last executing test programs:

6.9656965s ago: executing program 4 (id=376):
r0 = socket$netlink(0x10, 0x3, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
kexec_load(0x100000001, 0x0, 0x0, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80d0}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = gettid()
ppoll(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_open_procfs(r3, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

6.039456935s ago: executing program 4 (id=382):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x48090)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r3, 0x0, 0x4}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0)
mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x43, 0x0, 0x7ffc1ffa}]})
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300000000000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18)
r6 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmmsg(0xffffffffffffffff, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000e00)=""/23, 0x17}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007c80), 0x0, 0x800)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000010101020000000000000000000000034d5c98ae6d3f199438bedb2de36dbde78bec842b90a9a5d33c679c7365186561f671a8639860dbc52540f764ddd62eef9edf4f6927e3b15378f2bd1c33fa078e50d12fc6552ca6a40d49452b4a44ad1c69b0897b73ed1e4157043afa8f0a6b1824fd92f7adf2cb75cb24e6bb1a02cec076955ddbf79dadfcf51e5ebc36db6e81fa4c76e3541fe9"], 0x14}, 0x1, 0x0, 0x0, 0x8008001}, 0x24008854)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xdb22b7ddfcc82a8d, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.612564834s ago: executing program 4 (id=389):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0xfff1, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x60, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xc, 0xc89f, 0xffff5ef5, 0x0, 0x19, 0x3}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x803}, 0x20004004)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="7961000000a00bfef5007e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000f40)={'filter\x00', 0x10, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e5fce0c960bc", @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @broadcast, @loopback, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x2, 0x0}, @generic={0x66, 0x0, 0x0, 0x0, 0x2}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r5}, 0x18)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
creat(&(0x7f0000000580)='./file0\x00', 0x30)
r7 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000000380))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
creat(&(0x7f0000000200)='./file0\x00', 0x90)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x42, 0x1ff)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000000))

3.600360654s ago: executing program 1 (id=391):
setfsgid(0xee00)
r0 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r1)
munmap(&(0x7f0000901000/0x3000)=nil, 0x3000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x300, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e77, 0x20000000, 0x94a, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = gettid()
sched_setscheduler(r2, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r7, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
keyctl$set_timeout(0xf, 0x0, 0x1)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0)
r8 = syz_open_procfs(r0, &(0x7f0000000100)='stack\x00')
pread64(r8, &(0x7f0000000140)=""/15, 0xf, 0x4)

2.724079307s ago: executing program 4 (id=398):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000280)={0x1f, @none}, 0x8)
listen(r0, 0x8)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000440))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
connect$tipc(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c)
connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x10, 0x0, {0xa, 0x4e20, 0x0, @loopback, 0x5}}}, 0x32)
writev(r2, &(0x7f0000000500)=[{&(0x7f0000000540)="dd", 0x1}], 0x1)
socket$rds(0x15, 0x5, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8919, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @loopback}})
socket$inet6(0xa, 0x3, 0x4)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000007c0))
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r7=>0x0})
waitid(0x1, 0x0, 0x0, 0x4, 0x0)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf2500000000", @ANYRES32=r7, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80)

2.57140738s ago: executing program 1 (id=400):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6_vti0\x00', 0x0})
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)
faccessat(r0, &(0x7f0000000000)='./file0\x00', 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000001680)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r4, 0x0, 0x415}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
r7 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = fsmount(r7, 0x0, 0x0)
setreuid(0x0, 0xee01)
syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58)

2.357863884s ago: executing program 3 (id=401):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x48090)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r3, 0x0, 0x4}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0)
mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x43, 0x0, 0x7ffc1ffa}]})
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300000000000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18)
r6 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmmsg(0xffffffffffffffff, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000e00)=""/23, 0x17}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007c80), 0x0, 0x800)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000010101020000000000000000000000034d5c98ae6d3f199438bedb2de36dbde78bec842b90a9a5d33c679c7365186561f671a8639860dbc52540f764ddd62eef9edf4f6927e3b15378f2bd1c33fa078e50d12fc6552ca6a40d49452b4a44ad1c69b0897b73ed1e4157043afa8f0a6b1824fd92f7adf2cb75cb24e6bb1a02cec076955ddbf79dadfcf51e5ebc36db6e81fa4c76e3541fe9"], 0x14}, 0x1, 0x0, 0x0, 0x8008001}, 0x24008854)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xdb22b7ddfcc82a8d, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.357581953s ago: executing program 4 (id=402):
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a000000010000000c0000000900000000"], 0x50)
fcntl$dupfd(r3, 0x0, r4)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet(0x2, 0x2, 0x1)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r9}, &(0x7f0000000a00), &(0x7f0000000400)=r8}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r9}, &(0x7f0000000880), &(0x7f00000008c0)=r8}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
write(r1, &(0x7f0000000740)="cc", 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7fffeffd)

1.93755021s ago: executing program 0 (id=404):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000780)={[{@data_err_ignore}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@delalloc}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}, {@quota}]}, 0x41, 0x553, &(0x7f0000000a40)="$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")
symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
readlink(0x0, &(0x7f0000001200)=""/4096, 0x1000)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)='%pS    \x00'}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0)
set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = syz_open_procfs(0x0, 0x0)
preadv(r3, 0x0, 0x0, 0x1000000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sync()
sync()
setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0)
bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0xffff}}, 0x14)

1.567767026s ago: executing program 2 (id=405):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x7ff}, 0x94)
r1 = dup(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB="0000000000ea7a9881f64dff00"/24, @ANYRES32=0x0, @ANYRES32], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00')
writev(r3, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1)
write$P9_RLERRORu(r1, 0x0, 0x53)
prctl$PR_SET_SECCOMP(0x16, 0x3, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x9, 0x4, 0x0, 0x40ffff}]})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x1, r4}, 0x38)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0x2}, 0x18)
capset(&(0x7f0000019340)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0xe})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000300)='console\x00', r6}, 0x18)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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")
chdir(&(0x7f0000000000)='./file0\x00')
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
writev(r7, &(0x7f0000000180)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000b00)="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", 0x12c}], 0x2)

1.566945996s ago: executing program 1 (id=406):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095000032000000008214cbd59e2c30c008d59aa8d926cee70c43e24111d57435767c5d1a157f3bf63177a1b1a4d2f86af40414be708f1b19ae854c5e489fb82699c9d0acdb3d7c6a261d680d6ac23a1a1575ea4946776845bf06d9e9e5c61c"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8825, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x749}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40042, 0x0)
close(r2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x0, 0x37}, 0x28)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10)
r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x0, 0xffffffff, 0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r8)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r7)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000003040)={'batadv0\x00', <r11=>0x0})
sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r11, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x24008005}, 0x20040084)
sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x3c, r9, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010000304fcffffff3f00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0)

1.493538027s ago: executing program 0 (id=407):
r0 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x29)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10)
sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000140)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
shutdown(r1, 0x1)
recvfrom(r1, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0)
r2 = getpgrp(0x0)
r3 = syz_open_procfs(r2, &(0x7f0000000180)='task\x00')
getdents64(r3, 0x0, 0x0)
r4 = syz_open_procfs(0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x580, 0xfd63, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r8}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
tgkill(0x0, 0x0, 0x4)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000680)='spmi_read_begin\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18)
write$selinux_user(r4, &(0x7f0000000600)={'system_u:object_r:chkpwd_exec_t:s0', 0x20, 'unconfined_u\x00'}, 0x30)
r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1a, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000009f8241bf3eb1"], &(0x7f0000000240)='GPL\x00', 0x4, 0x100d, &(0x7f0000002500)=""/4109, 0x0, 0xc}, 0x94)
keyctl$chown(0x4, r9, 0xee00, 0x0)

1.441656508s ago: executing program 2 (id=408):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x54}}, 0x48010)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x90, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x8}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18937}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x5}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x1c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x4}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0xfffffffc, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a3200000000e4040000060a010400000000000000000500000008000b40000000000900010073797a30000000000800"], 0x558}}, 0x40)
open(&(0x7f0000000480)='./bus\x00', 0x1050c1, 0x170)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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")
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x20)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000780)={{{@in=@empty, @in6=@private0, 0x4e24, 0x1, 0x4e20, 0xc, 0xa, 0xa0, 0x60, 0x29}, {0x8000, 0x6, 0x1, 0xfffffffffffffff7, 0x8, 0x4, 0x4, 0x101}, {0x80000001, 0xa5, 0x46b, 0x6}, 0x1, 0x6e6bbd, 0x2}, {{@in=@multicast1, 0x4d5, 0x33}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3503, 0x3, 0x2, 0xff, 0x1, 0x10001, 0x10001}}, 0xe8)
r4 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0)
preadv2(r4, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0)
r5 = getpid()
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10)
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x1204018, &(0x7f0000000140)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x56a, &(0x7f0000000580)="$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")
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
waitid(0x0, r5, &(0x7f00000006c0), 0x8, &(0x7f0000000880))
r7 = socket(0x10, 0x803, 0x0)
sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
connect$pppl2tp(r4, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @local}, 0x0, 0x3, 0x0, 0x4}}, 0x2e)

1.415232608s ago: executing program 0 (id=409):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r1, 0x0, 0xc8)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0x20, &(0x7f0000000940)={&(0x7f0000000800)=""/124, 0x7c, <r2=>0x0, &(0x7f00000008c0)=""/128, 0x80}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r3 = fcntl$getown(r1, 0x9)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000400)=<r4=>0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @host}, 0x10)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000680)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r8, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000640)={0x22200, &(0x7f00000004c0), &(0x7f0000000500)=<r9=>0x0, &(0x7f0000000540), {0x26}, &(0x7f0000000580)=""/25, 0x19, &(0x7f00000005c0)=""/46, &(0x7f0000000600)=[0x0, 0x0], 0x2}, 0x58)
fcntl$getownex(r1, 0x10, &(0x7f00000006c0)={0x0, <r10=>0x0})
r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x10000, 0x0)
syz_clone3(&(0x7f0000000780)={0x80a000, &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000280), {0x1f}, &(0x7f00000002c0)=""/216, 0xd8, &(0x7f00000003c0)=""/30, &(0x7f0000000700)=[r3, r4, r9, r10], 0x4, {r11}}, 0x58)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), 0x0}, 0x20)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r12, 0x0, 0x6}, 0x18)
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
r13 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_mreqsrc(r13, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8)

1.371736869s ago: executing program 4 (id=410):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
pipe(&(0x7f00000008c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x7, 0x9)
write$P9_RWRITE(r2, &(0x7f0000000040)={0xb, 0x77, 0x87}, 0x10c00)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$usbfs(0x0, 0x77, 0x41341)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r6, 0x0, 0x415}, 0x18)

1.370580549s ago: executing program 0 (id=420):
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4600, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x7, 0x7ffc1ff3}]})
signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x9]}, 0x8)
r2 = dup(r1)
r3 = open(0x0, 0x40542, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r4}, 0x18)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x19)
r5 = syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x200)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x18)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3f0, 0x0, 0x25, 0x148, 0x158, 0x60, 0x358, 0x2a8, 0x2a8, 0x358, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x158, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x5e, 0x0, 0x9, 0x0, 0x2, 0xffffffff, 0x7, 0x18}}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@broadcast, [0x0, 0xffffff00, 0x0, 0xff], 0x4e21, 0x3c, 0x5, 0x4e21, 0x8, 0x8}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x1a0, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x2, 0x4, 'syz0\x00', 0x4}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x0, 0x80000, 0x8000}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x450)
write$UHID_DESTROY(r5, &(0x7f0000000080), 0x4)
syz_io_uring_setup(0x10f, &(0x7f0000000340)={0x0, 0x4db1, 0x2, 0x2, 0xcd, 0x0, r5}, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)
process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)

1.317017799s ago: executing program 3 (id=411):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x4001a, &(0x7f0000000280)={[{@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@commit={'commit', 0x3d, 0x6}}]}, 0x2c, 0x516, &(0x7f0000000740)="$eJzs3c9vG1kdAPCvnV9umm6ysIcFAVuWhYKq2om7G632wnJBQqvVIi2cEGqjxI2i2HEUO6UJkUjPXJGoxAn+BA5IHJB64s4NblzKAalABWqQEPJq7HGbOHFiNXHcxp+PNPJ7MxN/v8/SvBc/2/MCGFpXI2I3IsYj4nZETKf7M+kWH7a25LynT3YW957sLGai0fj0n6PpmTuL7fPbLqfPmYv4JKlPHBG3trW9ulAulzbSeqFeWS/UtrZvrFQWlkvLpbVicX5ufvb9m+8Vz6ytb1V++/i7Kx/98A+///KjP+1+66dJzt9OjyVtO7NA+7Rel7GY2rcveeU+6kewARhJ2zM+6ER4IdmI+FxEvJ2Wn8kNLicAoL8ajeloTO+vd5fp4RwA4OWXvOefikw2n77/n4psNp9vzuHl3ojJbLlaq1+/U91cW4rmHNZMjGXvrJRLs+lc4UyMZZL6XLP8vF7sqN+MiNcj4hcTl5r1/GK1vDSof3oAYMhd7hj//zPRGv974BMCAHiVGckBYPgcHv/HBpIHAHB+vP8HgOGzb/w/6re6AMAFlOv47T8AcPGdOP//Zvzsx+eTCgBwTnz+DwBD5fsff5xsjb30/tdLd7c2V6t3byyVaqv5yuZifrG6sZ5frlaXm/fsqZz0fOVqdX3u3di8V6iXavVCbWv7VqW6uVa/1byv962SHxYAwOC9/tbDv2QiYveDS80t2ms5+EIAXHgucxheI4NOABiY0UEnAAyM+Xggc8Lxrl8RetD9by6dIh+g/659ocv8//H/G/y/cT7pAX1k/h+G1+nm/80ewKvM/D8Mr0YjYz1/ABgyPbyD9xVBuOBe+PN/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGGJTzS2TzadrgU9FNpvPR1yJiJkYy9xZKZdmI+K1iPjzxNhEUp8bdNIAwCll/55J1/+6Nv3OVOfR8cx/J5qPEfGTX336y3sL9frGXLL/X8/21x+k+4tHBpjofxsAgH1GO3e0x+n2ON5e3/fpk53F9naeCT7+Tmtx0STuXrq1U28ln4uxiJj8d+ZAYzJntDDx7v2IeLOz/dlnx2fSlU874yexr/QtfjRbOHUgfvZA/GzzWOsxeS0+fwa5wLB5mPQ/Hx51/WXjavMxvf4yBzvTXPz8cOf6Atr9316js/9rXe+fXMk1+5qj+r+rvcZ494/f63rs/kjji6MRe4f63/aK0Llm6aj47/QY/69f+srb3Y41fh1xLY6L3yoV6pX1Qm1r+8ZKZWG5tFxaKxbn5+Zn37/5XrHQnKMutGeqD/vHB9df697+iMku8XMntP/rPbb/N/+7/aOvHhP/m187Kn423jgmfjImfqPH+AuTv+u6fHcSf6lL+0cPxB8/8HfJvus9xn/0t+2lHk8FAM5BbWt7daFcLm0onLaQ69czX35JGqhwTGEkyu35qJcin1MXBtwxAX33/KIfdCYAAAAAAAAAAAAAAEA3tR+kt/zr44/hBt1GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALq7PAgAA//+iDcmp")
bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[], 0x48)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
socket$isdn_base(0x22, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000400)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x84, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f0000000300)={0x1d, r2}, 0x10)
sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/12, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000580)=ANY=[], 0x0)
close_range(r0, 0xffffffffffffffff, 0x200000000000000)

1.316318239s ago: executing program 1 (id=412):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
unshare(0x6020480)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x0, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
gettid()
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/fib_triestat\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r6, 0x0, 0x7}, 0x18)
close_range(r4, 0xffffffffffffffff, 0x0)

1.2587772s ago: executing program 2 (id=413):
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r3, @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file1\x00', 0x100c085, &(0x7f0000000d00)=ANY=[@ANYRES8=0x0, @ANYBLOB="c0da5b74006e9c47add458a1bd748b7ffa5628dc52f84873cbe6a43cfd29e4198255a0610d383b0e46b2b6457282a9f3caef22979e54c145e6a0ce2850a890af7c4e1fa3628453c70aae32270b0042f1532cf08030eccdca96e2c97aae42cf5d9ec5f0afa4fcc53c8f9289677038d09ae2b1bd2271e0a76e6324df3a2b01a9ed0277d7e8d6f7d463ae62692faa55bdb43dc2bea18eea4a635951fd0a220a835fa24d0700c8f8c245d1d7638b2cae5ed3bec0d2f0415ddff7884bb34ab0cb1598e9c7b92a29005e4090ede480b3412f5c33da5e7c8672bda19fd3d989f8336d69d9e70de142973e7e1f53987b2d"], 0x10, 0x7f4, &(0x7f0000000e40)="$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")
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r8, 0x40189429, &(0x7f0000000000)={0x1, 0x8, 0x4})
prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x8, &(0x7f0000000300)=ANY=[@ANYRES8=r6], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
unshare(0x6a040000)
mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCDELRT(r9, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @empty}, {0x2, 0x4e21, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0xfffffffffffffffe, 0xfff5})
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xffffffffffffffff)

1.121556933s ago: executing program 0 (id=414):
syz_open_dev$tty20(0xc, 0x4, 0x1)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb7e, &(0x7f0000000c40)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r2, 0x0, 0x88000cc, 0x0)
fcntl$setpipe(r1, 0x407, 0x100004)
socket$nl_audit(0x10, 0x3, 0x9)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000618120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='ext4_mark_inode_dirty\x00', r4, 0x0, 0x6a7}, 0x18)
write$eventfd(r1, &(0x7f0000000240), 0xffffff14)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
time(0x0)
fcntl$lock(0xffffffffffffffff, 0x25, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

902.187836ms ago: executing program 2 (id=415):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private2, @in=@local}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000000)=0xe8)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3f, 0x7}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x8, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001980)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94)
stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180))
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10)
r4 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, r4)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000500)={0x2, 0xfc, 0x8})

862.262727ms ago: executing program 2 (id=416):
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000000), 0xfc, 0x59c, &(0x7f0000001500)="$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")
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x3, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet6_int(r7, 0x29, 0x4b, 0x0, &(0x7f0000000340))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18)
write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
rename(&(0x7f0000000000)='./file1\x00', 0x0)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0)

758.941209ms ago: executing program 1 (id=417):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x7}, 0x18)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x25000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)={@ifindex, 0xffffffffffffffff, 0x32}, 0x20)
socket$pppl2tp(0x18, 0x1, 0x1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3, 0x0, 0x0, 0xc020}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff}, {}, {0x0, 0x6}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x3, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x4, 0x0, 0x8510}, {0xffff, 0x0, 0x0, 0x0, 0xffff8001}, {}, {}, {}, {0x4000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0xfffffffc, 0x200}, {}, {}, {0x7}, {0x0, 0x1}, {}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x2, 0x0, 0x0, 0x4, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0x2}, {}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0xbd}, {}, {0x2, 0x9, 0x20000000}, {}, {0xffffffff}, {}, {0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d}, {0x0, 0x0, 0x100}, {0x8, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800}, {}, {0x0, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {}, {0x1}, {}, {0x3}, {0x5}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x1}, {0x3}, {0x5}, {}, {0x3}, {}, {}, {0x0, 0x890479f7b5214b20}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3, 0x1}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2}, 0x50)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x80d0}, 0x0)

607.152341ms ago: executing program 3 (id=418):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x3, 0x0, 0xfffffffd}, 0x10)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYRES32=0x0, @ANYBLOB="20f019000000009cb42212619997d000000000"], 0x24}}, 0x0)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f0000000280)=ANY=[], 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x1}, 0x18)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000280)='3', 0x1}], 0x1)
r5 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b00)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800"/12, @ANYRES16=r0, @ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvmsg$unix(r6, &(0x7f0000000640)={&(0x7f00000002c0), 0x6e, &(0x7f0000000400)=[{&(0x7f0000000380)=""/118, 0x76}, {0x0}], 0x2, &(0x7f0000000440)=[@cred={{0x1c}}], 0x20}, 0x1)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r7, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000100039042cbd", @ANYRES32=r7, @ANYBLOB="830004e4ffffad8030bc1c8b8afe94df1e56f3999fff0020"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r9, 0x0, 0xa}, 0x18)
r10 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000200))
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4056, &(0x7f0000000200)={[{@noload}, {@nombcache}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@errors_remount}, {@lazytime}, {@minixdf}, {@noquota}, {@usrjquota}]}, 0x1, 0x451, &(0x7f0000000680)="$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")

565.053412ms ago: executing program 3 (id=419):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
cachestat(r2, &(0x7f0000000040), 0x0, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0)
sendfile(r4, r4, 0x0, 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r5, 0x0, 0x4}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff9}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x13, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
nanosleep(&(0x7f00000000c0), 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r6], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r8 = getpid()
r9 = syz_pidfd_open(r8, 0x0)
setns(r9, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)

536.825102ms ago: executing program 3 (id=421):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}})
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r3, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000380)={{0x4}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x7, 0x100001, 0xfffffffd, 0x0, 0x0, 0x6})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18)
creat(&(0x7f0000000100)='./file0\x00', 0x3)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000440)='syzkaller\x00', 0x3, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b00)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./file0\x00', &(0x7f0000000a80)=[0x7fff], 0x0, 0x4, 0x1, 0x1}}, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4c885)
io_setup(0x3, &(0x7f0000000540)=<r6=>0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
io_submit(r6, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r7, 0x0}])
write$vga_arbiter(r3, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'netdevsim0\x00'})
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r8, 0x29, 0x41, 0x0, 0x68)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kfree\x00', r9}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)

57.45004ms ago: executing program 0 (id=422):
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$eJzs3E1vG0UfAPD/bl7apn1qV3oOvFwsQCISImnSFqgEEhEXDu2JHjhixWmJ6jSoMRKtIl4E4gYSiA8AB+AjcIQD3wHOwAEqRSgHUm5Ga+86Jn5pQx0skt9PGnlmZ+OZ9WTWu+PZCeDIqkTEixExERFnI6KUb0/zEO+2Q7bfzvbm8p/bm8tJNJuv/J5Ekm8r3ivJX0/mbzCbRqQfJPFon3I3bt2+Xq3XV27m6fnG2hvzG7duP726Vr22cm3lxuIz585fuPDcxcVnR3asW2vJR098demXTz6sffrDb9+Ws/qeyvO6j2NUKlHpfCZ7XRx1YWN2vCueTI6xIgAADJXm1/6Trev/UkzE7sVbKT7+fqyVAwAAAEai2SxeAQAAgMMrce8PAAAAh1wxD2Bne3O5CGOcjsC/bGspIsrt9r+bh3bOZOeZ3qk9z/eOUiUiXj5+eTELcUDPYQMAAAAcZd8ttRf+6x3/S+Ohrv1ORMRMsbbfCFX2pHvHf9I7Iy6SLltLEc9HxN2e8b+02KU8kaf+1xoqnEqurtZXzkbE6YiYjaljWXphSBlvP3b960F53eN/n//86kJWfva6u0d6Z/LY3/+mVm1UH+SY2bX1XsQjk/3aP+mM+Xavk/lPvLa688KgvKz9s/YuQm/7c5CaX0Q82bf/765cmgxfn3W+dT6YL84KvX469eX7g8rv7v9ZyMovfgvg4GX9f2Z4+7fWye2s17ux/zK++ePyj4Py7t3+/c//08mVVgWn821vVRuNmwsR08ml3u3+mzqKz6P4vLL2n328//d/cf2X5N/9p7vWh+4x5AfCl945c2VQnv4/Xln71/bV//cfeX3m4dlB5d9f/z/fqkzxJq7/7u1+G2jc9QQAAAAAAABgNNLW3L4knevE03Rurj3P9/8xk9bXNxpPXV1/80atPQewHFNpMdOr1DUfdKH9GHknvbgnfS4izkTEZ6UTrfTc8nq9Nu6DBwAAgCPi5ID7/8yvAx/2AAAAAP5zyuOuAAAAAHDg3P8DAADAofYg6/qLiIgc1si4z0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAR9tfAQAA///8h8MD")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a000000010000000c0000000900000000"], 0x50)
fcntl$dupfd(r3, 0x0, r4)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet(0x2, 0x2, 0x1)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r9}, &(0x7f0000000a00), &(0x7f0000000400)=r8}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r9}, &(0x7f0000000880), &(0x7f00000008c0)=r8}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
write(r1, &(0x7f0000000740)="cc", 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7fffeffd)

56.78302ms ago: executing program 1 (id=423):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x103000, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006000200010000001ffe02000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010)
sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x3c, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xca2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4d844}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r6 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000640)={0x2c, r10, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x141}, 0x0)
getrlimit(0x0, &(0x7f0000000000))
ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000400)={'pimreg0\x00', 0xe, 0x9f})
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x37, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r11}, 0x18)
ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000280)={0x4, 0x8, 0xde0})
io_setup(0x6, &(0x7f0000001000)=<r12=>0x0)
pipe(&(0x7f00000002c0))
io_getevents(r12, 0xffffffffffffffff, 0x3, &(0x7f0000000200)=[{}, {}, {}], &(0x7f0000001140)={0x0, 0x3938700})

56.19466ms ago: executing program 3 (id=424):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10)
r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r1, 0x8, 0x0, 0x0, 0x14}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432})
readv(r3, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/220, 0xdc}], 0x1)
r4 = socket$kcm(0x10, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@jqfmt_vfsv1}, {}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@discard}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETA(r5, 0x560a, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x20, 0x2, "08000000f28f00"})
chdir(&(0x7f0000000240)='./file0\x00')
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x200000000000007e, &(0x7f0000000400)=ANY=[@ANYRES8, @ANYRESDEC=r2], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r6}, 0x18)
r7 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f0000000000), 0x4)
getpid()
openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x0)

0s ago: executing program 2 (id=426):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000600))
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x40000)
sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c894}, 0x10)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8)
read(r3, &(0x7f0000000740)=""/384, 0x200008c0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000b80)={'syztnl1\x00', &(0x7f0000000b00)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0x2, 0x10000, 0x2, @remote, @private2, 0x700, 0x8, 0x1, 0x2}})
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000d40)={'ip6_vti0\x00', &(0x7f0000000cc0)={'ip6tnl0\x00', r2, 0x29, 0x1, 0xf9, 0x9f4, 0x17, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x8028, 0x0, 0x29, 0x5}})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x3c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x748, 0xffff8000}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x605f}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x4}, @TCA_HTB_DIRECT_QLEN={0x1, 0x5, 0xa9}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x3}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20002044}, 0x44080)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001811000062526c78603556a9d958f553e89369d0fc792d3c34c0e1ac212f8d9c9390f7d7007ab505a561fb6a0c2d636c23505416de51fc6193fd984c6af1fd361d5463d5d35a6ccfe7330c05907557540738977484c2b3c83c49af2be6084346dc6e7b4e2b0c2fb57c4b82db63b91d34f94f0254fa207177f11f739785e98a3a789c8829305aec374b5d5862a169299fa70ede115acd71bfee9aca6eeb68b5df64a129760a21afa3eec1198b8465717b76199e6f40336507a70a6449e11ac45b6f81c96b35", @ANYRES8=r6, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0xa0142, 0x0)
r12 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
sendfile(r12, r11, 0x0, 0x3a)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x74, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}]}}]}, 0x74}}, 0x24040084)

kernel console output (not intermixed with test programs):

arding state
[   38.858060][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.865131][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.887314][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.896088][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.903241][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.929933][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.965654][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.982005][ T3313] 8021q: adding VLAN 0 to HW filter on device team0
[   39.029090][ T3328] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.036212][ T3328] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.045165][ T3328] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.052323][ T3328] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.073148][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   39.101446][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.135637][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.190314][ T3306] veth0_vlan: entered promiscuous mode
[   39.211462][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.229227][ T3307] veth0_vlan: entered promiscuous mode
[   39.236539][ T3306] veth1_vlan: entered promiscuous mode
[   39.257581][ T3306] veth0_macvtap: entered promiscuous mode
[   39.264882][ T3306] veth1_macvtap: entered promiscuous mode
[   39.276901][ T3307] veth1_vlan: entered promiscuous mode
[   39.293187][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.319963][ T3305] veth0_vlan: entered promiscuous mode
[   39.326920][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.342328][ T3305] veth1_vlan: entered promiscuous mode
[   39.350440][ T3306] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.359365][ T3306] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.368183][ T3306] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.376904][ T3306] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.392196][ T3307] veth0_macvtap: entered promiscuous mode
[   39.399152][ T3312] veth0_vlan: entered promiscuous mode
[   39.410043][ T3307] veth1_macvtap: entered promiscuous mode
[   39.426169][ T3312] veth1_vlan: entered promiscuous mode
[   39.435390][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.447914][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.477081][ T3305] veth0_macvtap: entered promiscuous mode
[   39.484202][ T3313] veth0_vlan: entered promiscuous mode
[   39.496004][ T3307] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.504939][ T3307] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.513647][ T3307] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.522474][ T3307] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.533353][ T3306] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   39.535192][ T3313] veth1_vlan: entered promiscuous mode
[   39.554632][ T3312] veth0_macvtap: entered promiscuous mode
[   39.561324][ T3305] veth1_macvtap: entered promiscuous mode
[   39.578891][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.597826][ T3312] veth1_macvtap: entered promiscuous mode
[   39.618282][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.628829][ T3313] veth0_macvtap: entered promiscuous mode
[   39.638524][ T3313] veth1_macvtap: entered promiscuous mode
[   39.645009][ T3475] loop4: detected capacity change from 0 to 512
[   39.651706][ T3305] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.653464][ T3475] EXT4-fs: Ignoring removed mblk_io_submit option
[   39.660676][ T3305] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.675848][ T3305] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.684670][ T3305] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.684969][ T3475] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   39.702107][ T3475] EXT4-fs (loop4): orphan cleanup on readonly fs
[   39.708555][ T3475] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[   39.711968][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.729742][ T3475] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.5: attempt to clear invalid blocks 2 len 1
[   39.745090][ T3475] EXT4-fs (loop4): Remounting filesystem read-only
[   39.751943][ T3475] EXT4-fs (loop4): 1 truncate cleaned up
[   39.760495][ T3475] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   39.777930][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.789192][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.797361][ T3313] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.806245][ T3313] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.815171][ T3313] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.823930][ T3313] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.840930][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.865198][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.873168][ T3312] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.882931][ T3312] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.891691][ T3312] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.900494][ T3312] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.924980][   T29] kauditd_printk_skb: 89 callbacks suppressed
[   39.924992][   T29] audit: type=1326 audit(1752973680.232:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3482 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb68ace9a9 code=0x7ffc0000
[   39.984576][ T3486] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6'.
[   39.990449][   T29] audit: type=1326 audit(1752973680.272:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3482 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb68ace9a9 code=0x7ffc0000
[   39.997566][ T3488] loop1: detected capacity change from 0 to 1024
[   40.016389][   T29] audit: type=1326 audit(1752973680.272:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3482 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb68ace9a9 code=0x7ffc0000
[   40.045856][   T29] audit: type=1326 audit(1752973680.272:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3482 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb68ace9a9 code=0x7ffc0000
[   40.068981][   T29] audit: type=1326 audit(1752973680.272:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3482 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb68ace9a9 code=0x7ffc0000
[   40.092196][   T29] audit: type=1326 audit(1752973680.272:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3482 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb68ace9a9 code=0x7ffc0000
[   40.092414][ T3488] =======================================================
[   40.092414][ T3488] WARNING: The mand mount option has been deprecated and
[   40.092414][ T3488]          and is ignored by this kernel. Remove the mand
[   40.092414][ T3488]          option from the mount to silence this warning.
[   40.092414][ T3488] =======================================================
[   40.115282][   T29] audit: type=1326 audit(1752973680.272:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3482 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb68ace9a9 code=0x7ffc0000
[   40.115314][   T29] audit: type=1326 audit(1752973680.272:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3482 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb68ace9a9 code=0x7ffc0000
[   40.196460][   T29] audit: type=1326 audit(1752973680.272:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3482 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb68ace9a9 code=0x7ffc0000
[   40.219566][   T29] audit: type=1326 audit(1752973680.272:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3482 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb68ace9a9 code=0x7ffc0000
[   40.303622][ T3486] 0ªX¹¦À: renamed from caif0
[   40.313534][ T3486] 0ªX¹¦À: entered allmulticast mode
[   40.318827][ T3486] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[   40.322545][ T3498] sd 0:0:1:0: device reset
[   40.366140][ T3488] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.386425][ T3486] loop4: detected capacity change from 0 to 1024
[   40.393302][ T3486] EXT4-fs: Ignoring removed nobh option
[   40.398962][ T3486] EXT4-fs: Ignoring removed bh option
[   40.435504][ T3486] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.606289][ T3498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'.
[   40.617146][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.819650][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.119274][ T3511] infiniband syz2: set active
[   41.124066][ T3511] infiniband syz2: added veth0_to_bond
[   41.161727][ T3522] loop4: detected capacity change from 0 to 512
[   41.179546][ T3522] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.186003][ T3511] RDS/IB: syz2: added
[   41.192271][ T3522] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   41.206625][ T3511] smc: adding ib device syz2 with port count 1
[   41.212829][ T3511] smc:    ib device syz2 port 1 has pnetid 
[   41.300473][ T3522] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.8: path /2/file1: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0
[   41.480700][ T3522] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 4: comm syz.4.8: path /2/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=11, rec_len=10454, size=2048 fake=1
[   41.689492][ T3522] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 12: comm syz.4.8: path /2/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[   41.720587][ T3522] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 13: comm syz.4.8: path /2/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[   41.782750][ T3522] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 14: comm syz.4.8: path /2/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   41.808638][ T3522] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 15: comm syz.4.8: path /2/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[   41.829381][ T3511] syz.0.9 (3511) used greatest stack depth: 10616 bytes left
[   41.850424][ T3522] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 16: comm syz.4.8: path /2/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[   41.874431][ T3522] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 17: comm syz.4.8: path /2/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   41.911237][ T3522] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #2: block 18: comm syz.4.8: lblock 23 mapped to illegal pblock 18 (length 1)
[   41.940988][ T3522] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 19: comm syz.4.8: path /2/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[   42.049191][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   42.056704][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   42.093929][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   42.101373][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   42.108818][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   42.116290][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   42.123961][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   42.131474][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   42.139051][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   42.146763][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   42.154289][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   42.160646][ T3549] loop0: detected capacity change from 0 to 1024
[   42.161812][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   42.183722][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   42.191194][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   42.198751][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   42.200001][ T3551] netlink: 'syz.2.17': attribute type 3 has an invalid length.
[   42.206224][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   42.221222][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   42.226847][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.228630][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   42.245230][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   42.252653][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   42.260106][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   42.267615][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   42.275063][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   42.282502][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   42.289940][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   42.297380][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   42.304808][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   42.379643][ T3558] SELinux:  Context system_u:object_r:ipmi_device_t:s0 is not valid (left unmapped).
[   42.441097][ T3397] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[   42.547691][ T3575] capability: warning: `syz.1.23' uses deprecated v2 capabilities in a way that may be insecure
[   42.589843][ T3568] fido_id[3568]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   42.811802][ T3582] loop3: detected capacity change from 0 to 764
[   42.897154][ T3582] x_tables: ip6_tables: sctp match: only valid for protocol 132
[   42.913859][ T3575] loop1: detected capacity change from 0 to 256
[   43.075314][ T3585] loop3: detected capacity change from 0 to 764
[   43.093414][ T3585] x_tables: ip6_tables: sctp match: only valid for protocol 132
[   43.198054][ T3590] rock: directory entry would overflow storage
[   43.204312][ T3590] rock: sig=0x4f50, size=4, remaining=3
[   43.209905][ T3590] iso9660: Corrupted directory entry in block 4 of inode 1792
[   43.387760][ T3594] IPv6: Can't replace route, no match found
[   43.493132][ T3593] xt_CT: No such helper "netbios-ns"
[   43.524715][ T3599] C: renamed from team_slave_0 (while UP)
[   43.656540][   T10] Process accounting resumed
[   43.662512][ T3599] netlink: 152 bytes leftover after parsing attributes in process `syz.4.28'.
[   43.699824][ T3605] loop2: detected capacity change from 0 to 2048
[   43.736548][ T3605] Alternate GPT is invalid, using primary GPT.
[   43.743065][ T3605]  loop2: p2 p3 p7
[   43.889706][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[   43.894181][ T3534] udevd[3534]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory
[   43.899941][ T3515] udevd[3515]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[   44.050667][ T3623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'.
[   44.062895][ T3623] wireguard0: entered promiscuous mode
[   44.068468][ T3623] wireguard0: entered allmulticast mode
[   44.316844][ T3631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.38'.
[   44.646196][ T3636] loop3: detected capacity change from 0 to 2048
[   44.648046][ T3638] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   44.660439][ T3638] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98
[   44.669540][ T3636] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.770888][ T3643] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11)
[   44.777586][ T3643] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   44.785132][ T3643] vhci_hcd vhci_hcd.0: Device attached
[   44.942350][   T29] kauditd_printk_skb: 1192 callbacks suppressed
[   44.942363][   T29] audit: type=1326 audit(1752973685.242:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3629 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff223a05967 code=0x7ffc0000
[   44.983694][    C1] hrtimer: interrupt took 49272 ns
[   45.281652][   T29] audit: type=1326 audit(1752973685.282:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3629 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff2239aab89 code=0x7ffc0000
[   45.304931][   T29] audit: type=1326 audit(1752973685.282:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3629 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff223a05967 code=0x7ffc0000
[   45.328121][   T29] audit: type=1326 audit(1752973685.282:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3629 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff2239aab89 code=0x7ffc0000
[   45.351261][   T29] audit: type=1326 audit(1752973685.282:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3629 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff223a05967 code=0x7ffc0000
[   45.374707][   T29] audit: type=1326 audit(1752973685.282:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3629 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff2239aab89 code=0x7ffc0000
[   45.398144][   T29] audit: type=1326 audit(1752973685.282:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3629 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff223a0e9a9 code=0x7ffc0000
[   45.421260][   T29] audit: type=1326 audit(1752973685.312:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3629 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff223a05967 code=0x7ffc0000
[   45.444477][   T29] audit: type=1326 audit(1752973685.312:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3629 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff2239aab89 code=0x7ffc0000
[   45.467855][   T29] audit: type=1326 audit(1752973685.312:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3629 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff223a0e9a9 code=0x7ffc0000
[   45.746762][ T3644] vhci_hcd: connection closed
[   45.805058][ T3661] bridge0: entered promiscuous mode
[   45.815102][ T3328] vhci_hcd: stop threads
[   45.819358][ T3328] vhci_hcd: release socket
[   45.823821][ T3328] vhci_hcd: disconnect device
[   45.854286][ T3660] loop2: detected capacity change from 0 to 1024
[   45.861214][ T3660] EXT4-fs: Ignoring removed oldalloc option
[   45.875321][ T3661] bridge0: port 3(macsec1) entered blocking state
[   45.881773][ T3661] bridge0: port 3(macsec1) entered disabled state
[   45.901508][ T3661] macsec1: entered allmulticast mode
[   45.906986][ T3661] bridge0: entered allmulticast mode
[   45.918151][ T3661] macsec1: left allmulticast mode
[   45.918637][ T3660] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled
[   45.923202][ T3661] bridge0: left allmulticast mode
[   45.939504][ T3661] bridge0: left promiscuous mode
[   45.956108][ T3660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.323454][ T3674] loop1: detected capacity change from 0 to 512
[   46.476744][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.544183][ T3674] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.556937][ T3674] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   46.942143][ T3678] loop3: detected capacity change from 0 to 2048
[   47.040030][ T3678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.305760][ T3678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.49'.
[   47.336996][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.354628][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.386411][ T3691] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53264 sclass=netlink_audit_socket pid=3691 comm=syz.0.54
[   47.399941][ T3691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.54'.
[   47.435916][ T3691] hsr_slave_0 (unregistering): left promiscuous mode
[   47.542807][ T3689] loop4: detected capacity change from 0 to 1024
[   47.562097][ T3689] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[   47.574601][ T3689] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   47.590490][ T3689] EXT4-fs error (device loop4): ext4_get_journal_inode:5796: inode #32: comm syz.4.53: iget: special inode unallocated
[   47.605560][ T3689] EXT4-fs (loop4): Remounting filesystem read-only
[   47.612868][ T3689] EXT4-fs (loop4): no journal found
[   47.619810][ T3689] EXT4-fs (loop4): can't get journal size
[   47.627739][ T3695] random: crng reseeded on system resumption
[   47.668349][ T3689] EXT4-fs (loop4): failed to initialize system zone (-117)
[   47.677923][ T3689] EXT4-fs (loop4): mount failed
[   48.091470][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.229907][ T3709] loop1: detected capacity change from 0 to 512
[   48.240295][ T3709] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   48.267471][ T3709] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.294016][ T3709] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   48.348763][ T3709] hub 9-0:1.0: USB hub found
[   48.353537][ T3709] hub 9-0:1.0: 8 ports detected
[   48.402822][ T3709] netlink: 'syz.1.60': attribute type 10 has an invalid length.
[   48.434934][ T3709] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   48.468659][ T3731] loop2: detected capacity change from 0 to 1024
[   48.487444][ T3731] EXT4-fs: Ignoring removed nomblk_io_submit option
[   48.509376][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.552479][ T3731] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.636930][ T3739] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.649410][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.682922][ T3741] loop1: detected capacity change from 0 to 1764
[   48.698298][ T3739] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.014598][ T3739] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.109193][ T3739] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.233328][ T3739] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.290676][ T3748] loop2: detected capacity change from 0 to 512
[   49.327132][ T3739] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.546936][ T3748] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[   49.559561][ T3751] Invalid ELF header magic: != ELF
[   49.577350][ T3748] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.70: invalid indirect mapped block 2683928664 (level 1)
[   49.598283][ T3739] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.610094][ T3748] EXT4-fs (loop2): Remounting filesystem read-only
[   49.624934][ T3748] EXT4-fs (loop2): 1 truncate cleaned up
[   49.663546][ T3748] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.706399][ T3739] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.725369][ T3756] loop3: detected capacity change from 0 to 128
[   49.736670][ T3754] loop1: detected capacity change from 0 to 1024
[   49.777248][ T3754] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   49.876856][ T3754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.910448][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.101467][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.209443][ T3767] loop2: detected capacity change from 0 to 1024
[   50.557471][   T29] kauditd_printk_skb: 310 callbacks suppressed
[   50.557486][   T29] audit: type=1400 audit(1752973690.862:1683): avc:  denied  { unmount } for  pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   50.622673][ T3767] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.636444][ T3767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.658434][ T3774] loop3: detected capacity change from 0 to 128
[   50.680329][ T3776] loop4: detected capacity change from 0 to 128
[   50.700546][   T29] audit: type=1326 audit(1752973690.902:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3766 comm="syz.4.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcffd1e9a9 code=0x7ffc0000
[   50.724865][   T29] audit: type=1326 audit(1752973690.902:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3766 comm="syz.4.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcffd1e9a9 code=0x7ffc0000
[   50.748324][   T29] audit: type=1326 audit(1752973690.902:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3766 comm="syz.4.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efcffd1e9a9 code=0x7ffc0000
[   50.751721][ T3777] loop1: detected capacity change from 0 to 1024
[   50.771587][   T29] audit: type=1326 audit(1752973690.902:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3766 comm="syz.4.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcffd1e9a9 code=0x7ffc0000
[   50.801489][   T29] audit: type=1326 audit(1752973690.902:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3766 comm="syz.4.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcffd1e9a9 code=0x7ffc0000
[   50.824903][   T29] audit: type=1326 audit(1752973690.902:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3766 comm="syz.4.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcffd1e9a9 code=0x7ffc0000
[   50.848189][   T29] audit: type=1326 audit(1752973690.902:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3766 comm="syz.4.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcffd1e9a9 code=0x7ffc0000
[   50.871447][   T29] audit: type=1326 audit(1752973690.902:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3766 comm="syz.4.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcffd1e9a9 code=0x7ffc0000
[   50.894791][   T29] audit: type=1326 audit(1752973690.902:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3766 comm="syz.4.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcffd1e9a9 code=0x7ffc0000
[   50.961485][ T3779] loop6: detected capacity change from 0 to 7
[   50.969400][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   50.978594][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[   50.987211][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   50.996378][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[   51.007022][ T3779]  loop6: unable to read partition table
[   51.013783][ T3779] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X) failed (rc=-5)
[   51.028296][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   51.037482][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[   51.046692][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   51.054068][ T3769] syz.4.77: attempt to access beyond end of device
[   51.054068][ T3769] loop4: rw=0, sector=121, nr_sectors = 896 limit=128
[   51.055834][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[   51.083720][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   51.092977][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[   51.112277][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   51.121497][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[   51.133058][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   51.142245][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[   51.167216][   T51] kworker/u8:3: attempt to access beyond end of device
[   51.167216][   T51] loop4: rw=1, sector=145, nr_sectors = 896 limit=128
[   51.202923][ T3786] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[   51.213320][ T3774] netlink: 'syz.3.78': attribute type 39 has an invalid length.
[   51.233083][   T51] kworker/u8:3: attempt to access beyond end of device
[   51.233083][   T51] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128
[   51.429567][ T3798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.81'.
[   51.441185][ T3793] loop3: detected capacity change from 0 to 512
[   51.607596][ T3793] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.067638][ T3793] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   52.148413][ T3806] Zero length message leads to an empty skb
[   52.492741][ T3793] syz.3.83 (3793) used greatest stack depth: 10560 bytes left
[   52.530438][ T3812] loop4: detected capacity change from 0 to 512
[   52.547002][ T3812] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   52.606354][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.636440][ T3812] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.716231][ T3823] loop3: detected capacity change from 0 to 1024
[   52.730020][ T3812] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   52.774225][ T3823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.970963][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.673335][ T3839] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   53.706308][ T3839] netlink: 'syz.0.95': attribute type 10 has an invalid length.
[   53.727561][ T3839] team0: Port device dummy0 added
[   53.728162][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.759248][ T3844] netlink: 7 bytes leftover after parsing attributes in process `syz.2.96'.
[   53.769266][ T3844] netlink: 7 bytes leftover after parsing attributes in process `syz.2.96'.
[   53.785675][ T3839] netlink: 'syz.0.95': attribute type 10 has an invalid length.
[   53.821175][ T3839] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   53.874785][ T3839] team0: Failed to send options change via netlink (err -105)
[   53.886345][ T3839] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   53.895843][ T3839] team0: Port device dummy0 removed
[   53.905199][ T3839] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   53.958553][ T3852] loop1: detected capacity change from 0 to 1024
[   53.959177][ T3852] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   53.973585][ T3852] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.101: Invalid block bitmap block 0 in block_group 0
[   53.984544][ T3852] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.101: Failed to acquire dquot type 0
[   53.984804][ T3852] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.101: Freeing blocks not in datazone - block = 0, count = 4096
[   53.985057][ T3852] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.101: Invalid inode bitmap blk 0 in block_group 0
[   53.985146][ T3852] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem
[   53.985207][ T3852] EXT4-fs (loop1): 1 orphan inode deleted
[   53.985616][ T3852] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.035959][ T2505] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0
[   54.043807][ T3849] syz.4.99 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   55.014240][ T3852] syz.1.101 (3852) used greatest stack depth: 9784 bytes left
[   55.183342][ T3880] netlink: 'syz.2.104': attribute type 13 has an invalid length.
[   55.272764][ T3880] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   55.461044][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.662142][   T29] kauditd_printk_skb: 480 callbacks suppressed
[   55.662158][   T29] audit: type=1400 audit(1752973695.962:2170): avc:  denied  { append } for  pid=3881 comm="syz.1.106" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   55.712345][   T29] audit: type=1400 audit(1752973696.002:2171): avc:  denied  { bind } for  pid=3883 comm="syz.2.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   55.731774][   T29] audit: type=1400 audit(1752973696.002:2172): avc:  denied  { create } for  pid=3883 comm="syz.2.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   55.785720][   T29] audit: type=1326 audit(1752973696.082:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3888 comm="syz.0.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb68ace9a9 code=0x7ffc0000
[   55.809197][   T29] audit: type=1326 audit(1752973696.082:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3888 comm="syz.0.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb68ace9a9 code=0x7ffc0000
[   55.832608][   T29] audit: type=1326 audit(1752973696.082:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3888 comm="syz.0.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fdb68ace9a9 code=0x7ffc0000
[   55.856120][   T29] audit: type=1326 audit(1752973696.082:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3888 comm="syz.0.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb68ace9a9 code=0x7ffc0000
[   55.877983][ T3890] loop0: detected capacity change from 0 to 512
[   55.879473][   T29] audit: type=1326 audit(1752973696.082:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3888 comm="syz.0.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fdb68ace9a9 code=0x7ffc0000
[   55.909102][   T29] audit: type=1326 audit(1752973696.082:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3888 comm="syz.0.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb68ace9a9 code=0x7ffc0000
[   55.932492][   T29] audit: type=1326 audit(1752973696.082:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3888 comm="syz.0.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fdb68ace9a9 code=0x7ffc0000
[   55.956162][ T3890] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   56.009515][ T3887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.108'.
[   56.019015][ T3890] EXT4-fs (loop0): invalid journal inode
[   56.024831][ T3890] EXT4-fs (loop0): can't get journal size
[   56.045335][ T3887] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   56.052787][ T3887] batman_adv: batadv0: Removing interface: batadv_slave_0
[   56.098776][ T3893] mmap: syz.2.107 (3893) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   56.118480][ T3887] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   56.125999][ T3887] batman_adv: batadv0: Removing interface: batadv_slave_1
[   56.143377][ T3890] EXT4-fs (loop0): 1 truncate cleaned up
[   56.179856][ T3890] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   56.264894][ T3901] loop3: detected capacity change from 0 to 512
[   56.307832][ T3901] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.110: bad orphan inode 11862016
[   56.320915][ T3901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   56.333585][ T3901] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.457882][ T3890] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.057254][ T3908] SET target dimension over the limit!
[   57.153347][ T3913] syz.4.113 uses obsolete (PF_INET,SOCK_PACKET)
[   57.302662][ T3916] netlink: 'syz.2.115': attribute type 21 has an invalid length.
[   57.383802][ T3916] netlink: 152 bytes leftover after parsing attributes in process `syz.2.115'.
[   57.472719][ T3920] loop0: detected capacity change from 0 to 4096
[   57.546509][ T3923] loop2: detected capacity change from 0 to 512
[   57.625540][ T3923] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   57.685092][ T3920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   57.715408][ T3923] EXT4-fs (loop2): 1 orphan inode deleted
[   57.741994][ T3923] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   57.768598][   T12] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1
[   57.804036][ T3923] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   57.848144][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   57.991348][ T3935] netlink: 'syz.3.119': attribute type 10 has an invalid length.
[   57.999378][ T3935] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.006618][ T3935] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.014835][ T3937] random: crng reseeded on system resumption
[   58.026113][ T3935] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.033259][ T3935] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.040664][ T3935] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.047953][ T3935] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.058099][ T3935] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   58.114923][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.171842][ T3942] netlink: 48 bytes leftover after parsing attributes in process `syz.2.121'.
[   58.228164][ T3944] loop2: detected capacity change from 0 to 1024
[   58.238737][ T3944] EXT4-fs: Ignoring removed nobh option
[   58.257196][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.267546][ T3944] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   58.278620][ T3944] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   58.290533][ T3944] JBD2: no valid journal superblock found
[   58.296453][ T3944] EXT4-fs (loop2): Could not load journal inode
[   58.356876][ T3946] bond0: (slave dummy0): Releasing backup interface
[   58.370474][ T3946] bridge_slave_0: left allmulticast mode
[   58.376197][ T3946] bridge_slave_0: left promiscuous mode
[   58.381954][ T3946] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.399778][ T3946] bridge_slave_1: left allmulticast mode
[   58.405589][ T3946] bridge_slave_1: left promiscuous mode
[   58.411347][ T3946] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.426568][ T3948] loop0: detected capacity change from 0 to 2048
[   58.438278][ T3946] bond0: (slave bond_slave_0): Releasing backup interface
[   58.446475][ T3948] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   58.466256][ T3946] bond0: (slave bond_slave_1): Releasing backup interface
[   58.481817][ T3946] team0: Port device team_slave_0 removed
[   58.492496][ T3946] team0: Port device team_slave_1 removed
[   58.500255][ T3946] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.507710][ T3946] batman_adv: batadv0: Removing interface: batadv_slave_0
[   58.519058][ T3946] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.526530][ T3946] batman_adv: batadv0: Removing interface: batadv_slave_1
[   58.552466][    T9] syz2: Port: 1 Link DOWN
[   58.610351][ T3953] ALSA: seq fatal error: cannot create timer (-22)
[   58.624115][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.826932][ T3961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.125'.
[   58.861915][ T3964] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[   58.959405][ T3963] loop3: detected capacity change from 0 to 8192
[   59.045616][ T3967] netlink: 'wÞ£ÿ': attribute type 10 has an invalid length.
[   59.083406][ T3967] bond0: (slave dummy0): Releasing backup interface
[   59.107413][ T3967] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   59.117553][ T3967] team0: Failed to send options change via netlink (err -105)
[   59.125159][ T3967] team0: Port device dummy0 added
[   59.131313][ T3963] $Hÿ: renamed from bond0 (while UP)
[   59.131501][ T3973] netlink: 'syz.1.128': attribute type 10 has an invalid length.
[   59.146554][ T3963] $Hÿ: entered promiscuous mode
[   59.151632][ T3963] bond_slave_0: entered promiscuous mode
[   59.157400][ T3963] bond_slave_1: entered promiscuous mode
[   59.163172][ T3963] bridge0: entered promiscuous mode
[   59.177580][ T3970] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.189340][ T3973] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   59.205039][ T3973] team0: Failed to send options change via netlink (err -105)
[   59.213008][ T3973] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   59.223841][ T3973] team0: Port device dummy0 removed
[   59.272600][ T3973] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   59.291510][ T3970] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.344501][ T3967] wÞ£ÿ (3967) used greatest stack depth: 9568 bytes left
[   59.404895][ T3970] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.476682][ T3970] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.550569][ T3970] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.570151][ T3970] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.593320][ T3970] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.643497][ T3970] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.133371][ T4006] loop4: detected capacity change from 0 to 2048
[   60.144105][ T4006] ext4: Unknown parameter 'subj_role'
[   60.265731][ T4008] loop1: detected capacity change from 0 to 512
[   60.351301][ T4008] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.363958][ T4008] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   60.621557][ T4012] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[   60.673740][   T29] kauditd_printk_skb: 306 callbacks suppressed
[   60.673757][   T29] audit: type=1326 audit(1752973700.972:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4011 comm="syz.4.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcffd1e9a9 code=0x7ffc0000
[   60.703391][   T29] audit: type=1326 audit(1752973700.972:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4011 comm="syz.4.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcffd1e9a9 code=0x7ffc0000
[   60.801949][   T29] audit: type=1400 audit(1752973701.032:2487): avc:  denied  { search } for  pid=3034 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   60.823355][   T29] audit: type=1400 audit(1752973701.032:2488): avc:  denied  { search } for  pid=3034 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   60.845147][   T29] audit: type=1400 audit(1752973701.032:2489): avc:  denied  { search } for  pid=3034 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   60.866831][   T29] audit: type=1400 audit(1752973701.032:2490): avc:  denied  { read } for  pid=3034 comm="dhcpcd" name="n27" dev="tmpfs" ino=1782 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   60.888708][   T29] audit: type=1400 audit(1752973701.032:2491): avc:  denied  { open } for  pid=3034 comm="dhcpcd" path="/run/udev/data/n27" dev="tmpfs" ino=1782 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   60.911714][   T29] audit: type=1400 audit(1752973701.032:2492): avc:  denied  { getattr } for  pid=3034 comm="dhcpcd" path="/run/udev/data/n27" dev="tmpfs" ino=1782 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   60.935076][   T29] audit: type=1326 audit(1752973701.052:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4011 comm="syz.4.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7efcffd1e9a9 code=0x7ffc0000
[   61.095421][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.103744][   T29] audit: type=1400 audit(1752973701.152:2494): avc:  denied  { read open } for  pid=4018 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   61.378923][ T4048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.141'.
[   61.778545][ T4057] syzkaller0: entered promiscuous mode
[   61.827901][ T4055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.144'.
[   62.927699][ T4062] loop1: detected capacity change from 0 to 2048
[   63.351818][ T4055] SELinux: failed to load policy
[   64.445272][ T4062] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   64.574986][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.592061][ T4072] 9pnet_fd: p9_fd_create_tcp (4072): problem connecting socket to 127.0.0.1
[   64.671585][ T4072] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1542 sclass=netlink_route_socket pid=4072 comm=syz.0.148
[   64.691634][ T4085] loop2: detected capacity change from 0 to 512
[   64.698620][ T4085] journal_path: Lookup failure for './file0/../file0'
[   64.705526][ T4085] EXT4-fs: error: could not find journal device path
[   64.748516][ T4092] loop2: detected capacity change from 0 to 512
[   64.765417][ T4092] EXT4-fs: Ignoring removed nobh option
[   64.797500][ T4092] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.155: corrupted inode contents
[   64.819866][ T4092] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #3: comm syz.2.155: mark_inode_dirty error
[   64.836653][ T4098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.150'.
[   64.854076][ T4092] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.155: corrupted inode contents
[   64.884966][ T4092] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.155: mark_inode_dirty error
[   64.906633][ T4092] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.155: Failed to acquire dquot type 0
[   64.933763][ T4092] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.155: corrupted inode contents
[   64.957592][ T4092] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #16: comm syz.2.155: mark_inode_dirty error
[   64.974608][ T4092] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.155: corrupted inode contents
[   64.990071][ T4094] netlink: 'syz.0.154': attribute type 8 has an invalid length.
[   64.996881][ T4092] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.155: mark_inode_dirty error
[   64.997768][ T4094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.154'.
[   65.018914][ T4092] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.155: corrupted inode contents
[   65.030919][ T4094] loop0: detected capacity change from 0 to 512
[   65.032541][ T4092] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[   65.046357][ T4092] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.155: corrupted inode contents
[   65.058396][ T4092] EXT4-fs error (device loop2): ext4_truncate:4597: inode #16: comm syz.2.155: mark_inode_dirty error
[   65.059852][ T4094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   65.069961][ T4092] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[   65.081911][ T4094] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   65.092417][ T4092] EXT4-fs (loop2): 1 truncate cleaned up
[   65.108183][ T4092] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   65.120975][ T4092] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   65.149513][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.170214][ T4103] can0: slcan on ttyS3.
[   65.193851][ T4103] can0 (unregistered): slcan off ttyS3.
[   65.199509][ T4103] Falling back ldisc for ttyS3.
[   65.223294][  T802] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0
[   65.230762][  T802] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0
[   65.238326][  T802] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0
[   65.246519][  T802] hid-generic 0003:0004:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1
[   65.325560][ T4111] netlink: 'syz.0.158': attribute type 3 has an invalid length.
[   65.356157][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.395016][ T4112] loop0: detected capacity change from 0 to 512
[   65.402015][ T4112] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   65.413243][ T4112] EXT4-fs (loop0): 1 truncate cleaned up
[   65.420416][ T4112] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   65.426271][ T3397] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0
[   65.433485][ T4112] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.439914][ T3397] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0
[   65.439941][ T3397] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0
[   65.453850][ T3397] hid-generic 0003:0004:0000.0003: hidraw0: USB HID v0.00 Device [syz0] on syz1
[   65.498740][ T4118] xt_CT: You must specify a L4 protocol and not use inversions on it
[   65.563979][ T4119] loop3: detected capacity change from 0 to 2048
[   65.588508][ T4123] loop1: detected capacity change from 0 to 512
[   65.602499][ T4124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.162'.
[   65.613107][ T4124] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   65.620946][ T4124] batman_adv: batadv0: Removing interface: batadv_slave_0
[   65.622923][ T4123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   65.630906][ T4119] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[   65.654375][ T4123] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   65.684611][   T29] kauditd_printk_skb: 1408 callbacks suppressed
[   65.684645][   T29] audit: type=1326 audit(1752973705.982:3901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f853af4e9a9 code=0x7ffc0000
[   65.716660][   T29] audit: type=1326 audit(1752973706.022:3902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853af4e9a9 code=0x7ffc0000
[   65.740193][   T29] audit: type=1326 audit(1752973706.022:3903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853af4e9a9 code=0x7ffc0000
[   65.753744][ T4124] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   65.763628][   T29] audit: type=1326 audit(1752973706.022:3904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f853af4e9a9 code=0x7ffc0000
[   65.771061][ T4124] batman_adv: batadv0: Removing interface: batadv_slave_1
[   65.794323][   T29] audit: type=1326 audit(1752973706.022:3905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f853af45967 code=0x7ffc0000
[   65.824835][   T29] audit: type=1326 audit(1752973706.022:3906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f853aeeab89 code=0x7ffc0000
[   65.848081][   T29] audit: type=1326 audit(1752973706.022:3907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853af4e9a9 code=0x7ffc0000
[   65.871515][   T29] audit: type=1326 audit(1752973706.022:3908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853af4e9a9 code=0x7ffc0000
[   65.894890][   T29] audit: type=1326 audit(1752973706.022:3909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853af4e9a9 code=0x7ffc0000
[   65.931257][   T29] audit: type=1326 audit(1752973706.052:3910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f853af45967 code=0x7ffc0000
[   66.067692][ T4138] loop0: detected capacity change from 0 to 512
[   66.077932][ T4138] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.163: iget: bad extended attribute block 1
[   66.091894][ T4138] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.163: couldn't read orphan inode 15 (err -117)
[   66.106166][ T4138] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   66.321754][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.462696][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[   66.577419][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.720551][   T10] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0
[   66.726157][ T4157] loop0: detected capacity change from 0 to 128
[   66.728038][   T10] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0
[   66.741755][   T10] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0
[   66.743080][ T4157] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   66.761915][   T10] hid-generic 0003:0004:0000.0004: hidraw0: USB HID v0.00 Device [syz0] on syz1
[   66.762720][ T4157] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   67.053176][ T4161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   67.077465][ T4161] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   67.251113][ T4164] smc: net device bond0 applied user defined pnetid SYZ2
[   67.266328][ T3307] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   67.278625][ T4164] smc: net device bond0 erased user defined pnetid SYZ2
[   67.310353][ T4168] loop0: detected capacity change from 0 to 1024
[   67.318110][ T4168] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   67.329664][ T4168] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   67.330099][ T4161] loop2: detected capacity change from 0 to 8192
[   67.341039][ T4168] JBD2: no valid journal superblock found
[   67.351494][ T4168] EXT4-fs (loop0): Could not load journal inode
[   67.372247][ T4168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.172'.
[   67.485792][ T4173] loop3: detected capacity change from 0 to 4096
[   67.495081][ T4173] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   67.534740][ T4175] loop0: detected capacity change from 0 to 512
[   67.549629][ T4173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.659099][ T4175] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.671858][ T4175] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   67.735092][ T4182] syzkaller0: entered promiscuous mode
[   67.740661][ T4182] syzkaller0: entered allmulticast mode
[   67.809018][ T4193] loop1: detected capacity change from 0 to 512
[   67.895419][ T4193] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.178: iget: bad extended attribute block 1
[   67.909012][ T4193] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.178: couldn't read orphan inode 15 (err -117)
[   68.525109][ T4212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.179'.
[   68.544040][ T4208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.182'.
[   68.582186][ T4210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.179'.
[   68.628626][ T4216] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[   68.637123][ T4216] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[   68.649227][ T4215] loop3: detected capacity change from 0 to 2048
[   68.659503][ T4218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.184'.
[   68.696685][ T4215] Alternate GPT is invalid, using primary GPT.
[   68.703139][ T4215]  loop3: p2 p3 p7
[   68.723251][ T4222] loop1: detected capacity change from 0 to 128
[   68.725492][ T4223] smc: net device bond0 applied user defined pnetid SYZ2
[   68.737022][ T4222] EXT4-fs: Ignoring removed nobh option
[   68.743549][ T4223] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2
[   68.754734][ T4222] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   68.773554][ T4222] EXT4-fs (loop1): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro.
[   68.787243][ T4222] macvtap0: entered promiscuous mode
[   68.793204][ T4222] macvtap0: left promiscuous mode
[   68.955720][ T4233] loop4: detected capacity change from 0 to 1024
[   68.962560][ T4233] EXT4-fs: Ignoring removed nomblk_io_submit option
[   69.474122][ T4242] loop4: detected capacity change from 0 to 512
[   69.485917][ T4242] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   69.533793][ T4247] loop2: detected capacity change from 0 to 4096
[   69.541187][ T4247] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   69.555410][ T4248] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.562660][ T4248] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.597673][ T4248] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.607804][ T4248] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.637463][ T4248] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.646649][ T4248] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.655707][ T4248] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.664623][ T4248] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.751281][ T4259] loop3: detected capacity change from 0 to 1024
[   69.758289][ T4259] EXT4-fs: Ignoring removed orlov option
[   69.767170][ T4259] EXT4-fs mount: 10 callbacks suppressed
[   69.767218][ T4259] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.815363][ T4259] $Hÿ: (slave bridge0): Releasing backup interface
[   69.822472][ T4259] bridge0: left promiscuous mode
[   69.827793][ T4259] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.835020][ T4259] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.850525][ T4259] bridge_slave_0: left allmulticast mode
[   69.856243][ T4259] bridge_slave_0: left promiscuous mode
[   69.862004][ T4259] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.870862][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.872219][ T4259] bridge_slave_1: left allmulticast mode
[   69.885649][ T4259] bridge_slave_1: left promiscuous mode
[   69.891272][ T4259] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.901097][ T4259] $Hÿ: (slave bond_slave_0): Releasing backup interface
[   69.909444][ T4259] bond_slave_0: left promiscuous mode
[   69.917350][ T4259] $Hÿ: (slave bond_slave_1): Releasing backup interface
[   69.925834][ T4259] bond_slave_1: left promiscuous mode
[   69.934326][ T4259] team0: Port device team_slave_0 removed
[   69.943431][ T4259] team0: Port device team_slave_1 removed
[   69.950318][ T4259] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.957890][ T4259] batman_adv: batadv0: Removing interface: batadv_slave_0
[   69.966446][ T4259] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.972106][ T4265] netlink: 'syz.4.194': attribute type 21 has an invalid length.
[   69.973923][ T4259] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.006045][ T4265] netlink: 'syz.4.194': attribute type 4 has an invalid length.
[   70.013778][ T4265] __nla_validate_parse: 1 callbacks suppressed
[   70.013792][ T4265] netlink: 132 bytes leftover after parsing attributes in process `syz.4.194'.
[   70.069474][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.313392][ T4271] loop1: detected capacity change from 0 to 512
[   70.320737][ T4271] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[   70.331636][ T4271] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.196: bad orphan inode 15
[   70.342730][ T4271] ext4_test_bit(bit=14, block=18) = 1
[   70.348235][ T4271] is_bad_inode(inode)=0
[   70.352457][ T4271] NEXT_ORPHAN(inode)=1023
[   70.356917][ T4271] max_ino=32
[   70.360133][ T4271] i_nlink=0
[   70.364747][ T4271] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[   70.378200][ T4271] ext2 filesystem being mounted at /40/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff)
[   70.378613][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.420852][ T4274] loop2: detected capacity change from 0 to 1024
[   70.452880][ T4276] xt_connbytes: Forcing CT accounting to be enabled
[   70.461470][ T4276] Cannot find set identified by id 0 to match
[   70.468621][ T4276] netlink: 'syz.0.198': attribute type 1 has an invalid length.
[   70.469363][ T4274] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.476659][ T4276] netlink: 224 bytes leftover after parsing attributes in process `syz.0.198'.
[   70.695332][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.776960][   T29] kauditd_printk_skb: 583 callbacks suppressed
[   70.776978][   T29] audit: type=1400 audit(1752973711.082:4494): avc:  denied  { connect } for  pid=4287 comm="syz.2.202" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   70.820066][   T29] audit: type=1326 audit(1752973711.122:4495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4287 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ee779e9a9 code=0x7ffc0000
[   70.843845][   T29] audit: type=1326 audit(1752973711.122:4496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4287 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f8ee779e9a9 code=0x7ffc0000
[   70.843904][   T29] audit: type=1326 audit(1752973711.122:4497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4287 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ee779e9a9 code=0x7ffc0000
[   70.843953][   T29] audit: type=1326 audit(1752973711.122:4498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4287 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f8ee779e9a9 code=0x7ffc0000
[   70.844006][   T29] audit: type=1326 audit(1752973711.122:4499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4287 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ee779e9a9 code=0x7ffc0000
[   70.844033][   T29] audit: type=1326 audit(1752973711.122:4500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4287 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8ee779e9a9 code=0x7ffc0000
[   70.844066][   T29] audit: type=1326 audit(1752973711.122:4501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4287 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ee779e9a9 code=0x7ffc0000
[   70.850696][ T4294] loop2: detected capacity change from 0 to 512
[   70.896631][   T29] audit: type=1326 audit(1752973711.122:4502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4287 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f8ee779e9a9 code=0x7ffc0000
[   71.019030][   T29] audit: type=1326 audit(1752973711.122:4503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4287 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ee779e9a9 code=0x7ffc0000
[   71.021227][ T4294] EXT4-fs (loop2): orphan cleanup on readonly fs
[   71.049337][ T4294] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.205: bad orphan inode 13
[   71.049499][ T4294] ext4_test_bit(bit=12, block=18) = 1
[   71.049513][ T4294] is_bad_inode(inode)=0
[   71.049520][ T4294] NEXT_ORPHAN(inode)=2130706432
[   71.049528][ T4294] max_ino=32
[   71.049535][ T4294] i_nlink=1
[   71.050022][ T4294] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   71.051028][ T4291] wg2: entered promiscuous mode
[   71.051047][ T4291] wg2: entered allmulticast mode
[   71.118298][ T4294] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[   71.158281][ T4294] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.205: bg 0: block 248: padding at end of block bitmap is not set
[   71.174230][ T4294] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.205: Failed to acquire dquot type 1
[   71.186085][ T4294] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   71.217381][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[   71.247269][ T4304] loop0: detected capacity change from 0 to 4096
[   71.254845][ T4304] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   71.266320][ T4294] syz.2.205 (4294) used greatest stack depth: 9384 bytes left
[   71.614480][ T4304] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.124415][ T4317] loop3: detected capacity change from 0 to 8192
[   72.176359][ T4317]  loop3: p1 p2 p3 p4
[   72.180434][ T4317] loop3: p1 size 589824 extends beyond EOD, truncated
[   72.194976][ T4317] loop3: p2 start 861536256 is beyond EOD, truncated
[   72.201800][ T4317] loop3: p3 start 51183616 is beyond EOD, truncated
[   72.208433][ T4317] loop3: p4 size 65536 extends beyond EOD, truncated
[   72.219280][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.230741][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.366928][ T4334] loop3: detected capacity change from 0 to 1024
[   72.386223][ T4334] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.632904][ T4353] loop0: detected capacity change from 0 to 512
[   72.656931][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.675859][ T4353] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.702012][ T4353] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   72.837575][ T4361] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #18: comm syz.0.225: corrupted inode contents
[   72.851869][ T4361] EXT4-fs (loop0): Remounting filesystem read-only
[   72.876328][ T4361] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -30)
[   72.958820][ T4367] netlink: 404 bytes leftover after parsing attributes in process `syz.4.217'.
[   72.983972][ T4367] netlink: 96 bytes leftover after parsing attributes in process `syz.4.217'.
[   73.037367][ T4371] loop4: detected capacity change from 0 to 1024
[   73.056869][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.078406][ T4371] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   73.094480][ T4371] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   73.112921][ T4375] SELinux:  Context system_u:object_r:auditd_exec_t:s0 is not valid (left unmapped).
[   73.282049][ T4383] loop3: detected capacity change from 0 to 512
[   73.289565][ T4383] EXT4-fs: Ignoring removed mblk_io_submit option
[   73.303566][ T4383] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   73.318094][ T4383] EXT4-fs (loop3): orphan cleanup on readonly fs
[   73.324506][ T4383] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[   73.333873][ T4383] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.222: attempt to clear invalid blocks 2 len 1
[   73.382548][ T4383] EXT4-fs (loop3): Remounting filesystem read-only
[   73.404824][ T4387] syz.0.220: attempt to access beyond end of device
[   73.404824][ T4387] loop1: rw=0, sector=0, nr_sectors = 1 limit=0
[   73.417645][ T4387] FAT-fs (loop1): unable to read boot sector
[   73.457546][ T4386] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   73.479290][ T4383] EXT4-fs (loop3): 1 truncate cleaned up
[   73.507938][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.523538][ T4383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   73.807263][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.818971][ T4393] netlink: 12 bytes leftover after parsing attributes in process `syz.4.224'.
[   74.231175][ T4403] loop1: detected capacity change from 0 to 512
[   74.255101][ T4403] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   74.277574][ T4406] loop0: detected capacity change from 0 to 128
[   74.300519][ T4406] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   74.327954][ T4403] EXT4-fs (loop1): 1 truncate cleaned up
[   74.337158][ T4403] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.353932][ T4406] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   74.371952][ T4406] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   74.383492][ T4403] EXT4-fs error (device loop1): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.1.229: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[   74.405784][ T4403] EXT4-fs (loop1): Remounting filesystem read-only
[   74.412323][ T4403] EXT4-fs warning (device loop1): ext4_rename_delete:3726: inode #2: comm syz.1.229: Deleting old file: nlink 5, error=-117
[   74.475109][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.510050][ T4418] loop2: detected capacity change from 0 to 1024
[   74.512521][ T4421] loop0: detected capacity change from 0 to 512
[   74.526607][ T4421] EXT4-fs (loop0): orphan cleanup on readonly fs
[   74.533115][ T4424] loop1: detected capacity change from 0 to 512
[   74.536668][ T4421] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.232: bg 0: block 248: padding at end of block bitmap is not set
[   74.555319][ T4421] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.232: Failed to acquire dquot type 1
[   74.558484][ T4418] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.581774][ T4424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.230'.
[   74.591272][ T4421] EXT4-fs (loop0): 1 truncate cleaned up
[   74.600107][ T4418] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.231: Allocating blocks 497-513 which overlap fs metadata
[   74.621767][ T4418] EXT4-fs (loop2): pa ffff888106a4e540: logic 128, phys. 273, len 15
[   74.629930][ T4418] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[   74.640667][ T4421] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   74.680856][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.690013][ T4421] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[   74.741185][ T4421] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[   74.766706][ T4441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.232'.
[   74.879696][ T4447] loop4: detected capacity change from 0 to 2048
[   74.920275][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.935708][ T4447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.018097][ T4455] loop0: detected capacity change from 0 to 256
[   75.025954][ T4455] FAT-fs (loop0): bogus number of FAT sectors
[   75.032080][ T4455] FAT-fs (loop0): Can't find a valid FAT filesystem
[   75.094142][ T4458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.234'.
[   75.139723][ T4458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.234'.
[   75.182249][ T4462] loop0: detected capacity change from 0 to 512
[   75.196824][ T4462] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   75.207590][ T4458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.234'.
[   75.233759][ T4458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.234'.
[   75.273002][ T4462] EXT4-fs (loop0): mount failed
[   75.289189][ T4458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.234'.
[   75.298935][ T4458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.234'.
[   75.507708][ T4474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.239'.
[   75.671654][ T2505] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   75.689883][ T2505] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   75.702391][ T2505] EXT4-fs (loop4): This should not happen!! Data will be lost
[   75.702391][ T2505] 
[   75.702404][ T2505] EXT4-fs (loop4): Total free blocks count 0
[   75.702416][ T2505] EXT4-fs (loop4): Free/Dirty block details
[   75.702427][ T2505] EXT4-fs (loop4): free_blocks=2415919104
[   75.729961][ T2505] EXT4-fs (loop4): dirty_blocks=4464
[   75.729977][ T2505] EXT4-fs (loop4): Block reservation details
[   75.729990][ T2505] EXT4-fs (loop4): i_reserved_data_blocks=279
[   75.737905][ T4479] netlink: 404 bytes leftover after parsing attributes in process `syz.3.251'.
[   75.755628][ T2505] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[   75.780575][ T4481] process 'syz.2.242' launched '/dev/fd/6' with NULL argv: empty string added
[   75.789663][   T29] kauditd_printk_skb: 288 callbacks suppressed
[   75.789674][   T29] audit: type=1400 audit(1752973716.082:4787): avc:  denied  { execute } for  pid=4480 comm="syz.2.242" dev="tmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   75.818288][   T29] audit: type=1400 audit(1752973716.122:4788): avc:  denied  { execute_no_trans } for  pid=4480 comm="syz.2.242" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   75.865183][ T4479] netlink: 96 bytes leftover after parsing attributes in process `syz.3.251'.
[   75.938330][ T4492] loop3: detected capacity change from 0 to 4096
[   75.948903][ T4481] netlink: 'syz.2.242': attribute type 1 has an invalid length.
[   75.957674][ T4492] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   75.980909][ T4481] bond1: entered promiscuous mode
[   75.982115][ T4492] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.986000][ T4481] bond1: entered allmulticast mode
[   76.004382][ T4481] 8021q: adding VLAN 0 to HW filter on device bond1
[   76.022208][ T4481] bridge1: entered promiscuous mode
[   76.027601][ T4481] bridge1: entered allmulticast mode
[   76.034757][ T4481] bond1: (slave bridge1): Enslaving as a backup interface with an up link
[   76.087037][ T2505] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   76.368557][ T2505] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   76.428078][   T29] audit: type=1326 audit(1752973716.382:4789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4488 comm="syz.4.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcffd1e9a9 code=0x7ffc0000
[   76.451584][   T29] audit: type=1326 audit(1752973716.382:4790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4488 comm="syz.4.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcffd1e9a9 code=0x7ffc0000
[   76.495513][ T4505] loop1: detected capacity change from 0 to 2048
[   76.506264][ T4505] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.749679][ T4511] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[   76.794970][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.808053][ T4513] loop0: detected capacity change from 0 to 128
[   76.845933][ T4513] 9pnet_fd: Insufficient options for proto=fd
[   76.930370][ T4518] loop0: detected capacity change from 0 to 1024
[   76.974763][   T29] audit: type=1400 audit(1752973717.272:4791): avc:  denied  { ioctl } for  pid=4516 comm="syz.2.249" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   77.010355][   T29] audit: type=1326 audit(1752973717.312:4792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4521 comm="syz.4.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcffd1e9a9 code=0x7ffc0000
[   77.021399][ T4523] loop4: detected capacity change from 0 to 128
[   77.034684][ T4518] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   77.043065][   T29] audit: type=1326 audit(1752973717.312:4793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4521 comm="syz.4.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcffd1e9a9 code=0x7ffc0000
[   77.076279][   T29] audit: type=1326 audit(1752973717.312:4794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4521 comm="syz.4.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efcffd1e9a9 code=0x7ffc0000
[   77.076328][   T29] audit: type=1326 audit(1752973717.312:4795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4521 comm="syz.4.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcffd1e9a9 code=0x7ffc0000
[   77.076360][   T29] audit: type=1326 audit(1752973717.312:4796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4521 comm="syz.4.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcffd1e9a9 code=0x7ffc0000
[   77.112814][ T4524] loop3: detected capacity change from 0 to 512
[   77.585706][ T4523] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   77.585925][ T4524] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.248: iget: bad extended attribute block 1
[   77.586049][ T4523] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   77.588938][ T4524] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.248: couldn't read orphan inode 15 (err -117)
[   77.633604][ T4524] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   77.748827][ T3306] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   77.925215][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.094778][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.280885][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.540663][ T4558] netlink: 'syz.0.257': attribute type 21 has an invalid length.
[   78.562975][ T4558] netlink: 'syz.0.257': attribute type 4 has an invalid length.
[   78.570699][ T4558] netlink: 132 bytes leftover after parsing attributes in process `syz.0.257'.
[   79.071213][ T4562] loop2: detected capacity change from 0 to 8192
[   79.125520][ T4562]  loop2: p1 p2 p3 p4
[   79.132969][ T4562] loop2: p1 size 589824 extends beyond EOD, truncated
[   79.139972][ T4567] loop3: detected capacity change from 0 to 4096
[   79.148289][ T4567] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   79.174115][ T4562] loop2: p2 start 861536256 is beyond EOD, truncated
[   79.180885][ T4562] loop2: p3 start 51183616 is beyond EOD, truncated
[   79.187585][ T4562] loop2: p4 size 65536 extends beyond EOD, truncated
[   79.217870][ T4567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.239137][ T4570] loop1: detected capacity change from 0 to 1024
[   79.257366][ T4570] EXT4-fs: Ignoring removed nobh option
[   79.262969][ T4570] EXT4-fs: Ignoring removed bh option
[   79.285914][ T4570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.347089][ T4579] sd 0:0:1:0: device reset
[   79.384410][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.406319][ T4577] 9pnet: Could not find request transport: tcpÿÿÿ
[   79.513530][ T4597] loop4: detected capacity change from 0 to 4096
[   79.521099][ T4597] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   79.537080][ T4597] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.952557][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.083388][ T4615] Driver unsupported XDP return value 0 on prog  (id 241) dev N/A, expect packet loss!
[   80.134892][ T4617] loop2: detected capacity change from 0 to 512
[   80.141998][ T4617] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   80.153304][ T4617] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   80.166534][ T4617] EXT4-fs (loop2): 1 truncate cleaned up
[   80.172666][ T4617] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.295224][ T4622] SELinux: security_context_str_to_sid () failed with errno=-22
[   80.327962][ T3556] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   80.335880][ T3556] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   80.349433][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.372756][ T4626] loop1: detected capacity change from 0 to 512
[   80.379847][ T4626] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   80.405099][ T4628] tipc: Started in network mode
[   80.410073][ T4628] tipc: Node identity ac1414aa, cluster identity 4711
[   80.423696][ T4628] tipc: Enabled bearer <udp:syz2>, priority 10
[   80.432554][ T4628] tipc: Enabled bearer <eth:team0>, priority 0
[   80.611044][ T4657] netlink: 'syz.1.275': attribute type 21 has an invalid length.
[   80.619120][ T4657] netlink: 'syz.1.275': attribute type 4 has an invalid length.
[   80.626833][ T4657] __nla_validate_parse: 2 callbacks suppressed
[   80.626847][ T4657] netlink: 132 bytes leftover after parsing attributes in process `syz.1.275'.
[   80.660292][ T4662] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10)
[   80.666941][ T4662] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   80.674533][ T4662] vhci_hcd vhci_hcd.0: Device attached
[   80.686676][ T4662] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(12)
[   80.693391][ T4662] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   80.701049][ T4662] vhci_hcd vhci_hcd.0: Device attached
[   80.713642][ T4662] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   81.042966][ T4677] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(19)
[   81.049632][ T4677] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   81.057344][ T4677] vhci_hcd vhci_hcd.0: Device attached
[   81.093749][   T10] vhci_hcd: vhci_device speed not set
[   81.138324][ T4680] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(21)
[   81.145136][ T4680] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   81.152937][ T4680] vhci_hcd vhci_hcd.0: Device attached
[   81.173725][   T10] usb 9-1: new full-speed USB device number 2 using vhci_hcd
[   81.183443][ T4677] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   81.194137][ T4677] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   81.203752][ T4677] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   81.214353][ T4677] vhci_hcd vhci_hcd.0: port 0 already used
[   81.253839][ T4662] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(16)
[   81.260517][ T4662] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   81.268147][ T4662] vhci_hcd vhci_hcd.0: Device attached
[   81.298011][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.507281][ T4681] vhci_hcd: connection closed
[   81.507507][   T37] vhci_hcd: stop threads
[   81.516598][   T37] vhci_hcd: release socket
[   81.521056][   T37] vhci_hcd: disconnect device
[   81.530593][ T4667] vhci_hcd: connection closed
[   81.530764][ T4678] vhci_hcd: connection closed
[   81.537420][ T4687] 9pnet: Could not find request transport: tcpÿÿÿ
[   81.549332][ T4671] vhci_hcd: connection closed
[   81.549920][ T4663] vhci_hcd: connection reset by peer
[   81.561154][   T37] vhci_hcd: stop threads
[   81.565465][   T37] vhci_hcd: release socket
[   81.569895][   T37] vhci_hcd: disconnect device
[   81.597037][   T37] vhci_hcd: stop threads
[   81.601312][   T37] vhci_hcd: release socket
[   81.605977][   T37] vhci_hcd: disconnect device
[   81.623028][   T37] vhci_hcd: stop threads
[   81.627386][   T37] vhci_hcd: release socket
[   81.631854][   T37] vhci_hcd: disconnect device
[   81.656431][ T3387] tipc: Node number set to 2886997162
[   81.675101][ T4692] capability: warning: `syz.1.282' uses 32-bit capabilities (legacy support in use)
[   81.690319][ T4696] loop2: detected capacity change from 0 to 512
[   81.697446][   T37] vhci_hcd: stop threads
[   81.701805][   T37] vhci_hcd: release socket
[   81.706285][   T37] vhci_hcd: disconnect device
[   81.725369][ T4696] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.744843][ T4696] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   81.808307][   T29] kauditd_printk_skb: 179 callbacks suppressed
[   81.808324][   T29] audit: type=1404 audit(1752974748.116:4976): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[   81.868948][   T29] audit: type=1400 audit(1752974748.136:4977): avc:  denied  { search } for  pid=4706 comm="sed" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0
[   81.891155][   T29] audit: type=1404 audit(1752974748.146:4978): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[   81.955185][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.983350][   T29] audit: type=1400 audit(1752974748.216:4979): avc:  denied  { create } for  pid=4695 comm="syz.2.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   82.003059][   T29] audit: type=1400 audit(1752974748.216:4980): avc:  denied  { prog_load } for  pid=4695 comm="syz.2.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   82.022056][   T29] audit: type=1400 audit(1752974748.216:4981): avc:  denied  { bpf } for  pid=4695 comm="syz.2.280" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   82.042528][   T29] audit: type=1400 audit(1752974748.236:4982): avc:  denied  { search } for  pid=4693 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   82.064667][   T29] audit: type=1400 audit(1752974748.236:4983): avc:  denied  { search } for  pid=4693 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   82.087414][   T29] audit: type=1400 audit(1752974748.236:4984): avc:  denied  { search } for  pid=4693 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   82.110520][   T29] audit: type=1400 audit(1752974748.236:4985): avc:  denied  { getattr } for  pid=4693 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   82.190383][ T4717] loop3: detected capacity change from 0 to 764
[   82.204043][ T4717] iso9660: Unknown parameter ''
[   82.275102][ T4722] loop3: detected capacity change from 0 to 1024
[   82.298407][ T4722] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.322789][ T4721] loop2: detected capacity change from 0 to 4096
[   82.349935][ T4721] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   82.359393][ T4725] loop4: detected capacity change from 0 to 1024
[   82.377165][ T4725] EXT4-fs: Ignoring removed orlov option
[   82.384017][ T4730] SELinux:  Context system_u:object_r:faillog_t:s0 is not valid (left unmapped).
[   82.384573][ T4721] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.415224][ T4725] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.428934][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.550046][ T4747] loop0: detected capacity change from 0 to 512
[   82.587318][ T4747] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.600232][ T4747] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   82.749234][ T4753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.288'.
[   82.916897][ T4757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.288'.
[   82.955019][ T4754] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[   82.963287][ T4754] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[   83.136961][ T4759] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   83.177991][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.201880][ T4761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.291'.
[   83.472329][ T4761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.291'.
[   83.485917][ T4768] netlink: 132 bytes leftover after parsing attributes in process `syz.2.292'.
[   83.506703][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.556584][ T4775] loop1: detected capacity change from 0 to 512
[   83.792967][ T4775] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.909547][ T4784] kthread_run failed with err -4
[   84.924173][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.176801][ T4804] netlink: 268 bytes leftover after parsing attributes in process `syz.2.298'.
[   85.186007][ T4804] unsupported nla_type 65024
[   85.503322][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.682152][ T4819] 9pnet: Could not find request transport: tcpÿÿÿ
[   85.690719][ T4822] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   85.760571][ T4827] loop4: detected capacity change from 0 to 512
[   85.763383][ T4827] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.301: iget: bad extended attribute block 1
[   85.763604][ T4827] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.301: couldn't read orphan inode 15 (err -117)
[   85.764625][ T4827] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   86.180381][ T4831] loop3: detected capacity change from 0 to 4096
[   86.232308][ T4829] netlink: 'syz.1.297': attribute type 10 has an invalid length.
[   86.232326][ T4829] netlink: 40 bytes leftover after parsing attributes in process `syz.1.297'.
[   86.232488][ T4829] dummy0: entered promiscuous mode
[   86.246901][ T4829] bond0: (slave dummy0): Releasing backup interface
[   86.253795][   T10] usb 9-1: enqueue for inactive port 0
[   86.297401][ T4831] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   86.308203][   T10] usb 9-1: enqueue for inactive port 0
[   86.309059][ T4829] bridge0: port 3(dummy0) entered blocking state
[   86.320088][ T4829] bridge0: port 3(dummy0) entered disabled state
[   86.328851][ T4831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   86.354820][ T4829] dummy0: entered allmulticast mode
[   86.416329][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.425604][   T10] vhci_hcd: vhci_device speed not set
[   86.452535][ T4837] SELinux:  Context :syz0:E:18446744073709551614:':max_batch_time:./file0: is not valid (left unmapped).
[   86.482341][ T4836] loop4: detected capacity change from 0 to 2048
[   86.496079][ T4839] loop2: detected capacity change from 0 to 128
[   86.502553][ T4839] EXT4-fs: Ignoring removed nobh option
[   86.527255][ T4839] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   86.543196][ T4839] ext4 filesystem being mounted at /63/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   86.566787][ T4839] EXT4-fs (loop2): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro.
[   86.611354][ T4839] macvtap0: entered promiscuous mode
[   86.617339][ T4839] macvtap0: left promiscuous mode
[   86.643944][ T4847] loop1: detected capacity change from 0 to 2048
[   86.670350][ T4847] program syz.1.306 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   86.727471][ T4854] loop2: detected capacity change from 0 to 512
[   86.727694][ T4854] EXT4-fs: Ignoring removed nomblk_io_submit option
[   86.732781][ T4854] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   86.740307][ T4854] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   86.740588][ T4854] EXT4-fs (loop2): 1 truncate cleaned up
[   86.811693][ T4858] netlink: 'syz.3.308': attribute type 1 has an invalid length.
[   86.860918][ T4860] loop2: detected capacity change from 0 to 512
[   86.861309][ T4860] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[   86.862678][ T4860] EXT4-fs (loop2): orphan cleanup on readonly fs
[   86.862976][ T4860] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[   86.863137][ T4860] EXT4-fs (loop2): Remounting filesystem read-only
[   86.863237][ T4860] EXT4-fs (loop2): 1 truncate cleaned up
[   86.871310][ T4860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.309'.
[   86.871329][ T4860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.309'.
[   86.872734][ T4866] loop1: detected capacity change from 0 to 2048
[   86.895067][ T4866] Alternate GPT is invalid, using primary GPT.
[   86.909416][ T4860] netlink: 40 bytes leftover after parsing attributes in process `syz.2.309'.
[   86.911412][ T4866]  loop1: p1 p2 p3
[   86.919496][ T4860] tipc: Invalid UDP bearer configuration
[   86.929928][ T4869] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[   86.940194][ T4860] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   86.954848][ T4869] vhci_hcd: default hub control req: 0200 v0000 i0000 l31125
[   87.050558][ T4858] bond0: entered promiscuous mode
[   87.050576][ T4858] bond0: entered allmulticast mode
[   87.050748][ T4858] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.069197][ T4858] bridge2: entered promiscuous mode
[   87.069266][ T4858] bridge2: entered allmulticast mode
[   87.069949][ T4858] bond0: (slave bridge2): Enslaving as a backup interface with an up link
[   87.083987][ T4869] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3856 sclass=netlink_route_socket pid=4869 comm=syz.0.311
[   87.094977][   T29] kauditd_printk_skb: 258 callbacks suppressed
[   87.094990][   T29] audit: type=1400 audit(1752975266.403:5244): avc:  denied  { create } for  pid=4864 comm="syz.1.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   87.098249][   T29] audit: type=1400 audit(1752975266.403:5245): avc:  denied  { read } for  pid=4864 comm="syz.1.310" path="socket:[8047]" dev="sockfs" ino=8047 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   87.230973][ T3328] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   87.344485][ T3447] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   87.398664][   T29] audit: type=1400 audit(1752975266.703:5246): avc:  denied  { write } for  pid=4864 comm="syz.1.310" name="loop1p2" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   87.398753][   T29] audit: type=1400 audit(1752975266.703:5247): avc:  denied  { open } for  pid=4864 comm="syz.1.310" path="/dev/loop1p2" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   87.474556][   T29] audit: type=1400 audit(1752975266.783:5248): avc:  denied  { write } for  pid=4864 comm="syz.1.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   87.726831][ T4883] netlink: 'syz.3.313': attribute type 21 has an invalid length.
[   87.726872][ T4883] netlink: 'syz.3.313': attribute type 4 has an invalid length.
[   87.726886][ T4883] netlink: 132 bytes leftover after parsing attributes in process `syz.3.313'.
[   87.782078][   T29] audit: type=1400 audit(1752975267.083:5249): avc:  denied  { watch watch_reads } for  pid=4884 comm="syz.0.314" path="/66" dev="tmpfs" ino=387 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   87.921004][   T29] audit: type=1400 audit(1752975267.223:5250): avc:  denied  { create } for  pid=4884 comm="syz.0.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   87.921470][   T29] audit: type=1400 audit(1752975267.223:5251): avc:  denied  { bind } for  pid=4884 comm="syz.0.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   87.921541][   T29] audit: type=1400 audit(1752975267.223:5252): avc:  denied  { write } for  pid=4884 comm="syz.0.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   87.928642][   T29] audit: type=1400 audit(1752975267.233:5253): avc:  denied  { getopt } for  pid=4889 comm="syz.1.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   88.021358][ T4891] smc: net device bond0 erased user defined pnetid SYZ2
[   88.021374][ T4891] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2
[   88.100254][ T4895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.317'.
[   88.207038][ T4900] netlink: 'syz.4.318': attribute type 10 has an invalid length.
[   88.220396][ T4898] loop0: detected capacity change from 0 to 4096
[   88.227363][ T4900] hsr0: entered promiscuous mode
[   88.233949][ T4898] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   88.253198][ T4900] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[   88.264648][ T4900] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   88.277050][ T4900] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[   88.412054][   T10] Process accounting resumed
[   88.791010][ T4908] loop3: detected capacity change from 0 to 512
[   88.798249][ T4908] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   88.808542][ T4908] EXT4-fs (loop3): orphan cleanup on readonly fs
[   88.816041][ T4908] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.321: Failed to acquire dquot type 1
[   88.828309][ T4908] EXT4-fs (loop3): 1 truncate cleaned up
[   88.961898][ T4912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.323'.
[   89.037370][ T4918] loop0: detected capacity change from 0 to 512
[   89.044803][ T4918] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   89.085854][ T4922] loop0: detected capacity change from 0 to 1024
[   89.092683][ T4922] EXT4-fs: Ignoring removed nobh option
[   89.098301][ T4922] EXT4-fs: inline encryption not supported
[   89.127987][ T4920] loop3: detected capacity change from 0 to 2048
[   89.130291][ T4922] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.327: Allocating blocks 385-513 which overlap fs metadata
[   89.168581][ T4921] EXT4-fs (loop0): pa ffff888106a07070: logic 16, phys. 129, len 24
[   89.176678][ T4921] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[   89.179806][ T4912] loop2: detected capacity change from 0 to 128
[   89.199386][ T4920]  loop3: p1 < > p4
[   89.205635][ T4920] loop3: p4 size 8388608 extends beyond EOD, truncated
[   89.265991][ T4928] loop4: detected capacity change from 0 to 8192
[   89.314085][ T4928]  loop4: p2 p3 p4
[   89.317938][ T4928] loop4: p2 start 2936012800 is beyond EOD, truncated
[   89.324795][ T4928] loop4: p3 start 1912602624 is beyond EOD, truncated
[   89.331578][ T4928] loop4: p4 size 656640 extends beyond EOD, truncated
[   89.444031][ T3556] usb usb10-port1: attempt power cycle
[   89.996079][ T4949] loop2: detected capacity change from 0 to 512
[   90.130633][ T4949] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.332: iget: bad extended attribute block 1
[   90.143455][ T4949] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.332: couldn't read orphan inode 15 (err -117)
[   90.430483][ T4954] loop0: detected capacity change from 0 to 4096
[   90.437894][ T4954] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   90.545088][ T4961] sd 0:0:1:0: device reset
[   90.574521][ T4964] loop4: detected capacity change from 0 to 512
[   90.581497][ T4964] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   90.624605][ T4967] loop4: detected capacity change from 0 to 1024
[   90.686546][ T4973] loop3: detected capacity change from 0 to 1024
[   90.754553][ T4967] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.340: bg 0: block 32: padding at end of block bitmap is not set
[   90.848433][ T4973] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.342: bg 0: block 32: padding at end of block bitmap is not set
[   91.164172][ T4986] loop0: detected capacity change from 0 to 512
[   91.192781][ T4988] loop1: detected capacity change from 0 to 512
[   91.203753][ T4986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.343'.
[   91.235660][ T4988] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   91.297684][ T4995] loop4: detected capacity change from 0 to 1024
[   91.339679][ T4995] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.345: Allocating blocks 449-513 which overlap fs metadata
[   91.386080][ T4994] EXT4-fs (loop4): pa ffff888106a070e0: logic 48, phys. 177, len 21
[   91.394261][ T4994] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4
[   91.455378][ T4999] loop4: detected capacity change from 0 to 8192
[   91.550280][ T5005] loop2: detected capacity change from 0 to 1024
[   91.557272][ T5005] EXT4-fs: Ignoring removed nobh option
[   91.562900][ T5005] EXT4-fs: Ignoring removed bh option
[   91.576397][ T5007] loop4: detected capacity change from 0 to 128
[   91.583014][ T5007] EXT4-fs: Ignoring removed nobh option
[   91.590842][ T5007] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   91.605615][ T5007] EXT4-fs (loop4): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro.
[   91.743361][ T5020] sd 0:0:1:0: device reset
[   91.771255][ T5023] loop3: detected capacity change from 0 to 4096
[   91.778066][ T3556] usb usb10-port1: unable to enumerate USB device
[   91.787155][ T5023] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   91.902453][ T5028] loop4: detected capacity change from 0 to 512
[   92.039693][ T5028] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.353: iget: bad extended attribute block 1
[   92.052761][ T5028] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.353: couldn't read orphan inode 15 (err -117)
[   92.230295][   T29] kauditd_printk_skb: 1096 callbacks suppressed
[   92.230312][   T29] audit: type=1400 audit(1752975271.533:6348): avc:  denied  { mounton } for  pid=5025 comm="syz.0.355" path="/proc/244/task" dev="proc" ino=8662 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   92.259112][   T29] audit: type=1400 audit(1752975271.533:6349): avc:  denied  { mount } for  pid=5025 comm="syz.0.355" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   92.321360][ T5037] netlink: 'syz.1.366': attribute type 10 has an invalid length.
[   92.329313][ T5037] bridge0: port 4(team0) entered blocking state
[   92.335646][ T5037] bridge0: port 4(team0) entered disabled state
[   92.342236][ T5037] team0: entered allmulticast mode
[   92.343002][ T5038] netlink: 'syz.2.356': attribute type 21 has an invalid length.
[   92.347493][ T5037] team_slave_0: entered allmulticast mode
[   92.361055][ T5037] team_slave_1: entered allmulticast mode
[   92.367748][ T5037] team0: entered promiscuous mode
[   92.372843][ T5037] team_slave_0: entered promiscuous mode
[   92.378617][ T5037] team_slave_1: entered promiscuous mode
[   92.384965][ T5038] netlink: 'syz.2.356': attribute type 4 has an invalid length.
[   92.392657][ T5038] netlink: 132 bytes leftover after parsing attributes in process `syz.2.356'.
[   92.566374][   T29] audit: type=1400 audit(1752975271.873:6350): avc:  denied  { read write } for  pid=5041 comm="syz.1.368" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   92.589602][   T29] audit: type=1400 audit(1752975271.873:6351): avc:  denied  { open } for  pid=5041 comm="syz.1.368" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   92.619707][ T5042] loop1: detected capacity change from 0 to 512
[   92.633768][   T29] audit: type=1400 audit(1752975271.923:6352): avc:  denied  { ioctl } for  pid=5041 comm="syz.1.368" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   92.638188][ T5042] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   92.658874][   T29] audit: type=1400 audit(1752975271.923:6353): avc:  denied  { create } for  pid=5041 comm="syz.1.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   92.688830][   T29] audit: type=1326 audit(1752975271.933:6354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcffd1e9a9 code=0x7ffc0000
[   92.712228][   T29] audit: type=1326 audit(1752975271.933:6355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcffd1e9a9 code=0x7ffc0000
[   92.735693][   T29] audit: type=1326 audit(1752975271.933:6356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7efcffd1d217 code=0x7ffc0000
[   92.738075][ T5044] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   92.759049][   T29] audit: type=1326 audit(1752975271.933:6357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcffd1e9a9 code=0x7ffc0000
[   92.792138][ T5042] EXT4-fs (loop1): 1 truncate cleaned up
[   92.849556][ T5049] loop0: detected capacity change from 0 to 512
[   92.866909][ T5049] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   92.896935][ T3387] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   92.905410][ T3387] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   92.953401][ T5056] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   92.997607][ T5063] loop0: detected capacity change from 0 to 128
[   93.004258][ T5063] EXT4-fs: Ignoring removed nobh option
[   93.011565][ T5063] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   93.027563][ T5063] EXT4-fs (loop0): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro.
[   93.051038][ T5063] macvtap0: entered promiscuous mode
[   93.058747][ T5063] macvtap0: left promiscuous mode
[   93.137064][ T5072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.365'.
[   93.148025][ T5068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.373'.
[   93.199981][ T5076] program syz.2.369 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   93.209376][ T5076] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   93.238543][ T5076] siw: device registration error -23
[   93.285601][ T5080] loop0: detected capacity change from 0 to 4096
[   93.292820][ T5080] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   93.442484][ T5092] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.547407][ T5092] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.597319][ T5092] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.647615][ T5092] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.721823][ T5092] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.737689][ T5092] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.752974][ T5092] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.768513][ T5092] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.944412][ T5099] loop3: detected capacity change from 0 to 128
[   93.951153][ T5099] EXT4-fs: Ignoring removed nobh option
[   93.959255][ T5099] ext4 filesystem being mounted at /70/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   93.973318][ T5099] EXT4-fs (loop3): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro.
[   94.001627][ T5099] macvtap0: entered promiscuous mode
[   94.007973][ T5099] macvtap0: left promiscuous mode
[   94.214305][ T5102] loop1: detected capacity change from 0 to 512
[   94.221496][ T5102] EXT4-fs: Ignoring removed mblk_io_submit option
[   94.227965][ T5102] EXT4-fs: Ignoring removed bh option
[   94.234348][ T5102] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   94.300346][ T5104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.380'.
[   94.376754][ T5106] netlink: 132 bytes leftover after parsing attributes in process `syz.4.382'.
[   94.507473][ T5102] EXT4-fs (loop1): 1 truncate cleaned up
[   95.071738][ T5118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.381'.
[   95.334143][ T5118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.381'.
[   95.591313][ T5129] loop3: detected capacity change from 0 to 512
[   95.673092][ T5135] Invalid ELF header magic: != ELF
[   96.709325][ T5142] loop2: detected capacity change from 0 to 512
[   96.720006][ T5144] loop0: detected capacity change from 0 to 1024
[   96.747297][ T5142] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   96.756337][ T5144] EXT4-fs: Ignoring removed nobh option
[   96.761939][ T5144] EXT4-fs: Ignoring removed bh option
[   96.799234][ T5142] EXT4-fs error (device loop2): ext4_quota_enable:7120: comm syz.2.388: Bad quota inum: 29696, type: 1
[   96.813864][ T5149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.389'.
[   96.823035][ T5142] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix.
[   96.844057][ T5142] EXT4-fs (loop2): mount failed
[   97.061654][ T5170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.395'.
[   97.168931][ T5173] loop2: detected capacity change from 0 to 512
[   97.184433][ T5174] siw: device registration error -23
[   97.237272][ T5181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.396'.
[   97.529448][ T5197] loop0: detected capacity change from 0 to 1024
[   97.547511][   T29] kauditd_printk_skb: 442 callbacks suppressed
[   97.547555][   T29] audit: type=1400 audit(1752975276.853:6800): avc:  denied  { nlmsg_read } for  pid=5196 comm="syz.0.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   97.620484][   T29] audit: type=1400 audit(1752975276.923:6801): avc:  denied  { getopt } for  pid=5196 comm="syz.0.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   97.621098][ T5203] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   97.647141][ T5203] IPv6: NLM_F_CREATE should be set when creating new route
[   97.679139][   T29] audit: type=1400 audit(1752975276.983:6802): avc:  denied  { bind } for  pid=5204 comm="syz.4.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   97.720422][   T29] audit: type=1400 audit(1752975276.983:6803): avc:  denied  { listen } for  pid=5204 comm="syz.4.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   97.740384][   T29] audit: type=1400 audit(1752975276.983:6804): avc:  denied  { getopt } for  pid=5204 comm="syz.4.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   97.760294][   T29] audit: type=1400 audit(1752975277.013:6805): avc:  denied  { create } for  pid=5204 comm="syz.4.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   97.779962][   T29] audit: type=1400 audit(1752975277.013:6806): avc:  denied  { connect } for  pid=5204 comm="syz.4.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   97.799603][   T29] audit: type=1400 audit(1752975277.013:6807): avc:  denied  { write } for  pid=5204 comm="syz.4.398" path="socket:[8862]" dev="sockfs" ino=8862 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   97.827858][   T29] audit: type=1400 audit(1752975277.133:6808): avc:  denied  { mounton } for  pid=5209 comm="syz.3.399" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1
[   97.894214][ T5210] loop3: detected capacity change from 0 to 1024
[   97.950339][ T5210] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 1 with error 28
[   97.962714][ T5210] EXT4-fs (loop3): This should not happen!! Data will be lost
[   97.962714][ T5210] 
[   97.972436][ T5210] EXT4-fs (loop3): Total free blocks count 0
[   97.978648][ T5210] EXT4-fs (loop3): Free/Dirty block details
[   97.984642][ T5210] EXT4-fs (loop3): free_blocks=0
[   97.989590][ T5210] EXT4-fs (loop3): dirty_blocks=0
[   97.994703][ T5210] EXT4-fs (loop3): Block reservation details
[   98.000767][ T5210] EXT4-fs (loop3): i_reserved_data_blocks=0
[   98.005843][   T29] audit: type=1400 audit(1752975277.303:6809): avc:  denied  { bind } for  pid=5209 comm="syz.3.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   98.058292][ T5220] loop4: detected capacity change from 0 to 512
[   98.060883][ T5219] netlink: 'syz.2.403': attribute type 10 has an invalid length.
[   98.082854][ T5219] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   98.091527][ T5224] netlink: 132 bytes leftover after parsing attributes in process `syz.3.401'.
[   98.600296][ T5230] loop0: detected capacity change from 0 to 1024
[   98.608022][ T5230] EXT4-fs: Ignoring removed nobh option
[   98.613703][ T5230] EXT4-fs: Ignoring removed bh option
[   98.836892][ T5236] loop2: detected capacity change from 0 to 512
[   98.883878][ T5238] wireguard0: entered promiscuous mode
[   99.126582][ T5255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.411'.
[   99.806005][ T5276] netlink: 32 bytes leftover after parsing attributes in process `syz.3.418'.
[   99.864745][ T3306] EXT4-fs unmount: 59 callbacks suppressed
[   99.864763][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.868463][ T5280] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2
[  100.345863][ T5287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.423'.
[  100.357790][ T5287] bridge0: port 5(macvlan2) entered blocking state
[  100.364405][ T5287] bridge0: port 5(macvlan2) entered disabled state
[  100.390519][ T5287] macvlan2: entered allmulticast mode
[  100.395989][ T5287] bridge0: entered allmulticast mode
[  100.412306][ T5287] macvlan2: left allmulticast mode
[  100.412363][ T5287] bridge0: left allmulticast mode
[  100.483779][ T5288] ==================================================================
[  100.491897][ T5288] BUG: KCSAN: data-race in atime_needs_update / inode_update_timestamps
[  100.500276][ T5288] 
[  100.502611][ T5288] write to 0xffff888119e55e04 of 4 bytes by task 5299 on cpu 1:
[  100.510356][ T5288]  inode_update_timestamps+0x147/0x270
[  100.515114][ T5301] netlink: 16 bytes leftover after parsing attributes in process `syz.2.426'.
[  100.515834][ T5288]  file_update_time+0x20e/0x2b0
[  100.515858][ T5288]  shmem_file_write_iter+0x9c/0xf0
[  100.534671][ T5288]  iter_file_splice_write+0x5ef/0x970
[  100.540077][ T5288]  direct_splice_actor+0x156/0x2a0
[  100.545220][ T5288]  splice_direct_to_actor+0x312/0x680
[  100.550699][ T5288]  do_splice_direct+0xda/0x150
[  100.555510][ T5288]  do_sendfile+0x380/0x650
[  100.559948][ T5288]  __x64_sys_sendfile64+0x105/0x150
[  100.565163][ T5288]  x64_sys_call+0xb39/0x2fb0
[  100.569779][ T5288]  do_syscall_64+0xd2/0x200
[  100.574309][ T5288]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.580217][ T5288] 
[  100.582559][ T5288] read to 0xffff888119e55e04 of 4 bytes by task 5288 on cpu 0:
[  100.590123][ T5288]  atime_needs_update+0x2a8/0x3e0
[  100.595161][ T5288]  touch_atime+0x4a/0x340
[  100.599514][ T5288]  shmem_file_splice_read+0x5b1/0x600
[  100.604914][ T5288]  splice_direct_to_actor+0x26c/0x680
[  100.610320][ T5288]  do_splice_direct+0xda/0x150
[  100.615106][ T5288]  do_sendfile+0x380/0x650
[  100.619547][ T5288]  __x64_sys_sendfile64+0x105/0x150
[  100.624764][ T5288]  x64_sys_call+0xb39/0x2fb0
[  100.629462][ T5288]  do_syscall_64+0xd2/0x200
[  100.633992][ T5288]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.639920][ T5288] 
[  100.642265][ T5288] value changed: 0x2ead5f1c -> 0x2f45f59d
[  100.647998][ T5288] 
[  100.650343][ T5288] Reported by Kernel Concurrency Sanitizer on:
[  100.656525][ T5288] CPU: 0 UID: 0 PID: 5288 Comm: syz.0.422 Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 PREEMPT(voluntary) 
[  100.668874][ T5288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  100.678950][ T5288] ==================================================================
[  100.700560][ T5300] netlink: 14 bytes leftover after parsing attributes in process `syz.3.424'.
[  100.712723][ T5300] hsr_slave_0: left promiscuous mode
[  100.723802][ T5300] hsr_slave_1: left promiscuous mode
[  100.951896][ T4063] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.026262][ T4063] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.116045][ T4063] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.166711][ T4063] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.395472][ T4063] bond0 (unregistering): Released all slaves
[  101.454785][ T4063] hsr_slave_1: left promiscuous mode
[  101.461838][ T4063] veth1_macvtap: left promiscuous mode
[  101.467353][ T4063] veth0_macvtap: left promiscuous mode
[  101.472881][ T4063] veth1_vlan: left promiscuous mode
[  101.478228][ T4063] veth0_vlan: left promiscuous mode
[  101.540620][   T52] smc: removing ib device syz2
[  101.867194][ T4063] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.935973][ T4063] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.986190][ T4063] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.036051][ T4063] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.264820][ T4063] bond0 (unregistering): (slave bridge2): Removing an active aggregator
[  102.273341][ T4063] bond0 (unregistering): (slave bridge2): Releasing backup interface
[  102.281710][ T4063] bridge2 (unregistering): left promiscuous mode
[  102.288074][ T4063] bridge2 (unregistering): left allmulticast mode
[  102.325512][ T4063] $Hÿ (unregistering): Released all slaves
[  102.334184][ T4063] bond0 (unregistering): Released all slaves
[  102.389835][ T4063] veth1_macvtap: left promiscuous mode
[  102.395347][ T4063] veth0_macvtap: left promiscuous mode
[  102.400949][ T4063] veth1_vlan: left promiscuous mode
[  102.406212][ T4063] veth0_vlan: left promiscuous mode