last executing test programs:

15m1.335156583s ago: executing program 32 (id=139):
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x60200)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==")
gettid()
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000001b80)="0b03feff4f00021202004788aa96a13bb1000011000488ca1a00", 0xffffffffffffff68, 0x40800, &(0x7f0000000140)={0x11, 0xc, r3, 0x1, 0xf1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, 0x14)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r4}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00')
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94)
r7 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
fcntl$setflags(r7, 0x2, 0x0)
pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x81)
ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000040)={0x7, 0x731b, 0x9a01})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002ec0)={r5, 0xe0, &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000002c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000002c40), &(0x7f0000002c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r9=>0x0, 0x9, &(0x7f0000002cc0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000002d00), &(0x7f0000002d40), 0x8, 0x2a, 0x8, 0x8, &(0x7f0000002d80)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000002f00)={0x13, 0x1e, &(0x7f0000002fc0)=ANY=[@ANYBLOB="180000006d000000000000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000062c93cd76c0bb2e400a24cb54900000000b702000014000000b703000000000000699e9bef8500000083000000bf0980000000000055090100000000009500000000000000950000000000000085100000feffffff1801000020696c2500000000002020207b1af8ff00000000bfa1000000000000d80ca9911ea1abac918f8747fc8c07010000f8ffffffb702000008000000b70300000c000000850000000600000018", @ANYRES32, @ANYBLOB="0000000002000000bf91000000000000b7020000000000008500000001000000b7000000000000009500000000000000"], &(0x7f0000001bc0)='syzkaller\x00', 0x1e3, 0x1000, &(0x7f0000001c00)=""/4096, 0x41100, 0x2, '\x00', r3, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, r7, 0x0, 0x0, 0x0, 0x10, 0xeff0}, 0x94)
getsockopt$EBT_SO_GET_INIT_INFO(r8, 0x0, 0x82, &(0x7f0000001ac0)={'nat\x00', 0x0, 0x0, 0x0, [0x2, 0x3, 0x9, 0x0, 0x8, 0x2]}, &(0x7f0000001b40)=0x78)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), r7)

14m42.349468315s ago: executing program 33 (id=397):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@usrjquota}, {@user_xattr}, {@nombcache}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)
socket$unix(0x1, 0x1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10)
sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0)

14m18.108958859s ago: executing program 34 (id=679):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18)
flistxattr(r0, &(0x7f0000000280)=""/183, 0xb7)

13m58.700708641s ago: executing program 35 (id=943):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x1000000000000008}, 0x18)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x62, 0x811, 0x0, 0x8000007, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810dd})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x280})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000500)={0x800000, 0x210002, 0xffffffdd, 0x7fffffff, 0x2, 0x69})
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffe, @empty, 0x1}, 0x1c)
r6 = syz_clone(0x81248080, 0x0, 0x4c, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace(0x8, r6)
waitid(0x1, r6, 0x0, 0x4, 0x0)
listen(r1, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r8 = accept(r0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x4811}, 0x0)
recvfrom(r7, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)

13m38.201791258s ago: executing program 36 (id=1279):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4cc, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x5}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x80020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = semget$private(0x0, 0x4, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4000004}, 0x10)
write(r1, &(0x7f0000000080), 0x0)
semop(r0, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1)
semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x9, 0x800}, {0x2, 0x1, 0x1800}], 0x2, 0x0)
r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil)
accept4$x25(0xffffffffffffffff, 0x0, 0x0, 0xc00)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000"], 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
sendto$inet6(r3, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
sendmsg$FOU_CMD_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x20040014)
close(0x3)
shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0xffff, 0xffffffffffffffff, 0x7, 0xf}, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0)
syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0)

13m30.727133311s ago: executing program 37 (id=1394):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0180000000000000000001000000000000000b00"], 0x28}}, 0x40000)

13m11.822282566s ago: executing program 38 (id=1651):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000200)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d653d6d697865642c756e695f786c6174653d302c636865636b3d72656c617865642c73686f72746e616d653d77696e6e742c73686f72746e616d653d6d697865642c726f6469722c756e695f786c6174653d302c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c696f636861727365743d757466382c757466383d312c73686f72746e616d653d77696e39352c696f636861727365743d69736f383835392d312c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c646973636172642c00512733c8ef1654be3cad5b8bbe4f"], 0x1, 0x369, &(0x7f0000000700)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x4600}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x31, 0x7}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}]}, 0x50}}, 0x4000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r4 = socket(0x2b, 0x1, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x81}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0xa1, 0xfff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x28011, r0, 0x0)
fdatasync(r0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ftruncate(r0, 0x0)

13m8.147401937s ago: executing program 39 (id=1674):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r0 = syz_io_uring_setup(0x38, &(0x7f0000000140)={0x0, 0x1d2d, 0x13500}, &(0x7f0000000240), &(0x7f0000000480))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000440), 0x1)

13m2.545314461s ago: executing program 40 (id=1727):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x12, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x10, 0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x8, 0x9, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0xfffffffd, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x5, 0x0, 0xb97, 0x0, 0x0, 0x0, 0xfffffffd, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x7fff, 0x0, 0xfffffffc, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0xffff8000, 0x5, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x8, 0x6, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x4cc, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x800004, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0xd79, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x102, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x3, 0x0, 0x19, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

12m56.908401399s ago: executing program 41 (id=1803):
socket$nl_route(0x10, 0x3, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]})
r1 = socket$tipc(0x1e, 0x5, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mm_page_alloc\x00', r3, 0x0, 0x1}, 0x18)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
r5 = socket(0x10, 0x3, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000340)='kfree\x00', r6}, 0x18)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00\x00\x00\x00\x00')
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10)
write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe6000400000000008000f00fd000000", 0x24)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x60, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @private}}}]}, @CTA_TUPLE_MASTER={0x4}]}, 0x60}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r10}, 0x18)
r11 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

12m11.12040703s ago: executing program 42 (id=2274):
syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f0000000cc0)={[], [{@measure}, {@smackfsdef={'smackfsdef', 0x3d, '[+\x94'}}, {@audit}, {@fowner_eq}, {@fowner_lt}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}, 0x1, 0x63f, &(0x7f0000000d80)="$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")
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b000000050000000200000002000000050000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x14, &(0x7f00000013c0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRESOCT=r0], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000380)=<r2=>0x0)
syz_open_procfs$pagemap(r2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$rxrpc(0x21, 0x2, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x0, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r5, 0x0, 0x7fffffffffffffff}, 0x18)
r6 = socket$rds(0x15, 0x5, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x1b, 0x8000000, 0x428, 0x0, 0x2e8, 0xffffffff, 0x140, 0x2e8, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, &(0x7f0000000340), {[{{@ip={@private=0xa010102, @broadcast, 0xffffff00, 0xff, 'veth1_virt_wifi\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x88, 0x1, 0x12}, 0x0, 0x108, 0x140, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth1_to_bridge\x00', {}, 'pim6reg0\x00', {0xff}, 0x5}}, @common=@ah={{0x30}, {[0x60, 0xf]}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @local, @loopback, @icmp_id=0x66, @port=0x4e22}}}}, {{@ip={@local, @local, 0xff000000, 0xffffff00, 'macvtap0\x00', 'batadv_slave_1\x00', {}, {}, 0x1, 0x0, 0x10}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x4a}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xc, @private=0xa010102, @local, @port=0x4e22, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x17, @private=0xa010102, @private=0xa010102, @icmp_id=0x67, @icmp_id=0x64}}}}, {{@ip={@multicast2, @local, 0xff000000, 0x0, 'sit0\x00', 'caif0\x00', {0xff}, {}, 0x73, 0x1, 0x5d}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x411, 0x800}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xe, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @port=0x4e23, @gre_key=0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488)
bind$rds(r6, &(0x7f0000000000)={0x2, 0x4000, @loopback}, 0x10)
ioctl$KDSETMODE(r4, 0x4b45, 0x1)
r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8, 0x0, 0xffffffffffffffff}, 0x18)
pwritev2(r3, 0x0, 0x0, 0xfff, 0xc, 0x4)
socket$packet(0x11, 0x2, 0x300)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))

5m49.013704368s ago: executing program 43 (id=8244):
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1)

3m19.687439477s ago: executing program 1 (id=10321):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0)
shutdown(r0, 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x835c, 0xf000, 0x20000a, 0x20002f3})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

3m19.672439418s ago: executing program 1 (id=10324):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2c6fcae84cb7adca}, 0x94)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c)
syz_emit_ethernet(0x2a, &(0x7f0000000e80)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x0, 0xfe, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0)

3m19.625505583s ago: executing program 1 (id=10328):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0xe46b}, 0x1c)
connect$inet6(r0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

3m19.594942145s ago: executing program 1 (id=10330):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0)
umount2(&(0x7f0000000140)='./file0/file0\x00', 0x0)

3m19.572901328s ago: executing program 1 (id=10332):
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002840)='/proc/locks\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8)
r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0)
flock(r2, 0x1)
flock(0xffffffffffffffff, 0x6)

3m19.304506453s ago: executing program 1 (id=10341):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10)
sendmsg$nl_route(r0, 0x0, 0x0)

3m19.304430013s ago: executing program 44 (id=10341):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10)
sendmsg$nl_route(r0, 0x0, 0x0)

3m14.286479442s ago: executing program 6 (id=10493):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)

3m14.286276022s ago: executing program 6 (id=10494):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50)

3m14.245320906s ago: executing program 6 (id=10495):
r0 = socket(0xa, 0x5, 0x0)
r1 = dup(r0)
sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, 0x0, 0x18, 0x48d5}, 0x8050)

3m14.244988186s ago: executing program 6 (id=10497):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0)
umount2(&(0x7f0000000140)='./file0/file0\x00', 0x0)

3m14.212733809s ago: executing program 6 (id=10499):
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002840)='/proc/locks\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8)
r2 = open(0x0, 0x100000, 0x0)
flock(r2, 0x1)
flock(0xffffffffffffffff, 0x6)

3m13.927509046s ago: executing program 6 (id=10511):
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4)
socket(0x2, 0x2, 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0xfa, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", 0x0, 0x0, 0x0, 0x3, 0x0})

3m13.927426926s ago: executing program 45 (id=10511):
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4)
socket(0x2, 0x2, 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0xfa, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", 0x0, 0x0, 0x0, 0x3, 0x0})

3m8.095266972s ago: executing program 2 (id=10699):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003700)=[{{&(0x7f0000000000)={0xa, 0x4e1d, 0xdd9b, @mcast1, 0x6}, 0x1c, &(0x7f00000014c0)=[{&(0x7f00000000c0)="ec830da0e4f60e19cce05609b8167f59dc3b5451e48dcb49c5dccc4075f045028ca51c7cb8f790dc370314b187d52572912e4f2b893c9bf9dd9ff39476cffbff8a3ff3decbebd474956d78978ac76b908c0cf4dd6718ac3a55c7087b8f7d", 0x5e}, {&(0x7f0000000040)="623f9f8f7e69573d03292d9f016570e17e007ef32b85c4bb9ba2ca8863102237507c2b1f4d21e856cbb106afbf8a81f62f5f35076dee21edb9af3e1f", 0x3c}, {&(0x7f0000000140)="d7f623d9dababcb0f96d8a00fae62fe06efe8a3adf1790d3169e0a207879a6b079ee8d534c22ecc479044af5212d593b18f583e27907670cd4e4e744e6c83969819b9a3b44e8f56b79be04fd2ee6afc8065c6ed687bd1b50ec98341bbdb39c043b9a91f2a38dc154b89c7feb7e38e79f6fd85058bbfe6bea6a3f83df85ca41bc9ef1a29dfeeebed0d7e5743636bcb8c2a07a1e474b0d55e3", 0x98}, {&(0x7f0000000200)="eef7010ff05b086371bd2e531ac79c2e019a4fba32905e0fa37db53a6debc4b65db3b7f24aaf23a3e2710bd08d5b154ff2f158aa2a0b5a5bfa10847864094b8222e025b1632bb6c6e3d4eb648973846295e1f765f708cf1bdae20fea519c7ba45ed18762fb25d292e49bd83f8f3d0c6420a283afcd38afb5fcc5da704f87e758e3811db7e70bc8da52d477545f9a7961558b39755b6d3ada34b8dfb13724bf0c5212f27042e0362b3ba6e9bf81335c251dc89b773d", 0xb5}, {&(0x7f00000002c0)="6678e765972978430381c6535a55f5bd79fde5fa4d0d7de784d4caa717ccc8103ea2fbae08d29020b3033cd530d467de152fff6234f6091d756a82894747f7d5737dc518696202db1a9131b8105e10fd8491d3f74089e981a1cfd9fb34e38ca22e470f1f3ab4f219945955aea6b59dfef39a8cce074e41", 0x77}, {&(0x7f0000000340)="3211ce85047488703d5595692756c4e2375b36d028d714f2a161af671dfd0af8059743917ae14f2070e442286718d965ddf6f036fcaee7c50900000014122f253d17ee0719affafd471395574687f49dd402ec30784f457a2e32ad53b015f8e5e78d98cd7e593b0ffa3c44eab89c5badab000000", 0x74}, {&(0x7f00000003c0)="82dac70803d5c5bb119c7467713f6b33a9950bad3ae29b45c150334f3358dc512134985f04b3793eeab1a7c258e02f9c918db910eb189d5ffe7b7b20065a1b5d608ebf280c1c8542e15d78ed255749571c960c3718dd4e033da4eb0ae3e133195b7330912867ff090140fabf6ccce68442ad23e3d8bd053f546cde37ce757e46bc0863d7d633dd98cc41f41e7f05f6baf205763947d1205438b6efafbf28a273762f0d2c7bde5e8c809afafbb1ef70222148849e6b1d0cf40b07f5f34bf5ec9f7d738bacdf5669b2291f0f864e459f2b9d00236e447572c6e71887c712abfc2105cdd46eaba638794d47ff0e468b735fcaf2933bf9d6d3f51d", 0xf9}, {&(0x7f00000004c0)="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", 0x1da}], 0x8, &(0x7f0000001580)=[@hopopts={{0x18, 0x29, 0x36, {0x2b}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}], 0x30}}], 0x1, 0x60040000)

3m8.049049777s ago: executing program 2 (id=10703):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="09000000060000000800"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r0}, &(0x7f0000000900), &(0x7f0000000980)='%pI4   \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3m7.976140064s ago: executing program 2 (id=10708):
bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x6e1d, 0x9, @dev={0xfe, 0x80, '\x00', 0x43}, 0x2}, 0x1c)
syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6a00000000481100fe8000000000000000000000000000aafe8000000000000000000000000000aa4e1d4e20"], 0x0)

3m7.960866935s ago: executing program 2 (id=10711):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0)
umount2(&(0x7f0000000140)='./file0/file0\x00', 0x0)

3m7.815138559s ago: executing program 2 (id=10715):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20020084, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x63}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20)
shutdown(r0, 0x1)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)

3m7.720026778s ago: executing program 3 (id=10722):
r0 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_opts(r0, 0x29, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB=':'], 0x18)
setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000040)=0xfffffffa, 0x4)
syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0)
recvmmsg(r0, &(0x7f0000000080), 0x0, 0x40010142, 0x0)

3m7.719271809s ago: executing program 3 (id=10724):
r0 = socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000867000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r1 = io_uring_setup(0x42a5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000006e80)=[{{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000420005"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4)

3m7.583131922s ago: executing program 2 (id=10731):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/679, 0x6)
fallocate(r1, 0x0, 0x0, 0x400001)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0)

3m7.544180455s ago: executing program 46 (id=10731):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/679, 0x6)
fallocate(r1, 0x0, 0x0, 0x400001)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0)

3m6.854423861s ago: executing program 3 (id=10741):
socket$inet6_udplite(0xa, 0x2, 0x88)
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x0)
close(0x3)
r1 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\x80\'\xe9\xc8\xacxd\x11\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19y`\xb7\x9b\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g\xb8\xb1K\b\xfb8\x9a\x13\xd6{!K\v\x15\xf24\x94\xc1\x18\x1c?\x82\xf1\xceC\n\"\xc4\xf0 ^H\x9f\xb4\xdb\xa6\xe5\x85\x00\x039\xb08~\xf5\xd9v\xb5\xb1l\xc7\xd3`.lP\x99>\x8d\x92IE\x90\x18\xaa\xa3/@}\xa6H\x8d\x1cr3\xf9t\x8d\tG\xaa6\x9a}\x95\xeb\xed\x7f7\xd2qwZ\xfcP\x16\x91\xc6\xf4#\xf0\xcc\x9c>\xba>n\xba|\x86\x1d\xe8\xbb\x02\x1c\r\x7f\x8b!W9\xcd\x123\xc9\x18\x93\xae[\xf1?\xff\xdd\xd8\xa9\x81\b\xdf\xbbP\v\x9a\x9e\xc5v\x9d\xcf\xa2v\x9f\x84\x19gg\x9f \xe8\x18q`\x86|\x1f\x1bL\xe9\xd3RgY\xe1 \xdc#?>o6\x8d\x8e\x05\xf2}\xf1\xbc\x12\xac\x1b\xad\xc7\x82\x84', 0x1)
ftruncate(r1, 0x80079a0)
pipe2$9p(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
tee(r0, r3, 0x4e, 0x0)
vmsplice(r2, &(0x7f00000001c0)=[{&(0x7f00000002c0)="b3d050b5256cef9d1c9177572b457d8c113b5fb4", 0x14}], 0x1, 0x1)

3m5.985671414s ago: executing program 3 (id=10755):
syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000001200)='./file0\x00', 0x2a00410, &(0x7f00000004c0)=ANY=[], 0x1, 0x11aa, &(0x7f0000001280)="$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")
open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0)
mount(&(0x7f0000005440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000500)='./bus\x00', 0x0, 0xb81800, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000200), 0xfea7)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0xc, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c6780000335a63bdbcef549ba197fce47ddfdd00000000000000000000a3c5c00c000000a000", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x6]})

3m5.654516935s ago: executing program 3 (id=10756):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0)
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r1)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x100d001, 0x0)

3m5.349489435s ago: executing program 3 (id=10762):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x2c, 0xa0002f5})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaa60086dd6000000000140600fe8000000000000000000000000000bb"], 0x0)
io_uring_enter(r1, 0x2218, 0x7721, 0x16, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e33, 0x7, @mcast2}, 0x1c, 0x0}}], 0x1, 0x24000000)

3m5.349371015s ago: executing program 47 (id=10762):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x2c, 0xa0002f5})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaa60086dd6000000000140600fe8000000000000000000000000000bb"], 0x0)
io_uring_enter(r1, 0x2218, 0x7721, 0x16, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e33, 0x7, @mcast2}, 0x1c, 0x0}}], 0x1, 0x24000000)

1m29.287166051s ago: executing program 8 (id=14122):
syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x700601, &(0x7f0000001100)=ANY=[@ANYRESHEX], 0x5, 0x415, &(0x7f0000000140)="$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")
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'vlan0\x00', <r5=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)

1m29.205045459s ago: executing program 8 (id=14123):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0xb881}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008007}, 0x4040844)
sendto$packet(r0, 0x0, 0x0, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @local}, 0x14)

1m29.175429712s ago: executing program 8 (id=14124):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f086dd", 0x0, 0x2000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m29.122518777s ago: executing program 8 (id=14125):
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2b2, &(0x7f0000000880)="$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")
lsetxattr(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='b[rgs4}%.'], 0x0, 0x0, 0x3)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x3}, 0x18)
r2 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000480)='kfree\x00', r5, 0x0, 0x4}, 0x18)
close(r3)
setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000040), 0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r7}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r9}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r10, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r10, 0x84, 0x17, &(0x7f0000000440)={0x0, 0x6, 0x1, "c9"}, 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r10, 0x84, 0x23, &(0x7f0000000140)={0x0, 0x6}, 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r10, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x6}, 0x8)

1m29.042152784s ago: executing program 8 (id=14129):
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044014}, 0x4000000)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

1m25.327066829s ago: executing program 8 (id=14178):
socket(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x60, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x0, 0x0})
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x2c)
socketpair(0x3, 0xa, 0xfffffffc, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10)
r6 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
tgkill(r6, r6, 0x21)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@getchain={0x3c, 0x66, 0x4, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x8, 0x6}, {0xf}, {0xe, 0xd}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x6}]}, 0x3c}}, 0x800)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)={0x28, r11, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0xff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4004)
r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r12, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r12, 0x400455c8, 0x0)
ioctl$sock_bt_hci(r10, 0x800448f0, &(0x7f00000001c0))
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(r9, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x14, r13, 0xf09, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8084)

1m24.960669434s ago: executing program 48 (id=14178):
socket(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x60, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x0, 0x0})
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x2c)
socketpair(0x3, 0xa, 0xfffffffc, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10)
r6 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
tgkill(r6, r6, 0x21)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@getchain={0x3c, 0x66, 0x4, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x8, 0x6}, {0xf}, {0xe, 0xd}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x6}]}, 0x3c}}, 0x800)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)={0x28, r11, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0xff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4004)
r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r12, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r12, 0x400455c8, 0x0)
ioctl$sock_bt_hci(r10, 0x800448f0, &(0x7f00000001c0))
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(r9, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x14, r13, 0xf09, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8084)

3.447741131s ago: executing program 0 (id=15514):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x48100, 0x0)
accept4$llc(0xffffffffffffffff, &(0x7f0000000380)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x0, 0x80800)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r2, 0x0, 0xfffffffffffffff4}, 0x18)

3.373859529s ago: executing program 0 (id=15517):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000580)={0x4, 0x2}, 0x8)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000180), 0xfa, 0x58f, &(0x7f0000002d00)="$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")
r1 = creat(&(0x7f0000000000)='./file1\x00', 0x14c)
fallocate(r1, 0x0, 0x9, 0x2000403)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)=r4}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628)

3.322467763s ago: executing program 0 (id=15519):
r0 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000)
sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000015c0)="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", 0x40e}], 0x1}, 0x0)

3.303409605s ago: executing program 0 (id=15521):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {r0}}, './file0\x00'})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYRESHEX=r1], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@deltclass={0x24, 0x29, 0x2, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xb, 0xfff3}, {0xffff, 0x9}}}, 0x24}}, 0x74000800)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r6=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='qdisc_create\x00', r8, 0x0, 0x66e}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x8, 0xb, 0x4}}}}]}, 0x40}}, 0x4000010)
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc, 0x2000, 0x3, 0x400, 0x8a})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80080a, &(0x7f0000000340)={[{@barrier_val}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0xba}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x364}}], [{@appraise_type}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@fsname={'fsname', 0x3d, '\x00\x00\x01\x00\x00\x00'}}, {@uid_eq}]}, 0x1, 0x79b, &(0x7f0000001140)="$eJzs3c1rHGUYAPBnNp9Nq40g2HppTloo3bQ1tgqCEQ8iWCjo2TZstiFmky3ZTWlCDhYRBBG0eBD04tmPevMqevZv8CIiLVXTYsWDrMx+JNtsvptN2ub3g0neZ/adfeeZ2Zl5d+dlN4A9ayD9k4k4HBEfJxEH6/OTiOiqljojhmv17i7M59IpiUrlzT+Tap07C/O5aFomtb8eHIqIH9+POJZpbbc0OzcxUijkp+vxYHny0mBpdu74+OTIWH4sP3X65NDQqTPPnzm9fbn+/fPcgZufvPbst8P/vvfU9Y9+SmI4DtQfa85juwzEQH2bdKWb8B6vbndjuyzZ7RVgS9JDs6N2lMfhOBgd1RIA8ChLr/8VAGCPSVz/AWCPaXwOcGdhPteYdvcTiZ1165WI6K3l37i/WXuks37Prrd6H7TvThKd9TuisY33uwYi4ovv3/46naJN9yEBVvLu1Yi40D/Qev5PWsYsbNaJDdQZWBY7/8HO+SHt/7ywUv8vs9j/icX+z5KeFY7drRiI6G6OW4//zI0VF3x5Gxqv9/9eqo1tSxNt6v8tDlrr76hHj6XBkYgYL+TTc9vjEXE0unoujhfyJ9do4+jt/26v9lhz/++va+98lbaf/l+qkbnR2XPvMqMj5ZH7ybnZrasRT3cuje2723L+7632dZfv/3TeubWe+MhS8fUXP/h8tWpp/mm+jak1//aqfBnxTKycf0Oy5vjEwXT3n6j9XbmN7379rG+19pv3fzql7TfeC6yie+vZtkr3f9/a+fcnzeM1S9vZ+kbyX/n13528VS03NsaVkXJ5+mREd/JG6/xTS8s24kb9NP9apsvzz6z5+k/fCV7YYI6dN//4Zuv5L2rLEMs0/9FN7f/NF67fnejYev7p/h+qlo7W52zk/LfRFbyfbQcAAAAAAAAAAAAAAAAAAAAAAAAAG5WJiAORZLKL5Uwmm639hveT0ZcpFEvlYxeLM1OjUf2t7P7oyjS+6vJgLU4a33/a3xSfWhY/FxFPRMSnPfuqcTZXLIzudvIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAULd/ld//T/3es9trBwC0Te+6NW7n7wkrlUqljesDALTf+td/AOBRs8b1f99OrgcAsHO8/weAvcf1HwD2Htd/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2uzc2bPpVPlnYT6XxqOXZ2cmipePj+ZLE9nJmVw2V5y+lB0rFscK+WyuOLne8xWKxUtDMTVzZbCcL5UHS7Nz5yeLM1Pl8+OTI2P58/muHckKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADanNDs3MVIo5KcficKHEfEArEY7Ckk8EKuxK4Xfjv9yaK0619Z5GQ8/EFk8ZIXdPjMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBz+DwAA//8CzCWs")
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="24000093baff1b7690189092ee60a52feb003900070101000000fbdbdf25037c000026fc04008c800c0001800600020088477ebc795552148d63f36c274dba906dbc2b5e1a3c18"], 0x24}}, 0xc0)

3.200542375s ago: executing program 0 (id=15522):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000300)='kfree\x00', r0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xce9d8d60ab13d530, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:')

3.164300608s ago: executing program 0 (id=15523):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041)
close(r3)

2.952672629s ago: executing program 5 (id=15529):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80080a, &(0x7f0000000340)={[{@barrier_val}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0xba}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x364}}], [{@appraise_type}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@fsname={'fsname', 0x3d, '\x00\x00\x01\x00\x00\x00'}}, {@uid_eq}]}, 0x1, 0x79b, &(0x7f0000001140)="$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")

2.894911264s ago: executing program 5 (id=15531):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {r0}}, './file0\x00'})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYRESHEX=r1], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@deltclass={0x24, 0x29, 0x2, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xb, 0xfff3}, {0xffff, 0x9}}}, 0x24}}, 0x74000800)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r6=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='qdisc_create\x00', r8, 0x0, 0x66e}, 0x18)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x8, 0xb, 0x4}}}}]}, 0x40}}, 0x4000010)
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc, 0x2000, 0x3, 0x400, 0x8a})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80080a, &(0x7f0000000340)={[{@barrier_val}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0xba}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x364}}], [{@appraise_type}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@fsname={'fsname', 0x3d, '\x00\x00\x01\x00\x00\x00'}}, {@uid_eq}]}, 0x1, 0x79b, &(0x7f0000001140)="$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")
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="24000093baff1b7690189092ee60a52feb003900070101000000fbdbdf25037c000026fc04008c800c0001800600020088477ebc795552148d63f36c274dba906dbc2b5e1a3c18"], 0x24}}, 0xc0)

2.777045976s ago: executing program 5 (id=15536):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4), 0xc)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)}], &(0x7f00000005c0), 0x1}, 0x20)

2.72815879s ago: executing program 5 (id=15539):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x1006, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x203, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
pipe2$9p(&(0x7f00000000c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB="2c7766d72f58e97c59f346cd5d388af232f3", @ANYRESHEX=r7, @ANYBLOB=',version=9p2000,\x00'])
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
socket$netlink(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r12=>0x0})
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in=@multicast1, @in=@private=0xa010102, 0x4e23, 0x2, 0x4e21, 0x0, 0xa, 0x20, 0x20, 0x6, r9}, {0x6, 0x78f7, 0x3, 0x8001, 0x4, 0xfffffffffffffffd, 0x5, 0xfffffffffffffffe}, {0x440, 0x9, 0x400, 0x3}, 0x7ff, 0x6e6bbf, 0x1, 0x1, 0x1, 0x3}, {{@in=@local, 0x4d3, 0x3c}, 0xa, @in6=@local, 0x3500, 0x4, 0x0, 0x8, 0x9, 0x6, 0x8000}}, 0xe8)
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000)
sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@newtfilter={0x4e8, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r12, {0x3}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4bc, 0x2, [@TCA_U32_POLICE={0x444, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x2dbc04b6, 0x1, 0x50, 0xa, 0x4, 0x800, 0x3, 0x10, 0x7, 0x9, 0x0, 0xd, 0x8, 0x5, 0x7f, 0x9, 0x9, 0x4, 0x81, 0x5, 0x537d, 0x0, 0xfffffffa, 0x12000000, 0x6, 0x3, 0x4, 0x0, 0xffffffff, 0x8, 0x0, 0x1, 0x7, 0x7fff, 0x0, 0xffffffff, 0x10, 0x258, 0x5, 0x8, 0x4, 0x1d, 0x5, 0x1, 0xfffff173, 0x1, 0x401, 0x7, 0x8000, 0x10000, 0xe, 0x3, 0x1, 0xd, 0x8, 0x0, 0x0, 0x4, 0xa79, 0x5, 0xc, 0x2, 0x0, 0x30000, 0xd, 0x6, 0xffd, 0x40, 0xfffeffff, 0x7fff, 0x6b81102, 0x7f, 0xfffdfffe, 0x800000, 0x6, 0x8, 0x0, 0xe, 0x20000, 0xffff, 0x80000001, 0x1, 0x9a0, 0x4, 0x8, 0x6, 0x7, 0xfffffffb, 0x1ff, 0x3ff, 0x0, 0x40, 0xfc5, 0x810000, 0xb422, 0x1, 0x1, 0x8, 0x1, 0xa0bd, 0x200, 0x400, 0x1, 0xc, 0xff, 0x3, 0x2, 0xffffffc0, 0x8, 0x8001, 0x3f3, 0x8, 0x9, 0xf, 0x4, 0x3, 0x0, 0x6, 0xd, 0x8, 0x62, 0x800, 0x0, 0x7, 0x3, 0x8, 0x2, 0xf4, 0x81, 0x0, 0x6, 0x200, 0xad07, 0x8001, 0x8, 0x9, 0x121, 0x44, 0xb10, 0x8, 0x7, 0xfff, 0xa, 0x4e, 0x80, 0xfec300, 0xe815, 0x1, 0xfffffff9, 0xfffff801, 0x9, 0x1, 0xff, 0x7, 0x7, 0x7, 0x8001, 0x7, 0x1ff, 0x401, 0x5, 0x2, 0x1ff, 0x4, 0x2, 0x5f, 0x2, 0x1, 0x1, 0xb, 0x7, 0xb, 0x7, 0xc, 0x9, 0x68, 0x8, 0x6, 0x4, 0x9ca, 0x100, 0x9, 0xfff, 0xfffffffd, 0x1, 0xf, 0x2, 0xfffffff8, 0x80000001, 0x4, 0x9, 0x8, 0x8, 0x9, 0x3, 0x1, 0x7, 0x8, 0x5, 0x4, 0xc, 0x0, 0xffffff68, 0x80000000, 0x5, 0x4, 0xfffffff7, 0xd6f, 0x4, 0x38, 0x3ff, 0x6, 0x9bb, 0xd31d, 0xfff, 0xfff, 0x40, 0x101, 0x3, 0x4, 0x0, 0x1ff, 0x6, 0x0, 0x9, 0x5, 0x4, 0x0, 0x1000, 0x5, 0x1bfffffc, 0x1, 0x8006, 0x9, 0x6, 0x3, 0x1, 0x0, 0x10000, 0x2, 0x7, 0x7, 0x6, 0xfffff7f0, 0x2, 0x3, 0x8090, 0x5, 0x6d8, 0xfffffffb, 0x9, 0x400, 0xf, 0x8, 0x6, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6e8ccd9d, 0x8, 0x9, 0x9, 0x7fffffff, {0x8, 0x0, 0x92fd, 0x0, 0x1, 0x100}, {0x1, 0x2, 0xab11, 0x7, 0x8}, 0x3, 0x2, 0x6}}]}, @TCA_U32_SEL={0x74, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0xdeb2, 0x3, 0x6, 0x3}, {0x1, 0xfffffffb, 0xde, 0x3ff}, {0x200, 0x3ff, 0x7, 0x4}, {0x9, 0x7, 0x40, 0x80}, {0x3ff, 0xb, 0x3, 0xa6d}]}}]}}]}, 0x4e8}, 0x1, 0x0, 0x0, 0xccd4ddef28bd690b}, 0x40094)

2.599728862s ago: executing program 5 (id=15541):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x24}}, 0xc0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r2, 0x400455c8, 0x0)
syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c8568660", 0x10}], 0x1}, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
close(r5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20)
recvmsg$unix(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x0)
sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4000000)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)

1.828344246s ago: executing program 7 (id=15554):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80080a, &(0x7f0000000340)={[{@barrier_val}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0xba}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x364}}], [{@appraise_type}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@fsname={'fsname', 0x3d, '\x00\x00\x01\x00\x00\x00'}}, {@uid_eq}]}, 0x1, 0x79b, &(0x7f0000001140)="$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")

1.749778744s ago: executing program 7 (id=15555):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000180), 0xfa, 0x58f, &(0x7f0000002d00)="$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")
r0 = creat(&(0x7f0000000000)='./file1\x00', 0x14c)
fallocate(r0, 0x0, 0x9, 0x2000403)

1.712553047s ago: executing program 7 (id=15557):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0)
ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000)

1.617827296s ago: executing program 7 (id=15560):
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@deltclass={0x24, 0x29, 0x2, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xb, 0xfff3}, {0xffff, 0x9}}}, 0x24}}, 0x74000800)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r5=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='qdisc_create\x00', r7, 0x0, 0x66e}, 0x18)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x8, 0xb, 0x4}}}}]}, 0x40}}, 0x4000010)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc, 0x2000, 0x3, 0x400, 0x8a})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80080a, &(0x7f0000000340)={[{@barrier_val}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0xba}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x364}}], [{@appraise_type}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@fsname={'fsname', 0x3d, '\x00\x00\x01\x00\x00\x00'}}, {@uid_eq}]}, 0x1, 0x79b, &(0x7f0000001140)="$eJzs3c1rHGUYAPBnNp9Nq40g2HppTloo3bQ1tgqCEQ8iWCjo2TZstiFmky3ZTWlCDhYRBBG0eBD04tmPevMqevZv8CIiLVXTYsWDrMx+JNtsvptN2ub3g0neZ/adfeeZ2Zl5d+dlN4A9ayD9k4k4HBEfJxEH6/OTiOiqljojhmv17i7M59IpiUrlzT+Tap07C/O5aFomtb8eHIqIH9+POJZpbbc0OzcxUijkp+vxYHny0mBpdu74+OTIWH4sP3X65NDQqTPPnzm9fbn+/fPcgZufvPbst8P/vvfU9Y9+SmI4DtQfa85juwzEQH2bdKWb8B6vbndjuyzZ7RVgS9JDs6N2lMfhOBgd1RIA8ChLr/8VAGCPSVz/AWCPaXwOcGdhPteYdvcTiZ1165WI6K3l37i/WXuks37Prrd6H7TvThKd9TuisY33uwYi4ovv3/46naJN9yEBVvLu1Yi40D/Qev5PWsYsbNaJDdQZWBY7/8HO+SHt/7ywUv8vs9j/icX+z5KeFY7drRiI6G6OW4//zI0VF3x5Gxqv9/9eqo1tSxNt6v8tDlrr76hHj6XBkYgYL+TTc9vjEXE0unoujhfyJ9do4+jt/26v9lhz/++va+98lbaf/l+qkbnR2XPvMqMj5ZH7ybnZrasRT3cuje2723L+7632dZfv/3TeubWe+MhS8fUXP/h8tWpp/mm+jak1//aqfBnxTKycf0Oy5vjEwXT3n6j9XbmN7379rG+19pv3fzql7TfeC6yie+vZtkr3f9/a+fcnzeM1S9vZ+kbyX/n13528VS03NsaVkXJ5+mREd/JG6/xTS8s24kb9NP9apsvzz6z5+k/fCV7YYI6dN//4Zuv5L2rLEMs0/9FN7f/NF67fnejYev7p/h+qlo7W52zk/LfRFbyfbQcAAAAAAAAAAAAAAAAAAAAAAAAAG5WJiAORZLKL5Uwmm639hveT0ZcpFEvlYxeLM1OjUf2t7P7oyjS+6vJgLU4a33/a3xSfWhY/FxFPRMSnPfuqcTZXLIzudvIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAULd/ld//T/3es9trBwC0Te+6NW7n7wkrlUqljesDALTf+td/AOBRs8b1f99OrgcAsHO8/weAvcf1HwD2Htd/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2uzc2bPpVPlnYT6XxqOXZ2cmipePj+ZLE9nJmVw2V5y+lB0rFscK+WyuOLne8xWKxUtDMTVzZbCcL5UHS7Nz5yeLM1Pl8+OTI2P58/muHckKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADanNDs3MVIo5KcficKHEfEArEY7Ckk8EKuxK4Xfjv9yaK0619Z5GQ8/EFk8ZIXdPjMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBz+DwAA//8CzCWs")
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="24000093baff1b7690189092ee60a52feb003900070101000000fbdbdf25037c000026fc04008c800c0001800600020088477ebc795552148d63f36c274dba906dbc2b5e1a3c18"], 0x24}}, 0xc0)

1.482476829s ago: executing program 7 (id=15567):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_DISALLOCATE(r4, 0x5608)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
fcntl$getown(r3, 0x9)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xf)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32=<r9=>0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r8}, 0x18)
r10 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x6}, &(0x7f00000001c0)=<r11=>0x0, &(0x7f0000000580)=<r12=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r11, r12, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1})
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd}, 0x94)
r14 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYBLOB="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", @ANYRES32=r13, @ANYRES32=r9, @ANYRES8=r13, @ANYRES32=r1, @ANYRESHEX=r11, @ANYRES8=r6, @ANYRESDEC, @ANYRESDEC=r7], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000580)='kmem_cache_free\x00', r14}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r15 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r15)
waitid(0x0, 0x0, 0x0, 0xe, 0x0)
io_uring_enter(r10, 0x6e2, 0x3900, 0x1, 0x0, 0xe00)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
ioctl$TCFLSH(r7, 0x400455c8, 0x0)

1.194727506s ago: executing program 4 (id=15575):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4), 0xc)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340)}], 0x0, 0x2}, 0x20)

629.34979ms ago: executing program 7 (id=15576):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
getresuid(&(0x7f0000000140), &(0x7f0000000080), &(0x7f0000000100))
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000030500000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0703050000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="6d3d3b6525add37b0699f7ed4d5f000b612892411380e3abf36cc59f8f33cd4a717e67d6575c8c03fefe82a0ecab8bc811d4cfbd609d5464703f24162db0515191e32222047c4c07102ad88fd61c68cdd27a34615461b5570d63525eec71f0636e3af94ddaad7ad8f39503b186ec0234490f268e5cf74b08048ffe71a889e687b2787440564875d3347aefa228d964fab3a68f1f8ce56af803443fc96274a669492dc4d7ba128812343c419252f0789cc45f7e5760696036"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e24, 0x696e, @loopback, 0x5}, 0x1c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, 0x0}, 0x0)
io_setup(0x7, &(0x7f0000000280)=<r3=>0x0)
r4 = openat$sysfs(0xffffff9c, &(0x7f00000001c0)='/sys/power/pm_trace', 0x42, 0x0)
io_submit(r3, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0xfffffc98}])
r5 = socket$rxrpc(0x21, 0x2, 0x2)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r6, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x40}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x44840)
poll(&(0x7f0000000040)=[{r5, 0x4000}, {r0, 0x2544}, {r0, 0x100}], 0x3, 0x1)

628.404151ms ago: executing program 4 (id=15586):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = syz_io_uring_setup(0x10b, 0x0, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4c, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40010020})
io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x81, 0x7, 0x7ffc0001}]})

586.362225ms ago: executing program 4 (id=15578):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x48100, 0x0)
accept4$llc(0xffffffffffffffff, &(0x7f0000000380)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x0, 0x80800)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='sched_switch\x00'}, 0x18)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r2, 0x0, 0xfffffffffffffff4}, 0x18)

488.037414ms ago: executing program 9 (id=15579):
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x78)
dup(0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1800018, &(0x7f00000000c0)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000ec0)="$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")
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DESTROY(r3, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x1a0, 0x15, 0x4, 0x70bd2b, 0x25dfdbfd, {0x9, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x70, 0x1, "591fd9bebed1096cf80f073a4f6b65fe28e631510755014fd0b7430125e04c37966e099d44e7794988c6765fbdbbad02539d2d98cc1b38dd25e34aa9b49a9712caf7d283e5b7c175b069cb332b3090a0db39d0e502c80c377cd43f7c0e2ab28973e62be3606b8168f1cf7db7"}, @INET_DIAG_REQ_BYTECODE={0xd7, 0x1, "d7e942247dcb71f410a53f054c093c44c73439dab7e3371d2d642e7f953230bb6f8e787dac6ca3ca7659e6d62340d2cb28dfaf5746e1164a017e4d6947f0eea664257600560c9c86297c98c25f34e31740142edfbffae1257c6734fd9ebc9d3d144c0d57c7c1e497932b257d3a358e9915b1b3d667d8cf97f887a0091d96d627085423587affeef9fa57f3db1f8aea5f064b6d9a3c8596a7ac2deac158f6d55da9c8e90378a47136b10720791663453a2993d31da202471a022fc716e362f59e5f8161afab5e598ea4ce0a510d6cb40ea8d254"}, @INET_DIAG_REQ_BYTECODE={0x42, 0x1, "6a4c3d5187cd36298a58dc63408d4d2e2da5a9d425beab03d3c275415c49551dfb9f4ffe2c0e2c816e0d1ffaa2ac92046fcbf303c848d1d5cad2b8839053"}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x24000001}, 0x448c0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"})
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r0, 0x1, 0x200000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40840d4}, 0x0)

476.228905ms ago: executing program 4 (id=15580):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000300)='kfree\x00', r0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xce9d8d60ab13d530, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:')

393.063713ms ago: executing program 4 (id=15581):
r0 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000)
sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000015c0)="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", 0x4bb}], 0x1}, 0x0)

379.369004ms ago: executing program 9 (id=15582):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000580)={0x4, 0x2}, 0x8)
sendto$inet6(r0, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000180), 0xfa, 0x58f, &(0x7f0000002d00)="$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")
r4 = creat(&(0x7f0000000000)='./file1\x00', 0x14c)
fallocate(r4, 0x0, 0x9, 0x2000403)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r5, 0x6628)

375.679614ms ago: executing program 4 (id=15583):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="24000002", @ANYRES16=r1, @ANYBLOB="080027bd7000fddbdf252500000005002b00010000000600060002000000"], 0x24}}, 0x20000000)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
uname(&(0x7f0000000300)=""/193)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3104047, &(0x7f0000000640)={[{@noinit_itable}, {@data_err_abort}, {@prjquota}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@norecovery}, {@grpquota}, {@block_validity}, {@user_xattr}, {@bh}, {@nomblk_io_submit}, {@noinit_itable}, {@auto_da_alloc}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0)
write(r5, &(0x7f00000001c0)="f1", 0x1)
sendfile(r5, r3, 0x0, 0x40001)
sendfile(r5, r4, 0x0, 0x7ffff000)

239.466507ms ago: executing program 9 (id=15584):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$packet(0x11, 0x2, 0x300)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000043c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r3=>0xffffffffffffffff}, 0x106, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x4734}}, 0x10)
close(r2)

237.520558ms ago: executing program 9 (id=15585):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000008c0)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)

213.22038ms ago: executing program 9 (id=15587):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
r2 = socket$inet6(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
getsockopt$netlink(r3, 0x10e, 0xc, &(0x7f0000002300)=""/4096, &(0x7f0000000000)=0x1000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000080)={@private2}, 0x14)
getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x88)
r5 = socket$kcm(0xa, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000008000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000))
sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000)
sendmsg$inet(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000015c0)="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", 0x567}], 0x1}, 0x0)

191.606892ms ago: executing program 9 (id=15588):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001280)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0xf0, 0xf0, 0xffffffff, 0x310, 0xf0, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x33, @ipv4=@empty, @ipv4=@rand_addr=0x64010102}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @port=0x4e22}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private0, [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'syzkaller1\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x33, 0x2, 0x5, 0x20}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x379)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$eJzs3T9oJFUcB/DvzO565m7RUxtB/AMiooFwdoLN2SgcyHGICCqciNgod8J5h11iZWOhtUoqmyB2RktJE2wUwSpqitgIGiwMFlqs7M4G8mc1ZnfdkcznA5OZybyZ3xt2vm+3ebsBGutskvNJWknmk3SSFHsb3FctZ4e7y3Prl5Ne7+lfi0G7ar+ye96ZJEtJHk2yVhZ5tZ3cWH1+6/eNJx9853rngY9Wn5ub6U0ObW9tPrXz4cW3P73wyI2vv/35YpHz6e67r+krRvyvXSS3/xfF/ieKdt094N+49OYn3/Vzf0eS+wf576RM9eK9e+2mtU4e/uDvzn3vl2/ummVfgenr9Tr998ClHtA4ZZJuinIhSbVdlgsL1Wf471uny9euXntj/pWr16+8XPdIBUxLN9l84vNTn505kP+fWlX+gZOrn/9nLq380N/eadXdG2Am7q5W/fzPv7j4UOQfGkf+obnkH5pL/qG55B+aS/6hueQfTrDOPx+Wf2gu+Yfmkn9orr35BwCapXdqnFnDt05/IjIwc3WPPwAAAAAAAAAAAAAAAAAAwGHLc+uXd5dxr1Ecs/2X7yfbjydpj6rfGvwecXLz4O/p34p+s3212uN2dOiFeye8wIQ+rnn29S0/1lv/q3vqrb94JVl6K8m5dvvw81cMn7/x3XbE8c5LExY4poP5fOzZ2dY/6M+Veutf2Ei+6I8/50aNP2XuHKxHjz/do79i+Uiv/zHhBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJiZvwIAAP//1rxsXQ==")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000005c0))
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = socket(0x2, 0x5, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000100)={0xd8, 0x1, 0x0, 0x2, r8}, &(0x7f00000001c0)=0x10)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000180)={r8, 0xfffffff9}, 0x8)
pwrite64(0xffffffffffffffff, &(0x7f00000005c0)='\"', 0x1, 0x4fed0)
sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x1c, 0xb, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x20000000)
ioctl$EXT4_IOC_MIGRATE(r4, 0x6609)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002f00)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3ff, 0x9, 0x555, 0x2, 0xb7, 0x9, 0x36b, 0x9, 0xe, 0x7ff, 0x1a, 0x4, 0x7, 0xa, 0xa, 0x44ac0092}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}}, 0x800)

0s ago: executing program 5 (id=15589):
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x2, 0x40, 0x1, 0x6, 0x8, 0xc2, 0x9, 0x1}}}}]}, 0x58}}, 0x0)

kernel console output (not intermixed with test programs):

 compat=0 ip=0x7f88a49ff749 code=0x7ffc0000
[  910.814290][   T29] audit: type=1326 audit(1766617454.213:145637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13039 comm="syz.4.14844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f88a49ff749 code=0x7ffc0000
[  910.838116][   T29] audit: type=1326 audit(1766617454.213:145638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13039 comm="syz.4.14844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a49ff749 code=0x7ffc0000
[  910.844175][T13038] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  910.861899][   T29] audit: type=1326 audit(1766617454.213:145639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13039 comm="syz.4.14844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a49ff749 code=0x7ffc0000
[  910.972111][T13049] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  910.997937][T13049] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  911.065418][T13057] EXT4-fs (loop9): too many log groups per flexible block group
[  911.085193][T13057] EXT4-fs (loop9): failed to initialize mballoc (-12)
[  911.103030][T13057] EXT4-fs (loop9): mount failed
[  911.155107][T13063] netlink: 176 bytes leftover after parsing attributes in process `syz.9.14852'.
[  911.370974][T13073] EXT4-fs: Ignoring removed i_version option
[  911.377587][T13073] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  911.391408][T13073] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.14856: Invalid block bitmap block 0 in block_group 0
[  911.405292][T13073] Quota error (device loop4): write_blk: dquota write failed
[  911.414352][T13073] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.14856: Failed to acquire dquot type 0
[  911.426139][T13073] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.14856: Freeing blocks not in datazone - block = 0, count = 4096
[  911.440121][T13073] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.14856: Invalid inode bitmap blk 0 in block_group 0
[  911.453303][T13073] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[  911.462126][T11814] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:55: Failed to release dquot type 0
[  911.474207][T13073] EXT4-fs (loop4): 1 orphan inode deleted
[  911.484520][T13073] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  911.513344][T10724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  911.535978][T13082] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  911.559904][T13082] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  911.574199][T13082] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  911.602520][T10724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  911.604080][T13090] netlink: 176 bytes leftover after parsing attributes in process `syz.5.14863'.
[  911.635500][T13092] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  911.649168][T13092] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  911.662115][T13092] ext4 filesystem being mounted at /182/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  911.734278][T13098] set_capacity_and_notify: 27 callbacks suppressed
[  911.734297][T13098] loop4: detected capacity change from 0 to 512
[  911.775858][T13098] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  911.791595][T13098] EXT4-fs (loop4): orphan cleanup on readonly fs
[  911.817296][T13098] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.14866: corrupted inode contents
[  911.836017][T13098] EXT4-fs (loop4): Remounting filesystem read-only
[  911.851437][T13098] EXT4-fs (loop4): 1 truncate cleaned up
[  911.858625][  T837] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  911.869219][  T837] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  911.917461][  T837] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[  911.944301][T13098] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  912.004859][T13098] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  912.039758][T13098] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  912.044863][T13111] netlink: 176 bytes leftover after parsing attributes in process `syz.5.14870'.
[  912.068183][T13113] loop7: detected capacity change from 0 to 1024
[  912.075312][T13113] EXT4-fs: Ignoring removed i_version option
[  912.082397][T13113] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  912.099630][T13098] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  912.109979][T13113] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.14871: Invalid block bitmap block 0 in block_group 0
[  912.128169][T13113] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.14871: Failed to acquire dquot type 0
[  912.145562][T13113] EXT4-fs error (device loop7): ext4_free_blocks:6728: comm syz.7.14871: Freeing blocks not in datazone - block = 0, count = 4096
[  912.163415][T13113] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.14871: Invalid inode bitmap blk 0 in block_group 0
[  912.177671][T11784] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:25: Failed to release dquot type 0
[  912.189613][T13113] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem
[  912.198693][T13113] EXT4-fs (loop7): 1 orphan inode deleted
[  912.203718][T13121] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  912.245911][T13125] netlink: 176 bytes leftover after parsing attributes in process `syz.7.14875'.
[  912.342696][T13136] loop7: detected capacity change from 0 to 1024
[  912.350113][T13136] EXT4-fs: Ignoring removed i_version option
[  912.356573][T13136] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  912.370371][T13136] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.14880: Invalid block bitmap block 0 in block_group 0
[  912.384341][T13136] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.14880: Failed to acquire dquot type 0
[  912.396495][T13136] EXT4-fs error (device loop7): ext4_free_blocks:6728: comm syz.7.14880: Freeing blocks not in datazone - block = 0, count = 4096
[  912.410402][T13136] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.14880: Invalid inode bitmap blk 0 in block_group 0
[  912.423553][T13136] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem
[  912.432215][ T8735] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 0
[  912.444258][T13136] EXT4-fs (loop7): 1 orphan inode deleted
[  912.496927][T13141] loop7: detected capacity change from 0 to 512
[  912.505191][T13141] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.14882: inode has both inline data and extents flags
[  912.518987][T13141] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.14882: couldn't read orphan inode 15 (err -117)
[  912.587034][T13148] netlink: 'syz.7.14882': attribute type 4 has an invalid length.
[  912.596378][T13149] IPv6: Can't replace route, no match found
[  912.622283][T13151] loop5: detected capacity change from 0 to 1024
[  912.629204][T13151] EXT4-fs: Ignoring removed i_version option
[  912.635602][T13151] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  912.648308][T13151] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.14886: Invalid block bitmap block 0 in block_group 0
[  912.662261][T13151] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.14886: Failed to acquire dquot type 0
[  912.674027][T13151] EXT4-fs error (device loop5): ext4_free_blocks:6728: comm syz.5.14886: Freeing blocks not in datazone - block = 0, count = 4096
[  912.688174][T13151] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.14886: Invalid inode bitmap blk 0 in block_group 0
[  912.701888][T13151] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem
[  912.711143][T13151] EXT4-fs (loop5): 1 orphan inode deleted
[  912.711160][T11821] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:62: Failed to release dquot type 0
[  912.747729][T13154] netlink: 176 bytes leftover after parsing attributes in process `syz.5.14887'.
[  912.789863][T13158] loop5: detected capacity change from 0 to 512
[  912.796877][T13158] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  912.809567][T13158] ext4 filesystem being mounted at /360/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  912.879002][T13162] sctp: [Deprecated]: syz.5.14890 (pid 13162) Use of struct sctp_assoc_value in delayed_ack socket option.
[  912.879002][T13162] Use struct sctp_sack_info instead
[  912.904190][T13162] loop5: detected capacity change from 0 to 1764
[  912.950279][T13164] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  913.134501][T13168] loop9: detected capacity change from 0 to 128
[  913.304007][T13182] loop5: detected capacity change from 0 to 1024
[  913.310817][T13182] EXT4-fs: Ignoring removed i_version option
[  913.317458][T13182] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  913.329705][T13182] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.14898: Invalid block bitmap block 0 in block_group 0
[  913.343758][T13182] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.14898: Failed to acquire dquot type 0
[  913.355447][  T837] Bluetooth: hci0: Frame reassembly failed (-84)
[  913.362368][T13182] EXT4-fs error (device loop5): ext4_free_blocks:6728: comm syz.5.14898: Freeing blocks not in datazone - block = 0, count = 4096
[  913.376500][T13182] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.14898: Invalid inode bitmap blk 0 in block_group 0
[  913.389947][T11799] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:40: Failed to release dquot type 0
[  913.402296][T13182] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem
[  913.411590][T13182] EXT4-fs (loop5): 1 orphan inode deleted
[  913.507244][T13191] process '/newroot/168/file0' started with executable stack
[  913.642333][T13214] loop7: detected capacity change from 0 to 512
[  913.654865][T13214] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.14910: inode has both inline data and extents flags
[  913.679754][T13214] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.14910: couldn't read orphan inode 15 (err -117)
[  913.713399][T13219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14912'.
[  913.749308][T13221] tipc: Started in network mode
[  913.754291][T13221] tipc: Node identity f6a2d8ea2f56, cluster identity 4711
[  913.761579][T13221] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  913.770063][T13221] tipc: Disabling bearer <eth:syzkaller0>
[  913.778683][T13222] netlink: 'syz.7.14910': attribute type 4 has an invalid length.
[  913.868972][T13230] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  913.923309][T13239] IPv6: Can't replace route, no match found
[  914.010692][T13243] SELinux: failed to load policy
[  914.098604][T13245] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.14923: iget: bad extra_isize 90 (inode size 256)
[  914.112331][T13245] EXT4-fs (loop5): Remounting filesystem read-only
[  914.119179][T13245] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -30)
[  914.128392][T13245] EXT4-fs (loop5): 1 orphan inode deleted
[  914.399533][T13250] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  914.503732][T11826] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  914.515946][T11826] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  914.529634][T11826] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  914.544561][T11826] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  914.589666][T13259] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  914.666603][T11814] Bluetooth: hci1: Frame reassembly failed (-84)
[  914.739534][T13280] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.14937: inode has both inline data and extents flags
[  914.753237][T13280] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.14937: couldn't read orphan inode 15 (err -117)
[  914.821978][T13285] netlink: 'syz.5.14937': attribute type 4 has an invalid length.
[  914.921574][T13289] netlink: 224 bytes leftover after parsing attributes in process `+}[@'.
[  914.976952][T13293] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  915.397396][T32345] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  915.397412][ T3536] Bluetooth: hci0: command 0x1003 tx timeout
[  915.548658][T13299] FAULT_INJECTION: forcing a failure.
[  915.548658][T13299] name failslab, interval 1, probability 0, space 0, times 0
[  915.561390][T13299] CPU: 0 UID: 0 PID: 13299 Comm: syz.7.14943 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  915.561420][T13299] Tainted: [W]=WARN
[  915.561464][T13299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  915.561476][T13299] Call Trace:
[  915.561483][T13299]  <TASK>
[  915.561490][T13299]  __dump_stack+0x1d/0x30
[  915.561519][T13299]  dump_stack_lvl+0x95/0xd0
[  915.561638][T13299]  dump_stack+0x15/0x1b
[  915.561664][T13299]  should_fail_ex+0x265/0x280
[  915.561688][T13299]  should_failslab+0x8c/0xb0
[  915.561708][T13299]  __kmalloc_noprof+0xb9/0x5a0
[  915.561729][T13299]  ? __list_lru_init+0x72/0x2e0
[  915.561756][T13299]  __list_lru_init+0x72/0x2e0
[  915.561883][T13299]  alloc_super+0x50d/0x580
[  915.561911][T13299]  sget_fc+0x24e/0x6e0
[  915.561936][T13299]  ? __pfx_set_anon_super_fc+0x10/0x10
[  915.561968][T13299]  ? __pfx_mqueue_fill_super+0x10/0x10
[  915.561987][T13299]  get_tree_nodev+0x2a/0x100
[  915.562016][T13299]  mqueue_get_tree+0x63/0x90
[  915.562033][T13299]  vfs_get_tree+0x57/0x1d0
[  915.562146][T13299]  fc_mount_longterm+0x18/0xb0
[  915.562173][T13299]  mq_init_ns+0x2cb/0x370
[  915.562201][T13299]  copy_ipcs+0x266/0x450
[  915.562219][T13299]  create_new_namespaces+0x12a/0x400
[  915.562298][T13299]  unshare_nsproxy_namespaces+0xe8/0x120
[  915.562321][T13299]  ksys_unshare+0x3d0/0x6d0
[  915.562341][T13299]  ? ksys_write+0x192/0x1a0
[  915.562360][T13299]  __x64_sys_unshare+0x1f/0x30
[  915.562408][T13299]  x64_sys_call+0x2ae6/0x3000
[  915.562439][T13299]  do_syscall_64+0xca/0x2b0
[  915.562481][T13299]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  915.562551][T13299] RIP: 0033:0x7effa981f749
[  915.562565][T13299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  915.562581][T13299] RSP: 002b:00007effa827f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  915.562599][T13299] RAX: ffffffffffffffda RBX: 00007effa9a75fa0 RCX: 00007effa981f749
[  915.562610][T13299] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000200
[  915.562621][T13299] RBP: 00007effa827f090 R08: 0000000000000000 R09: 0000000000000000
[  915.562649][T13299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  915.562665][T13299] R13: 00007effa9a76038 R14: 00007effa9a75fa0 R15: 00007ffe29151938
[  915.562740][T13299]  </TASK>
[  915.816716][   T29] kauditd_printk_skb: 99 callbacks suppressed
[  915.816735][   T29] audit: type=1400 audit(1766617459.323:145719): avc:  denied  { unmount } for  pid=8929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  915.857081][T11799] Bluetooth: hci0: Frame reassembly failed (-84)
[  915.866950][   T29] audit: type=1400 audit(1766617459.383:145720): avc:  denied  { create } for  pid=13302 comm="syz.0.14946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  915.886874][   T29] audit: type=1400 audit(1766617459.383:145721): avc:  denied  { write } for  pid=13302 comm="syz.0.14946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  915.906700][   T29] audit: type=1400 audit(1766617459.383:145722): avc:  denied  { write } for  pid=13302 comm="syz.0.14946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  915.927743][T13301] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  915.939154][T13305] netlink: 'syz.5.14945': attribute type 29 has an invalid length.
[  915.960613][   T29] audit: type=1326 audit(1766617459.473:145723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13307 comm="syz.7.14947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa981f749 code=0x7ffc0000
[  915.984490][   T29] audit: type=1326 audit(1766617459.473:145724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13307 comm="syz.7.14947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa981f749 code=0x7ffc0000
[  916.008428][   T29] audit: type=1326 audit(1766617459.473:145725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13307 comm="syz.7.14947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effa981f749 code=0x7ffc0000
[  916.008480][   T29] audit: type=1326 audit(1766617459.473:145726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13307 comm="syz.7.14947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa981f749 code=0x7ffc0000
[  916.008507][   T29] audit: type=1326 audit(1766617459.473:145727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13307 comm="syz.7.14947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa981f749 code=0x7ffc0000
[  916.008535][   T29] audit: type=1326 audit(1766617459.473:145728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13307 comm="syz.7.14947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effa981f749 code=0x7ffc0000
[  916.118814][T13310] EXT4-fs (loop5): too many log groups per flexible block group
[  916.118988][T13310] EXT4-fs (loop5): failed to initialize mballoc (-12)
[  916.147041][T13310] EXT4-fs (loop5): mount failed
[  916.160306][T13313] EXT4-fs (loop7): too many log groups per flexible block group
[  916.169528][T13313] EXT4-fs (loop7): failed to initialize mballoc (-12)
[  916.176748][T13313] EXT4-fs (loop7): mount failed
[  916.213376][T13321] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  916.236090][T13325] bpf: Bad value for 'uid'
[  916.269795][T13329] IPv6: Can't replace route, no match found
[  916.270884][T13330] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.14955: inode has both inline data and extents flags
[  916.289521][T13330] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.14955: couldn't read orphan inode 15 (err -117)
[  916.358135][T13339] netlink: 'syz.5.14955': attribute type 4 has an invalid length.
[  916.436500][T13345] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  916.458972][T11799] Bluetooth: hci2: Frame reassembly failed (-84)
[  916.597043][T13356] vlan2: entered allmulticast mode
[  916.653445][T13357] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  916.677475][ T6412] Bluetooth: hci1: command 0x1003 tx timeout
[  916.683842][   T44] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  916.780289][T13362] vlan2: entered allmulticast mode
[  916.841173][T13362] set_capacity_and_notify: 13 callbacks suppressed
[  916.841197][T13362] loop7: detected capacity change from 0 to 2048
[  916.854488][T13362] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  916.885081][T13365] IPv6: Can't replace route, no match found
[  916.938491][ T3973] hid-generic 0003:0004:0000.000D: unknown main item tag 0x0
[  916.945983][ T3973] hid-generic 0003:0004:0000.000D: unknown main item tag 0x0
[  916.953637][ T3973] hid-generic 0003:0004:0000.000D: unknown main item tag 0x0
[  916.961210][ T3973] hid-generic 0003:0004:0000.000D: unknown main item tag 0x0
[  916.968657][ T3973] hid-generic 0003:0004:0000.000D: unknown main item tag 0x0
[  916.976154][ T3973] hid-generic 0003:0004:0000.000D: unknown main item tag 0x0
[  916.983647][ T3973] hid-generic 0003:0004:0000.000D: unknown main item tag 0x0
[  916.991123][ T3973] hid-generic 0003:0004:0000.000D: unknown main item tag 0x0
[  916.998560][ T3973] hid-generic 0003:0004:0000.000D: unknown main item tag 0x0
[  917.006209][ T3973] hid-generic 0003:0004:0000.000D: unknown main item tag 0x0
[  917.014957][ T3973] hid-generic 0003:0004:0000.000D: hidraw0: USB HID v0.00 Device [syz0] on syz1
[  917.124186][T13373] FAULT_INJECTION: forcing a failure.
[  917.124186][T13373] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  917.137651][T13373] CPU: 1 UID: 0 PID: 13373 Comm: syz.7.14970 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  917.137690][T13373] Tainted: [W]=WARN
[  917.137700][T13373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  917.137716][T13373] Call Trace:
[  917.137723][T13373]  <TASK>
[  917.137731][T13373]  __dump_stack+0x1d/0x30
[  917.137781][T13373]  dump_stack_lvl+0x95/0xd0
[  917.137804][T13373]  dump_stack+0x15/0x1b
[  917.137902][T13373]  should_fail_ex+0x265/0x280
[  917.137927][T13373]  should_fail_alloc_page+0xf2/0x100
[  917.137953][T13373]  __alloc_frozen_pages_noprof+0x109/0x360
[  917.137987][T13373]  alloc_pages_mpol+0xb3/0x260
[  917.138136][T13373]  alloc_pages_noprof+0x90/0x130
[  917.138167][T13373]  __pud_alloc+0x47/0x4b0
[  917.138200][T13373]  handle_mm_fault+0x18b5/0x2c60
[  917.138279][T13373]  ? __rcu_read_unlock+0x4f/0x70
[  917.138301][T13373]  ? mt_find+0x21b/0x330
[  917.138399][T13373]  do_user_addr_fault+0x3fe/0x1080
[  917.138473][T13373]  ? cred_has_capability+0x210/0x280
[  917.138628][T13373]  exc_page_fault+0x62/0xa0
[  917.138658][T13373]  asm_exc_page_fault+0x26/0x30
[  917.138755][T13373] RIP: 0010:__put_user_4+0xd/0x20
[  917.138840][T13373] Code: 66 89 01 31 c9 0f 01 ca e9 50 9f 01 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90
[  917.138859][T13373] RSP: 0018:ffffc900011cfd20 EFLAGS: 00050206
[  917.138934][T13373] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000000000
[  917.138947][T13373] RDX: 0000000000000000 RSI: ffff88810df188bf RDI: ffff88810df178c8
[  917.138960][T13373] RBP: 0000000000000002 R08: 0001c90000ed0267 R09: 0000000000000000
[  917.138973][T13373] R10: 0001c900011cfd00 R11: 0001c900011cfd07 R12: 0000000000000000
[  917.138986][T13373] R13: ffff88810df178c0 R14: ffff88810df188bf R15: ffffc90000ece000
[  917.139006][T13373]  n_tty_ioctl+0x20d/0x230
[  917.139114][T13373]  ? __pfx_n_tty_ioctl+0x10/0x10
[  917.139142][T13373]  tty_ioctl+0x83f/0xb80
[  917.139162][T13373]  ? file_has_perm+0x359/0x3a0
[  917.139192][T13373]  ? __pfx_tty_ioctl+0x10/0x10
[  917.139217][T13373]  do_vfs_ioctl+0xa79/0xe10
[  917.139311][T13373]  ? selinux_file_ioctl+0x1bd/0x3a0
[  917.139343][T13373]  ? __fget_files+0x184/0x1c0
[  917.139375][T13373]  __se_sys_ioctl+0x82/0x140
[  917.139410][T13373]  __x64_sys_ioctl+0x43/0x50
[  917.139442][T13373]  x64_sys_call+0x14b0/0x3000
[  917.139469][T13373]  do_syscall_64+0xca/0x2b0
[  917.139504][T13373]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  917.139597][T13373] RIP: 0033:0x7effa981f749
[  917.139614][T13373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  917.139632][T13373] RSP: 002b:00007effa827f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  917.139651][T13373] RAX: ffffffffffffffda RBX: 00007effa9a75fa0 RCX: 00007effa981f749
[  917.139664][T13373] RDX: 0000200000000000 RSI: 000000000000541b RDI: 0000000000000003
[  917.139690][T13373] RBP: 00007effa827f090 R08: 0000000000000000 R09: 0000000000000000
[  917.139702][T13373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  917.139714][T13373] R13: 00007effa9a76038 R14: 00007effa9a75fa0 R15: 00007ffe29151938
[  917.139734][T13373]  </TASK>
[  917.205759][T13375] loop5: detected capacity change from 0 to 512
[  917.256118][T13377] FAULT_INJECTION: forcing a failure.
[  917.256118][T13377] name failslab, interval 1, probability 0, space 0, times 0
[  917.286965][T13375] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  917.294496][T13377] CPU: 0 UID: 0 PID: 13377 Comm: syz.4.14972 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  917.294535][T13377] Tainted: [W]=WARN
[  917.294544][T13377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  917.294560][T13377] Call Trace:
[  917.294568][T13377]  <TASK>
[  917.294578][T13377]  __dump_stack+0x1d/0x30
[  917.294728][T13377]  dump_stack_lvl+0x95/0xd0
[  917.294822][T13377]  dump_stack+0x15/0x1b
[  917.294889][T13377]  should_fail_ex+0x265/0x280
[  917.294996][T13377]  should_failslab+0x8c/0xb0
[  917.295072][T13377]  kmem_cache_alloc_node_noprof+0x6b/0x4c0
[  917.295150][T13377]  ? __alloc_skb+0x2ff/0x4b0
[  917.295237][T13377]  __alloc_skb+0x2ff/0x4b0
[  917.295314][T13377]  ? __alloc_skb+0x228/0x4b0
[  917.295388][T13377]  netlink_alloc_large_skb+0xbf/0xf0
[  917.295418][T13377]  netlink_sendmsg+0x3cf/0x6b0
[  917.295555][T13377]  ? __pfx_netlink_sendmsg+0x10/0x10
[  917.295675][T13377]  __sock_sendmsg+0x145/0x180
[  917.295751][T13377]  ____sys_sendmsg+0x31e/0x4a0
[  917.295914][T13377]  ___sys_sendmsg+0x17b/0x1d0
[  917.296059][T13377]  __x64_sys_sendmsg+0xd4/0x160
[  917.296167][T13377]  x64_sys_call+0x17ba/0x3000
[  917.296284][T13377]  do_syscall_64+0xca/0x2b0
[  917.296420][T13377]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  917.296496][T13377] RIP: 0033:0x7f88a49ff749
[  917.296643][T13377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  917.296782][T13377] RSP: 002b:00007f88a345f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  917.296840][T13377] RAX: ffffffffffffffda RBX: 00007f88a4c55fa0 RCX: 00007f88a49ff749
[  917.296887][T13377] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003
[  917.297008][T13377] RBP: 00007f88a345f090 R08: 0000000000000000 R09: 0000000000000000
[  917.297051][T13377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  917.297093][T13377] R13: 00007f88a4c56038 R14: 00007f88a4c55fa0 R15: 00007ffc6cd1c908
[  917.297152][T13377]  </TASK>
[  917.581669][T13389] netlink: 24 bytes leftover after parsing attributes in process `syz.7.14976'.
[  917.633965][T13375] ext4 filesystem being mounted at /387/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  917.643512][T13389] IPVS: Error connecting to the multicast addr
[  917.748141][T13397] sctp: [Deprecated]: syz.4.14978 (pid 13397) Use of struct sctp_assoc_value in delayed_ack socket option.
[  917.748141][T13397] Use struct sctp_sack_info instead
[  917.771722][T13399] loop7: detected capacity change from 0 to 512
[  917.784238][T13401] netlink: 51 bytes leftover after parsing attributes in process `syz.5.14980'.
[  917.789516][T13397] loop4: detected capacity change from 0 to 1764
[  917.795273][T13399] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.14979: inode has both inline data and extents flags
[  917.818980][T13399] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.14979: couldn't read orphan inode 15 (err -117)
[  917.849047][T13406] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  917.877516][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[  917.883244][T32345] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  917.913798][T13414] netlink: 'syz.7.14979': attribute type 4 has an invalid length.
[  917.924410][T13406] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  917.979509][T13406] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  918.039445][T13406] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  918.095834][ T8735] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  918.108212][ T8735] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  918.120350][ T8735] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  918.132127][ T8735] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  918.253533][T13424] IPv6: Can't replace route, no match found
[  918.413080][T13431] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  918.470104][T13431] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  918.480809][T11826] Bluetooth: hci0: Frame reassembly failed (-84)
[  918.517471][   T44] Bluetooth: hci2: command 0x1003 tx timeout
[  918.518442][ T3536] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  918.531771][T13431] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  918.569751][T13431] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  918.619205][T11799] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  918.631453][T11799] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  918.641045][T13434] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  918.654856][T11826] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  918.665973][T11826] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  918.681015][T13434] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  918.729782][T13434] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  918.809094][T13434] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  918.992630][T11814] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  919.048389][T11814] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  919.100552][T13443] sctp: [Deprecated]: syz.4.14994 (pid 13443) Use of struct sctp_assoc_value in delayed_ack socket option.
[  919.100552][T13443] Use struct sctp_sack_info instead
[  919.130206][T11814] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  919.189262][T11814] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  919.359461][T13443] loop4: detected capacity change from 0 to 1764
[  919.892508][T13450] FAULT_INJECTION: forcing a failure.
[  919.892508][T13450] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  919.905812][T13450] CPU: 0 UID: 0 PID: 13450 Comm: syz.7.14997 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  919.905992][T13450] Tainted: [W]=WARN
[  919.906002][T13450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  919.906019][T13450] Call Trace:
[  919.906029][T13450]  <TASK>
[  919.906111][T13450]  __dump_stack+0x1d/0x30
[  919.906137][T13450]  dump_stack_lvl+0x95/0xd0
[  919.906165][T13450]  dump_stack+0x15/0x1b
[  919.906192][T13450]  should_fail_ex+0x265/0x280
[  919.906223][T13450]  should_fail+0xb/0x20
[  919.906294][T13450]  should_fail_usercopy+0x1a/0x20
[  919.906477][T13450]  _copy_from_user+0x1c/0xb0
[  919.906563][T13450]  rfkill_fop_write+0xab/0x440
[  919.906585][T13450]  vfs_writev+0x406/0x8b0
[  919.906611][T13450]  ? __pfx_rfkill_fop_write+0x10/0x10
[  919.906685][T13450]  do_writev+0xe7/0x210
[  919.906718][T13450]  __x64_sys_writev+0x45/0x50
[  919.906747][T13450]  x64_sys_call+0x1ba5/0x3000
[  919.906811][T13450]  do_syscall_64+0xca/0x2b0
[  919.906846][T13450]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  919.906867][T13450] RIP: 0033:0x7effa981f749
[  919.906922][T13450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  919.906946][T13450] RSP: 002b:00007effa827f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  919.906965][T13450] RAX: ffffffffffffffda RBX: 00007effa9a75fa0 RCX: 00007effa981f749
[  919.907023][T13450] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 000000000000000a
[  919.907041][T13450] RBP: 00007effa827f090 R08: 0000000000000000 R09: 0000000000000000
[  919.907058][T13450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  919.907072][T13450] R13: 00007effa9a76038 R14: 00007effa9a75fa0 R15: 00007ffe29151938
[  919.907096][T13450]  </TASK>
[  920.861550][T32345] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  920.867763][ T3536] Bluetooth: hci0: command 0x1003 tx timeout
[  921.413120][   T29] kauditd_printk_skb: 197 callbacks suppressed
[  921.413208][   T29] audit: type=1400 audit(1766617464.923:145926): avc:  denied  { egress } for  pid=22 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1
[  921.443259][   T29] audit: type=1400 audit(1766617464.923:145927): avc:  denied  { sendto } for  pid=22 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1
[  921.477228][T13458] bridge_slave_0: left allmulticast mode
[  921.483097][T13458] bridge_slave_0: left promiscuous mode
[  921.489037][T13458] bridge0: port 1(bridge_slave_0) entered disabled state
[  921.519610][T13462] Invalid argument reading file caps for ./file0
[  921.528433][T13460] loop4: detected capacity change from 0 to 1024
[  921.559027][T13458] bridge_slave_1: left allmulticast mode
[  921.564872][T13458] bridge_slave_1: left promiscuous mode
[  921.570746][T13458] bridge0: port 2(bridge_slave_1) entered disabled state
[  921.648582][T13458] bond0: (slave bond_slave_0): Releasing backup interface
[  921.688013][T13458] bond0: (slave bond_slave_1): Releasing backup interface
[  921.759508][T13458] team0: Port device team_slave_0 removed
[  921.769881][T13458] team0: Port device team_slave_1 removed
[  921.777382][T13458] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  921.784811][T13458] batman_adv: batadv0: Removing interface: batadv_slave_0
[  921.794367][T13458] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  921.802018][T13458] batman_adv: batadv0: Removing interface: batadv_slave_1
[  921.874834][T13458] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  922.016006][T13477] loop0: detected capacity change from 0 to 1024
[  922.034578][T13477] EXT4-fs: Ignoring removed i_version option
[  922.065458][T13477] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  922.103324][T13477] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.15008: Invalid block bitmap block 0 in block_group 0
[  922.149966][T13477] Quota error (device loop0): write_blk: dquota write failed
[  922.157439][T13477] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  922.187492][T13477] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.15008: Failed to acquire dquot type 0
[  922.214935][T13477] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.15008: Freeing blocks not in datazone - block = 0, count = 4096
[  922.256571][T13477] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.15008: Invalid inode bitmap blk 0 in block_group 0
[  922.269688][ T8979] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-8
[  922.278823][ T8979] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 0
[  922.296218][T13483] loop4: detected capacity change from 0 to 512
[  922.312305][T13483] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  922.325584][T13477] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[  922.341376][T13477] EXT4-fs (loop0): 1 orphan inode deleted
[  922.349133][T13483] ext4 filesystem being mounted at /203/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  922.458910][T13488] loop0: detected capacity change from 0 to 512
[  922.492707][T13488] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  922.552727][T13492] loop4: detected capacity change from 0 to 1024
[  922.565347][T13488] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  922.579472][T13494] loop7: detected capacity change from 0 to 1024
[  922.636454][   T29] audit: type=1326 audit(1766617466.133:145928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13491 comm="syz.4.15013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a49ff749 code=0x7ffc0000
[  922.660319][   T29] audit: type=1326 audit(1766617466.143:145929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13491 comm="syz.4.15013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f88a49ff749 code=0x7ffc0000
[  922.684365][   T29] audit: type=1326 audit(1766617466.143:145930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13491 comm="syz.4.15013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a49ff749 code=0x7ffc0000
[  922.810374][T13507] sctp: [Deprecated]: syz.9.15017 (pid 13507) Use of struct sctp_assoc_value in delayed_ack socket option.
[  922.810374][T13507] Use struct sctp_sack_info instead
[  922.846634][T13508] loop7: detected capacity change from 0 to 512
[  922.859056][   T29] audit: type=1400 audit(1766617466.343:145931): avc:  denied  { write } for  pid=13505 comm="syz.7.15015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  922.890608][T13508] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #18: comm syz.7.15015: iget: bad extra_isize 90 (inode size 256)
[  922.924678][T13508] EXT4-fs (loop7): Remounting filesystem read-only
[  922.989656][T13508] EXT4-fs warning (device loop7): ext4_evict_inode:273: xattr delete (err -30)
[  922.999773][T13508] EXT4-fs (loop7): 1 orphan inode deleted
[  923.019786][T13507] loop9: detected capacity change from 0 to 1764
[  923.043781][   T29] audit: type=1400 audit(1766617466.553:145932): avc:  denied  { watch } for  pid=13514 comm="syz.0.15019" path="/155" dev="tmpfs" ino=845 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  923.196814][T13526] loop9: detected capacity change from 0 to 512
[  923.204601][T13526] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  923.221965][T13526] ext4 filesystem being mounted at /466/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  923.238577][T13530] loop0: detected capacity change from 0 to 1024
[  923.255556][T13530] EXT4-fs: Ignoring removed i_version option
[  923.267174][T13530] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  923.303161][T13530] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.15025: Invalid block bitmap block 0 in block_group 0
[  923.316990][T13530] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.15025: Failed to acquire dquot type 0
[  923.331602][T13534] loop9: detected capacity change from 0 to 512
[  923.337575][T13530] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.15025: Freeing blocks not in datazone - block = 0, count = 4096
[  923.355049][T13530] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.15025: Invalid inode bitmap blk 0 in block_group 0
[  923.368023][   T37] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 0
[  923.368384][T13530] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[  923.388618][T13530] EXT4-fs (loop0): 1 orphan inode deleted
[  923.395041][T13534] EXT4-fs (loop9): too many log groups per flexible block group
[  923.403351][T13534] EXT4-fs (loop9): failed to initialize mballoc (-12)
[  923.410501][T13534] EXT4-fs (loop9): mount failed
[  923.481078][T13538] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  923.550552][T13544] sctp: [Deprecated]: syz.9.15030 (pid 13544) Use of struct sctp_assoc_value in delayed_ack socket option.
[  923.550552][T13544] Use struct sctp_sack_info instead
[  923.694970][T13554] EXT4-fs: Ignoring removed i_version option
[  923.717727][T13554] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  923.754332][T13554] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.15035: Invalid block bitmap block 0 in block_group 0
[  923.768434][T13554] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.15035: Failed to acquire dquot type 0
[  923.780408][T13554] EXT4-fs error (device loop9): ext4_free_blocks:6728: comm syz.9.15035: Freeing blocks not in datazone - block = 0, count = 4096
[  923.794430][T13554] EXT4-fs error (device loop9): ext4_read_inode_bitmap:139: comm syz.9.15035: Invalid inode bitmap blk 0 in block_group 0
[  923.807993][T13554] EXT4-fs error (device loop9) in ext4_free_inode:361: Corrupt filesystem
[  923.808543][   T37] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 0
[  923.817153][T13554] EXT4-fs (loop9): 1 orphan inode deleted
[  923.918107][T13560] EXT4-fs (loop9): too many log groups per flexible block group
[  923.927576][T13560] EXT4-fs (loop9): failed to initialize mballoc (-12)
[  923.934426][T13560] EXT4-fs (loop9): mount failed
[  924.194485][T13577] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15039'.
[  924.246488][T13579] Invalid argument reading file caps for ./file0
[  924.630890][T13588] netlink: 20 bytes leftover after parsing attributes in process `syz.9.15045'.
[  924.663107][T13586] netlink: 24 bytes leftover after parsing attributes in process `syz.9.15045'.
[  925.121129][T13598] EXT4-fs (loop9): too many log groups per flexible block group
[  925.129463][T13598] EXT4-fs (loop9): failed to initialize mballoc (-12)
[  925.136311][T13598] EXT4-fs (loop9): mount failed
[  925.180920][T13602] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  925.190972][T13604] IPv6: Can't replace route, no match found
[  925.209579][T13602] ext4 filesystem being mounted at /483/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  925.308575][T13610] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  925.316906][T13610] EXT4-fs (loop0): orphan cleanup on readonly fs
[  925.341076][T13610] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.15052: corrupted inode contents
[  925.354142][T13610] EXT4-fs (loop0): Remounting filesystem read-only
[  925.354415][T13610] EXT4-fs (loop0): 1 truncate cleaned up
[  925.397038][T13616] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  925.449281][T13616] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  925.467301][T13620] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  925.497041][T13622] IPv6: Can't replace route, no match found
[  925.509437][T13616] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  925.539376][T13624] EXT4-fs: Ignoring removed i_version option
[  925.546003][T13624] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  925.558790][T13624] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.15058: Invalid block bitmap block 0 in block_group 0
[  925.575343][T13616] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  925.586841][T13624] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.15058: Failed to acquire dquot type 0
[  925.598673][T13624] EXT4-fs error (device loop7): ext4_free_blocks:6728: comm syz.7.15058: Freeing blocks not in datazone - block = 0, count = 4096
[  925.613093][T13624] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.15058: Invalid inode bitmap blk 0 in block_group 0
[  925.626185][T13624] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem
[  925.642273][T11796] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  925.658184][T11796] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  925.668993][T13624] EXT4-fs (loop7): 1 orphan inode deleted
[  925.694338][T11796] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  925.728836][T11796] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  925.817442][T11792] Bluetooth: hci0: Frame reassembly failed (-84)
[  926.041253][T11799] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  926.051882][T11799] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  926.062890][T11799] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[  926.077729][T13638] Invalid argument reading file caps for ./file0
[  926.084237][T11799] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:40: Failed to release dquot type 0
[  926.118889][T13610] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  926.131495][T13640] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  926.155451][T13642] FAULT_INJECTION: forcing a failure.
[  926.155451][T13642] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  926.168621][T13642] CPU: 0 UID: 0 PID: 13642 Comm: syz.7.15060 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  926.168709][T13642] Tainted: [W]=WARN
[  926.168718][T13642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  926.168734][T13642] Call Trace:
[  926.168741][T13642]  <TASK>
[  926.168750][T13642]  __dump_stack+0x1d/0x30
[  926.168796][T13642]  dump_stack_lvl+0x95/0xd0
[  926.168827][T13642]  dump_stack+0x15/0x1b
[  926.168851][T13642]  should_fail_ex+0x265/0x280
[  926.168928][T13642]  should_fail+0xb/0x20
[  926.168948][T13642]  should_fail_usercopy+0x1a/0x20
[  926.168978][T13642]  _copy_from_user+0x1c/0xb0
[  926.169032][T13642]  ___sys_sendmsg+0xc1/0x1d0
[  926.169118][T13642]  __x64_sys_sendmsg+0xd4/0x160
[  926.169204][T13642]  x64_sys_call+0x17ba/0x3000
[  926.169236][T13642]  do_syscall_64+0xca/0x2b0
[  926.169352][T13642]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  926.169375][T13642] RIP: 0033:0x7effa981f749
[  926.169395][T13642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  926.169428][T13642] RSP: 002b:00007effa827f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  926.169453][T13642] RAX: ffffffffffffffda RBX: 00007effa9a75fa0 RCX: 00007effa981f749
[  926.169469][T13642] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[  926.169489][T13642] RBP: 00007effa827f090 R08: 0000000000000000 R09: 0000000000000000
[  926.169501][T13642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  926.169516][T13642] R13: 00007effa9a76038 R14: 00007effa9a75fa0 R15: 00007ffe29151938
[  926.169540][T13642]  </TASK>
[  926.171861][T13640] ext4 filesystem being mounted at /398/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  926.349053][T13610] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  926.382719][T13646] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #18: comm syz.7.15066: iget: bad extra_isize 90 (inode size 256)
[  926.399667][T13646] EXT4-fs (loop7): Remounting filesystem read-only
[  926.406355][T13646] EXT4-fs warning (device loop7): ext4_evict_inode:273: xattr delete (err -30)
[  926.416021][T13646] EXT4-fs (loop7): 1 orphan inode deleted
[  926.418035][T13610] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  926.500135][T13610] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  926.576147][T13656] ext4 filesystem being mounted at /402/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  926.594476][T11799] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  926.615515][T11799] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  926.634346][T11799] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  926.645051][T11799] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  926.831307][T13674] EXT4-fs (loop7): too many log groups per flexible block group
[  926.839228][T13674] EXT4-fs (loop7): failed to initialize mballoc (-12)
[  926.840867][   T29] kauditd_printk_skb: 61 callbacks suppressed
[  926.840928][   T29] audit: type=1400 audit(1766617470.353:145979): avc:  denied  { create } for  pid=13679 comm="syz.9.15079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  926.846420][T13674] EXT4-fs (loop7): mount failed
[  926.885752][   T29] audit: type=1400 audit(1766617470.373:145980): avc:  denied  { connect } for  pid=13679 comm="syz.9.15079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  926.905931][   T29] audit: type=1400 audit(1766617470.373:145981): avc:  denied  { write } for  pid=13679 comm="syz.9.15079" path="socket:[187405]" dev="sockfs" ino=187405 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  926.938756][T13682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15074'.
[  927.156673][   T29] audit: type=1326 audit(1766617470.663:145982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13686 comm="syz.7.15081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa981f749 code=0x7ffc0000
[  927.189991][   T29] audit: type=1326 audit(1766617470.703:145983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13686 comm="syz.7.15081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa981f749 code=0x7ffc0000
[  927.213895][   T29] audit: type=1326 audit(1766617470.703:145984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13686 comm="syz.7.15081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effa981f749 code=0x7ffc0000
[  927.237920][   T29] audit: type=1326 audit(1766617470.703:145985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13686 comm="syz.7.15081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa981f749 code=0x7ffc0000
[  927.261809][   T29] audit: type=1326 audit(1766617470.703:145986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13686 comm="syz.7.15081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa981f749 code=0x7ffc0000
[  927.285574][   T29] audit: type=1326 audit(1766617470.703:145987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13686 comm="syz.7.15081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effa981f749 code=0x7ffc0000
[  927.309336][   T29] audit: type=1326 audit(1766617470.703:145988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13686 comm="syz.7.15081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa981f749 code=0x7ffc0000
[  927.807590][ T3536] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  927.903446][T13691] IPv6: Can't replace route, no match found
[  928.000754][T13697] set_capacity_and_notify: 15 callbacks suppressed
[  928.000801][T13697] loop7: detected capacity change from 0 to 512
[  928.059750][T13697] EXT4-fs (loop7): too many log groups per flexible block group
[  928.078426][T13705] loop5: detected capacity change from 0 to 2048
[  928.084887][T13697] EXT4-fs (loop7): failed to initialize mballoc (-12)
[  928.104269][T13697] EXT4-fs (loop7): mount failed
[  928.109661][T13705] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  928.410068][T11796] Bluetooth: hci0: Frame reassembly failed (-84)
[  928.552151][T13726] loop4: detected capacity change from 0 to 2048
[  928.597908][T13726] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  928.732892][T13739] loop5: detected capacity change from 0 to 1024
[  928.748650][T13739] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  928.759646][T13739] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  928.773620][T13739] JBD2: no valid journal superblock found
[  928.779530][T13739] EXT4-fs (loop5): Could not load journal inode
[  928.848799][T13746] loop5: detected capacity change from 0 to 2048
[  928.861622][T13746] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  928.883110][T13748] loop0: detected capacity change from 0 to 2048
[  928.898230][T13748] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  928.915893][T13750] loop9: detected capacity change from 0 to 512
[  928.948116][T13750] EXT4-fs (loop9): too many log groups per flexible block group
[  928.956216][T13750] EXT4-fs (loop9): failed to initialize mballoc (-12)
[  928.970828][T13750] EXT4-fs (loop9): mount failed
[  928.991068][T13756] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  929.059442][T13756] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  929.099984][T13764] loop9: detected capacity change from 0 to 2048
[  929.106943][T13764] EXT4-fs: Ignoring removed nobh option
[  929.112656][T13764] EXT4-fs: Ignoring removed nobh option
[  929.118369][T13764] EXT4-fs: inline encryption not supported
[  929.129648][T13756] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  929.181754][T13756] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  929.195724][T13764] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.15108: bg 0: block 120: padding at end of block bitmap is not set
[  929.277783][T13772] loop5: detected capacity change from 0 to 128
[  929.286069][T13772] ext4 filesystem being mounted at /414/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  929.386099][T13779] IPv6: Can't replace route, no match found
[  929.485124][T13785] loop9: detected capacity change from 0 to 2048
[  929.492322][T13785] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  929.528568][T13787] Invalid argument reading file caps for ./file0
[  929.569241][T13791] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  929.577558][T13791] EXT4-fs (loop9): orphan cleanup on readonly fs
[  929.585944][T13791] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.15118: corrupted inode contents
[  929.598457][T13791] EXT4-fs (loop9): Remounting filesystem read-only
[  929.605112][T13791] EXT4-fs (loop9): 1 truncate cleaned up
[  929.611016][ T8979] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  929.621588][ T8979] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  929.632767][ T8979] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started
[  929.651400][T13791] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  929.699715][T13791] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  929.759293][T13791] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  929.813029][T13791] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  929.875619][T11782] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  929.897825][T11796] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  929.906343][T11796] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  929.915270][T11796] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  929.973028][T13818] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  930.189624][T13834] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  930.207950][T13834] EXT4-fs (loop5): orphan cleanup on readonly fs
[  930.227105][T13834] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.15133: corrupted inode contents
[  930.258371][T13834] EXT4-fs (loop5): Remounting filesystem read-only
[  930.269997][T13834] EXT4-fs (loop5): 1 truncate cleaned up
[  930.275837][T11782] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  930.286504][T11782] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  930.314389][T11782] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started
[  930.355490][T13834] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  930.366714][T13842] EXT4-fs: Ignoring removed i_version option
[  930.374733][T13842] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  930.396262][T13842] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.15136: Invalid block bitmap block 0 in block_group 0
[  930.437369][T32345] Bluetooth: hci0: command 0x1003 tx timeout
[  930.443573][ T3536] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  930.461437][T13842] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.15136: Failed to acquire dquot type 0
[  930.474043][T13834] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  930.484168][T13842] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.15136: Freeing blocks not in datazone - block = 0, count = 4096
[  930.498268][T13842] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.15136: Invalid inode bitmap blk 0 in block_group 0
[  930.511378][T13842] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[  930.520063][T11782] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:23: Failed to release dquot type 0
[  930.520650][T13842] EXT4-fs (loop4): 1 orphan inode deleted
[  930.549041][T13834] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  930.588280][T13847] FAULT_INJECTION: forcing a failure.
[  930.588280][T13847] name failslab, interval 1, probability 0, space 0, times 0
[  930.601092][T13847] CPU: 0 UID: 0 PID: 13847 Comm: syz.4.15138 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  930.601145][T13847] Tainted: [W]=WARN
[  930.601155][T13847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  930.601298][T13847] Call Trace:
[  930.601305][T13847]  <TASK>
[  930.601312][T13847]  __dump_stack+0x1d/0x30
[  930.601344][T13847]  dump_stack_lvl+0x95/0xd0
[  930.601417][T13847]  dump_stack+0x15/0x1b
[  930.601443][T13847]  should_fail_ex+0x265/0x280
[  930.601473][T13847]  should_failslab+0x8c/0xb0
[  930.601500][T13847]  __kmalloc_node_noprof+0xbe/0x5c0
[  930.601548][T13847]  ? qdisc_alloc+0x65/0x410
[  930.601582][T13847]  qdisc_alloc+0x65/0x410
[  930.601615][T13847]  ? nla_strcmp+0xc3/0xe0
[  930.601641][T13847]  qdisc_create+0xf5/0x9e0
[  930.601664][T13847]  tc_modify_qdisc+0xf9c/0x1480
[  930.601779][T13847]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  930.601802][T13847]  rtnetlink_rcv_msg+0x65a/0x6d0
[  930.601845][T13847]  netlink_rcv_skb+0x123/0x220
[  930.601879][T13847]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  930.601912][T13847]  rtnetlink_rcv+0x1c/0x30
[  930.601991][T13847]  netlink_unicast+0x5c0/0x690
[  930.602118][T13847]  netlink_sendmsg+0x58b/0x6b0
[  930.602256][T13847]  ? __pfx_netlink_sendmsg+0x10/0x10
[  930.602348][T13847]  __sock_sendmsg+0x145/0x180
[  930.602369][T13847]  ____sys_sendmsg+0x31e/0x4a0
[  930.602402][T13847]  ___sys_sendmsg+0x17b/0x1d0
[  930.602444][T13847]  __x64_sys_sendmsg+0xd4/0x160
[  930.602541][T13847]  x64_sys_call+0x17ba/0x3000
[  930.602565][T13847]  do_syscall_64+0xca/0x2b0
[  930.602606][T13847]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  930.602631][T13847] RIP: 0033:0x7f88a49ff749
[  930.602666][T13847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  930.602690][T13847] RSP: 002b:00007f88a345f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  930.602715][T13847] RAX: ffffffffffffffda RBX: 00007f88a4c55fa0 RCX: 00007f88a49ff749
[  930.602731][T13847] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000007
[  930.602744][T13847] RBP: 00007f88a345f090 R08: 0000000000000000 R09: 0000000000000000
[  930.602757][T13847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  930.602772][T13847] R13: 00007f88a4c56038 R14: 00007f88a4c55fa0 R15: 00007ffc6cd1c908
[  930.602870][T13847]  </TASK>
[  930.839617][T13834] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  930.873377][T13851] vlan2: entered allmulticast mode
[  930.894863][T11804] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  930.907666][T11782] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  930.920347][T11804] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  930.932190][T11804] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  930.954559][T13857] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  930.977413][T11782] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  930.985878][T11782] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  931.017421][T11782] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  931.027573][T11782] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  931.052885][T13861] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  931.188780][T13882] Invalid argument reading file caps for ./file0
[  931.328715][T13891] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  931.334651][T13899] FAULT_INJECTION: forcing a failure.
[  931.334651][T13899] name failslab, interval 1, probability 0, space 0, times 0
[  931.351381][T13899] CPU: 0 UID: 0 PID: 13899 Comm: syz.7.15156 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  931.351450][T13899] Tainted: [W]=WARN
[  931.351457][T13899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  931.351472][T13899] Call Trace:
[  931.351479][T13899]  <TASK>
[  931.351488][T13899]  __dump_stack+0x1d/0x30
[  931.351518][T13899]  dump_stack_lvl+0x95/0xd0
[  931.351544][T13899]  dump_stack+0x15/0x1b
[  931.351705][T13899]  should_fail_ex+0x265/0x280
[  931.351733][T13899]  should_failslab+0x8c/0xb0
[  931.351757][T13899]  kmem_cache_alloc_noprof+0x69/0x4b0
[  931.351780][T13899]  ? getname_flags+0x80/0x3b0
[  931.351883][T13899]  getname_flags+0x80/0x3b0
[  931.351914][T13899]  __x64_sys_unlinkat+0x70/0xb0
[  931.351941][T13899]  x64_sys_call+0x2b49/0x3000
[  931.351991][T13899]  do_syscall_64+0xca/0x2b0
[  931.352031][T13899]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  931.352059][T13899] RIP: 0033:0x7effa981f749
[  931.352076][T13899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  931.352120][T13899] RSP: 002b:00007effa827f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107
[  931.352144][T13899] RAX: ffffffffffffffda RBX: 00007effa9a75fa0 RCX: 00007effa981f749
[  931.352161][T13899] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffffffffff9c
[  931.352177][T13899] RBP: 00007effa827f090 R08: 0000000000000000 R09: 0000000000000000
[  931.352193][T13899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  931.352218][T13899] R13: 00007effa9a76038 R14: 00007effa9a75fa0 R15: 00007ffe29151938
[  931.352243][T13899]  </TASK>
[  931.560598][T13891] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  931.620083][T13910] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15160'.
[  931.637924][T13891] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  931.684291][T11801] Bluetooth: hci0: Frame reassembly failed (-84)
[  931.713668][T13891] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  931.725588][T13920] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  931.935299][T13935] syz_tun: entered promiscuous mode
[  931.941561][T13935] macvlan2: entered allmulticast mode
[  931.947092][T13935] syz_tun: entered allmulticast mode
[  931.954232][T13935] syz_tun: left allmulticast mode
[  931.959801][T13935] syz_tun: left promiscuous mode
[  932.043712][T13937] Invalid argument reading file caps for ./file0
[  932.067026][T13939] FAULT_INJECTION: forcing a failure.
[  932.067026][T13939] name failslab, interval 1, probability 0, space 0, times 0
[  932.079831][T13939] CPU: 1 UID: 0 PID: 13939 Comm: syz.5.15171 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  932.079929][T13939] Tainted: [W]=WARN
[  932.079938][T13939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  932.079958][T13939] Call Trace:
[  932.079964][T13939]  <TASK>
[  932.079972][T13939]  __dump_stack+0x1d/0x30
[  932.080061][T13939]  dump_stack_lvl+0x95/0xd0
[  932.080086][T13939]  dump_stack+0x15/0x1b
[  932.080105][T13939]  should_fail_ex+0x265/0x280
[  932.080191][T13939]  should_failslab+0x8c/0xb0
[  932.080214][T13939]  __kmalloc_cache_noprof+0x65/0x4c0
[  932.080268][T13939]  ? resv_map_alloc+0x32/0x190
[  932.080290][T13939]  ? vfs_write+0x7e8/0x960
[  932.080308][T13939]  resv_map_alloc+0x32/0x190
[  932.080360][T13939]  hugetlbfs_get_inode+0x67/0x370
[  932.080469][T13939]  ? mutex_unlock+0x4f/0x90
[  932.080494][T13939]  hugetlb_file_setup+0x192/0x3d0
[  932.080549][T13939]  ksys_mmap_pgoff+0x157/0x310
[  932.080575][T13939]  x64_sys_call+0x16bb/0x3000
[  932.080618][T13939]  do_syscall_64+0xca/0x2b0
[  932.080650][T13939]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  932.080671][T13939] RIP: 0033:0x7f704ed9f749
[  932.080720][T13939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  932.080841][T13939] RSP: 002b:00007f704d807038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  932.080866][T13939] RAX: ffffffffffffffda RBX: 00007f704eff5fa0 RCX: 00007f704ed9f749
[  932.080879][T13939] RDX: 0000000001000002 RSI: 0000000000ff5000 RDI: 0000200000000000
[  932.080891][T13939] RBP: 00007f704d807090 R08: ffffffffffffffff R09: 0000000000000000
[  932.080910][T13939] R10: 000200000005c831 R11: 0000000000000246 R12: 0000000000000001
[  932.080926][T13939] R13: 00007f704eff6038 R14: 00007f704eff5fa0 R15: 00007fffe48c7158
[  932.081013][T13939]  </TASK>
[  932.316837][T13943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15173'.
[  932.326421][T13943] hsr_slave_0: left promiscuous mode
[  932.332736][T13943] hsr_slave_1: left promiscuous mode
[  932.377644][   T29] kauditd_printk_skb: 627 callbacks suppressed
[  932.377661][   T29] audit: type=1400 audit(1766617475.893:146601): avc:  denied  { create } for  pid=13942 comm="syz.4.15173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  932.404262][   T29] audit: type=1400 audit(1766617475.893:146602): avc:  denied  { connect } for  pid=13942 comm="syz.4.15173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  932.425510][   T29] audit: type=1326 audit(1766617475.943:146603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13944 comm="syz.5.15174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f704ed9f749 code=0x7ffc0000
[  932.449512][   T29] audit: type=1326 audit(1766617475.943:146604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13944 comm="syz.5.15174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f704ed9f749 code=0x7ffc0000
[  932.473352][   T29] audit: type=1326 audit(1766617475.943:146605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13944 comm="syz.5.15174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f704ed9f749 code=0x7ffc0000
[  932.497665][   T29] audit: type=1326 audit(1766617475.943:146606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13944 comm="syz.5.15174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f704ed9f749 code=0x7ffc0000
[  932.521729][   T29] audit: type=1326 audit(1766617475.943:146607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13944 comm="syz.5.15174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f704ed9f749 code=0x7ffc0000
[  932.545555][   T29] audit: type=1326 audit(1766617475.943:146608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13944 comm="syz.5.15174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f704ed9f749 code=0x7ffc0000
[  932.602134][T13949] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.15175: iget: bad extra_isize 90 (inode size 256)
[  932.616235][T13949] EXT4-fs (loop4): Remounting filesystem read-only
[  932.623518][T13949] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30)
[  932.633019][T13949] EXT4-fs (loop4): 1 orphan inode deleted
[  932.639367][T13949] EXT4-fs mount: 91 callbacks suppressed
[  932.639385][T13949] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  932.796901][T10724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  932.818767][T13957] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  932.830478][T13957] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.15178: invalid indirect mapped block 4294967295 (level 0)
[  932.844797][T13957] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.15178: invalid indirect mapped block 4294967295 (level 1)
[  932.859643][T13957] EXT4-fs (loop4): 1 orphan inode deleted
[  932.865445][T13957] EXT4-fs (loop4): 1 truncate cleaned up
[  932.872008][T13957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  932.886909][   T29] audit: type=1400 audit(1766617476.403:146609): avc:  denied  { create } for  pid=13956 comm="syz.4.15178" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1
[  932.893511][T13957] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  932.940811][   T29] audit: type=1400 audit(1766617476.453:146610): avc:  denied  { read write } for  pid=13956 comm="syz.4.15178" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  932.995198][T10724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  933.021169][T13960] xt_CT: No such helper "pptp"
[  933.043643][T13960] IPv6: Can't replace route, no match found
[  933.068657][T13963] set_capacity_and_notify: 15 callbacks suppressed
[  933.068672][T13963] loop4: detected capacity change from 0 to 128
[  933.084423][T13963] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  933.097020][T13963] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  933.504336][T13967] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  933.545454][T13969] IPv6: Can't replace route, no match found
[  933.717555][T32345] Bluetooth: hci0: command 0x1003 tx timeout
[  933.723636][ T3536] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  933.910370][T10724] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  934.054187][T11796] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  934.065292][T11796] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  934.077126][T11796] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  934.091404][T11796] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  934.221061][T13988] vlan2: entered allmulticast mode
[  934.282348][T13991] loop9: detected capacity change from 0 to 2048
[  934.294823][T13991] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  934.323767][T13993] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  934.368683][T13995] IPv6: Can't replace route, no match found
[  934.452622][T14001] loop7: detected capacity change from 0 to 2048
[  934.462735][T14001] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  934.508328][T14005] loop9: detected capacity change from 0 to 1024
[  934.538167][T14005] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  934.568193][ T6259] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  934.597591][T14013] sctp: [Deprecated]: syz.9.15201 (pid 14013) Use of struct sctp_assoc_value in delayed_ack socket option.
[  934.597591][T14013] Use struct sctp_sack_info instead
[  934.630749][T11792] Bluetooth: hci0: Frame reassembly failed (-84)
[  934.641791][T14013] loop9: detected capacity change from 0 to 1764
[  934.699216][T14019] loop9: detected capacity change from 0 to 2048
[  934.705989][T14019] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  934.790545][T14024] IPv6: Can't replace route, no match found
[  934.820420][T14029] loop4: detected capacity change from 0 to 1024
[  934.832082][T14029] EXT4-fs error (device loop4): ext4_quota_enable:7177: inode #4: comm syz.4.15209: casefold flag without casefold feature
[  934.845685][T14029] EXT4-fs error (device loop4): ext4_quota_enable:7180: comm syz.4.15209: Bad quota inode: 4, type: 1
[  934.857192][T14029] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  934.872595][T14029] EXT4-fs (loop4): mount failed
[  934.898596][T14035] loop9: detected capacity change from 0 to 1024
[  934.905317][T14035] EXT4-fs: Ignoring removed i_version option
[  934.912918][T14035] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  934.925665][T14035] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.15211: Invalid block bitmap block 0 in block_group 0
[  934.940178][T14035] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.15211: Failed to acquire dquot type 0
[  934.951811][T14035] EXT4-fs error (device loop9): ext4_free_blocks:6728: comm syz.9.15211: Freeing blocks not in datazone - block = 0, count = 4096
[  934.965871][T14035] EXT4-fs error (device loop9): ext4_read_inode_bitmap:139: comm syz.9.15211: Invalid inode bitmap blk 0 in block_group 0
[  934.979026][T11792] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:33: Failed to release dquot type 0
[  934.993552][T14037] loop4: detected capacity change from 0 to 164
[  935.003652][T14035] EXT4-fs error (device loop9) in ext4_free_inode:361: Corrupt filesystem
[  935.012684][T14035] EXT4-fs (loop9): 1 orphan inode deleted
[  935.019455][T14037] Unable to read rock-ridge attributes
[  935.025365][T14035] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  935.039789][T14037] Unable to read rock-ridge attributes
[  935.063891][ T6259] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  935.172919][T14041] vlan2: entered allmulticast mode
[  935.205274][T14043] sctp: [Deprecated]: syz.4.15214 (pid 14043) Use of struct sctp_assoc_value in delayed_ack socket option.
[  935.205274][T14043] Use struct sctp_sack_info instead
[  935.233086][T14043] loop4: detected capacity change from 0 to 1764
[  935.234023][T14044] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  935.284486][T14050] Invalid argument reading file caps for ./file0
[  935.312075][T14054] IPv6: Can't replace route, no match found
[  935.341217][T14056] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  935.378650][ T6259] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  935.388552][T14062] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  935.397922][T14062] EXT4-fs (loop4): orphan cleanup on readonly fs
[  935.413682][T14062] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.15222: corrupted inode contents
[  935.428079][T14062] EXT4-fs (loop4): Remounting filesystem read-only
[  935.438564][T14062] EXT4-fs (loop4): 1 truncate cleaned up
[  935.441920][T14068] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  935.452820][ T8979] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  935.463641][ T8979] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  935.476735][T14066] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  935.495121][ T8979] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[  935.508576][T14062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  935.531616][T14071] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  935.544835][T14073] sctp: [Deprecated]: syz.0.15226 (pid 14073) Use of struct sctp_assoc_value in delayed_ack socket option.
[  935.544835][T14073] Use struct sctp_sack_info instead
[  935.565260][T14062] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  935.595418][T14075] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  935.605885][T14062] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  935.654259][T14081] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  935.668367][T14081] ext4 filesystem being mounted at /439/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  935.673518][T14083] IPv6: Can't replace route, no match found
[  935.686383][T14062] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  935.730053][T14088] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  935.743906][T14062] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  935.770183][ T6259] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  935.799816][ T8979] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  935.818749][ T8979] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  935.831944][ T8979] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  935.846010][ T8979] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  935.887625][T10724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  935.919072][T14100] sctp: [Deprecated]: syz.9.15238 (pid 14100) Use of struct sctp_assoc_value in delayed_ack socket option.
[  935.919072][T14100] Use struct sctp_sack_info instead
[  936.086211][T14114] bridge0: entered promiscuous mode
[  936.092014][T14114] macvtap1: entered promiscuous mode
[  936.097429][T14114] macvtap1: entered allmulticast mode
[  936.102920][T14114] bridge0: entered allmulticast mode
[  936.109350][T14114] bridge0: port 1(macvtap1) entered blocking state
[  936.115915][T14114] bridge0: port 1(macvtap1) entered disabled state
[  936.124032][T14114] bridge0: left allmulticast mode
[  936.129328][T14114] bridge0: left promiscuous mode
[  936.494258][ T8929] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  936.529391][T14118] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  936.554875][ T8929] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  936.603510][T11801] Bluetooth: hci1: Frame reassembly failed (-84)
[  936.677399][ T3536] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  936.683668][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[  936.690730][T14128] vlan2: entered allmulticast mode
[  936.736203][T14129] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  937.059265][T14150] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  937.087364][T10724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  937.230916][T14157] IPv6: Can't replace route, no match found
[  937.272625][T14161] vlan2: entered allmulticast mode
[  937.334665][T14161] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  937.560072][T14176] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  937.567812][  T837] Bluetooth: hci0: Frame reassembly failed (-84)
[  937.598271][T10724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  937.623748][T14185] vlan2: entered allmulticast mode
[  937.689358][T14185] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  937.893587][T14197] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  937.910015][T14197] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  937.923012][T14197] ext4 filesystem being mounted at /189/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  937.974606][T10550] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  938.025280][T14208] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  938.053059][T10550] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  938.076316][T14214] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  938.090781][T14216] set_capacity_and_notify: 20 callbacks suppressed
[  938.090799][T14216] loop4: detected capacity change from 0 to 512
[  938.104458][T14214] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  938.121029][T14214] ext4 filesystem being mounted at /191/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  938.132058][T14216] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  938.144185][T14216] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.15284: invalid indirect mapped block 4294967295 (level 0)
[  938.158911][T14216] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.15284: invalid indirect mapped block 4294967295 (level 1)
[  938.173817][T14216] EXT4-fs (loop4): 1 orphan inode deleted
[  938.179688][T14216] EXT4-fs (loop4): 1 truncate cleaned up
[  938.186276][T14216] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  938.202862][T14216] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  938.220068][T10550] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  938.302982][T10724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  938.388257][T14237] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  938.407241][T14239] sctp: [Deprecated]: syz.0.15292 (pid 14239) Use of struct sctp_assoc_value in delayed_ack socket option.
[  938.407241][T14239] Use struct sctp_sack_info instead
[  938.435148][T14239] loop0: detected capacity change from 0 to 1764
[  938.479469][T14237] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  938.496141][T14244] loop0: detected capacity change from 0 to 1024
[  938.520224][T14244] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  938.534345][T14237] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  938.560312][T10550] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  938.579443][T14237] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  938.614258][T14248] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  938.687558][ T3536] Bluetooth: hci1: command 0x1003 tx timeout
[  938.688563][T32345] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  938.763487][T14256] IPv6: Can't replace route, no match found
[  939.000236][T14271] vlan2: entered allmulticast mode
[  939.006547][T14272] loop0: detected capacity change from 0 to 1024
[  939.019364][T14272] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  939.045403][T10550] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  939.064783][T14271] loop9: detected capacity change from 0 to 2048
[  939.071434][T14271] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  939.128735][T14284] Invalid argument reading file caps for ./file0
[  939.172136][   T29] kauditd_printk_skb: 34 callbacks suppressed
[  939.172154][   T29] audit: type=1400 audit(1766617482.683:146636): avc:  denied  { bind } for  pid=14287 comm="syz.9.15311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  939.198702][   T29] audit: type=1400 audit(1766617482.683:146637): avc:  denied  { name_bind } for  pid=14287 comm="syz.9.15311" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  939.220978][   T29] audit: type=1400 audit(1766617482.683:146638): avc:  denied  { node_bind } for  pid=14287 comm="syz.9.15311" saddr=172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  939.284537][T14294] loop9: detected capacity change from 0 to 512
[  939.293731][T14294] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #18: comm syz.9.15314: iget: bad extra_isize 90 (inode size 256)
[  939.307739][T14294] EXT4-fs (loop9): Remounting filesystem read-only
[  939.314330][T14294] EXT4-fs warning (device loop9): ext4_evict_inode:273: xattr delete (err -30)
[  939.323873][T14294] EXT4-fs (loop9): 1 orphan inode deleted
[  939.333062][T14294] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  939.362372][T14297] loop5: detected capacity change from 0 to 2048
[  939.369116][T14297] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  939.418551][ T6259] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  939.435070][T14303] sctp: [Deprecated]: syz.5.15318 (pid 14303) Use of struct sctp_assoc_value in delayed_ack socket option.
[  939.435070][T14303] Use struct sctp_sack_info instead
[  939.469053][T11801] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  939.475114][T14303] loop5: detected capacity change from 0 to 1764
[  939.490720][T11801] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  939.507507][T11801] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  939.517444][T11801] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  939.536930][T14311] loop4: detected capacity change from 0 to 1024
[  939.561123][T14311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  939.598062][T10724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  939.616547][T14319] loop5: detected capacity change from 0 to 128
[  939.624946][   T29] audit: type=1400 audit(1766617483.143:146639): avc:  denied  { read } for  pid=14322 comm="syz.4.15325" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  939.628260][T14319] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  939.648578][   T29] audit: type=1400 audit(1766617483.143:146640): avc:  denied  { open } for  pid=14322 comm="syz.4.15325" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  939.684586][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  939.691097][T14319] ext4 filesystem being mounted at /448/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  939.706263][T14324] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  939.711815][   T29] audit: type=1400 audit(1766617483.213:146641): avc:  denied  { getopt } for  pid=14322 comm="syz.4.15325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  939.727717][T14324] SELinux: failed to load policy
[  939.734832][   T29] audit: type=1400 audit(1766617483.213:146642): avc:  denied  { create } for  pid=14322 comm="syz.4.15325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  939.743953][T14327] sctp: [Deprecated]: syz.9.15326 (pid 14327) Use of struct sctp_assoc_value in delayed_ack socket option.
[  939.743953][T14327] Use struct sctp_sack_info instead
[  939.759326][   T29] audit: type=1400 audit(1766617483.213:146643): avc:  denied  { load_policy } for  pid=14322 comm="syz.4.15325" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  939.908602][T14339] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  939.924120][T14339] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.15331: invalid indirect mapped block 4294967295 (level 0)
[  939.938606][T14339] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.15331: invalid indirect mapped block 4294967295 (level 1)
[  939.953357][T14339] EXT4-fs (loop4): 1 orphan inode deleted
[  939.959305][T14339] EXT4-fs (loop4): 1 truncate cleaned up
[  939.965883][T14339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  939.980241][T14339] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  940.014548][T14349] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.15334: iget: bad extra_isize 90 (inode size 256)
[  940.028574][T14349] EXT4-fs (loop0): Remounting filesystem read-only
[  940.035289][T14349] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30)
[  940.045096][T14349] EXT4-fs (loop0): 1 orphan inode deleted
[  940.051541][T14349] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  940.074488][T10724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  940.107984][T10550] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  940.167895][T14363] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  940.198640][T14363] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  940.215830][T14365] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  940.237501][T14363] ext4 filesystem being mounted at /559/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  940.286990][ T6259] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  940.301779][T14377] syz_tun: entered allmulticast mode
[  940.302703][   T29] audit: type=1400 audit(1766617483.813:146644): avc:  denied  { setopt } for  pid=14376 comm="syz.0.15346" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  940.344251][T14380] syz_tun: entered allmulticast mode
[  940.364216][T14377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15346'.
[  940.375341][T14384] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  940.390260][T14377] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0)
[  940.398871][T14377] mroute: pending queue full, dropping entries
[  940.445416][T14394] FAULT_INJECTION: forcing a failure.
[  940.445416][T14394] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  940.458624][T14394] CPU: 1 UID: 0 PID: 14394 Comm: syz.7.15347 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  940.458693][T14394] Tainted: [W]=WARN
[  940.458702][T14394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  940.458716][T14394] Call Trace:
[  940.458726][T14394]  <TASK>
[  940.458736][T14394]  __dump_stack+0x1d/0x30
[  940.458785][T14394]  dump_stack_lvl+0x95/0xd0
[  940.458833][T14394]  dump_stack+0x15/0x1b
[  940.458871][T14394]  should_fail_ex+0x265/0x280
[  940.458899][T14394]  should_fail+0xb/0x20
[  940.458924][T14394]  should_fail_usercopy+0x1a/0x20
[  940.458955][T14394]  _copy_from_user+0x1c/0xb0
[  940.459009][T14394]  ___sys_sendmsg+0xc1/0x1d0
[  940.459121][T14394]  __x64_sys_sendmsg+0xd4/0x160
[  940.459182][T14394]  x64_sys_call+0x17ba/0x3000
[  940.459210][T14394]  do_syscall_64+0xca/0x2b0
[  940.459271][T14394]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  940.459299][T14394] RIP: 0033:0x7effa981f749
[  940.459339][T14394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  940.459362][T14394] RSP: 002b:00007effa825e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  940.459388][T14394] RAX: ffffffffffffffda RBX: 00007effa9a76090 RCX: 00007effa981f749
[  940.459404][T14394] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000000a
[  940.459421][T14394] RBP: 00007effa825e090 R08: 0000000000000000 R09: 0000000000000000
[  940.459512][T14394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  940.459529][T14394] R13: 00007effa9a76128 R14: 00007effa9a76090 R15: 00007ffe29151938
[  940.459554][T14394]  </TASK>
[  940.461687][ T8929] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  940.636807][   T29] audit: type=1326 audit(1766617484.153:146645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14391 comm="syz.4.15350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a49ff749 code=0x7ffc0000
[  940.666383][T14380] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0)
[  940.675041][T14380] mroute: pending queue full, dropping entries
[  940.726201][T14404] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  940.754820][T14407] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  940.771820][ T8929] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  940.844955][T14426] sctp: [Deprecated]: syz.0.15362 (pid 14426) Use of struct sctp_assoc_value in delayed_ack socket option.
[  940.844955][T14426] Use struct sctp_sack_info instead
[  940.881063][T14422] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  940.910426][ T8929] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  940.921077][T14436] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  940.940611][T14436] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  940.953559][T14436] ext4 filesystem being mounted at /219/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  940.973443][T14438] FAULT_INJECTION: forcing a failure.
[  940.973443][T14438] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  940.986644][T14438] CPU: 0 UID: 0 PID: 14438 Comm: syz.5.15365 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  940.986708][T14438] Tainted: [W]=WARN
[  940.986714][T14438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  940.986727][T14438] Call Trace:
[  940.986733][T14438]  <TASK>
[  940.986741][T14438]  __dump_stack+0x1d/0x30
[  940.986771][T14438]  dump_stack_lvl+0x95/0xd0
[  940.986791][T14438]  dump_stack+0x15/0x1b
[  940.986815][T14438]  should_fail_ex+0x265/0x280
[  940.986837][T14438]  should_fail+0xb/0x20
[  940.986854][T14438]  should_fail_usercopy+0x1a/0x20
[  940.986875][T14438]  _copy_from_user+0x1c/0xb0
[  940.986904][T14438]  ___sys_sendmsg+0xc1/0x1d0
[  940.986944][T14438]  __x64_sys_sendmsg+0xd4/0x160
[  940.986974][T14438]  x64_sys_call+0x17ba/0x3000
[  940.986996][T14438]  do_syscall_64+0xca/0x2b0
[  940.987124][T14438]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  940.987143][T14438] RIP: 0033:0x7f704ed9f749
[  940.987156][T14438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  940.987172][T14438] RSP: 002b:00007f704d807038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  940.987203][T14438] RAX: ffffffffffffffda RBX: 00007f704eff5fa0 RCX: 00007f704ed9f749
[  940.987290][T14438] RDX: 0000000000040094 RSI: 0000200000006040 RDI: 0000000000000008
[  940.987304][T14438] RBP: 00007f704d807090 R08: 0000000000000000 R09: 0000000000000000
[  940.987334][T14438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  940.987426][T14438] R13: 00007f704eff6038 R14: 00007f704eff5fa0 R15: 00007fffe48c7158
[  940.987449][T14438]  </TASK>
[  941.459695][T14459] syz_tun: entered allmulticast mode
[  941.487922][T14459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15373'.
[  941.505630][T14459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  941.514358][T14459] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  941.555338][T14467] sctp: [Deprecated]: syz.5.15374 (pid 14467) Use of struct sctp_assoc_value in delayed_ack socket option.
[  941.555338][T14467] Use struct sctp_sack_info instead
[  941.595854][T14469] IPv6: Can't replace route, no match found
[  941.629180][T14471] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  941.655174][ T8929] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  941.725193][T14459] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0)
[  941.733801][T14459] mroute: pending queue full, dropping entries
[  941.779736][T10550] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  941.832316][T14490] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  941.947699][T14501] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  941.957138][ T8979] Bluetooth: hci0: Frame reassembly failed (-84)
[  941.995665][ T8979] Bluetooth: hci1: Frame reassembly failed (-84)
[  942.096172][T14506] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.15390: iget: bad extra_isize 90 (inode size 256)
[  942.110106][T14506] EXT4-fs (loop5): Remounting filesystem read-only
[  942.116861][T14506] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -30)
[  942.116972][T14506] EXT4-fs (loop5): 1 orphan inode deleted
[  942.132546][T14506] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  942.161635][ T8929] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  942.277193][T14516] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  942.722156][ T8979] Bluetooth: hci2: Frame reassembly failed (-84)
[  943.088250][T14541] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  943.096451][T14541] EXT4-fs (loop5): orphan cleanup on readonly fs
[  943.104594][T14541] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.15404: corrupted inode contents
[  943.116991][T14541] EXT4-fs (loop5): Remounting filesystem read-only
[  943.123741][T14541] EXT4-fs (loop5): 1 truncate cleaned up
[  943.129620][T11799] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  943.140308][T11799] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  943.150960][T11799] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started
[  943.162409][T14541] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  943.181486][T14541] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  943.229482][T14541] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  943.269703][T14541] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  943.329459][T14541] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  943.393922][ T8979] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  943.404643][ T8979] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  943.416222][ T8979] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  943.428483][ T8979] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  943.461178][ T8929] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  943.503400][T14547] set_capacity_and_notify: 15 callbacks suppressed
[  943.503416][T14547] loop5: detected capacity change from 0 to 2048
[  943.517020][T14547] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  943.563188][T14551] loop5: detected capacity change from 0 to 512
[  943.578574][T14551] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  943.586703][T14551] EXT4-fs (loop5): orphan cleanup on readonly fs
[  943.594814][T14551] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.15408: corrupted inode contents
[  943.607527][T14551] EXT4-fs (loop5): Remounting filesystem read-only
[  943.614325][T14551] EXT4-fs (loop5): 1 truncate cleaned up
[  943.620337][ T8979] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  943.630966][ T8979] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  943.641699][ T8979] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started
[  943.652546][T14551] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  943.669309][T14551] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  943.729220][T14551] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  943.789128][T14551] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  943.849420][T14551] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  943.885553][T14555] IPv6: Can't replace route, no match found
[  943.957437][T32345] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  943.957713][ T6412] Bluetooth: hci0: command 0x1003 tx timeout
[  943.995511][T14566] loop9: detected capacity change from 0 to 512
[  944.005248][T14566] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #18: comm syz.9.15414: iget: bad extra_isize 90 (inode size 256)
[  944.019001][T14566] EXT4-fs (loop9): Remounting filesystem read-only
[  944.025883][T14566] EXT4-fs warning (device loop9): ext4_evict_inode:273: xattr delete (err -30)
[  944.035249][T14566] EXT4-fs (loop9): 1 orphan inode deleted
[  944.041076][T32345] Bluetooth: hci1: command 0x1003 tx timeout
[  944.047445][   T44] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  944.054465][T14566] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  944.085965][ T6259] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  944.586175][T14590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15422'.
[  944.767421][ T3536] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  944.871483][T14594] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  945.407943][T14602] loop9: detected capacity change from 0 to 2048
[  945.421263][T14602] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  945.439263][T14605] Invalid argument reading file caps for ./file0
[  945.553244][T14615] loop0: detected capacity change from 0 to 128
[  945.583637][T14615] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  945.597416][T14615] System zones: 1-3, 19-19, 35-36
[  945.603282][T14615] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  945.619712][T11799] Bluetooth: hci0: Frame reassembly failed (-84)
[  945.621729][T14615] ext4 filesystem being mounted at /229/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  945.727423][   T29] kauditd_printk_skb: 89 callbacks suppressed
[  945.727441][   T29] audit: type=1400 audit(1766617489.213:146723): avc:  denied  { create } for  pid=14614 comm="syz.0.15433" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  945.824226][   T29] audit: type=1400 audit(1766617489.333:146724): avc:  denied  { add_name } for  pid=14614 comm="syz.0.15433" name="file4" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  945.878860][T14625] 9pnet_fd: Insufficient options for proto=fd
[  945.895673][   T29] audit: type=1400 audit(1766617489.363:146725): avc:  denied  { remove_name } for  pid=14614 comm="syz.0.15433" name="file4" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  945.918458][   T29] audit: type=1400 audit(1766617489.363:146726): avc:  denied  { rename } for  pid=14614 comm="syz.0.15433" name="file4" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  945.940827][   T29] audit: type=1400 audit(1766617489.363:146727): avc:  denied  { reparent } for  pid=14614 comm="syz.0.15433" name="file4" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  946.192647][T14630] vlan2: entered allmulticast mode
[  946.245848][T14631] loop7: detected capacity change from 0 to 2048
[  946.263916][T14631] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  946.325968][T14633] loop4: detected capacity change from 0 to 1024
[  946.401818][T11804] Bluetooth: hci1: Frame reassembly failed (-84)
[  946.454288][   T29] audit: type=1326 audit(1766617489.963:146728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14644 comm="syz.4.15441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a49ff749 code=0x7ffc0000
[  946.478451][   T29] audit: type=1326 audit(1766617489.983:146729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14644 comm="syz.4.15441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f88a49ff749 code=0x7ffc0000
[  946.502767][   T29] audit: type=1326 audit(1766617490.003:146730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14644 comm="syz.4.15441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f88a49ff783 code=0x7ffc0000
[  946.526506][   T29] audit: type=1326 audit(1766617490.003:146731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14644 comm="syz.4.15441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f88a49ff783 code=0x7ffc0000
[  946.550193][   T29] audit: type=1326 audit(1766617490.003:146732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14644 comm="syz.4.15441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a49ff749 code=0x7ffc0000
[  946.638841][T14652] loop4: detected capacity change from 0 to 512
[  946.646350][T14652] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  946.665143][T14652] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.15444: invalid indirect mapped block 4294967295 (level 0)
[  946.679854][T14652] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.15444: invalid indirect mapped block 4294967295 (level 1)
[  946.695470][T14652] EXT4-fs (loop4): 1 orphan inode deleted
[  946.701343][T14652] EXT4-fs (loop4): 1 truncate cleaned up
[  946.712718][T14652] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  946.727689][T14655] loop0: detected capacity change from 0 to 512
[  946.734849][T14655] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  946.750127][T14655] ext4 filesystem being mounted at /230/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  946.799339][T14661] loop0: detected capacity change from 0 to 1024
[  947.640739][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  947.818770][T14691] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  947.829147][T14690] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  947.838671][T14691] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.15457: invalid indirect mapped block 4294967295 (level 0)
[  947.853397][T14691] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.15457: invalid indirect mapped block 4294967295 (level 1)
[  947.868079][T14691] EXT4-fs (loop0): 1 orphan inode deleted
[  947.873845][T14691] EXT4-fs (loop0): 1 truncate cleaned up
[  947.883489][T14691] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  948.071943][T14720] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.15469: iget: bad extra_isize 90 (inode size 256)
[  948.085950][T14720] EXT4-fs (loop0): Remounting filesystem read-only
[  948.092851][T14720] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30)
[  948.102137][T14720] EXT4-fs (loop0): 1 orphan inode deleted
[  948.164145][T14728] netlink: 12 bytes leftover after parsing attributes in process `syz.9.15472'.
[  948.173397][T14728] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  948.185130][T11826] Bluetooth: hci0: Frame reassembly failed (-84)
[  948.441432][T14760] Invalid argument reading file caps for ./file0
[  948.447956][   T44] Bluetooth: hci1: command 0x1003 tx timeout
[  948.453982][ T3536] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  948.583804][ T8735] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  948.598841][ T8735] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  948.623935][T14780] set_capacity_and_notify: 8 callbacks suppressed
[  948.623956][T14780] loop0: detected capacity change from 0 to 1024
[  948.637069][ T8735] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  948.645499][ T8735] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  948.903365][T14811] loop0: detected capacity change from 0 to 512
[  948.918895][T14811] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  948.927036][T14811] EXT4-fs (loop0): orphan cleanup on readonly fs
[  948.935093][T14811] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.15505: corrupted inode contents
[  948.948570][T14811] EXT4-fs (loop0): Remounting filesystem read-only
[  948.955245][T14811] EXT4-fs (loop0): 1 truncate cleaned up
[  948.961148][ T8735] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  948.971836][ T8735] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  948.985807][ T8735] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[  949.024349][T14811] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  949.058416][T14821] syz_tun: entered promiscuous mode
[  949.063902][T14821] macvlan2: entered allmulticast mode
[  949.071398][T14821] syz_tun: left promiscuous mode
[  949.095172][T14822] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  949.109401][T14811] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  949.178768][T14825] loop4: detected capacity change from 0 to 128
[  949.186861][T14822] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  949.198614][T14825] ext4 filesystem being mounted at /347/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  949.210940][T14811] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  949.239358][T14822] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  949.269142][T14811] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  949.289346][T14822] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  949.315048][T11826] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  949.326504][T11826] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  949.339062][T11826] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  949.351817][T11826] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  949.363876][T11826] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  949.381416][T11826] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  949.394506][T11826] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  949.414244][T11826] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  949.471648][T14837] IPv6: Can't replace route, no match found
[  949.483013][T14835] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  949.514593][T14839] loop7: detected capacity change from 0 to 2048
[  949.521817][T14839] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  949.537823][T14841] loop0: detected capacity change from 0 to 1024
[  949.606124][T14852] vlan2: entered allmulticast mode
[  949.663509][T14852] loop0: detected capacity change from 0 to 2048
[  949.670318][T14852] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  949.743890][T14859] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  949.789679][T14859] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  949.829306][T14859] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  949.879403][T14866] loop5: detected capacity change from 0 to 512
[  949.880735][T14859] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  949.895944][T14866] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  949.910325][T14866] ext4 filesystem being mounted at /474/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  949.913299][T14870] IPv6: Can't replace route, no match found
[  949.951533][T14872] loop7: detected capacity change from 0 to 1024
[  949.968824][T14874] loop5: detected capacity change from 0 to 2048
[  949.975744][T14874] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  950.021174][T14880] vlan3: entered allmulticast mode
[  950.079941][T14888] loop5: detected capacity change from 0 to 2048
[  950.086758][T14888] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  950.148913][T14899] IPv6: Can't replace route, no match found
[  950.162692][T14898] 9pnet_fd: Insufficient options for proto=fd
[  950.197410][ T3536] Bluetooth: hci0: command 0x1003 tx timeout
[  950.203502][T32345] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  950.206723][T14902] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  950.218455][T14902] EXT4-fs (loop4): orphan cleanup on readonly fs
[  950.226936][T14902] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.15540: corrupted inode contents
[  950.239763][T14902] EXT4-fs (loop4): Remounting filesystem read-only
[  950.246420][T14902] EXT4-fs (loop4): 1 truncate cleaned up
[  950.252526][  T837] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  950.263316][  T837] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  950.274552][  T837] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[  950.310411][  T837] Bluetooth: hci0: Frame reassembly failed (-84)
[  950.324114][T14909] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  950.375296][T14914] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.15544: iget: bad extra_isize 90 (inode size 256)
[  950.389137][T14914] EXT4-fs (loop4): Remounting filesystem read-only
[  950.395845][T14914] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30)
[  950.404905][T14914] EXT4-fs (loop4): 1 orphan inode deleted
[  950.879636][T14931] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  950.918496][T14933] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  950.926775][T14933] EXT4-fs (loop9): orphan cleanup on readonly fs
[  950.934800][T14933] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.15552: corrupted inode contents
[  950.947147][T14933] EXT4-fs (loop9): Remounting filesystem read-only
[  950.953872][T14933] EXT4-fs (loop9): 1 truncate cleaned up
[  950.960098][T11826] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  950.971258][T11826] __quota_error: 84 callbacks suppressed
[  950.971273][T11826] Quota error (device loop9): write_blk: dquota write failed
[  950.984443][T11826] Quota error (device loop9): remove_free_dqentry: Can't write block (5) with free entries
[  950.994569][T11826] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  951.005160][T11826] Quota error (device loop9): write_blk: dquota write failed
[  951.012589][T11826] Quota error (device loop9): free_dqentry: Can't move quota data block (5) to free list
[  951.022788][   T29] audit: type=1326 audit(1766617494.533:146805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14936 comm="syz.7.15553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa981f749 code=0x7ffc0000
[  951.046747][   T29] audit: type=1326 audit(1766617494.533:146807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14936 comm="syz.7.15553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa981f749 code=0x7ffc0000
[  951.070813][   T29] audit: type=1326 audit(1766617494.533:146806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14936 comm="syz.7.15553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7effa981f749 code=0x7ffc0000
[  951.089945][T14940] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  951.094791][   T29] audit: type=1326 audit(1766617494.533:146808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14936 comm="syz.7.15553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7effa981f749 code=0x7ffc0000
[  951.126805][T11826] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started
[  951.137021][T11826] Quota error (device loop9): v2_write_file_info: Can't write info structure
[  951.146224][T11826] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  951.193680][T14946] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #18: comm syz.9.15556: iget: bad extra_isize 90 (inode size 256)
[  951.207699][T14946] EXT4-fs (loop9): Remounting filesystem read-only
[  951.214546][T14946] EXT4-fs warning (device loop9): ext4_evict_inode:273: xattr delete (err -30)
[  951.224039][T14946] EXT4-fs (loop9): 1 orphan inode deleted
[  951.292704][T14957] vlan2: entered allmulticast mode
[  951.372957][T14957] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  951.387352][T14968] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  951.427094][T14974] ext4 filesystem being mounted at /588/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  951.428457][T14970] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  951.428636][T14970] EXT4-fs (loop4): orphan cleanup on readonly fs
[  951.458506][T14970] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.15566: corrupted inode contents
[  951.470870][T14970] EXT4-fs (loop4): Remounting filesystem read-only
[  951.478560][T14970] EXT4-fs (loop4): 1 truncate cleaned up
[  951.484483][T11826] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  951.495193][T11826] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  951.505884][T11826] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[  951.662494][T14997] IPv6: Can't replace route, no match found
[  951.685978][T14999] IPv6: Can't replace route, no match found
[  952.283887][T15005] bridge0: entered promiscuous mode
[  952.289444][T15005] macvtap1: entered promiscuous mode
[  952.294888][T15005] macvtap1: entered allmulticast mode
[  952.300546][T15005] bridge0: entered allmulticast mode
[  952.313074][T15005] bridge0: port 1(macvtap1) entered blocking state
[  952.319714][T15005] bridge0: port 1(macvtap1) entered disabled state
[  952.322316][T15007] xt_CT: No such helper "pptp"
[  952.337227][T15005] bridge0: left allmulticast mode
[  952.342476][T15005] bridge0: left promiscuous mode
[  952.357517][T32345] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  952.377911][T15007] IPv6: Can't replace route, no match found
[  952.428829][T15015] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  952.436994][T15015] EXT4-fs (loop9): orphan cleanup on readonly fs
[  952.445301][T15015] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.15579: corrupted inode contents
[  952.457854][T15015] EXT4-fs (loop9): Remounting filesystem read-only
[  952.464622][T15015] EXT4-fs (loop9): 1 truncate cleaned up
[  952.470718][  T837] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  952.481404][  T837] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  952.492413][  T837] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started
[  952.532201][T15027] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  952.540399][T15027] System zones: 1-3, 19-19, 35-36
[  952.546274][T15027] ext4 filesystem being mounted at /371/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  952.665576][T15035] IPv6: Can't replace route, no match found
[  952.732481][T15039] ext4 filesystem being mounted at /595/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  952.944333][T15033] ==================================================================
[  952.952494][T15033] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark
[  952.959758][T15033] 
[  952.962113][T15033] write to 0xffff888107b3f304 of 4 bytes by task 15027 on cpu 1:
[  952.969872][T15033]  xas_set_mark+0x12b/0x140
[  952.974433][T15033]  __folio_start_writeback+0x155/0x340
[  952.979944][T15033]  ext4_bio_write_folio+0x5ad/0x9f0
[  952.985196][T15033]  mpage_process_page_bufs+0x4a1/0x620
[  952.990706][T15033]  mpage_prepare_extent_to_map+0x7a3/0xc20
[  952.996554][T15033]  ext4_do_writepages+0x9f6/0x27e0
[  953.001720][T15033]  ext4_writepages+0x179/0x300
[  953.006530][T15033]  do_writepages+0x1c6/0x310
[  953.011166][T15033]  file_write_and_wait_range+0x156/0x2c0
[  953.016831][T15033]  generic_buffers_fsync_noflush+0x45/0x130
[  953.022765][T15033]  ext4_sync_file+0x1ab/0x690
[  953.027480][T15033]  vfs_fsync_range+0x10d/0x130
[  953.032287][T15033]  ext4_buffered_write_iter+0x34f/0x3c0
[  953.037892][T15033]  ext4_file_write_iter+0x387/0xf60
[  953.043149][T15033]  iter_file_splice_write+0x66b/0xa20
[  953.048562][T15033]  direct_splice_actor+0x156/0x2a0
[  953.053712][T15033]  splice_direct_to_actor+0x312/0x680
[  953.059127][T15033]  do_splice_direct+0xda/0x150
[  953.063932][T15033]  do_sendfile+0x380/0x650
[  953.068397][T15033]  __x64_sys_sendfile64+0x105/0x150
[  953.073728][T15033]  x64_sys_call+0x2db1/0x3000
[  953.078437][T15033]  do_syscall_64+0xca/0x2b0
[  953.082987][T15033]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  953.088917][T15033] 
[  953.091277][T15033] read to 0xffff888107b3f304 of 4 bytes by task 15033 on cpu 0:
[  953.098944][T15033]  xas_find_marked+0x5dc/0x620
[  953.103769][T15033]  find_get_entry+0x5d/0x380
[  953.108386][T15033]  filemap_get_folios_tag+0x92/0x210
[  953.113700][T15033]  mpage_prepare_extent_to_map+0x308/0xc20
[  953.119549][T15033]  ext4_do_writepages+0x9f6/0x27e0
[  953.124712][T15033]  ext4_writepages+0x179/0x300
[  953.129519][T15033]  do_writepages+0x1c6/0x310
[  953.134163][T15033]  file_write_and_wait_range+0x156/0x2c0
[  953.139873][T15033]  generic_buffers_fsync_noflush+0x45/0x130
[  953.145828][T15033]  ext4_sync_file+0x1ab/0x690
[  953.150636][T15033]  vfs_fsync_range+0x10d/0x130
[  953.155444][T15033]  ext4_buffered_write_iter+0x34f/0x3c0
[  953.161040][T15033]  ext4_file_write_iter+0x387/0xf60
[  953.166297][T15033]  iter_file_splice_write+0x66b/0xa20
[  953.171701][T15033]  direct_splice_actor+0x156/0x2a0
[  953.176861][T15033]  splice_direct_to_actor+0x312/0x680
[  953.182273][T15033]  do_splice_direct+0xda/0x150
[  953.187074][T15033]  do_sendfile+0x380/0x650
[  953.191616][T15033]  __x64_sys_sendfile64+0x105/0x150
[  953.196895][T15033]  x64_sys_call+0x2db1/0x3000
[  953.201621][T15033]  do_syscall_64+0xca/0x2b0
[  953.206182][T15033]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  953.212123][T15033] 
[  953.214470][T15033] value changed: 0x0a000021 -> 0x04000021
[  953.220217][T15033] 
[  953.222568][T15033] Reported by Kernel Concurrency Sanitizer on:
[  953.228748][T15033] CPU: 0 UID: 0 PID: 15033 Comm: syz.4.15583 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  953.240247][T15033] Tainted: [W]=WARN
[  953.244088][T15033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  953.254183][T15033] ==================================================================
[  953.423178][T11796] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  953.434829][T11796] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  953.446686][T11796] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  953.458736][T11796] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0