last executing test programs:

3m44.337121421s ago: executing program 3 (id=1346):
bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e0000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000380)={0x0, 0x0, 0x3, 0x6, 0xfe, "0062ba7d82000000160000000000f738096304"})
r1 = syz_open_pts(r0, 0x80)
r2 = dup3(r1, r0, 0x80000)
read(r2, &(0x7f00000000c0)=""/226, 0xe2)
read$watch_queue(r2, &(0x7f0000001d40)=""/4095, 0xfff)

3m43.86083936s ago: executing program 3 (id=1352):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000010a07000000000000000000010000010900010073797a31"], 0x28}, 0x1, 0x0, 0x0, 0x4004014}, 0x4000040)

3m43.705124852s ago: executing program 3 (id=1356):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0)
r2 = syz_open_procfs(r0, 0x0)
fchdir(r2)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
setuid(0xee01)
getdents64(r3, 0x0, 0x0)

3m43.601131551s ago: executing program 3 (id=1360):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb77, &(0x7f0000000c40)="$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")
syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
r0 = gettid()
tkill(r0, 0x16)

3m43.157367226s ago: executing program 3 (id=1366):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r0, 0x0, 0x2, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r1, 0x0, 0x0)

3m42.583502433s ago: executing program 3 (id=1381):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0)
r2 = syz_open_procfs(r0, &(0x7f0000000000)='map_files\x00')
fchdir(r2)
r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x90)
setuid(0xee01)
getdents64(r3, 0x0, 0x0)

3m42.583409833s ago: executing program 32 (id=1381):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0)
r2 = syz_open_procfs(r0, &(0x7f0000000000)='map_files\x00')
fchdir(r2)
r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x90)
setuid(0xee01)
getdents64(r3, 0x0, 0x0)

2m43.090484954s ago: executing program 5 (id=3154):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0x852ac000)
r1 = fsopen(&(0x7f0000000000)='devpts\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x5)
fchdir(r2)
r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108)
getdents64(r3, &(0x7f00000000c0)=""/47, 0x2f)
getdents64(r3, &(0x7f0000002fc0)=""/4106, 0x100a)

2m42.985038733s ago: executing program 5 (id=3157):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvmmsg(r0, &(0x7f0000004a00)=[{{0x0, 0x0, 0x0}, 0x800}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004980)=""/111, 0x6f}, 0x4}], 0x2, 0x10100, 0x0)

2m42.139510981s ago: executing program 5 (id=3178):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', <r2=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x60, r1, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)

2m42.078176216s ago: executing program 5 (id=3181):
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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")
syz_clone(0xc0400, 0x0, 0xfffffffffffffca8, 0x0, 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, &(0x7f0000001740)={@desc={0x1, 0x0, @desc2}})

2m41.90672412s ago: executing program 5 (id=3187):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r2=>0x0}, &(0x7f0000000000)=0xc)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x4000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r2}}], [], 0x6b}})

2m41.65569041s ago: executing program 5 (id=3197):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000dd0000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m41.608037824s ago: executing program 33 (id=3197):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000dd0000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m37.570657048s ago: executing program 4 (id=3293):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c)
syz_emit_ethernet(0x0, 0x0, 0x0)

2m37.486483735s ago: executing program 4 (id=3296):
r0 = socket$inet(0x2, 0x801, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10)
shutdown(r0, 0x1)

2m37.42489732s ago: executing program 4 (id=3299):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000540)={[{@init_itable}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4d1, &(0x7f0000000b80)="$eJzs3dFrW9cZAPDvynbiJM7sbHvIwpaFLcMJWyQ7XhKzh8yDsT0FlmXvnmfLxli2jCUnsQnDYX/AYGxraZ/61JdCn0uh5E9oC4H2vZTSEtokfWihrYrkqyZxZVsmlpVYvx8c33PuvfL3HQsd69x7uTeAjnUqIsYioisizkZEf7o+k5ZYWy/V/R7cvzVZLUlUKtc+TSJJ19V/V5Iuj6Qv642Iv/454h/J9+OWVlbnJgqF/FLazpXnF3OlldVzs/MTM/mZ/MLYyPDF0UujF0aHdq2vl//40f///eqfLr/1mxsfjH9y5p/VtPrSbY/3oxlrTe633vWe2t+irjsilnYS7BnWlfanp92JAADQlOp3/B9GxC8i4uFL7c4GAAAAaIXK7/viqySiAgAAAOxbmdo1sEkmm14L0BeZTDa7fg3vj+NwplAslX89XVxemFq/VnYgejLTs4X8UHqt8ED0JNX2cK3+qH1+Q3skIo5FxH/7D9Xa2cliYardBz8AAACgQxzZMP//vH99/g8AAADsMwPtTgAAAABoOfN/AAAA2P82nf8n3XubCAAAANAKf7lypVoq9edfT11fWZ4rXj83lS/NZeeXJ7OTxaXF7EyxOFO7Z9/8dr+vUCwu/jYWlm/myvlSOVdaWR2fLy4vlMdrz/Uez3tONAAAAOy9Yz+/834SEWu/O1QrVQfSbU3M1cdamx3QSpmd7Z60Kg9g73W1OwGgbba5wPedn+5VIsCecz4e2GZi/78N7R0eNgAAAJ4Fgz95qvP/zgfCc8xEHjqX8//QudzgCzqX8//Q4Q5uv0vvZhve3uVcAACAlumrlSSTTc8F9kUmk81GHK09FqAnmZ4t5Ici4gcR8V5/z8Fqe7jdSQMAAAAAAAAAAAAAAAAAAAAAAADAc6ZSSaICAAAA7GsRmY+T9EH+g/2n+zYeHziQfNFfW0bEjZevvXBzolxeGq6u/+y79eUX0/Xn23EEAwAAANioPk+vz+MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDc9uH9rsl72Mu69P0TEQKP43dFbW/a+0R8Rhx8m0f3Y65KI6NqF+Gu3I+J4o/hJNa0YSLPYGD8TEYfaHP/ILsSHTnanOv6MNfr8ZeJUbdn489edlqd179Rm41+mPv7VxrlG49/RJmOcuPt6btP4tyNOdDcef+rxk6ccf//+t9XVzbZVXokYbPj/J3kiVq48v5grrayem52fmMnP5BdGRoYvjl4avTA6lJueLeTTnw1j/Odnb36zVf8PbxJ/YJv+n26y/1/fvXn/R1vEP/PLjfG/rL3/x7eIX/3b/yr9P1DdPlivr63XH3fytXdPbtX/qU36v937f6bJ/p+9+q8Pm9wVANgDpZXVuYlCIb+k8lxWeryDKltVrqYf9B2/vM0DEwAAsOsefelvdyYAAAAAAAAAAAAAAAAAAADQuVp+E7KDT95ZoLd9XQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2NK3AQAA///VO9QU")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)}], 0x1, 0x5405, 0x0, 0x0)
preadv2(r0, &(0x7f0000000440)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x1, 0x20000, 0x8)

2m37.216948757s ago: executing program 4 (id=3307):
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
syz_clone(0xc0400, 0x0, 0xfffffffffffffca8, 0x0, 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, 0x0)

2m37.006983744s ago: executing program 4 (id=3311):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x3, {0x0, 0x0, 0x0, r2, {0x7, 0x6}, {0xd, 0x5}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0)

2m36.684941679s ago: executing program 4 (id=3319):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='kfree\x00', r0}, 0x18)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001300)=@newtfilter={0x88c, 0x2c, 0xd27, 0x70bd25, 0x5, {0x0, 0x0, 0x0, r4, {0x0, 0xfffc}, {}, {0x4, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0x7, 0x4, 0xc, 0x9, {0xd, 0x2, 0x4, 0x4, 0x5, 0x401}, {0x4, 0x1, 0x5, 0x10, 0xfff7, 0x4b2}, 0x6, 0x14ff, 0x3fe}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x38, 0x1, 0x1, 0x8, 0x7f, 0x6, 0x3, 0x6, 0x1, 0x86, 0x9, 0x6, 0x5, 0x9, 0x5f, 0x0, 0x0, 0x13f, 0xfffffffe, 0x0, 0xd31, 0xf54, 0x9, 0x4, 0x4, 0x6, 0x9, 0x7fffffff, 0xfffffffd, 0x7fffffff, 0x8, 0x0, 0xfffffffe, 0x5, 0x5dbd0fd8, 0x8, 0x1887, 0x2, 0x95c, 0x7, 0x6, 0xa, 0x7f, 0xfffffffe, 0x8, 0x2, 0x6, 0x4, 0x6, 0x402f, 0xd, 0x5, 0x6f9d, 0x0, 0x800, 0x3ff, 0x8, 0xa, 0x9, 0x4, 0xd, 0x3, 0xb8f, 0x6, 0x0, 0xffffffff, 0x8000, 0xffffffff, 0x8, 0xfffffffc, 0xee, 0x4, 0x9, 0x2, 0x54eef174, 0xc, 0x9, 0x5, 0xe2, 0x20004, 0x1, 0xffff, 0x5, 0x5, 0x7, 0x5, 0x2, 0x4, 0x4, 0x7, 0x100, 0x8, 0x2, 0x9, 0x0, 0x0, 0xe32, 0x6, 0x8, 0x6, 0x66, 0x7, 0x7, 0x8, 0x5b, 0x7625, 0x51, 0x6, 0xfffffffe, 0x0, 0xa4d, 0x2, 0x10001, 0x7, 0x8, 0x3, 0x8, 0x3, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x400000, 0xc55b, 0x8000, 0xf943, 0x4, 0x3000000, 0x2003, 0x10000, 0xd, 0xffffffff, 0x9, 0xd3, 0xfffffffb, 0x4, 0x9, 0x401, 0x82baa23, 0xd, 0x0, 0x6, 0x21a, 0xe, 0x1, 0x1430, 0x8, 0x4, 0x7, 0xe, 0x7dab, 0x4, 0x5, 0x4, 0x3, 0xfffffffe, 0x7, 0x6, 0x8ef6, 0x7239, 0x80000001, 0x0, 0xd41, 0x6, 0x2, 0x4, 0x200, 0x8, 0x3, 0xc14, 0x7324, 0x4, 0x50f6, 0x5, 0x4, 0x3, 0x2, 0x7, 0x4, 0x6, 0x5, 0x3, 0x7767, 0x8, 0xe0ba, 0x4f, 0x3, 0x4, 0x7, 0x7fffffff, 0x3, 0x3, 0x5, 0x8, 0x4, 0x80, 0x401, 0x7, 0x1, 0x0, 0x8, 0x7c4, 0x3, 0x6, 0x6, 0xe8, 0x0, 0x6, 0x6, 0x3, 0x8a4, 0x1, 0x9, 0x9, 0x9, 0x200, 0x7, 0xd235, 0x9, 0x7fffffff, 0xf7d, 0x8001, 0x2, 0x7fff, 0x9f7c, 0x7, 0x4, 0xf, 0x1, 0x2, 0x6, 0x400, 0x5, 0x80, 0x400, 0x5, 0xc, 0xff, 0xffff7002, 0x63c, 0x9, 0x1ff, 0xfff, 0x8, 0x8c, 0x40, 0x8, 0xed6, 0xf6, 0x0, 0x3, 0x9, 0x10, 0x9, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x6, 0x8, 0x8000, 0x8, 0x2, 0x9, 0x5, 0xfff, 0x3, 0x101, 0xbf7, 0x8, 0xff, 0x6, 0x113, 0xffff, 0x1, 0x8, 0x7fffffff, 0x6, 0x9, 0x33, 0x5, 0x2f7, 0x100, 0x21, 0x4, 0x7, 0xff, 0x6, 0xfffffffe, 0x7, 0x8, 0x1, 0x8, 0xf33c, 0x3, 0x1, 0x80000000, 0x62e, 0x3, 0xdb2, 0x0, 0xe00, 0x4, 0x2, 0x3, 0x2, 0xfffffff6, 0x5, 0x3, 0x7, 0x9, 0x1, 0x7f, 0x4, 0x6, 0x4, 0x3, 0x0, 0x803, 0x1, 0x5, 0x0, 0x8000, 0xfffffffa, 0xb7, 0xc8b6f5a2, 0x6, 0x2f, 0x7ff, 0x9, 0x8, 0x6, 0x0, 0x8, 0x9, 0x0, 0x5, 0x8b34, 0x2, 0x0, 0x4, 0x4, 0xfeffffff, 0x1, 0xa, 0xfffffffb, 0x3, 0xffffffff, 0x0, 0x4, 0xd6, 0x7, 0x4, 0x80003, 0x8, 0x9, 0x8, 0x2de0, 0x5191, 0x6, 0x401, 0x7, 0x9, 0x5, 0x3, 0x6, 0x1, 0xfffffffb, 0x1, 0xfffffffa, 0x4, 0x768, 0x7, 0x7f, 0x6, 0x7, 0x4, 0x8b, 0x4, 0xa, 0x5, 0xf0, 0x42490, 0xd, 0x3, 0x5c, 0x80, 0x2, 0x800, 0x8, 0x6, 0xff, 0xffff0000, 0x3, 0x10000, 0x80000001, 0x5, 0xffffffff, 0x4be24694, 0x2, 0x2, 0x100, 0x5, 0x1, 0x7, 0x4, 0xffffff95, 0x5, 0x2, 0xc, 0x6, 0x1000, 0xa, 0x7, 0x4, 0x340, 0x0, 0x0, 0x7, 0x101, 0x2, 0x7ce2352, 0x7fffffff, 0x5e, 0x8e5b, 0x3, 0x8, 0x9, 0x1, 0x80000000, 0x10000007, 0x301, 0x91, 0x3, 0x80000001, 0x9, 0x1, 0x3e79, 0xffffffff, 0x8, 0x80525, 0x7, 0x6, 0x2470a614, 0xe, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4, 0x1, 0x1, 0xfffffc1f, 0x6, 0x2, 0x1, 0x9, 0x7fff, 0xffffffff, 0x4, 0xffff2b7d, 0x4, 0xcdff, 0x9, 0x0, 0x49, 0x6, 0x0, 0x5, 0x9, 0x7, 0x8, 0x7, 0xea, 0x7, 0x7, 0x2, 0x5, 0xff, 0x6, 0xffff, 0x4cd, 0x7, 0x3, 0x3, 0x10001, 0x0, 0x6, 0x7, 0xffffffff, 0xe000000, 0x3, 0x4, 0x7, 0x8, 0xb, 0x7, 0x0, 0xcb65, 0x6, 0xe, 0x240000, 0x9, 0x8, 0x8, 0xfffffff8, 0x9, 0xf, 0x8, 0x5, 0x9, 0x100]}]}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x10}}]}, 0x88c}, 0x1, 0x0, 0x0, 0xc004884}, 0x0)

2m36.684473909s ago: executing program 34 (id=3319):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='kfree\x00', r0}, 0x18)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001300)=@newtfilter={0x88c, 0x2c, 0xd27, 0x70bd25, 0x5, {0x0, 0x0, 0x0, r4, {0x0, 0xfffc}, {}, {0x4, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0x7, 0x4, 0xc, 0x9, {0xd, 0x2, 0x4, 0x4, 0x5, 0x401}, {0x4, 0x1, 0x5, 0x10, 0xfff7, 0x4b2}, 0x6, 0x14ff, 0x3fe}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x38, 0x1, 0x1, 0x8, 0x7f, 0x6, 0x3, 0x6, 0x1, 0x86, 0x9, 0x6, 0x5, 0x9, 0x5f, 0x0, 0x0, 0x13f, 0xfffffffe, 0x0, 0xd31, 0xf54, 0x9, 0x4, 0x4, 0x6, 0x9, 0x7fffffff, 0xfffffffd, 0x7fffffff, 0x8, 0x0, 0xfffffffe, 0x5, 0x5dbd0fd8, 0x8, 0x1887, 0x2, 0x95c, 0x7, 0x6, 0xa, 0x7f, 0xfffffffe, 0x8, 0x2, 0x6, 0x4, 0x6, 0x402f, 0xd, 0x5, 0x6f9d, 0x0, 0x800, 0x3ff, 0x8, 0xa, 0x9, 0x4, 0xd, 0x3, 0xb8f, 0x6, 0x0, 0xffffffff, 0x8000, 0xffffffff, 0x8, 0xfffffffc, 0xee, 0x4, 0x9, 0x2, 0x54eef174, 0xc, 0x9, 0x5, 0xe2, 0x20004, 0x1, 0xffff, 0x5, 0x5, 0x7, 0x5, 0x2, 0x4, 0x4, 0x7, 0x100, 0x8, 0x2, 0x9, 0x0, 0x0, 0xe32, 0x6, 0x8, 0x6, 0x66, 0x7, 0x7, 0x8, 0x5b, 0x7625, 0x51, 0x6, 0xfffffffe, 0x0, 0xa4d, 0x2, 0x10001, 0x7, 0x8, 0x3, 0x8, 0x3, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x400000, 0xc55b, 0x8000, 0xf943, 0x4, 0x3000000, 0x2003, 0x10000, 0xd, 0xffffffff, 0x9, 0xd3, 0xfffffffb, 0x4, 0x9, 0x401, 0x82baa23, 0xd, 0x0, 0x6, 0x21a, 0xe, 0x1, 0x1430, 0x8, 0x4, 0x7, 0xe, 0x7dab, 0x4, 0x5, 0x4, 0x3, 0xfffffffe, 0x7, 0x6, 0x8ef6, 0x7239, 0x80000001, 0x0, 0xd41, 0x6, 0x2, 0x4, 0x200, 0x8, 0x3, 0xc14, 0x7324, 0x4, 0x50f6, 0x5, 0x4, 0x3, 0x2, 0x7, 0x4, 0x6, 0x5, 0x3, 0x7767, 0x8, 0xe0ba, 0x4f, 0x3, 0x4, 0x7, 0x7fffffff, 0x3, 0x3, 0x5, 0x8, 0x4, 0x80, 0x401, 0x7, 0x1, 0x0, 0x8, 0x7c4, 0x3, 0x6, 0x6, 0xe8, 0x0, 0x6, 0x6, 0x3, 0x8a4, 0x1, 0x9, 0x9, 0x9, 0x200, 0x7, 0xd235, 0x9, 0x7fffffff, 0xf7d, 0x8001, 0x2, 0x7fff, 0x9f7c, 0x7, 0x4, 0xf, 0x1, 0x2, 0x6, 0x400, 0x5, 0x80, 0x400, 0x5, 0xc, 0xff, 0xffff7002, 0x63c, 0x9, 0x1ff, 0xfff, 0x8, 0x8c, 0x40, 0x8, 0xed6, 0xf6, 0x0, 0x3, 0x9, 0x10, 0x9, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x6, 0x8, 0x8000, 0x8, 0x2, 0x9, 0x5, 0xfff, 0x3, 0x101, 0xbf7, 0x8, 0xff, 0x6, 0x113, 0xffff, 0x1, 0x8, 0x7fffffff, 0x6, 0x9, 0x33, 0x5, 0x2f7, 0x100, 0x21, 0x4, 0x7, 0xff, 0x6, 0xfffffffe, 0x7, 0x8, 0x1, 0x8, 0xf33c, 0x3, 0x1, 0x80000000, 0x62e, 0x3, 0xdb2, 0x0, 0xe00, 0x4, 0x2, 0x3, 0x2, 0xfffffff6, 0x5, 0x3, 0x7, 0x9, 0x1, 0x7f, 0x4, 0x6, 0x4, 0x3, 0x0, 0x803, 0x1, 0x5, 0x0, 0x8000, 0xfffffffa, 0xb7, 0xc8b6f5a2, 0x6, 0x2f, 0x7ff, 0x9, 0x8, 0x6, 0x0, 0x8, 0x9, 0x0, 0x5, 0x8b34, 0x2, 0x0, 0x4, 0x4, 0xfeffffff, 0x1, 0xa, 0xfffffffb, 0x3, 0xffffffff, 0x0, 0x4, 0xd6, 0x7, 0x4, 0x80003, 0x8, 0x9, 0x8, 0x2de0, 0x5191, 0x6, 0x401, 0x7, 0x9, 0x5, 0x3, 0x6, 0x1, 0xfffffffb, 0x1, 0xfffffffa, 0x4, 0x768, 0x7, 0x7f, 0x6, 0x7, 0x4, 0x8b, 0x4, 0xa, 0x5, 0xf0, 0x42490, 0xd, 0x3, 0x5c, 0x80, 0x2, 0x800, 0x8, 0x6, 0xff, 0xffff0000, 0x3, 0x10000, 0x80000001, 0x5, 0xffffffff, 0x4be24694, 0x2, 0x2, 0x100, 0x5, 0x1, 0x7, 0x4, 0xffffff95, 0x5, 0x2, 0xc, 0x6, 0x1000, 0xa, 0x7, 0x4, 0x340, 0x0, 0x0, 0x7, 0x101, 0x2, 0x7ce2352, 0x7fffffff, 0x5e, 0x8e5b, 0x3, 0x8, 0x9, 0x1, 0x80000000, 0x10000007, 0x301, 0x91, 0x3, 0x80000001, 0x9, 0x1, 0x3e79, 0xffffffff, 0x8, 0x80525, 0x7, 0x6, 0x2470a614, 0xe, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4, 0x1, 0x1, 0xfffffc1f, 0x6, 0x2, 0x1, 0x9, 0x7fff, 0xffffffff, 0x4, 0xffff2b7d, 0x4, 0xcdff, 0x9, 0x0, 0x49, 0x6, 0x0, 0x5, 0x9, 0x7, 0x8, 0x7, 0xea, 0x7, 0x7, 0x2, 0x5, 0xff, 0x6, 0xffff, 0x4cd, 0x7, 0x3, 0x3, 0x10001, 0x0, 0x6, 0x7, 0xffffffff, 0xe000000, 0x3, 0x4, 0x7, 0x8, 0xb, 0x7, 0x0, 0xcb65, 0x6, 0xe, 0x240000, 0x9, 0x8, 0x8, 0xfffffff8, 0x9, 0xf, 0x8, 0x5, 0x9, 0x100]}]}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x10}}]}, 0x88c}, 0x1, 0x0, 0x0, 0xc004884}, 0x0)

10.181571971s ago: executing program 6 (id=6245):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140"], 0xfc}}, 0x0)

10.139885094s ago: executing program 6 (id=6246):
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x100000}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000000000000b000000000c0014"], 0x28}}, 0x0)

10.115378616s ago: executing program 6 (id=6248):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=<r2=>0x0, &(0x7f0000000200)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x40000, 0x1})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}}, 0x0)
io_uring_enter(r1, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)

10.06866993s ago: executing program 6 (id=6249):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace(0x10, r2)
tkill(r2, 0x3d)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x210)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$caif_stream(0x25, 0x1, 0x0)
sendmmsg$inet(r4, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x1000000}], 0x2, 0x0)

9.998124366s ago: executing program 6 (id=6251):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00"/11], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket(0x40000000015, 0x5, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
madvise(&(0x7f0000438000/0x2000)=nil, 0x2000, 0x13)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
close(0xffffffffffffffff)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x200000, @empty, 0x1}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
accept(r3, 0x0, 0x0)

8.95782683s ago: executing program 6 (id=6267):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0)

8.95720917s ago: executing program 35 (id=6267):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0)

1.515889628s ago: executing program 7 (id=6409):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0xfffc, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0)

1.477259791s ago: executing program 7 (id=6413):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10)
socket$kcm(0x10, 0x2, 0x0)
r1 = io_uring_setup(0x177e, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000200), 0xfb, 0x497, &(0x7f0000000f40)="$eJzs3E1sFFUcAPD/bFtQvloRP0DUKhqJHy0UFA4mfiQmHtSY6AGPaykEWaihNRHSSDUELyZK4t1ovJh48eLBkyejnky8eNC7ISGGi+hpzezOrNvt7nZZtt2W/n7JsO9N3+57/5l5O2/mMRvAujWa/pNEbImI3yNiOCIKjQVGqy/Xrs5N/nN1bjKJcvm1v5L0bfH31bnJvGiSvW6uZgbTl8KFJJ5tUu/M2XMni6XS1JksPz576u3xmbPnnjhxqnh86vjU6YnDhw8e2H/oqYknexLnbWlbd703vXvni29cennyyKU3f/o6qWt0fRy9MRTzdduk0cO9razvttalk8G2RQvL3hg6tjGi0lGHKv1/OAYubKv9bThe+KCvjQOWVblcLk+0/vN8GbiJJdHvFgD9kZ/o0+vffFmhoceqcOW56gVQGve1bKle9AzWLlSHGq5ve2kuIo7M//tZusSy3IcAAFjo+3T883iz8V8h7qwrty2bGxrJ5lK2R8TtEbEjIu6IqJS9KyLuvs76Rxvyi8c/hctdBdahdPz3dDa3lS9ZvXmRkYEst7US/1By7ERpal+2TfbG0MY0v7/ppydRmQSKXz9uVf9o3fgvXdL687Fg1o7LgxsXvudocbZ4w4FnrrwfsWuwWfzZBF42h7UzInZ1WceJR7/avXDNQC21dPxttJ9n6kj584hHqvt/PhrizyXt5yfHb4nS1L7x/KhY7OdfLr7aqv4bir8H0v2/qenxX4t/JKmfr51Z9BEblqrj4h8ftrymGY14Jro4/jckry+o/N3i7OyZ/REbkpcWr6+7wZ3n8/Jp/Hv3NO//2+P/LXFPRKQH8b0RcV9E3J/tuwci4sGI2NMm/h+ff+itNvH3df9/c3Lnseh0/+f7oXog1I6IpRIDJ3/4rlX9nX3/Hayk9mZrOvn+67SBXW42AAAAWFMKEbElksJYLV0ojI1V/w//jthUKE3PzD52bPqd00erzwiMxFAhv9M1nOUju/85Us1Xrr4nKq8R57P7pQey+8afDtxayY9NTpeO9jt4WOc2t+j/qT8H+t06YNn1YB4NWKPa9f8vDq1gQ4AV1/3538gB1rolerEfbICbmLM4rF/N+v/5PrQDWHmtz/9ThgZwk6t18k86KFz3uFfjw5vA2uMkD+vX0v3/leX6/Sugfzp/in+1JJJkwZr4MqL9u5L+t7mLxEeroxmtE1FYFc3oOlFcHc24jsRgx79qcbZ8vlgq/fbtjVTa728mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA3vgvAAD//xWj4/0=")
r2 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=<r5=>0x0, &(0x7f0000000200)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x40000, 0x1})
r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
setns(r7, 0x20000)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xec}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r9=>r1, {0x7fff}}, './bus\x00'})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="a1ab00000000000000003200000008001781"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendto$inet6(r9, &(0x7f00000003c0)="ce3e6520b91b25723a05e5cede1c00c120159f9de9045d4ccc5751e013b6980bb610f0bd84e07e1d46fa88178a2d03616de450907310c795074a68b3bd884a8b09c5cb21fad61e41c0b2f04511bf2d2b635710f829505c9056846ae4139ffa0b7e5f43ef26aa7274489e2c", 0x6b, 0x8090, &(0x7f0000000440)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0xa}, 0x2}, 0x1c)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100020}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x6c, r10, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4d}, @chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x61a2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004014}, 0x0)
io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

1.250206519s ago: executing program 7 (id=6417):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prctl$PR_SET_IO_FLUSHER(0x4c, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000540)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x5c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x40, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0xc082}, 0xc000)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0xfffc, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "01"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0)

1.162757636s ago: executing program 7 (id=6422):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRESHEX=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x69c2, 0x3ff}, 0x0, 0x9, 0x0, 0x1, 0x5, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000300)=ANY=[@ANYRES16=r2, @ANYRES64=r1], 0x0, 0x2c0, &(0x7f0000000900)="$eJzs3U9rK1UUAPAz+TOJukgWrkRwQBeuHu+9rZsUeQ/ErnxkoS60+FqQJggtFKri2JVbNy78DILgB3HjNxDcCu6sUBiZyaRJ2pg2palof79Fe3vnnLlnboZ2WujJx6+O959nsXfy5a/R7SbRGMQgTpPoRyOmvo4Fg28DAPgvOy2K+KOYWCcviYju5soCADboej//W7PhT3dSFgCwQc/e/+Ddre3tJ+9lWTeejr85Gpa/2ZefJ8e39uLTGMVuPIxenEVUDwrtqJ4WyuHToijyVlbqxxvj/GhYZo4/+rk+/9bv9R8LSv3q4/nTRpX/zvaTR9nEXH5e1vFivf6gXP9x9OLl8+SF/MdL8mOYxpuvz9X/IHrxyyfxWYzieVXELP+rR1n2dvHdn198WJZX5if50bBTxc0UzTt8WQAAAAAAAAAAAAAAAAAAAAAA+J97UPfO6UTVv6ecqvvvNM/KL9qRTfUX+/NM8qetfRb6AxVFkVftcib9dR5mWVbUgbP8VrzSmm8sCAAAAAAAAAAAAAAAAAAAAPfX4fHn+zuj0e7BrQym3QBaEfHXs4ibnmcwN/NarA7u1GvujEaNergY05qfieY0JolYWUZ5Ebe0LVcNXrhUcz344cd1T9i9Oqa9fK3D4+ZNX6/84sz07trfSZbvYSemM9160e/TiFlMGtdcPf2nQ0Wsc/ulSw/11t6N9KVqkK+IiWRVYW/9Ntm5eia5eBVptatL09v1YC79wr1xrfs5upP0y98rEt06AAAAAAAAAAAAAAAAAABgo2b//bvk4MnK1EbR2VhZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCnZu//v8Ygj4h2fYIrgtM4OPyXLxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB74O8AAAD//0aWVl0=")
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff})
socket$packet(0x11, 0x2, 0x300)
syz_open_procfs(0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r7, 0x0, r8, 0x0, 0xf3a, 0x0)
tee(r3, r8, 0x8f5, 0x0)
write(r6, 0x0, 0x0)

668.338836ms ago: executing program 8 (id=6453):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10)
socket$kcm(0x10, 0x2, 0x0)
r1 = io_uring_setup(0x177e, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000200), 0xfb, 0x497, &(0x7f0000000f40)="$eJzs3E1sFFUcAPD/bFtQvloRP0DUKhqJHy0UFA4mfiQmHtSY6AGPaykEWaihNRHSSDUELyZK4t1ovJh48eLBkyejnky8eNC7ISGGi+hpzezOrNvt7nZZtt2W/n7JsO9N3+57/5l5O2/mMRvAujWa/pNEbImI3yNiOCIKjQVGqy/Xrs5N/nN1bjKJcvm1v5L0bfH31bnJvGiSvW6uZgbTl8KFJJ5tUu/M2XMni6XS1JksPz576u3xmbPnnjhxqnh86vjU6YnDhw8e2H/oqYknexLnbWlbd703vXvni29cennyyKU3f/o6qWt0fRy9MRTzdduk0cO9razvttalk8G2RQvL3hg6tjGi0lGHKv1/OAYubKv9bThe+KCvjQOWVblcLk+0/vN8GbiJJdHvFgD9kZ/o0+vffFmhoceqcOW56gVQGve1bKle9AzWLlSHGq5ve2kuIo7M//tZusSy3IcAAFjo+3T883iz8V8h7qwrty2bGxrJ5lK2R8TtEbEjIu6IqJS9KyLuvs76Rxvyi8c/hctdBdahdPz3dDa3lS9ZvXmRkYEst7US/1By7ERpal+2TfbG0MY0v7/ppydRmQSKXz9uVf9o3fgvXdL687Fg1o7LgxsXvudocbZ4w4FnrrwfsWuwWfzZBF42h7UzInZ1WceJR7/avXDNQC21dPxttJ9n6kj584hHqvt/PhrizyXt5yfHb4nS1L7x/KhY7OdfLr7aqv4bir8H0v2/qenxX4t/JKmfr51Z9BEblqrj4h8ftrymGY14Jro4/jckry+o/N3i7OyZ/REbkpcWr6+7wZ3n8/Jp/Hv3NO//2+P/LXFPRKQH8b0RcV9E3J/tuwci4sGI2NMm/h+ff+itNvH3df9/c3Lnseh0/+f7oXog1I6IpRIDJ3/4rlX9nX3/Hayk9mZrOvn+67SBXW42AAAAWFMKEbElksJYLV0ojI1V/w//jthUKE3PzD52bPqd00erzwiMxFAhv9M1nOUju/85Us1Xrr4nKq8R57P7pQey+8afDtxayY9NTpeO9jt4WOc2t+j/qT8H+t06YNn1YB4NWKPa9f8vDq1gQ4AV1/3538gB1rolerEfbICbmLM4rF/N+v/5PrQDWHmtz/9ThgZwk6t18k86KFz3uFfjw5vA2uMkD+vX0v3/leX6/Sugfzp/in+1JJJkwZr4MqL9u5L+t7mLxEeroxmtE1FYFc3oOlFcHc24jsRgx79qcbZ8vlgq/fbtjVTa728mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA3vgvAAD//xWj4/0=")
r2 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=<r5=>0x0, &(0x7f0000000200)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x40000, 0x1})
r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
setns(r7, 0x20000)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r9=>r1, {0x7fff}}, './bus\x00'})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="a1ab00000000000000003200000008001781"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendto$inet6(r9, &(0x7f00000003c0)="ce3e6520b91b25723a05e5cede1c00c120159f9de9045d4ccc5751e013b6980bb610f0bd84e07e1d46fa88178a2d03616de450907310c795074a68b3bd884a8b09c5cb21fad61e41c0b2f04511bf2d2b635710f829505c9056846ae4139ffa0b7e5f43ef26aa7274489e2c", 0x6b, 0x8090, &(0x7f0000000440)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0xa}, 0x2}, 0x1c)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100020}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x6c, r10, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4d}, @chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x61a2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004014}, 0x0)
io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

588.948633ms ago: executing program 8 (id=6459):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10)
socket$kcm(0x10, 0x2, 0x0)
r1 = io_uring_setup(0x177e, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000200), 0xfb, 0x497, &(0x7f0000000f40)="$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")
r2 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=<r5=>0x0, &(0x7f0000000200)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x40000, 0x1})
r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
setns(r7, 0x20000)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe0}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r9=>r1, {0x7fff}}, './bus\x00'})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="a1ab00000000000000003200000008001781"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendto$inet6(r9, &(0x7f00000003c0)="ce3e6520b91b25723a05e5cede1c00c120159f9de9045d4ccc5751e013b6980bb610f0bd84e07e1d46fa88178a2d03616de450907310c795074a68b3bd884a8b09c5cb21fad61e41c0b2f04511bf2d2b635710f829505c9056846ae4139ffa0b7e5f43ef26aa7274489e2c", 0x6b, 0x8090, &(0x7f0000000440)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0xa}, 0x2}, 0x1c)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100020}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x6c, r10, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4d}, @chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x61a2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004014}, 0x0)
io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

571.597364ms ago: executing program 0 (id=6461):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001140)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x10001}, 0x14)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
r1 = syz_open_dev$sg(0x0, 0x0, 0x800)
ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080))

503.503269ms ago: executing program 8 (id=6465):
r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x5a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x101, 0x7, 0x0, 0xd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='cpu==0||!')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="760a00000000000061118f00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)

463.706983ms ago: executing program 0 (id=6466):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prctl$PR_SET_IO_FLUSHER(0x4c, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000540)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x5c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x40, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0xc082}, 0xc000)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0xfffc, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "01"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0)

461.826923ms ago: executing program 2 (id=6467):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
syz_emit_ethernet(0x5ee, &(0x7f0000000300)={@broadcast, @remote, @void, {@canfd={0xd, {{0x3}, 0x1a, 0x1, 0x0, 0x0, "a9d42be8a1d323f3736f0940283545370b12dac31e1cd94a75028bf2bb6582669ffdfddfcb0caa87e4e654c9489a1e138eb3bb143fd1ebb11c9340032821b6e7"}}}}, 0x0)

457.081853ms ago: executing program 0 (id=6468):
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x9)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r2}, 0x18)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000980)='kfree_skb\x00', r3}, 0x18)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$tipc(r4, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r5}, 0x10)
mq_unlink(0x0)

437.458164ms ago: executing program 2 (id=6470):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10)
socket$kcm(0x10, 0x2, 0x0)
r1 = io_uring_setup(0x177e, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000200), 0xfb, 0x497, &(0x7f0000000f40)="$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")
r2 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=<r5=>0x0, &(0x7f0000000200)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x40000, 0x1})
r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
setns(r7, 0x20000)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r9=>r1, {0x7fff}}, './bus\x00'})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="a1ab00000000000000003200000008001781"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendto$inet6(r9, &(0x7f00000003c0)="ce3e6520b91b25723a05e5cede1c00c120159f9de9045d4ccc5751e013b6980bb610f0bd84e07e1d46fa88178a2d03616de450907310c795074a68b3bd884a8b09c5cb21fad61e41c0b2f04511bf2d2b635710f829505c9056846ae4139ffa0b7e5f43ef26aa7274489e2c", 0x6b, 0x8090, &(0x7f0000000440)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0xa}, 0x2}, 0x1c)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100020}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x6c, r10, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4d}, @chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x61a2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004014}, 0x0)
io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

391.727978ms ago: executing program 1 (id=6471):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=<r2=>0x0, &(0x7f0000000200)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x40000, 0x1})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0)
io_uring_enter(r1, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)

391.343398ms ago: executing program 0 (id=6472):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x1b, 0x10, &(0x7f0000000940)=ANY=[@ANYBLOB="18050000000000000000000003000000b7080000000000007b8af8ff00000000b7080000041000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff8e07366affff0000000008000000a096b861c0f191799c2dc8f9806a401b140ef06d8dc1079b7a58486900c378c6f1ccaa7baba1903b9b92432852b73b2837a17e3bfdacc700f1be48755def6e55bcafb7fda53cf5c77c615fa7d55684a9384c77dd90eecce5a22dd469ff17be8a367904327181a48499c26ff0c628cf49679b9d14f80f2f569e2713d065cbeb4aa36a46bab8a4ab93754e4c92cec91e6b9f188bbf4bb35b093f05cc2d8c5ee05c1dc8d38443884e054bc911b8c29fb63c332a95d28276a31fcddfb7197a22d615fc9434dc35664e74c97ae8f88c3d57ce15557e0b7a9f4c003848c4e92311366c76efa453fab96f53c160f577af401bcfc9202c5d942e67c199ce6e2a669afe8bc3ded90401e461a2e1798c02314d9c1afb067fc5c95eeb6b7f453cd99835", @ANYRES32=r0, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x200000, 0x0, 0x1, 0x0, &(0x7f0000000080))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000340)='9p_protocol_dump\x00', r1, 0x0, 0x101}, 0x18)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x85)
lseek(r4, 0xfd, 0x1)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x7f, 0x7ffc0002}]})
setregid(0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f0000000000)={[{@acl}, {@barrier_val={'barrier', 0x3d, 0x1003}}, {@errors_remount}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x1, 0x4e0, &(0x7f0000002d40)="$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")
openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000500))
pipe2$9p(&(0x7f0000000240), 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)

390.634268ms ago: executing program 8 (id=6473):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0xc01, 0x0)
r0 = socket(0xa, 0x5, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x20002)
listen(r0, 0x100)
sendmsg$inet_sctp(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@authinfo={0x12, 0x84, 0x6, {0x6}}], 0x18, 0x48d1}, 0x8850)
r1 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x5}, 0x1c)
recvmmsg(r2, &(0x7f0000006d00)=[{{0x0, 0x0, 0x0}, 0x20}], 0x1, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x46, 0x0, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000100)=0x5, 0x4)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
fcntl$setlease(r1, 0x400, 0x0)
r3 = syz_io_uring_setup(0x30da, &(0x7f0000000080)={0x0, 0x4ddb, 0x10000, 0x1, 0x2ca}, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000001540)={0x3, 0x0, 0x0, &(0x7f0000001480)=[{0x0}, {&(0x7f0000001180)=""/237, 0xed}, {&(0x7f0000001280)=""/39, 0x27}], &(0x7f0000001500)=[0x0, 0x4, 0x3]}, 0x20)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000001cc0)={0x2, 0x0, &(0x7f0000001c40)=[{0x0}], 0x0, 0x1}, 0x20)
getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000100)={@loopback, <r4=>0x0}, &(0x7f0000000140)=0x14)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r1, 0x20, &(0x7f0000000340)={&(0x7f0000000200)=""/31, 0x1f, <r5=>0x0, &(0x7f0000000240)=""/220, 0xdc}}, 0x10)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000540)={{0x1, 0x1, 0x18, r7}, './file0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="6b73f0fff0ffffff18120000", @ANYBLOB="92f308dbd0dd8ab4b6bacca3fc1cebef5273a397df3b345c053737ddcf5efd2f8964431211e5681835355cfcbd9005b93d8170b8c947ed679af7cbe9b1949598a254cbd638749522e4e20eae26d5a376e5c4b86adc67a8cdde4938f00a2f104f6f0b3422139f7f5c2c5dbfce5d7c3248b3ce51d989a3232cfc2da5e498e25625464e64e0336a2f39d70a7e7ac14c2a00b2d6d0a15372df53428e2cc7c3e53e1ffc46bcea2b262eb22be2a26043d58fb6fb2bac46e8f816", @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000002df28bbc587fbb6858fac1dc85f"], &(0x7f0000000040)='GPL\x00', 0x3, 0x46, &(0x7f0000000080)=""/70, 0x100, 0x58, '\x00', r4, @fallback=0x12, r1, 0x8, &(0x7f0000000180)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x2, 0xb, 0x8}, 0x10, r5, r1, 0x6, &(0x7f00000003c0), &(0x7f0000000400)=[{0x5, 0x2, 0x3, 0xc}, {0x5, 0x4, 0xd}, {0x4, 0x2, 0x5, 0x3}, {0x4, 0x2, 0x1, 0x2}, {0x3, 0x3, 0xa, 0xc}, {0x0, 0x5, 0x10, 0x3}], 0x10, 0x80000001}, 0x94)
fcntl$setlease(r1, 0x400, 0x2)
r8 = socket(0x10, 0x2, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r9, 0x0, 0x178}, 0x18)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
close_range(r8, 0xffffffffffffffff, 0x0)

389.357128ms ago: executing program 2 (id=6474):
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=<r0=>0x0)
setpriority(0x1, r0, 0x4)
r1 = syz_io_uring_setup(0x126b, &(0x7f0000000040)={0x0, 0x8d4a, 0x800, 0x0, 0x2a8}, &(0x7f00000000c0), &(0x7f0000000100))
capset(&(0x7f0000000140)={0x19980330, r0}, &(0x7f0000000180)={0x6e, 0x1, 0x0, 0x9595, 0x3, 0x4c99ffb5})
msgctl$IPC_RMID(0xffffffffffffffff, 0x0)
r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x80800)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000003440)={0x0, <r3=>0x0})
fstat(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340)={r3, 0xee00, r4}, 0xc)
ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x9)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r1, 0x17, &(0x7f0000000680)={&(0x7f0000001000)={[{&(0x7f00000003c0)="6970495841130290efb1e2ae764ad18310eece739788c3277243040d4f60f643b45547c31460c638c2fd4d6d700505c2cd5d444da7dbbc55ec0c8cc33f825607a811cb1ff12adf20c2b61433c3cbcd350eb817eba6792b09c13c05ac48b9175b980835a2aa8792393556d5dbad8c65f17105a6a60069e1f9470471a680518b4e936101d0cf8bbdeceb17be90ada6", 0x8e}, {&(0x7f0000000480)="dffed809e35e078cfa1f7f73f271ab916a13ae6efa0f464a7a6643d2d1f97a40de229f1707f148860f71b92f0bb88bf8c85aec72c43362b564e74e7609e530defe2d228ce33dded6df055ccd225a6fe742408fe72713fea8963d022f0e35739394faf0b5070e1fde216ead5d283497917dab5e0294f9ff9694edf3d6f55b60866a5aef06394bef3907e21088f2b8216c943a0018bff299fdf6cb38970c033e22a6230f4bee4c4ceeffe63a8e0bd7a25fbf2cbf2f2a4ce0d35ab190243e3546db1e4e1bd433e571ef1adac5f81caddd", 0xcf, 0x3}, {&(0x7f0000000580)="9ef0ed6d726ebcdee42b3b793568e883e00517dfd17b7ef94f1f2f58b841526309e4c91812c07def59449e4fced72dba5aac154ab95ce26d60291cb62921ce53fcdbb030d8bd9e9f6a95f5fbb4cb017ba9c23c7b7dad6c466d60f5303f284c6f5cc342c71e7e79e93a22a12bb5060509d98b38293929d0c1d9406686e0e745a6c4778444b1a7d5f57c248f97527262bfbbf1a11cc3ff63b6cd7c386c1b5964291e04b41d55c237d4bd6140604732cfd3f6973eca3bb4cc9650360f7145d0827f6894036b7f77181bd77cf82012b09eb6b9b6511cb3f3a427cf24f7becdc566a6b7f660bd8e724dbc431f20131ffa8c334fe980", 0xf3, 0x1}]}, 0x3, 0x1}, 0x1)
r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000700)=@generic={&(0x7f00000006c0)='./file0\x00', 0x0, 0x18}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r5, 0x0, 0x1a, 0x2c, &(0x7f0000000740)="0500fa69bea1ecfebabc480f288e9b732b7b6392abccb1bbf1b9", &(0x7f0000000780)=""/44, 0x2, 0x0, 0x5a, 0xc2, &(0x7f00000007c0)="40f308480baa77e9be61479170ea95cc8db5da2300145023059e6d0cfaca3b1a1f8925f8ee36ee4a86f5fde1b38d8174ece984c43696227056886a3a0949e7ab7a658fa73ca107f4e3ba7a22e49243a5a480ef2e59e3d19e2e7c", &(0x7f0000000840)="0209e3ca0962fbd7909e46b67218dda04cb269f9a37e154497b64f4a3e108ae8ff87558e52add3feb195f0fe43cd166505deafb45a1338ba7fcc4ddf4b051b36b14eda05c706acec002f668f8135b70831ffffd5cb399c54b982cea2b349b1a2cde2dac5316b812c1928a80998f3c394a28711220661420c2e944362004b043ce5b6d1822821083026cf62a6073a9204ef5654511779a79e114b8ffdaf20be862d87c7cfe21d74e652199ee1fdd8b86ede2741b3f8355aab148f4101d022c480c92f", 0x5, 0x0, 0x4}, 0x50)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a80)={'ip6_vti0\x00', &(0x7f0000000a00)={'ip6tnl0\x00', <r6=>0x0, 0x2b, 0x8, 0x8, 0xa3c, 0x4, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0x1, 0x1c}})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)=@gettfilter={0x2c, 0x2e, 0x8, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xfff1}, {0x6, 0xe}, {0xffff}}, [{0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x20000044)
r7 = signalfd(r1, &(0x7f0000000b80)={[0x8]}, 0x8)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xc100c6, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@errors_remount}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=")
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2004}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004004}, 0x60004)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e40)={r5, 0x0, 0x0, 0x85, 0x0, &(0x7f0000000d40)=""/133, 0xfff, 0x0, 0x1000, 0x1a, &(0x7f0000002000)="19cb9b4ba5e9eb989a854aa79a9efcc06f0a5db911fce08fed5fc7802c4566f484bdd40ecc32ae70475f877702387bba6d43a9f85f150260aa63cf4a23ce8f13d41b0d45eb92860ec5eea3dbc1075b969fcc68fa00923cb5863d5f999a82fe076b53474b6fc16f0a70eb821289d7fc055e58ad197c8bc0c8508b7adaf3c85007176aedce7a5af17cb16a35533860d5912f987d79ff703a8d2a7fd443b14870eb7ab366c38294dfb7a306d485e3063faeae15d084f3cec714730ed4079e28b35ce3caedc332a485eff95bc086aaa483eecbf12f61eccd26caea9dca0000e00b502dd0565db315aec8bf67053db0b32d6881184fcd9c3d7c83084c14986426f3611834e817ae2c81b05f172cd45c5957e80c21ee26b3bfd7beb40bc74bf3b080d1c0f862c9c7507121466820892ad85763103a08e362d1379992ae7e97728f1b876b844fc01360e7b4e791c11c95bc56bc67694edf53e4e059ef73e6c3c23cdfafa40e9f5450a77f14277818f82c905526eb7bdcade37a02efe23293a7548ac57262766cbd00a684d5bd94e641be1a9c3baecdd44a9e7fefe120b660031179461e2a88e6c60412299512fee9ebbf8c999b8bbb8a346ef861432892894a3edc3503186591104180399cbecbd97c4f75184de60b3c0e23ab6599d1fb7ca7b39ec2d1dc47417fddf3c91ed75e6cf6fc0508a5180f541184fcda8d5b9052d622b24cb4f8043cfbd030e75b24f48faf44e1affcea6ea9914c24cce91815792664ff393678f3af08b0fd8c5212456af3d103fdf8c831d842a010982f49a85f45da7bbf0a6821d30d6bd9bacfc85ab91e969c75e165bacad6a49823bc70514229cbdc2c708703b4f4c93f7d7ade391a8162bffd4eba01c8b15030376d74eef9453d9285d9e4c089a8df92ea494f69a995e0cf4532b60b6eccd202072e388cde090f4d2d7056bc12c0dd248eb5d0c392210a6d0fe5ea9383e65840c8afd37298846ebe9404eed207faf5de03d12eaaa513213ae2935bc57e0e9b0249892738a6cc449f7c2fb7d4d9b76814271604064eb408892ff1695ac040ef1880f39eaba11d3e6cf082597ed2d7a564b37e932f1535dc6160fbcac8892fca98445b69f9fb2dd7f73e92c6d732dc36d214c545d89c24cae7ed0428a7549cd5d6c777efdd466ad4dc542ac81e8e8b584fd857964ee60ff908e44023b7ef6f4ae85cc31cddf21e4489fe8e164dd17903264982d39d269e8222c53991762a68b3a0fe3286a6840e31e290bd471ccb9001c1517ed59477231d95f59513eca3ec79172c7df7cd001c25fb57b0b605cc812cbab7efbff9a874c5660a95d9a59b66a4bd7e7d29b687545eea1db3f48ae7d38ed855ef28eb6ac415c3e57f80ca7fea74f7cee504c152f99ee6ad440ac8837eb51fd7061e0d7a64e6e0db2afd8c1e773758f548cd6409602d4ea75a795021c55218ad93f2889660aad8077b3ee3b341d007a7db111d795411126579605bd9cab00435022742754ba3f044249d03e555879b6be5c1c17f4fc28db8ca4b6927328f9ff59ed55bd3426fdc826c391d30138732dc34e8e82508c246bcdc455fb3bf9f324381b7ab8d36fff386e8fdbfdf1d9ed01061984dc38a9dbc593d2c407eda6540f21077f09956112eda59ee205e6ca099f09b2635da529edd9f5eb7e7f90fc534e7f5d7b1eb96b99bddbc6a81dc71195076284102237351f2d791988d9965a621385cb64337e9145b39d7b5bc3b3804c645c9dd2231a8579a9dc93f0a735f7c5f401d4eae5732c9e319645078955581bc4e0f92fd178ab2135132e70f4cfb9cc50dc50b5f8614ce3d3492edfc367a051ac880058a0c041f3eddf54e45dda81fd3d9d686b6319b8ef3a5c13edf6975ccf98e5c3bcd0ebaeb1f20fcf977ba4e6aafb270ec107587d9f17e22250ca9164b1093934a767912ae5f5edbeb0cf5d6773ab16f63fe1d016a234186a5ce8f7d58e48dad7bb3d9652e3e864dc02f9b15efb296553934718e718bc081e581dd54b12cb7e2edbe5b6d326659a3787dabb6bb78f187ea0c45d35a831ec315a65744f721f703d2cacf3020b829f40a3cfbe09863d24ac567a0a696162b6807c2f64d05a453bf023b5269cca41980f3814c3df956441b5d54454e3d4c30b0b6e3f6ec77a8dd38ea4eca7c2e2093cf6a1cfac21038ab0d083b71ddf0bca82ad78376f1b91a42367c93b4e5feebf1291dd4d0c5535a0af16c6f4f22c704bd5ec0ce30529feeb8dd97d8afcf823c38b089c25d1e95a300ac6ab532f59ac64a1e8917eef1a760f780d5f571a3d6804cf87246d1fc2ff8a3851ce0d723eab5db9cbf9e4ec5de1f16c28ddd522f13cf9ca2e17e983f818de7b5eff1fe7d5673632450a68523b15b985717b984341c2a560cea0cb46cf4a6cb8c3dc000ca49b5d293c1a89033e998add9700f150719165f6322c866f7773ba3afaf6001cf24a6a026b4ea5999b0a8c46a9789f23e62f05457a9869c5b8df8b4cbb09c916498a7fe07a052edecd7eaf16a5037a7e42bddaae798aff2bc205e9eb4e9d6e583170cdcfe51468e14128660ed102bafc2cfc84e40b871e81c12f177f97ab47cc84137c2a6e5580cd48c9823e7139d17a6bc64cefd68332dadb2e00b068bef0b79b29ba088291f17dedbe3b293a9813fe409ebf8322ed5138bb7b42603e05b0a3fe00a1339f5a9c1d617f879a81028e5f661c8ab2ae29d476d98b7f59c78be79e123b990db814bf364390fea2382feabe99c76705c9b0bf4efd264cb84678d405d259a4c7b199423ff7d883a1502b6d2ae2aa891be9fb67f086d9b0811d78e117f2b5b9c0431b246bfdc05e81e6288c52f0dabf361564f00494b46fefd9f081863ca237139d986db4e8744daa1890b09c4caf24a76844c08a965c872db77950b01674aa0c08df0f4eadd1862707fb806053b4100e73a4c272677e4d12654b1d245d8fb305603aebfeec066b17935cd1d486d5ab8b6273296062ad0b4813c59eb54f3ec1584e05f1fa5568f19f655566b3999466b0aa523e1271787f1bbce1b5f30a1b116d0b5a4c7cca5faeba2969441092bd134300ec56e143121e9e5185f4bacfb1f266bf812f0e75b51958d75288dfb1d5b6a199dde6a890839bc54d8b5f446b0e794f9738afd9b50cae4a07ad93017de7293bec2ea9053f7210e56f6d9dabd640644505ded7b5d27845d95ee29bd244ec8fd7e83c9f2c74cc4bad80f61061ca270cf4407dc73b1a5e49e15b6233c348d20305c468df3d0f453d018628ad6537a9d850b1f157ff24213a1e2ea8c9d2418c7adc389f4e76b2581c711d180882babdc68b4d194e5d7ce3b4f68b046ef34352c52dadd9f094ce775326115c731b6ef6c625908151f6df11c3b05b9e33e17329ed4ae33d31b4003f44402cc3bda83457644bd513338f3ae777401e77dde2ef8eff2cf419dc1d9be1df36656135d8241ed781a891a9afbad5508fd832f050711c91c8f9f26c0a2c76757207c80a23f97bee39339b5bd456cbbcc65d51899fd32a819c3cf8715b45076cdc4fc84181122f2ab886783c1a84b71c91e7fdbd03b860f3027eda45b14141d20d654670ae1dedea37eca772e2bd737e73dd7bb4aa29212cc6a4ffccc4515716806a2f78162cfda9b49f16a8c71582e69d3cf353801fb0b5c24c29e1ded8d4a247871fb0bc880b5ccde75cfb3c4700e9f2a9a96b095d69f3ebf04d1de311ecd39ef71c9aab958a7662c61b8ed9191c216bc6d1f8cfba83ae2e6a611bf853664f7b39bc4e5a661d25e619e28bdf9596565c3bbd34016c5465d7f097959b0d8809ec9b2b9c3b72a2945f57e008c81406f962933745bcbdcfaa3a04c2021c4cb61d745566f84f9f4274dfdeebfcb1632e05dad77e8ba3b8502c989b71addd4cd5d769b8134493bae4878ce679654bbae3c1864593d8d43e35622b94ed698f2c93456e27eca88cc5aad7b283add8bb765a9ab95ffe163283c49f8415d34003765938bc0f2cb01fb8a270c40f54d981c0ffa11e2dfd30f5fd563985e3381bd849266855fada9f29d07405bb9123dfc4571ebe013a22f205a907d3450a8679700882be7af8ba0b35205a5e3469b77838315bce2f012aefd38da8804adb95588e2e561da7946437206992d4502fb25030198d846e23f38e8fe6d0f95e8568694e37a2177364343ffecf32dfa2f13ef5028eb28e84e10a2eef8e47c042295884d73f673d1acf0642b4b373e53abb56c8e13e0076690289586b697c8d681d10900cf0a76e32ae8516b00b2cabf1bbcf00e8c4c415f5d186063422aa118ba6c287012d8a2a36f77b7c0cf315c70acd4e8d14548d232d91184d29a95773c1b4efa7f531fbdca2716a121fae720dc31f71a7a6df231f961d98cc833a3a3eadbc70b02e992ddbf0e67f7e5315180eb00e1f42a08f55c84043b7ee479ac3767485d6d52106292c2347bad10ff3834fcfec7d7936e377068be6ad6434665d210334267bd99f47ec285e89311cd1375d1f51745c6e0114e35aaae7f446d11f55208a11913914cbd50b8de4b0169b33aed0bb8094b05f21a4b11cdf3d9d58b31edfe00f2216ff625175a17ba5c46a04ba966db831ade350d2f3ecb7c60d4851a25fabd75f2c477d8ba01540e3be889f62a74aa8f0359356f399ffe296731461049c99416a0e60cea0b1117db178d6c6f9796bbf8aab0826fcbd7e3d3829dc9d5fcbdcdf6ad9da71f178948967dc6c2e3752ada1a11b2347c6a410fd1dda7fdb0a9944bd4ee47cb68cc7a9622c7777c1c7252721bc7b125aa42184cf53bc887743a3ad77ae7f33d4c3e02cfc44a3f262860a226e925b8ba0d27c115ded64c4831765932c80ef801c2315a8a6cd1cd6e71120580da84cd930661a159f7f3e630abd40577d5ca584796aee253a01c4bae6dae64459d5e847d2cd0f3e7ffa692e6e78a96734f0ad330d9c9d7b18046df7b6e7789768475372bd9152a0815f336cea5f862bb6365ff400f8776813e83f902cb1c211fc0768b9cbebafa3a3c0ca9f71fde80fb3e727d7baca67de3fd155a5f413f5db8e53f8c0ff5391bb405d4fc0a70922c1e086ca124541cbc3b0f1fb9dc1d81b2295b098ea40daf401ecf4d148f98644634dae91b2818a753937bd18f71bccc66845a613b892ac6e5dbf965f11995d7df7be22e9f53c819b9cf0cc46c24f8210f23a8bf30c66f255086a15ee0b76243af9ca63d447585353e6237d9bd6c25626d73ad35012afa230ae652a07471584dd91082c316aa5315c8993e2845671cacb6faa1ddbfb5cb9bea613819c98315b60cd298aec0163f604ba0f7fedec7e2e5526d06be4144989734adf4c6acb18ba1baf0331d6ab5ed5efdbe1ae306aca09a10a88244764e75ba35f5c6ac95ee54d3bd3a3352c248ed7698463ba6c0e3e52b978a46436498c6bd7371bcd2a08c4c40404fda5435b1264f51d5104b7447b3d76daf38e6a1af5392e8399ce3a5d401173e271c2081665f0f044f5ab8d70aba0d0fd638341e8b62b7a57cfbac189fbb85607d24416d26943cddc0f287d161b02b92d82593b10f1fa0fd8d52a98d4120b5ee06d0466650def86ee6046820c32c8d1ec9ad5871c1e0c7440f40ded66e16b9ae4262f4006af775ba2cadca1d91e3abbff5d734e9c1ed6b61bed406b0b9a2568330e1951b0bf3ce6baeab7740f2e4b7dcf5f85068ce3e01762a7644470f3d3b181a7cfec00475f221a17ec2341ec39022947401b171178fb7f4b10114b280a512e572db8c0dfd580dd611125a029cb9195a98b7d0ef19e05d98ecce8ca76e7b9e", &(0x7f0000000e00)="733e629e6ff3b89b4d0f04d5b6c5c5117f0fc7515867c9461a1a", 0x1, 0x0, 0x2}, 0x50)
r8 = msgget$private(0x0, 0x430)
msgsnd(r8, &(0x7f0000000ec0)={0x0, "5faff0e394ef9242f3dd4a9b44c7b7052bdbdc0dac0b85aac2d2df49105feb74001e173e3418f8b92873c2f8b3c9818968335ac0e0cf50923a7c3e08a49d7d2b30dc50b4929ee4b268c326a2237787b2dba63b6d83402ba8dbb27a2cf0125b8a314355"}, 0x6b, 0x800)
r9 = dup(r2)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r9, 0x84009422, &(0x7f0000003000)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
bind$inet6(r7, &(0x7f0000000f40)={0xa, 0x4e21, 0xdc3, @empty, 0x8000}, 0x1c)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000fc0)={0x2e23, 0x30, '\x00', 0x1, &(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
semop(0x0, &(0x7f0000003400)=[{0x0, 0x9, 0x1000}, {0x0, 0x10, 0x2000}, {0x0, 0xfff7}, {0x1, 0x2, 0x1000}], 0x4)
capset(&(0x7f00000034c0)={0x20080522, r0}, 0x0)
r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000003540), 0x80000, 0x0)
ioctl$BTRFS_IOC_BALANCE(r10, 0x5000940c, 0x0)

343.178152ms ago: executing program 1 (id=6475):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0209000007"], 0x38}}, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x200100, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1)

342.597262ms ago: executing program 1 (id=6476):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10)
socket$kcm(0x10, 0x2, 0x0)
r1 = io_uring_setup(0x177e, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000200), 0xfb, 0x497, &(0x7f0000000f40)="$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")
r2 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=<r5=>0x0, &(0x7f0000000200)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x40000, 0x1})
r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
setns(r7, 0x20000)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r9=>r1, {0x7fff}}, './bus\x00'})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="a1ab00000000000000003200000008001781"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendto$inet6(r9, &(0x7f00000003c0)="ce3e6520b91b25723a05e5cede1c00c120159f9de9045d4ccc5751e013b6980bb610f0bd84e07e1d46fa88178a2d03616de450907310c795074a68b3bd884a8b09c5cb21fad61e41c0b2f04511bf2d2b635710f829505c9056846ae4139ffa0b7e5f43ef26aa7274489e2c", 0x6b, 0x8090, &(0x7f0000000440)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0xa}, 0x2}, 0x1c)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100020}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x6c, r10, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4d}, @chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x61a2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004014}, 0x0)
io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

342.320952ms ago: executing program 2 (id=6477):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001140)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x10001}, 0x14)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
r1 = syz_open_dev$sg(0x0, 0x0, 0x800)
ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080))

340.509312ms ago: executing program 2 (id=6478):
syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x523, &(0x7f0000000540)="$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")
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb77, &(0x7f0000000c40)="$eJzs3c9vFFUcAPDvzG5LKWgX40GMCTUeIDFsW0BB4gE8Gg8mkqAnXPuDNCxgaE0sIbHcTLyowZMnT2qiR6+GGPXkweiJ/8CQEFP4A2pmdnZZ6W5LYcuQ8vkks/vePJb3nSbffW86bzoBPLHGs5c0Ym9EfJ5EjBX704gYzksjEcutf3dn5cp0tiWxuvrOv0kkEXF75cp0+/9Kivdd2Us1/2T89UvEM5W1/S4sXT7XaDZnLxX1icXzH04sLF0+OH++cXb27OyFQ69OHp567cixV44M7FiXjqaf/fnmG99dO/P1Hz8ee+HTJE7E7qKt+zgGZTzGOz+TbtWIeG/QnZWkUhxPr+MEAODxk3bN4fbGWFTyUstY1OdLDQ4AAAAYiE8iYhUAAADY5hLn/wAAALDNtdcB3F65Mt3eyl2RADwqt05GRK2V/+37+1st1VjO30diKCJG7yRddwa17veuDaD/8Yj44auj+7Ittug+fKC35asR8Vyv8T/J87+W/xWPtfmfRsTkAPofv6cu/+HReZj8PzGA/uU/AAAAAAAADM71k60L+Wuv/6Wd9T/R4/pfpce1uwex8fW/9OYAugF6uHUy4vWuZ/vc6cr/Qq1S1J7K1wMMJXPzzdnJiHg6Ig7E0I6sPrVOH9/+dPzvfm3d6/+yLeu/vRawiONmdcf/PzPTWGw8zDEDLbeuRjxf7ZX/SWf8T/qs/337Pvv47fTPc/3aNs5/YKusfhOxv+f4f/eJbsn6z+ebyOcDE+1ZwVqnX/z1+379y38oTzb+j66f/7Wk+3mdC5vvY3L04Nl+bQ86/x9OTuVPFR0u9n3cWFy8NBUxnLy1dv+hzccM21E7H9r5kuX/gZd6n/+vN//Pkuz94lsijYhG8Z7VP7inzx1nfv+iXzzGfyhPlv8zmxr/N1/48t2VU/36v7/x/0g+ph8o9vj9H6zvfhO07DgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgcZJGxO5I0nqnnKb1esSuiHg2RtPmxYXFl+cufnRhJmuLqMVQOjffnJ2MiLFWPcnqU3n5bv3QPfXDEbEnIq6N7czr9emLzZmyDx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICOXRGxO5K0HhFpXk7Ter3V9s9Y2dEBAAAAA1MrOwAAAABgyzn/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAh7dl3/UYSEcvHd+ZbZrhoGyo1MmCrpWUHAJSmUnYAQGmqZQcAlMY5PpBs0D7St8UMAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBJsn/v9RtJRCwf35lvmeGibajUyICtlpYdAFCaStkBAKWplh0AUBrn+ECyQftI3xYzCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAnycLS5XONZnP2koKCgkKnUPY3EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANvZfwEAAP//vlL7zw==")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
open_by_handle_at(r3, &(0x7f0000000080)=@shmem={0xc, 0x1, {0x20}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@getlink={0xf0, 0x12, 0x400, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1, 0x8}, [@IFLA_LINKMODE={0x5, 0x11, 0xb}, @IFLA_LINK={0x8}, @IFLA_VF_PORTS={0xc0, 0x18, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x9, 0x2, '&,\'@\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "69669bb40c93ee9e7b46956bf30e08d4"}, @IFLA_PORT_PROFILE={0x6, 0x2, '\x0e\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "149182cf78200a4ec2435f2b29a877c9"}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e631fb275500b4fe73da63272b81ae15"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_VF={0x8, 0x1, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "765c24b6db50e7e810ede4b27f3d473f"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "0d2e3c1d42c60747c4ac3e3e6bd367e4"}]}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x4)

310.365885ms ago: executing program 8 (id=6479):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0209000007"], 0x38}}, 0x0)

309.425755ms ago: executing program 1 (id=6480):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10)
socket$kcm(0x10, 0x2, 0x0)
io_uring_setup(0x177e, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000200), 0xfb, 0x497, &(0x7f0000000f40)="$eJzs3E1sFFUcAPD/bFtQvloRP0DUKhqJHy0UFA4mfiQmHtSY6AGPaykEWaihNRHSSDUELyZK4t1ovJh48eLBkyejnky8eNC7ISGGi+hpzezOrNvt7nZZtt2W/n7JsO9N3+57/5l5O2/mMRvAujWa/pNEbImI3yNiOCIKjQVGqy/Xrs5N/nN1bjKJcvm1v5L0bfH31bnJvGiSvW6uZgbTl8KFJJ5tUu/M2XMni6XS1JksPz576u3xmbPnnjhxqnh86vjU6YnDhw8e2H/oqYknexLnbWlbd703vXvni29cennyyKU3f/o6qWt0fRy9MRTzdduk0cO9razvttalk8G2RQvL3hg6tjGi0lGHKv1/OAYubKv9bThe+KCvjQOWVblcLk+0/vN8GbiJJdHvFgD9kZ/o0+vffFmhoceqcOW56gVQGve1bKle9AzWLlSHGq5ve2kuIo7M//tZusSy3IcAAFjo+3T883iz8V8h7qwrty2bGxrJ5lK2R8TtEbEjIu6IqJS9KyLuvs76Rxvyi8c/hctdBdahdPz3dDa3lS9ZvXmRkYEst7US/1By7ERpal+2TfbG0MY0v7/ppydRmQSKXz9uVf9o3fgvXdL687Fg1o7LgxsXvudocbZ4w4FnrrwfsWuwWfzZBF42h7UzInZ1WceJR7/avXDNQC21dPxttJ9n6kj584hHqvt/PhrizyXt5yfHb4nS1L7x/KhY7OdfLr7aqv4bir8H0v2/qenxX4t/JKmfr51Z9BEblqrj4h8ftrymGY14Jro4/jckry+o/N3i7OyZ/REbkpcWr6+7wZ3n8/Jp/Hv3NO//2+P/LXFPRKQH8b0RcV9E3J/tuwci4sGI2NMm/h+ff+itNvH3df9/c3Lnseh0/+f7oXog1I6IpRIDJ3/4rlX9nX3/Hayk9mZrOvn+67SBXW42AAAAWFMKEbElksJYLV0ojI1V/w//jthUKE3PzD52bPqd00erzwiMxFAhv9M1nOUju/85Us1Xrr4nKq8R57P7pQey+8afDtxayY9NTpeO9jt4WOc2t+j/qT8H+t06YNn1YB4NWKPa9f8vDq1gQ4AV1/3538gB1rolerEfbICbmLM4rF/N+v/5PrQDWHmtz/9ThgZwk6t18k86KFz3uFfjw5vA2uMkD+vX0v3/leX6/Sugfzp/in+1JJJkwZr4MqL9u5L+t7mLxEeroxmtE1FYFc3oOlFcHc24jsRgx79qcbZ8vlgq/fbtjVTa728mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA3vgvAAD//xWj4/0=")
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
r2 = syz_io_uring_setup(0x117, 0x0, &(0x7f00000001c0)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x40000, 0x1})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0)
io_uring_enter(r2, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)

273.185138ms ago: executing program 1 (id=6481):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
syz_emit_ethernet(0x5ee, &(0x7f0000000300)={@broadcast, @remote, @void, {@canfd={0xd, {{0x3}, 0x1a, 0x1, 0x0, 0x0, "a9d42be8a1d323f3736f0940283545370b12dac31e1cd94a75028bf2bb6582669ffdfddfcb0caa87e4e654c9489a1e138eb3bb143fd1ebb11c9340032821b6e7"}}}}, 0x0)

272.382018ms ago: executing program 0 (id=6482):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prctl$PR_SET_IO_FLUSHER(0x4c, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000540)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x5c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x40, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0xc082}, 0xc000)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0xfffc, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "01"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0)

271.897498ms ago: executing program 8 (id=6483):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x18)
r2 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x224}, &(0x7f0000000740)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r5 = inotify_init()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82)
kexec_load(0x0, 0x0, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c000000070a01010000020000000900020073797a32000000000900010073367a300000000000000000000086f35679e338e40394a71ac4bc78606b7bd8ab552cbf36f576bf855611556fe76c08081415626c13bb0b005eea8e9bf3c3993d159063d7073bd3761a4b2591c3a1869a2f6f3930e188a3306593256e1bcca53ac47dea74ca8f22cf72a5a6ffea56c599ccc9cda1ec0aad6f1aa500000000000000007c0688f945303f82073786418d17ea3e6f51ff29c4d7cfdee2e5eae7d1790a98bbf39fe76185098d166b62c8555b047f4b42e8761b845a"], 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
ioctl$FIOCLEX(r5, 0x5451)
syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0)
dup(0xffffffffffffffff)
syz_io_uring_submit(r3, r4, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r2, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2, 0x0, 0x538}, 0x0, 0x1000})
io_uring_enter(r2, 0x47f8, 0x0, 0x0, 0x0, 0x0)

212.135233ms ago: executing program 7 (id=6484):
bpf$MAP_CREATE(0x300000000000000, 0x0, 0x0)

211.665163ms ago: executing program 1 (id=6485):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000200)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r1, r2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0)
io_uring_enter(r0, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)

202.690584ms ago: executing program 7 (id=6486):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0209000007"], 0x38}}, 0x0) (fail_nth: 1)

201.566064ms ago: executing program 0 (id=6487):
r0 = socket(0x10, 0x3, 0x0) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x10024, 0x10000, 0x1, 0x1, 0xa, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000000302010227bd7000fedbdf25ade523a0"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x142)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f00000000c0)='.\x00', r2, 0x0, 0x242) (async)
recvmmsg(r1, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_io_uring_setup(0x6226, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=<r6=>0x0, &(0x7f0000000580)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) (async, rerun: 32)
syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x10, 0x0, 0x7f, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x0, {0x1}}) (rerun: 32)
io_uring_enter(r5, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) (async, rerun: 32)
r8 = socket(0x10, 0x803, 0x0) (rerun: 32)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async)
r10 = syz_io_uring_setup(0x4266, &(0x7f0000001480)={0x0, 0x1064, 0x264, 0x200003, 0x1af}, &(0x7f0000000040)=<r11=>0x0, &(0x7f00000000c0)=<r12=>0x0)
syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x0, 0x3, 0x0, {0x2}}) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
io_uring_enter(r10, 0x47f8, 0x0, 0x0, 0x0, 0x0)
r13 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r13, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async, rerun: 32)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) (async, rerun: 32)
r14 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 32)
r15 = dup(r14)
write$UHID_INPUT(r15, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006)

0s ago: executing program 2 (id=6488):
mq_open(&(0x7f0000000040)=':\x00', 0x1, 0x20, &(0x7f00000000c0)={0x80000001, 0x4, 0x9, 0x8000000})
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010)

kernel console output (not intermixed with test programs):


[  241.265639][T17515] RAX: ffffffffffffffda RBX: 00007ff5bedb6090 RCX: 00007ff5beb8ebe9
[  241.265667][T17515] RDX: 0000000000004000 RSI: 0000200000001080 RDI: 0000000000000008
[  241.265679][T17515] RBP: 00007ff5bd5ce090 R08: 0000000000000000 R09: 0000000000000000
[  241.265691][T17515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  241.265703][T17515] R13: 00007ff5bedb6128 R14: 00007ff5bedb6090 R15: 00007ffc55d892e8
[  241.265723][T17515]  </TASK>
[  241.446389][T17516] loop2: detected capacity change from 0 to 512
[  241.475235][T17509] bond0: (slave bond_slave_0): Releasing backup interface
[  241.491708][T17516] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.5408: bad orphan inode 17
[  241.504129][T17509] bond_slave_0: left promiscuous mode
[  241.515088][T17522] loop7: detected capacity change from 0 to 512
[  241.523813][T17509] bond0: (slave bond_slave_1): Releasing backup interface
[  241.531704][T17516] ext4_test_bit(bit=16, block=4) = 1
[  241.537243][T17516] is_bad_inode(inode)=0
[  241.541647][T17516] NEXT_ORPHAN(inode)=0
[  241.545846][T17516] max_ino=32
[  241.549055][T17516] i_nlink=1
[  241.557635][T17522] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  241.571785][T17509] bond_slave_1: left promiscuous mode
[  241.584387][T17509] team0: Port device team_slave_0 removed
[  241.591617][T17522] EXT4-fs (loop7): orphan cleanup on readonly fs
[  241.598157][T17522] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  241.613040][T17522] EXT4-fs (loop7): Cannot turn on quotas: error -22
[  241.619765][T17522] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.5405: bad orphan inode 768
[  241.665214][T17509] team0: Port device team_slave_1 removed
[  241.692546][T17510] 9pnet: Could not find request transport: t
[  241.792378][T17529] loop1: detected capacity change from 0 to 512
[  241.812153][T17529] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.5411: bad orphan inode 17
[  241.826323][T17529] ext4_test_bit(bit=16, block=4) = 1
[  241.831772][T17529] is_bad_inode(inode)=0
[  241.836147][T17529] NEXT_ORPHAN(inode)=0
[  241.840393][T17529] max_ino=32
[  241.843673][T17529] i_nlink=1
[  241.858339][T17532] loop6: detected capacity change from 0 to 8192
[  242.350594][T17553] loop0: detected capacity change from 0 to 512
[  242.375489][T17556] sch_fq: defrate 4294967295 ignored.
[  242.405125][T17555] loop7: detected capacity change from 0 to 512
[  242.416314][T17553] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.5420: bad orphan inode 17
[  242.456317][T17553] ext4_test_bit(bit=16, block=4) = 1
[  242.462209][T17553] is_bad_inode(inode)=0
[  242.466395][T17553] NEXT_ORPHAN(inode)=0
[  242.470557][T17553] max_ino=32
[  242.473988][T17553] i_nlink=1
[  242.481411][T17555] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.5421: bad orphan inode 17
[  242.523446][T17555] ext4_test_bit(bit=16, block=4) = 1
[  242.528907][T17555] is_bad_inode(inode)=0
[  242.533250][T17555] NEXT_ORPHAN(inode)=0
[  242.537319][T17555] max_ino=32
[  242.540605][T17555] i_nlink=1
[  242.586572][T17552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5420'.
[  242.805169][T17560] loop0: detected capacity change from 0 to 2048
[  242.932049][T17562] loop7: detected capacity change from 0 to 8192
[  243.217939][T17574] loop0: detected capacity change from 0 to 8192
[  243.233279][T17576] loop1: detected capacity change from 0 to 512
[  243.240051][T17576] EXT4-fs: Ignoring removed i_version option
[  243.246282][T17576] EXT4-fs: Ignoring removed nobh option
[  243.270871][T17576] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  243.306724][T17576] EXT4-fs (loop1): 1 truncate cleaned up
[  243.512420][T17581] loop6: detected capacity change from 0 to 512
[  243.520500][T17581] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  243.534102][T17586] loop1: detected capacity change from 0 to 512
[  243.543761][T17581] EXT4-fs (loop6): orphan cleanup on readonly fs
[  243.550320][T17581] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  243.565197][T17581] EXT4-fs (loop6): Cannot turn on quotas: error -22
[  243.572166][T17581] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.5431: bad orphan inode 768
[  243.593549][T17586] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.5433: bad orphan inode 17
[  243.631228][T17586] ext4_test_bit(bit=16, block=4) = 1
[  243.636590][T17586] is_bad_inode(inode)=0
[  243.640921][T17586] NEXT_ORPHAN(inode)=0
[  243.645174][T17586] max_ino=32
[  243.648485][T17586] i_nlink=1
[  243.684058][T17586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5433'.
[  243.847305][T17590] loop1: detected capacity change from 0 to 8192
[  243.907493][T17592] loop7: detected capacity change from 0 to 1024
[  243.933445][T17592] ext4 filesystem being mounted at /370/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  244.203860][T17602] loop7: detected capacity change from 0 to 2048
[  244.399954][T17607] 9pnet: Could not find request transport: t
[  244.588581][T17626] loop0: detected capacity change from 0 to 1024
[  244.627916][T17626] ext4 filesystem being mounted at /435/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  244.663744][T17626] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5448'.
[  244.732596][T17636] loop6: detected capacity change from 0 to 512
[  244.751382][T17636] ext4 filesystem being mounted at /476/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  244.926269][T17634] loop7: detected capacity change from 0 to 512
[  244.950055][T17634] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  244.968895][T17634] EXT4-fs (loop7): orphan cleanup on readonly fs
[  244.975596][T17634] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  244.990492][T17634] EXT4-fs (loop7): Cannot turn on quotas: error -22
[  244.997252][T17634] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.5451: bad orphan inode 768
[  245.554274][T17658] loop6: detected capacity change from 0 to 512
[  245.564474][T17658] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.5460: bad orphan inode 17
[  245.580786][T17658] ext4_test_bit(bit=16, block=4) = 1
[  245.586263][T17658] is_bad_inode(inode)=0
[  245.590461][T17658] NEXT_ORPHAN(inode)=0
[  245.594678][T17658] max_ino=32
[  245.597891][T17658] i_nlink=1
[  245.616658][T17658] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5460'.
[  245.622737][T17654] 9pnet: Could not find request transport: t
[  245.680831][T17668] loop2: detected capacity change from 0 to 512
[  245.709143][T17668] ext4 filesystem being mounted at /500/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  245.805003][T17675] loop7: detected capacity change from 0 to 8192
[  245.856165][T17680] loop6: detected capacity change from 0 to 8192
[  245.884256][T17681] loop2: detected capacity change from 0 to 8192
[  246.036553][T17687] loop2: detected capacity change from 0 to 1024
[  246.044329][T17687] EXT4-fs: Ignoring removed bh option
[  246.051488][T17687] EXT4-fs: inline encryption not supported
[  246.061851][T17687] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  246.075026][T17687] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  246.092322][T17687] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.5470: lblock 2 mapped to illegal pblock 2 (length 1)
[  246.108181][T17687] __quota_error: 20 callbacks suppressed
[  246.108199][T17687] Quota error (device loop2): qtree_write_dquot: dquota write failed
[  246.123591][T17687] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.5470: lblock 0 mapped to illegal pblock 48 (length 1)
[  246.138345][T17687] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  246.147319][T17687] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.5470: Failed to acquire dquot type 0
[  246.158890][T17687] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  246.168891][T17687] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.5470: mark_inode_dirty error
[  246.180764][T17687] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  246.191209][T17687] EXT4-fs (loop2): 1 orphan inode deleted
[  246.211026][ T2802] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1)
[  246.234155][ T2802] Quota error (device loop2): remove_tree: Can't read quota data block 1
[  246.242882][ T2802] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:7: Failed to release dquot type 0
[  246.261508][T11077] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0
[  246.276718][T11077] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  246.293199][T11077] EXT4-fs error (device loop2): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error
[  246.504994][T17702] loop2: detected capacity change from 0 to 512
[  246.517093][T17702] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.5477: bad orphan inode 17
[  246.527973][T17702] ext4_test_bit(bit=16, block=4) = 1
[  246.533379][T17702] is_bad_inode(inode)=0
[  246.537562][T17702] NEXT_ORPHAN(inode)=0
[  246.541891][T17702] max_ino=32
[  246.545132][T17702] i_nlink=1
[  246.560566][T17702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5477'.
[  246.613184][T17694] loop0: detected capacity change from 0 to 512
[  246.626650][T17694] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  246.686603][T17694] EXT4-fs (loop0): orphan cleanup on readonly fs
[  246.696279][T17705] loop1: detected capacity change from 0 to 512
[  246.712965][T17694] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  246.727762][T17694] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  246.734466][T17694] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.5473: bad orphan inode 768
[  246.734853][T17705] ext4 filesystem being mounted at /502/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  246.791139][T17710] loop2: detected capacity change from 0 to 8192
[  246.963323][T17729] loop1: detected capacity change from 0 to 512
[  247.001056][T17729] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.5486: bad orphan inode 17
[  247.024909][T17729] ext4_test_bit(bit=16, block=4) = 1
[  247.030582][T17729] is_bad_inode(inode)=0
[  247.034824][T17729] NEXT_ORPHAN(inode)=0
[  247.039043][T17734] loop6: detected capacity change from 0 to 8192
[  247.039159][T17729] max_ino=32
[  247.049204][T17729] i_nlink=1
[  247.124696][T17739] loop1: detected capacity change from 0 to 512
[  247.143680][T17739] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.5491: bad orphan inode 17
[  247.155179][T17739] ext4_test_bit(bit=16, block=4) = 1
[  247.160686][T17739] is_bad_inode(inode)=0
[  247.164945][T17739] NEXT_ORPHAN(inode)=0
[  247.169160][T17739] max_ino=32
[  247.172417][T17739] i_nlink=1
[  247.205848][T17739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5491'.
[  247.937289][T17760] loop2: detected capacity change from 0 to 512
[  247.952226][T17751] loop1: detected capacity change from 0 to 8192
[  247.962894][T17760] ext4 filesystem being mounted at /510/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  248.058969][T17769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5497'.
[  248.113196][   T29] audit: type=1326 audit(1755640072.884:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17776 comm="syz.7.5506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6081febe9 code=0x7ffc0000
[  248.166043][T17773] loop2: detected capacity change from 0 to 8192
[  248.176096][T17775] loop6: detected capacity change from 0 to 512
[  248.187290][   T29] audit: type=1326 audit(1755640072.904:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17776 comm="syz.7.5506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6081febe9 code=0x7ffc0000
[  248.210758][   T29] audit: type=1326 audit(1755640072.904:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17776 comm="syz.7.5506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6081febe9 code=0x7ffc0000
[  248.234227][   T29] audit: type=1326 audit(1755640072.904:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17776 comm="syz.7.5506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fc6081febe9 code=0x7ffc0000
[  248.257851][   T29] audit: type=1326 audit(1755640072.904:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17776 comm="syz.7.5506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6081febe9 code=0x7ffc0000
[  248.281361][   T29] audit: type=1326 audit(1755640072.904:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17776 comm="syz.7.5506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fc6081febe9 code=0x7ffc0000
[  248.305205][   T29] audit: type=1326 audit(1755640072.914:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17776 comm="syz.7.5506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6081febe9 code=0x7ffc0000
[  248.334056][T17780] sch_fq: defrate 4294967295 ignored.
[  248.398204][T17783] loop7: detected capacity change from 0 to 8192
[  248.427928][T17775] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.5505: bad orphan inode 17
[  248.456725][T17775] ext4_test_bit(bit=16, block=4) = 1
[  248.462143][T17775] is_bad_inode(inode)=0
[  248.466530][T17775] NEXT_ORPHAN(inode)=0
[  248.470655][T17775] max_ino=32
[  248.473944][T17775] i_nlink=1
[  248.763965][T17788] loop6: detected capacity change from 0 to 1024
[  248.836204][T17788] ext4 filesystem being mounted at /492/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  248.963173][T17788] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5508'.
[  249.058492][T17796] loop0: detected capacity change from 0 to 8192
[  249.199820][T17810] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[  249.213709][T17810] loop1: detected capacity change from 0 to 256
[  249.256253][T17813] loop6: detected capacity change from 0 to 2048
[  249.270421][T17810] 9pnet: Could not find request transport: t
[  249.384485][T17829] loop0: detected capacity change from 0 to 512
[  249.396583][T17825] loop6: detected capacity change from 0 to 1024
[  249.403740][T17829] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.5525: bad orphan inode 17
[  249.417210][T17829] ext4_test_bit(bit=16, block=4) = 1
[  249.422771][T17829] is_bad_inode(inode)=0
[  249.426988][T17829] NEXT_ORPHAN(inode)=0
[  249.431148][T17829] max_ino=32
[  249.434444][T17829] i_nlink=1
[  249.440921][T17827] loop7: detected capacity change from 0 to 8192
[  249.459500][T17825] ext4 filesystem being mounted at /496/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  249.488275][T17825] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5524'.
[  249.488470][T17829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5525'.
[  249.640840][T17844] loop0: detected capacity change from 0 to 8192
[  249.669511][T17850] loop7: detected capacity change from 0 to 1024
[  249.685153][T17850] ext4 filesystem being mounted at /394/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  249.738351][T17856] loop6: detected capacity change from 0 to 2048
[  249.921620][T17865] loop2: detected capacity change from 0 to 8192
[  249.940088][T17869] loop6: detected capacity change from 0 to 1024
[  250.004662][T17869] ext4 filesystem being mounted at /501/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  250.016337][T17874] loop7: detected capacity change from 0 to 512
[  250.035579][T17874] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.5544: bad orphan inode 17
[  250.049615][T17869] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5540'.
[  250.075783][T17874] ext4_test_bit(bit=16, block=4) = 1
[  250.081286][T17874] is_bad_inode(inode)=0
[  250.085653][T17874] NEXT_ORPHAN(inode)=0
[  250.089743][T17874] max_ino=32
[  250.093060][T17874] i_nlink=1
[  250.103828][T17874] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5544'.
[  250.168868][T17884] loop6: detected capacity change from 0 to 2048
[  250.253052][T17893] loop2: detected capacity change from 0 to 512
[  250.272111][T17893] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.5549: bad orphan inode 17
[  250.286303][T17893] ext4_test_bit(bit=16, block=4) = 1
[  250.291818][T17893] is_bad_inode(inode)=0
[  250.296048][T17893] NEXT_ORPHAN(inode)=0
[  250.300145][T17893] max_ino=32
[  250.303522][T17893] i_nlink=1
[  250.359136][T17902] loop1: detected capacity change from 0 to 8192
[  250.510711][T17915] FAULT_INJECTION: forcing a failure.
[  250.510711][T17915] name failslab, interval 1, probability 0, space 0, times 1
[  250.523518][T17915] CPU: 0 UID: 0 PID: 17915 Comm: syz.2.5559 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  250.523551][T17915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  250.523623][T17915] Call Trace:
[  250.523633][T17915]  <TASK>
[  250.523642][T17915]  __dump_stack+0x1d/0x30
[  250.523670][T17915]  dump_stack_lvl+0xe8/0x140
[  250.523695][T17915]  dump_stack+0x15/0x1b
[  250.523762][T17915]  should_fail_ex+0x265/0x280
[  250.523788][T17915]  should_failslab+0x8c/0xb0
[  250.523820][T17915]  kmem_cache_alloc_noprof+0x50/0x310
[  250.523891][T17915]  ? audit_log_start+0x365/0x6c0
[  250.523930][T17915]  audit_log_start+0x365/0x6c0
[  250.523969][T17915]  audit_seccomp+0x48/0x100
[  250.524050][T17915]  ? __seccomp_filter+0x68c/0x10d0
[  250.524073][T17915]  __seccomp_filter+0x69d/0x10d0
[  250.524149][T17915]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  250.524184][T17915]  ? vfs_write+0x7e8/0x960
[  250.524215][T17915]  ? __rcu_read_unlock+0x4f/0x70
[  250.524242][T17915]  ? __fget_files+0x184/0x1c0
[  250.524274][T17915]  __secure_computing+0x82/0x150
[  250.524298][T17915]  syscall_trace_enter+0xcf/0x1e0
[  250.524323][T17915]  do_syscall_64+0xac/0x200
[  250.524416][T17915]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  250.524446][T17915]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  250.524511][T17915]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.524541][T17915] RIP: 0033:0x7f0eb872ebe9
[  250.524632][T17915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  250.524657][T17915] RSP: 002b:00007f0eb718f038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[  250.524681][T17915] RAX: ffffffffffffffda RBX: 00007f0eb8955fa0 RCX: 00007f0eb872ebe9
[  250.524697][T17915] RDX: ffffffffffffff9c RSI: 0000000000000000 RDI: ffffffffffffffff
[  250.524713][T17915] RBP: 00007f0eb718f090 R08: 0000000000000004 R09: 0000000000000000
[  250.524728][T17915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  250.524743][T17915] R13: 00007f0eb8956038 R14: 00007f0eb8955fa0 R15: 00007fffb1b49278
[  250.524831][T17915]  </TASK>
[  250.530121][T17919] loop0: detected capacity change from 0 to 1024
[  250.581315][T17921] loop2: detected capacity change from 0 to 2048
[  250.722041][T17919] ext4 filesystem being mounted at /447/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  250.914928][T17942] loop0: detected capacity change from 0 to 8192
[  250.927636][T17944] loop1: detected capacity change from 0 to 8192
[  251.177612][T17959] loop7: detected capacity change from 0 to 8192
[  251.327453][T17969] loop2: detected capacity change from 0 to 2048
[  251.577127][T17975] loop2: detected capacity change from 0 to 512
[  251.594242][T17975] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.5579: bad orphan inode 17
[  251.605071][T17975] ext4_test_bit(bit=16, block=4) = 1
[  251.610417][T17975] is_bad_inode(inode)=0
[  251.614642][T17975] NEXT_ORPHAN(inode)=0
[  251.618750][T17975] max_ino=32
[  251.622032][T17975] i_nlink=1
[  251.625573][T17975] EXT4-fs mount: 108 callbacks suppressed
[  251.625586][T17975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  251.647205][T17975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5579'.
[  251.680046][T11077] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.794273][T17980] loop2: detected capacity change from 0 to 8192
[  251.835293][T17984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5583'.
[  251.848637][   T29] kauditd_printk_skb: 30 callbacks suppressed
[  251.848652][   T29] audit: type=1400 audit(1755640076.614:540): avc:  denied  { read } for  pid=17983 comm="syz.1.5583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  251.939779][   T29] audit: type=1400 audit(1755640076.704:541): avc:  denied  { create } for  pid=17990 comm="syz.0.5586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  251.959541][   T29] audit: type=1400 audit(1755640076.704:542): avc:  denied  { setopt } for  pid=17990 comm="syz.0.5586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  252.032360][T17997] loop0: detected capacity change from 0 to 2048
[  252.199131][T18008] loop2: detected capacity change from 0 to 8192
[  252.292242][T18014] loop0: detected capacity change from 0 to 8192
[  252.469429][T18019] loop6: detected capacity change from 0 to 1024
[  252.505234][T18019] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  252.545303][T18019] ext4 filesystem being mounted at /510/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  252.602235][T18023] loop7: detected capacity change from 0 to 512
[  252.623947][T18023] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.5597: bad orphan inode 17
[  252.643396][T18023] ext4_test_bit(bit=16, block=4) = 1
[  252.648760][T18023] is_bad_inode(inode)=0
[  252.652991][T18023] NEXT_ORPHAN(inode)=0
[  252.657113][T18023] max_ino=32
[  252.660455][T18023] i_nlink=1
[  252.664657][T18023] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  252.677803][T11658] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.713001][T18026] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5598'.
[  252.892189][T12061] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.921337][T18027] sch_fq: defrate 4294967295 ignored.
[  253.003276][   T29] audit: type=1326 audit(1755640077.764:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18028 comm="syz.1.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6feeefebe9 code=0x7ffc0000
[  253.027002][   T29] audit: type=1326 audit(1755640077.774:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18028 comm="syz.1.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6feeefebe9 code=0x7ffc0000
[  253.197249][T18035] loop7: detected capacity change from 0 to 2048
[  253.277484][   T29] audit: type=1326 audit(1755640077.824:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18028 comm="syz.1.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f6feeefebe9 code=0x7ffc0000
[  253.301340][   T29] audit: type=1326 audit(1755640077.824:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18028 comm="syz.1.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6feeefebe9 code=0x7ffc0000
[  253.324882][   T29] audit: type=1326 audit(1755640077.824:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18028 comm="syz.1.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6feeefebe9 code=0x7ffc0000
[  253.348560][   T29] audit: type=1326 audit(1755640077.824:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18028 comm="syz.1.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6feeefebe9 code=0x7ffc0000
[  253.371832][   T29] audit: type=1326 audit(1755640077.824:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18028 comm="syz.1.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6feeefebe9 code=0x7ffc0000
[  253.421275][T18034] loop1: detected capacity change from 0 to 8192
[  253.694526][ T3376] IPVS: starting estimator thread 0...
[  253.760668][T18061] loop7: detected capacity change from 0 to 512
[  253.774175][T18061] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  253.791440][T18055] IPVS: using max 2304 ests per chain, 115200 per kthread
[  253.799065][T18061] ext4 filesystem being mounted at /409/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  253.823954][T18061] sd 0:0:1:0: device reset
[  253.865801][T12061] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.989086][T18079] loop6: detected capacity change from 0 to 2048
[  254.002564][T18074] loop7: detected capacity change from 0 to 8192
[  254.105368][T18085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5619'.
[  254.216396][T18092] sch_fq: defrate 4294967295 ignored.
[  254.319845][T18102] loop7: detected capacity change from 0 to 512
[  254.342715][T18102] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  254.381344][T18102] ext4 filesystem being mounted at /412/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  254.414201][T18102] sd 0:0:1:0: device reset
[  254.445628][T12061] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.674605][T18117] loop2: detected capacity change from 0 to 8192
[  255.128924][T18136] loop6: detected capacity change from 0 to 512
[  255.142994][T18136] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.5640: bad orphan inode 17
[  255.156203][T18136] ext4_test_bit(bit=16, block=4) = 1
[  255.161854][T18136] is_bad_inode(inode)=0
[  255.166122][T18136] NEXT_ORPHAN(inode)=0
[  255.170205][T18136] max_ino=32
[  255.173548][T18136] i_nlink=1
[  255.194464][T18136] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  255.209743][T18142] loop0: detected capacity change from 0 to 2048
[  255.273921][T11658] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.302364][T18147] loop6: detected capacity change from 0 to 256
[  255.382946][T18151] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[  255.402552][T18151] loop1: detected capacity change from 0 to 256
[  255.462412][T18160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5644'.
[  255.507424][T18155] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5648'.
[  255.558737][T18164] loop1: detected capacity change from 0 to 512
[  255.577934][T18164] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.5649: bad orphan inode 17
[  255.591788][T18164] ext4_test_bit(bit=16, block=4) = 1
[  255.597175][T18164] is_bad_inode(inode)=0
[  255.601441][T18164] NEXT_ORPHAN(inode)=0
[  255.605884][T18164] max_ino=32
[  255.609203][T18164] i_nlink=1
[  255.614261][T18168] loop6: detected capacity change from 0 to 512
[  255.641692][T18164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  255.720517][T18176] loop2: detected capacity change from 0 to 2048
[  255.739259][T18168] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.5652: bad orphan inode 17
[  255.744626][T18164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5649'.
[  255.752666][T18168] ext4_test_bit(bit=16, block=4) = 1
[  255.763788][T18168] is_bad_inode(inode)=0
[  255.763802][T18168] NEXT_ORPHAN(inode)=0
[  255.763813][T18168] max_ino=32
[  255.763821][T18168] i_nlink=1
[  255.764925][T18168] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  255.769729][T18168] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5652'.
[  255.793090][T10820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.851168][T11658] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.856774][T18188] loop1: detected capacity change from 0 to 8192
[  255.858606][T18190] loop2: detected capacity change from 0 to 256
[  256.044753][T18205] loop2: detected capacity change from 0 to 8192
[  256.120926][T18215] loop6: detected capacity change from 0 to 512
[  256.146672][T18215] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  256.171933][T18215] ext4 filesystem being mounted at /534/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  256.185477][T18215] sd 0:0:1:0: device reset
[  256.208084][T11658] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.425102][T18232] loop6: detected capacity change from 0 to 512
[  256.454766][T18232] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  256.480382][T18232] ext4 filesystem being mounted at /536/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  256.629526][T18247] loop7: detected capacity change from 0 to 512
[  256.642078][T11658] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.687738][T18249] loop6: detected capacity change from 0 to 512
[  256.689391][T18247] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  256.729513][T18249] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.5680: bad orphan inode 17
[  256.731986][T18247] ext4 filesystem being mounted at /418/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  256.758814][T18247] sd 0:0:1:0: device reset
[  256.767229][T18249] ext4_test_bit(bit=16, block=4) = 1
[  256.772748][T18249] is_bad_inode(inode)=0
[  256.777047][T18249] NEXT_ORPHAN(inode)=0
[  256.781336][T18249] max_ino=32
[  256.784571][T18249] i_nlink=1
[  256.788771][T18249] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  256.847651][T12061] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.858394][   T29] kauditd_printk_skb: 51 callbacks suppressed
[  256.858411][   T29] audit: type=1400 audit(1755640081.634:601): avc:  denied  { write } for  pid=18256 comm="syz.1.5682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  256.885441][T11658] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.951871][T18265] loop6: detected capacity change from 0 to 512
[  256.991233][T18265] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.5685: bad orphan inode 17
[  257.040029][T18265] ext4_test_bit(bit=16, block=4) = 1
[  257.045468][T18265] is_bad_inode(inode)=0
[  257.049834][T18265] NEXT_ORPHAN(inode)=0
[  257.054158][T18265] max_ino=32
[  257.057366][T18265] i_nlink=1
[  257.095319][T18265] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  257.170369][T11658] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.200935][   T29] audit: type=1400 audit(1755640081.964:602): avc:  denied  { create } for  pid=18260 comm="syz.7.5683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  257.220637][   T29] audit: type=1400 audit(1755640081.964:603): avc:  denied  { connect } for  pid=18260 comm="syz.7.5683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  257.240618][   T29] audit: type=1400 audit(1755640081.964:604): avc:  denied  { create } for  pid=18260 comm="syz.7.5683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  257.260266][   T29] audit: type=1400 audit(1755640081.964:605): avc:  denied  { create } for  pid=18260 comm="syz.7.5683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  257.398278][T18263] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5684'.
[  257.419961][T18285] loop1: detected capacity change from 0 to 8192
[  257.450477][T18295] loop6: detected capacity change from 0 to 512
[  257.492138][T18295] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.5696: bad orphan inode 17
[  257.509769][T18295] ext4_test_bit(bit=16, block=4) = 1
[  257.515713][T18295] is_bad_inode(inode)=0
[  257.519935][T18295] NEXT_ORPHAN(inode)=0
[  257.524188][T18295] max_ino=32
[  257.527402][T18295] i_nlink=1
[  257.531882][T18295] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  257.545286][T18263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5684'.
[  257.593199][T11658] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.730437][   T29] audit: type=1400 audit(1755640082.494:606): avc:  denied  { bind } for  pid=18307 comm="syz.7.5700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  257.886336][   T29] audit: type=1400 audit(1755640082.654:607): avc:  denied  { create } for  pid=18320 comm="syz.7.5705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  257.921086][   T29] audit: type=1400 audit(1755640082.674:608): avc:  denied  { connect } for  pid=18320 comm="syz.7.5705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  257.991810][T18328] loop7: detected capacity change from 0 to 512
[  258.009145][T18326] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5706'.
[  258.036239][T18328] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.5707: bad orphan inode 17
[  258.063061][T18328] ext4_test_bit(bit=16, block=4) = 1
[  258.068428][T18328] is_bad_inode(inode)=0
[  258.072758][T18328] NEXT_ORPHAN(inode)=0
[  258.076920][T18328] max_ino=32
[  258.080235][T18328] i_nlink=1
[  258.107975][T18328] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  258.147827][T18328] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5707'.
[  258.190036][T12061] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.252970][T18336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5710'.
[  258.454325][T18343] loop7: detected capacity change from 0 to 8192
[  258.678575][T18365] loop1: detected capacity change from 0 to 8192
[  258.964276][T18389] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[  258.999070][T18389] loop7: detected capacity change from 0 to 256
[  259.103370][T18397] loop7: detected capacity change from 0 to 512
[  259.110443][T18392] loop6: detected capacity change from 0 to 8192
[  259.153707][T18397] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.5734: bad orphan inode 17
[  259.196204][T18397] ext4_test_bit(bit=16, block=4) = 1
[  259.201582][T18397] is_bad_inode(inode)=0
[  259.205834][T18397] NEXT_ORPHAN(inode)=0
[  259.209923][T18397] max_ino=32
[  259.213188][T18397] i_nlink=1
[  259.216957][T18397] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  259.265280][T12061] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.294123][T18408] loop6: detected capacity change from 0 to 512
[  259.313564][T18408] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  259.326485][T18408] ext4 filesystem being mounted at /546/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  259.429629][T11658] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.551032][T18425] loop6: detected capacity change from 0 to 8192
[  259.592356][T18437] __nla_validate_parse: 2 callbacks suppressed
[  259.592376][T18437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5748'.
[  259.708673][   T29] audit: type=1400 audit(1755640084.464:609): avc:  denied  { connect } for  pid=18442 comm="syz.0.5750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  259.753823][T18446] loop6: detected capacity change from 0 to 512
[  259.800720][   T29] audit: type=1400 audit(1755640084.564:610): avc:  denied  { ioctl } for  pid=18456 comm="syz.2.5754" path="socket:[53328]" dev="sockfs" ino=53328 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  259.827401][T18446] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.5751: bad orphan inode 17
[  259.926616][T18446] ext4_test_bit(bit=16, block=4) = 1
[  259.932008][T18446] is_bad_inode(inode)=0
[  259.936195][T18446] NEXT_ORPHAN(inode)=0
[  259.940276][T18446] max_ino=32
[  259.943547][T18446] i_nlink=1
[  259.964899][T18446] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  260.065869][T11658] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.096869][T18467] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5758'.
[  260.106148][T18467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5758'.
[  260.195693][T18472] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5758'.
[  260.204918][T18472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5758'.
[  260.219617][T18473] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[  260.280351][T18476] loop7: detected capacity change from 0 to 512
[  260.360313][T18476] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  260.370784][T18476] EXT4-fs (loop7): orphan cleanup on readonly fs
[  260.377887][T18476] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.5763: Failed to acquire dquot type 1
[  260.390411][T18476] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.5763: bg 0: block 40: padding at end of block bitmap is not set
[  260.405296][T18476] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  260.430464][T18476] EXT4-fs (loop7): 1 truncate cleaned up
[  260.503602][T18476] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  260.571768][T18491] loop1: detected capacity change from 0 to 8192
[  260.687197][T18505] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  261.035162][T18529] FAULT_INJECTION: forcing a failure.
[  261.035162][T18529] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  261.048951][T18529] CPU: 1 UID: 0 PID: 18529 Comm: syz.6.5776 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  261.049030][T18529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  261.049048][T18529] Call Trace:
[  261.049056][T18529]  <TASK>
[  261.049065][T18529]  __dump_stack+0x1d/0x30
[  261.049090][T18529]  dump_stack_lvl+0xe8/0x140
[  261.049121][T18529]  dump_stack+0x15/0x1b
[  261.049189][T18529]  should_fail_ex+0x265/0x280
[  261.049215][T18529]  should_fail+0xb/0x20
[  261.049237][T18529]  should_fail_usercopy+0x1a/0x20
[  261.049316][T18529]  _copy_to_user+0x20/0xa0
[  261.049362][T18529]  simple_read_from_buffer+0xb5/0x130
[  261.049397][T18529]  proc_fail_nth_read+0x10e/0x150
[  261.049521][T18529]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  261.049553][T18529]  vfs_read+0x1a8/0x770
[  261.049579][T18529]  ? __rcu_read_unlock+0x4f/0x70
[  261.049606][T18529]  ? __fget_files+0x184/0x1c0
[  261.049630][T18529]  ksys_read+0xda/0x1a0
[  261.049726][T18529]  __x64_sys_read+0x40/0x50
[  261.049745][T18529]  x64_sys_call+0x27bc/0x2ff0
[  261.049853][T18529]  do_syscall_64+0xd2/0x200
[  261.049876][T18529]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  261.049909][T18529]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  261.049931][T18529]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.049949][T18529] RIP: 0033:0x7f2e4babd5fc
[  261.049962][T18529] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  261.050046][T18529] RSP: 002b:00007f2e4a51f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  261.050063][T18529] RAX: ffffffffffffffda RBX: 00007f2e4bce5fa0 RCX: 00007f2e4babd5fc
[  261.050076][T18529] RDX: 000000000000000f RSI: 00007f2e4a51f0a0 RDI: 0000000000000007
[  261.050088][T18529] RBP: 00007f2e4a51f090 R08: 0000000000000000 R09: 0000000000000000
[  261.050099][T18529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  261.050110][T18529] R13: 00007f2e4bce6038 R14: 00007f2e4bce5fa0 R15: 00007fff17bdcdd8
[  261.050129][T18529]  </TASK>
[  261.265450][T12061] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.396698][T18549] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[  261.409420][T18555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5786'.
[  261.434560][T18549] loop6: detected capacity change from 0 to 256
[  261.533671][T18562] sch_fq: defrate 4294967295 ignored.
[  261.592280][T18566] sd 0:0:1:0: device reset
[  261.596969][T18565] loop1: detected capacity change from 0 to 2048
[  261.616763][T18550] loop7: detected capacity change from 0 to 8192
[  261.926767][T18581] loop1: detected capacity change from 0 to 512
[  261.958066][T18581] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.5796: bad orphan inode 17
[  261.999626][T18581] ext4_test_bit(bit=16, block=4) = 1
[  262.005053][T18581] is_bad_inode(inode)=0
[  262.009230][T18581] NEXT_ORPHAN(inode)=0
[  262.013454][T18581] max_ino=32
[  262.016775][T18581] i_nlink=1
[  262.073598][T18581] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  262.205733][T10820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.648213][T18616] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[  262.676792][T18615] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5805'.
[  262.746156][T18618] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5806'.
[  262.834753][T18628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5810'.
[  262.932547][T18629] sch_fq: defrate 4294967295 ignored.
[  263.165430][T18631] sd 0:0:1:0: device reset
[  263.293573][T18644] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5814'.
[  263.461652][   T29] kauditd_printk_skb: 26 callbacks suppressed
[  263.461667][   T29] audit: type=1326 audit(1755640088.234:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18653 comm="syz.6.5819" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2e4babebe9 code=0x0
[  263.526257][T18648] loop7: detected capacity change from 0 to 8192
[  263.584267][   T29] audit: type=1400 audit(1755640088.314:636): avc:  denied  { create } for  pid=18653 comm="syz.6.5819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  263.753526][   T29] audit: type=1400 audit(1755640088.524:637): avc:  denied  { write } for  pid=18661 comm="syz.0.5822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  263.852431][   T29] audit: type=1400 audit(1755640088.524:638): avc:  denied  { read } for  pid=18661 comm="syz.0.5822" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  263.875645][   T29] audit: type=1400 audit(1755640088.524:639): avc:  denied  { open } for  pid=18661 comm="syz.0.5822" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  263.994921][T18668] block device autoloading is deprecated and will be removed.
[  264.136306][   T29] audit: type=1326 audit(1755640088.904:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18678 comm="syz.0.5828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5beb8ebe9 code=0x7ffc0000
[  264.162138][   T29] audit: type=1326 audit(1755640088.934:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18678 comm="syz.0.5828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5beb8ebe9 code=0x7ffc0000
[  264.185897][   T29] audit: type=1326 audit(1755640088.934:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18678 comm="syz.0.5828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5beb8ebe9 code=0x7ffc0000
[  264.209636][   T29] audit: type=1326 audit(1755640088.934:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18678 comm="syz.0.5828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5beb8ebe9 code=0x7ffc0000
[  264.233617][   T29] audit: type=1326 audit(1755640089.004:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18678 comm="syz.0.5828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5beb8ebe9 code=0x7ffc0000
[  264.390021][T18692] sd 0:0:1:0: device reset
[  264.394998][T18693] sch_fq: defrate 4294967295 ignored.
[  264.515683][T18701] loop7: detected capacity change from 0 to 512
[  264.591898][T18701] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.5837: bad orphan inode 17
[  264.624079][T18701] ext4_test_bit(bit=16, block=4) = 1
[  264.629452][T18701] is_bad_inode(inode)=0
[  264.633652][T18701] NEXT_ORPHAN(inode)=0
[  264.637742][T18701] max_ino=32
[  264.641101][T18701] i_nlink=1
[  264.669068][T18701] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  264.726505][T18701] __nla_validate_parse: 7 callbacks suppressed
[  264.726525][T18701] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5837'.
[  264.887112][T18719] FAULT_INJECTION: forcing a failure.
[  264.887112][T18719] name failslab, interval 1, probability 0, space 0, times 0
[  264.899849][T18719] CPU: 0 UID: 0 PID: 18719 Comm: syz.0.5842 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  264.899877][T18719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  264.899942][T18719] Call Trace:
[  264.899951][T18719]  <TASK>
[  264.899961][T18719]  __dump_stack+0x1d/0x30
[  264.899988][T18719]  dump_stack_lvl+0xe8/0x140
[  264.900029][T18719]  dump_stack+0x15/0x1b
[  264.900046][T18719]  should_fail_ex+0x265/0x280
[  264.900069][T18719]  should_failslab+0x8c/0xb0
[  264.900093][T18719]  kmem_cache_alloc_noprof+0x50/0x310
[  264.900121][T18719]  ? skb_clone+0x151/0x1f0
[  264.900210][T18719]  skb_clone+0x151/0x1f0
[  264.900235][T18719]  __netlink_deliver_tap+0x2c9/0x500
[  264.900265][T18719]  netlink_unicast+0x66b/0x690
[  264.900303][T18719]  netlink_sendmsg+0x58b/0x6b0
[  264.900404][T18719]  ? __pfx_netlink_sendmsg+0x10/0x10
[  264.900475][T18719]  __sock_sendmsg+0x142/0x180
[  264.900502][T18719]  ____sys_sendmsg+0x31e/0x4e0
[  264.900526][T18719]  ___sys_sendmsg+0x17b/0x1d0
[  264.900642][T18719]  __x64_sys_sendmsg+0xd4/0x160
[  264.900672][T18719]  x64_sys_call+0x191e/0x2ff0
[  264.900694][T18719]  do_syscall_64+0xd2/0x200
[  264.900723][T18719]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  264.900821][T18719]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  264.900922][T18719]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.900999][T18719] RIP: 0033:0x7ff5beb8ebe9
[  264.901019][T18719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  264.901037][T18719] RSP: 002b:00007ff5bd5ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  264.901055][T18719] RAX: ffffffffffffffda RBX: 00007ff5bedb5fa0 RCX: 00007ff5beb8ebe9
[  264.901116][T18719] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[  264.901128][T18719] RBP: 00007ff5bd5ef090 R08: 0000000000000000 R09: 0000000000000000
[  264.901140][T18719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  264.901152][T18719] R13: 00007ff5bedb6038 R14: 00007ff5bedb5fa0 R15: 00007ffc55d892e8
[  264.901171][T18719]  </TASK>
[  265.109425][T12061] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.157600][T18724] loop7: detected capacity change from 0 to 2048
[  265.224664][T18727] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) !
[  265.374435][T18736] loop7: detected capacity change from 0 to 128
[  265.392342][T18736] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  265.422240][T18736] ext4 filesystem being mounted at /444/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  265.553411][T18751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5856'.
[  265.595980][T12061] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  265.822139][T18772] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[  265.863290][T18774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  265.865771][T18768] loop7: detected capacity change from 0 to 8192
[  265.877682][T18774] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  265.935727][T18776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5867'.
[  266.062479][T18782] sch_fq: defrate 4294967295 ignored.
[  266.458917][T18795] loop7: detected capacity change from 0 to 2048
[  266.598442][T18797] loop7: detected capacity change from 0 to 512
[  266.644859][T18797] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  266.679295][T18797] ext4 filesystem being mounted at /453/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  266.704694][T18803] sd 0:0:1:0: device reset
[  266.723940][T18797] sd 0:0:1:0: device reset
[  266.757051][T18805] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[  266.782089][T12061] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.955302][T18812] FAULT_INJECTION: forcing a failure.
[  266.955302][T18812] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  266.968477][T18812] CPU: 1 UID: 0 PID: 18812 Comm: syz.1.5880 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  266.968513][T18812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  266.968536][T18812] Call Trace:
[  266.968545][T18812]  <TASK>
[  266.968555][T18812]  __dump_stack+0x1d/0x30
[  266.968623][T18812]  dump_stack_lvl+0xe8/0x140
[  266.968643][T18812]  dump_stack+0x15/0x1b
[  266.968664][T18812]  should_fail_ex+0x265/0x280
[  266.968690][T18812]  should_fail+0xb/0x20
[  266.968728][T18812]  should_fail_usercopy+0x1a/0x20
[  266.968756][T18812]  _copy_to_user+0x20/0xa0
[  266.968834][T18812]  simple_read_from_buffer+0xb5/0x130
[  266.968864][T18812]  proc_fail_nth_read+0x10e/0x150
[  266.968899][T18812]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  266.968932][T18812]  vfs_read+0x1a8/0x770
[  266.968955][T18812]  ? __rcu_read_unlock+0x4f/0x70
[  266.969040][T18812]  ? __fget_files+0x184/0x1c0
[  266.969073][T18812]  ksys_read+0xda/0x1a0
[  266.969130][T18812]  __x64_sys_read+0x40/0x50
[  266.969157][T18812]  x64_sys_call+0x27bc/0x2ff0
[  266.969181][T18812]  do_syscall_64+0xd2/0x200
[  266.969233][T18812]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  266.969264][T18812]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  266.969296][T18812]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.969400][T18812] RIP: 0033:0x7f6feeefd5fc
[  266.969420][T18812] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  266.969443][T18812] RSP: 002b:00007f6fed95f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  266.969467][T18812] RAX: ffffffffffffffda RBX: 00007f6fef125fa0 RCX: 00007f6feeefd5fc
[  266.969483][T18812] RDX: 000000000000000f RSI: 00007f6fed95f0a0 RDI: 0000000000000004
[  266.969497][T18812] RBP: 00007f6fed95f090 R08: 0000000000000000 R09: 0000000000000000
[  266.969508][T18812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  266.969576][T18812] R13: 00007f6fef126038 R14: 00007f6fef125fa0 R15: 00007ffd455fba68
[  266.969601][T18812]  </TASK>
[  267.482886][T18836] 9pnet_fd: Insufficient options for proto=fd
[  267.572556][T18842] loop7: detected capacity change from 0 to 8192
[  267.795370][T18861] netlink: 'syz.2.5900': attribute type 10 has an invalid length.
[  267.805262][T18861] team0: Device hsr_slave_0 failed to register rx_handler
[  267.932286][T18875] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5909'.
[  268.015538][T18886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5913'.
[  268.151141][T18899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5918'.
[  268.237218][T18904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5922'.
[  268.385904][  T174] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.396850][  T174] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  268.445798][  T174] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.456158][  T174] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  268.514088][  T174] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.524725][  T174] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  268.578056][  T174] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.588721][  T174] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  268.604238][T18909] chnl_net:caif_netlink_parms(): no params data found
[  268.725313][T18909] bridge0: port 1(bridge_slave_0) entered blocking state
[  268.732476][T18909] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.780451][T18909] bridge_slave_0: entered allmulticast mode
[  268.787304][T18909] bridge_slave_0: entered promiscuous mode
[  268.943099][  T174] bond0 (unregistering): Released all slaves
[  268.952336][T18909] bridge0: port 2(bridge_slave_1) entered blocking state
[  268.959477][T18909] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.076481][T18909] bridge_slave_1: entered allmulticast mode
[  269.111690][T18909] bridge_slave_1: entered promiscuous mode
[  269.119365][  T174] tipc: Left network mode
[  269.147975][T18909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  269.185638][  T174] hsr_slave_0: left promiscuous mode
[  269.211629][  T174] hsr_slave_1: left promiscuous mode
[  269.224722][  T174] veth1_macvtap: left promiscuous mode
[  269.244378][  T174] veth0_macvtap: left promiscuous mode
[  269.250028][  T174] veth1_vlan: left promiscuous mode
[  269.259812][  T174] veth0_vlan: left promiscuous mode
[  269.405319][T18909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  269.474748][T18940] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5932'.
[  269.492781][T18909] team0: Port device team_slave_0 added
[  269.507348][T18909] team0: Port device team_slave_1 added
[  269.515238][T18942] loop7: detected capacity change from 0 to 512
[  269.542146][T18942] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.5933: bad orphan inode 17
[  269.542203][T18909] batman_adv: batadv0: Adding interface: batadv_slave_0
[  269.542302][T18942] ext4_test_bit(bit=16, block=4) = 1
[  269.552404][T18909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  269.559412][T18942] is_bad_inode(inode)=0
[  269.564682][T18909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  269.605429][T18942] NEXT_ORPHAN(inode)=0
[  269.609559][T18942] max_ino=32
[  269.613031][T18942] i_nlink=1
[  269.618751][T18942] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  269.626104][T18909] batman_adv: batadv0: Adding interface: batadv_slave_1
[  269.638296][T18909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  269.665177][T18909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  269.683792][T18942] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5933'.
[  269.729697][T12061] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.787089][T18955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5939'.
[  269.833440][   T29] kauditd_printk_skb: 128 callbacks suppressed
[  269.833458][   T29] audit: type=1326 audit(1755640094.594:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18954 comm="syz.0.5939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5beb8ebe9 code=0x7ffc0000
[  269.863378][   T29] audit: type=1326 audit(1755640094.594:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18954 comm="syz.0.5939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff5beb8ebe9 code=0x7ffc0000
[  269.887061][   T29] audit: type=1326 audit(1755640094.594:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18954 comm="syz.0.5939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff5beb8ec23 code=0x7ffc0000
[  269.910584][   T29] audit: type=1326 audit(1755640094.594:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18954 comm="syz.0.5939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff5beb8d69f code=0x7ffc0000
[  269.934189][   T29] audit: type=1326 audit(1755640094.594:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18954 comm="syz.0.5939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff5beb8ec77 code=0x7ffc0000
[  269.957693][   T29] audit: type=1326 audit(1755640094.594:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18954 comm="syz.0.5939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff5beb8d550 code=0x7ffc0000
[  269.981316][   T29] audit: type=1326 audit(1755640094.594:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18954 comm="syz.0.5939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff5beb8d84a code=0x7ffc0000
[  270.006108][   T29] audit: type=1326 audit(1755640094.594:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18954 comm="syz.0.5939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5beb8ebe9 code=0x7ffc0000
[  270.033254][   T29] audit: type=1326 audit(1755640094.664:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18954 comm="syz.0.5939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5beb8ebe9 code=0x7ffc0000
[  270.044635][T18909] hsr_slave_0: entered promiscuous mode
[  270.057509][   T29] audit: type=1326 audit(1755640094.664:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18954 comm="syz.0.5939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5beb8ebe9 code=0x7ffc0000
[  270.089001][T18909] hsr_slave_1: entered promiscuous mode
[  270.095448][T18909] debugfs: 'hsr0' already exists in 'hsr'
[  270.101280][T18909] Cannot create hsr debugfs directory
[  270.157025][T18969] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5942'.
[  270.565242][T18984] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  271.376370][T18997] sd 0:0:1:0: device reset
[  271.628992][T18909] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  271.648769][T18909] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  271.667777][T18909] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  271.689068][T18909] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  271.773562][T19025] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) !
[  271.816589][T18909] 8021q: adding VLAN 0 to HW filter on device bond0
[  271.839151][T18909] 8021q: adding VLAN 0 to HW filter on device team0
[  271.856944][ T2802] bridge0: port 1(bridge_slave_0) entered blocking state
[  271.864138][ T2802] bridge0: port 1(bridge_slave_0) entered forwarding state
[  271.893389][ T2802] bridge0: port 2(bridge_slave_1) entered blocking state
[  271.900586][ T2802] bridge0: port 2(bridge_slave_1) entered forwarding state
[  271.945816][T18909] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  271.956366][T18909] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  272.125092][T18909] 8021q: adding VLAN 0 to HW filter on device batadv0
[  272.277608][T18909] veth0_vlan: entered promiscuous mode
[  272.306824][T18909] veth1_vlan: entered promiscuous mode
[  272.308249][T19059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5967'.
[  272.335617][T18909] veth0_macvtap: entered promiscuous mode
[  272.357416][T18909] veth1_macvtap: entered promiscuous mode
[  272.392743][T18909] batman_adv: batadv0: Interface activated: batadv_slave_0
[  272.422637][T18909] batman_adv: batadv0: Interface activated: batadv_slave_1
[  272.457077][   T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  272.466394][   T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  272.501064][   T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  272.537596][   T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  272.608766][T19068] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5971'.
[  272.755504][T19080] sch_fq: defrate 4294967295 ignored.
[  273.091934][T19092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5977'.
[  273.308640][T19101] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5978'.
[  273.528861][T19082] chnl_net:caif_netlink_parms(): no params data found
[  273.620246][T19109] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5981'.
[  273.691112][T19082] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.698318][T19082] bridge0: port 1(bridge_slave_0) entered disabled state
[  273.740104][T19082] bridge_slave_0: entered allmulticast mode
[  273.751756][T19082] bridge_slave_0: entered promiscuous mode
[  273.778888][T19082] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.786184][T19082] bridge0: port 2(bridge_slave_1) entered disabled state
[  273.811738][T19082] bridge_slave_1: entered allmulticast mode
[  273.820416][T19082] bridge_slave_1: entered promiscuous mode
[  273.861924][T19082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  273.885849][T19082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  273.913545][T19126] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5986'.
[  273.948356][T19082] team0: Port device team_slave_0 added
[  273.965690][T19128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5987'.
[  273.973610][T19082] team0: Port device team_slave_1 added
[  274.079135][T19131] sch_fq: defrate 4294967295 ignored.
[  274.093371][T19082] batman_adv: batadv0: Adding interface: batadv_slave_0
[  274.100479][T19082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.126947][T19082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  274.174362][T19136] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5990'.
[  274.935380][   T29] kauditd_printk_skb: 171 callbacks suppressed
[  274.935398][   T29] audit: type=1400 audit(1755640099.704:954): avc:  denied  { execute_no_trans } for  pid=19132 comm="syz.6.5989" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1802 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  275.141723][T19082] batman_adv: batadv0: Adding interface: batadv_slave_1
[  275.148820][T19082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.175165][T19082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  277.185942][T19138] sch_fq: defrate 4294967295 ignored.
[  277.206980][T19082] hsr_slave_0: entered promiscuous mode
[  277.213529][T19082] hsr_slave_1: entered promiscuous mode
[  277.220179][T19082] debugfs: 'hsr0' already exists in 'hsr'
[  277.226248][T19082] Cannot create hsr debugfs directory
[  277.302483][T19145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5992'.
[  277.372502][T19152] sd 0:0:1:0: device reset
[  277.432595][T19082] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.443107][T19082] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  277.445500][   T29] audit: type=1326 audit(1755640102.214:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19160 comm="syz.6.6000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4babebe9 code=0x7ffc0000
[  277.479625][   T29] audit: type=1326 audit(1755640102.214:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19160 comm="syz.6.6000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4babebe9 code=0x7ffc0000
[  277.508173][   T29] audit: type=1326 audit(1755640102.284:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19160 comm="syz.6.6000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f2e4babebe9 code=0x7ffc0000
[  277.532427][   T29] audit: type=1326 audit(1755640102.284:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19160 comm="syz.6.6000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4babebe9 code=0x7ffc0000
[  277.556143][   T29] audit: type=1326 audit(1755640102.284:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19160 comm="syz.6.6000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4babebe9 code=0x7ffc0000
[  277.580771][   T29] audit: type=1326 audit(1755640102.284:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19160 comm="syz.6.6000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f2e4babebe9 code=0x7ffc0000
[  277.614482][   T29] audit: type=1326 audit(1755640102.384:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19160 comm="syz.6.6000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4babebe9 code=0x7ffc0000
[  277.638307][   T29] audit: type=1326 audit(1755640102.384:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19160 comm="syz.6.6000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4babebe9 code=0x7ffc0000
[  277.662003][   T29] audit: type=1326 audit(1755640102.384:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19160 comm="syz.6.6000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f2e4babebe9 code=0x7ffc0000
[  277.720525][T19082] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.731274][T19082] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  277.799772][T19179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6006'.
[  277.824808][T19178] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6005'.
[  277.849972][T19184] sd 0:0:1:0: device reset
[  277.857042][T19082] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.867619][T19082] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  277.961940][T19187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6009'.
[  277.975569][T19188] sch_fq: defrate 4294967295 ignored.
[  278.766480][T19196] netlink: '+}[@': attribute type 13 has an invalid length.
[  278.974725][T19082] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.985223][T19082] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  279.025033][   T12] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  279.034332][   T12] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  279.070353][T19211] sd 0:0:1:0: device reset
[  279.075068][   T12] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  279.084088][   T12] netdevsim netdevsim6 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  279.123561][   T12] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  279.132820][   T12] netdevsim netdevsim6 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  279.142308][   T12] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  279.151325][   T12] netdevsim netdevsim6 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  279.172665][T19082] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  279.182055][T19082] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  279.200539][T19082] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  279.210881][T19082] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  279.300860][T19082] 8021q: adding VLAN 0 to HW filter on device bond0
[  279.327290][T19082] 8021q: adding VLAN 0 to HW filter on device team0
[  279.342069][T19229] lo speed is unknown, defaulting to 1000
[  279.348888][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.356023][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  279.377760][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.385069][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  279.408577][T19229] lo speed is unknown, defaulting to 1000
[  279.415006][T19229] lo speed is unknown, defaulting to 1000
[  279.421572][T19229] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  279.434848][T19229] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  279.465385][T19229] lo speed is unknown, defaulting to 1000
[  279.474804][T19229] lo speed is unknown, defaulting to 1000
[  279.483615][T19229] lo speed is unknown, defaulting to 1000
[  279.490171][T19229] lo speed is unknown, defaulting to 1000
[  279.510403][T19229] lo speed is unknown, defaulting to 1000
[  279.517202][T19229] lo speed is unknown, defaulting to 1000
[  279.553867][T19082] 8021q: adding VLAN 0 to HW filter on device batadv0
[  279.563493][T19244] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6026'.
[  279.732108][T19261] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6030'.
[  279.759612][T19082] veth0_vlan: entered promiscuous mode
[  279.802042][T19082] veth1_vlan: entered promiscuous mode
[  279.822436][T19266] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  279.841558][T19268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6034'.
[  279.854598][T19082] veth0_macvtap: entered promiscuous mode
[  279.862609][T19082] veth1_macvtap: entered promiscuous mode
[  279.887161][T19082] batman_adv: batadv0: Interface activated: batadv_slave_0
[  279.906725][T19082] batman_adv: batadv0: Interface activated: batadv_slave_1
[  279.929806][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  279.963873][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  279.976707][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  280.000665][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  280.024660][T19279] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  280.043888][T19274] lo speed is unknown, defaulting to 1000
[  280.075699][T19277] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6038'.
[  280.383790][T19298] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  280.510482][T19307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6048'.
[  280.592631][T19318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6051'.
[  280.625533][T19301] lo speed is unknown, defaulting to 1000
[  280.724899][T19301] chnl_net:caif_netlink_parms(): no params data found
[  280.809822][T19301] bridge0: port 1(bridge_slave_0) entered blocking state
[  280.817021][T19301] bridge0: port 1(bridge_slave_0) entered disabled state
[  280.824661][T19301] bridge_slave_0: entered allmulticast mode
[  280.831807][T19301] bridge_slave_0: entered promiscuous mode
[  280.860737][T19301] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.868200][T19301] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.903485][T19301] bridge_slave_1: entered allmulticast mode
[  280.910306][T19301] bridge_slave_1: entered promiscuous mode
[  280.984439][  T174] bond0 (unregistering): Released all slaves
[  281.016521][T19339] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  281.052779][  T174] hsr_slave_0: left promiscuous mode
[  281.059990][  T174] hsr_slave_1: left promiscuous mode
[  281.151006][T19301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  281.177090][T19301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  281.196840][   T29] kauditd_printk_skb: 46 callbacks suppressed
[  281.196856][   T29] audit: type=1400 audit(1755640105.964:1010): avc:  denied  { read write } for  pid=19349 comm="syz.2.6062" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  281.228276][   T29] audit: type=1400 audit(1755640105.964:1011): avc:  denied  { open } for  pid=19349 comm="syz.2.6062" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  281.273854][T19301] team0: Port device team_slave_0 added
[  281.280803][T19301] team0: Port device team_slave_1 added
[  281.341427][T19301] batman_adv: batadv0: Adding interface: batadv_slave_0
[  281.348445][T19301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  281.374570][T19301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  281.407479][T19364] sd 0:0:1:0: device reset
[  281.423833][T19301] batman_adv: batadv0: Adding interface: batadv_slave_1
[  281.430922][T19301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  281.457801][T19301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  281.493568][T19301] hsr_slave_0: entered promiscuous mode
[  281.499805][T19301] hsr_slave_1: entered promiscuous mode
[  281.506845][T19301] debugfs: 'hsr0' already exists in 'hsr'
[  281.512755][T19301] Cannot create hsr debugfs directory
[  281.519365][T19369] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  281.536115][  T174] IPVS: stop unused estimator thread 0...
[  281.591357][   T29] audit: type=1400 audit(1755640106.364:1012): avc:  denied  { read write } for  pid=19378 comm="syz.2.6075" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  281.615078][   T29] audit: type=1400 audit(1755640106.364:1013): avc:  denied  { open } for  pid=19378 comm="syz.2.6075" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  281.698358][   T29] audit: type=1326 audit(1755640106.454:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19382 comm="syz.1.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed08f7ebe9 code=0x7ffc0000
[  281.722365][   T29] audit: type=1326 audit(1755640106.454:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19382 comm="syz.1.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed08f7ebe9 code=0x7ffc0000
[  281.746501][   T29] audit: type=1326 audit(1755640106.454:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19382 comm="syz.1.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fed08f7ebe9 code=0x7ffc0000
[  281.770265][   T29] audit: type=1326 audit(1755640106.454:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19382 comm="syz.1.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed08f7ebe9 code=0x7ffc0000
[  281.794193][   T29] audit: type=1326 audit(1755640106.454:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19382 comm="syz.1.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed08f7ebe9 code=0x7ffc0000
[  281.818216][   T29] audit: type=1326 audit(1755640106.464:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19382 comm="syz.1.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fed08f7ebe9 code=0x7ffc0000
[  281.849100][T19389] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  282.192873][T19301] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  282.224485][T19301] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  282.239674][T19301] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  282.256582][T19301] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  282.369672][T19301] 8021q: adding VLAN 0 to HW filter on device bond0
[  282.377078][T19454] block device autoloading is deprecated and will be removed.
[  282.403316][T19301] 8021q: adding VLAN 0 to HW filter on device team0
[  282.417696][  T174] bridge0: port 1(bridge_slave_0) entered blocking state
[  282.424936][  T174] bridge0: port 1(bridge_slave_0) entered forwarding state
[  282.439075][  T174] bridge0: port 2(bridge_slave_1) entered blocking state
[  282.446217][  T174] bridge0: port 2(bridge_slave_1) entered forwarding state
[  282.609392][T19301] 8021q: adding VLAN 0 to HW filter on device batadv0
[  282.681168][T19494] __nla_validate_parse: 4 callbacks suppressed
[  282.681225][T19494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6121'.
[  282.699283][T19494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6121'.
[  282.781640][T19301] veth0_vlan: entered promiscuous mode
[  282.790033][T19301] veth1_vlan: entered promiscuous mode
[  282.808598][T19301] veth0_macvtap: entered promiscuous mode
[  282.817058][T19301] veth1_macvtap: entered promiscuous mode
[  282.840279][T19301] batman_adv: batadv0: Interface activated: batadv_slave_0
[  282.854581][T19301] batman_adv: batadv0: Interface activated: batadv_slave_1
[  282.867058][   T31] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  282.876677][T19507] sch_fq: defrate 4294967295 ignored.
[  282.886841][   T31] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  282.899348][   T31] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  282.947149][   T31] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  283.034204][T19513] loop1: detected capacity change from 0 to 1024
[  283.046544][T19514] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  283.073774][T19513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  283.120965][T19513] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  283.143715][T19521] sd 0:0:1:0: device reset
[  283.166206][T19513] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6125'.
[  283.221473][T19526] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  283.549607][T19549] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  283.578183][T19082] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.589131][T19553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6142'.
[  283.635612][T19557] loop1: detected capacity change from 0 to 2048
[  283.655926][T19561] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6145'.
[  283.666159][T19565] FAULT_INJECTION: forcing a failure.
[  283.666159][T19565] name failslab, interval 1, probability 0, space 0, times 0
[  283.678976][T19565] CPU: 0 UID: 0 PID: 19565 Comm: syz.0.6148 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  283.679087][T19565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  283.679101][T19565] Call Trace:
[  283.679108][T19565]  <TASK>
[  283.679116][T19565]  __dump_stack+0x1d/0x30
[  283.679140][T19565]  dump_stack_lvl+0xe8/0x140
[  283.679230][T19565]  dump_stack+0x15/0x1b
[  283.679251][T19565]  should_fail_ex+0x265/0x280
[  283.679275][T19565]  ? ip6_setup_cork+0x113/0x7a0
[  283.679299][T19565]  should_failslab+0x8c/0xb0
[  283.679356][T19565]  __kmalloc_cache_noprof+0x4c/0x320
[  283.679451][T19565]  ip6_setup_cork+0x113/0x7a0
[  283.679476][T19565]  ip6_append_data+0x18e/0x250
[  283.679502][T19565]  ? __pfx_raw6_getfrag+0x10/0x10
[  283.679528][T19565]  rawv6_sendmsg+0xdce/0xf80
[  283.679576][T19565]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  283.679601][T19565]  inet_sendmsg+0xc5/0xd0
[  283.679627][T19565]  __sock_sendmsg+0x102/0x180
[  283.679715][T19565]  sock_write_iter+0x165/0x1b0
[  283.679749][T19565]  do_iter_readv_writev+0x499/0x540
[  283.679818][T19565]  vfs_writev+0x2df/0x8b0
[  283.679856][T19565]  do_writev+0xe7/0x210
[  283.679952][T19565]  __x64_sys_writev+0x45/0x50
[  283.679977][T19565]  x64_sys_call+0x1e9a/0x2ff0
[  283.680001][T19565]  do_syscall_64+0xd2/0x200
[  283.680031][T19565]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  283.680121][T19565]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  283.680146][T19565]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.680175][T19565] RIP: 0033:0x7ff5beb8ebe9
[  283.680190][T19565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  283.680209][T19565] RSP: 002b:00007ff5bd5ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  283.680229][T19565] RAX: ffffffffffffffda RBX: 00007ff5bedb5fa0 RCX: 00007ff5beb8ebe9
[  283.680320][T19565] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003
[  283.680333][T19565] RBP: 00007ff5bd5ef090 R08: 0000000000000000 R09: 0000000000000000
[  283.680345][T19565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  283.680357][T19565] R13: 00007ff5bedb6038 R14: 00007ff5bedb5fa0 R15: 00007ffc55d892e8
[  283.680406][T19565]  </TASK>
[  283.976493][T19572] lo speed is unknown, defaulting to 1000
[  284.057353][T19579] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  284.141144][T19587] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6157'.
[  284.245589][T19601] sd 0:0:1:0: device reset
[  284.280142][T19607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6166'.
[  284.396001][T19621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6172'.
[  284.499093][T19629] sd 0:0:1:0: device reset
[  284.584763][T19639] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6181'.
[  284.697024][T19646] 9pnet_fd: Insufficient options for proto=fd
[  284.719340][T19648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6185'.
[  284.909173][T19670] sd 0:0:1:0: device reset
[  285.000468][T19676] tbf_change: 2 callbacks suppressed
[  285.000486][T19676] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  285.104563][T19683] sch_fq: defrate 4294967295 ignored.
[  285.321810][T19695] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  285.333228][T19696] IPVS: stopping master sync thread 19695 ...
[  285.356430][   T35] bridge_slave_1: left allmulticast mode
[  285.362241][   T35] bridge_slave_1: left promiscuous mode
[  285.368007][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.431938][   T35] bridge_slave_0: left allmulticast mode
[  285.437649][   T35] bridge_slave_0: left promiscuous mode
[  285.443759][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.623854][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  285.656008][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  285.691055][   T35] bond0 (unregistering): Released all slaves
[  285.821085][   T35] tipc: Left network mode
[  285.847045][   T35] hsr_slave_0: left promiscuous mode
[  285.875187][   T35] hsr_slave_1: left promiscuous mode
[  285.901173][   T35] veth1_macvtap: left promiscuous mode
[  285.906813][   T35] veth0_macvtap: left promiscuous mode
[  285.915065][   T35] veth1_vlan: left promiscuous mode
[  285.920429][   T35] veth0_vlan: left promiscuous mode
[  285.992792][   T35] team0 (unregistering): Port device team_slave_1 removed
[  286.003685][   T35] team0 (unregistering): Port device team_slave_0 removed
[  286.054430][T19712] geneve2: entered promiscuous mode
[  286.059675][T19712] geneve2: entered allmulticast mode
[  286.068204][T19716] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  286.077116][T19717] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  286.088485][  T166] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  286.097634][  T166] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  286.111062][  T166] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  286.133303][  T166] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  286.160764][T19729] FAULT_INJECTION: forcing a failure.
[  286.160764][T19729] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  286.173939][T19729] CPU: 1 UID: 0 PID: 19729 Comm: syz.2.6217 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  286.173972][T19729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  286.174052][T19729] Call Trace:
[  286.174060][T19729]  <TASK>
[  286.174070][T19729]  __dump_stack+0x1d/0x30
[  286.174097][T19729]  dump_stack_lvl+0xe8/0x140
[  286.174121][T19729]  dump_stack+0x15/0x1b
[  286.174141][T19729]  should_fail_ex+0x265/0x280
[  286.174167][T19729]  should_fail+0xb/0x20
[  286.174236][T19729]  should_fail_usercopy+0x1a/0x20
[  286.174265][T19729]  _copy_from_user+0x1c/0xb0
[  286.174302][T19729]  __sys_connect+0xd0/0x2b0
[  286.174351][T19729]  __x64_sys_connect+0x3f/0x50
[  286.174438][T19729]  x64_sys_call+0x2c08/0x2ff0
[  286.174465][T19729]  do_syscall_64+0xd2/0x200
[  286.174496][T19729]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  286.174597][T19729]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  286.174629][T19729]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.174656][T19729] RIP: 0033:0x7fd7314bebe9
[  286.174673][T19729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  286.174691][T19729] RSP: 002b:00007fd72ff1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  286.174756][T19729] RAX: ffffffffffffffda RBX: 00007fd7316e5fa0 RCX: 00007fd7314bebe9
[  286.174853][T19729] RDX: 0000000000000010 RSI: 0000200000000540 RDI: 0000000000000003
[  286.174869][T19729] RBP: 00007fd72ff1f090 R08: 0000000000000000 R09: 0000000000000000
[  286.174885][T19729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  286.174901][T19729] R13: 00007fd7316e6038 R14: 00007fd7316e5fa0 R15: 00007ffdcffbf0d8
[  286.174998][T19729]  </TASK>
[  286.522472][T19758] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  286.528771][T19761] loop1: detected capacity change from 0 to 1024
[  286.588792][T19769] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  286.625042][T19761] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  286.663987][T19761] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  286.785144][T19761] geneve2: entered promiscuous mode
[  286.790409][T19761] geneve2: entered allmulticast mode
[  286.808676][  T174] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  286.851546][T19791] sch_fq: defrate 4294967295 ignored.
[  286.857100][   T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  286.881919][   T12] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  286.910451][   T12] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  286.951402][T19798] FAULT_INJECTION: forcing a failure.
[  286.951402][T19798] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  286.964668][T19798] CPU: 0 UID: 0 PID: 19798 Comm: syz.6.6242 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  286.964760][T19798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  286.964775][T19798] Call Trace:
[  286.964784][T19798]  <TASK>
[  286.964794][T19798]  __dump_stack+0x1d/0x30
[  286.964896][T19798]  dump_stack_lvl+0xe8/0x140
[  286.964917][T19798]  dump_stack+0x15/0x1b
[  286.964933][T19798]  should_fail_ex+0x265/0x280
[  286.964954][T19798]  should_fail+0xb/0x20
[  286.965014][T19798]  should_fail_usercopy+0x1a/0x20
[  286.965036][T19798]  _copy_from_user+0x1c/0xb0
[  286.965064][T19798]  ___sys_sendmsg+0xc1/0x1d0
[  286.965129][T19798]  __x64_sys_sendmsg+0xd4/0x160
[  286.965156][T19798]  x64_sys_call+0x191e/0x2ff0
[  286.965180][T19798]  do_syscall_64+0xd2/0x200
[  286.965265][T19798]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  286.965291][T19798]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  286.965395][T19798]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.965426][T19798] RIP: 0033:0x7f5fd74febe9
[  286.965563][T19798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  286.965581][T19798] RSP: 002b:00007f5fd5f67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  286.965600][T19798] RAX: ffffffffffffffda RBX: 00007f5fd7725fa0 RCX: 00007f5fd74febe9
[  286.965612][T19798] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003
[  286.965628][T19798] RBP: 00007f5fd5f67090 R08: 0000000000000000 R09: 0000000000000000
[  286.965640][T19798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  286.965652][T19798] R13: 00007f5fd7726038 R14: 00007f5fd7725fa0 R15: 00007ffdb14968c8
[  286.965785][T19798]  </TASK>
[  287.201729][T19802] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  287.269488][T19809] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  287.319040][   T29] kauditd_printk_skb: 113 callbacks suppressed
[  287.319056][   T29] audit: type=1400 audit(1755640112.084:1133): avc:  denied  { write } for  pid=19811 comm="syz.6.6249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  287.403218][T19815] lo speed is unknown, defaulting to 1000
[  287.694617][T19082] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.868606][T19821] lo speed is unknown, defaulting to 1000
[  287.887118][   T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.897716][   T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  287.913339][T19842] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  287.944250][T19844] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  287.966148][   T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.976634][   T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  287.977763][   T29] audit: type=1326 audit(1755640112.734:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19846 comm="syz.2.6261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7314bebe9 code=0x7ffc0000
[  288.011986][   T29] audit: type=1326 audit(1755640112.744:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19846 comm="syz.2.6261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7314bebe9 code=0x7ffc0000
[  288.036112][   T29] audit: type=1326 audit(1755640112.744:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19846 comm="syz.2.6261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fd7314bebe9 code=0x7ffc0000
[  288.059735][   T29] audit: type=1326 audit(1755640112.744:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19846 comm="syz.2.6261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7314bebe9 code=0x7ffc0000
[  288.083976][   T29] audit: type=1326 audit(1755640112.744:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19846 comm="syz.2.6261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7314bebe9 code=0x7ffc0000
[  288.107533][   T29] audit: type=1326 audit(1755640112.744:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19846 comm="syz.2.6261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7314bebe9 code=0x7ffc0000
[  288.131234][   T29] audit: type=1326 audit(1755640112.744:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19846 comm="syz.2.6261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7314bebe9 code=0x7ffc0000
[  288.154963][   T29] audit: type=1326 audit(1755640112.744:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19846 comm="syz.2.6261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fd7314bebe9 code=0x7ffc0000
[  288.178834][   T29] audit: type=1326 audit(1755640112.744:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19846 comm="syz.2.6261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7314bebe9 code=0x7ffc0000
[  288.216025][T19821] chnl_net:caif_netlink_parms(): no params data found
[  288.253245][T19821] bridge0: port 1(bridge_slave_0) entered blocking state
[  288.260377][T19821] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.267789][T19821] bridge_slave_0: entered allmulticast mode
[  288.274421][T19821] bridge_slave_0: entered promiscuous mode
[  288.285099][   T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.295784][   T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  288.309143][T19821] bridge0: port 2(bridge_slave_1) entered blocking state
[  288.316707][T19821] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.324262][T19821] bridge_slave_1: entered allmulticast mode
[  288.331032][T19821] bridge_slave_1: entered promiscuous mode
[  288.354051][T19821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  288.366538][   T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.376973][   T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  288.392726][T19821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  288.416645][T19821] team0: Port device team_slave_0 added
[  288.430707][T19865] netlink: 'syz.2.6269': attribute type 21 has an invalid length.
[  288.439973][T19821] team0: Port device team_slave_1 added
[  288.592875][   T31] bond0 (unregistering): Released all slaves
[  288.601662][T19821] batman_adv: batadv0: Adding interface: batadv_slave_0
[  288.608640][T19821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  288.634800][T19821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  288.646688][T19821] batman_adv: batadv0: Adding interface: batadv_slave_1
[  288.653745][T19821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  288.679866][T19821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  288.697881][   T31] tipc: Left network mode
[  288.699947][T19876] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  288.731974][   T31] hsr_slave_0: left promiscuous mode
[  288.737804][   T31] hsr_slave_1: left promiscuous mode
[  288.752701][   T31] veth1_macvtap: left promiscuous mode
[  288.763387][   T31] veth0_macvtap: left promiscuous mode
[  288.769038][   T31] veth1_vlan: left promiscuous mode
[  288.774897][   T31] veth0_vlan: left promiscuous mode
[  288.867584][T19821] hsr_slave_0: entered promiscuous mode
[  288.874167][T19821] hsr_slave_1: entered promiscuous mode
[  288.972279][T19871] lo speed is unknown, defaulting to 1000
[  289.030836][T19899] loop1: detected capacity change from 0 to 512
[  289.055189][T19899] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.6276: bad orphan inode 17
[  289.072790][T19899] ext4_test_bit(bit=16, block=4) = 1
[  289.078129][T19899] is_bad_inode(inode)=0
[  289.082389][T19899] NEXT_ORPHAN(inode)=0
[  289.086493][T19899] max_ino=32
[  289.089703][T19899] i_nlink=1
[  289.093755][T19899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  289.113467][T19899] __nla_validate_parse: 6 callbacks suppressed
[  289.113486][T19899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6276'.
[  289.167918][T19082] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.228108][   T31] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.238550][   T31] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  289.277209][T19871] chnl_net:caif_netlink_parms(): no params data found
[  289.323584][   T31] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.334233][   T31] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  289.400037][   T31] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.410582][   T31] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  289.454301][   T31] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.464684][   T31] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  289.487420][T19871] bridge0: port 1(bridge_slave_0) entered blocking state
[  289.494617][T19871] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.504121][T19871] bridge_slave_0: entered allmulticast mode
[  289.510821][T19871] bridge_slave_0: entered promiscuous mode
[  289.518136][T19871] bridge0: port 2(bridge_slave_1) entered blocking state
[  289.525445][T19871] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.536730][T19871] bridge_slave_1: entered allmulticast mode
[  289.543590][T19871] bridge_slave_1: entered promiscuous mode
[  289.559519][T19821] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  289.579225][T19821] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  289.613106][T19821] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  289.627441][T19871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  289.640101][T19821] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  289.654228][   T31] bridge_slave_1: left allmulticast mode
[  289.659962][   T31] bridge_slave_1: left promiscuous mode
[  289.665975][   T31] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.677447][   T31] bridge_slave_0: left allmulticast mode
[  289.683379][   T31] bridge_slave_0: left promiscuous mode
[  289.689251][   T31] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.784236][   T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  289.802835][   T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  289.821859][   T31] bond0 (unregistering): Released all slaves
[  289.831799][T19871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  289.889371][   T31] hsr_slave_0: left promiscuous mode
[  289.896871][   T31] hsr_slave_1: left promiscuous mode
[  289.903393][   T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  289.910893][   T31] batman_adv: batadv0: Removing interface: batadv_slave_0
[  289.919941][   T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  289.927400][   T31] batman_adv: batadv0: Removing interface: batadv_slave_1
[  289.939041][   T31] veth1_macvtap: left promiscuous mode
[  289.944880][   T31] veth0_macvtap: left promiscuous mode
[  289.950608][   T31] veth1_vlan: left promiscuous mode
[  289.957361][   T31] veth0_vlan: left promiscuous mode
[  290.039268][   T31] team0 (unregistering): Port device team_slave_1 removed
[  290.049860][   T31] team0 (unregistering): Port device team_slave_0 removed
[  290.087757][T19935] FAULT_INJECTION: forcing a failure.
[  290.087757][T19935] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  290.101128][T19935] CPU: 0 UID: 0 PID: 19935 Comm: syz.1.6285 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  290.101200][T19935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  290.101215][T19935] Call Trace:
[  290.101224][T19935]  <TASK>
[  290.101234][T19935]  __dump_stack+0x1d/0x30
[  290.101258][T19935]  dump_stack_lvl+0xe8/0x140
[  290.101277][T19935]  dump_stack+0x15/0x1b
[  290.101360][T19935]  should_fail_ex+0x265/0x280
[  290.101388][T19935]  should_fail+0xb/0x20
[  290.101405][T19935]  should_fail_usercopy+0x1a/0x20
[  290.101426][T19935]  _copy_from_user+0x1c/0xb0
[  290.101455][T19935]  restore_altstack+0x4b/0x2d0
[  290.101596][T19935]  ? __set_task_blocked+0x23a/0x2a0
[  290.101627][T19935]  __ia32_sys_rt_sigreturn+0xdc/0x350
[  290.101651][T19935]  ? _raw_spin_unlock_irq+0x26/0x50
[  290.101694][T19935]  ? signal_setup_done+0x266/0x290
[  290.101717][T19935]  ? xfd_validate_state+0x45/0xf0
[  290.101832][T19935]  ? fpu__clear_user_states+0x63/0x1e0
[  290.101865][T19935]  ? fpregs_mark_activate+0x66/0x140
[  290.101980][T19935]  ? fpu__clear_user_states+0x63/0x1e0
[  290.102014][T19935]  ? arch_do_signal_or_restart+0x2f3/0x480
[  290.102042][T19935]  ? __rcu_read_unlock+0x4f/0x70
[  290.102084][T19935]  x64_sys_call+0x2d3c/0x2ff0
[  290.102107][T19935]  do_syscall_64+0xd2/0x200
[  290.102133][T19935]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  290.102158][T19935]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  290.102236][T19935]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.102257][T19935] RIP: 0033:0x7fed08f1add9
[  290.102272][T19935] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25
[  290.102293][T19935] RSP: 002b:00007fed079e6a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f
[  290.102387][T19935] RAX: ffffffffffffffda RBX: 00007fed091a5fa0 RCX: 00007fed08f1add9
[  290.102403][T19935] RDX: 00007fed079e6a80 RSI: 00007fed079e6bb0 RDI: 0000000000000021
[  290.102419][T19935] RBP: 00007fed079e7090 R08: 0000000000000000 R09: 0000000000000000
[  290.102435][T19935] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001
[  290.102571][T19935] R13: 00007fed091a6038 R14: 00007fed091a5fa0 R15: 00007ffc32c812b8
[  290.102602][T19935]  </TASK>
[  290.349677][T19871] team0: Port device team_slave_0 added
[  290.363017][T19871] team0: Port device team_slave_1 added
[  290.412839][T19871] batman_adv: batadv0: Adding interface: batadv_slave_0
[  290.420044][T19871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  290.446288][T19871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  290.468594][T19871] batman_adv: batadv0: Adding interface: batadv_slave_1
[  290.475728][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.483994][T19871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  290.510041][T19871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  290.539300][T19821] 8021q: adding VLAN 0 to HW filter on device bond0
[  290.566926][T19871] hsr_slave_0: entered promiscuous mode
[  290.574285][T19871] hsr_slave_1: entered promiscuous mode
[  290.591399][T19871] debugfs: 'hsr0' already exists in 'hsr'
[  290.597349][T19871] Cannot create hsr debugfs directory
[  290.608099][T19821] 8021q: adding VLAN 0 to HW filter on device team0
[  290.624491][  T174] bridge0: port 1(bridge_slave_0) entered blocking state
[  290.631700][  T174] bridge0: port 1(bridge_slave_0) entered forwarding state
[  290.650657][  T174] bridge0: port 2(bridge_slave_1) entered blocking state
[  290.658150][  T174] bridge0: port 2(bridge_slave_1) entered forwarding state
[  290.715262][T19821] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  290.725748][T19821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  290.799281][T19871] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  290.809279][T19871] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  290.827866][T19871] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  290.849929][T19871] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  290.861763][T19821] 8021q: adding VLAN 0 to HW filter on device batadv0
[  290.944023][T19871] 8021q: adding VLAN 0 to HW filter on device bond0
[  290.953251][T19957] tbf_change: 1 callbacks suppressed
[  290.953268][T19957] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  290.980169][T19871] 8021q: adding VLAN 0 to HW filter on device team0
[  291.001813][  T174] bridge0: port 1(bridge_slave_0) entered blocking state
[  291.009107][  T174] bridge0: port 1(bridge_slave_0) entered forwarding state
[  291.036912][  T174] bridge0: port 2(bridge_slave_1) entered blocking state
[  291.044255][  T174] bridge0: port 2(bridge_slave_1) entered forwarding state
[  291.074016][T19821] veth0_vlan: entered promiscuous mode
[  291.099830][T19821] veth1_vlan: entered promiscuous mode
[  291.136208][T19821] veth0_macvtap: entered promiscuous mode
[  291.145379][T19961] loop1: detected capacity change from 0 to 8192
[  291.154037][T19821] veth1_macvtap: entered promiscuous mode
[  291.190160][T19821] batman_adv: batadv0: Interface activated: batadv_slave_0
[  291.202414][T19821] batman_adv: batadv0: Interface activated: batadv_slave_1
[  291.262527][ T2802] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  291.304692][T19871] 8021q: adding VLAN 0 to HW filter on device batadv0
[  291.353192][ T2802] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  291.373594][ T2802] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  291.396617][ T2802] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  291.452512][T19975] sd 0:0:1:0: device reset
[  291.626006][T19871] veth0_vlan: entered promiscuous mode
[  291.635734][T19990] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6291'.
[  291.637928][T19871] veth1_vlan: entered promiscuous mode
[  291.664450][T19871] veth0_macvtap: entered promiscuous mode
[  291.674526][T19871] veth1_macvtap: entered promiscuous mode
[  291.701777][T19871] batman_adv: batadv0: Interface activated: batadv_slave_0
[  291.716302][T19871] batman_adv: batadv0: Interface activated: batadv_slave_1
[  291.730234][  T166] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  291.743856][  T166] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  291.756304][  T166] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  291.775562][  T166] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  291.959235][T20016] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  291.991050][T20020] netlink: 48 bytes leftover after parsing attributes in process `syz.8.6302'.
[  291.999747][T20019] lo speed is unknown, defaulting to 1000
[  292.017203][T20022] syz.1.6304 (20022): attempted to duplicate a private mapping with mremap.  This is not supported.
[  292.054485][T20025] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6305'.
[  292.139958][T20035] bond0: entered promiscuous mode
[  292.145224][T20035] bond_slave_0: entered promiscuous mode
[  292.151077][T20035] bond_slave_1: entered promiscuous mode
[  292.197362][T20033] loop1: detected capacity change from 0 to 8192
[  292.361031][   T29] kauditd_printk_skb: 107 callbacks suppressed
[  292.361116][   T29] audit: type=1326 audit(1755640117.124:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20046 comm="syz.2.6314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7314bebe9 code=0x7ffc0000
[  292.406584][   T29] audit: type=1326 audit(1755640117.174:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20046 comm="syz.2.6314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fd7314bebe9 code=0x7ffc0000
[  292.430396][   T29] audit: type=1326 audit(1755640117.174:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20046 comm="syz.2.6314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7314bebe9 code=0x7ffc0000
[  292.454344][   T29] audit: type=1326 audit(1755640117.174:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20046 comm="syz.2.6314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7314bebe9 code=0x7ffc0000
[  292.478368][   T29] audit: type=1326 audit(1755640117.174:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20046 comm="syz.2.6314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7314bebe9 code=0x7ffc0000
[  292.502389][   T29] audit: type=1326 audit(1755640117.174:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20046 comm="syz.2.6314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fd7314bebe9 code=0x7ffc0000
[  292.526339][   T29] audit: type=1326 audit(1755640117.174:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20046 comm="syz.2.6314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7314bebe9 code=0x7ffc0000
[  292.550369][   T29] audit: type=1326 audit(1755640117.174:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20046 comm="syz.2.6314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd7314bebe9 code=0x7ffc0000
[  292.574221][   T29] audit: type=1326 audit(1755640117.174:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20046 comm="syz.2.6314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7314bebe9 code=0x7ffc0000
[  292.598054][   T29] audit: type=1326 audit(1755640117.174:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20046 comm="syz.2.6314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7fd7314bebe9 code=0x7ffc0000
[  292.879963][T20062] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  292.888400][T20060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6320'.
[  292.956262][T20064] sd 0:0:1:0: device reset
[  292.981603][T20065] sch_fq: defrate 4294967295 ignored.
[  293.026931][T20067] geneve2: entered promiscuous mode
[  293.032827][T20067] geneve2: entered allmulticast mode
[  293.346613][  T174] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  293.360340][  T174] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  293.379536][  T174] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  293.408886][  T174] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  293.557993][T20074] loop1: detected capacity change from 0 to 512
[  293.632145][T20074] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.6327: bad orphan inode 17
[  293.659008][T20074] ext4_test_bit(bit=16, block=4) = 1
[  293.664430][T20074] is_bad_inode(inode)=0
[  293.668620][T20074] NEXT_ORPHAN(inode)=0
[  293.672921][T20074] max_ino=32
[  293.676126][T20074] i_nlink=1
[  293.735802][T20074] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  293.816475][T19082] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.817239][T20081] siw: device registration error -23
[  293.891960][T20087] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  293.988882][T20094] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  294.020808][T20100] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  294.086998][T20106] lo speed is unknown, defaulting to 1000
[  294.097264][T20113] FAULT_INJECTION: forcing a failure.
[  294.097264][T20113] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  294.110595][T20113] CPU: 1 UID: 0 PID: 20113 Comm: syz.1.6344 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  294.110643][T20113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  294.110660][T20113] Call Trace:
[  294.110669][T20113]  <TASK>
[  294.110678][T20113]  __dump_stack+0x1d/0x30
[  294.110699][T20113]  dump_stack_lvl+0xe8/0x140
[  294.110718][T20113]  dump_stack+0x15/0x1b
[  294.110734][T20113]  should_fail_ex+0x265/0x280
[  294.110816][T20113]  should_fail+0xb/0x20
[  294.110836][T20113]  should_fail_usercopy+0x1a/0x20
[  294.110862][T20113]  _copy_from_user+0x1c/0xb0
[  294.110956][T20113]  ___sys_sendmsg+0xc1/0x1d0
[  294.111004][T20113]  __x64_sys_sendmsg+0xd4/0x160
[  294.111085][T20113]  x64_sys_call+0x191e/0x2ff0
[  294.111107][T20113]  do_syscall_64+0xd2/0x200
[  294.111135][T20113]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  294.111161][T20113]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  294.111224][T20113]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.111246][T20113] RIP: 0033:0x7fed08f7ebe9
[  294.111263][T20113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  294.111348][T20113] RSP: 002b:00007fed079e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  294.111367][T20113] RAX: ffffffffffffffda RBX: 00007fed091a5fa0 RCX: 00007fed08f7ebe9
[  294.111380][T20113] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  294.111395][T20113] RBP: 00007fed079e7090 R08: 0000000000000000 R09: 0000000000000000
[  294.111415][T20113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  294.111428][T20113] R13: 00007fed091a6038 R14: 00007fed091a5fa0 R15: 00007ffc32c812b8
[  294.111512][T20113]  </TASK>
[  294.352389][T20122] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  294.397622][T20119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6346'.
[  294.469709][T20136] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  294.576116][T20145] lo speed is unknown, defaulting to 1000
[  294.623319][T20157] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  294.669728][T20160] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6363'.
[  294.792787][T20175] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  294.950707][T20191] sd 0:0:1:0: device reset
[  295.178039][T20211] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6383'.
[  295.444856][T20240] vlan2: entered allmulticast mode
[  295.450175][T20240] dummy0: entered allmulticast mode
[  295.475808][T20242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6395'.
[  295.512532][T20249] FAULT_INJECTION: forcing a failure.
[  295.512532][T20249] name failslab, interval 1, probability 0, space 0, times 0
[  295.525368][T20249] CPU: 1 UID: 0 PID: 20249 Comm: syz.8.6398 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  295.525432][T20249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  295.525449][T20249] Call Trace:
[  295.525457][T20249]  <TASK>
[  295.525467][T20249]  __dump_stack+0x1d/0x30
[  295.525495][T20249]  dump_stack_lvl+0xe8/0x140
[  295.525547][T20249]  dump_stack+0x15/0x1b
[  295.525568][T20249]  should_fail_ex+0x265/0x280
[  295.525595][T20249]  should_failslab+0x8c/0xb0
[  295.525626][T20249]  kmem_cache_alloc_noprof+0x50/0x310
[  295.525684][T20249]  ? getname_flags+0x80/0x3b0
[  295.525741][T20249]  ? fput+0x8f/0xc0
[  295.525796][T20249]  getname_flags+0x80/0x3b0
[  295.525825][T20249]  __x64_sys_unlinkat+0x70/0xb0
[  295.525848][T20249]  x64_sys_call+0x2ede/0x2ff0
[  295.525871][T20249]  do_syscall_64+0xd2/0x200
[  295.525948][T20249]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  295.525973][T20249]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  295.525998][T20249]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.526085][T20249] RIP: 0033:0x7f4e3b6debe9
[  295.526100][T20249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  295.526119][T20249] RSP: 002b:00007f4e3a13f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107
[  295.526138][T20249] RAX: ffffffffffffffda RBX: 00007f4e3b905fa0 RCX: 00007f4e3b6debe9
[  295.526151][T20249] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c
[  295.526178][T20249] RBP: 00007f4e3a13f090 R08: 0000000000000000 R09: 0000000000000000
[  295.526191][T20249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  295.526203][T20249] R13: 00007f4e3b906038 R14: 00007f4e3b905fa0 R15: 00007ffcfcd0b4c8
[  295.526223][T20249]  </TASK>
[  295.709809][T20254] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6401'.
[  295.720658][T20254] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6401'.
[  295.731263][T20254] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6401'.
[  295.740457][T20254] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6401'.
[  295.877831][T20275] FAULT_INJECTION: forcing a failure.
[  295.877831][T20275] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  295.891176][T20275] CPU: 1 UID: 0 PID: 20275 Comm: syz.0.6411 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  295.891209][T20275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  295.891253][T20275] Call Trace:
[  295.891260][T20275]  <TASK>
[  295.891268][T20275]  __dump_stack+0x1d/0x30
[  295.891291][T20275]  dump_stack_lvl+0xe8/0x140
[  295.891313][T20275]  dump_stack+0x15/0x1b
[  295.891330][T20275]  should_fail_ex+0x265/0x280
[  295.891355][T20275]  should_fail+0xb/0x20
[  295.891373][T20275]  should_fail_usercopy+0x1a/0x20
[  295.891397][T20275]  _copy_from_user+0x1c/0xb0
[  295.891500][T20275]  ___sys_sendmsg+0xc1/0x1d0
[  295.891574][T20275]  __x64_sys_sendmsg+0xd4/0x160
[  295.891605][T20275]  x64_sys_call+0x191e/0x2ff0
[  295.891629][T20275]  do_syscall_64+0xd2/0x200
[  295.891656][T20275]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  295.891733][T20275]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  295.891764][T20275]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.891786][T20275] RIP: 0033:0x7fe22042ebe9
[  295.891802][T20275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  295.891823][T20275] RSP: 002b:00007fe21ee8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  295.891868][T20275] RAX: ffffffffffffffda RBX: 00007fe220655fa0 RCX: 00007fe22042ebe9
[  295.891881][T20275] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003
[  295.891909][T20275] RBP: 00007fe21ee8f090 R08: 0000000000000000 R09: 0000000000000000
[  295.891921][T20275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  295.891934][T20275] R13: 00007fe220656038 R14: 00007fe220655fa0 R15: 00007fffb6a375d8
[  295.891959][T20275]  </TASK>
[  296.081484][T20277] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6413'.
[  296.151732][T20289] tbf_change: 4 callbacks suppressed
[  296.151748][T20289] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  296.171536][T20291] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  296.298925][T20314] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6427'.
[  296.464545][T20333] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  296.694430][T20364] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  296.787018][T20384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  296.799471][T20384] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  296.879606][T20399] capability: warning: `syz.2.6464' uses 32-bit capabilities (legacy support in use)
[  296.895938][T20403] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  297.125283][T20438] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  297.179597][T20444] FAULT_INJECTION: forcing a failure.
[  297.179597][T20444] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  297.192881][T20444] CPU: 1 UID: 0 PID: 20444 Comm: syz.7.6486 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  297.192951][T20444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  297.192964][T20444] Call Trace:
[  297.192970][T20444]  <TASK>
[  297.192979][T20444]  __dump_stack+0x1d/0x30
[  297.193041][T20444]  dump_stack_lvl+0xe8/0x140
[  297.193066][T20444]  dump_stack+0x15/0x1b
[  297.193086][T20444]  should_fail_ex+0x265/0x280
[  297.193112][T20444]  should_fail+0xb/0x20
[  297.193243][T20444]  should_fail_usercopy+0x1a/0x20
[  297.193266][T20444]  _copy_from_user+0x1c/0xb0
[  297.193294][T20444]  ___sys_sendmsg+0xc1/0x1d0
[  297.193400][T20444]  __x64_sys_sendmsg+0xd4/0x160
[  297.193511][T20444]  x64_sys_call+0x191e/0x2ff0
[  297.193539][T20444]  do_syscall_64+0xd2/0x200
[  297.193566][T20444]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  297.193593][T20444]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  297.193623][T20444]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  297.193691][T20444] RIP: 0033:0x7fc6081febe9
[  297.193710][T20444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  297.193734][T20444] RSP: 002b:00007fc606c5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  297.193760][T20444] RAX: ffffffffffffffda RBX: 00007fc608425fa0 RCX: 00007fc6081febe9
[  297.193777][T20444] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003
[  297.193847][T20444] RBP: 00007fc606c5f090 R08: 0000000000000000 R09: 0000000000000000
[  297.193868][T20444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  297.193883][T20444] R13: 00007fc608426038 R14: 00007fc608425fa0 R15: 00007ffc9be79348
[  297.193910][T20444]  </TASK>
[  297.377275][T20448] ==================================================================
[  297.385416][T20448] BUG: KCSAN: data-race in mas_replace_node / mas_state_walk
[  297.392907][T20448] 
[  297.395245][T20448] write to 0xffff88810c859e00 of 8 bytes by task 20447 on cpu 1:
[  297.402966][T20448]  mas_replace_node+0x1a6/0x410
[  297.407843][T20448]  mas_wr_store_entry+0x2406/0x2b50
[  297.413193][T20448]  mas_store_prealloc+0x74d/0x9e0
[  297.418238][T20448]  vma_iter_store_new+0x1c5/0x200
[  297.423428][T20448]  vma_complete+0x125/0x580
[  297.427943][T20448]  __split_vma+0x591/0x650
[  297.432371][T20448]  vma_modify+0x21e/0xc80
[  297.436726][T20448]  vma_modify_flags+0x101/0x130
[  297.441601][T20448]  mprotect_fixup+0x2cc/0x570
[  297.446299][T20448]  do_mprotect_pkey+0x6d6/0x980
[  297.451175][T20448]  __x64_sys_mprotect+0x48/0x60
[  297.456183][T20448]  x64_sys_call+0x274e/0x2ff0
[  297.460950][T20448]  do_syscall_64+0xd2/0x200
[  297.465652][T20448]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  297.471675][T20448] 
[  297.474013][T20448] read to 0xffff88810c859e00 of 8 bytes by task 20448 on cpu 0:
[  297.481740][T20448]  mas_state_walk+0x485/0x650
[  297.486617][T20448]  mas_walk+0x60/0x150
[  297.490796][T20448]  lock_vma_under_rcu+0x8d/0x160
[  297.496035][T20448]  do_user_addr_fault+0x233/0x1090
[  297.501216][T20448]  exc_page_fault+0x62/0xa0
[  297.505919][T20448]  asm_exc_page_fault+0x26/0x30
[  297.510893][T20448] 
[  297.513408][T20448] value changed: 0xffff8881040c3b0e -> 0xffff88810c859e00
[  297.520620][T20448] 
[  297.522955][T20448] Reported by Kernel Concurrency Sanitizer on:
[  297.529117][T20448] CPU: 0 UID: 0 PID: 20448 Comm: syz.0.6487 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  297.539117][T20448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  297.549531][T20448] ==================================================================
[  297.565648][   T29] kauditd_printk_skb: 281 callbacks suppressed
[  297.565667][   T29] audit: type=1400 audit(1755640122.334:1541): avc:  denied  { module_request } for  pid=20451 comm="syz.1.6489" kmod="bpf_preload" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  302.001092][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  305.192078][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog