last executing test programs:

6m15.846450759s ago: executing program 32 (id=1668):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x3}, 0x200, 0x0, 0x0, 0x7, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
r3 = epoll_create1(0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000a0601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070006000000060004404e2100000c000280"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18)
r7 = socket$packet(0x11, 0x3, 0x300)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000040)=r8, 0x4)
r9 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, 0x0)
r10 = semget$private(0x0, 0x6, 0x40d)
semtimedop(r10, &(0x7f00000005c0)=[{0x2, 0x4, 0x1800}, {0x0, 0x6, 0x800}], 0x2, 0x0)
semop(r10, &(0x7f00000000c0)=[{0x2}], 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES64=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014})
close_range(r2, 0xffffffffffffffff, 0x0)

6m10.951845345s ago: executing program 33 (id=1778):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%ps    \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xea, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='kmem_cache_free\x00', r1, 0x0, 0x2000}, 0x18)
r2 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xff00000000000000, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)

6m9.507199067s ago: executing program 34 (id=1795):
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000000c0)='\t&0&&\t|\xdc6\xeb\xfe\xa2\xa5\xd4\xa85\x00=\xd9vB8\xe87\xd3&j?\x16_~EPbK\x06\xac\xfc\xf5\x03U\xc3\x9f\xcd\xcb$\xfe\xb5]\xa0\xf2\xdb=\x96\xb3\x99\xab\xd8^{\xdf\xd9\x85\xad\xcf\xb4\xd9$\xe9\xc7\xc4\xc9U\x15r\xe6c\xbd/,I\x00Duo\xd4@\x8d`\x86\\\xcd\x049\xdb&\xa4\x1d\x9a:!CA\x00\x00\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000180)=ANY=[@ANYBLOB="018e65c6847443f686000000"])
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18)
membarrier(0x8, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
listen(0xffffffffffffffff, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)

6m2.020690082s ago: executing program 35 (id=1905):
creat(&(0x7f00000000c0)='./file0\x00', 0xce)
pipe2$9p(&(0x7f0000000000), 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r1}, 0x18)
linkat(0xffffffffffffffff, &(0x7f0000000440)='./file0/file0\x00', 0xffffffffffffffff, 0x0, 0x1400)
mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0xd0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000002, 0x6031, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0xfdef, &(0x7f0000001c80)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}}}}}}}, 0x0)

6m1.495216661s ago: executing program 36 (id=1919):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10)

6m1.109706477s ago: executing program 37 (id=1926):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0x2}, 0x18)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$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")
r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x94)
ftruncate(r2, 0x2007ffc)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x80000000e)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
getresuid(&(0x7f00000003c0)=<r4=>0x0, &(0x7f0000000400), 0x0)
mount$9p_rdma(&(0x7f00000002c0), 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[], [{@fowner_gt={'fowner>', r4}}]}})
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2, &(0x7f0000000a00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',privport,aname=kfree\x00,aname=\x00,rootcontext=sysadm_u,smackfshat=@*,obj_role=\x00,uid>', @ANYRESDEC=r4, @ANYBLOB="2c6f622a5f7473b5aa97823447d7066be7fecf3421f96b25723d002c00"])
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0xe}, @dev={0xfe, 0x80, '\x00', 0x2f}, @remote, 0x8, 0x3, 0x0, 0x500, 0x400, 0xd30112})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r8 = socket$inet(0x2, 0xa, 0x1)
ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e21, @rand_addr=0x640100fe}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}, {0x2, 0x4e22, @local}, 0x114, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0xffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000024463923cb7700bf000000207b1af8d900000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100"/83, @ANYRES32=r7, @ANYBLOB="0500000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NL80211_CMD_DISASSOCIATE(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000800)=ANY=[@ANYRES16=r6, @ANYBLOB="00042bbd7000fbdbdf25280000000a00340002020202020200000a00340001010101010100000a003427041868755470c721430001010101010100005e79940e38da6c93663838f8e7"], 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x2000c080)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000300)={0x5, [0x0, 0x0, <r10=>0x0, 0x0, 0x0]}, &(0x7f0000000340)=0x18)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000380)={r10, 0xa43}, &(0x7f00000003c0)=0x8)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000740)={r10, 0x62c2}, &(0x7f0000000780)=0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
close(r11)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xf, 0xc, &(0x7f00000034c0))
chroot(0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x28, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x3d}}}}}, 0x28}}, 0x4000054)

5m58.789277613s ago: executing program 38 (id=1941):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x1e, 0x5, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x1c)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = dup(r1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x6, @remote, 0x6}], 0x1c)
connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e24, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000080f1000000000000063000000000000009500050000000000d1449c003b097606b153e6dc6de837ae96a815df705fef53cf0ff5e7bdc3bd95cfc0d4800fae421c84b7988e61ed7df452e4b7e139044387aa"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10, 0x0, r2}, 0x94)
sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043)
listen(r0, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100)
r3 = syz_io_uring_setup(0xd6, &(0x7f0000000480)={0x0, 0x6778, 0x2000, 0x22, 0x191, 0x0, r2}, &(0x7f0000000080), &(0x7f0000000100)=<r4=>0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000400000008000000de29d3dc541bc138b1c80eff010000e880000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r4], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x29081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x0, 0x509, &(0x7f0000000ac0)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40))
gettid()
r7 = socket$netlink(0x10, 0x3, 0x6)
getpeername$packet(r3, &(0x7f00000002c0), &(0x7f0000000580)=0x14)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="0000fdffffffffdbdf250b00000008000300", @ANYRES32=0x0, @ANYBLOB="17dadf595315d995e79cf9ecfa2a4dfc3894254a27d36a63eb50786ff803e882a25ca043acb385be1e4a608f6d68408a7769738320e05c5c8951041b55295d6f9405e7ebf870"], 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x0)
ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000000)='bridge0\x00')
syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaa0008004500001c0000000000029078ac1e01010713ac1414221100907800000001"], 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000280)={'wpan0\x00'})

5m52.976047572s ago: executing program 39 (id=1999):
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r1=>r0, {r0}}, './file0\x00'})
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, 0x1403, 0x4, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dvmrp0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20042081}, 0x40)
r2 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000040)={0x30000001})
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0xe, 0x0, 0x0, 0xe, 0x4}]}, {0x0, [0x2e, 0x30, 0x7a8037ff8761d0b]}}, &(0x7f0000000340)=""/191, 0x2d, 0xbf, 0x1, 0x3, 0x10000}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, r3}, 0x94)
add_key$keyring(&(0x7f0000000780), 0xfffffffffffffffe, 0x0, 0x0, 0x0)
r4 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4)
r5 = dup(r4)
preadv2(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x3700, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000000840)={[{@dioread_lock}, {@noblock_validity}, {@inlinecrypt}, {@jqfmt_vfsold}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@journal_checksum}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nobh}, {@grpid}], [], 0x2c}, 0x84, 0x4d8, &(0x7f0000000900)="$eJzs3MtvG9UaAPBvJs2jz6S91b23D6ihICIKSZMW6IIFIJC6ASHBoixDGqpSt0VNkGhV0RShskT8BcASCYkVG1YgIQRsALGFPUKqUDctLJDR2DOJ3diOnbQJrX8/aexzZs48vjNzxjM+9gTQs0rZSxKxJSJ+iYjhWraxQKn2duPaxek/r12cTqJSeemPpFru+rWL00XRYr7NeWY0jUjfTWJPk/XOnr9waqpcnjmX58fnTr8xPnv+wqMnT0+dmDkxc2byyJHDhyaeeHzysY7iuLTM9Cyu67vfPrt319FXPnh+uhKvfvdptr1b8un1cdSMdLTedkpRikpucexA9fXBVS/932VrRAzm6WTDOm8MHeuLiGx39Vfb/3D0xeLOG47n3lnIfL1OGwjcNtln0/YlY/vy93Th8wu4GyXaOPSo4hM/u/8thrW8/lhvV5/OXmeq8d/Ihx9eqNVNmt3LjtTu2PtazP/fJuOGFpOV4WXWvyUijs3/9WE2RNPvIdpIOi4JALDgy+z655Fm139pw7XNtrwPZSQiDkTEjoj4T0TsjHShzP8i4v9drr90U37p9c9PG7tcZFey678n876tYqhNKeJKFnJbq/H3J6+dLM8czOtkNPoHs/xEm3V89ezP77eaVqq7/suGbP3FtWC+Hb9vGGyc5/jU3NQqQm5w9XIksaFZ/MlCT0BWA7siYvcKlp/V2cmHP9mbpbdtXjp9+fjbuAX9TJWPIx6q7f/5uCn+QlJbU6v+yfGhKM8cHC+OiqW+//HKi/X5/rp0Q/xDncU0tNJgm7h6OWJT0+M/j79oBkV/7Wz367jy63st72mW7v8kjs3Xl8iP/42L1ZYd/wPJy9X0QD7uram5uXMTEQP5iIbxk4tLK/JF+Sz+0f2N8dfui9PsHPf3R/l8eyIiO4jviYh7I2Jfvu33RcT9EbG/TfzfPvPA6+1raIXH/y2QxX+83f6PGEnq++tXkOg79c0Xrdbf2fnvcDU1mo+pP/8NtFhupxu42voDAACAO0Fa7YNO0rG6328XdsamtHx2du5AKd48c7zWVz0S/WnxTddw3fehE/l3w0V+8qb8oYjYXv2l0cZqfmz6bHnrOsUM1Gyua/+1c0Gajo3Vpv3W6kcvwN2jq360+h+dffb5rd8YYE35vyb0Lu0fepf2D71L+4fe1az9X4q4sQ6bAqwxn//Qu7R/6F3aP/Qu7R960tK/xOePW8nOCSv/y395x9HVPDHg9icqwyufPVpPmu9+gX2dFS6eftHxkjsrnES0CaddItL2ZQY639S1T6TLlnlquWrp7+qZGENNamNfnhiMiE6Xc2nNarU4QySeMgkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANzR/gkAAP//fHDiVg==")
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000001c0)={0x3ff, 0x1, 0x8401, 0x101, 0x2, 0x1, 0xed4f, 0x7ff}, 0x20)

5m52.283538813s ago: executing program 40 (id=2008):
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x2}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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")

5m48.776234957s ago: executing program 41 (id=2049):
keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, <r2=>0xffffffffffffffff}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10)
flistxattr(r2, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={<r4=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000200)='sys_enter\x00', r5, 0x0, 0xfffffffffffffffe}, 0x18)
sched_getattr(0x0, &(0x7f00000010c0)={0x38}, 0xbe, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90)
socket$netlink(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x7ef}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c)

5m44.101889589s ago: executing program 42 (id=2105):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x5}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x10000, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)

5m43.860738003s ago: executing program 43 (id=2111):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x1, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0xe}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4000)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

5m42.322117796s ago: executing program 44 (id=2123):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0x2}, 0x18)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$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")
r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x94)
ftruncate(r2, 0x2007ffc)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x80000000e)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
getresuid(&(0x7f00000003c0), &(0x7f0000000400), 0x0)
mount$9p_rdma(&(0x7f00000002c0), 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@common=@posixacl}, {@timeout={'timeout', 0x3d, 0xb}}]}})
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0xe}, @dev={0xfe, 0x80, '\x00', 0x2f}, @remote, 0x8, 0x3, 0x0, 0x500, 0x400, 0xd30112})
syz_genetlink_get_family_id$nl80211(0x0, r3)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r6 = socket$inet(0x2, 0xa, 0x1)
ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e21, @rand_addr=0x640100fe}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}, {0x2, 0x4e22, @local}, 0x114, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0xffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000024463923cb7700bf000000207b1af8d900000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100"/83, @ANYRES32=r5, @ANYBLOB="0500000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NL80211_CMD_DISASSOCIATE(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x2000c080)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0xa43}, 0x0)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000740)={0x0, 0x62c2}, &(0x7f0000000780)=0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
close(r8)

5m39.337205953s ago: executing program 45 (id=2151):
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040), 0xc)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
close(r0)

5m38.164957831s ago: executing program 46 (id=2169):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, 0xffffffffffffffff, 0x94eb2000)
perf_event_open(&(0x7f0000000500)={0x2, 0x84, 0x53, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbef, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x5)
syz_open_dev$loop(&(0x7f00000004c0), 0x1, 0x2)
fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000025c0), 0x0, 0x0, 0x2)
modify_ldt$write2(0x11, &(0x7f0000000000)={0x1, 0x20000000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1, <r1=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x1a, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000070000000000000080820000185b00000500000000000000000000001865000001000000000000000101000018490000f8ffffff000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000181a0000", @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='kfree\x00', r2}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
socket$kcm(0x10, 0x2, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2, &(0x7f0000002580)=[{0x803, 0x2, 0xfc, 0x2}, {0x3, 0x8, 0xa4, 0xff}]})
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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")
futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)

5m37.036494038s ago: executing program 47 (id=2180):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x25, &(0x7f00000000c0))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2})
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00')
pread64(r2, &(0x7f0000000300)=""/246, 0xf6, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, <r3=>0x0})
r4 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8}, r3, 0x0, 0xffffffffffffffff, 0x8)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000540)='(pu&00\t||')

5m33.224702447s ago: executing program 48 (id=2224):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r2, 0x0, 0x4ab}, 0x18)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0)

5m31.960009526s ago: executing program 49 (id=2241):
creat(&(0x7f00000000c0)='./file0\x00', 0xce)
pipe2$9p(&(0x7f0000000000), 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000050000000200"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18)
linkat(0xffffffffffffffff, &(0x7f0000000440)='./file0/file0\x00', 0xffffffffffffffff, 0x0, 0x1400)

5m31.795450479s ago: executing program 50 (id=2245):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={&(0x7f0000000180)="35a70f51bc", &(0x7f0000000040)=""/12, 0x0, &(0x7f00000005c0), 0x4, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000380)=@broute={'broute\x00', 0x5e04, 0x3, 0x90, [0x0, 0x0, 0x400000000400], 0x2, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x17b)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
r5 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10)
r6 = socket$packet(0x11, 0x2, 0x300)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18)
r7 = gettid()
r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x20100, 0x0)
read$ptp(r8, 0x0, 0x0)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, &(0x7f0000000580))
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=<r9=>0x0)
timer_settime(r9, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r10=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYRESHEX=r3, @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x8004)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)

5m31.660464981s ago: executing program 51 (id=2247):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]})
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000351000/0x2000)=nil)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
pread64(r2, &(0x7f0000002180)=""/4105, 0x1009, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x8000, 0xbfdfffbc}, &(0x7f0000000380)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
r7 = syz_io_uring_setup(0x1593, &(0x7f0000001900)={0x0, 0xe5dc, 0x8, 0x3, 0x2f0}, &(0x7f0000000280), &(0x7f0000002c00))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0}, 0xffffffffffffffee)
io_uring_setup(0x5, &(0x7f0000000040)={0x0, 0x3c1d, 0xc000, 0x3, 0x38})
io_uring_register$IORING_UNREGISTER_RING_FDS(r7, 0x15, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1)
io_uring_enter(r4, 0x32d7, 0x0, 0x46, 0x0, 0x0)
sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
shutdown(r3, 0x1)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x4c}}, 0x0)

5m30.540200098s ago: executing program 52 (id=2254):
creat(&(0x7f00000000c0)='./file0\x00', 0xce)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50)
syz_open_dev$evdev(0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18)
linkat(0xffffffffffffffff, &(0x7f0000000440)='./file0/file0\x00', 0xffffffffffffffff, 0x0, 0x1400)
mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0xd0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000002, 0x6031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15)
r3 = dup(r1)
syz_emit_ethernet(0xfdef, &(0x7f0000001c80)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}}}}}}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r5}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES64, @ANYRES16=r3])
socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0x3}, 0x18)
r8 = socket$kcm(0x2, 0x7, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000f10000000000000000000218010000202070250000000000202020db1af8ff00000000bfa1000000000000070c000000ffffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000400)='GPL\x00', 0x1, 0xe0, &(0x7f0000000440)=""/224, 0x0, 0x36}, 0x94)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0x3}, 0x8)
add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x3, 0x7ff0000, @dev={0xfe, 0x80, '\x00', 0x12}, 0xbdc}}, 0x6, 0x7}, 0x90)
sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)

5m13.278046905s ago: executing program 53 (id=2487):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19)
brk(0x7ff877c47fff)
readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYRES64=0x0, @ANYBLOB="0073bc927c00"/20, @ANYRES16=r0, @ANYRES32=r0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000040000000900000001"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x10)
r2 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x0, 0x800}, &(0x7f0000000240), &(0x7f0000000280))
io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)

5m12.776925922s ago: executing program 54 (id=2494):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000008c0)=0x2, 0x4)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r2 = io_uring_setup(0x5b42, &(0x7f0000000640)={0x0, 0xe6ab, 0x100, 0x103fc, 0x155})
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b)
sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'})

5m12.215385111s ago: executing program 55 (id=2500):
socket$kcm(0x10, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x80080, 0x0)
readahead(0xffffffffffffffff, 0x4, 0x0)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000040)={[{@noquota}]}, 0x1, 0x775, &(0x7f0000001180)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d)
write(r1, &(0x7f0000004200)='t', 0x1)
sendfile(r1, r0, 0x0, 0x7ffff000)

5m12.059914124s ago: executing program 4 (id=2505):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0)

5m12.059274054s ago: executing program 4 (id=2506):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xeffffb, 0x0, 0xfffffffd, 0x1}, 0x10)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904ff8000000020000000000400000800040001000000", 0x24)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000040000000000b703000000000000850000001b00000cb700000000000000950000000000c5804a202162fe4be184a3520e00ea2526a8b41bee9f4c8e945b78eccc0471392747e5cbeb32bb1eb77baea827efa9e6ce866909c2bedbc095e9f5d92d1b1ef407b771e11454405324306cdbf20aa872e0f2b5261ad54c372305b4924d7e0c0a2442f7ae1f968d1067f6e2cc6768c60f1eba16322100"/168], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20025, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
mkdir(&(0x7f0000000200)='./file0\x00', 0x80)
fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)

5m11.844006197s ago: executing program 4 (id=2508):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = io_uring_setup(0x5b42, &(0x7f0000000640)={0x0, 0xe6ab, 0x100, 0x103fc, 0x155})
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b)
sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

5m11.828021617s ago: executing program 56 (id=2507):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x4ab}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0)

5m10.98119642s ago: executing program 4 (id=2510):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x10000, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)

5m10.96209888s ago: executing program 4 (id=2511):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ppoll(&(0x7f0000000000)=[{r0, 0x211}], 0x1, 0x0, 0x0, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000290000000400"/24], 0x18}}], 0x1, 0x4000000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94)

5m10.740834934s ago: executing program 4 (id=2512):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000e00000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10)
lsm_list_modules(&(0x7f0000002600)=[0x0, 0x0], &(0x7f0000000000)=0x10, 0x0)

5m10.710429574s ago: executing program 57 (id=2512):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000e00000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10)
lsm_list_modules(&(0x7f0000002600)=[0x0, 0x0], &(0x7f0000000000)=0x10, 0x0)

5m6.989632392s ago: executing program 1 (id=2527):
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f00000000c0)=0x4)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x67)
close(r1)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd3, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
msgsnd(0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="010000"], 0x8, 0x0)
msgctl$IPC_INFO(0x0, 0x3, 0x0)
accept$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c)
syz_open_dev$usbfs(0x0, 0x76, 0x101301)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x100000001}, 0x18)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x41}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010)

5m6.904593663s ago: executing program 1 (id=2528):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = socket$inet(0x2, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00'}, 0x10)
setsockopt$inet_msfilter(r3, 0x0, 0x29, 0x0, 0x1c)

5m6.666933757s ago: executing program 1 (id=2530):
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
readv(r5, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000480)=0x8)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f00000000c0)={r8, 0x4, 0x9, 0x2d, 0x3, 0x101}, 0x14)
r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00')
pread64(r9, &(0x7f000001a240)=""/102400, 0x19000, 0x41e)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x14, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x8000)

5m6.544835809s ago: executing program 1 (id=2533):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x10000, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)

5m6.48984218s ago: executing program 1 (id=2535):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x4ab}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0)

5m5.79295888s ago: executing program 1 (id=2545):
socket$key(0xf, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]})
brk(0x400000ffc000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cpuset\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0xc, &(0x7f00000003c0)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0)

5m5.79037646s ago: executing program 58 (id=2545):
socket$key(0xf, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]})
brk(0x400000ffc000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cpuset\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0xc, &(0x7f00000003c0)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0)

1m58.373915633s ago: executing program 8 (id=5387):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

1m58.292167534s ago: executing program 8 (id=5388):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0xfff1, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x60, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xc, 0xc89f, 0xffff5ef5, 0x0, 0x19, 0x3}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x803}, 0x20004004)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="7961000000a00bfef5007e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000f40)={'filter\x00', 0x10, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e5fce0c960bc", @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @broadcast, @loopback, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x2, 0x0}, @generic={0x66, 0x0, 0x0, 0x0, 0x2}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
creat(&(0x7f0000000580)='./file0\x00', 0x30)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000380))
creat(&(0x7f0000000200)='./file0\x00', 0x90)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x42, 0x1ff)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)

1m58.040723238s ago: executing program 8 (id=5389):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)

1m57.958866379s ago: executing program 8 (id=5390):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000e40)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M")
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000044494"], 0x48)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0xfff6, 0x3, 0xbfff, 0x0, "ec28a144f13d7607"})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x44)
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
unlinkat(0xffffffffffffff9c, 0x0, 0x200)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0)

1m57.083469063s ago: executing program 8 (id=5399):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000fc0)={'bridge_slave_0\x00', <r1=>0x0})
socket$netlink(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000980)={'syztnl0\x00', &(0x7f00000008c0)={'gretap0\x00', r1, 0x10, 0x1, 0x10001, 0x9, {{0x1a, 0x4, 0x2, 0x4, 0x68, 0x65, 0x0, 0x7, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x19}, {[@timestamp_addr={0x44, 0x24, 0xdc, 0x1, 0xe, [{@rand_addr=0x64010101, 0x4}, {@loopback, 0x71}, {@rand_addr=0x64010100, 0x5}, {@loopback, 0x3}]}, @ssrr={0x89, 0x23, 0xda, [@dev={0xac, 0x14, 0x14, 0x21}, @remote, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @local, @empty]}, @rr={0x7, 0xb, 0x92, [@dev={0xac, 0x14, 0x14, 0x41}, @empty]}, @noop, @noop]}}}}})
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1000400, &(0x7f00000000c0), 0x6, 0x588, &(0x7f0000000300)="$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")

1m56.840511806s ago: executing program 8 (id=5404):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000fc0)={'bridge_slave_0\x00', <r1=>0x0})
socket$netlink(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a0000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000980)={'syztnl0\x00', &(0x7f00000008c0)={'gretap0\x00', r1, 0x10, 0x1, 0x10001, 0x9, {{0x1a, 0x4, 0x2, 0x4, 0x68, 0x65, 0x0, 0x7, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x19}, {[@timestamp_addr={0x44, 0x24, 0xdc, 0x1, 0xe, [{@rand_addr=0x64010101, 0x4}, {@loopback, 0x71}, {@rand_addr=0x64010100, 0x5}, {@loopback, 0x3}]}, @ssrr={0x89, 0x23, 0xda, [@dev={0xac, 0x14, 0x14, 0x21}, @remote, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @local, @empty]}, @rr={0x7, 0xb, 0x92, [@dev={0xac, 0x14, 0x14, 0x41}, @empty]}, @noop, @noop]}}}}})
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1000400, &(0x7f00000000c0), 0x6, 0x588, &(0x7f0000000300)="$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")

1m56.818593597s ago: executing program 59 (id=5404):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000fc0)={'bridge_slave_0\x00', <r1=>0x0})
socket$netlink(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a0000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000980)={'syztnl0\x00', &(0x7f00000008c0)={'gretap0\x00', r1, 0x10, 0x1, 0x10001, 0x9, {{0x1a, 0x4, 0x2, 0x4, 0x68, 0x65, 0x0, 0x7, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x19}, {[@timestamp_addr={0x44, 0x24, 0xdc, 0x1, 0xe, [{@rand_addr=0x64010101, 0x4}, {@loopback, 0x71}, {@rand_addr=0x64010100, 0x5}, {@loopback, 0x3}]}, @ssrr={0x89, 0x23, 0xda, [@dev={0xac, 0x14, 0x14, 0x21}, @remote, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @local, @empty]}, @rr={0x7, 0xb, 0x92, [@dev={0xac, 0x14, 0x14, 0x41}, @empty]}, @noop, @noop]}}}}})
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1000400, &(0x7f00000000c0), 0x6, 0x588, &(0x7f0000000300)="$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")

51.901187639s ago: executing program 3 (id=6444):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x80000000000000}, 0x18)
pipe2(&(0x7f00000006c0), 0x0)
syz_clone3(&(0x7f0000000580)={0x8000000, 0x0, 0x0, 0x0, {0x4}, &(0x7f00000002c0), 0x0, 0x0, 0x0}, 0x58)
r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r1, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000140)='id:cb2e\x15i\xee\x0ewB;!\x90\x04.\xf6{_\x04\x120\xcb\xec\x92\x00\xd1a\xf6\x85?\x97!\x13\x1eO\x86p\xbb\xe680P\xd3\x9d\xfa\x03\xe9\xb3\x9bG\xe3\xb1n\xe9|\x7f\x1bokR\x96\xdb\v\xf4]\x01D.\x05\xc3\xaf\xf8a QXS\xc2\r')

51.881742399s ago: executing program 3 (id=6445):
socket$unix(0x1, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_LINK_CREATE(0x15, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
getpid()
timer_create(0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x1, 0x50d, &(0x7f0000000200)="$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")

50.020464648s ago: executing program 3 (id=6463):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="a90303000000000000003200000008004001", @ANYRES32=0x0, @ANYBLOB="829513ee34bdbd2155262991abad5e2f01c04b6bdec60dd30b38f86a7c783945c05406bb253e9009b53fcb6f0c0af3087978a925aceb331952d2827ac99340507f6ff23de5e89eedd7a9c3650b80cbf373c01de3995aaabb4cdd59adbbe74926c7e3739a8d46ec3045c2"], 0x1c}}, 0x4004050)

49.936946569s ago: executing program 3 (id=6465):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
pipe(&(0x7f0000000080))
utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x40, 0xfff})
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x7}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000002c0)="fb", 0x1}], 0x1}}], 0x1, 0x4400c800)

49.692867882s ago: executing program 3 (id=6470):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0xfffffffd}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
close(r0)

49.416607397s ago: executing program 3 (id=6477):
socket$netlink(0x10, 0x3, 0x0)
socket$phonet(0x23, 0x2, 0x1)
syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=<r0=>0x0, &(0x7f0000000140))
syz_io_uring_submit(r0, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x800040, &(0x7f0000000340), 0x1, 0x597, &(0x7f0000000b80)="$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")
pwrite64(0xffffffffffffffff, &(0x7f0000000140)='Q', 0x1, 0x200980)
socket$packet(0x11, 0xa, 0x300)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0xa, 0x300)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4800)
vmsplice(r2, &(0x7f00000005c0)=[{&(0x7f0000001cc0)="b70cdbd771882612c450d694c9dd7d7f28d237e84e2780ca6428d132e03f188fff6bd9f85ead7e68f90830db9295022700491841f4a15a000aa4e29ac23601041ec521aa0ea8044f23feb74151693f228ba89f0a43385617bc7930f30a52ca91d02c64bd39d3d581abe9089b2284f876f9c58c124aba7a28700efcb0588ff4ab54a62c0c64fd577d85f5f753ec15281cf73fc37442b0a5ca4a1818cb01590d6415b1e9fda6c7d63cd293d7cc7ca5581041a2736e95b9b0322880b5fd7f27c0d4a59df8101b755fd6cc495963381c8a95d5d605b8ef4800b47091c8749f9e8e9fce163e46db0f7c0e4d0d3a621e3c999453e95aaa56090f220b220c50b31b9d6af722477ab1cda6d561156d85c658a3cd42d777314d154bf31bb61918ac7de8bfad7a5825be505af82806130e8dd03816b86086cc3361bf3a2a0cf6c18b7c84503477660ef5a0bf92d8169c43df1d7bb140652c799a4ac292b94fcea7f0c74413791879104e2bc9b414eda6c74f3625299f67d03e3ef58eeae5ca5fb029005ffa0fe23fb541bc24a57e9c6d8169702998273789ee8c9f08132ab9f76c02a6696c3ad68bf7a772d8be6b1840cfad2184edcf10bd5620f51657239e8eb49b8e77c1483dcc3dc04aeb6cae2922af4be346d52f2983dd5330cbef40b3207432ea6d2a6d2ffb0c3440c78add8395da089aa80e21d8692b16582edea583b73266fd1ab37abc02aa89310ed72a827153f1cbba0f76147a09977724706fdcd68ac168ceb433eba816f55bb5069924c0a6c59b1116e27de7938b835c467dbd9be1843913748e5a2e6f6621bf4944045d82b5124d23fa1d87e780b54a6955a51e47fbf36432be1b3d9d01c05d86e390e497850600000000000000cef62edce520860667c5259478602febbc5e87f216a6f1452b285f44282333569cbd2f49613730b86a74485e49e1979690ee2c11e1fb49d642c9f515d9e0cf30fe8995379b0b4b2177b2541a34cef72af676c2402b3ab03993047186d45016f83a735b7babda7b3e408f9a7b5c36e7daaaad51e437060c8a5a07646a31a43ebdda0b12a3f64f963315febebf0ad610f2ec9500717c4f33d8bf0e5b55ed2a976339643658df80f07bb29f5fac6f25957ef64ef1bac93f0ea64bfea48b38a4985ff610259762996044543bdf2c", 0x341}], 0x1, 0x0)
fcntl$setpipe(r2, 0x407, 0x6)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0)
open(0x0, 0x1a9000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff)
ftruncate(0xffffffffffffffff, 0xf09)

49.413540807s ago: executing program 60 (id=6477):
socket$netlink(0x10, 0x3, 0x0)
socket$phonet(0x23, 0x2, 0x1)
syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=<r0=>0x0, &(0x7f0000000140))
syz_io_uring_submit(r0, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x800040, &(0x7f0000000340), 0x1, 0x597, &(0x7f0000000b80)="$eJzs3U1sG2UaAOB3xvH2L9t0pV1pd9VDtYtUpKpO0h8onNorolKlHpC4lMhxoyhOHMUONFEO6b1C9IAA9VJucOAI4sABcUHiwpULiDNSRSOQmh7AyH9pm9jBKXWdxs8jjT3ffON5v2/G73hmNCMHMLCO1V7SiP9ExKUkYuShuqFoVh5rzLe+tpK/v7aST6JavfxzEklE3FtbybfmT5rvhyJiNSL+HRFfZSNOpFvjlpeWZyaKxcJCszxamZ0fLS8tn5yenZgqTBXmTr/40tlzZ86Onxrv3Pjszvp644ebb9/49pXbNz/+5Ohq/t2JJM7HcLPu4X48SY11ko3zm6af6UWwPkr63QAeS6aZ57VU+leMRKaZ9e1UR55q04Aeq+6LqO5Esrqj2YHdLNlZ/gN7Rus4oHb+2xoeOUDI9Pb4486FxglILe56c2jUDDWuTcT++rnJwV+SR85MauebR3rbNAbA6vWIGBsa2vr9T5rfv8c39iQaSE99eaGxobZu/3Rj/xNt9j/DrWunf1Fr/7e+Zf/3IH6mw/7vUpcxfnv9xw86xr8e8d+28ZON+Emb+GlEvNFl/FuvfX6uU131w4jj0T5+S7L99eHRq9PFwljjtW2ML44ffXm7/h/sEL9xzXZ//Wem3fqf77L/n3396f9Wt4n//P+33/7t1v+BiHiny/j/uPfRq53q7lxP7taOAna6/WvTbncZ/4Xzx77vUHWgy0UAAAAAAAAAAABtpPV72ZI0tzGeprlc4xnef8bBtFgqV05cLS3OTTbueTsS2bR1p9VIo5zUyuPN+3Fb5VObyqdb9xFnDtTLuXypONnnvgMAAAAAAAAAAAAAAAAAAMBucWjT8/+/ZurP/2/+u2pgr+r8l9/AXif/YXA9mv9JxL6+NQV4yvz+w8Cqyn8YXPIfBpf8h8El/2FwyX8YXPIfBpf8BwAAAAAAAAAAAAAAAAAAAAAAAACAnrh08WJtqN5fW8nXypNDS4szpTdPThbKM7nZxXwuX1qYz02VSlPFQi5fmv2z5RVLpfmxmFu8NloplCuj5aXlK7OlxbnKlenZianClUL2qfQKAAAAAAAAAAAAAAAAAAAAni3D9SFJcxGR1sfTNJeL+HtEHIlscnW6WBiLiMMR8V0mu69WHu93owEAAAAAAAAAAAAAAAAAAGCPKS8tz0wUi4WFARkZ2jLlm84zR8Tqk21GbYk7/lS2ua12yzp81kYObz9PJvrewt040ucdEwAAAAAAAAAAAAAAAAAADKAHD/12+4nfe9sgAAAAAAAAAAAAAAAAAAAAGEjpT0lE1IbjI88Nb679W7Keqb9HxFu3Lr93baJSWRivTb+7Mb3yfnP6qX60H+hWK09beQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8UF5anpkoFgsLPRzpdx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHscfAQAA//+aXtbd")
pwrite64(0xffffffffffffffff, &(0x7f0000000140)='Q', 0x1, 0x200980)
socket$packet(0x11, 0xa, 0x300)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0xa, 0x300)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4800)
vmsplice(r2, &(0x7f00000005c0)=[{&(0x7f0000001cc0)="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", 0x341}], 0x1, 0x0)
fcntl$setpipe(r2, 0x407, 0x6)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0)
open(0x0, 0x1a9000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff)
ftruncate(0xffffffffffffffff, 0xf09)

10.735907204s ago: executing program 7 (id=7370):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3], 0x1c}}, 0x4004050)

10.724891844s ago: executing program 7 (id=7372):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffb, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x50)
fspick(0xffffffffffffff9c, 0x0, 0x1)
writev(0xffffffffffffffff, &(0x7f00000025c0)=[{0x0}], 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x12, 0x60a, 0x1c0, 0x202, 0x320, 0x2e8, 0x2e8, 0x320, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @private}, [0x0, 0x0, 0x0, 0xff000000], [], 'veth1_to_bond\x00', 'geneve1\x00', {}, {}, 0x3c}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x6b}}, @common=@icmp6={{0x28}, {0xb, "52e1"}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc2, 0x8, 0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x13, 0x40, 0x0, 0x2, 'pptp\x00', 'syz0\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0xf5, 0xfffff010}, {0x20, 0x0, 0x0, 0xfbfff00c}, {0x6}]}, 0x10)
sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x63, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0xfff7, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_clone3(&(0x7f0000000280)={0x80000000, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x58)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00')
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file0\x00', 0x101002, 0x88)
r5 = syz_io_uring_complete(0x0)
clock_gettime(0x0, &(0x7f0000001000)={<r6=>0x0, <r7=>0x0})
recvmmsg(r5, &(0x7f0000000f80)=[{{&(0x7f00000005c0)=@x25, 0x80, &(0x7f0000000bc0)=[{&(0x7f00000006c0)=""/98, 0x62}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000000740)=""/165, 0xa5}, {&(0x7f0000000640)=""/42, 0x2a}, {&(0x7f0000000800)=""/239, 0xef}, {&(0x7f0000000900)=""/81, 0x51}, {&(0x7f0000000980)=""/171, 0xab}, {&(0x7f0000000ac0)=""/213, 0xd5}], 0x8, &(0x7f0000000c40)=""/209, 0xd1}, 0x56a5}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000a40)=""/40, 0x28}, {&(0x7f0000000d40)=""/253, 0xfd}], 0x2, &(0x7f0000000ec0)=""/180, 0xb4}, 0x7}], 0x2, 0x10001, &(0x7f0000001040)={r6, r7+10000000})
unlinkat(r4, &(0x7f0000000580)='./file0\x00', 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='f2fs_sync_file_exit\x00', r8}, 0x18)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000500)=@filename='./file0\x00', 0x0, &(0x7f0000000680)='./file0/../file0\x00')

10.573515987s ago: executing program 7 (id=7378):
creat(&(0x7f00000000c0)='./file0\x00', 0x4e)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5)
write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5)

10.525657447s ago: executing program 7 (id=7381):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
quotactl$Q_QUOTAON(0xffffffff80000200, 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=<r1=>r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe2$9p(&(0x7f0000001900), 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3, &(0x7f0000000280)=0x617, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5}, &(0x7f0000000800), &(0x7f0000000840)=r6}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r7}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x5, <r8=>0x0}, 0x8)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r9, 0x3)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f00000004c0)={[{@noload}, {@noblock_validity}, {@discard}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}, 0x0}, {@nouid32}, {@noload}, {@journal_checksum}, {@mblk_io_submit}, {@minixdf}, {@usrjquota}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@nobarrier}, {@data_writeback}, {@resgid}], [{@audit}, {@uid_lt={'uid<', 0xee01}}], 0x2c}, 0xa, 0x516, &(0x7f0000000f80)="$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")
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r3, @ANYRESDEC, @ANYRESOCT=r9, @ANYRES16=r1, @ANYRESHEX=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setaffinity(0x0, 0x0, 0x0)
r11 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x30, 0x5, 0x53, 0xfffff034}, {0x6, 0x4a, 0x6, 0x6}]}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0x20, 0x1c, 0x67, 0x0, 0x14, 0x2, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x32}}, {0x15, 0x3, 0x0, @multicast1}}}}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r10}, 0x10)
openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r12)

10.112872014s ago: executing program 7 (id=7386):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x10)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x200, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0x1, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80001, {0x0, 0x0, 0x0, r5, {}, {0x10, 0xb}, {0x3, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x27d05d94437b35a5}, 0x24008080)

9.560819192s ago: executing program 7 (id=7395):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff}, 0x0, 0x1}}, @TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1ff, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffff1d8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xa97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0xfffffffd, 0x400000, 0x3, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x2, 0xb484, 0x8000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2dfd, 0x0, 0x0, 0x0, 0x4, 0x7, 0x72, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xf20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x9, 0x0, 0x3, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x4000, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x100, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3ff, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd]}]}}]}, 0x45c}}, 0x0)

9.560420432s ago: executing program 61 (id=7395):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff}, 0x0, 0x1}}, @TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1ff, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffff1d8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xa97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0xfffffffd, 0x400000, 0x3, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x2, 0xb484, 0x8000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2dfd, 0x0, 0x0, 0x0, 0x4, 0x7, 0x72, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xf20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x9, 0x0, 0x3, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x4000, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x100, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3ff, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd]}]}}]}, 0x45c}}, 0x0)

2.288259754s ago: executing program 2 (id=7531):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r2, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x1}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900)

2.264862255s ago: executing program 2 (id=7532):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00', <r1=>0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x40000000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10)
r5 = socket$inet6(0x10, 0x3, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r6}, 0x10)
sendto$inet6(r5, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@dioread_nolock}, {@nomblk_io_submit}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
quotactl_fd$Q_SETINFO(r7, 0xffffffff80000601, 0x0, 0x0)
clock_adjtime(0xffffffd3, &(0x7f0000000180)={0x1, 0x6, 0x12, 0xf, 0x1000, 0xb, 0x651, 0xfffffffffffffff9, 0x8000009657, 0x1, 0x7fffffff, 0x0, 0x10, 0xb, 0x80000000000000, 0xcc0, 0x1, 0x1, 0x8000000094d6, 0x0, 0x6, 0x80c, 0x5, 0xfffffffffffffff8, 0x3, 0x9})
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r9, 0x0, 0x10000}, 0x18)
r10 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r11=>0x0})
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000300)={0x0, 0xef, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x8004)
r13 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x0)
syz_open_dev$loop(&(0x7f0000000000), 0x80000000, 0x18002)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x2, 0x0, 0x0, 0xe, 0x2, 0x1}]}, {0x0, [0x30]}}, 0x0, 0x2b, 0x0, 0x9, 0x6}, 0x28)

1.832433651s ago: executing program 5 (id=7538):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000100001000000001e000000000000000a68000000060a0b040000000000000000020000003c00048014000180090001006c6173740000000004000280240001800a0001807265646972000000140002800800034000000028080001400000001d0900010073797a30000000000900020073797a32"], 0x90}}, 0x4000)

1.806784182s ago: executing program 5 (id=7540):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r2, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x1}, {0x0}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900)

1.753169372s ago: executing program 2 (id=7542):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={&(0x7f0000000180)="35a70f51bc", &(0x7f0000000040)=""/12, 0x0, &(0x7f00000005c0), 0x4, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000380)=@broute={'broute\x00', 0x5e04, 0x3, 0x90, [0x0, 0x0, 0x400000000400], 0x2, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x17b)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
r5 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10)
r6 = socket$packet(0x11, 0x2, 0x300)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18)
r7 = gettid()
r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x20100, 0x0)
read$ptp(r8, 0x0, 0x0)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, &(0x7f0000000580))
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=<r9=>0x0)
timer_settime(r9, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)

1.673697153s ago: executing program 5 (id=7544):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0xf}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @empty}], 0x10)
sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x881)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000540)={0x0, 0x88, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa761132b512e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364b87808f6ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a73e58c8c8f8ec21e15e7a5d6743243dfde8a664"}, &(0x7f00000000c0)=0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000002"], 0x0, 0x26}, 0x28)

1.061862293s ago: executing program 0 (id=7548):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x80000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x7, 0x84001)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100cb3a}, 0x94)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x1}, 0x18)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0)
io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0x0, 0x4000000})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$usbfs(0x0, 0x1ff, 0x2)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000140)=0x5)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}}, 0x0)
io_setup(0x1, &(0x7f0000000b80)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000300)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0xfff7, r0, &(0x7f0000000280)="74832cab182f460cb4cf494bb3ca577798a699e00a410f443ba503a31b00", 0x1e, 0x9, 0x0, 0x1, r0}])
signalfd4(r0, &(0x7f0000000000), 0x8, 0x800)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x5, 0x3}]})

865.412396ms ago: executing program 2 (id=7550):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000300)={0x4701, 0x0, 0x8, 0x0, 0x1, 0x42, 0x0, 0xfffffffffffffffd, 0x1})

774.540797ms ago: executing program 0 (id=7552):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10)
r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setsig(r4, 0xa, 0x13)
fcntl$setlease(r4, 0x400, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
fcntl$setlease(r4, 0x400, 0x2)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000500)='kmem_cache_free\x00'}, 0x18)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000000400)={0xa})
syz_usb_connect(0x4, 0x24, 0x0, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x194)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
epoll_pwait(r0, 0x0, 0x0, 0x4c6, 0x0, 0x0)

733.779658ms ago: executing program 5 (id=7555):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18)
chown(0x0, 0x0, 0x0)

682.618629ms ago: executing program 5 (id=7556):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x5a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x101, 0x7, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
r0 = socket(0x10, 0x80003, 0x0)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85)
close_range(r0, 0xffffffffffffffff, 0x0)

673.817449ms ago: executing program 2 (id=7557):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0xfffffdbc, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x0, 0x11, 0x148, 0x148, 0x0, 0x248, 0x2a8, 0x2a8, 0x248, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@unspec=@rateest={{0x68}, {'gre0\x00', 'veth0_vlan\x00', 0x0, 0x0, 0xf9e, 0x5, 0x8, 0x9, {0xb}, {0x8}}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {0xff}}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000430ddf32f589280ac00010000000500030000000000050099eeb2e30000050003000500060000000200030000000000000000a679e66500000000000000"], 0x50}}, 0x0)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYRES64=r3, @ANYRES16=r6, @ANYBLOB="010026bd7000fbf3b5251100a92700060004000040040000000c933110fa26a77cb3d10300060003180000005c000000"], 0x2c}, 0x1, 0x0, 0x0, 0x400c0}, 0x24000045)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='timer_start\x00', r7}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r1}, &(0x7f00000002c0), &(0x7f0000000300)=r2}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r8}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000940))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000ac0)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18)
fspick(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/pid_for_children\x00')
ioctl$NS_GET_OWNER_UID(r9, 0xb704, &(0x7f0000000340))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r11 = socket(0x28, 0xa, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@deltfilter={0xc4, 0x2d, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x3, 0xfff2}, {0xfff2, 0xb}, {0x9, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x94, 0x2, [@TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @remote}, @TCA_FLOWER_KEY_ENC_OPTS={0x74, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x24, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x29f2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7ff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xfffffe01}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xffffd99d}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9b7e}]}]}, @TCA_FLOWER_INDEV={0x14, 0x2, 'veth1_to_bond\x00'}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x45)
sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r12, {0x0, 0xfff3}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0)
clock_gettime(0xffffffff, &(0x7f0000003840))

609.84404ms ago: executing program 5 (id=7559):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={&(0x7f0000000180)="35a70f51bc", &(0x7f0000000040)=""/12, 0x0, &(0x7f00000005c0), 0x4, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000380)=@broute={'broute\x00', 0x5e04, 0x3, 0x90, [0x0, 0x0, 0x400000000400], 0x2, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcff9900000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000008f80a4af9fa47d8480cfaec2810f084bf15384ac94ee5c41cb6c3ee649777077edcc14895679935c25a8090000002604057fb38ca680018fb560d58dff5b797fd4fdea83841303b08077577bd11b10c697ee183e696114265ce0c5957989ac7bab2ba8122e700262ae75d45c991b4d71157a52"]}, 0x17b)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
r5 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10)
r6 = socket$packet(0x11, 0x2, 0x300)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18)
r7 = gettid()
r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x20100, 0x0)
read$ptp(r8, 0x0, 0x0)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, &(0x7f0000000580))
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=<r9=>0x0)
timer_settime(r9, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r10=>0x0})
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYRESHEX=r3, @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x8004)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)

581.831791ms ago: executing program 2 (id=7561):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={&(0x7f0000000180)="35a70f51bc", &(0x7f0000000040)=""/12, 0x0, &(0x7f00000005c0), 0x4, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000380)=@broute={'broute\x00', 0x5e04, 0x3, 0x90, [0x0, 0x0, 0x400000000400], 0x2, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcff9900000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000008f80a4af9fa47d8480cfaec2810f084bf15384ac94ee5c41cb6c3ee649777077edcc14895679935c25a8090000002604057fb38ca680018fb560d58dff5b797fd4fdea83841303b08077577bd11b10c697ee183e696114265ce0c5957989ac7bab2ba8122e700262ae75d45c991b4d71157a52"]}, 0x17b)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
r5 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10)
r6 = socket$packet(0x11, 0x2, 0x300)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18)
r7 = gettid()
r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x20100, 0x0)
read$ptp(r8, 0x0, 0x0)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, &(0x7f0000000580))
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=<r9=>0x0)
timer_settime(r9, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)

317.430324ms ago: executing program 6 (id=7568):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@delchain={0x8c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x5c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x58, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x54, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xd}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x1000}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x2}]}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008051}, 0x4000)

286.162385ms ago: executing program 6 (id=7569):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207a2500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r0}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000100001000000001e000000000000000a68000000060a0b040000000000000000020000003c00048014000180090001006c6173740000000004000280240001800a0001807265646972000000140002800800034000000028080001400000001d0900010073797a30000000000900020073797a32"], 0x90}}, 0x4000)

266.963625ms ago: executing program 6 (id=7571):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r0, 0x0, 0x100a}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x3}, 0x18)
r3 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5`\xda\xca\xd1\xab:\x18\x10\x9b\xd0w', 0x0)
write$binfmt_misc(r3, &(0x7f0000000180)="e502", 0x2)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="757466382c626c6f636b3d307830303030303030303030303030323030006e6f726f636b2c63727566742c6d61703d6f66662c646d6f64653d3078303430303030303030303030303063664173657373696f6e3d3078303030303030303030303030303033382c756e686964652c756e686964652c6769643d29e0cd5c372ab078c28fb05c6421428d066455368833565fd726743513f4466efa8d4fba06d57341875f5775ab343c0f6bc59fbde784ec3597e0e286d8d0dbf360afa3bc5c145b6e4f8b0305932fb55ff13f9fcb5035769f5fca33ac02bdeacb24c58103edc3d8b46df7614aa493952584ee662174309b11a4ad19e64dcdeeca1c148170b8d1aaf26082364b0d90d63d8502ffa63dde945e4612ac134315f389af667a04931ad25ff10b9b5107e517dbbcf5dcb60f564f54b344218d9325b53e829c38c96c69adc9e745202923a1b8124333cce0a8f1c748d42a272eb3e5502051090f1ac34fe5e8f038", @ANYRES8, @ANYRESHEX], 0x2, 0x699, &(0x7f0000000140)="$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")
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

205.105507ms ago: executing program 6 (id=7573):
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]})
lstat(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
timer_create(0x3, 0x0, &(0x7f0000000500))

197.023567ms ago: executing program 9 (id=7574):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000004000000df7f000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fe0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = dup2(r1, r0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10)
sync()

178.708147ms ago: executing program 6 (id=7575):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10)
sendmmsg$inet(r2, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044)
sendto$inet(r2, 0x0, 0x60, 0x0, 0x0, 0x0)

162.801397ms ago: executing program 6 (id=7576):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000000040)=""/12, 0x0, &(0x7f00000005c0), 0x4, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000380)=@broute={'broute\x00', 0x5e04, 0x3, 0x90, [0x0, 0x0, 0x400000000400], 0x2, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcff9900000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000008f80a4af9fa47d8480cfaec2810f084bf15384ac94ee5c41cb6c3ee649777077edcc14895679935c25a8090000002604057fb38ca680018fb560d58dff5b797fd4fdea83841303b08077577bd11b10c697ee183e696114265ce0c5957989ac7bab2ba8122e700262ae75d45c991b4d71157a52"]}, 0x17b)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10)
socket$packet(0x11, 0x2, 0x300)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18)
r5 = gettid()
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x20100, 0x0)
read$ptp(r6, 0x0, 0x0)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, &(0x7f0000000580))
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=<r7=>0x0)
timer_settime(r7, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)

141.880548ms ago: executing program 9 (id=7577):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r0)
ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

98.911018ms ago: executing program 9 (id=7578):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r0, 0x0, 0x100a}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x3}, 0x18)
r3 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5`\xda\xca\xd1\xab:\x18\x10\x9b\xd0w', 0x0)
write$binfmt_misc(r3, &(0x7f0000000180)="e502", 0x2)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESHEX], 0x2, 0x699, &(0x7f0000000140)="$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")
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

94.560918ms ago: executing program 0 (id=7579):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000300)='kfree\x00', r0}, 0x18)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0)
close(r1)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)

77.358228ms ago: executing program 0 (id=7580):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18)
chown(0x0, 0x0, 0x0)

64.878478ms ago: executing program 9 (id=7581):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@delchain={0x8c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x5c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x58, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x54, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xd}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x1000}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x2}]}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008051}, 0x4000)

47.193319ms ago: executing program 0 (id=7582):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x2dc}}, 0x0)

46.210069ms ago: executing program 9 (id=7583):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000300)='kfree\x00', r0}, 0x18)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0)
close(r1)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)

16.060279ms ago: executing program 9 (id=7584):
syz_emit_ethernet(0x193, &(0x7f00000007c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x15d, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xfc, 0x4, 0x0, 0x0, [{0x3, 0xa, "bd3e6d4706598080a80300378927fc503b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026"}, {0x3, 0x1e, "77f902045490290b6e87f278e94724e20c43c95f9b49204a64d614d4cc9d0d46d954fda9a75d076993e3b87aa99b2454a86662e37b42678a74974ddd50b21e499efae61e3a816a367d019bc7f892d8975f1fc8a3e27139041cd21d2d12f30ee6f029d8d73f80f9b19d138598345b9c0feda226b333c55c668fb17b5b39603ee66b8534f1fbf97e139d35762307516482a1787d8f3bb76940602a0104ac045b59510dfd944672de5f77c0e6136c06847bbe70dd65236ef4d112e88fabc57d02a2a380eb697adf4e1d9090705f85ddf041bc076775f5d27555d3f60c44192fa92eee16828c1c4aa17f4a743e212cd2"}]}}}}}}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYRES64=r5], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000280)=ANY=[], 0x8)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[], 0x40}}, 0x0)
dup(r1)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80)
r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = fsmount(r7, 0x20, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r6, r8}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10)

0s ago: executing program 0 (id=7585):
move_pages(0x0, 0x0, 0x0, &(0x7f0000001180), &(0x7f0000000000), 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000004c0)="f3", 0x1}], 0x1}}], 0x1, 0x4000841)
listen(r0, 0x2000fff)
r1 = syz_io_uring_setup(0x4aa, &(0x7f0000000380)={0x0, 0xfffffffc, 0x10100, 0x10000000, 0x13a}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000200)=<r3=>0x0)
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
setns(r5, 0x8020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8126}})
io_uring_enter(r1, 0x38c5, 0x2000000, 0x0, 0x0, 0x0)
accept(r0, 0xfffffffffffffffd, &(0x7f0000000180))
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0)
socket(0x21, 0x5, 0x9)
ioctl$RTC_SET_TIME(r6, 0x4024700a, 0x0)

kernel console output (not intermixed with test programs):

th_write+0x10/0x10
[  441.300931][T24099]  ? vfs_write+0x75e/0x8e0
[  441.300966][T24099]  ? __rcu_read_unlock+0x4f/0x70
[  441.301007][T24099]  ? __fget_files+0x184/0x1c0
[  441.301032][T24099]  __secure_computing+0x82/0x150
[  441.301052][T24099]  syscall_trace_enter+0xcf/0x1e0
[  441.301077][T24099]  do_syscall_64+0xac/0x200
[  441.301141][T24099]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  441.301170][T24099]  ? clear_bhb_loop+0x40/0x90
[  441.301196][T24099]  ? clear_bhb_loop+0x40/0x90
[  441.301317][T24099]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  441.301337][T24099] RIP: 0033:0x7f1cc2e6e9a9
[  441.301426][T24099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  441.301444][T24099] RSP: 002b:00007f1cc14d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5
[  441.301462][T24099] RAX: ffffffffffffffda RBX: 00007f1cc3095fa0 RCX: 00007f1cc2e6e9a9
[  441.301474][T24099] RDX: 0000200000000240 RSI: 0000200000000140 RDI: ffffffffffffff9c
[  441.301494][T24099] RBP: 00007f1cc14d7090 R08: 0000000000000000 R09: 0000000000000000
[  441.301509][T24099] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001
[  441.301524][T24099] R13: 0000000000000000 R14: 00007f1cc3095fa0 R15: 00007ffe01affb38
[  441.301548][T24099]  </TASK>
[  441.586516][T24107] loop9: detected capacity change from 0 to 1024
[  441.623787][T24107] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  441.627587][T24112] loop2: detected capacity change from 0 to 512
[  441.652260][T24107] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  441.665497][T24112] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.6709: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  441.685493][T24112] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.6709: Bad quota inode: 3, type: 0
[  441.725563][T24112] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  441.764781][T24112] EXT4-fs (loop2): mount failed
[  441.816672][T19711] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.062681][T24134] syzkaller0: entered promiscuous mode
[  442.068361][T24134] syzkaller0: entered allmulticast mode
[  442.255823][T24145] FAULT_INJECTION: forcing a failure.
[  442.255823][T24145] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  442.269022][T24145] CPU: 1 UID: 0 PID: 24145 Comm: syz.6.6722 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(voluntary) 
[  442.269055][T24145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  442.269069][T24145] Call Trace:
[  442.269075][T24145]  <TASK>
[  442.269083][T24145]  __dump_stack+0x1d/0x30
[  442.269185][T24145]  dump_stack_lvl+0xe8/0x140
[  442.269211][T24145]  dump_stack+0x15/0x1b
[  442.269232][T24145]  should_fail_ex+0x265/0x280
[  442.269271][T24145]  should_fail+0xb/0x20
[  442.269304][T24145]  should_fail_usercopy+0x1a/0x20
[  442.269349][T24145]  _copy_to_user+0x20/0xa0
[  442.269372][T24145]  simple_read_from_buffer+0xb5/0x130
[  442.269410][T24145]  proc_fail_nth_read+0x100/0x140
[  442.269504][T24145]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  442.269581][T24145]  vfs_read+0x19d/0x6f0
[  442.269616][T24145]  ? __rcu_read_unlock+0x4f/0x70
[  442.269675][T24145]  ? __fget_files+0x184/0x1c0
[  442.269713][T24145]  ksys_read+0xda/0x1a0
[  442.269750][T24145]  __x64_sys_read+0x40/0x50
[  442.269790][T24145]  x64_sys_call+0x2d77/0x2fb0
[  442.269863][T24145]  do_syscall_64+0xd2/0x200
[  442.269887][T24145]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  442.269919][T24145]  ? clear_bhb_loop+0x40/0x90
[  442.270023][T24145]  ? clear_bhb_loop+0x40/0x90
[  442.270050][T24145]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.270085][T24145] RIP: 0033:0x7fb8bce0d3bc
[  442.270128][T24145] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  442.270151][T24145] RSP: 002b:00007fb8bb46f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  442.270174][T24145] RAX: ffffffffffffffda RBX: 00007fb8bd035fa0 RCX: 00007fb8bce0d3bc
[  442.270190][T24145] RDX: 000000000000000f RSI: 00007fb8bb46f0a0 RDI: 0000000000000045
[  442.270206][T24145] RBP: 00007fb8bb46f090 R08: 0000000000000000 R09: 0000000000000000
[  442.270276][T24145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  442.270291][T24145] R13: 0000000000000000 R14: 00007fb8bd035fa0 R15: 00007ffdc4d31428
[  442.270316][T24145]  </TASK>
[  442.483677][T24154] loop9: detected capacity change from 0 to 7
[  442.490081][T24154] Buffer I/O error on dev loop9, logical block 0, async page read
[  442.499347][T24154] Buffer I/O error on dev loop9, logical block 0, async page read
[  442.507246][T24154]  loop9: unable to read partition table
[  442.514484][T24154] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  442.514484][T24154] 
) failed (rc=-5)
[  442.635156][T24167] loop6: detected capacity change from 0 to 2048
[  442.658512][T24167] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  442.683364][T24169] syzkaller0: entered promiscuous mode
[  442.688897][T24169] syzkaller0: entered allmulticast mode
[  442.700246][T21439] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  442.718575][T24173] 8021q: adding VLAN 0 to HW filter on device $H�
[  442.730532][T24173] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  442.788969][T24176] openvswitch: netlink: Message has 6 unknown bytes.
[  442.829596][T24176] loop2: detected capacity change from 0 to 2048
[  442.850254][T24176] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  442.965470][T20218] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  443.122794][   T29] kauditd_printk_skb: 844 callbacks suppressed
[  443.122877][   T29] audit: type=1400 audit(1753378462.303:53217): avc:  denied  { unlink } for  pid=20218 comm="syz-executor" name="memory.events" dev="tmpfs" ino=1498 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:traceroute_exec_t:s0"
[  443.187801][T24189] loop2: detected capacity change from 0 to 164
[  443.196371][   T29] audit: type=1326 audit(1753378462.373:53218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24190 comm="syz.0.6737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc2e6e9a9 code=0x7ffc0000
[  443.241387][   T29] audit: type=1326 audit(1753378462.373:53219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24190 comm="syz.0.6737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1cc2e0ab89 code=0x7ffc0000
[  443.265036][   T29] audit: type=1326 audit(1753378462.373:53220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24190 comm="syz.0.6737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1cc2e6e9a9 code=0x7ffc0000
[  443.288762][   T29] audit: type=1326 audit(1753378462.373:53221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24190 comm="syz.0.6737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc2e6e9a9 code=0x7ffc0000
[  443.312466][   T29] audit: type=1326 audit(1753378462.373:53222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24190 comm="syz.0.6737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1cc2e6e9a9 code=0x7ffc0000
[  443.336258][   T29] audit: type=1326 audit(1753378462.373:53223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24190 comm="syz.0.6737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc2e6e9a9 code=0x7ffc0000
[  443.359984][   T29] audit: type=1326 audit(1753378462.373:53224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24190 comm="syz.0.6737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1cc2e6e9a9 code=0x7ffc0000
[  443.383672][   T29] audit: type=1326 audit(1753378462.373:53225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24190 comm="syz.0.6737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc2e6e9a9 code=0x7ffc0000
[  443.407303][   T29] audit: type=1326 audit(1753378462.373:53226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24190 comm="syz.0.6737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f1cc2e6e9a9 code=0x7ffc0000
[  443.527464][T24209] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  443.539495][T24209] tipc: Resetting bearer <eth:syzkaller0>
[  443.546603][T24208] tipc: Disabling bearer <eth:syzkaller0>
[  443.613416][T24219] batman_adv: batadv0: Adding interface: gretap1
[  443.619815][T24219] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  443.645398][T24219] batman_adv: batadv0: Interface activated: gretap1
[  443.723700][T24226] openvswitch: netlink: Message has 6 unknown bytes.
[  443.742763][T24226] loop9: detected capacity change from 0 to 2048
[  443.767290][T24226] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  443.769643][T24233] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6754'.
[  443.808804][T24233] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6754'.
[  443.835447][T19711] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  443.912757][T24246] netlink: 'syz.7.6759': attribute type 4 has an invalid length.
[  443.924558][T24246] netlink: 'syz.7.6759': attribute type 4 has an invalid length.
[  443.938906][T24246] netlink: 96 bytes leftover after parsing attributes in process `syz.7.6759'.
[  444.086343][T24255] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6762'.
[  444.140674][T24261] loop9: detected capacity change from 0 to 7
[  444.150399][T24261] Buffer I/O error on dev loop9, logical block 0, async page read
[  444.159028][T24261] Buffer I/O error on dev loop9, logical block 0, async page read
[  444.167102][T24261]  loop9: unable to read partition table
[  444.178521][T24261] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  444.178521][T24261] 
) failed (rc=-5)
[  444.180516][T24264] loop2: detected capacity change from 0 to 1024
[  444.206617][T24264] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  444.220048][T24264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.257671][T24271] openvswitch: netlink: Message has 6 unknown bytes.
[  444.272622][T24273] openvswitch: netlink: Message has 6 unknown bytes.
[  444.279579][T24271] loop7: detected capacity change from 0 to 2048
[  444.290741][T24273] loop2: detected capacity change from 0 to 2048
[  444.294471][T24271] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  444.315528][T24273] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  444.328651][T19851] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  444.369827][T24281] loop9: detected capacity change from 0 to 7
[  444.376901][T24281] Buffer I/O error on dev loop9, logical block 0, async page read
[  444.384920][T24281] Buffer I/O error on dev loop9, logical block 0, async page read
[  444.392869][T24281]  loop9: unable to read partition table
[  444.394494][T24283] loop6: detected capacity change from 0 to 1024
[  444.398585][T24281] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  444.398585][T24281] 
) failed (rc=-5)
[  444.405891][T20218] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  444.438488][T24283] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  444.451039][T24283] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  444.460033][T24288] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6774'.
[  444.556568][T24298] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  444.583485][T21439] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.601656][T24302] loop9: detected capacity change from 0 to 7
[  444.608241][T24302] Buffer I/O error on dev loop9, logical block 0, async page read
[  444.616269][T24302] Buffer I/O error on dev loop9, logical block 0, async page read
[  444.624248][T24302]  loop9: unable to read partition table
[  444.630942][T24302] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  444.630942][T24302] 
) failed (rc=-5)
[  444.673270][T24308] loop7: detected capacity change from 0 to 512
[  444.686485][T24308] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #3: comm syz.7.6784: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  444.704891][T24308] EXT4-fs error (device loop7): ext4_quota_enable:7127: comm syz.7.6784: Bad quota inode: 3, type: 0
[  444.716308][T24308] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  444.731440][T24308] EXT4-fs (loop7): mount failed
[  444.735507][T24312] netlink: 360 bytes leftover after parsing attributes in process `syz.0.6785'.
[  444.794915][T24314] loop6: detected capacity change from 0 to 2048
[  444.819607][T24314] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  444.853647][T21439] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  444.873593][T24326] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6791'.
[  444.985034][T24338] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  445.016480][T24340] loop9: detected capacity change from 0 to 7
[  445.023053][T24340]  loop9: unable to read partition table
[  445.028926][T24340] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  445.028926][T24340] 
) failed (rc=-5)
[  445.095465][T24347] loop7: detected capacity change from 0 to 164
[  445.169437][T24354] FAULT_INJECTION: forcing a failure.
[  445.169437][T24354] name failslab, interval 1, probability 0, space 0, times 0
[  445.182380][T24354] CPU: 1 UID: 0 PID: 24354 Comm: syz.7.6801 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(voluntary) 
[  445.182435][T24354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  445.182450][T24354] Call Trace:
[  445.182458][T24354]  <TASK>
[  445.182467][T24354]  __dump_stack+0x1d/0x30
[  445.182570][T24354]  dump_stack_lvl+0xe8/0x140
[  445.182596][T24354]  dump_stack+0x15/0x1b
[  445.182616][T24354]  should_fail_ex+0x265/0x280
[  445.182657][T24354]  should_failslab+0x8c/0xb0
[  445.182731][T24354]  kmem_cache_alloc_noprof+0x50/0x310
[  445.182793][T24354]  ? getname_flags+0x80/0x3b0
[  445.182820][T24354]  getname_flags+0x80/0x3b0
[  445.182841][T24354]  do_sys_openat2+0x60/0x110
[  445.182902][T24354]  __x64_sys_openat+0xf2/0x120
[  445.182936][T24354]  x64_sys_call+0x1af/0x2fb0
[  445.182958][T24354]  do_syscall_64+0xd2/0x200
[  445.183054][T24354]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  445.183141][T24354]  ? clear_bhb_loop+0x40/0x90
[  445.183183][T24354]  ? clear_bhb_loop+0x40/0x90
[  445.183210][T24354]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  445.183231][T24354] RIP: 0033:0x7f1c2510d310
[  445.183250][T24354] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44
[  445.183272][T24354] RSP: 002b:00007f1c23776f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  445.183290][T24354] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f1c2510d310
[  445.183337][T24354] RDX: 0000000000000002 RSI: 00007f1c23776fa0 RDI: 00000000ffffff9c
[  445.183352][T24354] RBP: 00007f1c23776fa0 R08: 0000000000000000 R09: 0000000000000000
[  445.183448][T24354] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  445.183509][T24354] R13: 0000000000000000 R14: 00007f1c25335fa0 R15: 00007fffedd3b8a8
[  445.183528][T24354]  </TASK>
[  445.437420][T24365] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  445.446391][T24365] tipc: Resetting bearer <eth:syzkaller0>
[  445.453635][T24364] tipc: Disabling bearer <eth:syzkaller0>
[  445.801926][T24372] random: crng reseeded on system resumption
[  445.832272][T24376] loop9: detected capacity change from 0 to 164
[  445.840493][T24376] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  445.858197][T24376] 9pnet_fd: Insufficient options for proto=fd
[  445.868440][T24376] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  445.918619][T24380] loop6: detected capacity change from 0 to 164
[  445.949422][T24383] 9pnet_fd: Insufficient options for proto=fd
[  445.974218][T24385] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  446.028477][T24391] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  446.037721][T24391] tipc: Resetting bearer <eth:syzkaller0>
[  446.046752][T24390] tipc: Disabling bearer <eth:syzkaller0>
[  446.164288][T24395] loop6: detected capacity change from 0 to 512
[  446.173177][T24395] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  446.181732][T24395] EXT4-fs (loop6): fragment/cluster size (4096) != block size (1024)
[  446.275355][T24399] loop9: detected capacity change from 0 to 164
[  446.310572][T24399] bio_check_eod: 105 callbacks suppressed
[  446.310668][T24399] syz.9.6820: attempt to access beyond end of device
[  446.310668][T24399] loop9: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  446.439262][T24399] syz.9.6820: attempt to access beyond end of device
[  446.439262][T24399] loop9: rw=0, sector=263328, nr_sectors = 4 limit=164
[  446.559132][T24405] loop7: detected capacity change from 0 to 1024
[  446.647951][T24405] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  446.750650][T24405] ext4 filesystem being mounted at /326/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  446.823863][T24419] FAULT_INJECTION: forcing a failure.
[  446.823863][T24419] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  446.837005][T24419] CPU: 1 UID: 0 PID: 24419 Comm: syz.2.6828 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(voluntary) 
[  446.837083][T24419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  446.837096][T24419] Call Trace:
[  446.837103][T24419]  <TASK>
[  446.837111][T24419]  __dump_stack+0x1d/0x30
[  446.837132][T24419]  dump_stack_lvl+0xe8/0x140
[  446.837151][T24419]  dump_stack+0x15/0x1b
[  446.837229][T24419]  should_fail_ex+0x265/0x280
[  446.837274][T24419]  should_fail+0xb/0x20
[  446.837303][T24419]  should_fail_usercopy+0x1a/0x20
[  446.837356][T24419]  _copy_from_user+0x1c/0xb0
[  446.837402][T24419]  __sys_bpf+0x178/0x790
[  446.837440][T24419]  __x64_sys_bpf+0x41/0x50
[  446.837473][T24419]  x64_sys_call+0x2478/0x2fb0
[  446.837499][T24419]  do_syscall_64+0xd2/0x200
[  446.837536][T24419]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  446.837572][T24419]  ? clear_bhb_loop+0x40/0x90
[  446.837663][T24419]  ? clear_bhb_loop+0x40/0x90
[  446.837692][T24419]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.837719][T24419] RIP: 0033:0x7f9ea4a7e9a9
[  446.837738][T24419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  446.837802][T24419] RSP: 002b:00007f9ea30e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  446.837822][T24419] RAX: ffffffffffffffda RBX: 00007f9ea4ca5fa0 RCX: 00007f9ea4a7e9a9
[  446.837839][T24419] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 0000000000000000
[  446.837855][T24419] RBP: 00007f9ea30e7090 R08: 0000000000000000 R09: 0000000000000000
[  446.837915][T24419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  446.837927][T24419] R13: 0000000000000000 R14: 00007f9ea4ca5fa0 R15: 00007ffcad94a528
[  446.837945][T24419]  </TASK>
[  447.118698][T24423] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  447.132201][T24423] tipc: Resetting bearer <eth:syzkaller0>
[  447.203720][T24422] tipc: Disabling bearer <eth:syzkaller0>
[  447.350314][T19851] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  447.365423][T24429] loop2: detected capacity change from 0 to 512
[  447.408892][T24432] loop9: detected capacity change from 0 to 164
[  447.443880][T24429] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.6832: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  447.464125][T24429] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.6832: Bad quota inode: 3, type: 0
[  447.503667][T24429] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  447.544821][T24429] EXT4-fs (loop2): mount failed
[  447.612676][T24442] loop9: detected capacity change from 0 to 164
[  447.677728][T24446] loop9: detected capacity change from 0 to 164
[  447.695072][T24446] syz.9.6840: attempt to access beyond end of device
[  447.695072][T24446] loop9: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  447.725627][T24446] syz.9.6840: attempt to access beyond end of device
[  447.725627][T24446] loop9: rw=0, sector=263328, nr_sectors = 4 limit=164
[  447.790278][T24454] loop0: detected capacity change from 0 to 1024
[  447.836930][T24454] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  447.848550][T24464] loop2: detected capacity change from 0 to 2048
[  447.850314][T24454] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  447.875228][T24464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  447.902863][T20218] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  447.950819][T24473] syzkaller0: entered promiscuous mode
[  447.956539][T24473] syzkaller0: entered allmulticast mode
[  448.053892][T24483] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6854'.
[  448.075228][T24485] loop2: detected capacity change from 0 to 1024
[  448.105389][T24488] loop0: detected capacity change from 0 to 164
[  448.115077][T24488] syz.0.6856: attempt to access beyond end of device
[  448.115077][T24488] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  448.129095][T24488] syz.0.6856: attempt to access beyond end of device
[  448.129095][T24488] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164
[  448.143224][   T29] kauditd_printk_skb: 1024 callbacks suppressed
[  448.143239][   T29] audit: type=1326 audit(1753378467.323:54249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24461 comm="syz.6.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb8bce05967 code=0x7ffc0000
[  448.173357][   T29] audit: type=1326 audit(1753378467.353:54250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24461 comm="syz.6.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb8bcdaab89 code=0x7ffc0000
[  448.199255][   T29] audit: type=1326 audit(1753378467.353:54251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24461 comm="syz.6.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb8bce05967 code=0x7ffc0000
[  448.222846][   T29] audit: type=1326 audit(1753378467.353:54252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24461 comm="syz.6.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb8bcdaab89 code=0x7ffc0000
[  448.246456][   T29] audit: type=1326 audit(1753378467.353:54253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24461 comm="syz.6.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb8bce0e9a9 code=0x7ffc0000
[  448.271650][   T29] audit: type=1326 audit(1753378467.373:54254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24461 comm="syz.6.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb8bce05967 code=0x7ffc0000
[  448.295404][   T29] audit: type=1326 audit(1753378467.373:54255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24461 comm="syz.6.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb8bcdaab89 code=0x7ffc0000
[  448.318972][   T29] audit: type=1326 audit(1753378467.373:54256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24461 comm="syz.6.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb8bce0e9a9 code=0x7ffc0000
[  448.342560][   T29] audit: type=1326 audit(1753378467.403:54257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24461 comm="syz.6.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb8bce05967 code=0x7ffc0000
[  448.366146][   T29] audit: type=1326 audit(1753378467.403:54258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24461 comm="syz.6.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb8bcdaab89 code=0x7ffc0000
[  448.458837][T24496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6859'.
[  448.470236][T24496] netlink: 'syz.0.6859': attribute type 1 has an invalid length.
[  448.478039][T24496] netlink: 'syz.0.6859': attribute type 2 has an invalid length.
[  448.913564][T24514] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6867'.
[  449.011539][T24520] loop2: detected capacity change from 0 to 1024
[  449.124588][T24533] loop2: detected capacity change from 0 to 164
[  449.133829][T24533] syz.2.6875: attempt to access beyond end of device
[  449.133829][T24533] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  449.147803][T24533] syz.2.6875: attempt to access beyond end of device
[  449.147803][T24533] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164
[  449.313290][T24539] syzkaller0: entered promiscuous mode
[  449.318851][T24539] syzkaller0: entered allmulticast mode
[  449.531834][T24544] loop7: detected capacity change from 0 to 512
[  449.600477][T24545] loop2: detected capacity change from 0 to 512
[  449.669367][T24549] loop0: detected capacity change from 0 to 1024
[  449.681492][T24545] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  449.691675][T24545] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  449.699826][T24545] System zones: 0-2, 18-18, 34-35
[  449.722267][T24544] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #3: comm syz.7.6880: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  449.816435][T24544] EXT4-fs error (device loop7): ext4_quota_enable:7127: comm syz.7.6880: Bad quota inode: 3, type: 0
[  449.828125][T24544] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  449.844853][T24544] EXT4-fs (loop7): mount failed
[  449.946103][T24560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6884'.
[  449.956425][T24560] netlink: 'syz.0.6884': attribute type 1 has an invalid length.
[  449.964320][T24560] netlink: 'syz.0.6884': attribute type 2 has an invalid length.
[  449.977651][T24562] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6885'.
[  450.014359][T24566] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  450.021443][T24566] syzkaller0: entered promiscuous mode
[  450.027017][T24566] syzkaller0: entered allmulticast mode
[  450.036272][T24566] tipc: Resetting bearer <eth:syzkaller0>
[  450.043159][T24565] tipc: Resetting bearer <eth:syzkaller0>
[  450.050304][T24565] tipc: Disabling bearer <eth:syzkaller0>
[  450.114368][T24569] openvswitch: netlink: Message has 6 unknown bytes.
[  450.129808][T24569] loop7: detected capacity change from 0 to 2048
[  450.317682][T24582] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  450.343600][T24582] syzkaller0: entered promiscuous mode
[  450.349196][T24582] syzkaller0: entered allmulticast mode
[  450.360816][T24582] tipc: Resetting bearer <eth:syzkaller0>
[  450.367649][T24581] tipc: Resetting bearer <eth:syzkaller0>
[  450.378395][T24581] tipc: Disabling bearer <eth:syzkaller0>
[  450.459899][T24586] loop9: detected capacity change from 0 to 7
[  450.466329][T24586] buffer_io_error: 2 callbacks suppressed
[  450.466345][T24586] Buffer I/O error on dev loop9, logical block 0, async page read
[  450.480456][T24586] Buffer I/O error on dev loop9, logical block 0, async page read
[  450.488701][T24586]  loop9: unable to read partition table
[  450.494675][T24586] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  450.494675][T24586] 
) failed (rc=-5)
[  450.544937][T24592] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6898'.
[  450.555532][T24590] loop6: detected capacity change from 0 to 2048
[  450.609365][T24598] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  450.617068][T24598] syzkaller0: entered promiscuous mode
[  450.622750][T24598] syzkaller0: entered allmulticast mode
[  450.635168][T24598] tipc: Resetting bearer <eth:syzkaller0>
[  450.643926][T24597] tipc: Resetting bearer <eth:syzkaller0>
[  450.651785][T24597] tipc: Disabling bearer <eth:syzkaller0>
[  450.823766][T24615] loop9: detected capacity change from 0 to 7
[  450.829976][T24615] Buffer I/O error on dev loop9, logical block 0, async page read
[  450.838352][T24615] Buffer I/O error on dev loop9, logical block 0, async page read
[  450.846476][T24615]  loop9: unable to read partition table
[  450.852173][T24615] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  450.852173][T24615] 
) failed (rc=-5)
[  450.887825][T24617] loop2: detected capacity change from 0 to 512
[  450.904111][T24617] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.6909: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  450.922892][T24617] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.6909: Bad quota inode: 3, type: 0
[  450.934203][T24617] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  450.949073][T24617] EXT4-fs (loop2): mount failed
[  451.005514][T24629] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6914'.
[  451.067294][T24637] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  451.075242][T24637] syzkaller0: entered promiscuous mode
[  451.080851][T24637] syzkaller0: entered allmulticast mode
[  451.091952][T24637] tipc: Resetting bearer <eth:syzkaller0>
[  451.104727][T24636] tipc: Resetting bearer <eth:syzkaller0>
[  451.117268][T24636] tipc: Disabling bearer <eth:syzkaller0>
[  451.194120][T24643] loop9: detected capacity change from 0 to 7
[  451.200413][T24643] Buffer I/O error on dev loop9, logical block 0, async page read
[  451.208388][T24643] Buffer I/O error on dev loop9, logical block 0, async page read
[  451.216339][T24643]  loop9: unable to read partition table
[  451.222840][T24643] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  451.222840][T24643] 
) failed (rc=-5)
[  451.265780][T24645] loop6: detected capacity change from 0 to 1024
[  451.283997][T24645] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  451.561197][T24661] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6926'.
[  451.626036][T24663] loop6: detected capacity change from 0 to 164
[  451.815472][T24674] FAULT_INJECTION: forcing a failure.
[  451.815472][T24674] name failslab, interval 1, probability 0, space 0, times 0
[  451.828239][T24674] CPU: 0 UID: 0 PID: 24674 Comm: syz.6.6930 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(voluntary) 
[  451.828275][T24674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  451.828292][T24674] Call Trace:
[  451.828299][T24674]  <TASK>
[  451.828306][T24674]  __dump_stack+0x1d/0x30
[  451.828357][T24674]  dump_stack_lvl+0xe8/0x140
[  451.828383][T24674]  dump_stack+0x15/0x1b
[  451.828403][T24674]  should_fail_ex+0x265/0x280
[  451.828458][T24674]  should_failslab+0x8c/0xb0
[  451.828529][T24674]  kmem_cache_alloc_noprof+0x50/0x310
[  451.828556][T24674]  ? security_inode_alloc+0x37/0x100
[  451.828587][T24674]  security_inode_alloc+0x37/0x100
[  451.828616][T24674]  inode_init_always_gfp+0x4b7/0x500
[  451.828741][T24674]  ? __pfx_shmem_alloc_inode+0x10/0x10
[  451.828838][T24674]  alloc_inode+0x58/0x170
[  451.828869][T24674]  new_inode+0x1d/0xe0
[  451.828887][T24674]  shmem_get_inode+0x244/0x750
[  451.828922][T24674]  __shmem_file_setup+0x113/0x210
[  451.828991][T24674]  shmem_file_setup+0x3b/0x50
[  451.829019][T24674]  __se_sys_memfd_create+0x2c3/0x590
[  451.829051][T24674]  __x64_sys_memfd_create+0x31/0x40
[  451.829142][T24674]  x64_sys_call+0x122f/0x2fb0
[  451.829164][T24674]  do_syscall_64+0xd2/0x200
[  451.829183][T24674]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  451.829209][T24674]  ? clear_bhb_loop+0x40/0x90
[  451.829270][T24674]  ? clear_bhb_loop+0x40/0x90
[  451.829292][T24674]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.829313][T24674] RIP: 0033:0x7fb8bce0e9a9
[  451.829328][T24674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  451.829346][T24674] RSP: 002b:00007fb8bb42ce18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  451.829366][T24674] RAX: ffffffffffffffda RBX: 000000000000050d RCX: 00007fb8bce0e9a9
[  451.829408][T24674] RDX: 00007fb8bb42cef0 RSI: 0000000000000000 RDI: 00007fb8bce916fc
[  451.829421][T24674] RBP: 0000200000000200 R08: 00007fb8bb42cbb7 R09: 00007fb8bb42ce40
[  451.829452][T24674] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0
[  451.829465][T24674] R13: 00007fb8bb42cef0 R14: 00007fb8bb42ceb0 R15: 0000200000000940
[  451.829484][T24674]  </TASK>
[  452.491078][T24681] loop7: detected capacity change from 0 to 164
[  452.719271][T24693] loop9: detected capacity change from 0 to 7
[  452.737732][T24693] Buffer I/O error on dev loop9, logical block 0, async page read
[  452.737769][T24693] Buffer I/O error on dev loop9, logical block 0, async page read
[  452.737784][T24693]  loop9: unable to read partition table
[  452.737847][T24693] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  452.737847][T24693] 
) failed (rc=-5)
[  452.944057][T24702] loop7: detected capacity change from 0 to 164
[  452.951735][T24700] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  452.964045][T24702] syz.7.6944: attempt to access beyond end of device
[  452.964045][T24702] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  452.989359][T24702] syz.7.6944: attempt to access beyond end of device
[  452.989359][T24702] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164
[  453.015038][T24700] syzkaller0: entered promiscuous mode
[  453.020554][T24700] syzkaller0: entered allmulticast mode
[  453.046931][T24703] tipc: Resetting bearer <eth:syzkaller0>
[  453.067057][T24699] tipc: Resetting bearer <eth:syzkaller0>
[  453.091193][T24699] tipc: Disabling bearer <eth:syzkaller0>
[  453.109440][T24707] loop7: detected capacity change from 0 to 164
[  453.167475][   T29] kauditd_printk_skb: 893 callbacks suppressed
[  453.167490][   T29] audit: type=1326 audit(1753378472.343:55152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24708 comm="syz.7.6947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2510e9a9 code=0x7ffc0000
[  453.222054][T24713] loop9: detected capacity change from 0 to 164
[  453.228996][   T29] audit: type=1326 audit(1753378472.383:55153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24708 comm="syz.7.6947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c2510e9a9 code=0x7ffc0000
[  453.252714][   T29] audit: type=1326 audit(1753378472.383:55154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24708 comm="syz.7.6947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2510e9a9 code=0x7ffc0000
[  453.276426][   T29] audit: type=1326 audit(1753378472.383:55155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24708 comm="syz.7.6947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2510e9a9 code=0x7ffc0000
[  453.300154][   T29] audit: type=1326 audit(1753378472.383:55156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24708 comm="syz.7.6947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1c2510e9a9 code=0x7ffc0000
[  453.323842][   T29] audit: type=1326 audit(1753378472.383:55157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24708 comm="syz.7.6947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2510e9a9 code=0x7ffc0000
[  453.347566][   T29] audit: type=1326 audit(1753378472.383:55158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24708 comm="syz.7.6947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1c2510e9a9 code=0x7ffc0000
[  453.371196][   T29] audit: type=1400 audit(1753378472.383:55159): avc:  denied  { read } for  pid=24708 comm="syz.7.6947" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  453.394460][   T29] audit: type=1400 audit(1753378472.383:55160): avc:  denied  { open } for  pid=24708 comm="syz.7.6947" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  453.418037][   T29] audit: type=1326 audit(1753378472.383:55161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24708 comm="syz.7.6947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2510e9a9 code=0x7ffc0000
[  453.484694][T24713] syz.9.6949: attempt to access beyond end of device
[  453.484694][T24713] loop9: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  453.500163][T24713] syz.9.6949: attempt to access beyond end of device
[  453.500163][T24713] loop9: rw=0, sector=263328, nr_sectors = 4 limit=164
[  453.583403][T24722] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  453.590737][T24722] syzkaller0: entered promiscuous mode
[  453.596281][T24722] syzkaller0: entered allmulticast mode
[  453.605471][T24722] tipc: Resetting bearer <eth:syzkaller0>
[  453.612011][T24721] tipc: Resetting bearer <eth:syzkaller0>
[  453.619269][T24721] tipc: Disabling bearer <eth:syzkaller0>
[  453.788133][T24731] loop2: detected capacity change from 0 to 164
[  453.818014][T24733] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  453.843195][T24733] syzkaller0: entered promiscuous mode
[  453.848729][T24733] syzkaller0: entered allmulticast mode
[  453.859874][T24733] tipc: Resetting bearer <eth:syzkaller0>
[  453.866335][T24732] tipc: Resetting bearer <eth:syzkaller0>
[  453.877692][T24732] tipc: Disabling bearer <eth:syzkaller0>
[  453.957415][T24737] loop9: detected capacity change from 0 to 7
[  453.963841][T24737] Buffer I/O error on dev loop9, logical block 0, async page read
[  453.971776][T24737] Buffer I/O error on dev loop9, logical block 0, async page read
[  453.979712][T24737]  loop9: unable to read partition table
[  453.985578][T24737] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  453.985578][T24737] 
) failed (rc=-5)
[  454.238989][T24748] loop0: detected capacity change from 0 to 512
[  454.278961][T24748] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  454.289117][T24748] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  454.297286][T24748] System zones: 0-2, 18-18, 34-35
[  454.760980][T24763] loop6: detected capacity change from 0 to 2048
[  454.790999][T24767] netlink: 'syz.9.6970': attribute type 1 has an invalid length.
[  454.798866][T24767] netlink: 'syz.9.6970': attribute type 2 has an invalid length.
[  454.826288][T24769] loop9: detected capacity change from 0 to 7
[  454.832916][T24769]  loop9: unable to read partition table
[  454.838671][T24769] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  454.838671][T24769] 
) failed (rc=-5)
[  454.915072][T24777] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  454.962512][T24778] loop6: detected capacity change from 0 to 1024
[  454.970154][T24775] loop9: detected capacity change from 0 to 1024
[  455.014895][T24778] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  455.026696][T24775] ext4 filesystem being mounted at /308/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  455.250403][T24802] loop0: detected capacity change from 0 to 2048
[  455.344689][T24801] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  455.395910][T24806] loop9: detected capacity change from 0 to 7
[  455.405725][T24806]  loop9: unable to read partition table
[  455.408493][T24801] syzkaller0: entered promiscuous mode
[  455.412231][T24806] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  455.412231][T24806] 
) failed (rc=-5)
[  455.417161][T24801] syzkaller0: entered allmulticast mode
[  455.440856][T24808] netlink: 'syz.0.6984': attribute type 1 has an invalid length.
[  455.448704][T24808] netlink: 'syz.0.6984': attribute type 2 has an invalid length.
[  455.460819][T24801] tipc: Resetting bearer <eth:syzkaller0>
[  455.480215][T24812] openvswitch: netlink: Message has 6 unknown bytes.
[  455.505021][T24812] loop9: detected capacity change from 0 to 2048
[  455.511709][T24799] tipc: Resetting bearer <eth:syzkaller0>
[  455.529849][T24799] tipc: Disabling bearer <eth:syzkaller0>
[  455.590079][T24823] loop0: detected capacity change from 0 to 4096
[  455.618795][T24826] loop7: detected capacity change from 0 to 164
[  455.647196][T24826] syz.7.6994: attempt to access beyond end of device
[  455.647196][T24826] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  455.676942][T24826] syz.7.6994: attempt to access beyond end of device
[  455.676942][T24826] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164
[  455.765543][T24838] loop2: detected capacity change from 0 to 164
[  455.787294][T24838] syz.2.6998: attempt to access beyond end of device
[  455.787294][T24838] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  455.826697][T24840] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6999'.
[  455.833267][T24838] syz.2.6998: attempt to access beyond end of device
[  455.833267][T24838] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164
[  455.918348][T24852] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  455.938410][T24854] loop7: detected capacity change from 0 to 512
[  455.959393][T24852] syzkaller0: entered promiscuous mode
[  455.964959][T24852] syzkaller0: entered allmulticast mode
[  455.976837][T24854] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #3: comm syz.7.7005: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  455.986099][T24852] tipc: Resetting bearer <eth:syzkaller0>
[  456.003168][T24854] EXT4-fs error (device loop7): ext4_quota_enable:7127: comm syz.7.7005: Bad quota inode: 3, type: 0
[  456.012673][T24851] tipc: Resetting bearer <eth:syzkaller0>
[  456.025417][T24854] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  456.038227][T24851] tipc: Disabling bearer <eth:syzkaller0>
[  456.046674][T24854] EXT4-fs (loop7): mount failed
[  456.182873][T24872] loop0: detected capacity change from 0 to 164
[  456.192391][T24872] syz.0.7010: attempt to access beyond end of device
[  456.192391][T24872] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  456.206975][T24872] syz.0.7010: attempt to access beyond end of device
[  456.206975][T24872] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164
[  456.250356][T24879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7013'.
[  456.351634][T24888] FAULT_INJECTION: forcing a failure.
[  456.351634][T24888] name failslab, interval 1, probability 0, space 0, times 0
[  456.364381][T24888] CPU: 0 UID: 0 PID: 24888 Comm: syz.0.7018 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(voluntary) 
[  456.364497][T24888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  456.364509][T24888] Call Trace:
[  456.364517][T24888]  <TASK>
[  456.364525][T24888]  __dump_stack+0x1d/0x30
[  456.364551][T24888]  dump_stack_lvl+0xe8/0x140
[  456.364575][T24888]  dump_stack+0x15/0x1b
[  456.364595][T24888]  should_fail_ex+0x265/0x280
[  456.364673][T24888]  ? __hw_addr_add_ex+0x162/0x440
[  456.364701][T24888]  should_failslab+0x8c/0xb0
[  456.364727][T24888]  __kmalloc_cache_noprof+0x4c/0x320
[  456.364829][T24888]  __hw_addr_add_ex+0x162/0x440
[  456.364864][T24888]  dev_addr_init+0xb1/0x120
[  456.364902][T24888]  alloc_netdev_mqs+0x212/0xab0
[  456.364925][T24888]  ? __pfx_ip6_tnl_dev_setup+0x10/0x10
[  456.365048][T24888]  ? selinux_capable+0x1f9/0x270
[  456.365078][T24888]  ip6_tnl_locate+0x37e/0x4a0
[  456.365175][T24888]  ip6_tnl_siocdevprivate+0x550/0x920
[  456.365209][T24888]  dev_ifsioc+0x8f8/0xaa0
[  456.365230][T24888]  dev_ioctl+0x78d/0x960
[  456.365249][T24888]  sock_ioctl+0x593/0x610
[  456.365320][T24888]  ? __pfx_sock_ioctl+0x10/0x10
[  456.365344][T24888]  __se_sys_ioctl+0xcb/0x140
[  456.365394][T24888]  __x64_sys_ioctl+0x43/0x50
[  456.365424][T24888]  x64_sys_call+0x19a8/0x2fb0
[  456.365522][T24888]  do_syscall_64+0xd2/0x200
[  456.365540][T24888]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  456.365566][T24888]  ? clear_bhb_loop+0x40/0x90
[  456.365590][T24888]  ? clear_bhb_loop+0x40/0x90
[  456.365618][T24888]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  456.365669][T24888] RIP: 0033:0x7f1cc2e6e9a9
[  456.365684][T24888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  456.365702][T24888] RSP: 002b:00007f1cc14d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  456.365720][T24888] RAX: ffffffffffffffda RBX: 00007f1cc3095fa0 RCX: 00007f1cc2e6e9a9
[  456.365742][T24888] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000009
[  456.365830][T24888] RBP: 00007f1cc14d7090 R08: 0000000000000000 R09: 0000000000000000
[  456.365845][T24888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  456.365896][T24888] R13: 0000000000000000 R14: 00007f1cc3095fa0 R15: 00007ffe01affb38
[  456.365915][T24888]  </TASK>
[  456.641375][T24895] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  456.648650][T24895] syzkaller0: entered promiscuous mode
[  456.654241][T24895] syzkaller0: entered allmulticast mode
[  456.664791][T24895] tipc: Resetting bearer <eth:syzkaller0>
[  456.671468][T24894] tipc: Resetting bearer <eth:syzkaller0>
[  456.680166][T24894] tipc: Disabling bearer <eth:syzkaller0>
[  456.725215][T24903] loop0: detected capacity change from 0 to 512
[  456.755084][T24903] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.7025: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  456.775072][T24903] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.7025: Bad quota inode: 3, type: 0
[  456.786706][T24903] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  456.803085][T24903] EXT4-fs (loop0): mount failed
[  456.862362][T24918] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24918 comm=syz.0.7030
[  456.863141][T24917] loop9: detected capacity change from 0 to 7
[  456.881555][T24917] buffer_io_error: 4 callbacks suppressed
[  456.881572][T24917] Buffer I/O error on dev loop9, logical block 0, async page read
[  456.895734][T24917] Buffer I/O error on dev loop9, logical block 0, async page read
[  456.903715][T24917]  loop9: unable to read partition table
[  456.910335][T24917] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  456.910335][T24917] 
) failed (rc=-5)
[  457.009523][T24930] loop0: detected capacity change from 0 to 164
[  457.022961][T24932] openvswitch: netlink: Message has 6 unknown bytes.
[  457.039395][T24932] loop2: detected capacity change from 0 to 2048
[  457.092889][T24942] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  457.123966][T24946] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24946 comm=syz.2.7041
[  457.129212][T24941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7040'.
[  457.185842][T24950] loop2: detected capacity change from 0 to 164
[  457.193035][T24952] tipc: Started in network mode
[  457.198027][T24952] tipc: Node identity , cluster identity 4711
[  457.204205][T24952] tipc: Failed to obtain node identity
[  457.209697][T24952] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  457.240174][T24952] syzkaller0: entered promiscuous mode
[  457.245766][T24952] syzkaller0: entered allmulticast mode
[  457.299485][T24963] loop2: detected capacity change from 0 to 2048
[  457.386969][T24972] openvswitch: netlink: Message has 6 unknown bytes.
[  457.402165][T24972] loop2: detected capacity change from 0 to 2048
[  457.452643][T24976] loop0: detected capacity change from 0 to 1024
[  457.463215][T24978] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24978 comm=syz.2.7054
[  457.464965][T24976] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  457.637408][T24988] loop0: detected capacity change from 0 to 1024
[  457.663921][T24988] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  457.732372][T24995] loop2: detected capacity change from 0 to 512
[  457.743634][T24995] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  457.754468][T24995] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  457.762581][T24995] System zones: 0-2, 18-18, 34-35
[  458.172988][   T29] kauditd_printk_skb: 1661 callbacks suppressed
[  458.173003][   T29] audit: type=1326 audit(1753378477.353:56821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25009 comm="syz.0.7065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc2e6e9a9 code=0x7ffc0000
[  458.173533][T25010] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  458.179330][   T29] audit: type=1326 audit(1753378477.353:56822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25009 comm="syz.0.7065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc2e6e9a9 code=0x7ffc0000
[  458.233845][   T29] audit: type=1326 audit(1753378477.353:56823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25009 comm="syz.0.7065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1cc2e6e9a9 code=0x7ffc0000
[  458.250230][T25012] loop0: detected capacity change from 0 to 2048
[  458.257671][   T29] audit: type=1326 audit(1753378477.353:56824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25009 comm="syz.0.7065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc2e6e9a9 code=0x7ffc0000
[  458.287504][   T29] audit: type=1326 audit(1753378477.353:56825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25009 comm="syz.0.7065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1cc2e6e9a9 code=0x7ffc0000
[  458.311123][   T29] audit: type=1326 audit(1753378477.383:56826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25009 comm="syz.0.7065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc2e6e9a9 code=0x7ffc0000
[  458.362979][   T29] audit: type=1400 audit(1753378477.533:56827): avc:  denied  { create } for  pid=25017 comm="syz.7.7068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  458.382883][   T29] audit: type=1400 audit(1753378477.533:56828): avc:  denied  { setopt } for  pid=25017 comm="syz.7.7068" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  458.403381][   T29] audit: type=1326 audit(1753378477.533:56829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25017 comm="syz.7.7068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2510e9a9 code=0x7ffc0000
[  458.427163][   T29] audit: type=1326 audit(1753378477.533:56830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25017 comm="syz.7.7068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c2510e9a9 code=0x7ffc0000
[  458.455473][T25021] loop9: detected capacity change from 0 to 7
[  458.461776][T25021] Buffer I/O error on dev loop9, logical block 0, async page read
[  458.470063][T25021] Buffer I/O error on dev loop9, logical block 0, async page read
[  458.477964][T25021]  loop9: unable to read partition table
[  458.485447][T25021] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  458.485447][T25021] 
) failed (rc=-5)
[  458.590417][T25027] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25027 comm=syz.2.7072
[  458.641332][T25031] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7074'.
[  458.806404][T25047] loop9: detected capacity change from 0 to 7
[  458.814012][T25047] Buffer I/O error on dev loop9, logical block 0, async page read
[  458.835223][T25047] Buffer I/O error on dev loop9, logical block 0, async page read
[  458.843262][T25047]  loop9: unable to read partition table
[  458.850618][T25047] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  458.850618][T25047] 
) failed (rc=-5)
[  458.885798][T25035] loop2: detected capacity change from 0 to 8192
[  458.894337][T25052] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7084'.
[  458.924061][T25054] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7086'.
[  459.097876][T25066] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  459.109997][T25071] xt_hashlimit: size too large, truncated to 1048576
[  459.138622][T25075] loop9: detected capacity change from 0 to 7
[  459.152517][T25075] Buffer I/O error on dev loop9, logical block 0, async page read
[  459.167035][T25066] syzkaller0: entered promiscuous mode
[  459.172592][T25066] syzkaller0: entered allmulticast mode
[  459.179794][T25075] Buffer I/O error on dev loop9, logical block 0, async page read
[  459.187867][T25075]  loop9: unable to read partition table
[  459.199276][T25075] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  459.199276][T25075] 
) failed (rc=-5)
[  459.243872][T25066] tipc: Resetting bearer <eth:syzkaller0>
[  459.258636][T25079] loop7: detected capacity change from 0 to 164
[  459.266427][T25065] tipc: Resetting bearer <eth:syzkaller0>
[  459.274953][T25079] bio_check_eod: 2 callbacks suppressed
[  459.274989][T25079] syz.7.7095: attempt to access beyond end of device
[  459.274989][T25079] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  459.296458][T25079] syz.7.7095: attempt to access beyond end of device
[  459.296458][T25079] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164
[  459.326747][T25065] tipc: Disabling bearer <eth:syzkaller0>
[  459.468514][T25104] loop9: detected capacity change from 0 to 7
[  459.475331][T25104] Buffer I/O error on dev loop9, logical block 0, async page read
[  459.484240][T25104] Buffer I/O error on dev loop9, logical block 0, async page read
[  459.492123][T25104]  loop9: unable to read partition table
[  459.498249][T25104] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  459.498249][T25104] 
) failed (rc=-5)
[  459.524799][T25106] netlink: 'syz.6.7107': attribute type 27 has an invalid length.
[  459.531873][T25108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7109'.
[  459.559733][T25113] openvswitch: netlink: Message has 6 unknown bytes.
[  459.560647][T25106] bridge0: port 2(bridge_slave_1) entered disabled state
[  459.573754][T25106] bridge0: port 1(bridge_slave_0) entered disabled state
[  459.580981][T25113] loop9: detected capacity change from 0 to 2048
[  459.600671][T25115] loop6: detected capacity change from 0 to 2048
[  459.608923][T25115] EXT4-fs: Ignoring removed bh option
[  459.641369][T25106] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  459.651976][T25106] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  459.685632][T25106] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  459.694905][T25106] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  459.704070][T25106] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  459.713314][T25106] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  459.730058][T25114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  459.778474][T25125] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  459.801628][T25125] syzkaller0: entered promiscuous mode
[  459.807215][T25125] syzkaller0: entered allmulticast mode
[  459.816995][T25125] tipc: Resetting bearer <eth:syzkaller0>
[  459.826034][T25124] tipc: Resetting bearer <eth:syzkaller0>
[  459.837976][T25124] tipc: Disabling bearer <eth:syzkaller0>
[  460.291193][T25142] loop9: detected capacity change from 0 to 7
[  460.297564][T25142]  loop9: unable to read partition table
[  460.303398][T25142] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  460.303398][T25142] 
) failed (rc=-5)
[  460.347344][T25146] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7122'.
[  460.698441][T25170] loop7: detected capacity change from 0 to 512
[  460.751991][T25173] loop0: detected capacity change from 0 to 512
[  461.101795][T25170] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended
[  461.111349][T25170] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  461.119419][T25170] System zones: 0-2, 18-18, 34-35
[  461.132212][T25178] loop9: detected capacity change from 0 to 512
[  461.156217][T25173] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  461.176672][T25173] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  461.191550][T25178] ext4 filesystem being mounted at /342/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  461.205909][T25173] System zones: 0-2, 18-18, 34-35
[  461.343118][T25185] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7136'.
[  461.489748][T25194] loop7: detected capacity change from 0 to 512
[  461.575053][T25194] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #3: comm syz.7.7140: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  461.603339][T25194] EXT4-fs error (device loop7): ext4_quota_enable:7127: comm syz.7.7140: Bad quota inode: 3, type: 0
[  461.617486][T25194] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  461.640458][T25194] EXT4-fs (loop7): mount failed
[  461.703093][T25203] loop0: detected capacity change from 0 to 128
[  461.800628][T25214] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7148'.
[  461.825999][T25218] loop0: detected capacity change from 0 to 2048
[  461.846175][T25222] loop7: detected capacity change from 0 to 512
[  461.864495][T25222] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #3: comm syz.7.7152: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  461.883500][T25222] EXT4-fs error (device loop7): ext4_quota_enable:7127: comm syz.7.7152: Bad quota inode: 3, type: 0
[  461.895306][T25222] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  461.910632][T25222] EXT4-fs (loop7): mount failed
[  461.924831][T25228] loop0: detected capacity change from 0 to 512
[  461.943687][T25228] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.7154: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  461.971636][T25228] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.7154: Bad quota inode: 3, type: 0
[  461.985052][T25228] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  461.999975][T25228] EXT4-fs (loop0): mount failed
[  462.156000][T25252] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7162'.
[  462.237539][T25258] loop9: detected capacity change from 0 to 7
[  462.243955][T25258] buffer_io_error: 2 callbacks suppressed
[  462.244046][T25258] Buffer I/O error on dev loop9, logical block 0, async page read
[  462.258298][T25258] Buffer I/O error on dev loop9, logical block 0, async page read
[  462.266299][T25258]  loop9: unable to read partition table
[  462.272011][T25258] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  462.272011][T25258] 
) failed (rc=-5)
[  462.391921][T25270] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  462.602517][T25276] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7173'.
[  462.628965][T25278] loop0: detected capacity change from 0 to 164
[  462.676739][T25284] loop9: detected capacity change from 0 to 7
[  462.683626][T25284] Buffer I/O error on dev loop9, logical block 0, async page read
[  462.691634][T25284] Buffer I/O error on dev loop9, logical block 0, async page read
[  462.699560][T25284]  loop9: unable to read partition table
[  462.705412][T25284] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  462.705412][T25284] 
) failed (rc=-5)
[  462.915336][T25299] syzkaller0: entered promiscuous mode
[  462.920869][T25299] syzkaller0: entered allmulticast mode
[  463.015261][T25309] loop9: detected capacity change from 0 to 7
[  463.021630][T25309] Buffer I/O error on dev loop9, logical block 0, async page read
[  463.029871][T25309] Buffer I/O error on dev loop9, logical block 0, async page read
[  463.037752][T25309]  loop9: unable to read partition table
[  463.043655][T25309] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  463.043655][T25309] 
) failed (rc=-5)
[  463.176012][T25311] loop9: detected capacity change from 0 to 512
[  463.182868][   T29] kauditd_printk_skb: 1312 callbacks suppressed
[  463.182883][   T29] audit: type=1400 audit(1753378482.363:58143): avc:  denied  { mounton } for  pid=25310 comm="syz.9.7190" path="/355/file0" dev="tmpfs" ino=1973 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  463.214269][T25311] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended
[  463.223669][T25311] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  463.231765][T25311] System zones: 0-2, 18-18, 34-35
[  463.231871][   T29] audit: type=1326 audit(1753378482.393:58144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25263 comm="syz.6.7168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb8bce05967 code=0x7ffc0000
[  463.237411][T25311] EXT4-fs mount: 53 callbacks suppressed
[  463.237484][T25311] EXT4-fs (loop9): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  463.260568][   T29] audit: type=1326 audit(1753378482.393:58145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25263 comm="syz.6.7168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb8bcdaab89 code=0x7ffc0000
[  463.302095][   T29] audit: type=1326 audit(1753378482.393:58146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25263 comm="syz.6.7168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb8bce0e9a9 code=0x7ffc0000
[  463.325625][   T29] audit: type=1326 audit(1753378482.393:58147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25263 comm="syz.6.7168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8bce0e9a9 code=0x7ffc0000
[  463.349380][   T29] audit: type=1326 audit(1753378482.393:58148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25263 comm="syz.6.7168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8bce0e9a9 code=0x7ffc0000
[  463.373125][   T29] audit: type=1326 audit(1753378482.393:58149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25263 comm="syz.6.7168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb8bce05967 code=0x7ffc0000
[  463.383063][T25320] loop0: detected capacity change from 0 to 1024
[  463.396838][   T29] audit: type=1326 audit(1753378482.393:58150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25263 comm="syz.6.7168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb8bcdaab89 code=0x7ffc0000
[  463.426720][   T29] audit: type=1326 audit(1753378482.393:58151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25263 comm="syz.6.7168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8bce0e9a9 code=0x7ffc0000
[  463.450518][   T29] audit: type=1326 audit(1753378482.403:58152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25263 comm="syz.6.7168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb8bce05967 code=0x7ffc0000
[  463.453094][T25320] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[  463.507843][T25320] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  463.531722][T19711] EXT4-fs (loop9): unmounting filesystem 00000000-0700-0000-0000-000000000000.
[  463.542921][T25320] EXT4-fs error (device loop0): ext4_get_journal_inode:5796: inode #32: comm syz.0.7192: iget: special inode unallocated
[  463.558574][T25320] EXT4-fs (loop0): Remounting filesystem read-only
[  463.565180][T25320] EXT4-fs (loop0): no journal found
[  463.570510][T25320] EXT4-fs (loop0): can't get journal size
[  463.580476][T25320] EXT4-fs (loop0): failed to initialize system zone (-117)
[  463.592899][T25320] EXT4-fs (loop0): mount failed
[  463.604692][T25328] loop9: detected capacity change from 0 to 2048
[  463.627815][T25328] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  463.633013][T25334] loop6: detected capacity change from 0 to 128
[  463.650884][T25334] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[  463.650978][T25334] EXT4-fs: failed to create workqueue
[  463.665952][T25334] EXT4-fs (loop6): mount failed
[  463.674283][T19711] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  463.812107][T25356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7205'.
[  463.927648][T25367] openvswitch: netlink: Message has 6 unknown bytes.
[  463.947470][T25361] loop9: detected capacity change from 0 to 512
[  463.953980][T25367] loop0: detected capacity change from 0 to 2048
[  463.960977][T25361] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended
[  463.970577][T25361] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  463.978734][T25361] System zones: 0-2, 18-18, 34-35
[  463.984565][T25367] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  463.984868][T25361] EXT4-fs (loop9): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  464.035382][T23467] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  464.059194][T19711] EXT4-fs (loop9): unmounting filesystem 00000000-0700-0000-0000-000000000000.
[  464.082140][T25373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7210'.
[  464.121970][T25384] loop9: detected capacity change from 0 to 512
[  464.134444][T25384] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #3: comm syz.9.7214: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  464.154817][T25384] EXT4-fs error (device loop9): ext4_quota_enable:7127: comm syz.9.7214: Bad quota inode: 3, type: 0
[  464.168211][T25384] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  464.185446][T25384] EXT4-fs (loop9): mount failed
[  464.220276][T25395] loop9: detected capacity change from 0 to 7
[  464.228322][T25395] Buffer I/O error on dev loop9, logical block 0, async page read
[  464.236403][T25395] Buffer I/O error on dev loop9, logical block 0, async page read
[  464.244274][T25395]  loop9: unable to read partition table
[  464.250007][T25395] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  464.250007][T25395] 
) failed (rc=-5)
[  464.283178][T25401] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  464.437215][T25425] loop0: detected capacity change from 0 to 512
[  464.448404][T25427] loop9: detected capacity change from 0 to 7
[  464.454748][T25427] Buffer I/O error on dev loop9, logical block 0, async page read
[  464.458531][T25425] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  464.462943][T25427] Buffer I/O error on dev loop9, logical block 0, async page read
[  464.475260][T25425] ext4 filesystem being mounted at /176/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  464.483121][T25427]  loop9: unable to read partition table
[  464.499317][T25427] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  464.499317][T25427] 
) failed (rc=-5)
[  464.539759][T25434] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  464.566998][T25438] netlink: 'syz.2.7236': attribute type 27 has an invalid length.
[  464.688157][T25438] bridge0: port 2(bridge_slave_1) entered disabled state
[  464.695441][T25438] bridge0: port 1(bridge_slave_0) entered disabled state
[  464.716538][T25438] $H�: left promiscuous mode
[  464.721475][T25438] bond_slave_0: left promiscuous mode
[  464.727116][T25438] bond_slave_1: left promiscuous mode
[  464.789825][T25438] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  464.800586][T25438] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  464.836374][T25438] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  464.845375][T25438] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  464.854322][T25438] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  464.863355][T25438] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  464.878338][T25468] loop9: detected capacity change from 0 to 164
[  464.901292][T25438] batman_adv: batadv0: Interface deactivated: gretap1
[  465.064514][T25484] loop9: detected capacity change from 0 to 128
[  465.131274][T25491] loop9: detected capacity change from 0 to 164
[  465.140862][T25491] syz.9.7252: attempt to access beyond end of device
[  465.140862][T25491] loop9: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  465.154842][T25491] syz.9.7252: attempt to access beyond end of device
[  465.154842][T25491] loop9: rw=0, sector=263328, nr_sectors = 4 limit=164
[  465.205326][T25495] loop9: detected capacity change from 0 to 128
[  465.223871][T23467] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  465.244957][T25497] loop9: detected capacity change from 0 to 7
[  465.251340][T25497]  loop9: unable to read partition table
[  465.257310][T25497] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  465.257310][T25497] 
) failed (rc=-5)
[  465.299025][T25501] openvswitch: netlink: Message has 6 unknown bytes.
[  465.318213][T25501] loop9: detected capacity change from 0 to 2048
[  465.336573][T25501] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  465.412208][T19711] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  465.449858][T25508] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7259'.
[  465.506813][T25514] netlink: 'syz.9.7261': attribute type 27 has an invalid length.
[  465.517978][T25515] loop0: detected capacity change from 0 to 512
[  465.549259][T25514] bridge0: port 2(bridge_slave_1) entered disabled state
[  465.556587][T25514] bridge0: port 1(bridge_slave_0) entered disabled state
[  465.565734][T25515] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  465.582653][T25515] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  465.590774][T25515] System zones: 0-2, 18-18, 34-35
[  465.596586][T25515] EXT4-fs (loop0): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  465.695943][T25520] loop6: detected capacity change from 0 to 2048
[  465.719411][T25521] loop7: detected capacity change from 0 to 164
[  465.728326][T25514] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  465.742001][T25514] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  465.753787][T25520] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  465.793457][T25514] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  465.802709][T25514] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  465.811652][T25514] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  465.820755][T25514] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  465.836575][T21439] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  465.897800][T25529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7266'.
[  465.921885][T25529] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  465.935036][T25529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7266'.
[  465.995433][T25540] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7271'.
[  466.051120][T25542] loop9: detected capacity change from 0 to 8192
[  466.184039][T23467] EXT4-fs (loop0): unmounting filesystem 00000000-0700-0000-0000-000000000000.
[  466.357620][T25570] loop9: detected capacity change from 0 to 2048
[  466.386646][T25570] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  466.407624][T25582] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  466.444590][T19711] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  466.524171][T25600] openvswitch: netlink: Message has 6 unknown bytes.
[  466.557335][T25600] loop9: detected capacity change from 0 to 2048
[  466.568940][T25606] FAULT_INJECTION: forcing a failure.
[  466.568940][T25606] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  466.582088][T25606] CPU: 0 UID: 0 PID: 25606 Comm: syz.0.7300 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(voluntary) 
[  466.582125][T25606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  466.582141][T25606] Call Trace:
[  466.582149][T25606]  <TASK>
[  466.582159][T25606]  __dump_stack+0x1d/0x30
[  466.582186][T25606]  dump_stack_lvl+0xe8/0x140
[  466.582261][T25606]  dump_stack+0x15/0x1b
[  466.582279][T25606]  should_fail_ex+0x265/0x280
[  466.582314][T25606]  should_fail+0xb/0x20
[  466.582347][T25606]  should_fail_usercopy+0x1a/0x20
[  466.582417][T25606]  _copy_from_iter+0xcf/0xe40
[  466.582456][T25606]  ? __build_skb_around+0x1a0/0x200
[  466.582509][T25606]  ? __alloc_skb+0x223/0x320
[  466.582547][T25606]  netlink_sendmsg+0x471/0x6b0
[  466.582575][T25606]  ? __pfx_netlink_sendmsg+0x10/0x10
[  466.582626][T25606]  __sock_sendmsg+0x145/0x180
[  466.582656][T25606]  ____sys_sendmsg+0x31e/0x4e0
[  466.582677][T25606]  ___sys_sendmsg+0x17b/0x1d0
[  466.582714][T25606]  __x64_sys_sendmsg+0xd4/0x160
[  466.582739][T25606]  x64_sys_call+0x2999/0x2fb0
[  466.582782][T25606]  do_syscall_64+0xd2/0x200
[  466.582805][T25606]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  466.582830][T25606]  ? clear_bhb_loop+0x40/0x90
[  466.582850][T25606]  ? clear_bhb_loop+0x40/0x90
[  466.582873][T25606]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.582915][T25606] RIP: 0033:0x7f1cc2e6e9a9
[  466.582931][T25606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  466.582953][T25606] RSP: 002b:00007f1cc14d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  466.582977][T25606] RAX: ffffffffffffffda RBX: 00007f1cc3095fa0 RCX: 00007f1cc2e6e9a9
[  466.583068][T25606] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[  466.583080][T25606] RBP: 00007f1cc14d7090 R08: 0000000000000000 R09: 0000000000000000
[  466.583094][T25606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  466.583109][T25606] R13: 0000000000000000 R14: 00007f1cc3095fa0 R15: 00007ffe01affb38
[  466.583134][T25606]  </TASK>
[  466.586988][T25600] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  466.833634][T19711] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  466.871998][T25618] loop9: detected capacity change from 0 to 2048
[  466.884147][T25618] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  466.896655][T25620] loop2: detected capacity change from 0 to 128
[  466.915543][T19711] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  467.168762][T25636] loop2: detected capacity change from 0 to 512
[  467.183467][T25636] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.7311: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  467.201743][T25636] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.7311: Bad quota inode: 3, type: 0
[  467.213169][T25636] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  467.228134][T25636] EXT4-fs (loop2): mount failed
[  467.270205][T25640] loop2: detected capacity change from 0 to 1764
[  467.276966][T25640] iso9660: Unknown parameter '0xffffffffffffffff00000000000000000000'
[  467.334869][T25642] openvswitch: netlink: Message has 6 unknown bytes.
[  467.349253][T25643] loop2: detected capacity change from 0 to 512
[  467.361526][T25642] loop6: detected capacity change from 0 to 2048
[  467.369932][T25643] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  467.382554][T25642] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  467.400879][T25643] EXT4-fs (loop2): 1 truncate cleaned up
[  467.407129][T25643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  467.435831][T21439] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  467.622185][T25653] loop6: detected capacity change from 0 to 2048
[  467.635340][T25653] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  467.662595][T21439] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  467.723762][T25659] loop0: detected capacity change from 0 to 128
[  467.824718][T20218] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  467.850323][T25664] loop6: detected capacity change from 0 to 512
[  467.865658][T25666] loop2: detected capacity change from 0 to 164
[  467.873723][T25664] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #3: comm syz.6.7321: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  467.879902][T25670] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  467.900561][T25664] EXT4-fs error (device loop6): ext4_quota_enable:7127: comm syz.6.7321: Bad quota inode: 3, type: 0
[  467.901239][T25666] syz.2.7319: attempt to access beyond end of device
[  467.901239][T25666] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  467.916259][T25670] syzkaller0: entered promiscuous mode
[  467.930894][T25670] syzkaller0: entered allmulticast mode
[  467.937130][T25666] syz.2.7319: attempt to access beyond end of device
[  467.937130][T25666] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164
[  467.939471][T25664] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  467.984860][T25664] EXT4-fs (loop6): mount failed
[  467.985725][T25670] tipc: Resetting bearer <eth:syzkaller0>
[  468.012181][T25667] tipc: Resetting bearer <eth:syzkaller0>
[  468.020479][T25667] tipc: Disabling bearer <eth:syzkaller0>
[  468.084239][T25682] loop6: detected capacity change from 0 to 128
[  468.098118][T25684] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  468.105576][T25684] syzkaller0: entered promiscuous mode
[  468.111133][T25684] syzkaller0: entered allmulticast mode
[  468.122652][T25684] tipc: Resetting bearer <eth:syzkaller0>
[  468.131181][T25683] tipc: Resetting bearer <eth:syzkaller0>
[  468.138420][T25683] tipc: Disabling bearer <eth:syzkaller0>
[  468.194861][   T29] kauditd_printk_skb: 883 callbacks suppressed
[  468.194896][   T29] audit: type=1326 audit(1753378487.373:59036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25662 comm="syz.0.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1cc2e65967 code=0x7ffc0000
[  468.225004][   T29] audit: type=1326 audit(1753378487.373:59037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25662 comm="syz.0.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1cc2e0ab89 code=0x7ffc0000
[  468.248766][   T29] audit: type=1326 audit(1753378487.373:59038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25662 comm="syz.0.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f1cc2e6e9a9 code=0x7ffc0000
[  468.272264][   T29] audit: type=1326 audit(1753378487.373:59039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25662 comm="syz.0.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1cc2e65967 code=0x7ffc0000
[  468.284311][T25691] loop9: detected capacity change from 0 to 128
[  468.296307][   T29] audit: type=1326 audit(1753378487.373:59040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25662 comm="syz.0.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1cc2e0ab89 code=0x7ffc0000
[  468.326006][   T29] audit: type=1326 audit(1753378487.373:59041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25662 comm="syz.0.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f1cc2e6e9a9 code=0x7ffc0000
[  468.349865][   T29] audit: type=1326 audit(1753378487.373:59042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25662 comm="syz.0.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1cc2e65967 code=0x7ffc0000
[  468.373434][   T29] audit: type=1326 audit(1753378487.373:59043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25662 comm="syz.0.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1cc2e0ab89 code=0x7ffc0000
[  468.396925][   T29] audit: type=1326 audit(1753378487.373:59044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25662 comm="syz.0.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f1cc2e6e9a9 code=0x7ffc0000
[  468.420398][   T29] audit: type=1326 audit(1753378487.403:59045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25662 comm="syz.0.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1cc2e65967 code=0x7ffc0000
[  468.548498][T25703] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7336'.
[  468.719651][T25695] loop9: detected capacity change from 0 to 128
[  468.738820][T25711] openvswitch: netlink: Message has 6 unknown bytes.
[  468.753882][T25711] loop0: detected capacity change from 0 to 2048
[  468.774793][T25711] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  468.828208][T23467] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  468.853243][T25715] loop9: detected capacity change from 0 to 2048
[  468.874102][T25717] netlink: 'syz.0.7341': attribute type 27 has an invalid length.
[  468.875506][T25715] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  468.899302][T25720] loop7: detected capacity change from 0 to 512
[  468.909435][T19711] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  468.937888][T25720] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #3: comm syz.7.7342: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  468.959022][T25720] EXT4-fs error (device loop7): ext4_quota_enable:7127: comm syz.7.7342: Bad quota inode: 3, type: 0
[  468.971306][T25720] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  468.973429][T25717] bridge0: port 2(bridge_slave_1) entered disabled state
[  468.987541][T25720] EXT4-fs (loop7): mount failed
[  468.993286][T25717] bridge0: port 1(bridge_slave_0) entered disabled state
[  469.038268][T25730] loop2: detected capacity change from 0 to 128
[  469.042354][T25717] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  469.055370][T25717] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  469.079572][T25717] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  469.088790][T25717] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  469.098085][T25717] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  469.107327][T25717] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  469.124065][T25717] batman_adv: batadv0: Interface deactivated: gretap1
[  469.185550][T25739] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  469.281716][T25749] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  469.480850][T25764] netlink: 'syz.6.7360': attribute type 27 has an invalid length.
[  469.523177][T25768] loop9: detected capacity change from 0 to 128
[  469.560226][T25771] pim6reg1: entered promiscuous mode
[  469.565387][T25772] loop6: detected capacity change from 0 to 512
[  469.565660][T25771] pim6reg1: entered allmulticast mode
[  469.595532][T25772] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  469.611526][T25772] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  469.629236][T25781] sch_tbf: burst 0 is lower than device lo mtu (76) !
[  469.648512][T25783] openvswitch: netlink: Message has 6 unknown bytes.
[  469.662004][T25785] wg2: entered promiscuous mode
[  469.666971][T25783] loop9: detected capacity change from 0 to 2048
[  469.673563][T25785] wg2: entered allmulticast mode
[  469.686294][T25783] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  469.713615][T21439] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  469.731047][T25791] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  469.748843][T19711] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  469.792198][T25797] netlink: 'syz.9.7374': attribute type 27 has an invalid length.
[  469.933013][T25801] FAULT_INJECTION: forcing a failure.
[  469.933013][T25801] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  469.946249][T25801] CPU: 0 UID: 0 PID: 25801 Comm: syz.9.7376 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(voluntary) 
[  469.946290][T25801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  469.946307][T25801] Call Trace:
[  469.946315][T25801]  <TASK>
[  469.946325][T25801]  __dump_stack+0x1d/0x30
[  469.946353][T25801]  dump_stack_lvl+0xe8/0x140
[  469.946378][T25801]  dump_stack+0x15/0x1b
[  469.946496][T25801]  should_fail_ex+0x265/0x280
[  469.946536][T25801]  should_fail+0xb/0x20
[  469.946648][T25801]  should_fail_usercopy+0x1a/0x20
[  469.946690][T25801]  _copy_from_user+0x1c/0xb0
[  469.946717][T25801]  kstrtouint_from_user+0x69/0xf0
[  469.946798][T25801]  ? 0xffffffff81000000
[  469.946815][T25801]  ? selinux_file_permission+0x1e4/0x320
[  469.946847][T25801]  proc_fail_nth_write+0x50/0x160
[  469.946946][T25801]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  469.946987][T25801]  vfs_write+0x269/0x8e0
[  469.947026][T25801]  ? vfs_read+0x47f/0x6f0
[  469.947135][T25801]  ? __rcu_read_unlock+0x4f/0x70
[  469.947210][T25801]  ? __fget_files+0x184/0x1c0
[  469.947234][T25801]  ksys_write+0xda/0x1a0
[  469.947275][T25801]  __x64_sys_write+0x40/0x50
[  469.947313][T25801]  x64_sys_call+0x2cdd/0x2fb0
[  469.947391][T25801]  do_syscall_64+0xd2/0x200
[  469.947417][T25801]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  469.947481][T25801]  ? clear_bhb_loop+0x40/0x90
[  469.947658][T25801]  ? clear_bhb_loop+0x40/0x90
[  469.947680][T25801]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.947700][T25801] RIP: 0033:0x7f3d1da9d45f
[  469.947726][T25801] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  469.947748][T25801] RSP: 002b:00007f3d1c0ff030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  469.947772][T25801] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3d1da9d45f
[  469.947788][T25801] RDX: 0000000000000001 RSI: 00007f3d1c0ff0a0 RDI: 0000000000000005
[  469.947804][T25801] RBP: 00007f3d1c0ff090 R08: 0000000000000000 R09: 0000000000000000
[  469.947819][T25801] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001
[  469.947835][T25801] R13: 0000000000000000 R14: 00007f3d1dcc5fa0 R15: 00007ffd54e86ac8
[  469.947856][T25801]  </TASK>
[  469.952213][T25812] loop6: detected capacity change from 0 to 512
[  470.009645][T25813] loop7: detected capacity change from 0 to 512
[  470.056556][T25812] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  470.059046][T25813] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  470.063113][T25812] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  470.068241][T25813] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002]
[  470.226801][T25813] EXT4-fs (loop7): orphan cleanup on readonly fs
[  470.234226][T25813] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.7381: bg 0: block 361: padding at end of block bitmap is not set
[  470.249396][T25813] EXT4-fs (loop7): Remounting filesystem read-only
[  470.256849][T25813] EXT4-fs (loop7): 1 truncate cleaned up
[  470.262984][T25813] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  470.287354][T21439] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  470.296794][T19851] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz-executor: dx entry: limit 0 != root limit 125
[  470.308834][T19851] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended
[  470.326962][T25823] loop2: detected capacity change from 0 to 512
[  470.381325][T25823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  470.403542][T25823] ext4 filesystem being mounted at /411/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  470.422938][T25830] loop6: detected capacity change from 0 to 164
[  470.445349][T25830] syz.6.7387: attempt to access beyond end of device
[  470.445349][T25830] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  470.470840][T25830] syz.6.7387: attempt to access beyond end of device
[  470.470840][T25830] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164
[  470.534357][T25823] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  470.561738][T25834] loop2: detected capacity change from 0 to 1024
[  470.569356][T25834] EXT4-fs: inline encryption not supported
[  470.575353][T25834] EXT4-fs: Ignoring removed i_version option
[  470.588813][T25834] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  470.601150][T25834] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.7389: lblock 2 mapped to illegal pblock 2 (length 1)
[  470.617290][T25834] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 48: comm syz.2.7389: lblock 0 mapped to illegal pblock 48 (length 1)
[  470.631974][T25834] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.7389: Failed to acquire dquot type 0
[  470.645264][T25834] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  470.656302][T25834] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.7389: mark_inode_dirty error
[  470.668026][T23122] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  470.669823][T25834] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  470.687857][T25834] EXT4-fs (loop2): 1 orphan inode deleted
[  470.694282][T25834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  470.706500][ T1693] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1)
[  470.723811][ T1693] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0
[  470.736332][T25834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  470.746606][T25834] EXT4-fs error (device loop2): __ext4_get_inode_loc:4792: comm syz.2.7389: Invalid inode table block 1 in block_group 0
[  470.759929][T25834] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  470.770207][T25834] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz.2.7389: mark_inode_dirty error
[  470.848248][ T1693] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.895545][ T1693] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.945395][ T1693] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  471.017085][ T1693] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  471.067842][T25863] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7399'.
[  471.081511][ T1693] bridge_slave_1: left allmulticast mode
[  471.082751][T25863] loop9: detected capacity change from 0 to 128
[  471.087323][ T1693] bridge_slave_1: left promiscuous mode
[  471.094184][T25863] vfat: Unknown parameter '4'
[  471.099234][ T1693] bridge0: port 2(bridge_slave_1) entered disabled state
[  471.112455][ T1693] bridge_slave_0: left allmulticast mode
[  471.118174][ T1693] bridge_slave_0: left promiscuous mode
[  471.124036][ T1693] bridge0: port 1(bridge_slave_0) entered disabled state
[  471.133525][ T1693] batman_adv: batadv0: Interface deactivated: gretap1
[  471.173394][ T1693] batman_adv: batadv0: Removing interface: gretap1
[  471.255090][ T1693] $H� (unregistering): (slave bond_slave_0): Releasing backup interface
[  471.264115][ T1693] bond_slave_0: left promiscuous mode
[  471.270963][ T1693] $H� (unregistering): (slave bond_slave_1): Releasing backup interface
[  471.279867][ T1693] bond_slave_1: left promiscuous mode
[  471.286471][ T1693] $H� (unregistering): Released all slaves
[  471.330932][T25851] chnl_net:caif_netlink_parms(): no params data found
[  471.353177][ T1693] tipc: Left network mode
[  471.408762][T25880] loop6: detected capacity change from 0 to 2048
[  471.418304][ T1693] hsr_slave_0: left promiscuous mode
[  471.425243][ T1693] hsr_slave_1: left promiscuous mode
[  471.431139][ T1693] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  471.438642][ T1693] batman_adv: batadv0: Removing interface: batadv_slave_0
[  471.446415][ T1693] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  471.450715][T25880] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  471.454002][ T1693] batman_adv: batadv0: Removing interface: batadv_slave_1
[  471.484532][ T1693] veth1_vlan: left promiscuous mode
[  471.490020][ T1693] veth0_vlan: left promiscuous mode
[  471.490973][T21439] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  471.567901][ T1693] team0 (unregistering): Port device team_slave_1 removed
[  471.577611][ T1693] team0 (unregistering): Port device team_slave_0 removed
[  471.614311][T25851] bridge0: port 1(bridge_slave_0) entered blocking state
[  471.621810][T25851] bridge0: port 1(bridge_slave_0) entered disabled state
[  471.629033][T25851] bridge_slave_0: entered allmulticast mode
[  471.635682][T25851] bridge_slave_0: entered promiscuous mode
[  471.642819][T25851] bridge0: port 2(bridge_slave_1) entered blocking state
[  471.649982][T25851] bridge0: port 2(bridge_slave_1) entered disabled state
[  471.657215][T25851] bridge_slave_1: entered allmulticast mode
[  471.663917][T25851] bridge_slave_1: entered promiscuous mode
[  471.696382][T25851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  471.710531][T25851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  471.719770][T25897] loop2: detected capacity change from 0 to 128
[  471.747787][T25851] team0: Port device team_slave_0 added
[  471.755311][T25851] team0: Port device team_slave_1 added
[  471.771331][T25902] netlink: 'syz.2.7411': attribute type 27 has an invalid length.
[  471.787989][T25851] batman_adv: batadv0: Adding interface: batadv_slave_0
[  471.795047][T25851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  471.821098][T25851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  471.834365][T25851] batman_adv: batadv0: Adding interface: batadv_slave_1
[  471.841490][T25851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  471.846632][T25906] netlink: 'syz.2.7413': attribute type 10 has an invalid length.
[  471.867706][T25851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  471.888883][T25906] team0: Port device dummy0 added
[  471.898148][T25906] netlink: 'syz.2.7413': attribute type 10 has an invalid length.
[  471.907322][T25906] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  471.919203][T25906] team0: Failed to send options change via netlink (err -105)
[  471.927171][T25906] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  471.937656][T25906] team0: Port device dummy0 removed
[  471.944461][T25906] $H�: (slave dummy0): Enslaving as an active interface with an up link
[  471.955778][T25851] hsr_slave_0: entered promiscuous mode
[  471.962021][T25851] hsr_slave_1: entered promiscuous mode
[  471.968232][T25851] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  471.975848][T25851] Cannot create hsr debugfs directory
[  472.034586][T25913] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7416'.
[  472.237774][T25851] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  472.246739][T25851] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  472.255624][T25851] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  472.265559][T25851] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  472.280484][T25851] bridge0: port 2(bridge_slave_1) entered blocking state
[  472.287672][T25851] bridge0: port 2(bridge_slave_1) entered forwarding state
[  472.295065][T25851] bridge0: port 1(bridge_slave_0) entered blocking state
[  472.302186][T25851] bridge0: port 1(bridge_slave_0) entered forwarding state
[  472.334110][T25851] 8021q: adding VLAN 0 to HW filter on device bond0
[  472.346635][ T1693] bridge0: port 1(bridge_slave_0) entered disabled state
[  472.354838][ T1693] bridge0: port 2(bridge_slave_1) entered disabled state
[  472.369854][T25851] 8021q: adding VLAN 0 to HW filter on device team0
[  472.379674][ T1693] bridge0: port 1(bridge_slave_0) entered blocking state
[  472.386793][ T1693] bridge0: port 1(bridge_slave_0) entered forwarding state
[  472.398636][ T1693] bridge0: port 2(bridge_slave_1) entered blocking state
[  472.405816][ T1693] bridge0: port 2(bridge_slave_1) entered forwarding state
[  472.480886][T25851] 8021q: adding VLAN 0 to HW filter on device batadv0
[  472.519866][T25943] openvswitch: netlink: Message has 6 unknown bytes.
[  472.549476][T25943] loop9: detected capacity change from 0 to 2048
[  472.575811][T25943] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  472.626657][T19711] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  472.627571][T25851] veth0_vlan: entered promiscuous mode
[  472.646503][T25851] veth1_vlan: entered promiscuous mode
[  472.670944][T25851] veth0_macvtap: entered promiscuous mode
[  472.685335][T25851] veth1_macvtap: entered promiscuous mode
[  472.698060][T25851] batman_adv: batadv0: Interface activated: batadv_slave_0
[  472.710125][T25851] batman_adv: batadv0: Interface activated: batadv_slave_1
[  472.720949][T25851] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  472.729954][T25851] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  472.738803][T25851] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  472.747668][T25851] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  472.789664][T25967] loop0: detected capacity change from 0 to 512
[  472.806530][T25967] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  472.807649][T25972] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7396'.
[  472.823115][T25967] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  472.932673][T23467] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  472.951512][T25975] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7430'.
[  472.985154][T25977] tipc: Started in network mode
[  472.990117][T25977] tipc: Node identity 72f6656e4ea6, cluster identity 4711
[  472.997489][T25977] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  473.007244][T25977] syzkaller0: entered promiscuous mode
[  473.012983][T25977] syzkaller0: entered allmulticast mode
[  473.021359][T25977] tipc: Resetting bearer <eth:syzkaller0>
[  473.029666][T25976] tipc: Resetting bearer <eth:syzkaller0>
[  473.037317][T25976] tipc: Disabling bearer <eth:syzkaller0>
[  473.204837][   T29] kauditd_printk_skb: 1274 callbacks suppressed
[  473.204853][   T29] audit: type=1326 audit(1753378492.383:60317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25934 comm="syz.6.7422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb8bce05967 code=0x7ffc0000
[  473.235515][   T29] audit: type=1326 audit(1753378492.383:60318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25934 comm="syz.6.7422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb8bcdaab89 code=0x7ffc0000
[  473.259062][   T29] audit: type=1326 audit(1753378492.383:60319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25934 comm="syz.6.7422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb8bce0e9a9 code=0x7ffc0000
[  473.283173][   T29] audit: type=1326 audit(1753378492.393:60320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25934 comm="syz.6.7422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb8bce05967 code=0x7ffc0000
[  473.306733][   T29] audit: type=1326 audit(1753378492.393:60321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25934 comm="syz.6.7422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb8bcdaab89 code=0x7ffc0000
[  473.331009][   T29] audit: type=1326 audit(1753378492.393:60322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25934 comm="syz.6.7422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb8bce0e9a9 code=0x7ffc0000
[  473.355146][   T29] audit: type=1326 audit(1753378492.403:60323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25934 comm="syz.6.7422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb8bce05967 code=0x7ffc0000
[  473.378693][   T29] audit: type=1326 audit(1753378492.403:60324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25934 comm="syz.6.7422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb8bcdaab89 code=0x7ffc0000
[  473.402869][   T29] audit: type=1326 audit(1753378492.403:60325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25934 comm="syz.6.7422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb8bce0e9a9 code=0x7ffc0000
[  473.426276][   T29] audit: type=1326 audit(1753378492.413:60326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25934 comm="syz.6.7422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb8bce05967 code=0x7ffc0000
[  473.478875][T25986] loop6: detected capacity change from 0 to 164
[  473.487417][T25986] syz.6.7435: attempt to access beyond end of device
[  473.487417][T25986] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  473.501468][T25986] syz.6.7435: attempt to access beyond end of device
[  473.501468][T25986] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164
[  473.587598][T25992] netlink: 'syz.6.7438': attribute type 27 has an invalid length.
[  473.615369][T25994] loop6: detected capacity change from 0 to 128
[  473.669075][T25998] loop6: detected capacity change from 0 to 2048
[  473.684050][T25998] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  473.709528][T21439] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  473.751853][T26005] loop6: detected capacity change from 0 to 512
[  473.764466][T26005] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  473.779019][T26005] ext4 filesystem being mounted at /250/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  473.904199][T21439] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  473.964657][T26021] 9pnet_fd: Insufficient options for proto=fd
[  474.013003][T26029] openvswitch: netlink: Message has 6 unknown bytes.
[  474.037410][T26029] loop2: detected capacity change from 0 to 2048
[  474.064546][T26029] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  474.135516][T20218] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  474.253646][T26044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7458'.
[  474.302214][T26049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7460'.
[  474.350838][T26053] loop2: detected capacity change from 0 to 164
[  474.361044][T26053] syz.2.7462: attempt to access beyond end of device
[  474.361044][T26053] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  474.376128][T26053] syz.2.7462: attempt to access beyond end of device
[  474.376128][T26053] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164
[  474.393871][T26055] 9pnet_fd: Insufficient options for proto=fd
[  474.495263][T26067] netlink: 'syz.5.7469': attribute type 27 has an invalid length.
[  474.521208][T26067] bridge0: port 2(bridge_slave_1) entered disabled state
[  474.528626][T26067] bridge0: port 1(bridge_slave_0) entered disabled state
[  474.564201][T26067] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  474.575557][T26067] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  474.599657][T26067] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  474.608719][T26067] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  474.618419][T26067] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  474.627433][T26067] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  474.653912][T26074] loop9: detected capacity change from 0 to 2048
[  474.663902][T26074] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  474.718584][T26080] loop5: detected capacity change from 0 to 164
[  474.751222][T26083] loop5: detected capacity change from 0 to 164
[  474.759859][T26083] syz.5.7475: attempt to access beyond end of device
[  474.759859][T26083] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  474.776145][T26083] syz.5.7475: attempt to access beyond end of device
[  474.776145][T26083] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164
[  474.795089][T26081] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  474.810159][T26081] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1658 with error 28
[  474.822757][T26081] EXT4-fs (loop9): This should not happen!! Data will be lost
[  474.822757][T26081] 
[  474.832608][T26081] EXT4-fs (loop9): Total free blocks count 0
[  474.838626][T26081] EXT4-fs (loop9): Free/Dirty block details
[  474.844617][T26081] EXT4-fs (loop9): free_blocks=2415919104
[  474.850366][T26081] EXT4-fs (loop9): dirty_blocks=1664
[  474.855748][T26081] EXT4-fs (loop9): Block reservation details
[  474.861894][T26081] EXT4-fs (loop9): i_reserved_data_blocks=104
[  474.957882][T26092] loop6: detected capacity change from 0 to 164
[  475.037207][T26094] loop6: detected capacity change from 0 to 512
[  475.054655][T26094] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #3: comm syz.6.7478: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  475.072825][T26094] EXT4-fs error (device loop6): ext4_quota_enable:7127: comm syz.6.7478: Bad quota inode: 3, type: 0
[  475.084846][T26094] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  475.100082][T26094] EXT4-fs (loop6): mount failed
[  475.134036][T26100] loop6: detected capacity change from 0 to 512
[  475.142095][T26100] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2
[  475.151844][T26100] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.7480: invalid indirect mapped block 2683928664 (level 1)
[  475.167461][T26100] EXT4-fs (loop6): 1 truncate cleaned up
[  475.173798][T26100] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  475.233947][T26103] openvswitch: netlink: Message has 6 unknown bytes.
[  475.270980][T26103] loop5: detected capacity change from 0 to 2048
[  475.318224][T26103] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  475.811469][T25851] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  475.893249][ T1693] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[  475.972080][T26122] loop5: detected capacity change from 0 to 164
[  475.985624][T26122] syz.5.7486: attempt to access beyond end of device
[  475.985624][T26122] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  476.033015][T26122] syz.5.7486: attempt to access beyond end of device
[  476.033015][T26122] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164
[  476.053804][T21439] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  476.216764][T26135] loop5: detected capacity change from 0 to 512
[  476.354287][T26135] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  476.406644][T26135] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  476.534907][T25851] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  476.595268][T26146] loop6: detected capacity change from 0 to 512
[  476.625845][T26146] ext4 filesystem being mounted at /260/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  476.637293][T26149] openvswitch: netlink: Message has 6 unknown bytes.
[  476.656380][T26149] loop5: detected capacity change from 0 to 2048
[  476.735722][T26155] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7497'.
[  476.754424][T26155] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  476.770496][T26155] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7497'.
[  476.840010][T26161] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  476.913954][T26165] loop5: detected capacity change from 0 to 512
[  476.923790][T26165] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #3: comm syz.5.7502: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  476.953308][T26165] EXT4-fs error (device loop5): ext4_quota_enable:7127: comm syz.5.7502: Bad quota inode: 3, type: 0
[  476.965499][T26165] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  476.980576][T26165] EXT4-fs (loop5): mount failed
[  476.995601][T26173] loop9: detected capacity change from 0 to 512
[  477.040865][T26178] loop5: detected capacity change from 0 to 164
[  477.065280][T26173] ext4 filesystem being mounted at /443/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  477.177001][T26185] loop6: detected capacity change from 0 to 512
[  477.186331][T26185] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended
[  477.196022][T26185] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  477.204296][T26185] System zones: 0-2, 18-18, 34-35
[  477.218146][T26192] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  477.226878][T26192] syzkaller0: entered promiscuous mode
[  477.232464][T26192] syzkaller0: entered allmulticast mode
[  477.241135][T26192] tipc: Resetting bearer <eth:syzkaller0>
[  477.249666][T26191] tipc: Resetting bearer <eth:syzkaller0>
[  477.256891][T26191] tipc: Disabling bearer <eth:syzkaller0>
[  477.266771][T26196] loop5: detected capacity change from 0 to 512
[  477.285560][T26196] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  477.314673][T26204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7517'.
[  477.331399][T26202] loop0: detected capacity change from 0 to 164
[  477.387719][T26204] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  477.396345][T26204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7517'.
[  477.485959][T26220] loop2: detected capacity change from 0 to 164
[  477.496203][T26220] syz.2.7522: attempt to access beyond end of device
[  477.496203][T26220] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  477.510956][T26220] syz.2.7522: attempt to access beyond end of device
[  477.510956][T26220] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164
[  477.578934][T26218] SELinux:  Context � is not valid (left unmapped).
[  477.909213][T26226] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  477.917476][T26226] syzkaller0: entered promiscuous mode
[  477.923166][T26226] syzkaller0: entered allmulticast mode
[  477.932144][T26226] tipc: Resetting bearer <eth:syzkaller0>
[  477.939764][T26225] tipc: Resetting bearer <eth:syzkaller0>
[  477.947258][T26225] tipc: Disabling bearer <eth:syzkaller0>
[  478.066092][T26230] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7526'.
[  478.075171][T26230] netlink: 312 bytes leftover after parsing attributes in process `syz.6.7526'.
[  478.084374][T26230] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7526'.
[  478.115549][T26232] netlink: 'syz.6.7527': attribute type 27 has an invalid length.
[  478.173760][T26239] openvswitch: netlink: Message has 6 unknown bytes.
[  478.195266][T26239] loop6: detected capacity change from 0 to 2048
[  478.203110][T26242] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7532'.
[  478.215413][   T29] kauditd_printk_skb: 1254 callbacks suppressed
[  478.215431][   T29] audit: type=1326 audit(1753378497.393:61579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26212 comm="syz.0.7520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1cc2e65967 code=0x7ffc0000
[  478.246156][   T29] audit: type=1326 audit(1753378497.393:61580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26212 comm="syz.0.7520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1cc2e0ab89 code=0x7ffc0000
[  478.269835][   T29] audit: type=1326 audit(1753378497.393:61581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26212 comm="syz.0.7520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f1cc2e6e9a9 code=0x7ffc0000
[  478.294326][T26242] loop2: detected capacity change from 0 to 512
[  478.301208][T26242] EXT4-fs: Ignoring removed nomblk_io_submit option
[  478.309047][   T29] audit: type=1326 audit(1753378497.483:61582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26212 comm="syz.0.7520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1cc2e65967 code=0x7ffc0000
[  478.333313][   T29] audit: type=1326 audit(1753378497.483:61583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26212 comm="syz.0.7520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1cc2e0ab89 code=0x7ffc0000
[  478.356862][   T29] audit: type=1326 audit(1753378497.483:61584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26212 comm="syz.0.7520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f1cc2e6e9a9 code=0x7ffc0000
[  478.381014][   T29] audit: type=1326 audit(1753378497.483:61585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26212 comm="syz.0.7520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc2e6e9a9 code=0x7ffc0000
[  478.405399][   T29] audit: type=1326 audit(1753378497.483:61586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26212 comm="syz.0.7520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc2e6e9a9 code=0x7ffc0000
[  478.436087][T26250] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  478.462957][T26242] ext4 filesystem being mounted at /449/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  478.481508][T26242] vlan0: entered allmulticast mode
[  478.502349][   T29] audit: type=1400 audit(1753378497.673:61587): avc:  denied  { write } for  pid=26251 comm="syz.0.7535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  478.539562][T26253] wireguard0: entered promiscuous mode
[  478.545156][T26253] wireguard0: entered allmulticast mode
[  478.575283][   T29] audit: type=1326 audit(1753378497.753:61588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26258 comm="syz.5.7537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec70e5e9a9 code=0x7ffc0000
[  478.671535][T26268] netlink: 'syz.6.7541': attribute type 27 has an invalid length.
[  478.886881][T26276] loop6: detected capacity change from 0 to 512
[  478.896094][T26276] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended
[  478.905838][T26276] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  478.914563][T26276] System zones: 0-2, 18-18, 34-35
[  479.334245][T26285] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7545'.
[  479.365854][T26289] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7547'.
[  479.383335][T26289] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7547'.
[  479.564173][T26296] loop9: detected capacity change from 0 to 512
[  479.593885][T26296] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #3: comm syz.9.7549: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  479.617439][T26298] loop2: detected capacity change from 0 to 512
[  479.624436][T26296] EXT4-fs error (device loop9): ext4_quota_enable:7127: comm syz.9.7549: Bad quota inode: 3, type: 0
[  479.643016][T26296] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  479.660640][T26296] EXT4-fs (loop9): mount failed
[  479.678718][T26298] ext4 filesystem being mounted at /451/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  479.711523][T26308] loop6: detected capacity change from 0 to 164
[  479.724898][T26311] loop9: detected capacity change from 0 to 512
[  479.734826][T26311] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #3: comm syz.9.7554: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  479.761241][T26311] EXT4-fs error (device loop9): ext4_quota_enable:7127: comm syz.9.7554: Bad quota inode: 3, type: 0
[  479.773841][T26311] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  479.798549][T26311] EXT4-fs (loop9): mount failed
[  479.811188][T26320] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7557'.
[  479.988764][T26339] loop9: detected capacity change from 0 to 512
[  480.007042][T26339] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #3: comm syz.9.7565: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  480.030029][T26339] EXT4-fs error (device loop9): ext4_quota_enable:7127: comm syz.9.7565: Bad quota inode: 3, type: 0
[  480.042192][T26339] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  480.056951][T26339] EXT4-fs (loop9): mount failed
[  480.108126][T26346] loop9: detected capacity change from 0 to 164
[  480.118625][T26346] syz.9.7567: attempt to access beyond end of device
[  480.118625][T26346] loop9: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  480.134152][T26346] syz.9.7567: attempt to access beyond end of device
[  480.134152][T26346] loop9: rw=0, sector=263328, nr_sectors = 4 limit=164
[  480.189085][T26354] loop6: detected capacity change from 0 to 164
[  480.198767][T26354] syz.6.7571: attempt to access beyond end of device
[  480.198767][T26354] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  480.213169][T26354] syz.6.7571: attempt to access beyond end of device
[  480.213169][T26354] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164
[  480.327756][T26368] loop9: detected capacity change from 0 to 164
[  480.338024][T26368] syz.9.7578: attempt to access beyond end of device
[  480.338024][T26368] loop9: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  480.353001][T26368] syz.9.7578: attempt to access beyond end of device
[  480.353001][T26368] loop9: rw=0, sector=263328, nr_sectors = 4 limit=164
[  480.401652][T26377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7582'.
[  480.412018][T26377] netlink: 312 bytes leftover after parsing attributes in process `syz.0.7582'.
[  480.421216][T26377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7582'.
[  480.451249][T26383] ==================================================================
[  480.459403][T26383] BUG: KCSAN: data-race in __lru_add_drain_all / folios_put_refs
[  480.467186][T26383] 
[  480.469535][T26383] write to 0xffff888237d25e68 of 1 bytes by task 26381 on cpu 1:
[  480.477284][T26383]  folios_put_refs+0x285/0x2d0
[  480.482096][T26383]  folio_batch_move_lru+0x1fd/0x230
[  480.487334][T26383]  folio_add_lru+0x14a/0x1f0
[  480.491954][T26383]  shmem_get_folio_gfp+0x7ab/0xd60
[  480.497110][T26383]  shmem_fault+0xf6/0x250
[  480.501479][T26383]  __do_fault+0xb9/0x200
[  480.505745][T26383]  handle_mm_fault+0xf78/0x2be0
[  480.510627][T26383]  __get_user_pages+0x1036/0x1fb0
[  480.515684][T26383]  __mm_populate+0x243/0x3a0
[  480.520300][T26383]  vm_mmap_pgoff+0x232/0x2e0
[  480.524927][T26383]  ksys_mmap_pgoff+0xc2/0x310
[  480.529686][T26383]  x64_sys_call+0x1602/0x2fb0
[  480.534392][T26383]  do_syscall_64+0xd2/0x200
[  480.538929][T26383]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.544844][T26383] 
[  480.547188][T26383] read to 0xffff888237d25e68 of 1 bytes by task 26383 on cpu 0:
[  480.554835][T26383]  __lru_add_drain_all+0x12b/0x3f0
[  480.560054][T26383]  lru_cache_disable+0x1f/0x30
[  480.564834][T26383]  __se_sys_move_pages+0x2a4/0x1350
[  480.570054][T26383]  __x64_sys_move_pages+0x78/0x90
[  480.575091][T26383]  x64_sys_call+0x2eab/0x2fb0
[  480.579781][T26383]  do_syscall_64+0xd2/0x200
[  480.584296][T26383]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.590204][T26383] 
[  480.592534][T26383] value changed: 0x01 -> 0x00
[  480.597220][T26383] 
[  480.599549][T26383] Reported by Kernel Concurrency Sanitizer on:
[  480.605702][T26383] CPU: 0 UID: 0 PID: 26383 Comm: syz.0.7585 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(voluntary) 
[  480.618214][T26383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  480.628306][T26383] ==================================================================