468ac7cbd3a490aba5958ad1dce4989c04d08692d3dea9255dd43182b2315d74bbe9dbeebb40a08e6ab3d9d5c1aa215ed6276682ed4d750114b96daaa9cb84e468472a27d5a2757907e1afc449a51c4d1d2e284d5e1d6d747d33fcc73e3cb03e2fb34", &(0x7f0000000380)=""/116, &(0x7f0000000740)="c730c8bf510f83ccb8bf584ea9eebab1c793746b6bca0d23b7b8fbf6d2780c31e77af38f9d221bf3f2b604a42e1c8cebd08ff8933b5ee72d476d2e2c00895e4b75e0cf54616eba77ab1c27def101b19047ffb744e59f495bd57dbb4772f1f92cc330d7c95f4791f16d8617fc6e84483bf06eba8638157b129e9f1d5ad62bfffc33c44a7c5ad371a6", &(0x7f0000000100)="6b4d9046bf63c9318acd9ae7e5aa98843a", 0x4, r6}, 0x38)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x19, 0x10dc80})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r7 = socket$kcm(0x10, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000840)={<r8=>0x0, @private, @loopback}, &(0x7f0000000880)=0xc)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000980)={'syztnl2\x00', &(0x7f0000000900)={'ip_vti0\x00', r8, 0x7, 0x62599b605fd8d547, 0x6, 0x1, {{0xa, 0x4, 0x0, 0x5, 0x28, 0x68, 0x0, 0x80, 0x4, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @noop, @generic={0x89, 0xb, "de86a366dc7cb6ffbb"}, @ra={0x94, 0x4, 0x1}]}}}}})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r9, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
dup(r9)
r10 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000180)={0x5}, 0x10)
write(r10, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000000000200020000", 0x1c)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

176.227117ms ago: executing program 6 (id=7783):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0)
unshare(0x50040000)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$ARCH_SHSTK_STATUS(0x1e, r1, 0x0, 0x5005)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1a, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x62fd, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[], 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3}, 0x10)
close(r2)
r4 = syz_io_uring_setup(0x3bc1, &(0x7f0000000780)={0x0, 0x942e, 0x10100, 0x2, 0x289}, &(0x7f0000000540)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1})
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r7)
io_uring_enter(r4, 0x566, 0x8874cc, 0x8, 0x0, 0x0)

141.304168ms ago: executing program 6 (id=7774):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='sched_switch\x00'}, 0x18)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000140)={0x14, {{0x29, 0x0, 0x8000000, @private2}}}, 0x88)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
timer_getoverrun(0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r4, &(0x7f0000004200)='t', 0x1)
sendfile(r4, r2, 0x0, 0x3ffff)
sendfile(r4, r2, 0x0, 0x7ffff000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

139.760008ms ago: executing program 5 (id=7775):
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
r3 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000fee000)=0x1, 0x4)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
fchown(r3, 0xee01, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x402, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, 0x0, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
gettid()
timer_settime(0x0, 0x1, 0x0, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4, 0x0, 0x2}, 0x18)
semtimedop(0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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")
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
umount2(0x0, 0xd)

51.717179ms ago: executing program 5 (id=7776):
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={<r0=>0x0}, &(0x7f0000000140)=0xc)
ptrace$peeksig(0x4209, r0, &(0x7f0000000180)={0x100004, 0x1}, &(0x7f0000000440))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a0000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5e, @void, @value}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0x4, 0x0)
syz_pidfd_open(r2, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0)
fcntl$setlease(r3, 0x400, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48)
fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/4\x00')
preadv(r5, &(0x7f0000000340)=[{&(0x7f00000008c0)=""/201, 0xc9}], 0x1, 0x0, 0x0)

0s ago: executing program 1 (id=7777):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port0\x00', 0x100, 0x60004, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2})
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x80}, 'port0\x00', 0x25, 0x60041, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x9})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x4}, 'port1\x00', 0x89, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x200000, 0x0, 0x4875c99660ff2b28})
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000480)={[{@grpjquota}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x1}, 0xc)
r3 = socket$packet(0x11, 0x3, 0x300)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00'}, 0x18)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @local}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdc03, {0x0, 0x0, 0x0, 0x0, {0xc}, {0xffe0}}}, 0x24}}, 0x20040000)
lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0xfffffffffffffffb)

kernel console output (not intermixed with test programs):

it_use_xattr:  getxattr returned 117 for dev=loop6 ino=16
[  387.816003][T21008] EXT4-fs error (device loop6): ext4_get_link:106: inode #16: comm syz.6.6570: bad symlink.
[  387.852600][   T30] audit: type=1400 audit(2000000044.600:121133): avc:  denied  { read } for  pid=21007 comm="syz.6.6570" name="file2" dev="loop6" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[  387.895526][ T9289] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  387.921287][   T30] audit: type=1326 audit(2000000044.700:121134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21040 comm="syz.6.6577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929e88e969 code=0x7ffc0000
[  387.948676][   T30] audit: type=1326 audit(2000000044.700:121135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21040 comm="syz.6.6577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929e88e969 code=0x7ffc0000
[  387.972448][   T30] audit: type=1326 audit(2000000044.700:121136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21040 comm="syz.6.6577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f929e88e969 code=0x7ffc0000
[  387.996181][   T30] audit: type=1326 audit(2000000044.700:121137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21040 comm="syz.6.6577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929e88e969 code=0x7ffc0000
[  388.019864][   T30] audit: type=1326 audit(2000000044.700:121138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21040 comm="syz.6.6577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f929e88e969 code=0x7ffc0000
[  388.043531][   T30] audit: type=1326 audit(2000000044.700:121139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21040 comm="syz.6.6577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929e88e969 code=0x7ffc0000
[  388.067275][   T30] audit: type=1326 audit(2000000044.700:121140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21040 comm="syz.6.6577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f929e88e969 code=0x7ffc0000
[  388.185122][T21049] SELinux:  Context system_u:object_r:printer_device_t:s0 is not valid (left unmapped).
[  388.216489][T21049] netlink: 'syz.6.6580': attribute type 10 has an invalid length.
[  388.252343][T21049] batman_adv: batadv0: Interface deactivated: dummy0
[  388.272995][T21049] batman_adv: batadv0: Removing interface: dummy0
[  388.285300][T21049] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  388.720281][T21034] delete_channel: no stack
[  388.746977][T21063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6585'.
[  388.755932][T21063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6585'.
[  388.774584][ T3542] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  388.880225][T21063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6585'.
[  388.917350][T21063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6585'.
[  388.926313][T21063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6585'.
[  388.952316][T21063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6585'.
[  389.035369][T21074] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  389.043371][T21074] vxcan1 speed is unknown, defaulting to 1000
[  389.440438][T21077] loop6: detected capacity change from 0 to 128
[  389.451948][T21063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6585'.
[  389.460921][T21063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6585'.
[  389.483169][T21063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6585'.
[  389.696391][T21083] netlink: 'syz.1.6590': attribute type 27 has an invalid length.
[  389.704874][T21083] sit0: left promiscuous mode
[  389.709581][T21083] sit0: left allmulticast mode
[  389.720431][T21083] wg2: left promiscuous mode
[  389.725179][T21083] wg2: left allmulticast mode
[  389.731533][T21083] ip6gre1: left allmulticast mode
[  389.756681][T21083] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  389.765196][T21083] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  389.773731][T21083] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  389.782372][T21083] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  389.791201][T21083] geneve2: left promiscuous mode
[  389.796213][T21083] geneve2: left allmulticast mode
[  389.802504][T21083] bond1: left promiscuous mode
[  389.807297][T21083] bond1: left allmulticast mode
[  389.815305][ T3542] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  389.836355][T21093] SELinux: failed to load policy
[  389.859996][T21089] loop4: detected capacity change from 0 to 2048
[  389.913176][T21089]  loop4: p1 < > p4
[  389.922986][T21089] loop4: p4 size 8388608 extends beyond EOD, truncated
[  390.043979][T21113] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  390.136848][ T3542] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  390.168004][T21121] 9pnet_fd: Insufficient options for proto=fd
[  390.813626][T21132] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  390.821091][T21132] vxcan1 speed is unknown, defaulting to 1000
[  390.972339][   T23] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  391.174284][T21137] syz.6.6606 (21137): /proc/21137/oom_adj is deprecated, please use /proc/21137/oom_score_adj instead.
[  391.207134][T21137] loop6: detected capacity change from 0 to 512
[  391.229785][T21137] loop6: detected capacity change from 0 to 2048
[  391.241905][T21137] EXT4-fs: Ignoring removed bh option
[  391.264844][T21148] rdma_rxe: rxe_newlink: failed to add veth0_to_bond
[  391.283772][T21137] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  391.292062][T21152] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6611'.
[  391.321304][T21152] bond0 (unregistering): Released all slaves
[  391.493650][T21169] netlink: 'syz.0.6617': attribute type 1 has an invalid length.
[  391.521123][T21171] pim6reg: entered allmulticast mode
[  391.564686][T21171] pim6reg: left allmulticast mode
[  391.777137][   T30] kauditd_printk_skb: 303 callbacks suppressed
[  391.777154][   T30] audit: type=1400 audit(2000000048.560:121444): avc:  denied  { write } for  pid=21184 comm="syz.0.6621" path="socket:[62831]" dev="sockfs" ino=62831 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  391.917738][   T26] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  391.938133][   T26] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  391.950509][   T26] EXT4-fs (loop6): This should not happen!! Data will be lost
[  391.950509][   T26] 
[  391.960350][   T26] EXT4-fs (loop6): Total free blocks count 0
[  391.966354][   T26] EXT4-fs (loop6): Free/Dirty block details
[  391.972279][   T26] EXT4-fs (loop6): free_blocks=2415919104
[  391.978261][   T26] EXT4-fs (loop6): dirty_blocks=8224
[  391.983593][   T26] EXT4-fs (loop6): Block reservation details
[  391.989580][   T26] EXT4-fs (loop6): i_reserved_data_blocks=514
[  392.003038][   T26] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[  392.052558][   T23] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  392.207259][T21193] loop6: detected capacity change from 0 to 512
[  392.215593][T21193] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  392.227863][T21193] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[  392.236565][T21193] System zones: 1-12
[  392.241098][T21193] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  392.258750][T21193] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #11: comm syz.6.6622: corrupted inode contents
[  392.271318][T21193] EXT4-fs error (device loop6): ext4_dirty_inode:6103: inode #11: comm syz.6.6622: mark_inode_dirty error
[  392.283821][T21193] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.6622: invalid indirect mapped block 1 (level 1)
[  392.298261][T21193] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #11: comm syz.6.6622: corrupted inode contents
[  392.311650][T21193] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem
[  392.321426][T21193] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #11: comm syz.6.6622: corrupted inode contents
[  392.334517][T21193] EXT4-fs error (device loop6): ext4_truncate:4255: inode #11: comm syz.6.6622: mark_inode_dirty error
[  392.346496][T21193] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem
[  392.355985][T21193] EXT4-fs (loop6): 1 truncate cleaned up
[  392.362104][T21193] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  392.394014][   T30] audit: type=1326 audit(2000000049.180:121445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21198 comm="syz.4.6626" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f672731e969 code=0x0
[  392.589198][   T30] audit: type=1400 audit(2000000049.370:121446): avc:  denied  { ioctl } for  pid=21202 comm="syz.5.6627" path="socket:[62140]" dev="sockfs" ino=62140 ioctlcmd=0x2100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  392.640871][   T30] audit: type=1326 audit(2000000049.400:121447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21202 comm="syz.5.6627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636babe969 code=0x7ffc0000
[  392.664653][   T30] audit: type=1326 audit(2000000049.400:121448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21202 comm="syz.5.6627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636babe969 code=0x7ffc0000
[  392.688519][   T30] audit: type=1326 audit(2000000049.400:121449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21202 comm="syz.5.6627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f636babe969 code=0x7ffc0000
[  392.712392][   T30] audit: type=1326 audit(2000000049.400:121450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21202 comm="syz.5.6627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f636babe9a3 code=0x7ffc0000
[  392.736021][   T30] audit: type=1326 audit(2000000049.410:121451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21202 comm="syz.5.6627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f636babd41f code=0x7ffc0000
[  392.759583][   T30] audit: type=1326 audit(2000000049.410:121452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21202 comm="syz.5.6627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f636babe9f7 code=0x7ffc0000
[  392.783228][   T30] audit: type=1326 audit(2000000049.410:121453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21202 comm="syz.5.6627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f636babd2d0 code=0x7ffc0000
[  393.119000][T21217] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  393.126816][T21217] vxcan1 speed is unknown, defaulting to 1000
[  393.559735][T21220] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  393.567114][T21220] vxcan1 speed is unknown, defaulting to 1000
[  393.835784][ T3542] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  393.847082][ T3400] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  393.999485][ T9289] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  394.089342][T21227] loop4: detected capacity change from 0 to 1024
[  394.232499][T21236] SELinux:  policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c
[  394.254262][T21238] SELinux: syz.6.6632 (21238) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  394.283333][T21227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  394.322447][T21236] SELinux: failed to load policy
[  394.384839][T21224] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.6631: Allocating blocks 497-513 which overlap fs metadata
[  394.420569][T21224] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 1 with error 117
[  394.433016][T21224] EXT4-fs (loop4): This should not happen!! Data will be lost
[  394.433016][T21224] 
[  394.497748][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  394.854508][ T3542] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  394.975235][T21253] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  395.123989][T21257] __nla_validate_parse: 5 callbacks suppressed
[  395.124009][T21257] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6641'.
[  395.218677][T21255] loop6: detected capacity change from 0 to 2048
[  395.268944][T21262] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6642'.
[  395.280192][T21262] bond0 (unregistering): (slave veth0_to_hsr): Releasing backup interface
[  395.290030][T21262] bond0 (unregistering): Released all slaves
[  395.300058][T21263] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6652'.
[  395.311192][T21255] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  395.669894][T21282] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  395.677502][T21282] vxcan1 speed is unknown, defaulting to 1000
[  395.904913][ T3542] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  396.105805][ T3400] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  396.121750][ T3400] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1728 with error 28
[  396.134243][ T3400] EXT4-fs (loop6): This should not happen!! Data will be lost
[  396.134243][ T3400] 
[  396.143962][ T3400] EXT4-fs (loop6): Total free blocks count 0
[  396.149952][ T3400] EXT4-fs (loop6): Free/Dirty block details
[  396.155906][ T3400] EXT4-fs (loop6): free_blocks=2415919504
[  396.161633][ T3400] EXT4-fs (loop6): dirty_blocks=1728
[  396.166929][ T3400] EXT4-fs (loop6): Block reservation details
[  396.172932][ T3400] EXT4-fs (loop6): i_reserved_data_blocks=108
[  396.239199][T21290] netlink: 'syz.5.6650': attribute type 39 has an invalid length.
[  396.256911][ T9289] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  396.347508][T21297] block device autoloading is deprecated and will be removed.
[  396.356645][T21297] bio_check_eod: 15 callbacks suppressed
[  396.356659][T21297] syz.4.6651: attempt to access beyond end of device
[  396.356659][T21297] md31: rw=2048, sector=0, nr_sectors = 8 limit=0
[  396.391574][T21302] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6648'.
[  396.440229][T21302] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  396.449966][T21304] loop4: detected capacity change from 0 to 1024
[  396.492728][T21304] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.6654: Failed to acquire dquot type 0
[  396.534331][T21304] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  396.566705][T21304] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.6654: corrupted inode contents
[  396.615326][T21304] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #13: comm syz.4.6654: mark_inode_dirty error
[  396.642436][T21304] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.6654: corrupted inode contents
[  396.664659][T21304] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm syz.4.6654: mark_inode_dirty error
[  396.702819][T21304] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.6654: corrupted inode contents
[  396.721023][T21326] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  396.738965][T21304] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[  396.752560][T21326] vxcan1 speed is unknown, defaulting to 1000
[  396.759308][T21304] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.6654: corrupted inode contents
[  396.797260][T21304] EXT4-fs error (device loop4): ext4_truncate:4255: inode #13: comm syz.4.6654: mark_inode_dirty error
[  396.809775][T21304] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[  396.822524][T21336] can0: slcan on ttyS3.
[  396.843273][T21304] EXT4-fs (loop4): 1 truncate cleaned up
[  396.849421][T21304] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  396.882400][T21336] can0 (unregistered): slcan off ttyS3.
[  396.934626][ T3542] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  396.947125][T21336] can0: slcan on ttyS3.
[  396.952841][T21304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6654'.
[  396.973509][T21304] __quota_error: 189 callbacks suppressed
[  396.973522][T21304] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5
[  396.988349][T21304] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  396.997780][T21304] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.6654: Failed to acquire dquot type 0
[  397.073069][T21343] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  397.081221][T21343] vxcan1 speed is unknown, defaulting to 1000
[  397.274660][ T3542] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  397.321070][T21342] netlink: 'syz.4.6654': attribute type 16 has an invalid length.
[  397.329006][T21342] netlink: 'syz.4.6654': attribute type 17 has an invalid length.
[  397.373711][T21304] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6654'.
[  397.401302][   T30] audit: type=1400 audit(2000000054.180:121641): avc:  denied  { create } for  pid=21303 comm="syz.4.6654" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1
[  397.435589][T21304] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5
[  397.444681][T21304] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  397.454143][T21304] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.6654: Failed to acquire dquot type 0
[  397.483043][T21342] net_ratelimit: 13 callbacks suppressed
[  397.483053][T21342] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  397.565433][   T30] audit: type=1400 audit(2000000054.350:121642): avc:  denied  { connect } for  pid=21347 comm="syz.6.6665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  397.597154][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  397.606325][T21335] can0 (unregistered): slcan off ttyS3.
[  397.717783][T21355] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6668'.
[  397.720003][   T30] audit: type=1326 audit(2000000054.500:121643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21354 comm="syz.1.6668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278f7ce969 code=0x7ffc0000
[  397.750449][   T30] audit: type=1326 audit(2000000054.500:121644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21354 comm="syz.1.6668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278f7ce969 code=0x7ffc0000
[  397.774215][   T30] audit: type=1326 audit(2000000054.500:121645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21354 comm="syz.1.6668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f278f7ce969 code=0x7ffc0000
[  397.797948][   T30] audit: type=1326 audit(2000000054.500:121646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21354 comm="syz.1.6668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278f7ce969 code=0x7ffc0000
[  397.828119][T21361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6668'.
[  397.848731][T21357] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  397.877528][T21357] vxcan1 speed is unknown, defaulting to 1000
[  397.914231][T21353] netlink: 4 bytes leftover after parsing attributes in process `gtp'.
[  397.974446][   T23] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  398.868176][T21393] sch_tbf: peakrate 8 is lower than or equals to rate 12 !
[  399.011240][T21395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6678'.
[  399.024228][   T23] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  399.092368][T21404] netlink: 'syz.0.6679': attribute type 21 has an invalid length.
[  399.101063][   T26] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  399.244252][T21404] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  400.160706][   T23] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  400.210657][T21407] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  400.240781][T21404] vxcan1 speed is unknown, defaulting to 1000
[  400.251938][T21399] loop4: detected capacity change from 0 to 256
[  400.266120][T21399] FAT-fs (loop4): Directory bread(block 64) failed
[  400.272817][T21399] FAT-fs (loop4): Directory bread(block 65) failed
[  400.279334][T21399] FAT-fs (loop4): Directory bread(block 66) failed
[  400.313011][T21399] FAT-fs (loop4): Directory bread(block 67) failed
[  400.319567][T21399] FAT-fs (loop4): Directory bread(block 68) failed
[  400.349814][T21407] vxcan1 speed is unknown, defaulting to 1000
[  400.393999][T21399] FAT-fs (loop4): Directory bread(block 69) failed
[  400.400610][T21399] FAT-fs (loop4): Directory bread(block 70) failed
[  400.437638][T21399] FAT-fs (loop4): Directory bread(block 71) failed
[  400.457885][T21399] FAT-fs (loop4): Directory bread(block 72) failed
[  400.510236][T21399] FAT-fs (loop4): Directory bread(block 73) failed
[  400.765855][T21416] __nla_validate_parse: 1 callbacks suppressed
[  400.765875][T21416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6681'.
[  400.919011][T21424] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6683'.
[  400.922425][T21426] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6684'.
[  400.989521][T21424] netlink: 'syz.0.6683': attribute type 13 has an invalid length.
[  401.140024][T21424] veth1_macvtap: left allmulticast mode
[  401.472064][   T23] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  401.492636][T21427] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  401.499861][T21427] vxcan1 speed is unknown, defaulting to 1000
[  401.914420][T21445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6689'.
[  402.012472][   T30] kauditd_printk_skb: 242 callbacks suppressed
[  402.012487][   T30] audit: type=1326 audit(2000000058.800:121889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21440 comm="syz.5.6690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f636babe969 code=0x7ffc0000
[  402.042322][   T30] audit: type=1326 audit(2000000058.800:121890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21440 comm="syz.5.6690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636babe969 code=0x7ffc0000
[  402.066060][   T30] audit: type=1326 audit(2000000058.800:121891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21440 comm="syz.5.6690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636babe969 code=0x7ffc0000
[  402.149607][   T30] audit: type=1400 audit(2000000058.850:121892): avc:  denied  { write } for  pid=21440 comm="syz.5.6690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  402.169451][   T30] audit: type=1326 audit(2000000058.870:121893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21440 comm="syz.5.6690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f636babe969 code=0x7ffc0000
[  402.193182][   T30] audit: type=1326 audit(2000000058.870:121894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21440 comm="syz.5.6690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636babe969 code=0x7ffc0000
[  402.217071][   T30] audit: type=1326 audit(2000000058.870:121895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21440 comm="syz.5.6690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636babe969 code=0x7ffc0000
[  402.260277][T21450] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  402.333315][T21450] vxcan1 speed is unknown, defaulting to 1000
[  402.490894][T21460] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  402.546755][   T23] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  402.704888][T21455] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  402.796417][T21460] vxcan1 speed is unknown, defaulting to 1000
[  402.970279][T21437] Set syz1 is full, maxelem 65536 reached
[  402.997279][T21455] vxcan1 speed is unknown, defaulting to 1000
[  403.144953][   T30] audit: type=1326 audit(2000000059.930:121896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21465 comm="syz.1.6694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278f7ce969 code=0x7ffc0000
[  403.168771][   T30] audit: type=1326 audit(2000000059.930:121897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21465 comm="syz.1.6694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278f7ce969 code=0x7ffc0000
[  403.192534][   T30] audit: type=1326 audit(2000000059.930:121898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21465 comm="syz.1.6694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f278f7ce969 code=0x7ffc0000
[  403.353744][T21470] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  403.377773][T21470] vxcan1 speed is unknown, defaulting to 1000
[  403.486831][T21479] loop6: detected capacity change from 0 to 2364
[  403.569387][T21485] loop4: detected capacity change from 0 to 128
[  403.576320][   T23] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  403.678826][T21490] xt_TPROXY: Can be used only with -p tcp or -p udp
[  404.745970][T21512] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  404.753463][T21512] vxcan1 speed is unknown, defaulting to 1000
[  404.915024][ T3542] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  404.941861][ T3400] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  404.952615][ T3542] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  405.063214][T21521] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  405.139115][T21532] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  405.164378][T21519] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  405.181991][T21519] vhci_hcd: default hub control req: 2314 v0008 i0002 l0
[  405.202692][T21515] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6708'.
[  405.211668][T21515] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6708'.
[  405.243799][T21515] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6708'.
[  405.253244][T21515] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6708'.
[  405.294637][T21515] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6708'.
[  405.317726][T21515] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6708'.
[  405.887185][T21556] siw: device registration error -23
[  405.988883][   T23] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  406.529958][T21569] IPv6: NLM_F_CREATE should be specified when creating new route
[  407.006130][T21576] block device autoloading is deprecated and will be removed.
[  407.018475][   T23] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  407.042615][T21576] syz.0.6725: attempt to access beyond end of device
[  407.042615][T21576] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  407.678998][   T30] kauditd_printk_skb: 470 callbacks suppressed
[  407.679019][   T30] audit: type=1326 audit(2000000064.460:122369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21586 comm="syz.1.6729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278f7ce969 code=0x7ffc0000
[  408.061959][   T30] audit: type=1326 audit(2000000064.520:122370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21586 comm="syz.1.6729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f278f7ce969 code=0x7ffc0000
[  408.085802][   T30] audit: type=1326 audit(2000000064.520:122371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21586 comm="syz.1.6729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278f7ce969 code=0x7ffc0000
[  408.094045][   T23] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  408.109507][   T30] audit: type=1326 audit(2000000064.520:122372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21586 comm="syz.1.6729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278f7ce969 code=0x7ffc0000
[  408.143692][   T30] audit: type=1326 audit(2000000064.520:122373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21586 comm="syz.1.6729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f278f7ce969 code=0x7ffc0000
[  408.167234][   T30] audit: type=1326 audit(2000000064.520:122374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21586 comm="syz.1.6729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278f7ce969 code=0x7ffc0000
[  408.190911][   T30] audit: type=1326 audit(2000000064.520:122375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21586 comm="syz.1.6729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278f7ce969 code=0x7ffc0000
[  408.214623][   T30] audit: type=1326 audit(2000000064.520:122376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21586 comm="syz.1.6729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f278f7ce969 code=0x7ffc0000
[  408.238170][   T30] audit: type=1326 audit(2000000064.520:122377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21586 comm="syz.1.6729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278f7ce969 code=0x7ffc0000
[  408.261927][   T30] audit: type=1326 audit(2000000064.520:122378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21586 comm="syz.1.6729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278f7ce969 code=0x7ffc0000
[  408.352061][T21595] __nla_validate_parse: 1 callbacks suppressed
[  408.352075][T21595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6731'.
[  408.367293][T21595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6731'.
[  408.479128][T21599] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6731'.
[  408.608905][T21602] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  408.660954][T21602] netlink: 'syz.1.6733': attribute type 10 has an invalid length.
[  408.668832][T21602] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6733'.
[  408.779344][T21602] dummy0: entered promiscuous mode
[  408.805648][T21603] loop4: detected capacity change from 0 to 2048
[  408.844726][T21603]  loop4: p1 < > p4
[  408.852462][T21603] loop4: p4 size 8388608 extends beyond EOD, truncated
[  408.890064][T21602] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  408.956862][T21613] loop0: detected capacity change from 0 to 512
[  409.000050][T21613] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  409.013540][T21613] ext4 filesystem being mounted at /1370/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  409.059445][T21624] loop6: detected capacity change from 0 to 512
[  409.067362][T21624] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  409.374276][T21632] Set syz1 is full, maxelem 65536 reached
[  409.400640][ T3542] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  409.418268][T21624] EXT4-fs (loop6): orphan cleanup on readonly fs
[  409.429157][T21624] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6737: bg 0: block 248: padding at end of block bitmap is not set
[  409.455994][T21631] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  409.463286][T21631] vxcan1 speed is unknown, defaulting to 1000
[  409.578745][T21624] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.6737: Failed to acquire dquot type 1
[  409.594295][T21624] EXT4-fs (loop6): 1 truncate cleaned up
[  409.606043][T21624] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  409.627160][T21624] netlink: 'syz.6.6737': attribute type 4 has an invalid length.
[  410.294336][T21641] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6741'.
[  411.184514][T21663] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6745'.
[  411.205500][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  411.251270][T21666] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  411.258532][T21666] IPv6: NLM_F_CREATE should be set when creating new route
[  411.265769][T21666] IPv6: NLM_F_CREATE should be set when creating new route
[  411.273072][T21666] IPv6: NLM_F_CREATE should be set when creating new route
[  411.282981][ T9289] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  411.320830][T21673] random: crng reseeded on system resumption
[  411.520437][T21680] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6752'.
[  411.530269][T21680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6752'.
[  411.539314][T21680] batman_adv: batadv0: Removing interface: batadv_slave_0
[  411.546893][T21680] batman_adv: batadv0: Removing interface: batadv_slave_1
[  411.556098][T21680] 
: (slave batadv0): Releasing backup interface
[  411.593321][T21683] loop4: detected capacity change from 0 to 1024
[  411.600093][T21683] EXT4-fs: Ignoring removed nomblk_io_submit option
[  411.607302][T21683] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  411.617398][T21683] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  411.625870][T21683] System zones: 0-1, 3-36
[  411.630983][T21683] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  411.771873][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  412.082852][T21694] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6757'.
[  412.638162][T21704] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  412.646082][T21704] vxcan1 speed is unknown, defaulting to 1000
[  412.664844][T21708] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  412.740268][T21710] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  412.774253][T21710] vxcan1 speed is unknown, defaulting to 1000
[  412.953219][T21714] loop0: detected capacity change from 0 to 256
[  413.009087][   T30] kauditd_printk_skb: 1251 callbacks suppressed
[  413.009104][   T30] audit: type=1326 audit(2000000069.790:123628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21716 comm="syz.5.6765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636babe969 code=0x7ffc0000
[  413.034618][T21719] loop4: detected capacity change from 0 to 128
[  413.057229][   T30] audit: type=1326 audit(2000000069.830:123629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21716 comm="syz.5.6765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f636babe969 code=0x7ffc0000
[  413.081107][   T30] audit: type=1326 audit(2000000069.830:123630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21716 comm="syz.5.6765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636babe969 code=0x7ffc0000
[  413.104860][   T30] audit: type=1326 audit(2000000069.830:123631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21716 comm="syz.5.6765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636babe969 code=0x7ffc0000
[  413.128658][   T30] audit: type=1326 audit(2000000069.830:123632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21716 comm="syz.5.6765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f636babe969 code=0x7ffc0000
[  413.152353][   T30] audit: type=1326 audit(2000000069.830:123633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21716 comm="syz.5.6765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636babe969 code=0x7ffc0000
[  413.176054][   T30] audit: type=1326 audit(2000000069.830:123634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21716 comm="syz.5.6765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636babe969 code=0x7ffc0000
[  413.199782][   T30] audit: type=1326 audit(2000000069.830:123635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21716 comm="syz.5.6765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f636babe969 code=0x7ffc0000
[  413.223500][   T30] audit: type=1326 audit(2000000069.830:123636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21716 comm="syz.5.6765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636babe969 code=0x7ffc0000
[  413.247179][   T30] audit: type=1326 audit(2000000069.830:123637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21716 comm="syz.5.6765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636babe969 code=0x7ffc0000
[  413.249336][T21719] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  413.283516][T21719] ext4 filesystem being mounted at /1281/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  413.322185][T21719] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[  413.363820][ T3302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  413.415409][T21730] loop4: detected capacity change from 0 to 512
[  413.425286][T21730] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  413.496187][T21732] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  413.503877][T21732] vxcan1 speed is unknown, defaulting to 1000
[  413.851871][T21731] SELinux:  policydb version 0 does not match my version range 15-34
[  413.860137][T21731] SELinux: failed to load policy
[  413.884109][T21730] EXT4-fs (loop4): 1 truncate cleaned up
[  413.896251][T21738] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  413.905030][T21730] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  414.134654][T21749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  414.145862][T21749] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  414.159134][T21749] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  414.167494][T21749] tipc: Disabling bearer <eth:syzkaller0>
[  414.168697][T21751] loop6: detected capacity change from 0 to 256
[  414.187709][T21751] netlink: 'syz.6.6775': attribute type 13 has an invalid length.
[  414.205885][T21730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  414.226585][T21730] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  414.289192][T21751] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  414.299177][T21751] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  414.322495][T21751] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  414.330966][T21751] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  414.339576][T21751] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  414.348190][T21751] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  414.540676][T21757] SELinux: failed to load policy
[  414.607729][T21764] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  414.793502][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  414.807869][T21771] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6781'.
[  414.880428][T21775] loop4: detected capacity change from 0 to 1024
[  414.897448][T21775] EXT4-fs: Ignoring removed bh option
[  414.904276][T21779] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6785'.
[  414.912796][T21775] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  414.923441][T21775] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal
[  414.935951][T21779] 0�X���: renamed from caif0
[  414.947265][T21780] loop0: detected capacity change from 0 to 512
[  414.957607][T21775] loop4: detected capacity change from 0 to 512
[  414.964530][T21779] 0�X���: entered allmulticast mode
[  414.969735][T21779] A link change request failed with some changes committed already. Interface 
60�X��� may have been left with an inconsistent configuration, please check.
[  414.994065][T21780] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix.
[  415.026827][T21775] EXT4-fs (loop4): too many log groups per flexible block group
[  415.034637][T21775] EXT4-fs (loop4): failed to initialize mballoc (-12)
[  415.042077][T21780] EXT4-fs (loop0): mount failed
[  415.045574][T21775] EXT4-fs (loop4): mount failed
[  415.073600][T21777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6784'.
[  415.269116][T21793] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.6787'.
[  415.287862][T21795] loop4: detected capacity change from 0 to 128
[  415.296380][T21793] loop0: detected capacity change from 0 to 128
[  415.302753][T21790] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.6787'.
[  415.312468][T21795] vfat: Unknown parameter '18446744073709551615���01777777777777777777777����of�_'
[  415.322786][T21793] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  415.350119][T21793] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  415.359089][T21798] xt_nat: multiple ranges no longer supported
[  415.382880][T21793] ext2 filesystem being mounted at /1379/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  415.467394][ T3309] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  415.620616][T21803] tipc: New replicast peer: 255.255.255.255
[  415.626868][T21803] tipc: Enabled bearer <udp:s>, priority 10
[  415.694742][T21813] loop6: detected capacity change from 0 to 1024
[  415.725111][T21813] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  415.782043][T21819] netlink: 16 bytes leftover after parsing attributes in process `+}[@'.
[  415.858816][ T3309] block device autoloading is deprecated and will be removed.
[  415.983467][T21826] loop0: detected capacity change from 0 to 2048
[  416.001749][T21826] EXT4-fs: Ignoring removed mblk_io_submit option
[  416.032305][T21826] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  416.057882][T21813] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6793: bg 0: block 376: padding at end of block bitmap is not set
[  416.084010][T21826] EXT4-fs error (device loop0): ext4_read_inline_dir:1501: inode #12: block 5: comm syz.0.6795: path /1381/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=0, rec_len=0, size=80 fake=0
[  416.142393][T21826] EXT4-fs (loop0): Remounting filesystem read-only
[  416.183308][ T9289] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  416.219130][T21836] loop6: detected capacity change from 0 to 2048
[  416.229078][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  416.258308][T21836] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  416.280915][T21836] ext4 filesystem being mounted at /975/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  416.426838][T21848] 9pnet: p9_errstr2errno: server reported unknown error �<jqz�PL�������<�p�� �#���v�g�B�B���[R����e�ve
[  416.426838][T21848] 
[  416.431038][T21846] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 345: padding at end of block bitmap is not set
[  416.462177][T21846] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 240 with error 117
[  416.474773][T21846] EXT4-fs (loop6): This should not happen!! Data will be lost
[  416.474773][T21846] 
[  416.504649][   T26] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 256 with max blocks 2048 with error 117
[  416.517414][   T26] EXT4-fs (loop6): This should not happen!! Data will be lost
[  416.517414][   T26] 
[  416.549303][   T26] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2305 with max blocks 264 with error 28
[  416.561990][   T26] EXT4-fs (loop6): This should not happen!! Data will be lost
[  416.561990][   T26] 
[  416.571814][   T26] EXT4-fs (loop6): Total free blocks count 0
[  416.577860][   T26] EXT4-fs (loop6): Free/Dirty block details
[  416.583778][   T26] EXT4-fs (loop6): free_blocks=0
[  416.904371][T21860] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6804'.
[  416.944500][T21866] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  416.951793][T21866] vxcan1 speed is unknown, defaulting to 1000
[  417.147773][T21869] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6803'.
[  417.165835][T21872] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.201112][T21869] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6803'.
[  417.217110][T21874] netlink: 'syz.5.6805': attribute type 10 has an invalid length.
[  417.225023][T21874] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6805'.
[  417.234997][T21872] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.259128][T21875] batman_adv: batadv0: Removing interface: batadv_slave_1
[  417.278764][T21874] team0: Failed to send port change of device geneve1 via netlink (err -105)
[  417.287964][T21874] team0: Failed to send options change via netlink (err -105)
[  417.295593][T21874] team0: Port device geneve1 added
[  417.303392][T21872] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.327031][T21877] loop4: detected capacity change from 0 to 1024
[  417.334904][T21877] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  417.344730][T21877] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  417.354529][T21877] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  417.365726][T21872] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.377098][T21877] EXT4-fs error (device loop4): ext4_get_journal_inode:5798: inode #5: comm syz.4.6807: unexpected bad inode w/o EXT4_IGET_BAD
[  417.390505][T21877] EXT4-fs (loop4): no journal found
[  417.395797][T21877] EXT4-fs (loop4): can't get journal size
[  417.403219][T21882] netlink: 'syz.6.6809': attribute type 27 has an invalid length.
[  417.412454][T21882] batadv0: left promiscuous mode
[  417.417433][T21882] batadv0: left allmulticast mode
[  417.427613][T21880] netlink: 'syz.1.6808': attribute type 10 has an invalid length.
[  417.442773][T21872] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  417.446951][T21877] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  417.454860][T21872] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  417.479558][T21872] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  417.503546][T21877] EXT4-fs error (device loop4): __ext4_iget:5025: inode #15: block 1803188595: comm syz.4.6807: invalid block
[  417.526728][T21872] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  417.577942][T21888] loop0: detected capacity change from 0 to 1024
[  417.585774][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  417.602866][T21888] EXT4-fs: Ignoring removed oldalloc option
[  417.608967][T21888] EXT4-fs: Ignoring removed orlov option
[  417.614744][T21888] EXT4-fs: Ignoring removed oldalloc option
[  417.620730][T21888] EXT4-fs: Ignoring removed nomblk_io_submit option
[  417.628483][T21885] futex_wake_op: syz.1.6810 tries to shift op by -1; fix this program
[  417.654171][T21888] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  417.689803][T21894] loop4: detected capacity change from 0 to 512
[  417.742942][T21894] EXT4-fs (loop4): orphan cleanup on readonly fs
[  417.752666][T21894] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  417.771649][T21894] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  417.790497][T21894] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #13: comm syz.4.6813: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  417.867615][T21894] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.6813: couldn't read orphan inode 13 (err -117)
[  417.880669][T21894] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  417.953165][T21894] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  418.095839][   T30] kauditd_printk_skb: 521 callbacks suppressed
[  418.095855][   T30] audit: type=1400 audit(2000000074.840:124159): avc:  denied  { create } for  pid=21905 comm="syz.1.6826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  418.880701][T21894] EXT4-fs warning (device loop4): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop4.
[  418.914051][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  418.936787][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  419.054477][T21925] loop0: detected capacity change from 0 to 164
[  419.094790][   T30] audit: type=1400 audit(2000000075.880:124160): avc:  denied  { mount } for  pid=21924 comm="syz.0.6819" name="/" dev="loop0" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[  419.215978][T21923] loop4: detected capacity change from 0 to 512
[  419.263068][T21923] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  419.300411][T21923] ext4 filesystem being mounted at /1289/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  419.423550][T21938] loop6: detected capacity change from 0 to 512
[  419.464668][T21938] loop6: detected capacity change from 0 to 2048
[  419.471683][T21938] EXT4-fs: Ignoring removed bh option
[  419.504084][T21938] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  419.742365][   T30] audit: type=1400 audit(2000000076.520:124161): avc:  denied  { create } for  pid=21960 comm="syz.5.6824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  419.831059][T21977] __nla_validate_parse: 4 callbacks suppressed
[  419.831100][T21977] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6823'.
[  419.846894][T21962] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6823'.
[  419.950046][   T30] audit: type=1326 audit(2000000076.700:124162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21984 comm="syz.1.6825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278f7ce969 code=0x7ffc0000
[  419.973927][   T30] audit: type=1326 audit(2000000076.700:124163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21984 comm="syz.1.6825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278f7ce969 code=0x7ffc0000
[  419.997618][   T30] audit: type=1326 audit(2000000076.700:124164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21984 comm="syz.1.6825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f278f7ce969 code=0x7ffc0000
[  420.021343][   T30] audit: type=1326 audit(2000000076.700:124165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21984 comm="syz.1.6825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278f7ce969 code=0x7ffc0000
[  420.045117][   T30] audit: type=1326 audit(2000000076.700:124166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21984 comm="syz.1.6825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278f7ce969 code=0x7ffc0000
[  420.068795][   T30] audit: type=1326 audit(2000000076.700:124167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21984 comm="syz.1.6825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f278f7ce969 code=0x7ffc0000
[  420.092508][   T30] audit: type=1326 audit(2000000076.700:124168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21984 comm="syz.1.6825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278f7ce969 code=0x7ffc0000
[  420.152652][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  420.173010][   T60] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  420.193732][   T60] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  420.197936][T22003] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  420.205996][   T60] EXT4-fs (loop6): This should not happen!! Data will be lost
[  420.205996][   T60] 
[  420.206012][   T60] EXT4-fs (loop6): Total free blocks count 0
[  420.206026][   T60] EXT4-fs (loop6): Free/Dirty block details
[  420.206087][   T60] EXT4-fs (loop6): free_blocks=2415919104
[  420.206101][   T60] EXT4-fs (loop6): dirty_blocks=8224
[  420.206114][   T60] EXT4-fs (loop6): Block reservation details
[  420.206126][   T60] EXT4-fs (loop6): i_reserved_data_blocks=514
[  420.207844][T21959] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 638 with error 28
[  420.213494][T22003] vxcan1 speed is unknown, defaulting to 1000
[  420.461079][T22017] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.634221][T22017] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.727436][T22071] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  420.799026][T22073] loop0: detected capacity change from 0 to 128
[  420.911346][T22073] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  420.924240][T22073] ext4 filesystem being mounted at /1387/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  421.109548][T22017] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.206186][T22017] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.297597][T22017] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  421.311718][T22017] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  421.348039][T22017] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  421.363889][T22017] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  421.505066][ T3309] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  421.514760][T22106] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  421.572386][T22114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6842'.
[  421.680767][T22115] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6842'.
[  421.793549][T22118] hub 1-0:1.0: USB hub found
[  421.798274][T22118] hub 1-0:1.0: 8 ports detected
[  422.486967][T22121] 9pnet_fd: Insufficient options for proto=fd
[  422.815826][T22145] syz.0.6850: attempt to access beyond end of device
[  422.815826][T22145] md30: rw=2048, sector=0, nr_sectors = 8 limit=0
[  422.943966][T22157] loop4: detected capacity change from 0 to 128
[  423.054264][T22164] loop4: detected capacity change from 0 to 164
[  423.060838][T22164] iso9660: Unknown parameter 'd��E�7��}��x_�&1��(DY�-Zѐ'
[  423.152920][   T30] kauditd_printk_skb: 189 callbacks suppressed
[  423.152935][   T30] audit: type=1326 audit(2000000000.080:124358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22152 comm="syz.6.6861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929e88e969 code=0x7ffc0000
[  423.187875][   T30] audit: type=1326 audit(2000000000.110:124359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22152 comm="syz.6.6861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f929e88e969 code=0x7ffc0000
[  423.211789][   T30] audit: type=1326 audit(2000000000.110:124360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22152 comm="syz.6.6861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929e88e969 code=0x7ffc0000
[  423.235524][   T30] audit: type=1326 audit(2000000000.110:124361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22152 comm="syz.6.6861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929e88e969 code=0x7ffc0000
[  423.259399][   T30] audit: type=1326 audit(2000000000.110:124362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22152 comm="syz.6.6861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f929e88e969 code=0x7ffc0000
[  423.283001][   T30] audit: type=1326 audit(2000000000.110:124363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22152 comm="syz.6.6861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929e88e969 code=0x7ffc0000
[  423.306804][   T30] audit: type=1326 audit(2000000000.110:124364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22152 comm="syz.6.6861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929e88e969 code=0x7ffc0000
[  423.330555][   T30] audit: type=1326 audit(2000000000.110:124365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22152 comm="syz.6.6861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f929e88e969 code=0x7ffc0000
[  423.354285][   T30] audit: type=1326 audit(2000000000.110:124366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22152 comm="syz.6.6861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929e88e969 code=0x7ffc0000
[  423.378019][   T30] audit: type=1326 audit(2000000000.110:124367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22152 comm="syz.6.6861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929e88e969 code=0x7ffc0000
[  423.933792][T22185] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  423.963288][T22185] vxcan1 speed is unknown, defaulting to 1000
[  424.037110][T22195] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  424.138225][T22201] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6867'.
[  424.170350][T22201] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6867'.
[  424.215975][T22207] loop6: detected capacity change from 0 to 164
[  424.317023][T22207] iso9660: Unknown parameter 'd��E�7��}��x_�&1��(DY�-Zѐ'
[  424.401752][T22216] loop6: detected capacity change from 0 to 512
[  425.344502][T22216] EXT4-fs (loop6): orphan cleanup on readonly fs
[  425.361292][T22216] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  425.379070][T22216] EXT4-fs (loop6): Cannot turn on quotas: error -117
[  425.397671][T22216] EXT4-fs (loop6): 1 truncate cleaned up
[  425.533304][T22216] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  425.578263][ T9289] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  426.049518][T22245] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  426.059587][T22245] vxcan1 speed is unknown, defaulting to 1000
[  426.774658][T22255] loop4: detected capacity change from 0 to 128
[  426.778004][T22260] netlink: 'syz.1.6893': attribute type 4 has an invalid length.
[  426.793803][T22255] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  426.806842][T22255] ext4 filesystem being mounted at /1301/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  426.917569][T22278] loop6: detected capacity change from 0 to 1024
[  426.923489][T22280] netlink: 'syz.5.6900': attribute type 4 has an invalid length.
[  426.931996][T22278] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  426.943265][T22278] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  426.961459][T22278] JBD2: no valid journal superblock found
[  426.967280][T22278] EXT4-fs (loop6): Could not load journal inode
[  427.121187][T22292] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  427.128626][T22292] vxcan1 speed is unknown, defaulting to 1000
[  427.850170][ T3302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  428.040984][T22312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6899'.
[  428.203190][T22316] loop6: detected capacity change from 0 to 4096
[  428.203677][   T30] kauditd_printk_skb: 248 callbacks suppressed
[  428.203691][   T30] audit: type=1400 audit(2000000003.860:124615): avc:  denied  { mount } for  pid=22318 comm="syz.1.6903" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  428.222459][T22312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6899'.
[  428.273473][   T30] audit: type=1326 audit(2000000003.930:124616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22307 comm="syz.0.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760ce1e969 code=0x7ffc0000
[  428.273791][T22316] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  428.297264][   T30] audit: type=1326 audit(2000000003.930:124617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22307 comm="syz.0.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760ce1e969 code=0x7ffc0000
[  428.333414][   T30] audit: type=1326 audit(2000000003.930:124618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22307 comm="syz.0.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f760ce1e969 code=0x7ffc0000
[  428.357285][   T30] audit: type=1326 audit(2000000003.930:124619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22307 comm="syz.0.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760ce1e969 code=0x7ffc0000
[  428.381058][   T30] audit: type=1326 audit(2000000003.930:124620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22307 comm="syz.0.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760ce1e969 code=0x7ffc0000
[  428.404771][   T30] audit: type=1326 audit(2000000003.930:124621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22307 comm="syz.0.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f760ce1e969 code=0x7ffc0000
[  428.428452][   T30] audit: type=1326 audit(2000000003.930:124622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22307 comm="syz.0.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760ce1e969 code=0x7ffc0000
[  428.452276][   T30] audit: type=1326 audit(2000000003.930:124623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22307 comm="syz.0.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760ce1e969 code=0x7ffc0000
[  428.528058][   T30] audit: type=1400 audit(2000000003.990:124624): avc:  denied  { ioctl } for  pid=22315 comm="syz.6.6902" path="socket:[66785]" dev="sockfs" ino=66785 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  428.580135][T22325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6904'.
[  428.673141][T22328] vhci_hcd: invalid port number 254
[  428.751210][T22332] netlink: 'syz.4.6907': attribute type 4 has an invalid length.
[  428.760625][T22331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6917'.
[  428.774632][T22331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6917'.
[  428.813321][ T9289] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  428.854822][T22340] netlink: 100 bytes leftover after parsing attributes in process `syz.5.6911'.
[  428.914432][T22340] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  428.921684][T22340] vxcan1 speed is unknown, defaulting to 1000
[  428.998586][T22349] loop6: detected capacity change from 0 to 128
[  429.006720][T22351] loop4: detected capacity change from 0 to 128
[  429.014067][T22349] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  429.036214][T22351] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  429.049143][T22351] ext4 filesystem being mounted at /1306/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  429.053156][T22349] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  429.102352][T22349] ext2 filesystem being mounted at /996/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  429.134702][T22351] EXT4-fs error (device loop4): htree_dirblock_to_tree:1082: inode #2: block 4: comm syz.4.6914: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1
[  429.167203][T22351] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=22351 comm=syz.4.6914
[  429.195335][T22351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6914'.
[  429.213775][T22361] netlink: 'syz.0.6915': attribute type 13 has an invalid length.
[  429.297213][ T9289] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  429.322320][T22364] team0: Port device geneve1 removed
[  429.329384][T22366] loop6: detected capacity change from 0 to 512
[  429.338745][T22367] tipc: Enabled bearer <eth:team0>, priority 0
[  429.346539][T22366] EXT4-fs: inline encryption not supported
[  429.374108][T22366] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  429.390636][T22366] ext4 filesystem being mounted at /997/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  429.411765][ T3302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  429.441833][T22374] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6921'.
[  429.491405][T22376] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6920'.
[  429.513567][T22374] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 101
[  429.525432][T22376] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6920'.
[  429.562963][ T9289] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  429.627569][T22385] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  429.643231][T22385] vxcan1 speed is unknown, defaulting to 1000
[  429.931431][T22401] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  429.963283][T22401] vxcan1 speed is unknown, defaulting to 1000
[  430.438926][T22437] syz.0.6946: attempt to access beyond end of device
[  430.438926][T22437] md30: rw=2048, sector=0, nr_sectors = 8 limit=0
[  431.687924][T22488] syz.1.6966(22488): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  432.125512][T22501] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  432.152530][T22501] vxcan1 speed is unknown, defaulting to 1000
[  432.324436][T22510] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  432.343961][T22510] vxcan1 speed is unknown, defaulting to 1000
[  432.593307][T22524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  433.238361][   T30] kauditd_printk_skb: 1353 callbacks suppressed
[  433.238377][   T30] audit: type=1326 audit(2000000008.890:125978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22532 comm="syz.6.6983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929e88e969 code=0x7ffc0000
[  433.268532][   T30] audit: type=1326 audit(2000000008.890:125979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22532 comm="syz.6.6983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929e88e969 code=0x7ffc0000
[  433.389017][   T30] audit: type=1400 audit(2000000009.040:125980): avc:  denied  { mounton } for  pid=22540 comm="syz.0.6986" path="/1420/file0" dev="tmpfs" ino=7574 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0
[  433.412080][   T30] audit: type=1400 audit(2000000009.040:125981): avc:  denied  { remount } for  pid=22540 comm="syz.0.6986" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=0
[  433.544216][T22546] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  433.552285][   T30] audit: type=1400 audit(2000000009.100:125982): avc:  denied  { read write } for  pid=3302 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  433.576773][   T30] audit: type=1400 audit(2000000009.100:125983): avc:  denied  { map_create } for  pid=22540 comm="syz.0.6986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  433.592762][T22546] vxcan1 speed is unknown, defaulting to 1000
[  433.596305][   T30] audit: type=1400 audit(2000000009.100:125984): avc:  denied  { prog_load } for  pid=22540 comm="syz.0.6986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  433.621917][   T30] audit: type=1400 audit(2000000009.100:125985): avc:  denied  { prog_load } for  pid=22540 comm="syz.0.6986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  433.641531][   T30] audit: type=1400 audit(2000000009.100:125986): avc:  denied  { prog_load } for  pid=22540 comm="syz.0.6986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  433.661012][   T30] audit: type=1400 audit(2000000009.100:125987): avc:  denied  { mounton } for  pid=22540 comm="syz.0.6986" path="/1420/file0" dev="tmpfs" ino=7574 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0
[  433.680068][T22550] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  433.780768][T22556] netlink: 62967 bytes leftover after parsing attributes in process `syz.5.6992'.
[  433.817715][T22550] vxcan1 speed is unknown, defaulting to 1000
[  433.974494][T22569] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6998'.
[  434.582658][T22594] bridge0: entered allmulticast mode
[  434.817011][T22608] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  434.824674][T22608] vxcan1 speed is unknown, defaulting to 1000
[  436.615814][T22674] syzkaller0: entered promiscuous mode
[  436.621317][T22674] syzkaller0: entered allmulticast mode
[  436.793885][T22685] xt_CT: You must specify a L4 protocol and not use inversions on it
[  436.843194][T22687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=785 sclass=netlink_route_socket pid=22687 comm=syz.6.7042
[  437.254759][T22702] xt_CT: You must specify a L4 protocol and not use inversions on it
[  437.793201][T22727] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  437.832665][   T23] Process accounting resumed
[  438.242505][   T30] kauditd_printk_skb: 1316 callbacks suppressed
[  438.242595][   T30] audit: type=1326 audit(2000000013.900:127304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22763 comm="syz.1.7073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f278f7c5927 code=0x7fc00000
[  438.304683][   T30] audit: type=1326 audit(2000000013.900:127305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22763 comm="syz.1.7073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f278f76ab39 code=0x7fc00000
[  438.328357][   T30] audit: type=1326 audit(2000000013.900:127306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22763 comm="syz.1.7073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f278f76abff code=0x7fc00000
[  438.352069][   T30] audit: type=1326 audit(2000000013.900:127307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22763 comm="syz.1.7073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f278f7ce969 code=0x7fc00000
[  438.452454][   T30] audit: type=1400 audit(2000000013.960:127308): avc:  denied  { read write } for  pid=9289 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  438.476900][   T30] audit: type=1400 audit(2000000014.060:127309): avc:  denied  { prog_load } for  pid=22774 comm="syz.5.7076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  438.496387][   T30] audit: type=1400 audit(2000000014.060:127310): avc:  denied  { prog_load } for  pid=22774 comm="syz.5.7076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  438.515736][   T30] audit: type=1400 audit(2000000014.060:127311): avc:  denied  { open } for  pid=22774 comm="syz.5.7076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0
[  438.535449][   T30] audit: type=1326 audit(2000000014.060:127312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22774 comm="syz.5.7076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636babe969 code=0x7ffc0000
[  438.559241][   T30] audit: type=1326 audit(2000000014.060:127313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22774 comm="syz.5.7076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f636babe969 code=0x7ffc0000
[  439.294428][T22805] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  439.540468][T22818] tun0: tun_chr_ioctl cmd 1074025681
[  440.107231][T22847] binfmt_misc: register: failed to install interpreter file ./file2
[  440.130022][T22849] xt_CT: You must specify a L4 protocol and not use inversions on it
[  441.065639][T22904] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  441.082806][T22904] vxcan1 speed is unknown, defaulting to 1000
[  441.149196][T22913] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  441.164079][T22913] vxcan1 speed is unknown, defaulting to 1000
[  442.658790][T22962] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  442.685507][T22962] vxcan1 speed is unknown, defaulting to 1000
[  443.254372][   T30] kauditd_printk_skb: 1352 callbacks suppressed
[  443.254386][   T30] audit: type=1400 audit(2000000018.910:128666): avc:  denied  { prog_load } for  pid=22986 comm="syz.6.7158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  443.313825][   T30] audit: type=1400 audit(2000000018.970:128667): avc:  denied  { prog_load } for  pid=22986 comm="syz.6.7158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  443.333372][   T30] audit: type=1400 audit(2000000018.970:128668): avc:  denied  { prog_load } for  pid=22986 comm="syz.6.7158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  443.356134][   T30] audit: type=1400 audit(2000000018.970:128669): avc:  denied  { create } for  pid=22986 comm="syz.6.7158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[  443.356170][   T30] audit: type=1400 audit(2000000018.970:128670): avc:  denied  { create } for  pid=22986 comm="syz.6.7158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[  443.356255][   T30] audit: type=1400 audit(2000000018.970:128671): avc:  denied  { open } for  pid=22986 comm="syz.6.7158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0
[  443.382858][   T30] audit: type=1400 audit(2000000019.040:128672): avc:  denied  { prog_load } for  pid=22988 comm="syz.5.7159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  443.388348][   T30] audit: type=1400 audit(2000000019.040:128673): avc:  denied  { map_create } for  pid=22988 comm="syz.5.7159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  443.389477][   T30] audit: type=1400 audit(2000000019.040:128674): avc:  denied  { prog_load } for  pid=22988 comm="syz.5.7159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  443.390447][   T30] audit: type=1400 audit(2000000019.040:128675): avc:  denied  { prog_load } for  pid=22988 comm="syz.5.7159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  443.689950][T23004] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  443.702732][T23004] vxcan1 speed is unknown, defaulting to 1000
[  443.738714][T23011] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  443.823984][T23011] vxcan1 speed is unknown, defaulting to 1000
[  444.682098][T23036] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  445.619639][T23085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7194'.
[  445.642893][T23086] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  445.665596][T23088] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  445.703549][T23091] No such timeout policy "syz0"
[  446.198052][T23116] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  446.205290][T23116] vxcan1 speed is unknown, defaulting to 1000
[  447.237255][T23160] xt_CT: You must specify a L4 protocol and not use inversions on it
[  447.509919][T23196] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=23196 comm=syz.1.7239
[  447.545997][T23199] xt_CT: You must specify a L4 protocol and not use inversions on it
[  447.605065][T23205] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  447.612454][T23205] vxcan1 speed is unknown, defaulting to 1000
[  448.281825][   T30] kauditd_printk_skb: 1935 callbacks suppressed
[  448.281843][   T30] audit: type=1400 audit(2000000023.930:130611): avc:  denied  { map_create } for  pid=23214 comm="syz.0.7246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  448.362274][   T30] audit: type=1400 audit(2000000023.960:130612): avc:  denied  { prog_load } for  pid=23214 comm="syz.0.7246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  448.385599][   T30] audit: type=1400 audit(2000000023.960:130613): avc:  denied  { prog_load } for  pid=23214 comm="syz.0.7246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  448.404976][   T30] audit: type=1400 audit(2000000023.960:130614): avc:  denied  { prog_load } for  pid=23214 comm="syz.0.7246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  448.424366][   T30] audit: type=1400 audit(2000000023.980:130615): avc:  denied  { prog_load } for  pid=23214 comm="syz.0.7246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  448.443706][   T30] audit: type=1400 audit(2000000023.980:130616): avc:  denied  { prog_load } for  pid=23214 comm="syz.0.7246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  448.463115][   T30] audit: type=1400 audit(2000000023.980:130617): avc:  denied  { prog_load } for  pid=23214 comm="syz.0.7246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  448.482450][   T30] audit: type=1400 audit(2000000024.000:130618): avc:  denied  { prog_load } for  pid=23216 comm="syz.0.7248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  448.501867][   T30] audit: type=1400 audit(2000000024.000:130619): avc:  denied  { mounton } for  pid=23216 comm="syz.0.7248" path="/1482/file0" dev="tmpfs" ino=7913 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0
[  448.524965][   T30] audit: type=1400 audit(2000000024.000:130620): avc:  denied  { read write } for  pid=23216 comm="syz.0.7248" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0
[  448.636378][T23232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23232 comm=syz.4.7261
[  448.734583][T23242] wg2: left promiscuous mode
[  448.739206][T23242] wg2: left allmulticast mode
[  448.759238][T23242] wg2: entered promiscuous mode
[  448.764197][T23242] wg2: entered allmulticast mode
[  448.887401][T23264] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  448.895147][T23264] vxcan1 speed is unknown, defaulting to 1000
[  450.081918][T23324] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  450.089200][T23324] vxcan1 speed is unknown, defaulting to 1000
[  450.138623][T23325] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  450.146055][T23325] vxcan1 speed is unknown, defaulting to 1000
[  450.536222][T23338] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  450.552669][T23338] vxcan1 speed is unknown, defaulting to 1000
[  450.617277][T23341] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  450.638568][T23341] vxcan1 speed is unknown, defaulting to 1000
[  451.722471][T23390] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  451.729740][T23390] vxcan1 speed is unknown, defaulting to 1000
[  452.232515][T23407] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  452.254844][T23407] vxcan1 speed is unknown, defaulting to 1000
[  453.076638][T23417] serio: Serial port ptm1
[  453.612389][   T30] kauditd_printk_skb: 926 callbacks suppressed
[  453.612455][   T30] audit: type=1326 audit(2000000029.270:131547): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23414 comm="syz.5.7318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f636bab5927 code=0x7ffc0000
[  453.695645][   T30] audit: type=1326 audit(2000000029.270:131548): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23414 comm="syz.5.7318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f636ba5ab39 code=0x7ffc0000
[  453.719675][   T30] audit: type=1326 audit(2000000029.270:131549): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23414 comm="syz.5.7318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636babe969 code=0x7ffc0000
[  453.743789][   T30] audit: type=1326 audit(2000000029.270:131550): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23414 comm="syz.5.7318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636babe969 code=0x7ffc0000
[  453.767788][   T30] audit: type=1326 audit(2000000029.330:131551): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23414 comm="syz.5.7318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f636bab5927 code=0x7ffc0000
[  453.791732][   T30] audit: type=1326 audit(2000000029.330:131552): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23414 comm="syz.5.7318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f636ba5ab39 code=0x7ffc0000
[  453.815801][   T30] audit: type=1326 audit(2000000029.330:131553): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23414 comm="syz.5.7318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636babe969 code=0x7ffc0000
[  453.877484][   T30] audit: type=1326 audit(2000000029.360:131554): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23414 comm="syz.5.7318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f636bab5927 code=0x7ffc0000
[  453.901619][   T30] audit: type=1326 audit(2000000029.360:131555): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23414 comm="syz.5.7318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f636ba5ab39 code=0x7ffc0000
[  453.925567][   T30] audit: type=1326 audit(2000000029.360:131556): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23414 comm="syz.5.7318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636babe969 code=0x7ffc0000
[  454.074931][T23429] xt_hashlimit: size too large, truncated to 1048576
[  454.081714][T23429] xt_hashlimit: invalid rate
[  454.086386][T23426] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  454.101221][T23426] vxcan1 speed is unknown, defaulting to 1000
[  455.008075][T23455] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  455.635947][T23488] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  455.651960][T23488] vxcan1 speed is unknown, defaulting to 1000
[  455.969178][T23497] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  455.984325][T23497] vxcan1 speed is unknown, defaulting to 1000
[  457.560684][T23553] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  457.576182][T23553] vxcan1 speed is unknown, defaulting to 1000
[  457.809630][T23564] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.7378'.
[  457.819623][T23561] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.7378'.
[  458.080652][T23574] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7383'.
[  458.623157][   T30] kauditd_printk_skb: 1203 callbacks suppressed
[  458.623173][   T30] audit: type=1400 audit(2000000034.280:132760): avc:  denied  { prog_load } for  pid=23602 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  458.650856][   T30] audit: type=1400 audit(2000000034.280:132761): avc:  denied  { allowed } for  pid=23602 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0
[  458.670092][   T30] audit: type=1400 audit(2000000034.280:132762): avc:  denied  { create } for  pid=23602 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0
[  458.675355][T23609] xt_TPROXY: Can be used only with -p tcp or -p udp
[  458.689165][   T30] audit: type=1400 audit(2000000034.280:132763): avc:  denied  { create } for  pid=23602 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[  458.715941][   T30] audit: type=1400 audit(2000000034.280:132764): avc:  denied  { create } for  pid=23602 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=0
[  458.735218][   T30] audit: type=1400 audit(2000000034.280:132765): avc:  denied  { map_create } for  pid=23602 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  458.754030][   T30] audit: type=1400 audit(2000000034.280:132766): avc:  denied  { prog_load } for  pid=23602 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  458.777294][   T30] audit: type=1400 audit(2000000034.280:132767): avc:  denied  { open } for  pid=23602 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0
[  458.796195][   T30] audit: type=1400 audit(2000000034.280:132768): avc:  denied  { prog_load } for  pid=23602 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  458.810443][T23615] audit: audit_backlog=65 > audit_backlog_limit=64
[  458.844068][T23617] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  458.851542][T23617] vxcan1 speed is unknown, defaulting to 1000
[  459.261346][T23632] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7416'.
[  459.531380][T23651] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  459.539054][T23651] vxcan1 speed is unknown, defaulting to 1000
[  459.718637][T23660] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  459.734066][T23660] vxcan1 speed is unknown, defaulting to 1000
[  459.965465][T23660] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  459.972774][T23660] vxcan1 speed is unknown, defaulting to 1000
[  460.292088][T23679] block device autoloading is deprecated and will be removed.
[  460.310795][T23679] syz.4.7422: attempt to access beyond end of device
[  460.310795][T23679] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  460.324163][T23683] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  460.624882][T23701] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  460.631978][T23701] vxcan1 speed is unknown, defaulting to 1000
[  460.755853][T23706] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  460.803937][T23708] netlink: 'syz.0.7435': attribute type 29 has an invalid length.
[  460.817967][T23708] netlink: 'syz.0.7435': attribute type 29 has an invalid length.
[  460.827191][T23708] netlink: 'syz.0.7435': attribute type 29 has an invalid length.
[  460.835316][T23708] netlink: 'syz.0.7435': attribute type 29 has an invalid length.
[  460.843433][T23708] netlink: 'syz.0.7435': attribute type 29 has an invalid length.
[  460.851592][T23708] netlink: 'syz.0.7435': attribute type 29 has an invalid length.
[  460.863204][T23708] netlink: 'syz.0.7435': attribute type 29 has an invalid length.
[  460.871380][T23708] netlink: 'syz.0.7435': attribute type 29 has an invalid length.
[  460.879641][T23708] netlink: 'syz.0.7435': attribute type 29 has an invalid length.
[  460.887761][T23708] netlink: 'syz.0.7435': attribute type 29 has an invalid length.
[  461.443205][T23731] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  461.450894][T23731] vxcan1 speed is unknown, defaulting to 1000
[  461.572393][T23741] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  461.854958][T23763] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  461.862730][T23763] vxcan1 speed is unknown, defaulting to 1000
[  462.685957][T23812] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7476'.
[  462.864554][T23829] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.7483'.
[  462.874273][T23826] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.7483'.
[  463.632947][   T30] kauditd_printk_skb: 1640 callbacks suppressed
[  463.632963][   T30] audit: type=1400 audit(2000000039.290:134407): avc:  denied  { map_create } for  pid=23839 comm="syz.5.7488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  463.659704][   T30] audit: type=1400 audit(2000000039.290:134408): avc:  denied  { create } for  pid=23839 comm="syz.5.7488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=0
[  463.679827][   T30] audit: type=1400 audit(2000000039.290:134409): avc:  denied  { prog_load } for  pid=23839 comm="syz.5.7488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  463.699640][   T30] audit: type=1400 audit(2000000039.290:134410): avc:  denied  { map_create } for  pid=23839 comm="syz.5.7488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  463.719405][   T30] audit: type=1400 audit(2000000039.290:134411): avc:  denied  { prog_load } for  pid=23839 comm="syz.5.7488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  463.739209][   T30] audit: type=1400 audit(2000000039.290:134412): avc:  denied  { prog_load } for  pid=23839 comm="syz.5.7488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  463.741096][T23852] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  463.758602][   T30] audit: type=1400 audit(2000000039.290:134413): avc:  denied  { allowed } for  pid=23839 comm="syz.5.7488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0
[  463.785193][   T30] audit: type=1400 audit(2000000039.290:134414): avc:  denied  { prog_load } for  pid=23833 comm="syz.0.7485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  463.786187][T23852] vxcan1 speed is unknown, defaulting to 1000
[  463.804511][   T30] audit: type=1400 audit(2000000039.290:134415): avc:  denied  { create } for  pid=23833 comm="syz.0.7485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0
[  463.830342][   T30] audit: type=1400 audit(2000000039.290:134416): avc:  denied  { prog_load } for  pid=23836 comm="syz.1.7497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  464.025768][T23866] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  464.057104][T23866] vxcan1 speed is unknown, defaulting to 1000
May 18 03:34:00 syzkaller daemon.err dhcpcd[23884]: ps_bpf_start_bpf: bpf_open: Invalid argument
May 18 03:34:00 syzkaller daemon.err dhcpcd[23884]: ps_root_recvmsg: Invalid argument
[  464.604587][T23886] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  464.611749][T23886] vxcan1 speed is unknown, defaulting to 1000
[  465.029068][T23900] xt_TPROXY: Can be used only with -p tcp or -p udp
[  465.060578][T23900] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  465.084234][T23900] vxcan1 speed is unknown, defaulting to 1000
[  465.303493][T23917] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.7509'.
[  465.328783][T23910] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.7509'.
[  465.980688][T23951] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  465.988476][T23951] vxcan1 speed is unknown, defaulting to 1000
May 18 03:34:01 syzkaller daemon.err dhcpcd[23955]: ps_bpf_start_bpf: bpf_open: Invalid argument
May 18 03:34:01 syzkaller daemon.err dhcpcd[23955]: ps_root_recvmsg: Invalid argument
May 18 03:34:02 syzkaller daemon.err dhcpcd[23964]: ps_bpf_start_bpf: bpf_open: Invalid argument
May 18 03:34:02 syzkaller daemon.err dhcpcd[23964]: ps_root_recvmsg: Invalid argument
[  466.778436][T23967] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  466.998272][T23973] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
May 18 03:34:03 syzkaller daemon.err dhcpcd[24005]: ps_bpf_start_bpf: bpf_open: Invalid argument
May 18 03:34:03 syzkaller daemon.err dhcpcd[24005]: ps_root_recvmsg: Invalid argument
[  468.112920][T24017] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  468.324910][T24030] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  468.326511][T24035] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7547'.
[  468.348578][T24026] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7547'.
[  468.362160][T24030] vxcan1 speed is unknown, defaulting to 1000
[  468.813261][   T30] kauditd_printk_skb: 1338 callbacks suppressed
[  468.813566][   T30] audit: type=1400 audit(2000000044.470:135755): avc:  denied  { read write } for  pid=3309 comm="syz-executor" name="loop0" dev="devtmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0
[  468.862073][   T30] audit: type=1400 audit(2000000044.500:135756): avc:  denied  { map_create } for  pid=24057 comm="syz.0.7565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  468.881670][   T30] audit: type=1400 audit(2000000044.500:135757): avc:  denied  { prog_load } for  pid=24057 comm="syz.0.7565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  468.901201][   T30] audit: type=1400 audit(2000000044.500:135758): avc:  denied  { prog_load } for  pid=24057 comm="syz.0.7565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  468.920601][   T30] audit: type=1400 audit(2000000044.500:135759): avc:  denied  { prog_load } for  pid=24057 comm="syz.0.7565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  468.939859][T24062] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  468.940226][T24062] vxcan1 speed is unknown, defaulting to 1000
[  468.946889][   T30] audit: type=1400 audit(2000000044.500:135760): avc:  denied  { create } for  pid=24057 comm="syz.0.7565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[  468.946914][   T30] audit: type=1400 audit(2000000044.500:135761): avc:  denied  { read } for  pid=24057 comm="syz.0.7565" dev="nsfs" ino=4026532885 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0
[  468.995504][   T30] audit: type=1400 audit(2000000044.500:135762): avc:  denied  { prog_load } for  pid=24057 comm="syz.0.7565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  469.015031][   T30] audit: type=1400 audit(2000000044.500:135763): avc:  denied  { open } for  pid=24057 comm="syz.0.7565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0
[  469.034618][   T30] audit: type=1400 audit(2000000044.500:135764): avc:  denied  { map_create } for  pid=24057 comm="syz.0.7565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  469.212565][T24075] binfmt_misc: register: failed to install interpreter file ./file2
[  469.501708][T24086] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  469.519249][T24086] vxcan1 speed is unknown, defaulting to 1000
[  469.721323][T24092] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  469.728894][T24092] vxcan1 speed is unknown, defaulting to 1000
[  470.799704][T24134] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  470.807054][T24134] vxcan1 speed is unknown, defaulting to 1000
[  471.076021][T24149] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  471.083384][T24149] vxcan1 speed is unknown, defaulting to 1000
[  471.298000][T24163] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  471.305326][T24163] vxcan1 speed is unknown, defaulting to 1000
[  471.316406][T24168] xt_CT: You must specify a L4 protocol and not use inversions on it
[  471.886186][T24177] xt_TPROXY: Can be used only with -p tcp or -p udp
[  472.098362][T24184] xt_TPROXY: Can be used only with -p tcp or -p udp
[  472.347201][T24200] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  472.362706][T24200] vxcan1 speed is unknown, defaulting to 1000
[  472.592327][T24205] xt_CT: You must specify a L4 protocol and not use inversions on it
[  472.746918][T24209] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  472.754361][T24209] vxcan1 speed is unknown, defaulting to 1000
[  472.865373][T24217] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  473.125871][T24220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7639'.
[  473.597744][T24233] xt_TPROXY: Can be used only with -p tcp or -p udp
[  473.612132][T24234] xt_CT: You must specify a L4 protocol and not use inversions on it
[  473.822734][   T30] kauditd_printk_skb: 1600 callbacks suppressed
[  473.822758][   T30] audit: type=1400 audit(2000000049.480:137365): avc:  denied  { prog_load } for  pid=24257 comm="syz.1.7647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  473.872565][   T30] audit: type=1400 audit(2000000049.510:137366): avc:  denied  { prog_load } for  pid=24257 comm="syz.1.7647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  473.891929][   T30] audit: type=1400 audit(2000000049.510:137367): avc:  denied  { map_create } for  pid=24257 comm="syz.1.7647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  473.911354][   T30] audit: type=1400 audit(2000000049.510:137368): avc:  denied  { prog_load } for  pid=24257 comm="syz.1.7647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  473.934335][   T30] audit: type=1400 audit(2000000049.590:137369): avc:  denied  { open } for  pid=24260 comm="syz.1.7648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0
[  473.934808][T24261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7648'.
[  473.956188][   T30] audit: type=1400 audit(2000000049.590:137370): avc:  denied  { create } for  pid=24260 comm="syz.1.7648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0
[  474.003439][   T30] audit: type=1400 audit(2000000049.660:137371): avc:  denied  { create } for  pid=24260 comm="syz.1.7648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[  474.048415][   T30] audit: type=1400 audit(2000000049.660:137372): avc:  denied  { read write } for  pid=3309 comm="syz-executor" name="loop0" dev="devtmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0
[  474.071963][   T30] audit: type=1400 audit(2000000049.680:137373): avc:  denied  { read write } for  pid=24262 comm="syz.0.7649" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0
[  474.095921][   T30] audit: type=1400 audit(2000000049.680:137374): avc:  denied  { open } for  pid=24262 comm="syz.0.7649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0
[  474.578913][T24266] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  474.586493][T24266] vxcan1 speed is unknown, defaulting to 1000
[  474.830799][T24297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7662'.
[  475.869121][T24334] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  475.892574][T24334] vxcan1 speed is unknown, defaulting to 1000
[  476.677625][T24342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=785 sclass=netlink_route_socket pid=24342 comm=syz.1.7679
[  477.020060][T24349] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  477.129253][T24353] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  477.171321][T24355] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  477.190734][T24355] vxcan1 speed is unknown, defaulting to 1000
[  477.481871][T24382] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7696'.
[  477.528625][T24391] loop0: detected capacity change from 0 to 256
[  477.545474][T24391] validate_nla: 18 callbacks suppressed
[  477.545492][T24391] netlink: 'syz.0.7700': attribute type 13 has an invalid length.
[  477.591574][T24393] loop6: detected capacity change from 0 to 512
[  477.602472][T24393] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  477.624203][T24399] loop0: detected capacity change from 0 to 1024
[  477.631291][T24399] EXT4-fs (loop0): stripe (6) is not aligned with cluster size (16), stripe is disabled
[  477.641684][T24393] EXT4-fs (loop6): 1 truncate cleaned up
[  477.649302][T24393] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  477.662618][T24399] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal
[  477.710970][T24393] netlink: 'syz.6.7701': attribute type 10 has an invalid length.
[  477.719273][T24393] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7701'.
[  477.735689][T24393] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  477.825883][ T9289] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  477.839639][T24407] loop0: detected capacity change from 0 to 512
[  477.851002][T24409] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125
[  477.860300][T24407] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  477.873284][T24407] ext4 filesystem being mounted at /1586/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  477.887178][T24409] loop9: detected capacity change from 0 to 7
[  477.894040][T24409] Buffer I/O error on dev loop9, logical block 0, async page read
[  477.902198][T24409] Buffer I/O error on dev loop9, logical block 0, async page read
[  477.910172][T24409]  loop9: unable to read partition table
[  477.916026][T24409] loop_reread_partitions: partition scan of loop9 (�被������ڬ��dƤ����ݡ�����
[  477.916026][T24409] 
U�������) failed (rc=-5)
[  477.960994][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  478.179080][T24425] loop4: detected capacity change from 0 to 512
[  478.186353][T24425] EXT4-fs: Ignoring removed mblk_io_submit option
[  478.194782][T24425] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  478.206856][T24425] EXT4-fs (loop4): 1 truncate cleaned up
[  478.214003][T24425] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  478.255013][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  478.291128][T24423] loop0: detected capacity change from 0 to 2048
[  478.301429][T24429] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  478.309588][T24431] loop4: detected capacity change from 0 to 512
[  478.309725][T24429] vxcan1 speed is unknown, defaulting to 1000
[  478.336598][T24423] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  478.351795][T24431] EXT4-fs (loop4): blocks per group (71) and clusters per group (20800) inconsistent
[  478.416444][T24436] openvswitch: netlink: Message has 6 unknown bytes.
[  478.677724][T24423] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 1 with max blocks 1 with error 28
[  478.690007][T24423] EXT4-fs (loop0): This should not happen!! Data will be lost
[  478.690007][T24423] 
[  478.699697][T24423] EXT4-fs (loop0): Total free blocks count 0
[  478.705718][T24423] EXT4-fs (loop0): Free/Dirty block details
[  478.711677][T24423] EXT4-fs (loop0): free_blocks=0
[  478.716615][T24423] EXT4-fs (loop0): dirty_blocks=0
[  478.721655][T24423] EXT4-fs (loop0): Block reservation details
[  478.727646][T24423] EXT4-fs (loop0): i_reserved_data_blocks=0
[  479.214320][   T30] kauditd_printk_skb: 1133 callbacks suppressed
[  479.214411][   T30] audit: type=1400 audit(2000000054.870:138508): avc:  denied  { read } for  pid=24448 comm="syz.4.7715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  479.266050][T24449] loop4: detected capacity change from 0 to 2048
[  479.273410][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  479.273410][   T30] audit: type=1326 audit(2000000054.900:138509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24448 comm="syz.4.7715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672731e969 code=0x7ffc0000
[  479.273442][   T30] audit: type=1326 audit(2000000054.900:138510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24448 comm="syz.4.7715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672731e969 code=0x7ffc0000
[  479.329704][   T30] audit: type=1326 audit(2000000054.900:138511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24448 comm="syz.4.7715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f672731e969 code=0x7ffc0000
[  479.353515][   T30] audit: type=1326 audit(2000000054.910:138512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24448 comm="syz.4.7715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672731e969 code=0x7ffc0000
[  479.377241][   T30] audit: type=1326 audit(2000000054.910:138513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24448 comm="syz.4.7715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672731e969 code=0x7ffc0000
[  479.400980][   T30] audit: type=1326 audit(2000000054.910:138514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24448 comm="syz.4.7715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f672731e969 code=0x7ffc0000
[  479.424783][   T30] audit: type=1326 audit(2000000054.910:138515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24448 comm="syz.4.7715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672731e969 code=0x7ffc0000
[  479.448480][   T30] audit: type=1326 audit(2000000054.910:138516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24448 comm="syz.4.7715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672731e969 code=0x7ffc0000
[  479.472219][   T30] audit: type=1326 audit(2000000054.910:138517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24448 comm="syz.4.7715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f672731e969 code=0x7ffc0000
[  479.512945][T24449]  loop4: p1 < > p4
[  479.520221][T24452] netlink: 'syz.1.7717': attribute type 4 has an invalid length.
[  479.528952][T24449] loop4: p4 size 8388608 extends beyond EOD, truncated
[  479.550733][T24457] loop6: detected capacity change from 0 to 1024
[  479.557822][T24457] EXT4-fs: Ignoring removed bh option
[  479.595007][T24457] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  479.703482][T24457] SELinux: failed to load policy
[  479.705944][T24473] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7731'.
[  479.720748][T24473] 9pnet_fd: Insufficient options for proto=fd
[  479.732176][T24457] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 19: block 241:freeing already freed block (bit 15); block bitmap corrupt.
[  479.979791][T24482] netlink: 'syz.5.7723': attribute type 13 has an invalid length.
[  480.185372][T24482] veth1_macvtap: left allmulticast mode
[  480.210117][T24482] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  480.218606][T24482] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  480.227648][T24482] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  480.236055][T24482] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  480.246557][ T9289] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  480.616407][T24506] serio: Serial port ptm1
[  480.822451][T24515] netlink: 244 bytes leftover after parsing attributes in process `syz.4.7744'.
[  481.778854][T24533] netlink: 11 bytes leftover after parsing attributes in process `syz.5.7737'.
[  481.798863][T24533] netlink: 7 bytes leftover after parsing attributes in process `syz.5.7737'.
[  481.867025][T24542] 
@�: renamed from bond_slave_0
[  481.958882][T24540] loop6: detected capacity change from 0 to 512
[  481.974116][T24540] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  481.986863][T24540] ext4 filesystem being mounted at /1158/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  482.239278][T24547] xt_CT: You must specify a L4 protocol and not use inversions on it
[  482.553862][T24553] loop0: detected capacity change from 0 to 1024
[  482.560516][T24553] EXT4-fs: Ignoring removed orlov option
[  482.568844][ T9289] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  482.580002][T24553] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  482.608331][T24559] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7757'.
[  482.626952][T24559] bond1: entered promiscuous mode
[  482.632059][T24559] bond1: entered allmulticast mode
[  482.637581][T24559] 8021q: adding VLAN 0 to HW filter on device bond1
[  482.676719][T24562] loop6: detected capacity change from 0 to 1024
[  482.690708][T24562] EXT4-fs: Ignoring removed orlov option
[  482.696417][T24562] EXT4-fs: Ignoring removed nomblk_io_submit option
[  482.774990][T24562] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  482.832867][T24559] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  482.854946][T24558] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7747'.
[  482.871061][T24559] 9pnet_fd: p9_fd_create_unix (24559): problem connecting socket: ./file0: -30
[  482.883846][T24559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  482.892875][T24559] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  483.208879][T24576] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  483.226691][ T3381] Process accounting resumed
[  483.314203][T24581] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7752'.
[  483.474973][ T9289] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  483.484752][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  483.871987][T24587] loop6: detected capacity change from 0 to 1024
[  483.899130][T24587] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  484.101879][T24595] No such timeout policy "syz0"
[  484.352278][   T30] kauditd_printk_skb: 334 callbacks suppressed
[  484.352301][   T30] audit: type=1400 audit(2000000059.980:138852): avc:  denied  { getopt } for  pid=24591 comm="syz.5.7756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  484.378322][   T30] audit: type=1326 audit(2000000059.980:138853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24591 comm="syz.5.7756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636babe969 code=0x7ffc0000
[  484.402036][   T30] audit: type=1326 audit(2000000059.980:138854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24591 comm="syz.5.7756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636babe969 code=0x7ffc0000
[  484.425749][   T30] audit: type=1326 audit(2000000059.980:138855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24591 comm="syz.5.7756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f636babe969 code=0x7ffc0000
[  484.449676][   T30] audit: type=1326 audit(2000000059.980:138856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24586 comm="syz.6.7755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929e88e969 code=0x7ffc0000
[  484.473397][   T30] audit: type=1326 audit(2000000059.980:138858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24591 comm="syz.5.7756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636babe969 code=0x7ffc0000
[  484.497131][   T30] audit: type=1326 audit(2000000059.980:138857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24586 comm="syz.6.7755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929e88e969 code=0x7ffc0000
[  484.520824][   T30] audit: type=1326 audit(2000000059.980:138859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24591 comm="syz.5.7756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636babe969 code=0x7ffc0000
[  484.544590][   T30] audit: type=1326 audit(2000000059.980:138860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24586 comm="syz.6.7755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f929e88e969 code=0x7ffc0000
[  484.568252][   T30] audit: type=1326 audit(2000000059.980:138861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24586 comm="syz.6.7755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929e88e969 code=0x7ffc0000
[  484.568507][T24587] loop6: detected capacity change from 0 to 512
[  484.603610][T24587] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  484.612778][T24587] EXT4-fs error (device loop6): __ext4_fill_super:5502: inode #2: comm syz.6.7755: casefold flag without casefold feature
[  484.626261][T24587] EXT4-fs (loop6): get root inode failed
[  484.631914][T24587] EXT4-fs (loop6): mount failed
[  484.696669][T24608] loop0: detected capacity change from 0 to 128
[  484.743742][T24608] syz.0.7760: attempt to access beyond end of device
[  484.743742][T24608] loop0: rw=2049, sector=153, nr_sectors = 8 limit=128
[  484.761110][T24608] syz.0.7760: attempt to access beyond end of device
[  484.761110][T24608] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128
[  484.801995][T24608] syz.0.7760: attempt to access beyond end of device
[  484.801995][T24608] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128
[  484.840888][T24608] syz.0.7760: attempt to access beyond end of device
[  484.840888][T24608] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128
[  484.882663][T24608] syz.0.7760: attempt to access beyond end of device
[  484.882663][T24608] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128
[  484.901397][T24608] syz.0.7760: attempt to access beyond end of device
[  484.901397][T24608] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128
[  484.917639][T24601] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  484.926126][T24601] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  484.934600][T24601] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  484.942971][T24601] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  484.967111][T24608] syz.0.7760: attempt to access beyond end of device
[  484.967111][T24608] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128
[  485.007488][T24608] syz.0.7760: attempt to access beyond end of device
[  485.007488][T24608] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128
[  485.033338][T24608] syz.0.7760: attempt to access beyond end of device
[  485.033338][T24608] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128
[  485.064824][T24608] syz.0.7760: attempt to access beyond end of device
[  485.064824][T24608] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128
[  485.081966][T24608] Buffer I/O error on dev loop0, logical block 353, lost async page write
[  485.090935][T24608] Buffer I/O error on dev loop0, logical block 354, lost async page write
[  485.099870][T24608] Buffer I/O error on dev loop0, logical block 355, lost async page write
[  485.100010][T24614] vxcan1 speed is unknown, defaulting to 1000
[  485.114541][T24614] syz2: Port: 1 Link DOWN
[  485.117528][T24608] Buffer I/O error on dev loop0, logical block 356, lost async page write
[  485.127483][T24610] syz1: Port: 1 Link DOWN
[  485.141857][T24626] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  485.156172][T24608] Buffer I/O error on dev loop0, logical block 357, lost async page write
[  485.157262][T24626] vxcan1 speed is unknown, defaulting to 1000
[  485.164945][T24608] Buffer I/O error on dev loop0, logical block 358, lost async page write
[  485.183103][T24613] vxcan1 speed is unknown, defaulting to 1000
[  485.191458][T24608] Buffer I/O error on dev loop0, logical block 359, lost async page write
[  485.354350][T24644] xt_CT: You must specify a L4 protocol and not use inversions on it
[  485.376809][T24644] lo: entered allmulticast mode
[  485.400191][T24638] loop6: detected capacity change from 0 to 512
[  485.418034][T24644] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7769'.
[  485.429607][T24638] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  485.440494][T24644] lo: left allmulticast mode
[  485.466291][T24638] EXT4-fs (loop6): 1 truncate cleaned up
[  485.497322][T24638] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  485.572129][T24653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7770'.
[  485.677551][T24657] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7770'.
[  485.763285][ T9289] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  485.815856][T24662] netlink: 'syz.5.7773': attribute type 10 has an invalid length.
[  485.849883][T24665] loop6: detected capacity change from 0 to 1024
[  485.856851][T24665] EXT4-fs: Ignoring removed orlov option
[  485.865613][T24665] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  486.336110][T24665] ==================================================================
[  486.344217][T24665] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark
[  486.352137][T24665] 
[  486.354466][T24665] write to 0xffff8881172ae1b4 of 4 bytes by task 24670 on cpu 0:
[  486.362185][T24665]  xas_set_mark+0x13d/0x150
[  486.366697][T24665]  __folio_start_writeback+0x1ea/0x440
[  486.372181][T24665]  ext4_bio_write_folio+0x591/0x9d0
[  486.377401][T24665]  mpage_process_page_bufs+0x488/0x5d0
[  486.382869][T24665]  mpage_prepare_extent_to_map+0x791/0xb80
[  486.388693][T24665]  ext4_do_writepages+0xa3b/0x21d0
[  486.393818][T24665]  ext4_writepages+0x183/0x320
[  486.398603][T24665]  do_writepages+0x1d8/0x480
[  486.403209][T24665]  file_write_and_wait_range+0x16e/0x2f0
[  486.408846][T24665]  generic_buffers_fsync_noflush+0x46/0x120
[  486.414757][T24665]  ext4_sync_file+0x1c3/0x6c0
[  486.419436][T24665]  vfs_fsync_range+0x116/0x130
[  486.424200][T24665]  ext4_buffered_write_iter+0x358/0x3c0
[  486.429848][T24665]  ext4_file_write_iter+0x3b2/0xf80
[  486.435044][T24665]  iter_file_splice_write+0x5f2/0x980
[  486.440422][T24665]  direct_splice_actor+0x160/0x2c0
[  486.445555][T24665]  splice_direct_to_actor+0x305/0x680
[  486.450932][T24665]  do_splice_direct+0xd9/0x150
[  486.455723][T24665]  do_sendfile+0x40a/0x690
[  486.460145][T24665]  __x64_sys_sendfile64+0x113/0x160
[  486.465342][T24665]  x64_sys_call+0xfc3/0x2e10
[  486.469924][T24665]  do_syscall_64+0xc9/0x1a0
[  486.474424][T24665]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  486.480335][T24665] 
[  486.482655][T24665] read to 0xffff8881172ae1b4 of 4 bytes by task 24665 on cpu 1:
[  486.490283][T24665]  __writeback_single_inode+0x210/0x850
[  486.495825][T24665]  writeback_single_inode+0x16c/0x3f0
[  486.501198][T24665]  sync_inode_metadata+0x60/0x90
[  486.506128][T24665]  generic_buffers_fsync_noflush+0xd8/0x120
[  486.512019][T24665]  ext4_sync_file+0x1c3/0x6c0
[  486.516683][T24665]  vfs_fsync_range+0x116/0x130
[  486.521435][T24665]  ext4_buffered_write_iter+0x358/0x3c0
[  486.526973][T24665]  ext4_file_write_iter+0x3b2/0xf80
[  486.532161][T24665]  iter_file_splice_write+0x5f2/0x980
[  486.537535][T24665]  direct_splice_actor+0x160/0x2c0
[  486.542649][T24665]  splice_direct_to_actor+0x305/0x680
[  486.548026][T24665]  do_splice_direct+0xd9/0x150
[  486.552818][T24665]  do_sendfile+0x40a/0x690
[  486.557263][T24665]  __x64_sys_sendfile64+0x113/0x160
[  486.562458][T24665]  x64_sys_call+0xfc3/0x2e10
[  486.567048][T24665]  do_syscall_64+0xc9/0x1a0
[  486.571545][T24665]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  486.577449][T24665] 
[  486.579774][T24665] value changed: 0x0a000021 -> 0x04000021
[  486.585474][T24665] 
[  486.587798][T24665] Reported by Kernel Concurrency Sanitizer on:
[  486.593936][T24665] CPU: 1 UID: 0 PID: 24665 Comm: syz.6.7774 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) 
[  486.606443][T24665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  486.616487][T24665] ==================================================================
[  486.775210][ T9289] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.