last executing test programs:

25.86693955s ago: executing program 3 (id=554):
openat$ppp(0xffffffffffffff9c, 0x0, 0x1e1802, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000067b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8)
sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x81, 0x1, [0x3]}, 0xa)

25.85015686s ago: executing program 3 (id=555):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000600"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="000000000001000066080000000000001800000000000000000000000000000095000000000d0000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x8080, &(0x7f0000000740)=ANY=[], 0x1, 0x2a4, &(0x7f0000000480)="$eJzs3T9rc2UUAPBzkzSNOqSIiyJ4QQen0rq6NEoFsZMSQR002BYkCYUWAlYwduoncPR7+BFcXPwGgqvg1g6VKzf33ia16R/65k3h7e83nd7nnvOc3KckU06+eXPY3z1I4uTsz2i1kqhtxVacJ7EWtaj8FI0AAF4c51kW/2QPyWzUFt8NALAMxed/4bF7AQCW47Mvvvyks7Oz/WmatuL19umom0TE8HTULdY7+/FdDGIvNqIdFxHZpSL+6OOd7WikubV4ZzgedfPM4de/l/U7f0dM8jejHWvz8zfTwmX+y1V3aXT2V6o/2vHa/Pz3/p8fw3F0m/Hu2zP9r0c7/vg2DmIQu5HnTvN/3EzTD7Ofz374Kt8mz09q0V2d3DeV1Zd0JAAAAAAAAAAAAAAAAAAAAAAAPAHraZoU43sm83vyS5P5OaNu/WKyvp5WZuf7jKv5QElVqJgPlEU5omecxS/VfJ2NNE2z8sZpfiPeaPhhAQAAAAAAAAAAAAAAAAAAAMgdfX/c7w0Ge4cLCappANXX+h9aZ2vmyltx3O/Vby64ev+9ZqcN5L3eenM0GrGgx3JX8FLez8Irr04P9/MogupgFrrXqx8URY/7vbRcqh5yv5fctVerOrhfZ5ea8ayNZZN/iYvs6pm2Llu9mtVc0NNovjJ36d8sy+5X5/2/ijMqrySTERv3232lDOa+wDxoXT+L324ueONbRn0hbzwAAAAAAAAAAAAAAAAAAMA10y/9zlk8uTW19tyaAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAlm/7+fxW0IuLqlWvBuEy+7Z4yaMbh0SO/RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ6A/wIAAP//4ipOSw==")
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x189)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

25.805388521s ago: executing program 3 (id=556):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000ffea0010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c"], 0x23c}}, 0x0)

25.743147772s ago: executing program 3 (id=559):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1000040, &(0x7f0000000000)={[{@errors_remount}]}, 0x1, 0x599, &(0x7f0000000540)="$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")
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa6}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYBLOB], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a38500000070000000"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r4, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0x1, 0xb}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x2}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x800)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x2)
r8 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100)
r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r10 = syz_pidfd_open(r9, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000240)={0x0, <r12=>0x0}, &(0x7f0000000280)=0x5)
setuid(r12)
pidfd_send_signal(r10, 0x2, 0x0, 0x0)
preadv2(r8, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0)

25.569126155s ago: executing program 3 (id=562):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000f02000000000000bc261090ff000000bf67200000000000160200000fff07006702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)

25.222845552s ago: executing program 3 (id=569):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000c0000000b30000007f"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000a10000000000000000000010851000000600000018180000", @ANYRES32=r0, @ANYBLOB="0000000000000000660000007fffffff18000000f8ffffff00000000100000009500000000000000360a00000000ffa218010000202078250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)

25.181293833s ago: executing program 32 (id=569):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000c0000000b30000007f"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000a10000000000000000000010851000000600000018180000", @ANYRES32=r0, @ANYBLOB="0000000000000000660000007fffffff18000000f8ffffff00000000100000009500000000000000360a00000000ffa218010000202078250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)

2.057785721s ago: executing program 1 (id=996):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00'}, 0x18)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8)
sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="8100010003"], 0xa)

2.010999292s ago: executing program 5 (id=997):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='devpts\x00', 0x1010401, 0x0)
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x63cf80fb, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000001000/0x4000)=nil)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
munlockall()
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c00000001900674c0000000000000000ff010000000000000000000000000001e00000010000000000000000000000004e210000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000ffffffffffffff7f0000000000000000000000000000000002000000000000000000000000000000800000000000000000000000000000000000000000010000000000000000000000000000088004000200000000000000"], 0xc0}, 0x7ffffffe}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x20f6, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000002c0)=0x1)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.945230574s ago: executing program 1 (id=1001):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000040000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xc2f, 0x0, 0x0, 0x100}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x4, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xca)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r7}, 0x10)
munlock(&(0x7f0000ff2000/0xe000)=nil, 0xe000)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000f02000000000000bc26100000000000bf67200000000000161c00000fff07006702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r8}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
write$selinux_context(r1, &(0x7f0000000000)='system_u:object_r:initrc_var_run_t:s0\x00', 0x26)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
r9 = syz_open_dev$evdev(0x0, 0x3, 0x40)
syz_usb_disconnect(r9)

1.882786755s ago: executing program 5 (id=1004):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
io_setup(0x8f0, &(0x7f0000002400)=<r0=>0x0)
io_submit(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x4000, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636522000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)

1.798925616s ago: executing program 5 (id=1005):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000006000000000000002e01000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="449d060721b9e6bb51f207000000", 0x0, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2}, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
timer_create(0x6, &(0x7f0000000180)={0x0, 0x22, 0x4, @tid=r3}, &(0x7f00000002c0))
setns(r4, 0x24020000)
umount2(&(0x7f0000000240)='.\x00', 0x8)
pread64(r2, &(0x7f00000006c0)=""/250, 0xfa, 0x7fff)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='sched_switch\x00', r6, 0x0, 0x3}, 0x18)
r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0xc0e40, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

1.60295491s ago: executing program 5 (id=1011):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001900)=ANY=[@ANYRESOCT], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000140), &(0x7f0000000040)='%pI4   \x00'}, 0x2a)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
r3 = syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x4661, 0x800, 0x5, 0x20e}, &(0x7f0000000240)=<r4=>0x0, &(0x7f0000000680)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1})
io_uring_enter(r3, 0x40f9, 0x217, 0xa5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r6 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r7)
write$binfmt_script(r6, &(0x7f00000003c0)={'#! ', './file0'}, 0xb)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@sb={'sb', 0x3d, 0xc6b5}}, {@abort}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$eJzs3c9rG1ceAPDvyPLPZNdeWNjNngwLu4EQeZ31JruwsF72sBQaCLSnHpoYWTGpZStYcoiNaRNKoZdCW3prLzn356X02h+HXtr/oySkrROa0kNxGf2wZVtyrMSWkubzgYne07zRe995ozcvmrEUwBNrPP0nE3EsIl5PIkbrzycR0V9NZSOma+Xura/l0yWJjY1nvkuqZe6ur+WjaZvUkXrmjxHx+SsRJzK76y2vrM7PFIuFpXp+orJweaK8snry0sLMXGGusHh6cmrq1Jl/nDn9UOENN2d++Hr16K03/v/XD6Z/evkPH772RRLTcbS+rjmOgzIe4/V90p/uwm3+d9CV9czHL+6jUNMRkD3MxtChtGP66r1yLEajb6/+Ge5mywCAw/JSRGy009d2DQDwWEtq5///9LodAEC3ND4HuLu+lm8svf1Eortu/zcihobqudr1zVo6W79mN1S9DjpyN9l2ZSSJiLEDqH88It755Pn30iUO6TokQCvXrkfEhbHx3eN/suuehU79rfXTc82Z8R0rjX/QPZ+m859/tpr/ZTbnP9Fi/jPY4r37IO7//s/cPIBq2krnf/9uurftXlP8dWN99dxvqnO+/uTipWIhHdt+GxHHo38wzU/uUcfxOz/fabeuef73/ZsvvJvWnz5ulcjczA5u32Z2pjLzMDE3u3094k/ZVvGn4/9gtf+TNvPfc/X0wH3qeOpfr77dbl0afxpvY9kd/+HauBHxl5b9n2yWSfa8P3GiejhMNA6KFj6ajpF29Y9nt/o/XdL6G/8X6Ia0/0f2jn8sab5fs7zvl968W+yrG6OftSvUfPy3jr/18T+QPFtNN469qzOVytJkxEDy9O7nT21t28g3yqfxH/9z6/d/Y/xrcfw/l77+hX3uiOytb99/8PgPVxr/bEf933Eihu7N97Wrf3/9P7Vtm/2Mf/tt4IPuNwAAAAAAAAAAAAAAAAAAAAAAAADoRCYijkaSyW2mM5lcrvYb3r+PkUyxVK6cuFhaXpyN6m9lj0V/pvFVl6NN34c6Wf8+/Eb+1I783yPidxHx1uBwNZ/Ll4qzvQ4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqOtPn9/9Q3gzsK9/WihQDAoRhyYgeAJ02Szfa6CQBAtw11VHr40NoBAHRPZ+d/AODXwPkfAJ489zn/7/wzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjUubNn02Xjx/W1fJqfvbKyPF+6cnK2UJ7PLSznc/nS0uXcXKk0Vyzk8qWFti90rfZQLJUuT8Xi8tWJSqFcmSivrJ5fKC0vVs5fWpiZK5wv9HctMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYv/LK6vxMsVhYkuhJYv7LWj88Ku2R6CwR12r996i05+ASMbA1Sgz3ZnACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeAz8EgAA//99gB7t")
execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

1.59493651s ago: executing program 4 (id=1012):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1}, 0x18)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8)
sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="8100010003"], 0xa)

1.489897852s ago: executing program 4 (id=1017):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=<r3=>r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2}, 0x18)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8)
sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
write$binfmt_misc(r4, &(0x7f0000000240), 0xfffffecc)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
r6 = io_uring_setup(0x6390, &(0x7f0000000000)={0x0, 0x621d, 0x1000, 0x1, 0x39c})
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r6, 0xc, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYRES16=r2, @ANYRES16=r4, @ANYRES8=r1, @ANYRESDEC=r5, @ANYRESDEC=r4, @ANYRES32=r4, @ANYRES8=r4, @ANYRES8=r6, @ANYRESOCT=r3], 0xa)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40600, 0x0)
ioctl$PPPIOCSMRU1(r7, 0x40047452, &(0x7f0000000200)=0xc)

1.366678794s ago: executing program 2 (id=1020):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2}, 0x18)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8)
sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="8100010003"], 0xa) (fail_nth: 9)

1.366222615s ago: executing program 5 (id=1021):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000300)=0x4001, 0x4)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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")
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, <r3=>0xffffffffffffffff, {0x29}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r4=>r0, {0xffffffffffff0000}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file1\x00'})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000"], 0x48)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f00000027c0)={<r5=>0x0, 0x0, "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", "197448aa54148773c2fa6e10e1d9ace20535603a72c3f24546add71be6ccb06d4a6efad60cea95ea2b7cf9fc64c8adc0cf5111ade7b05e022964f5a3ac18eebad35a36659b7b98e5dc8b02d6ffab0ddd5206bad53ec2976ac15ff361186bbf5f91057cfbab2ad73df1061acb59bda913efde17c8e0fd3569c3d2d574c4bbfdbe329b94088900ac666dcc0637947c4c4fc197d92373b074b19076b1e722eab844bd60c34cb27d1b2d5d4db19dad29258267add54752d20f9c8ed15d322560d1a8c326f34eaaf73901b0ab8cb3f330b6fa546f923b09722ad65985b98f3e2dce0ea6f4e40af97dff8a1c91349cdf35a358a2e135f90b8de862df972aa2931d9ba909f959f3997be2420236d0134beadc5a33a4bd6b43ed79d7702c43cb5bad156e69014ef0436f2f4a2fed9ac657c10abf90cad239dd4d2ca9155295cf1a5b7c6a9b8a113f2b497bdd027c257dd7c0136d6b174951d2f79ac2becf5782b303caa8c8b85909bd9ae1c9eb90bf66af5d78c923c57bcf7ef663c5b77e42a2dea08e39414821ccbc0afdab761718152b03ff9ad6cc7201b3fe54dbb33f7b4d7d18227bba413dbc10baf59a3659ba762e87d9d83f706f2b2f0d19dd73f2ea69507d8453ed034f882c69dfde2a2a389db21fe2e67316cdc3e5e859b1c35c605d03d8aeee21fa1a87c1b2ffa38a5b1783812d70395f7ddb8dce8a881526169f4484ca022893dfa44c8cee00c321bb3b556d17eef5157f9b50f9945f62f9160601a3829e1e8f90c45e5463f84c69706e9ff54f2324c69a9a6c48eaccc988f8d708540e996ebe5ba020906c54a02f063ce82d04408bf2c44760cf833a0d53fe989ae6ad4f2ce1b3c19e66596b5dbd2cdf395c60e6d0de28f3ccccb0e02877c2aba5325fcac2381e9c87b913e18f42b17ba66b8b605e8a53f5087c1b0c270f6bbbc52d1abed2f50d310e7d4be33066b6157af88af6758274177c7fa725b6fa29bad3e2eee76bdebb6c1a55074a0ae38ebd4327f991743204cc308561d2a2b1009ffd59afde1582081e57c4924fc67ec993f5d950286f85fa1e8e37356490193b423a6d3a712d9923c98e0beab7e662d8b44c6da94d6ad66926f71e9c8a8e947eee61b63fbfb11c08cd45473295100d86c9f9325a7cf38e22cccdd17f3951d12200adcdc45eca19aaa594ea4775e85abd94b73ef7673c50f455acae78cf333859a8cf06c9ad49844bb7e0dcb1c63d442412e485c20782d19f1e058bdf31db8a00f73be671cf50d12d19363bfcfb0f16118903673c1f5b8d0a577ad5e5bdf6e1d7819501e7f6fce99c932151f8f90fa335e99285418729e93e5f0405170ea2ffbe39c97ec333bf2ddb7ed41660701047b98f69305ab80b31598aea11b8cc028926309ce3b633d2bc53d0893a830c48b9c915ca00584ab4e1f50ad256186d0305f916110dfccbe2b1c3b62e492dd09ae9d4b171c24612b09e084ef99b24c72bd94d4105c9f1fd3b6d25f15260fd7ab5b9cd1ba080982633c7e9ccb32ea1e4586d6ee3cdd2e0489deea8a98d80d022c4ade9a582da3efdbd47f538731e735c9bfff90119814120fb1bf440e19aae3cf0ef73af16e7f4bec3c9209bb0743c14bf534a25b66624e0971395fe7368842b9a4cf89fed8b0a9695ea6c99612008c58407ed1ade1201abdeb62e2be8e62986edfc1ec0af9a4272e8c130fc62a58b064c0d3cd0cf40d46d69dcabdcc55d7075cbcedff8952a659311e821a84a84f789e7d3f35fc2c9fb1df029cde144fdf2470eb304cc9b284414be25b25b4da447aa1bb4748e43e4be2b40c21303871d3a48d4b91b740f9b04714e57c83f35d56ee4cac4a4a7945faab1f16c0a23a300e62fabb9979068fe5a662f403a5677b433a02cb558ca75505eada93ce64190457d6863220064bd1dfa50ce970c37e1c3e5613cffef2312bc4b6b96e01183435dd659bf73b3466ec2cfabf76442ec5f7e253dd06eddd46555a7a6dbcb9765e3e30a4c21461d445811e3186eb9e063cff3a2d6fdbc4ca56cb1e9d4af408f0084a995f120419ca459d6793efbd20cdad961b55dbe47a5eec778488cf7347911d9136bc84a712021559247573f08fbb068a58f4cffcbc61bde06f9b5653e0157e3477f069ff95df6c7ffe956abfb8147b629bbe829e6349ace821e41fe5ab8d3ad469d564e519d0614846ce8157e2117089f2bdc4893f3e5f3d2cfc39f2ad59d5696467e2b84530ed8ee17b5e24af6f5345ccde8b8d1e933741e322c238211c390fac17c59f5ca23cacd9b138f9e47b897a8b3806e5d381172b9e8dd01924e3a800f947f4a11b160e559cffc0a9f2f0a1f682501330cb5b80f60c00a191c55944c5df9daf69e8a7e55fe7cda6ec5984b9485c862ba9029ea16385a800617636de3a0156683e662cf7faaaea71ca478031ff70631f01a43b5269af67459f013ed74889da64c32f6bbd5bc370b5517d0298615272b1c9597d7887a72de6bd4066f19edd02998f76bb3a6e99d8ea0d2d86378eb0c030e8d133b08c9aac70dd9266a2ee0afa8e547a7e43411f507022e571a78384cea648b216d46e9f2d5c5c05be7757915f7ab288b88105966e0abc0d220214d202d521fe415d7d40b07dfb02c3af327a4dc9cbd9e855bb833f152d5de5e67d7a5dd30cd840e0889f9dbd6a3a1ced6d2f1873a89d247ad762a3735cad18410eef45f44efb845c08f0bc06815c3d20a0598d1bbca9d1eb769c7ef4b5373cd4980fd25904f68ffcfb4ac25175406289011ed2b85baf5e60710882818134f4431c8015266730a758bcb1645882d28bc61f651c5a4a360b278f546edd99bdc736c99c56e152a075c117c6312d7ed7db30d9062497139d9efe86b92e1984b37d662bbc3cee6e59dd8658fbe4ccf30d35c0c0ddc2d45aa316c118207a69a19b300cbe43d6eef8a356f5c7d9dec3b7b3f302ee401975c84ac77ff8e4031dec171c38c04c514c371436a8f090ecc1fad17b567a154c026af15ac15c12bb60261f8e264ae10cdc3d1576d087af9314b0aa98ba5052ef32eced4999274720e5af7baaa6e02ae3a1b2d6fc51a7c3aca610a67281b566d20e397fd9134d745ee0b5f0af72fd8ed51a3a4fd113de996ea725c1703c70bfc571b5b7333cd6ac83cc35e0d9ed143925b88bdcc679ff0ee8aba664ecf54c5484c6317d3f0ce5ac721e5b738472586f784d2595c6f123900600a2e3029d16674bc0c9fa85c5b8d57d1d76f381139d6f31cda9a23ef2742ec99f9fbb91b76782247b548b41c831437daf14733f254123ecd478860570708f76197ad072888688a8aa0e6460a2b9388f3030ba5c546550f1e2cf35b35f1726dac06e4308ab15d2e5d0c2f25e9532c98af9ef81090a174a5624d3aeb1e75bf88389029cc27c31457f5156ab58c7efd82fc60a32521c4f1f0927e4f3b1b82844937cfb5de302383f95962a6b67f1e805de58a332b89753c84bf3fc8add5653fdf259f379afd1ed3b4890e412a59ca70dae8bf51bb7fdb6de82c24a0697bbdc6469edf652de370c3cbcde55a057adeca2723548cea5ebe48248c3b1c5d9480da1b2f37a88a434dbd58b24e707813d9da294bb47dfc7aa9cf8b050c759f781108b26f26de97c923260278d7cf812a00b06a04ac4840eae477ca88bbbfbe3fe79a59c0081a0494e8a5d8e370a83bd94d4ef6d0fd742074c24ed79fb5a74357878fa560e080bfb355a89f815705e244a0845405f73dba9346752b1442a9078a79127967df71551d9d7ea1ea0d7fa7fca17c6622524329970b008247804ada11091be9bd779fd35306c6884c172bc63baac3b627f840796b35e898bccba61146892d4c7d93a2e9932acafcaa6f5574c29690f6e287971afeac2fa1775a66ae32d3c4a226f369dc6084096017fbf939fbef2fd5a0969a109ce51ffde6fb54201ff71994882ebbb406b52b68082439ad916bc6c8268e41a0b91b3a0ffb574b81b5fd6fc49ba7cb81c385a526a7607fa86ce2d94476cd347d690cb5818b35a337211bef3a256afa1894b02cc32ea08fb08d9aafbc3f7741622a1be029ab3dcd184d124eae00ff2d9df2da360be33f5e049fe5df607dcf1991f88949c5791c7af50a868c1d4d01b159310b68bce05df7c68b9eb1ed6baf1264a92fdc4be9736dd6af0598defdd05a6cb100968b232ec75505a4920eedc91d651aa815e4b5407360b8ad176fbc0c29cb2ac86346a5ebf090647221dcea76a3328b08d02c4ae55a73ea821fc9860b53bfdd130324b6e20ff22c3056c002c9188ba052759cde663614bc803966a55674ca3420df78608db1d43fa055fe1fbc5a442a4239eba7d0d20e12d14beb675e283fbf8ccfc41d3c82a44b25d85884ec624a5d306dd24b47c9fa6533297724dbfb17ee2cd88366e53b1d16ec42128eb15558d6ddd4b9ff4afe233067b6def3e80284afe87393771bb5e1f1283b99627efba846c1653b1758ded615a7974e875c67e2b41f8bc19c499da5f6baf191c996419c3da8d6f177a01b36ae25f871f685b4a74c4f08c0bc91ae4624fdfb69db71f1cf2e00d83640ca711edd954af2ef6d89d0bbc347973bbb23b7013c011d67f9c7bc119ff377894ef37b0977ec89bc5ccbc0d009a9ba39c98c571467e8421cca34ebcade954aa500bc21fc481a1338a29d6b9167dac1b3092d71bf7f36605fe6cfe0001db89c43079ef85d6decd291c1a5ed6ff43ee45bfd4594a5a3c82d73ff7827ebee2d471f83ebb4780fc8ff4bedc9c3ce669185cd4480c5ea9409ca0ebeec97fd0d2abf7ebb065a152f81cb404a665b0e0246dcde38f7908ef730dc6d3588bb9feaf76eeac39c6ade61ecd7412d00bf2dece70d9c96014bb8efec0d1bbbdad0ef6aa016f73f80bec0e5f516fbc3afd64c6a6c04910651a8d15de137e837e8dec22c78b3fd8aa9fc5972abfc68090fe3a9650bbb759fcf1103bcf5c8c108ff825a0488c1b3b6b02d3d8d594f1e1952f8c87a5cd4d580157e1aba645738cec075f0ad55932ea7a03b5cad45e6127736e6ec606ab9796c56c2c58e5607dd5507b714a74b9001276ae51fd6eff26d88b1faa863635d883497036a7f49d74935f430f53f2089c9b5702f17c56c4f39c7be553aef13e4292f7618e4ced0cac863786915440270eb04593c4523fbae20838920b7dc868a4c308f46fb6a2ea0879a8f919d47eeedadb0470a62dae3973a967448486fae14ab6c68e890b7b970c4a4775df09bbf32546691677fe26711e916d3c8fcc7ed07fc325d97ab03f883c8501c85b320236b4e8f2a8110873cd51febbb97c635c0f0cfb36b9b24940b0d7a64b156a40fa122145475e5b99b0a7d2428ebb4a1e6c6240a505ca7e82e1e23e660b590a19f6bd475f0b7c3a4122c5addec760dc4f96d1224ddedc4385716205803"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000017c0)={0x40, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r6=>0x0}], 0x5, "6cd359fd497a17"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000100)={{r6, 0x10000, 0x9, 0x4, 0x8, 0x4, 0x0, 0x400, 0x3, 0x6, 0x10, 0xfff, 0x28, 0xc, 0x5}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000001c0)=<r8=>0x0)
ptrace$pokeuser(0x6, r8, 0x20, 0xfff)
symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c0001"], 0x118}}, 0xc000)

1.234335467s ago: executing program 2 (id=1022):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0010000100001000000000000000000fc0100000000004000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000fc010000000000000000000000000000000000000000000000000000000000efffffffffffffff0000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000000000000000000000000000004c001400636d616328616573290000000000"], 0x1a0}}, 0x0)

1.234177377s ago: executing program 2 (id=1023):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x8, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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")
socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = openat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x464000, 0x40, 0x10}, 0x18)
setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e23, 0xfffffe01, @mcast2, 0xba26}, {0xa, 0x4e22, 0x80000000, @private1, 0x87}, 0x1, {[0x9, 0x2ac2d90, 0x0, 0x401, 0x8, 0x2, 0x78, 0x5a342161]}}, 0x5c)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0)
munlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0x100000000002}]})

1.115023239s ago: executing program 2 (id=1026):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000045000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000000000000000300"/180], 0xfc}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
flock(0xffffffffffffffff, 0x1)
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000080)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x14}}, 0x40800)
syz_clone(0x50a60080, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="840100002100010000000000fefffffffc020000000000000000000000000000fc0200fffffff1000000000000000001fffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000034011100fe80000000000000000000000000021164010102000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a00fc02000000000000000000000000000100000000000000000000000000000000fe880000000000000000000000000101200100000000000000000000000000022b030000043500000a0002000a010102000000000000000000000000fc000000000000000000000000000000fe8000000000000000000000000000bbffffffff0000000000000000000000006c010000000000000a000a00ac1414aa000000000000000000000000fc010000000000000000000000000001fe8000000000000000000000000000aa200100000000000000000000000000016c0200000735000000000a00"], 0x184}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, 0x0}, 0x20048843)
open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0)
mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18)
unshare(0x22020400)
pipe2(&(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x4000)
pipe2(&(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x84000)
close_range(r6, r7, 0x2)
tee(r5, r8, 0xfffffffffffffc01, 0x0)
connect$inet6(r4, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000001840), 0x3b, 0x0)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x10)
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_helper', 0x42, 0x0)

1.114204959s ago: executing program 2 (id=1028):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r1=>0x0}) (async, rerun: 64)
r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64)
r3 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x6, @mcast2, 0x6}, 0x1c) (async)
sendto$inet6(r3, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x2008, 0x4) (async)
read(r3, &(0x7f0000001400)=""/4046, 0xffd8) (async, rerun: 64)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x503, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x0) (rerun: 64)

853.722914ms ago: executing program 1 (id=1033):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x3a)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0)

473.516882ms ago: executing program 0 (id=1034):
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x101e02, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='afs_cell\x00', r0, 0x0, 0x10}, 0x18)
r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000000c0))
fcntl$setstatus(r1, 0x4, 0x400)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000140)=""/113, 0x71}, {&(0x7f00000001c0)=""/105, 0x69}], 0x2, 0x2, 0x8)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xd8, 0xa, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_EXPRESSIONS={0xb8, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x60, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x48, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x82}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xae}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xc7}]}}}]}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}]}, 0xd8}, 0x1, 0x0, 0x0, 0x88884feb28553779}, 0x4004840)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan3\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan1\x00', <r6=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000700), r3)
sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r7, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c010}, 0x8000)
ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000800))
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c40)={&(0x7f0000000c00)='qi_submit\x00', r0, 0x0, 0x2}, 0x18)
bind$bt_hci(r0, &(0x7f0000000c80)={0x1f, 0x3}, 0x6)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000d00)={'batadv_slave_1\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d40)={0x84, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x8894}, 0x4008801)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000e80)=<r10=>0x0)
r11 = syz_open_procfs(r10, &(0x7f0000000ec0)='net/netlink\x00')
ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000f00))
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f80), r0)
getsockopt$PNPIPE_IFINDEX(r11, 0x113, 0x2, &(0x7f0000000fc0)=<r13=>0x0, &(0x7f0000001000)=0x4)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r11, &(0x7f0000001180)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001140)={&(0x7f0000001040)={0xdc, r12, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4004004}, 0x20008080)
r14 = dup3(r8, r2, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0), 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x70, 0x1, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x24, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x6}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x9}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8}]}}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xee0}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xf}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_STATUS_MASK={0x8}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x5}, 0x4004)
recvmsg$can_bcm(r14, &(0x7f0000001540)={&(0x7f0000001300)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001380)=""/65, 0x41}], 0x1, &(0x7f0000001440)=""/225, 0xe1}, 0x40000020)

468.665701ms ago: executing program 0 (id=1035):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000ffea0010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c"], 0x23c}}, 0x0)

433.133882ms ago: executing program 0 (id=1036):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='devpts\x00', 0x1010401, 0x0)
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x63cf80fb, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000001000/0x4000)=nil)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
munlockall()
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c00000001900674c0000000000000000ff010000000000000000000000000001e00000010000000000000000000000004e210000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000ffffffffffffff7f0000000000000000000000000000000002000000000000000000000000000000800000000000000000000000000000000000000000010000000000000000000000000000088004000200000000000000"], 0xc0}, 0x1, 0x30}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x20f6, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000002c0)=0x1)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)

306.728155ms ago: executing program 5 (id=1037):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
r4 = fcntl$getown(r0, 0x9)
ioprio_get$pid(0x2, r4)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[r0], 0x1)
syz_emit_ethernet(0x17, &(0x7f00000001c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfd}, @void, {@ipv4={0x800, @igmp={{0x0, 0x4, 0x0, 0x5, 0x0, 0x68, 0x0, 0x5, 0x2, 0x0, @remote, @local, {[@generic={0x94, 0x0, "2021476421872f2f11c572c4d185"}, @end, @timestamp_addr={0x44, 0x0, 0x1d, 0x1, 0x6, [{@loopback, 0xfffffad9}, {@remote, 0x6}]}]}}, {0x16, 0x4, 0x0, @remote, "2193e37d29aecd"}}}}}, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x80000001, 0x0, 0x0, 0xf})
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x2}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffee6)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x14010, &(0x7f0000001280)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x11ee, &(0x7f0000003680)="$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")
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)
pwritev2(r7, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
r8 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x48)
sendfile(r8, r8, 0x0, 0x80000003f)
io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180), &(0x7f0000000280)) (async)
fcntl$getown(r0, 0x9) (async)
ioprio_get$pid(0x2, r4) (async)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[r0], 0x1) (async)
syz_emit_ethernet(0x17, &(0x7f00000001c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfd}, @void, {@ipv4={0x800, @igmp={{0x0, 0x4, 0x0, 0x5, 0x0, 0x68, 0x0, 0x5, 0x2, 0x0, @remote, @local, {[@generic={0x94, 0x0, "2021476421872f2f11c572c4d185"}, @end, @timestamp_addr={0x44, 0x0, 0x1d, 0x1, 0x6, [{@loopback, 0xfffffad9}, {@remote, 0x6}]}]}}, {0x16, 0x4, 0x0, @remote, "2193e37d29aecd"}}}}}, 0x0) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x80000001, 0x0, 0x0, 0xf}) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x2}, 0x18) (async)
bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffee6) (async)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x14010, &(0x7f0000001280)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e1e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425284b76d793e25a2558fa437e38b8200000000630000000000000000000000000000000000000000000000e911000000000066e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658000e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba064dfa60bd7fafb3c22dc057e6f9e2a5eb144290afe5369110a71d4b7fc5937a32e213c443f3b9e506b25cf9e2520999b330fc9e86bde8c8ec78f67c0c7f24db0000000", @ANYRES32], 0x1, 0x11ee, &(0x7f0000003680)="$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") (async)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) (async)
pwritev2(r7, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) (async)
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x48) (async)
sendfile(r8, r8, 0x0, 0x80000003f) (async)
io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) (async)

306.136934ms ago: executing program 4 (id=1038):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
io_setup(0x8f0, &(0x7f0000002400)=<r0=>0x0)
io_submit(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x4000, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636538000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)

305.834325ms ago: executing program 1 (id=1039):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1}, 0x18)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8)
sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="8100010003"], 0xa)

255.117416ms ago: executing program 4 (id=1040):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r0, 0x0, 0x1}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a002000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)

249.943605ms ago: executing program 1 (id=1041):
r0 = io_uring_setup(0x4d3f, &(0x7f0000000200)={0x0, 0xca6a, 0x40, 0x3, 0x6})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYRESOCT=r0, @ANYBLOB="1e1bae7d3c09165cc38d34157313a5b4665e30a03d02363d31a4e03ff2c14ca567b920b05b1e0f0a32a9b2f39c23350e40f5a9ecde5e92b4f541e38607b0aa8dd7874873fd9d85be590a400d32249209d88ff3aed1620bee892265a9109a315f030de70a05781301bd9e3cf931ede005b9711e06bae8439bc69d0f6a729eab15630cea5f49a62139b28f9de599ef18a80990", @ANYBLOB="e5c648c579a7f02922e5253f9a1d792c9af810358424b9092098ec9b57bde6cb6278f176794b644ddb9d329bc729088153dcdccc9514e4cf757054e3446b7e62e6bb35c61c5088982d5dff002e4edc65e6b92add929a99e69e472ed4002a5c9ecbf8a229a1ad1e55c9a82f8ae65f732d5be848244e3d3fde9cb0a6813ac0c7c6ec3352753cbf51fdbe7cf89a55239f47", @ANYRES64=r0, @ANYRES16=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRES32=r0], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x1}, 0x18) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) (async)
r6 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000580)='$\x00\x19y\x01\xff\xb4\x9e\x95oQE\xc9\x1f|\bZ\xf44\x7f)\x03c\x9a\x85\x01V\xb8p+\x84\xfb\xe6?\x88\xe9\x98Y\x0e\xd5P\xa2\xcc\x01*\xcd%v!\x82\xf1\xaaB\x04-\x88\xeb-q8\x03\xadO\xa0F\xc5Z\x0f\xee\x94\xfcy\xa5\xa4L\xa1\xd7g\x9d\xd2m5r\xef\xe1\xd1\x87\x1aM\xa6\xa8\xa2\xef\xb0\x9e\xa9d\xee\xacl\x9c\xcb\x03\x17\xbbG\x15\xba3\xa5r<]T\xc6R\x03\xee#\x0f\x88\xc4\xd3\x02\xd1 @\r\x1cc\xe4|\x13H\xc2\x1fq\x88\xdd\x98\xe1~\xb0\xedK\x17x\v\x9b\xaa\xb4\a\xb6\x8b\x9e*=\x8f\x05\x8b\x88\xc9\x12\xa6\x8fs\x98\xf1\xfe\xcdX\xce,AD\xd2v\xf4\xe5\xd3\xf3\xf1TY\x1c\x8a\x98\xf8\xcf6\xc3>]l\xdaQ\xac\n{)\xc9\x95\xb4\x12j}8\x03\xba&\xe8p\xe8\xf0\xa4\xa6e\xbc\xef\x93%/x\x19\xaa\xb5\x97\x98A\\\x91\x9a \xa8\xf8a\xd8\x97\x1eR\xaf\xc8\x9f', 0x0) (async)
read$ptp(r6, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x18) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="1b000000000003000000050000020073797a5f74756e00000000000000000008000500ff030000080003803d6cb332"], 0x3c}}, 0x0)
ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000180)={0xfff, 0x2, 0x4}) (async)
r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0xe4001, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r10, &(0x7f0000000380)="67707aa7cc4768fe846e9780c059ceed4271eee4fa5906bf25c59768e89c377b0577e26f5688afb23bae5fa659b9b62b401c47b4b68d866a4fcf21ee26418fb3b1c0f99f4720a678797961394af21d1bb0f2a514981416c5e05743978b7b0bc77bc01d40b1952f388d561965577efbd6395f562d4362eb0dec5fe0cd", &(0x7f0000002000)=@buf="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", 0x1}, 0x20)
bind$inet(r10, &(0x7f0000000140)={0x2, 0x4e22, @multicast1}, 0x10) (async)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$xdp(0xffffffffffffffff, 0x0, 0x0) (async)
bind$inet(r11, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) (async)
setsockopt$inet_tcp_int(r11, 0x6, 0x2, &(0x7f0000000340)=0x2801, 0x4) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff03}, 0x94) (async)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYRES32=r3], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4084)
r12 = io_uring_setup(0x4839, &(0x7f00000001c0)={0x0, 0x1f89, 0x8e00, 0x0, 0x329})
io_uring_enter(r12, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x8)

187.146267ms ago: executing program 0 (id=1042):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000c0000000b30000007f"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000a10000000000000000000010851000000600000018180000", @ANYRES32=r0, @ANYBLOB="0000000000000000660000007fffffff18000000f8ffffff00000000100000009500000000000000360a00000000000018015100202078250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)

187.019657ms ago: executing program 4 (id=1043):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="5000000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="031500000010000008000a00", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32=r1, @ANYBLOB="140012800b0001006d61637365630000040002800a000100aa"], 0x50}, 0x1, 0xffffffffffffffe4, 0x0, 0x2004d808}, 0x0)

162.002437ms ago: executing program 1 (id=1044):
fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@private0}, 0x0, @in=@empty}}, &(0x7f0000000240)=0xe8)
madvise(&(0x7f0000920000/0x3000)=nil, 0x3000, 0x12)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x13)
setreuid(r0, r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x6, 0x1000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48)
umount2(&(0x7f0000000580)='./file0\x00', 0x3)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x18)
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0x3, 0x0, 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xc5c, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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")
open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x9000)

137.581738ms ago: executing program 2 (id=1045):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180), 0xff, 0x23f, &(0x7f0000000540)="$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")
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x18)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@noquota}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x2, 0x4f3, &(0x7f0000000700)="$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")
chmod(&(0x7f0000000340)='./file1\x00', 0x0)
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071186a000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020052feffff0300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"])

91.016459ms ago: executing program 0 (id=1046):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x8, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)={0x3f00, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0x100000000002}]})

2.03176ms ago: executing program 0 (id=1047):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCMIWAIT(r2, 0x5453, 0x7cb7562f2d67) (async, rerun: 32)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f00000000c0)=0xffffbdfe) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r3=>0x0}) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) (async, rerun: 32)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x2, 0x8, 0xc, 0x7}, {0x1, 0x0, 0x9, 0x401, 0x0, 0x7fffffff}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe1e31d5aa9748ab8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x404}, 0x0) (async, rerun: 32)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x10003, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001200)={[{@nodiscard}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xeb}}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x55f, &(0x7f0000000580)="$eJzs3d9rU+cbAPDnpK2/v18riGxjjIIXczhT2+6Hg124y7HJhO3ehfZYpKmRJhXbCdOLebObIYMxJozdb/e7lP0D+yuETZAhZbvYTcZJT2q0SRNrtNF8PnDkfXNO+p4n73le35M3IQEMrYnsn0LEyxHxTRJxMCKSfN9o5Dsn1o9bu391NtuSqNc//StpHJfVm3+r+bz9eeWliPjtq4jjhc3tVldWF0rlcrqU1ydri5cmqyurJy4slubT+fTi9MzMqbdnpt97952+xfrG2X++/+T2h6e+Prr23S93D91M4nQcyPe1xvEErrVWJmIif03G4vQjB071obFBkuz0CbAtI3mej0U2BhyMkTzrgRfflxFRB4ZUIv9hSDXnAc17+z7dBz837n2wfgO0Of7R9fdGYk/j3mjfWvLQnVF2vzveh/azNn7989bNbIv+vQ8B0NW16xFxcnR08/iX5OPf9p3s4ZhH2zD+wbNzO5v/vNlu/lPYmP9Em/nP/ja5ux3d879wtw/NdJTN/95vO//dWLQaH8lr/2vM+caS8xfKaTa2/T8ijsXY7qy+1XrOqbU79U77Wud/2Za135wL5udxd3T3w8+ZK9VKTxJzq3vXI15pO/9NNvo/adP/2etxtsc2jqS3Xuu0r3v8T1f9p4jX2/b/gxWtZOv1ycnG9TDZvCo2+/vGkd87tb/T8Wf9v2/r+MeT1vXa6uO38eOef9NO+x6KP3q//nclnzXKu/LHrpRqtaWpiF3Jx5sfn37w3Ga9eXwW/7GjW49/7a7/vRHxeY/x3zj886s9xd+t/5/CImsW/9xj9f/jF+589MUP248/6/+3GqVj+SO9jH+9nuCTvHYAAAAAAAAwaAoRcSCSQnGjXCgUi+uf7zgc+wrlSrV2/Hxl+eJcNL4rOx5jheZK98GWz0NM5Z+HbdanH6nPRMShiPh2ZG+jXpytlOd2OngAAAAAAAAAAAAAAAAAAAAYEPs7fP8/88fITp8d8NT5yW8YXl3zvx+/9AQMJP//w/CS/zC85D8ML/kPw0v+w/CS/zC85D8ML/kPAAAAAAAAAAAAAAAAAAAAAAAAAAAAfXX2zJlsq6/dvzqb1ecurywvVC6fmEurC8XF5dnibGXpUnG+Upkvp8XZymK3v1euVC5NTcfylclaWq1NVldWzy1Wli/Wzl1YLM2n59KxZxIVAAAAAAAAAAAAAAAAAAAAPF+qK6sLpXI5XVJQ2FZhdDBOY3UhYiBO40Up7PTIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/BcAAP//8NI25Q==")
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0)

0s ago: executing program 4 (id=1048):
syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @remote}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, '\x00', '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}}}}}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='\v\x00\x00\x00'], 0x138)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000340), 0x4)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'})
syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"/100}}}}}}, 0x0)

kernel console output (not intermixed with test programs):

07ffd4c3afb08
[   58.149928][ T4004]  </TASK>
[   58.150798][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.476893][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.500125][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.646859][ T4023] loop1: detected capacity change from 0 to 256
[   58.658585][ T4026] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.676649][ T4024] bridge0: port 3(macsec1) entered blocking state
[   58.685334][ T4024] bridge0: port 3(macsec1) entered disabled state
[   58.708720][ T4024] macsec1: entered allmulticast mode
[   58.719796][ T4024] macsec1: left allmulticast mode
[   58.741955][ T4029] netlink: 24 bytes leftover after parsing attributes in process `syz.1.189'.
[   58.757412][ T4026] wireguard0: entered promiscuous mode
[   58.777377][ T4029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.189'.
[   58.792683][ T4034] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (15)
[   58.849329][ T4040] loop4: detected capacity change from 0 to 4096
[   58.884236][ T4040] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.939705][ T4048] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.948566][ T4048] syzkaller0: entered promiscuous mode
[   58.955712][ T4048] syzkaller0: entered allmulticast mode
[   58.983547][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.018558][   T30] kauditd_printk_skb: 93 callbacks suppressed
[   59.018575][   T30] audit: type=1326 audit(1757751011.984:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4054 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854158eba9 code=0x7ffc0000
[   59.020314][ T4046] tipc: Resetting bearer <eth:syzkaller0>
[   59.034890][   T30] audit: type=1326 audit(1757751012.004:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4054 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f854158eba9 code=0x7ffc0000
[   59.087271][   T30] audit: type=1326 audit(1757751012.004:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4054 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854158eba9 code=0x7ffc0000
[   59.114654][   T30] audit: type=1326 audit(1757751012.004:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4054 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854158eba9 code=0x7ffc0000
[   59.142631][   T30] audit: type=1326 audit(1757751012.004:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4054 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f854158eba9 code=0x7ffc0000
[   59.169992][   T30] audit: type=1326 audit(1757751012.004:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4054 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854158eba9 code=0x7ffc0000
[   59.196609][   T30] audit: type=1326 audit(1757751012.004:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4054 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854158eba9 code=0x7ffc0000
[   59.224330][   T30] audit: type=1326 audit(1757751012.004:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4054 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f854158eba9 code=0x7ffc0000
[   59.251949][   T30] audit: type=1400 audit(1757751012.004:748): avc:  denied  { mount } for  pid=4054 comm="syz.4.198" name="/" dev="configfs" ino=329 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   59.278134][   T30] audit: type=1326 audit(1757751012.004:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4054 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f854158eba9 code=0x7ffc0000
[   59.315897][ T4046] tipc: Disabling bearer <eth:syzkaller0>
[   59.346171][ T4066] ip6erspan0: entered promiscuous mode
[   59.389787][ T4076] Invalid ELF header type: 3 != 1
[   59.396356][ T4074] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[   59.404946][ T4074] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   59.415250][ T4074] vhci_hcd vhci_hcd.0: Device attached
[   59.434820][ T4076] Invalid ELF header type: 3 != 1
[   59.486445][ T4085] loop4: detected capacity change from 0 to 4096
[   59.512702][ T4087] loop3: detected capacity change from 0 to 512
[   59.521695][ T4085] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.601469][ T4087] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   59.624825][ T4087] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[   59.624867][ T4087] EXT4-fs: failed to create workqueue
[   59.641636][ T4087] EXT4-fs (loop3): mount failed
[   59.678866][ T3384] usb 1-1: new high-speed USB device number 2 using vhci_hcd
[   59.688532][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.878267][ T4126] loop1: detected capacity change from 0 to 128
[   59.898040][ T4119] tipc: Started in network mode
[   59.904130][ T4119] tipc: Node identity 8681c891d45a, cluster identity 4711
[   59.912548][ T4119] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.929128][ T4126] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   59.949211][ T4119] syzkaller0: entered promiscuous mode
[   59.955897][ T4119] syzkaller0: entered allmulticast mode
[   59.964166][ T4126] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   60.001310][ T4077] vhci_hcd: connection reset by peer
[   60.013142][ T4117] tipc: Resetting bearer <eth:syzkaller0>
[   60.022187][   T41] vhci_hcd: stop threads
[   60.028391][   T41] vhci_hcd: release socket
[   60.033877][   T41] vhci_hcd: disconnect device
[   60.050876][ T4135] loop4: detected capacity change from 0 to 1024
[   60.061288][ T3306] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   60.074389][ T4117] tipc: Disabling bearer <eth:syzkaller0>
[   60.090964][ T4135] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   60.262087][ T4158] ip6erspan0: entered promiscuous mode
[   60.360127][ T4151] program syz.2.233 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   60.435798][ T4165] loop0: detected capacity change from 0 to 2048
[   60.461846][ T4165] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.489841][ T4165] FAULT_INJECTION: forcing a failure.
[   60.489841][ T4165] name failslab, interval 1, probability 0, space 0, times 0
[   60.506848][ T4165] CPU: 0 UID: 0 PID: 4165 Comm: syz.0.237 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   60.506892][ T4165] Tainted: [W]=WARN
[   60.506900][ T4165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   60.506933][ T4165] Call Trace:
[   60.506942][ T4165]  <TASK>
[   60.506952][ T4165]  __dump_stack+0x1d/0x30
[   60.506982][ T4165]  dump_stack_lvl+0xe8/0x140
[   60.507009][ T4165]  dump_stack+0x15/0x1b
[   60.507032][ T4165]  should_fail_ex+0x265/0x280
[   60.507135][ T4165]  should_failslab+0x8c/0xb0
[   60.507166][ T4165]  kmem_cache_alloc_lru_noprof+0x55/0x310
[   60.507203][ T4165]  ? __d_alloc+0x3d/0x340
[   60.507250][ T4165]  __d_alloc+0x3d/0x340
[   60.507281][ T4165]  ? d_splice_alias_ops+0xdc/0x280
[   60.507306][ T4165]  d_alloc_parallel+0x53/0xc60
[   60.507388][ T4165]  ? selinux_inode_permission+0x62d/0x740
[   60.507435][ T4165]  ? make_vfsuid+0x49/0xa0
[   60.507469][ T4165]  ? __rcu_read_unlock+0x4f/0x70
[   60.507558][ T4165]  ? __d_lookup+0x316/0x340
[   60.507634][ T4165]  ? security_inode_permission+0x4a/0xb0
[   60.507679][ T4165]  __lookup_slow+0x8c/0x250
[   60.507800][ T4165]  lookup_slow+0x3c/0x60
[   60.507843][ T4165]  walk_component+0x1ec/0x220
[   60.507900][ T4165]  path_lookupat+0xfe/0x2a0
[   60.507937][ T4165]  filename_lookup+0x147/0x340
[   60.508042][ T4165]  user_path_at+0x3e/0x130
[   60.508092][ T4165]  __se_sys_quotactl+0xb6/0x670
[   60.508119][ T4165]  __x64_sys_quotactl+0x55/0x70
[   60.508197][ T4165]  x64_sys_call+0x15d6/0x2ff0
[   60.508226][ T4165]  do_syscall_64+0xd2/0x200
[   60.508340][ T4165]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   60.508372][ T4165]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   60.508406][ T4165]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.508432][ T4165] RIP: 0033:0x7f8cb396eba9
[   60.508468][ T4165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   60.508491][ T4165] RSP: 002b:00007f8cb23d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3
[   60.508517][ T4165] RAX: ffffffffffffffda RBX: 00007f8cb3bb5fa0 RCX: 00007f8cb396eba9
[   60.508532][ T4165] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: ffffffff80000200
[   60.508545][ T4165] RBP: 00007f8cb23d7090 R08: 0000000000000000 R09: 0000000000000000
[   60.508557][ T4165] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002
[   60.508569][ T4165] R13: 00007f8cb3bb6038 R14: 00007f8cb3bb5fa0 R15: 00007ffd4c3afb08
[   60.508645][ T4165]  </TASK>
[   60.826280][ T4169] loop2: detected capacity change from 0 to 256
[   60.828289][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.854446][ T4171] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.869046][ T4171] tipc: Resetting bearer <eth:syzkaller0>
[   60.878656][ T4170] tipc: Disabling bearer <eth:syzkaller0>
[   60.900078][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.953911][ T4179] loop1: detected capacity change from 0 to 512
[   60.985948][ T4180] bridge0: port 3(macsec1) entered blocking state
[   60.993063][ T4180] bridge0: port 3(macsec1) entered disabled state
[   61.014617][ T4179] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.243: error while reading EA inode 32 err=-116
[   61.082984][ T4180] macsec1: entered allmulticast mode
[   61.090651][ T4180] macsec1: left allmulticast mode
[   61.096590][ T4179] EXT4-fs (loop1): 1 orphan inode deleted
[   61.110166][ T4179] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   61.214375][ T4191] loop2: detected capacity change from 0 to 4096
[   61.247433][ T4191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   61.330883][ T4203] loop4: detected capacity change from 0 to 2048
[   61.384161][ T4203] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   61.392236][ T4212] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.411393][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.411746][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.443360][ T4212] tipc: Resetting bearer <eth:syzkaller0>
[   61.458657][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.473425][ T4211] tipc: Disabling bearer <eth:syzkaller0>
[   61.501908][ T4216] loop1: detected capacity change from 0 to 128
[   61.514314][ T4218] netlink: 'syz.4.257': attribute type 3 has an invalid length.
[   61.531120][ T4218] netlink: 'syz.4.257': attribute type 3 has an invalid length.
[   61.541383][ T4216] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   61.600154][ T4216] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   61.663202][ T3306] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   61.732008][ T4235] loop2: detected capacity change from 0 to 512
[   61.764769][ T4235] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   61.791083][ T4237] loop0: detected capacity change from 0 to 4096
[   61.802687][ T4235] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   61.828475][ T4237] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   61.864116][ T4246] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.871677][ T4247] loop4: detected capacity change from 0 to 256
[   61.894576][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.913397][ T4238] tipc: Resetting bearer <eth:syzkaller0>
[   61.937447][ T4238] tipc: Disabling bearer <eth:syzkaller0>
[   61.966833][ T4249] loop4: detected capacity change from 0 to 2048
[   62.010425][ T4256] process 'syz.1.271' launched './file0' with NULL argv: empty string added
[   62.051006][ T4249] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   62.098594][ T4249] FAULT_INJECTION: forcing a failure.
[   62.098594][ T4249] name failslab, interval 1, probability 0, space 0, times 0
[   62.113930][ T4249] CPU: 1 UID: 0 PID: 4249 Comm: syz.4.269 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   62.113969][ T4249] Tainted: [W]=WARN
[   62.114020][ T4249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   62.114036][ T4249] Call Trace:
[   62.114045][ T4249]  <TASK>
[   62.114055][ T4249]  __dump_stack+0x1d/0x30
[   62.114083][ T4249]  dump_stack_lvl+0xe8/0x140
[   62.114103][ T4249]  dump_stack+0x15/0x1b
[   62.114122][ T4249]  should_fail_ex+0x265/0x280
[   62.114154][ T4249]  should_failslab+0x8c/0xb0
[   62.114209][ T4249]  kmem_cache_alloc_lru_noprof+0x55/0x310
[   62.114515][ T4249]  ? ext4_alloc_inode+0x38/0x310
[   62.114547][ T4249]  ? __pfx_ext4_alloc_inode+0x10/0x10
[   62.114611][ T4249]  ext4_alloc_inode+0x38/0x310
[   62.114640][ T4249]  ? __pfx_ext4_alloc_inode+0x10/0x10
[   62.114705][ T4249]  alloc_inode+0x40/0x170
[   62.114739][ T4249]  iget_locked+0xf4/0x5c0
[   62.114783][ T4249]  __ext4_iget+0x152/0x2240
[   62.114832][ T4249]  ext4_lookup+0x161/0x390
[   62.114937][ T4249]  __lookup_slow+0x193/0x250
[   62.114976][ T4249]  lookup_slow+0x3c/0x60
[   62.115068][ T4249]  walk_component+0x1ec/0x220
[   62.115109][ T4249]  path_lookupat+0xfe/0x2a0
[   62.115199][ T4249]  filename_lookup+0x147/0x340
[   62.115642][ T4249]  user_path_at+0x3e/0x130
[   62.115723][ T4249]  __se_sys_quotactl+0xb6/0x670
[   62.115797][ T4249]  __x64_sys_quotactl+0x55/0x70
[   62.115823][ T4249]  x64_sys_call+0x15d6/0x2ff0
[   62.115853][ T4249]  do_syscall_64+0xd2/0x200
[   62.115918][ T4249]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   62.115965][ T4249]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   62.116013][ T4249]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.116107][ T4249] RIP: 0033:0x7f854158eba9
[   62.116128][ T4249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   62.116152][ T4249] RSP: 002b:00007f853ffef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3
[   62.116177][ T4249] RAX: ffffffffffffffda RBX: 00007f85417d5fa0 RCX: 00007f854158eba9
[   62.116239][ T4249] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: ffffffff80000200
[   62.116299][ T4249] RBP: 00007f853ffef090 R08: 0000000000000000 R09: 0000000000000000
[   62.116316][ T4249] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002
[   62.116332][ T4249] R13: 00007f85417d6038 R14: 00007f85417d5fa0 R15: 00007ffcfc6fef78
[   62.116356][ T4249]  </TASK>
[   62.399170][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.443271][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.534472][ T4267] bridge0: port 3(macsec1) entered blocking state
[   62.543659][ T4267] bridge0: port 3(macsec1) entered disabled state
[   62.586730][ T4268] loop0: detected capacity change from 0 to 2048
[   62.589067][ T4267] macsec1: entered allmulticast mode
[   62.616574][ T4267] macsec1: left allmulticast mode
[   62.628073][ T4270] loop1: detected capacity change from 0 to 4096
[   62.643705][    C1] hrtimer: interrupt took 39757 ns
[   62.690731][ T3296]  loop0: p2 p3 p7
[   62.730196][ T4268]  loop0: p2 p3 p7
[   62.761021][ T4283] loop4: detected capacity change from 0 to 128
[   62.788132][ T4285] syzkaller0: entered promiscuous mode
[   62.794311][ T4285] syzkaller0: entered allmulticast mode
[   62.803624][ T3701] udevd[3701]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[   62.804993][ T4016] udevd[4016]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory
[   62.817483][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[   62.858231][ T4283] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   62.895816][ T3572] udevd[3572]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory
[   62.909456][ T4017] udevd[4017]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[   62.921807][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[   62.942276][ T4288] hub 6-0:1.0: USB hub found
[   62.967914][ T4288] hub 6-0:1.0: 8 ports detected
[   62.983778][ T4294] __nla_validate_parse: 3 callbacks suppressed
[   62.983798][ T4294] netlink: 24 bytes leftover after parsing attributes in process `syz.4.287'.
[   63.029960][ T4294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.287'.
[   63.081608][ T4305] netlink: 40 bytes leftover after parsing attributes in process `syz.0.292'.
[   63.146343][ T4311] loop2: detected capacity change from 0 to 256
[   63.155204][ T4310] SELinux:  Context system_u:object is not valid (left unmapped).
[   63.214799][ T4307] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.223075][ T4316] loop3: detected capacity change from 0 to 512
[   63.233655][ T4307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.294'.
[   63.244287][ T4316] EXT4-fs (loop3): unable to read superblock
[   63.261550][ T4306] tipc: Resetting bearer <eth:syzkaller0>
[   63.322521][ T4306] tipc: Disabling bearer <eth:syzkaller0>
[   63.332319][ T4322] loop4: detected capacity change from 0 to 2048
[   63.354495][ T4327] netlink: 'syz.3.302': attribute type 10 has an invalid length.
[   63.365804][ T4327] netlink: 40 bytes leftover after parsing attributes in process `syz.3.302'.
[   63.388023][ T4327] batman_adv: batadv0: Adding interface: veth1_vlan
[   63.395524][ T4327] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.431684][ T4327] batman_adv: batadv0: Interface activated: veth1_vlan
[   63.440813][ T4331] syzkaller0: entered promiscuous mode
[   63.447415][ T4331] syzkaller0: entered allmulticast mode
[   63.592967][ T4347] loop4: detected capacity change from 0 to 256
[   63.616825][ T4352] loop1: detected capacity change from 0 to 128
[   63.687035][ T4352] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   63.751959][ T4366] netlink: 24 bytes leftover after parsing attributes in process `syz.4.316'.
[   63.766026][ T4372] netlink: 40 bytes leftover after parsing attributes in process `syz.0.318'.
[   63.782017][ T4369] syz.2.317 (4369) used obsolete PPPIOCDETACH ioctl
[   63.815736][ T4374] netlink: 32 bytes leftover after parsing attributes in process `syz.3.319'.
[   63.828287][ T4366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.316'.
[   63.858545][ T4377] loop1: detected capacity change from 0 to 256
[   63.858635][ T4374] 9pnet: Could not find request transport: fD
[   64.017161][ T4383] C: renamed from team_slave_0 (while UP)
[   64.042029][ T4381] can0: slcan on ttyS3.
[   64.052858][   T30] kauditd_printk_skb: 305 callbacks suppressed
[   64.052894][   T30] audit: type=1400 audit(1757751017.024:1055): avc:  denied  { read } for  pid=3032 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   64.103656][   T30] audit: type=1400 audit(1757751017.074:1056): avc:  denied  { search } for  pid=3032 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   64.104967][ T4395] capability: warning: `syz.3.326' uses deprecated v2 capabilities in a way that may be insecure
[   64.132459][   T30] audit: type=1400 audit(1757751017.074:1057): avc:  denied  { search } for  pid=3032 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   64.174468][   T30] audit: type=1400 audit(1757751017.074:1058): avc:  denied  { search } for  pid=3032 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   64.199219][   T30] audit: type=1400 audit(1757751017.074:1059): avc:  denied  { read } for  pid=3032 comm="dhcpcd" name="n27" dev="tmpfs" ino=2631 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   64.226075][   T30] audit: type=1400 audit(1757751017.074:1060): avc:  denied  { open } for  pid=3032 comm="dhcpcd" path="/run/udev/data/n27" dev="tmpfs" ino=2631 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   64.254526][   T30] audit: type=1400 audit(1757751017.074:1061): avc:  denied  { getattr } for  pid=3032 comm="dhcpcd" path="/run/udev/data/n27" dev="tmpfs" ino=2631 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   64.294765][   T30] audit: type=1400 audit(1757751017.074:1062): avc:  denied  { create } for  pid=4392 comm="syz.3.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   64.319226][   T30] audit: type=1400 audit(1757751017.074:1063): avc:  denied  { bind } for  pid=4392 comm="syz.3.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   64.341486][   T30] audit: type=1326 audit(1757751017.154:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4392 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ac5e5eba9 code=0x7ffc0000
[   64.378062][ T4394] loop2: detected capacity change from 0 to 2048
[   64.389854][ T4383] can0 (unregistered): slcan off ttyS3.
[   64.449570][ T4402] wg1: entered promiscuous mode
[   64.455285][ T4402] wg1: entered allmulticast mode
[   64.463267][ T4404] loop3: detected capacity change from 0 to 4096
[   64.613850][ T4420] SELinux:  Context Ü is not valid (left unmapped).
[   64.623862][ T4420] SELinux:  Context syz is not valid (left unmapped).
[   64.668992][ T4420] Falling back ldisc for ttyS3.
[   64.675509][ T4424] loop3: detected capacity change from 0 to 256
[   64.693175][ T4427] ip6erspan0: entered promiscuous mode
[   64.840802][ T4442] syzkaller0: entered promiscuous mode
[   64.848109][ T4442] syzkaller0: entered allmulticast mode
[   64.848873][ T3384] vhci_hcd: vhci_device speed not set
[   65.203270][ T4486] bridge0: port 3(macsec1) entered blocking state
[   65.211005][ T4486] bridge0: port 3(macsec1) entered disabled state
[   65.244858][ T4486] macsec1: entered allmulticast mode
[   65.255123][ T4490] netlink: 'syz.2.353': attribute type 32 has an invalid length.
[   65.265635][ T4490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.353'.
[   65.281689][ T4486] macsec1: left allmulticast mode
[   65.294642][ T4490] (unnamed net_device) (uninitialized): option coupled_control: invalid value (17)
[   65.337656][ T4496] loop2: detected capacity change from 0 to 1024
[   65.348055][ T4496] EXT4-fs: inline encryption not supported
[   65.384181][ T4502] loop1: detected capacity change from 0 to 512
[   65.413076][ T4502] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   65.873033][ T4549] loop4: detected capacity change from 0 to 4096
[   66.097920][ T4565] loop4: detected capacity change from 0 to 736
[   66.232105][ T4578] syzkaller0: entered promiscuous mode
[   66.232131][ T4578] syzkaller0: entered allmulticast mode
[   66.417612][ T4590] loop3: detected capacity change from 0 to 1024
[   66.417933][ T4590] EXT4-fs: inline encryption not supported
[   66.424434][ T4594] loop1: detected capacity change from 0 to 512
[   66.454688][ T4594] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   66.454710][ T4594] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   66.488701][ T4594] EXT4-fs (loop1): 1 orphan inode deleted
[   66.488727][ T4594] EXT4-fs (loop1): 1 truncate cleaned up
[   66.509970][ T4599] ip6erspan0: entered promiscuous mode
[   66.528305][ T4594] netlink: 'syz.1.396': attribute type 4 has an invalid length.
[   66.536825][ T4594] netlink: 'syz.1.396': attribute type 4 has an invalid length.
[   66.585213][ T4594] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[   66.586280][ T4594] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   66.665134][ T4594] EXT4-fs (loop1): Remounting filesystem read-only
[   66.665193][ T4594] EXT4-fs warning (device loop1): ext4_xattr_inode_lookup_create:1597: inode #17: comm syz.1.396: cleanup dec ref error -28
[   66.858364][ T4626] bridge0: port 3(macsec1) entered blocking state
[   66.865812][ T4626] bridge0: port 3(macsec1) entered disabled state
[   66.896800][ T4626] macsec1: entered allmulticast mode
[   66.920226][ T4628] loop3: detected capacity change from 0 to 256
[   66.951048][ T4626] macsec1: left allmulticast mode
[   67.068111][ T4646] netlink: 'syz.1.418': attribute type 9 has an invalid length.
[   67.111503][ T4646] loop1: detected capacity change from 0 to 128
[   67.142925][ T4646] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[   67.162275][ T4646] System zones: 1-3, 19-19, 35-36
[   67.173273][ T4646] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   67.213186][ T4646] (unnamed net_device) (uninitialized): option mode: invalid value (7)
[   67.242185][ T4669] ip6erspan0: entered promiscuous mode
[   67.248682][ T4668] loop3: detected capacity change from 0 to 256
[   67.335371][ T4680] loop1: detected capacity change from 0 to 128
[   67.379692][ T4680] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   67.487819][ T4684] netlink: 'syz.0.431': attribute type 1 has an invalid length.
[   67.496363][ T4684] netlink: 'syz.0.431': attribute type 2 has an invalid length.
[   67.764070][ T4722] loop3: detected capacity change from 0 to 256
[   67.799556][ T4726] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[   67.812792][ T4725] IPVS: stopping master sync thread 4726 ...
[   67.839727][ T2993] udevd[2993]: worker [3296] terminated by signal 33 (Unknown signal 33)
[   67.866701][ T2993] udevd[2993]: worker [3296] failed while handling '/devices/virtual/block/loop3'
[   67.972182][ T4738] loop4: detected capacity change from 0 to 4096
[   68.019670][ T4751] __nla_validate_parse: 14 callbacks suppressed
[   68.019689][ T4751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.458'.
[   68.027538][ T4757] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.052322][ T4757] tipc: Resetting bearer <eth:syzkaller0>
[   68.063829][ T4756] tipc: Disabling bearer <eth:syzkaller0>
[   68.110222][ T4761] netlink: 32 bytes leftover after parsing attributes in process `syz.0.462'.
[   68.154318][ T4764] netlink: 24 bytes leftover after parsing attributes in process `syz.0.464'.
[   68.184894][ T4769] loop4: detected capacity change from 0 to 256
[   68.217070][ T4764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.464'.
[   68.312852][ T4782] netlink: 40 bytes leftover after parsing attributes in process `syz.2.469'.
[   68.429544][ T4785] usb usb8: usbfs: process 4785 (syz.3.467) did not claim interface 0 before use
[   68.438367][ T4794] bridge0: port 3(macsec1) entered blocking state
[   68.448393][ T4794] bridge0: port 3(macsec1) entered disabled state
[   68.469387][ T4794] macsec1: entered allmulticast mode
[   68.486720][ T4794] macsec1: left allmulticast mode
[   68.551176][ T4800] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.618993][ T4800] tipc: Resetting bearer <eth:syzkaller0>
[   68.629548][ T4815] SELinux:  policydb string  does not match my string SE Linux
[   68.639991][ T4815] SELinux: failed to load policy
[   68.651793][ T4798] tipc: Disabling bearer <eth:syzkaller0>
[   68.670122][ T4815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.481'.
[   68.681766][ T4815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.481'.
[   68.886229][ T4842] netlink: 24 bytes leftover after parsing attributes in process `syz.0.492'.
[   68.910830][ T4842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.492'.
[   68.924480][ T4843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.493'.
[   68.998263][ T4846] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.020402][ T4846] tipc: Resetting bearer <eth:syzkaller0>
[   69.032054][ T4844] tipc: Disabling bearer <eth:syzkaller0>
[   69.044400][ T4851] loop4: detected capacity change from 0 to 736
[   69.057060][ T4851] iso9660: Unknown parameter './bus'
[   69.197988][   T30] kauditd_printk_skb: 379 callbacks suppressed
[   69.198009][   T30] audit: type=1400 audit(1757751022.164:1444): avc:  denied  { create } for  pid=4866 comm="syz.3.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   69.235703][ T4865] loop2: detected capacity change from 0 to 4096
[   69.249532][   T30] audit: type=1400 audit(1757751022.214:1445): avc:  denied  { write } for  pid=4866 comm="syz.3.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   69.347151][ T4879] ip6erspan0: entered promiscuous mode
[   69.441056][ T4888] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.462989][ T4888] syzkaller0: entered promiscuous mode
[   69.469106][ T4888] syzkaller0: entered allmulticast mode
[   69.498030][   T30] audit: type=1326 audit(1757751022.464:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4892 comm="syz.1.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718eeeeba9 code=0x7ffc0000
[   69.501212][ T4888] tipc: Resetting bearer <eth:syzkaller0>
[   69.533386][   T30] audit: type=1326 audit(1757751022.464:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4892 comm="syz.1.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718eeeeba9 code=0x7ffc0000
[   69.541817][ T4894] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.586163][ T4896] loop2: detected capacity change from 0 to 128
[   69.594522][ T4894] tipc: Resetting bearer <eth:syzkaller0>
[   69.600730][   T30] audit: type=1326 audit(1757751022.544:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4892 comm="syz.1.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f718eeeeba9 code=0x7ffc0000
[   69.611161][ T4896] ext4 filesystem being mounted at /98/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   69.628381][   T30] audit: type=1326 audit(1757751022.544:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4892 comm="syz.1.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718eeeeba9 code=0x7ffc0000
[   69.668523][   T30] audit: type=1326 audit(1757751022.544:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4892 comm="syz.1.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718eeeeba9 code=0x7ffc0000
[   69.695226][   T30] audit: type=1326 audit(1757751022.554:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4892 comm="syz.1.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f718eeeeba9 code=0x7ffc0000
[   69.725758][   T30] audit: type=1326 audit(1757751022.554:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4892 comm="syz.1.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718eeeeba9 code=0x7ffc0000
[   69.760814][   T30] audit: type=1326 audit(1757751022.554:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4892 comm="syz.1.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718eeeeba9 code=0x7ffc0000
[   69.792252][ T4887] tipc: Resetting bearer <eth:syzkaller0>
[   69.816856][ T4887] tipc: Disabling bearer <eth:syzkaller0>
[   69.843323][ T4891] tipc: Disabling bearer <eth:syzkaller0>
[   69.931281][ T4911] team0: Device gre1 is of different type
[   70.163111][ T4932] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.184487][ T4932] syzkaller0: entered promiscuous mode
[   70.184707][ T4935] sd 0:0:1:0: device reset
[   70.191506][ T4932] syzkaller0: entered allmulticast mode
[   70.209270][ T4932] tipc: Resetting bearer <eth:syzkaller0>
[   70.231527][ T4931] tipc: Resetting bearer <eth:syzkaller0>
[   70.245963][ T4931] tipc: Disabling bearer <eth:syzkaller0>
[   70.337660][ T4941] loop4: detected capacity change from 0 to 512
[   70.386320][ T4941] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   70.399783][ T4947] bridge0: port 3(macsec1) entered blocking state
[   70.416069][ T4947] bridge0: port 3(macsec1) entered disabled state
[   70.431749][ T4947] macsec1: entered allmulticast mode
[   70.449238][ T4947] macsec1: left allmulticast mode
[   70.675710][ T4969] loop4: detected capacity change from 0 to 512
[   70.687070][ T4969] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.547: bg 0: block 5: invalid block bitmap
[   70.784156][ T4969] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem
[   70.871895][ T4969] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.547: invalid indirect mapped block 3 (level 2)
[   70.951948][ T4969] EXT4-fs (loop4): 2 truncates cleaned up
[   71.012872][ T4991] loop3: detected capacity change from 0 to 256
[   71.126135][ T4999] loop3: detected capacity change from 0 to 1024
[   71.141249][ T5001] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.156105][ T5001] tipc: Resetting bearer <eth:syzkaller0>
[   71.176331][ T5000] tipc: Disabling bearer <eth:syzkaller0>
[   71.192152][ T4999] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   71.220823][ T5005] ip6erspan0: entered promiscuous mode
[   71.247513][ T3303] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /111/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0
[   71.310710][ T3303] EXT4-fs (loop3): Remounting filesystem read-only
[   71.316582][ T5008] bridge0: port 3(macsec1) entered blocking state
[   71.327090][ T5008] bridge0: port 3(macsec1) entered disabled state
[   71.336859][ T5008] macsec1: entered allmulticast mode
[   71.386134][ T5008] macsec1: left allmulticast mode
[   71.514776][ T5012] sd 0:0:1:0: device reset
[   71.582315][ T3433] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.633148][ T3433] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.704959][ T3433] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.720623][ T5023] loop2: detected capacity change from 0 to 4096
[   71.763566][ T3433] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.828003][ T5028] loop4: detected capacity change from 0 to 256
[   71.960394][ T3433] bridge_slave_1: left allmulticast mode
[   71.967100][ T3433] bridge_slave_1: left promiscuous mode
[   71.974459][ T3433] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.008486][ T3433] bridge_slave_0: left allmulticast mode
[   72.015453][ T3433] bridge_slave_0: left promiscuous mode
[   72.023349][ T3433] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.122581][ T5060] loop2: detected capacity change from 0 to 4096
[   72.176191][ T3433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   72.190515][ T3433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   72.203744][ T3433] bond0 (unregistering): Released all slaves
[   72.218408][ T5063] loop4: detected capacity change from 0 to 512
[   72.234266][ T5067] ip6erspan0: entered promiscuous mode
[   72.241133][ T5063] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   72.253466][ T5063] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[   72.265766][ T5063] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.584: Corrupt directory, running e2fsck is recommended
[   72.308332][ T3433] tipc: Left network mode
[   72.332930][ T3433] hsr_slave_0: left promiscuous mode
[   72.343562][ T5063] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[   72.366186][ T3433] hsr_slave_1: left promiscuous mode
[   72.372520][ T3433] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.382054][ T3433] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.392096][ T3433] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.402065][ T3433] batman_adv: batadv0: Removing interface: batadv_slave_1
[   72.406554][ T5063] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.584: corrupted in-inode xattr: invalid ea_ino
[   72.430621][ T3433] batman_adv: batadv0: Interface deactivated: veth1_vlan
[   72.439298][ T3433] batman_adv: batadv0: Removing interface: veth1_vlan
[   72.442754][ T5077] loop2: detected capacity change from 0 to 128
[   72.465370][ T5063] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.584: couldn't read orphan inode 15 (err -117)
[   72.481302][ T5077] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   72.494871][ T3433] veth1_macvtap: left promiscuous mode
[   72.522061][ T3433] veth0_macvtap: left promiscuous mode
[   72.548955][ T3433] veth1_vlan: left promiscuous mode
[   72.571873][ T3433] veth0_vlan: left promiscuous mode
[   72.716065][ T5100] loop2: detected capacity change from 0 to 4096
[   72.807657][ T3433] team0 (unregistering): Port device team_slave_1 removed
[   72.828343][ T3433] team0 (unregistering): Port device team_slave_0 removed
[   72.843299][ T5107] loop2: detected capacity change from 0 to 4096
[   72.983048][ T5119] loop4: detected capacity change from 0 to 256
[   73.195596][ T5140] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   73.235137][ T5029] chnl_net:caif_netlink_parms(): no params data found
[   73.314771][ T5135] loop2: detected capacity change from 0 to 4096
[   73.409767][ T5029] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.417448][ T5029] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.437261][ T5029] bridge_slave_0: entered allmulticast mode
[   73.445173][ T5029] bridge_slave_0: entered promiscuous mode
[   73.452579][ T5029] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.460994][ T5029] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.473471][ T5029] bridge_slave_1: entered allmulticast mode
[   73.497387][ T5029] bridge_slave_1: entered promiscuous mode
[   73.525264][ T5029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.549196][ T5029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.562547][ T5177] bridge0: port 3(macsec1) entered blocking state
[   73.570148][ T5177] bridge0: port 3(macsec1) entered disabled state
[   73.585950][ T5177] macsec1: entered allmulticast mode
[   73.592254][ T5177] macsec1: left allmulticast mode
[   73.639694][ T5029] team0: Port device team_slave_0 added
[   73.664115][ T5029] team0: Port device team_slave_1 added
[   73.666940][ T5186] ip6erspan0: entered promiscuous mode
[   73.691766][ T5191] __nla_validate_parse: 12 callbacks suppressed
[   73.691786][ T5191] netlink: 24 bytes leftover after parsing attributes in process `syz.4.616'.
[   73.702591][ T5029] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.726646][ T5029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.726693][ T5029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.726784][ T5192] loop2: detected capacity change from 0 to 1024
[   73.794122][ T5191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.616'.
[   73.799882][ T5029] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.818691][ T5029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.818846][ T5029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.939316][ T5029] hsr_slave_0: entered promiscuous mode
[   73.940011][ T5029] hsr_slave_1: entered promiscuous mode
[   73.940429][ T5029] debugfs: 'hsr0' already exists in 'hsr'
[   73.940449][ T5029] Cannot create hsr debugfs directory
[   74.014748][ T5188] No source specified
[   74.250364][ T5226] netlink: 'syz.1.622': attribute type 29 has an invalid length.
[   74.317502][   T30] kauditd_printk_skb: 488 callbacks suppressed
[   74.317630][   T30] audit: type=1400 audit(1757751027.284:1942): avc:  denied  { write } for  pid=5229 comm="syz.0.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   74.347043][   T30] audit: type=1400 audit(1757751027.314:1943): avc:  denied  { kexec_image_load } for  pid=5232 comm="syz.1.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[   74.371455][ T5029] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   74.377607][ T5227] loop4: detected capacity change from 0 to 4096
[   74.402914][ T5029] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   74.453751][ T5029] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   74.472323][   T30] audit: type=1326 audit(1757751027.444:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5238 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cb396eba9 code=0x7ffc0000
[   74.473575][   T30] audit: type=1326 audit(1757751027.444:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5238 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cb396eba9 code=0x7ffc0000
[   74.473725][   T30] audit: type=1326 audit(1757751027.444:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5238 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cb396eba9 code=0x7ffc0000
[   74.473904][   T30] audit: type=1326 audit(1757751027.444:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5238 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cb396eba9 code=0x7ffc0000
[   74.475388][   T30] audit: type=1400 audit(1757751027.444:1948): avc:  denied  { create } for  pid=5235 comm="syz.1.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   74.511023][ T5029] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   74.577292][ T5239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.626'.
[   74.593255][   T30] audit: type=1400 audit(1757751027.524:1949): avc:  denied  { write } for  pid=5235 comm="syz.1.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   74.658383][   T30] audit: type=1326 audit(1757751027.524:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5238 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cb396eba9 code=0x7ffc0000
[   74.686270][   T30] audit: type=1326 audit(1757751027.534:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5238 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cb396eba9 code=0x7ffc0000
[   74.809861][ T5253] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   74.923362][ T5029] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.973378][ T5029] 8021q: adding VLAN 0 to HW filter on device team0
[   74.999554][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.008881][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.036195][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.043787][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.078251][ T5029] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   75.092382][ T5029] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   75.170233][ T5280] ip6erspan0: entered promiscuous mode
[   75.194191][ T5282] loop2: detected capacity change from 0 to 4096
[   75.257848][ T5287] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   75.273534][ T5287] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   75.288857][ T5287] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[   75.327082][ T5029] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.522936][ T5311] loop2: detected capacity change from 0 to 2048
[   75.611995][ T5029] veth0_vlan: entered promiscuous mode
[   75.623710][ T5029] veth1_vlan: entered promiscuous mode
[   75.643440][ T5029] veth0_macvtap: entered promiscuous mode
[   75.653040][ T5029] veth1_macvtap: entered promiscuous mode
[   75.667873][ T5029] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.682865][ T5029] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.687777][ T5312] netlink: 'syz.0.645': attribute type 1 has an invalid length.
[   75.697087][   T48] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.725336][   T48] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.758353][   T48] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.771297][   T48] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.784413][ T5326] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.792249][ T5326] syzkaller0: entered promiscuous mode
[   75.798489][ T5326] syzkaller0: entered allmulticast mode
[   75.815830][ T5326] tipc: Resetting bearer <eth:syzkaller0>
[   75.837850][ T5325] tipc: Resetting bearer <eth:syzkaller0>
[   75.853967][ T5332] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.647'.
[   75.871550][ T5325] tipc: Disabling bearer <eth:syzkaller0>
[   75.878878][ T5332] block device autoloading is deprecated and will be removed.
[   75.902247][ T5332] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   75.913763][ T5332] FAT-fs (loop1): unable to read boot sector
[   75.918466][ T5334] program syz.5.648 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   76.078530][ T5348] bridge0: port 3(macsec1) entered blocking state
[   76.086134][ T5348] bridge0: port 3(macsec1) entered disabled state
[   76.093840][ T5348] macsec1: entered allmulticast mode
[   76.100954][ T5348] macsec1: left allmulticast mode
[   76.114445][ T5350] netlink: 'syz.4.655': attribute type 1 has an invalid length.
[   76.123245][ T5350] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.655'.
[   76.136016][ T5350] loop4: detected capacity change from 0 to 128
[   76.149345][ T5350] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   76.260740][ T5357] ip6erspan0: entered promiscuous mode
[   76.274286][ T5358] FAULT_INJECTION: forcing a failure.
[   76.274286][ T5358] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   76.288967][ T5358] CPU: 1 UID: 0 PID: 5358 Comm: syz.0.658 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   76.289021][ T5358] Tainted: [W]=WARN
[   76.289030][ T5358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   76.289045][ T5358] Call Trace:
[   76.289051][ T5358]  <TASK>
[   76.289060][ T5358]  __dump_stack+0x1d/0x30
[   76.289081][ T5358]  dump_stack_lvl+0xe8/0x140
[   76.289098][ T5358]  dump_stack+0x15/0x1b
[   76.289131][ T5358]  should_fail_ex+0x265/0x280
[   76.289161][ T5358]  should_fail+0xb/0x20
[   76.289246][ T5358]  should_fail_usercopy+0x1a/0x20
[   76.289270][ T5358]  _copy_from_user+0x1c/0xb0
[   76.289360][ T5358]  sctp_setsockopt+0x154/0xe30
[   76.289379][ T5358]  sock_common_setsockopt+0x69/0x80
[   76.289409][ T5358]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   76.289477][ T5358]  __sys_setsockopt+0x184/0x200
[   76.289559][ T5358]  __x64_sys_setsockopt+0x64/0x80
[   76.289581][ T5358]  x64_sys_call+0x20ec/0x2ff0
[   76.289607][ T5358]  do_syscall_64+0xd2/0x200
[   76.289669][ T5358]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   76.289731][ T5358]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   76.289839][ T5358]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.289874][ T5358] RIP: 0033:0x7f8cb396eba9
[   76.289888][ T5358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   76.289903][ T5358] RSP: 002b:00007f8cb23d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   76.289920][ T5358] RAX: ffffffffffffffda RBX: 00007f8cb3bb5fa0 RCX: 00007f8cb396eba9
[   76.289931][ T5358] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000003
[   76.289941][ T5358] RBP: 00007f8cb23d7090 R08: 0000000000000008 R09: 0000000000000000
[   76.289967][ T5358] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001
[   76.289979][ T5358] R13: 00007f8cb3bb6038 R14: 00007f8cb3bb5fa0 R15: 00007ffd4c3afb08
[   76.290050][ T5358]  </TASK>
[   76.539657][ T5361] tc_dump_action: action bad kind
[   76.589748][ T5364] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.661'.
[   76.606318][ T5364] FAT-fs (loop3): bogus number of reserved sectors
[   76.613860][ T5364] FAT-fs (loop3): Can't find a valid FAT filesystem
[   76.693402][ T5373] loop1: detected capacity change from 0 to 128
[   76.714495][ T5373] ext4 filesystem being mounted at /117/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   76.803903][ T5382] netlink: 24 bytes leftover after parsing attributes in process `syz.0.666'.
[   76.828306][ T5384] loop1: detected capacity change from 0 to 512
[   76.844363][ T5384] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   76.898179][ T5386] loop5: detected capacity change from 0 to 256
[   76.923999][ T5384] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1128: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   76.944110][ T5384] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.667: bg 0: block 248: padding at end of block bitmap is not set
[   76.966473][ T5384] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.667: Failed to acquire dquot type 1
[   76.973896][ T5387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.666'.
[   77.005709][ T5384] EXT4-fs (loop1): 1 truncate cleaned up
[   77.074675][ T5384] syz.1.667 (5384) used greatest stack depth: 9472 bytes left
[   77.106487][ T5395] loop4: detected capacity change from 0 to 256
[   77.121867][ T5398] netlink: 8 bytes leftover after parsing attributes in process `syz.5.672'.
[   77.232513][ T5412] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.246395][ T5412] syzkaller0: entered promiscuous mode
[   77.252245][ T5412] syzkaller0: entered allmulticast mode
[   77.293842][ T5412] tipc: Resetting bearer <eth:syzkaller0>
[   77.301020][ T5414] loop5: detected capacity change from 0 to 1764
[   77.314772][ T5411] tipc: Resetting bearer <eth:syzkaller0>
[   77.326930][ T5411] tipc: Disabling bearer <eth:syzkaller0>
[   77.343932][ T5417] netlink: 'syz.1.676': attribute type 10 has an invalid length.
[   77.352594][ T5417] netlink: 156 bytes leftover after parsing attributes in process `syz.1.676'.
[   77.511054][ T5428] FAULT_INJECTION: forcing a failure.
[   77.511054][ T5428] name failslab, interval 1, probability 0, space 0, times 0
[   77.525299][ T5428] CPU: 0 UID: 0 PID: 5428 Comm: syz.4.683 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   77.525342][ T5428] Tainted: [W]=WARN
[   77.525416][ T5428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   77.525489][ T5428] Call Trace:
[   77.525498][ T5428]  <TASK>
[   77.525508][ T5428]  __dump_stack+0x1d/0x30
[   77.525565][ T5428]  dump_stack_lvl+0xe8/0x140
[   77.525611][ T5428]  dump_stack+0x15/0x1b
[   77.525633][ T5428]  should_fail_ex+0x265/0x280
[   77.525666][ T5428]  should_failslab+0x8c/0xb0
[   77.525744][ T5428]  kmem_cache_alloc_node_noprof+0x57/0x320
[   77.525783][ T5428]  ? __alloc_skb+0x101/0x320
[   77.525855][ T5428]  __alloc_skb+0x101/0x320
[   77.525883][ T5428]  _sctp_make_chunk+0x59/0x210
[   77.525995][ T5428]  sctp_make_strreset_req+0xa9/0x3a0
[   77.526026][ T5428]  ? avc_has_perm_noaudit+0x1b1/0x200
[   77.526057][ T5428]  sctp_send_reset_streams+0x4c2/0x880
[   77.526145][ T5428]  ? _raw_spin_unlock_bh+0x36/0x40
[   77.526178][ T5428]  sctp_setsockopt_reset_streams+0x173/0x210
[   77.526300][ T5428]  sctp_setsockopt+0x8eb/0xe30
[   77.526391][ T5428]  sock_common_setsockopt+0x69/0x80
[   77.526444][ T5428]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   77.526479][ T5428]  __sys_setsockopt+0x184/0x200
[   77.526523][ T5428]  __x64_sys_setsockopt+0x64/0x80
[   77.526553][ T5428]  x64_sys_call+0x20ec/0x2ff0
[   77.526576][ T5428]  do_syscall_64+0xd2/0x200
[   77.526610][ T5428]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   77.526712][ T5428]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   77.526804][ T5428]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.526832][ T5428] RIP: 0033:0x7f854158eba9
[   77.526853][ T5428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   77.526877][ T5428] RSP: 002b:00007f853ffef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   77.526904][ T5428] RAX: ffffffffffffffda RBX: 00007f85417d5fa0 RCX: 00007f854158eba9
[   77.526932][ T5428] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000003
[   77.526944][ T5428] RBP: 00007f853ffef090 R08: 0000000000000008 R09: 0000000000000000
[   77.526956][ T5428] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001
[   77.526968][ T5428] R13: 00007f85417d6038 R14: 00007f85417d5fa0 R15: 00007ffcfc6fef78
[   77.527032][ T5428]  </TASK>
[   77.823378][ T5432] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   77.942126][ T5444] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   78.028794][ T5448] loop2: detected capacity change from 0 to 128
[   78.052803][ T5448] ext4 filesystem being mounted at /130/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   78.086484][ T5454] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.099061][ T5454] syzkaller0: entered promiscuous mode
[   78.105112][ T5454] syzkaller0: entered allmulticast mode
[   78.118548][ T5454] tipc: Resetting bearer <eth:syzkaller0>
[   78.130286][ T5453] tipc: Resetting bearer <eth:syzkaller0>
[   78.143684][ T5453] tipc: Disabling bearer <eth:syzkaller0>
[   78.334127][ T5483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=5483 comm=syz.5.702
[   78.453533][ T5493] bridge0: port 3(macsec1) entered blocking state
[   78.461536][ T5493] bridge0: port 3(macsec1) entered disabled state
[   78.487135][ T5493] macsec1: entered allmulticast mode
[   78.530846][ T5493] macsec1: left allmulticast mode
[   78.569191][ T5509] loop1: detected capacity change from 0 to 512
[   78.580644][ T5509] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[   78.617017][ T5502] ip6erspan0: entered promiscuous mode
[   78.641992][ T5509] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6
[   78.783907][ T5532] loop5: detected capacity change from 0 to 512
[   78.862111][ T5532] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   79.086046][ T5565] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.094628][ T5565] syzkaller0: entered promiscuous mode
[   79.102382][ T5565] syzkaller0: entered allmulticast mode
[   79.130673][ T5565] tipc: Resetting bearer <eth:syzkaller0>
[   79.143984][ T5564] tipc: Resetting bearer <eth:syzkaller0>
[   79.169781][ T5564] tipc: Disabling bearer <eth:syzkaller0>
[   79.180393][ T5567] loop5: detected capacity change from 0 to 256
[   79.303020][ T5571] netlink: 'syz.5.727': attribute type 29 has an invalid length.
[   79.313329][ T5571] vcan0: tx drop: invalid da for name 0x0000000000000001
[   79.344991][   T30] kauditd_printk_skb: 433 callbacks suppressed
[   79.345008][   T30] audit: type=1400 audit(1757751032.314:2383): avc:  denied  { load_policy } for  pid=5572 comm="syz.4.728" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   79.378864][ T5573] SELinux:  policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c
[   79.392030][ T5573] SELinux: failed to load policy
[   79.427790][   T30] audit: type=1400 audit(1757751032.394:2384): avc:  denied  { create } for  pid=5577 comm="syz.5.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   79.448997][   T30] audit: type=1400 audit(1757751032.394:2385): avc:  denied  { setopt } for  pid=5577 comm="syz.5.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   79.573439][ T5589] loop4: detected capacity change from 0 to 512
[   79.604095][ T5585] loop5: detected capacity change from 0 to 4096
[   79.613332][ T5589] EXT4-fs mount: 70 callbacks suppressed
[   79.613353][ T5589] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   79.646321][ T5585] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.670702][ T5592] __nla_validate_parse: 3 callbacks suppressed
[   79.670791][ T5592] netlink: 28 bytes leftover after parsing attributes in process `syz.2.734'.
[   79.688618][ T5589] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   79.718136][ T3316] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[   79.791900][ T5029] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.887135][ T5605] netlink: 8 bytes leftover after parsing attributes in process `syz.5.738'.
[   79.936050][ T5611] loop2: detected capacity change from 0 to 512
[   79.960668][ T5611] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   79.982140][ T5611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.000189][ T5611] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   80.016179][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.018999][   T30] audit: type=1400 audit(1757751032.984:2386): avc:  denied  { mount } for  pid=5604 comm="syz.5.738" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   80.024857][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.072518][   T30] audit: type=1400 audit(1757751033.044:2387): avc:  denied  { mac_admin } for  pid=5604 comm="syz.5.738" capability=33  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   80.096186][   T30] audit: type=1400 audit(1757751033.044:2388): avc:  denied  { relabelto } for  pid=5604 comm="syz.5.738" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[   80.124679][   T30] audit: type=1400 audit(1757751033.044:2389): avc:  denied  { associate } for  pid=5604 comm="syz.5.738" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0"
[   80.158108][   T30] audit: type=1400 audit(1757751033.054:2390): avc:  denied  { setopt } for  pid=5604 comm="syz.5.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   80.203720][ T5621] program syz.0.745 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   80.213616][   T30] audit: type=1400 audit(1757751033.174:2391): avc:  denied  { bind } for  pid=5619 comm="syz.0.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   80.213685][   T30] audit: type=1400 audit(1757751033.174:2392): avc:  denied  { write } for  pid=5619 comm="syz.0.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   80.230953][ T5605] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.269784][ T5605] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.321054][ T5608] bridge0: port 3(macsec1) entered blocking state
[   80.328543][ T5608] bridge0: port 3(macsec1) entered disabled state
[   80.337756][ T5608] macsec1: entered allmulticast mode
[   80.344283][ T5608] macsec1: left allmulticast mode
[   80.361015][ T5611] ªªªªªª: renamed from vlan0 (while UP)
[   80.370211][ T5620] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   80.391070][   T41] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.420599][   T41] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.431473][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.459249][   T41] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.473239][   T41] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.646036][ T5635] loop4: detected capacity change from 0 to 4096
[   80.687054][ T5644] loop5: detected capacity change from 0 to 128
[   80.710205][ T5635] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.772717][ T5644] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   80.809699][ T5652] loop2: detected capacity change from 0 to 1764
[   80.817361][ T5652] iso9660: Unknown parameter ''
[   80.963083][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.058652][ T5644] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   81.257415][ T5029] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   81.316238][ T5661] loop1: detected capacity change from 0 to 4096
[   81.353098][ T5664] loop4: detected capacity change from 0 to 4096
[   81.401711][ T5661] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.406431][ T5664] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.573014][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.587279][ T5685] FAULT_INJECTION: forcing a failure.
[   81.587279][ T5685] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   81.601575][ T5685] CPU: 1 UID: 0 PID: 5685 Comm: syz.2.758 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   81.601628][ T5685] Tainted: [W]=WARN
[   81.601637][ T5685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   81.601661][ T5685] Call Trace:
[   81.601668][ T5685]  <TASK>
[   81.601676][ T5685]  __dump_stack+0x1d/0x30
[   81.601699][ T5685]  dump_stack_lvl+0xe8/0x140
[   81.601719][ T5685]  dump_stack+0x15/0x1b
[   81.601800][ T5685]  should_fail_ex+0x265/0x280
[   81.601902][ T5685]  should_fail+0xb/0x20
[   81.601984][ T5685]  should_fail_usercopy+0x1a/0x20
[   81.602013][ T5685]  _copy_from_user+0x1c/0xb0
[   81.602114][ T5685]  sctp_setsockopt+0x154/0xe30
[   81.602148][ T5685]  sock_common_setsockopt+0x69/0x80
[   81.602264][ T5685]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   81.602357][ T5685]  __sys_setsockopt+0x184/0x200
[   81.602432][ T5685]  __x64_sys_setsockopt+0x64/0x80
[   81.602493][ T5685]  x64_sys_call+0x20ec/0x2ff0
[   81.602575][ T5685]  do_syscall_64+0xd2/0x200
[   81.602619][ T5685]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   81.602651][ T5685]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   81.602735][ T5685]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.602765][ T5685] RIP: 0033:0x7ffb1fe7eba9
[   81.602785][ T5685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   81.602808][ T5685] RSP: 002b:00007ffb1e8e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   81.602830][ T5685] RAX: ffffffffffffffda RBX: 00007ffb200c5fa0 RCX: 00007ffb1fe7eba9
[   81.602846][ T5685] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000003
[   81.602880][ T5685] RBP: 00007ffb1e8e7090 R08: 000000000000000a R09: 0000000000000000
[   81.602896][ T5685] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001
[   81.602913][ T5685] R13: 00007ffb200c6038 R14: 00007ffb200c5fa0 R15: 00007fff1eef9b28
[   81.602934][ T5685]  </TASK>
[   81.842693][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.954358][ T5703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.761'.
[   82.156317][ T5712] SELinux: failed to load policy
[   82.211750][ T5724] bridge0: port 3(macsec1) entered blocking state
[   82.219719][ T5724] bridge0: port 3(macsec1) entered disabled state
[   82.228074][ T5724] macsec1: entered allmulticast mode
[   82.236008][ T5724] macsec1: left allmulticast mode
[   82.346767][ T5727] loop2: detected capacity change from 0 to 1024
[   82.387982][ T5727] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   82.400497][ T5727] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   82.416085][ T5727] JBD2: no valid journal superblock found
[   82.422424][ T5727] EXT4-fs (loop2): Could not load journal inode
[   82.460087][ T5733] tipc: Started in network mode
[   82.465945][ T5733] tipc: Node identity 7aa6f47a709d, cluster identity 4711
[   82.474395][ T5733] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.486340][ T5727] loop2: detected capacity change from 0 to 1024
[   82.507073][ T5733] syzkaller0: entered promiscuous mode
[   82.513644][ T5733] syzkaller0: entered allmulticast mode
[   82.527951][ T5727] EXT4-fs (loop2): orphan cleanup on readonly fs
[   82.542472][ T5727] EXT4-fs (loop2): 1 truncate cleaned up
[   82.549512][ T5727] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   82.564887][ T5741] loop4: detected capacity change from 0 to 4096
[   82.576490][ T5733] tipc: Resetting bearer <eth:syzkaller0>
[   82.585238][ T5732] tipc: Resetting bearer <eth:syzkaller0>
[   82.600112][ T5732] tipc: Disabling bearer <eth:syzkaller0>
[   82.611607][ T5741] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.631490][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.681944][ T5749] netlink: 'syz.0.781': attribute type 10 has an invalid length.
[   82.690761][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.705164][ T5749] team0: Port device dummy0 added
[   82.739242][ T5751] loop5: detected capacity change from 0 to 512
[   82.753935][ T5749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.781'.
[   82.766667][ T5751] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   82.786197][ T5749] netlink: 'syz.0.781': attribute type 10 has an invalid length.
[   82.795343][ T5755] loop2: detected capacity change from 0 to 512
[   82.804560][ T5749] team0: Port device dummy0 removed
[   82.842863][ T5749] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   82.852523][ T5029] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[   82.856482][ T5755] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.779: bg 0: block 5: invalid block bitmap
[   82.924847][ T5755] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem
[   82.985908][ T5755] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.779: invalid indirect mapped block 3 (level 2)
[   83.003365][ T5767] loop5: detected capacity change from 0 to 4096
[   83.017813][ T5755] EXT4-fs (loop2): 2 truncates cleaned up
[   83.025081][ T5755] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.052797][ T5767] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.105210][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.141962][ T5778] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.143343][ T5029] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.150594][ T5778] syzkaller0: entered promiscuous mode
[   83.167313][ T5778] syzkaller0: entered allmulticast mode
[   83.188958][ T5778] tipc: Resetting bearer <eth:syzkaller0>
[   83.200769][ T5777] tipc: Resetting bearer <eth:syzkaller0>
[   83.219401][ T5777] tipc: Disabling bearer <eth:syzkaller0>
[   83.300234][ T5787] loop2: detected capacity change from 0 to 512
[   83.330607][ T5787] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   83.441843][ T5793] bridge0: port 3(macsec1) entered blocking state
[   83.449120][ T5793] bridge0: port 3(macsec1) entered disabled state
[   83.462762][ T5793] macsec1: entered allmulticast mode
[   83.470242][ T5793] macsec1: left allmulticast mode
[   83.480436][ T3310] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[   83.946531][ T5804] loop1: detected capacity change from 0 to 128
[   83.994270][ T5806] loop4: detected capacity change from 0 to 4096
[   84.007388][ T5804] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   84.023854][ T5806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.073228][ T5804] ext4 filesystem being mounted at /138/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   84.133027][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.197494][ T3306] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   84.211231][ T5796] syzkaller0: entered allmulticast mode
[   84.274807][ T5796] syzkaller0 (unregistering): left allmulticast mode
[   84.329784][ T5819] SELinux: failed to load policy
[   84.339040][ T5823] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[   84.346404][ T5823] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   84.354725][ T5823] vhci_hcd vhci_hcd.0: Device attached
[   84.444638][ T5831] loop4: detected capacity change from 0 to 512
[   84.448537][ T5823] netlink: 'syz.0.807': attribute type 1 has an invalid length.
[   84.471125][ T5831] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   84.497780][ T5823] 8021q: adding VLAN 0 to HW filter on device bond2
[   84.538792][ T3406] vhci_hcd: vhci_device speed not set
[   84.545668][ T5836] 8021q: adding VLAN 0 to HW filter on device bond2
[   84.555966][ T3316] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[   84.574399][ T5836] bond2: (slave gre1): The slave device specified does not support setting the MAC address
[   84.586587][ T5836] bond2: (slave gre1): Error -95 calling set_mac_address
[   84.598995][ T3406] usb 1-1: new full-speed USB device number 3 using vhci_hcd
[   84.606739][   T30] kauditd_printk_skb: 100 callbacks suppressed
[   84.606756][   T30] audit: type=1400 audit(1757751037.574:2493): avc:  denied  { read } for  pid=5840 comm="syz.1.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   84.646046][ T5838] loop4: detected capacity change from 0 to 256
[   84.691089][ T5849] capability: warning: `syz.2.817' uses 32-bit capabilities (legacy support in use)
[   84.718959][ T5826] vhci_hcd: connection reset by peer
[   84.726176][  T143] vhci_hcd: stop threads
[   84.726516][ T5847] FAULT_INJECTION: forcing a failure.
[   84.726516][ T5847] name failslab, interval 1, probability 0, space 0, times 0
[   84.731041][  T143] vhci_hcd: release socket
[   84.731055][  T143] vhci_hcd: disconnect device
[   84.754059][ T5847] CPU: 1 UID: 0 PID: 5847 Comm: syz.1.816 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   84.754094][ T5847] Tainted: [W]=WARN
[   84.754102][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   84.754157][ T5847] Call Trace:
[   84.754165][ T5847]  <TASK>
[   84.754175][ T5847]  __dump_stack+0x1d/0x30
[   84.754202][ T5847]  dump_stack_lvl+0xe8/0x140
[   84.754233][ T5847]  dump_stack+0x15/0x1b
[   84.754249][ T5847]  should_fail_ex+0x265/0x280
[   84.754319][ T5847]  should_failslab+0x8c/0xb0
[   84.754346][ T5847]  kmem_cache_alloc_node_noprof+0x57/0x320
[   84.754402][ T5847]  ? __alloc_skb+0x101/0x320
[   84.754430][ T5847]  __alloc_skb+0x101/0x320
[   84.754458][ T5847]  _sctp_make_chunk+0x59/0x210
[   84.754501][ T5847]  sctp_make_strreset_req+0xa9/0x3a0
[   84.754576][ T5847]  sctp_send_reset_streams+0x4c2/0x880
[   84.754608][ T5847]  ? _raw_spin_unlock_bh+0x36/0x40
[   84.754717][ T5847]  sctp_setsockopt_reset_streams+0x173/0x210
[   84.754755][ T5847]  sctp_setsockopt+0x8eb/0xe30
[   84.754782][ T5847]  sock_common_setsockopt+0x69/0x80
[   84.754889][ T5847]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   84.754929][ T5847]  __sys_setsockopt+0x184/0x200
[   84.754959][ T5847]  __x64_sys_setsockopt+0x64/0x80
[   84.755126][ T5847]  x64_sys_call+0x20ec/0x2ff0
[   84.755155][ T5847]  do_syscall_64+0xd2/0x200
[   84.755196][ T5847]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   84.755225][ T5847]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   84.755312][ T5847]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.755335][ T5847] RIP: 0033:0x7f718eeeeba9
[   84.755353][ T5847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   84.755437][ T5847] RSP: 002b:00007f718d94f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   84.755464][ T5847] RAX: ffffffffffffffda RBX: 00007f718f135fa0 RCX: 00007f718eeeeba9
[   84.755479][ T5847] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000003
[   84.755572][ T5847] RBP: 00007f718d94f090 R08: 000000000000000a R09: 0000000000000000
[   84.755585][ T5847] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001
[   84.755598][ T5847] R13: 00007f718f136038 R14: 00007f718f135fa0 R15: 00007ffc41477898
[   84.755622][ T5847]  </TASK>
[   84.787913][ T5856] loop4: detected capacity change from 0 to 512
[   84.798798][ T5856] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   84.799021][ T5856] EXT4-fs (loop4): invalid journal inode
[   84.799097][ T5856] EXT4-fs (loop4): can't get journal size
[   84.806277][ T5856] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002]
[   84.806476][ T5856] System zones: 1-12, 13-13
[   84.807020][ T5856] EXT4-fs (loop4): 1 truncate cleaned up
[   84.807459][ T5856] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.836601][   T30] audit: type=1400 audit(1757751037.794:2494): avc:  denied  { setattr } for  pid=5855 comm="syz.4.820" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   84.837654][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.010086][   T30] audit: type=1326 audit(1757751037.984:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5868 comm="syz.4.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854158eba9 code=0x7ffc0000
[   85.011886][   T30] audit: type=1326 audit(1757751037.984:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5868 comm="syz.4.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f854158eba9 code=0x7ffc0000
[   85.012018][   T30] audit: type=1326 audit(1757751037.984:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5868 comm="syz.4.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854158eba9 code=0x7ffc0000
[   85.012380][   T30] audit: type=1326 audit(1757751037.984:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5868 comm="syz.4.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f854158eba9 code=0x7ffc0000
[   85.013326][   T30] audit: type=1326 audit(1757751037.984:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5868 comm="syz.4.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854158eba9 code=0x7ffc0000
[   85.015220][   T30] audit: type=1326 audit(1757751037.984:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5868 comm="syz.4.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f854158eba9 code=0x7ffc0000
[   85.015444][   T30] audit: type=1326 audit(1757751037.984:2501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5868 comm="syz.4.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854158eba9 code=0x7ffc0000
[   85.016164][   T30] audit: type=1326 audit(1757751037.984:2502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5868 comm="syz.4.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f854158eba9 code=0x7ffc0000
[   85.553599][ T5870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.826'.
[   85.614074][ T5872] loop1: detected capacity change from 0 to 256
[   85.748035][ T5885] netlink: 24 bytes leftover after parsing attributes in process `syz.1.831'.
[   85.814677][ T5885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.831'.
[   85.883983][ T5902] bridge0: port 3(macsec1) entered blocking state
[   85.891331][ T5902] bridge0: port 3(macsec1) entered disabled state
[   85.912194][ T5902] macsec1: entered allmulticast mode
[   85.928709][ T5902] macsec1: left allmulticast mode
[   86.166317][ T5925] loop1: detected capacity change from 0 to 128
[   86.179021][ T5925] FAT-fs (loop1): bogus number of reserved sectors
[   86.186030][ T5925] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   86.196384][ T5925] FAT-fs (loop1): Can't find a valid FAT filesystem
[   86.444175][ T5957] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002
[   86.470609][ T5955] loop1: detected capacity change from 0 to 128
[   86.505168][ T5955] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   86.585769][ T5955] ext4 filesystem being mounted at /152/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   86.612383][ T5972] loop2: detected capacity change from 0 to 512
[   86.672991][ T5972] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   86.738475][ T3306] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   86.752071][ T5972] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   86.783908][ T5986] loop1: detected capacity change from 0 to 512
[   86.819050][ T3310] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[   86.831699][ T5986] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   86.859327][ T5986] FAULT_INJECTION: forcing a failure.
[   86.859327][ T5986] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   86.874687][ T5986] CPU: 0 UID: 0 PID: 5986 Comm: syz.1.850 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   86.874729][ T5986] Tainted: [W]=WARN
[   86.874735][ T5986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   86.874748][ T5986] Call Trace:
[   86.874778][ T5986]  <TASK>
[   86.874786][ T5986]  __dump_stack+0x1d/0x30
[   86.874810][ T5986]  dump_stack_lvl+0xe8/0x140
[   86.874831][ T5986]  dump_stack+0x15/0x1b
[   86.874849][ T5986]  should_fail_ex+0x265/0x280
[   86.874877][ T5986]  should_fail+0xb/0x20
[   86.874943][ T5986]  should_fail_usercopy+0x1a/0x20
[   86.874985][ T5986]  _copy_from_user+0x1c/0xb0
[   86.875067][ T5986]  ext4_ioctl+0x718/0x2080
[   86.875106][ T5986]  ? __pfx_ext4_ioctl+0x10/0x10
[   86.875131][ T5986]  __se_sys_ioctl+0xce/0x140
[   86.875214][ T5986]  __x64_sys_ioctl+0x43/0x50
[   86.875233][ T5986]  x64_sys_call+0x1816/0x2ff0
[   86.875256][ T5986]  do_syscall_64+0xd2/0x200
[   86.875353][ T5986]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   86.875379][ T5986]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   86.875469][ T5986]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   86.875564][ T5986] RIP: 0033:0x7f718eeeeba9
[   86.875580][ T5986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   86.875599][ T5986] RSP: 002b:00007f718d94f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   86.875658][ T5986] RAX: ffffffffffffffda RBX: 00007f718f135fa0 RCX: 00007f718eeeeba9
[   86.875724][ T5986] RDX: 0000200000001f40 RSI: 00000000c0c0583b RDI: 0000000000000005
[   86.875736][ T5986] RBP: 00007f718d94f090 R08: 0000000000000000 R09: 0000000000000000
[   86.875749][ T5986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   86.875761][ T5986] R13: 00007f718f136038 R14: 00007f718f135fa0 R15: 00007ffc41477898
[   86.875782][ T5986]  </TASK>
[   87.143672][ T6003] loop5: detected capacity change from 0 to 512
[   87.151296][ T5995] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5995 comm=syz.2.853
[   87.176086][ T5995] netlink: 120 bytes leftover after parsing attributes in process `syz.2.853'.
[   87.179411][ T6003] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   87.219547][ T3306] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[   87.282746][ T6003] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   87.370008][ T5029] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[   87.743515][ T6060] loop2: detected capacity change from 0 to 256
[   87.846327][ T6073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.868'.
[   87.868270][ T6060] FAT-fs (loop2): codepage cp857 not found
[   87.908554][ T6060] loop2: detected capacity change from 0 to 256
[   87.929782][ T6043] netlink: 64 bytes leftover after parsing attributes in process `syz.1.856'.
[   87.949662][ T6080] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.002601][ T6080] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.014631][ T6060] FAT-fs (loop2): codepage cp857 not found
[   88.030859][ T6060] loop2: detected capacity change from 0 to 256
[   88.051794][ T6080] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.088455][ T6060] FAT-fs (loop2): codepage cp857 not found
[   88.102120][ T6080] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.154964][  T143] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.176926][ T6060] loop2: detected capacity change from 0 to 256
[   88.200646][ T6060] FAT-fs (loop2): codepage cp857 not found
[   88.211051][ T6060] loop2: detected capacity change from 0 to 256
[   88.263150][ T6043] loop1: detected capacity change from 0 to 2048
[   88.279996][ T6060] FAT-fs (loop2): codepage cp857 not found
[   88.287030][ T6090] netlink: 24 bytes leftover after parsing attributes in process `syz.0.871'.
[   88.292242][ T6060] loop2: detected capacity change from 0 to 256
[   88.316760][ T6090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.871'.
[   88.334670][  T143] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.386694][ T6060] FAT-fs (loop2): codepage cp857 not found
[   88.398025][  T143] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.409487][  T143] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.421655][ T6060] loop2: detected capacity change from 0 to 256
[   88.488562][ T6060] FAT-fs (loop2): codepage cp857 not found
[   88.498297][ T6097] FAULT_INJECTION: forcing a failure.
[   88.498297][ T6097] name failslab, interval 1, probability 0, space 0, times 0
[   88.512283][ T6097] CPU: 0 UID: 0 PID: 6097 Comm: syz.1.873 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   88.512390][ T6097] Tainted: [W]=WARN
[   88.512399][ T6097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   88.512426][ T6097] Call Trace:
[   88.512489][ T6097]  <TASK>
[   88.512497][ T6097]  __dump_stack+0x1d/0x30
[   88.512520][ T6097]  dump_stack_lvl+0xe8/0x140
[   88.512574][ T6097]  dump_stack+0x15/0x1b
[   88.512663][ T6097]  should_fail_ex+0x265/0x280
[   88.512691][ T6097]  should_failslab+0x8c/0xb0
[   88.512719][ T6097]  kmem_cache_alloc_noprof+0x50/0x310
[   88.512757][ T6097]  ? _sctp_make_chunk+0xbf/0x210
[   88.512853][ T6097]  _sctp_make_chunk+0xbf/0x210
[   88.512898][ T6097]  sctp_make_strreset_resp+0x46/0x1e0
[   88.512972][ T6097]  sctp_process_strreset_inreq+0x1a6/0x630
[   88.513005][ T6097]  ? sctp_verify_reconf+0x265/0xa70
[   88.513044][ T6097]  sctp_sf_do_reconf+0x423/0x5b0
[   88.513156][ T6097]  sctp_do_sm+0xbe/0x3230
[   88.513215][ T6097]  sctp_assoc_bh_rcv+0x2a8/0x420
[   88.513251][ T6097]  sctp_inq_push+0x103/0x110
[   88.513282][ T6097]  sctp_backlog_rcv+0xed/0x4d0
[   88.513309][ T6097]  ? __pfx_sctp_backlog_rcv+0x10/0x10
[   88.513380][ T6097]  sk_backlog_rcv+0x87/0x190
[   88.513409][ T6097]  __release_sock+0xb4/0x130
[   88.513448][ T6097]  release_sock+0x44/0x150
[   88.513473][ T6097]  sctp_setsockopt+0xa61/0xe30
[   88.513569][ T6097]  sock_common_setsockopt+0x69/0x80
[   88.513617][ T6097]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   88.513668][ T6097]  __sys_setsockopt+0x184/0x200
[   88.513698][ T6097]  __x64_sys_setsockopt+0x64/0x80
[   88.513727][ T6097]  x64_sys_call+0x20ec/0x2ff0
[   88.513820][ T6097]  do_syscall_64+0xd2/0x200
[   88.513884][ T6097]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   88.513940][ T6097]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   88.513987][ T6097]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.514131][ T6097] RIP: 0033:0x7f718eeeeba9
[   88.514147][ T6097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   88.514175][ T6097] RSP: 002b:00007f718d94f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   88.514199][ T6097] RAX: ffffffffffffffda RBX: 00007f718f135fa0 RCX: 00007f718eeeeba9
[   88.514212][ T6097] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000003
[   88.514283][ T6097] RBP: 00007f718d94f090 R08: 0000000000000008 R09: 0000000000000000
[   88.514306][ T6097] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002
[   88.514328][ T6097] R13: 00007f718f136038 R14: 00007f718f135fa0 R15: 00007ffc41477898
[   88.514353][ T6097]  </TASK>
[   88.723569][ T6060] loop2: detected capacity change from 0 to 256
[   88.821281][ T6103] bridge0: port 3(macsec1) entered blocking state
[   88.829604][ T6103] bridge0: port 3(macsec1) entered disabled state
[   88.877038][ T6060] FAT-fs (loop2): codepage cp857 not found
[   88.895065][ T6060] loop2: detected capacity change from 0 to 256
[   88.906636][ T6103] macsec1: entered allmulticast mode
[   88.940093][ T6103] macsec1: left allmulticast mode
[   88.940817][ T6060] FAT-fs (loop2): codepage cp857 not found
[   88.966765][ T6060] loop2: detected capacity change from 0 to 256
[   88.986092][ T6113] Driver unsupported XDP return value 0 on prog  (id 653) dev N/A, expect packet loss!
[   89.051005][ T6060] FAT-fs (loop2): codepage cp857 not found
[   89.066633][ T6060] loop2: detected capacity change from 0 to 256
[   89.117245][ T6060] FAT-fs (loop2): codepage cp857 not found
[   89.143892][ T6060] loop2: detected capacity change from 0 to 256
[   89.179077][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.884'.
[   89.258833][ T6060] FAT-fs (loop2): codepage cp857 not found
[   89.317031][ T6060] loop2: detected capacity change from 0 to 256
[   89.336014][ T6136] loop1: detected capacity change from 0 to 128
[   89.376090][ T6060] FAT-fs (loop2): codepage cp857 not found
[   89.378909][ T6136] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   89.431708][ T6141] netlink: 68 bytes leftover after parsing attributes in process `syz.0.889'.
[   89.468068][ T6136] ext4 filesystem being mounted at /159/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   89.504965][ T6143] loop4: detected capacity change from 0 to 512
[   89.601045][ T6143] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   89.637824][ T3306] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   89.658996][ T3406] usb 1-1: enqueue for inactive port 0
[   89.678500][ T6155] loop2: detected capacity change from 0 to 512
[   89.685793][ T3406] usb 1-1: enqueue for inactive port 0
[   89.693444][ T6143] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   89.779003][ T3406] vhci_hcd: vhci_device speed not set
[   89.811720][ T6155] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   89.838411][ T3316] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[   89.855151][ T6155] FAULT_INJECTION: forcing a failure.
[   89.855151][ T6155] name failslab, interval 1, probability 0, space 0, times 0
[   89.869665][ T6155] CPU: 0 UID: 0 PID: 6155 Comm: syz.2.894 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   89.869780][ T6155] Tainted: [W]=WARN
[   89.869788][ T6155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   89.869804][ T6155] Call Trace:
[   89.869813][ T6155]  <TASK>
[   89.869824][ T6155]  __dump_stack+0x1d/0x30
[   89.869852][ T6155]  dump_stack_lvl+0xe8/0x140
[   89.869877][ T6155]  dump_stack+0x15/0x1b
[   89.869897][ T6155]  should_fail_ex+0x265/0x280
[   89.869940][ T6155]  ? ext4_getfsmap_datadev+0x41f/0x1400
[   89.869991][ T6155]  should_failslab+0x8c/0xb0
[   89.870059][ T6155]  __kmalloc_cache_noprof+0x4c/0x320
[   89.870098][ T6155]  ? ext4_get_group_desc+0x16b/0x190
[   89.870134][ T6155]  ext4_getfsmap_datadev+0x41f/0x1400
[   89.870242][ T6155]  ? __pfx_ext4_getfsmap_datadev+0x10/0x10
[   89.870311][ T6155]  ext4_getfsmap+0x800/0x830
[   89.870353][ T6155]  ? __pfx_ext4_getfsmap_datadev+0x10/0x10
[   89.870397][ T6155]  ? __pfx_ext4_getfsmap_format+0x10/0x10
[   89.870441][ T6155]  ? __pfx_ext4_getfsmap_datadev+0x10/0x10
[   89.870491][ T6155]  ? ext4_fsmap_to_internal+0xba/0xd0
[   89.870593][ T6155]  ext4_ioctl+0x1ec3/0x2080
[   89.870632][ T6155]  ? __pfx_ext4_ioctl+0x10/0x10
[   89.870678][ T6155]  __se_sys_ioctl+0xce/0x140
[   89.870700][ T6155]  __x64_sys_ioctl+0x43/0x50
[   89.870719][ T6155]  x64_sys_call+0x1816/0x2ff0
[   89.870796][ T6155]  do_syscall_64+0xd2/0x200
[   89.870910][ T6155]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   89.870985][ T6155]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   89.871025][ T6155]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.871079][ T6155] RIP: 0033:0x7ffb1fe7eba9
[   89.871098][ T6155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   89.871177][ T6155] RSP: 002b:00007ffb1e8e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   89.871198][ T6155] RAX: ffffffffffffffda RBX: 00007ffb200c5fa0 RCX: 00007ffb1fe7eba9
[   89.871210][ T6155] RDX: 0000200000001f40 RSI: 00000000c0c0583b RDI: 0000000000000005
[   89.871222][ T6155] RBP: 00007ffb1e8e7090 R08: 0000000000000000 R09: 0000000000000000
[   89.871233][ T6155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   89.871245][ T6155] R13: 00007ffb200c6038 R14: 00007ffb200c5fa0 R15: 00007fff1eef9b28
[   89.871269][ T6155]  </TASK>
[   90.208688][ T3310] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[   90.251083][   T30] kauditd_printk_skb: 305 callbacks suppressed
[   90.251097][   T30] audit: type=1400 audit(1757751043.224:2808): avc:  denied  { setopt } for  pid=6158 comm="syz.1.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   90.327999][ T6163] loop4: detected capacity change from 0 to 256
[   90.383589][ T6174] loop1: detected capacity change from 0 to 512
[   90.397386][ T6174] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   90.420257][ T6174] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   90.509608][ T6181] FAULT_INJECTION: forcing a failure.
[   90.509608][ T6181] name failslab, interval 1, probability 0, space 0, times 0
[   90.525067][ T6181] CPU: 1 UID: 0 PID: 6181 Comm: syz.2.904 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   90.525109][ T6181] Tainted: [W]=WARN
[   90.525118][ T6181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   90.525133][ T6181] Call Trace:
[   90.525141][ T6181]  <TASK>
[   90.525187][ T6181]  __dump_stack+0x1d/0x30
[   90.525213][ T6181]  dump_stack_lvl+0xe8/0x140
[   90.525273][ T6181]  dump_stack+0x15/0x1b
[   90.525343][ T6181]  should_fail_ex+0x265/0x280
[   90.525374][ T6181]  should_failslab+0x8c/0xb0
[   90.525405][ T6181]  kmem_cache_alloc_noprof+0x50/0x310
[   90.525442][ T6181]  ? _sctp_make_chunk+0xbf/0x210
[   90.525535][ T6181]  _sctp_make_chunk+0xbf/0x210
[   90.525579][ T6181]  sctp_make_strreset_req+0xa9/0x3a0
[   90.525683][ T6181]  sctp_send_reset_streams+0x4c2/0x880
[   90.525723][ T6181]  ? _raw_spin_unlock_bh+0x36/0x40
[   90.525765][ T6181]  sctp_setsockopt_reset_streams+0x173/0x210
[   90.525844][ T6181]  sctp_setsockopt+0x8eb/0xe30
[   90.525872][ T6181]  sock_common_setsockopt+0x69/0x80
[   90.525940][ T6181]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   90.526051][ T6181]  __sys_setsockopt+0x184/0x200
[   90.526084][ T6181]  __x64_sys_setsockopt+0x64/0x80
[   90.526130][ T6181]  x64_sys_call+0x20ec/0x2ff0
[   90.526153][ T6181]  do_syscall_64+0xd2/0x200
[   90.526189][ T6181]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   90.526282][ T6181]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   90.526314][ T6181]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.526416][ T6181] RIP: 0033:0x7ffb1fe7eba9
[   90.526432][ T6181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   90.526450][ T6181] RSP: 002b:00007ffb1e8e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   90.526471][ T6181] RAX: ffffffffffffffda RBX: 00007ffb200c5fa0 RCX: 00007ffb1fe7eba9
[   90.526488][ T6181] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000003
[   90.526504][ T6181] RBP: 00007ffb1e8e7090 R08: 000000000000000a R09: 0000000000000000
[   90.526520][ T6181] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001
[   90.526536][ T6181] R13: 00007ffb200c6038 R14: 00007ffb200c5fa0 R15: 00007fff1eef9b28
[   90.526571][ T6181]  </TASK>
[   90.531452][ T3306] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[   90.704701][   T30] audit: type=1326 audit(1757751043.674:2809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6187 comm="syz.5.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90a56deba9 code=0x7ffc0000
[   90.823950][   T30] audit: type=1326 audit(1757751043.704:2810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6187 comm="syz.5.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90a56deba9 code=0x7ffc0000
[   90.850282][   T30] audit: type=1326 audit(1757751043.704:2811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6187 comm="syz.5.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90a56deba9 code=0x7ffc0000
[   90.880297][   T30] audit: type=1326 audit(1757751043.704:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6187 comm="syz.5.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90a56deba9 code=0x7ffc0000
[   90.907352][   T30] audit: type=1326 audit(1757751043.704:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6187 comm="syz.5.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f90a56deba9 code=0x7ffc0000
[   90.933644][   T30] audit: type=1326 audit(1757751043.704:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6187 comm="syz.5.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90a56deba9 code=0x7ffc0000
[   90.961536][   T30] audit: type=1326 audit(1757751043.704:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6187 comm="syz.5.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f90a56deba9 code=0x7ffc0000
[   90.988354][   T30] audit: type=1326 audit(1757751043.704:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6187 comm="syz.5.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90a56deba9 code=0x7ffc0000
[   91.015729][   T30] audit: type=1326 audit(1757751043.704:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6187 comm="syz.5.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90a56deba9 code=0x7ffc0000
[   91.145404][ T6200] __nla_validate_parse: 1 callbacks suppressed
[   91.145423][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.911'.
[   91.183616][ T6208] netlink: 24 bytes leftover after parsing attributes in process `syz.4.914'.
[   91.236621][ T6208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.914'.
[   91.290252][ T6220] loop1: detected capacity change from 0 to 128
[   91.414546][ T6233] loop1: detected capacity change from 0 to 512
[   91.427909][ T6236] bridge0: port 3(macsec1) entered blocking state
[   91.429842][ T6233] EXT4-fs: Ignoring removed nobh option
[   91.435248][ T6236] bridge0: port 3(macsec1) entered disabled state
[   91.471957][ T6236] macsec1: entered allmulticast mode
[   91.491077][ T6236] macsec1: left allmulticast mode
[   91.491893][ T6233] EXT4-fs (loop1): orphan cleanup on readonly fs
[   91.515540][ T6233] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.921: corrupted inode contents
[   91.530783][ T6233] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.921: mark_inode_dirty error
[   91.543853][ T6233] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.921: corrupted inode contents
[   91.559207][ T6233] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.921: mark_inode_dirty error
[   91.573365][ T6233] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.921: Failed to acquire dquot type 0
[   91.597173][ T6233] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.921: corrupted inode contents
[   91.618840][ T6233] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.921: mark_inode_dirty error
[   91.643859][ T6233] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.921: corrupted inode contents
[   91.683813][ T6233] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.921: mark_inode_dirty error
[   91.729093][ T6233] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.921: corrupted inode contents
[   91.752565][ T6233] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[   91.765339][ T6233] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.921: corrupted inode contents
[   91.781884][ T6233] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.921: mark_inode_dirty error
[   91.794895][ T6233] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[   91.809878][ T6233] EXT4-fs (loop1): 1 truncate cleaned up
[   91.818476][ T6233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   91.872265][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.933037][ T6272] loop4: detected capacity change from 0 to 128
[   91.961979][ T6277] loop2: detected capacity change from 0 to 512
[   91.971408][ T6272] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   91.994083][ T6280] ip6gre1: entered allmulticast mode
[   91.997224][ T6272] ext4 filesystem being mounted at /172/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   92.057543][ T6277] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   92.088055][ T3316] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   92.124870][ T6277] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   92.151075][ T6296] loop4: detected capacity change from 0 to 512
[   92.166126][ T3310] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[   92.182682][ T6298] vlan2: entered allmulticast mode
[   92.213176][ T6296] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   92.262193][ T6296] FAULT_INJECTION: forcing a failure.
[   92.262193][ T6296] name failslab, interval 1, probability 0, space 0, times 0
[   92.277061][ T6296] CPU: 1 UID: 0 PID: 6296 Comm: syz.4.936 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   92.277099][ T6296] Tainted: [W]=WARN
[   92.277106][ T6296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   92.277178][ T6296] Call Trace:
[   92.277184][ T6296]  <TASK>
[   92.277191][ T6296]  __dump_stack+0x1d/0x30
[   92.277212][ T6296]  dump_stack_lvl+0xe8/0x140
[   92.277231][ T6296]  dump_stack+0x15/0x1b
[   92.277271][ T6296]  should_fail_ex+0x265/0x280
[   92.277296][ T6296]  ? ext4_getfsmap_datadev+0x550/0x1400
[   92.277409][ T6296]  should_failslab+0x8c/0xb0
[   92.277439][ T6296]  __kmalloc_cache_noprof+0x4c/0x320
[   92.277478][ T6296]  ? ext4_bg_num_gdb+0x140/0x170
[   92.277534][ T6296]  ext4_getfsmap_datadev+0x550/0x1400
[   92.277650][ T6296]  ? __pfx_ext4_getfsmap_datadev+0x10/0x10
[   92.277747][ T6296]  ext4_getfsmap+0x800/0x830
[   92.277802][ T6296]  ? __pfx_ext4_getfsmap_datadev+0x10/0x10
[   92.277908][ T6296]  ? __pfx_ext4_getfsmap_format+0x10/0x10
[   92.277951][ T6296]  ? __pfx_ext4_getfsmap_datadev+0x10/0x10
[   92.278083][ T6296]  ? ext4_fsmap_to_internal+0xba/0xd0
[   92.278205][ T6296]  ext4_ioctl+0x1ec3/0x2080
[   92.278253][ T6296]  ? __pfx_ext4_ioctl+0x10/0x10
[   92.278329][ T6296]  __se_sys_ioctl+0xce/0x140
[   92.278427][ T6296]  __x64_sys_ioctl+0x43/0x50
[   92.278451][ T6296]  x64_sys_call+0x1816/0x2ff0
[   92.278479][ T6296]  do_syscall_64+0xd2/0x200
[   92.278520][ T6296]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   92.278664][ T6296]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.278760][ T6296] RIP: 0033:0x7f854158eba9
[   92.278780][ T6296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   92.278803][ T6296] RSP: 002b:00007f853ffef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   92.278827][ T6296] RAX: ffffffffffffffda RBX: 00007f85417d5fa0 RCX: 00007f854158eba9
[   92.278907][ T6296] RDX: 0000200000001f40 RSI: 00000000c0c0583b RDI: 0000000000000005
[   92.278923][ T6296] RBP: 00007f853ffef090 R08: 0000000000000000 R09: 0000000000000000
[   92.278939][ T6296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   92.278966][ T6296] R13: 00007f85417d6038 R14: 00007f85417d5fa0 R15: 00007ffcfc6fef78
[   92.278987][ T6296]  </TASK>
[   92.548609][ T6310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.942'.
[   92.607382][ T3316] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[   92.657696][ T6322] FAULT_INJECTION: forcing a failure.
[   92.657696][ T6322] name failslab, interval 1, probability 0, space 0, times 0
[   92.672346][ T6322] CPU: 1 UID: 0 PID: 6322 Comm: syz.4.946 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   92.672412][ T6322] Tainted: [W]=WARN
[   92.672420][ T6322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   92.672436][ T6322] Call Trace:
[   92.672443][ T6322]  <TASK>
[   92.672462][ T6322]  __dump_stack+0x1d/0x30
[   92.672486][ T6322]  dump_stack_lvl+0xe8/0x140
[   92.672505][ T6322]  dump_stack+0x15/0x1b
[   92.672521][ T6322]  should_fail_ex+0x265/0x280
[   92.672548][ T6322]  should_failslab+0x8c/0xb0
[   92.672641][ T6322]  kmem_cache_alloc_node_noprof+0x57/0x320
[   92.672685][ T6322]  ? __alloc_skb+0x101/0x320
[   92.672714][ T6322]  __alloc_skb+0x101/0x320
[   92.672742][ T6322]  sctp_packet_transmit+0x1c8/0x1510
[   92.672765][ T6322]  ? _raw_spin_unlock_irqrestore+0x2b/0x60
[   92.672866][ T6322]  ? mod_timer+0x1f/0x30
[   92.672898][ T6322]  ? sctp_sched_fcfs_dequeue+0x7a/0x190
[   92.672925][ T6322]  sctp_outq_flush+0x807/0x1970
[   92.672956][ T6322]  ? avc_has_perm_noaudit+0x1b1/0x200
[   92.672991][ T6322]  ? avc_has_perm+0xf7/0x180
[   92.673090][ T6322]  sctp_outq_uncork+0x56/0x70
[   92.673115][ T6322]  sctp_do_sm+0x2ed3/0x3230
[   92.673151][ T6322]  ? should_fail_ex+0xdb/0x280
[   92.673254][ T6322]  sctp_primitive_RECONF+0x74/0x90
[   92.673276][ T6322]  sctp_send_reconf+0x27/0x60
[   92.673306][ T6322]  sctp_send_reset_streams+0x6ba/0x880
[   92.673341][ T6322]  ? _raw_spin_unlock_bh+0x36/0x40
[   92.673410][ T6322]  sctp_setsockopt_reset_streams+0x173/0x210
[   92.673446][ T6322]  sctp_setsockopt+0x8eb/0xe30
[   92.673465][ T6322]  sock_common_setsockopt+0x69/0x80
[   92.673607][ T6322]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   92.673648][ T6322]  __sys_setsockopt+0x184/0x200
[   92.673684][ T6322]  __x64_sys_setsockopt+0x64/0x80
[   92.673708][ T6322]  x64_sys_call+0x20ec/0x2ff0
[   92.673742][ T6322]  do_syscall_64+0xd2/0x200
[   92.673781][ T6322]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   92.673875][ T6322]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   92.673911][ T6322]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.673938][ T6322] RIP: 0033:0x7f854158eba9
[   92.673956][ T6322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   92.674416][ T6322] RSP: 002b:00007f853ffef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   92.674441][ T6322] RAX: ffffffffffffffda RBX: 00007f85417d5fa0 RCX: 00007f854158eba9
[   92.674478][ T6322] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000003
[   92.674493][ T6322] RBP: 00007f853ffef090 R08: 000000000000000a R09: 0000000000000000
[   92.674509][ T6322] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001
[   92.674584][ T6322] R13: 00007f85417d6038 R14: 00007f85417d5fa0 R15: 00007ffcfc6fef78
[   92.674619][ T6322]  </TASK>
[   93.118211][ T6341] loop5: detected capacity change from 0 to 1024
[   93.134378][ T6346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.954'.
[   93.149840][ T6341] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   93.193248][ T6341] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.953: Invalid block bitmap block 0 in block_group 0
[   93.207888][ T6350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.957'.
[   93.246556][ T6341] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.953: Failed to acquire dquot type 0
[   93.263576][ T6341] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.953: Freeing blocks not in datazone - block = 0, count = 4096
[   93.327195][ T6341] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.953: Invalid inode bitmap blk 0 in block_group 0
[   93.353174][  T378] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:5: Failed to release dquot type 0
[   93.408792][ T6361] bridge0: port 3(macsec1) entered blocking state
[   93.415825][ T6341] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem
[   93.416352][ T6361] bridge0: port 3(macsec1) entered disabled state
[   93.426936][ T6341] EXT4-fs (loop5): 1 orphan inode deleted
[   93.442628][ T6341] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   93.446067][ T6361] macsec1: entered allmulticast mode
[   93.457068][ T6341] syz.5.953 (6341) used greatest stack depth: 9312 bytes left
[   93.480500][ T6361] macsec1: left allmulticast mode
[   93.487724][ T6365] openvswitch: netlink: Flow actions attr not present in new flow.
[   93.506220][ T5029] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.546275][ T6365] loop1: detected capacity change from 0 to 2048
[   93.589897][ T6365] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   93.617386][ T6365] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   93.634081][ T6365] EXT4-fs error (device loop1): ext4_free_inode:354: comm syz.1.963: bit already cleared for inode 15
[   93.719876][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.777636][ T6389] loop2: detected capacity change from 0 to 512
[   93.823059][ T6389] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   93.904797][ T6397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.973'.
[   93.917101][ T3310] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[   93.942506][ T6396] loop1: detected capacity change from 0 to 256
[   94.001758][ T6400] SELinux:  policydb magic number 0x34343831 does not match expected magic number 0xf97cff8c
[   94.029245][ T6400] SELinux: failed to load policy
[   94.130655][ T6409] loop1: detected capacity change from 0 to 512
[   94.153488][ T6409] FAULT_INJECTION: forcing a failure.
[   94.153488][ T6409] name failslab, interval 1, probability 0, space 0, times 0
[   94.168308][ T6409] CPU: 1 UID: 0 PID: 6409 Comm: syz.1.978 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   94.168343][ T6409] Tainted: [W]=WARN
[   94.168350][ T6409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   94.168363][ T6409] Call Trace:
[   94.168370][ T6409]  <TASK>
[   94.168381][ T6409]  __dump_stack+0x1d/0x30
[   94.168500][ T6409]  dump_stack_lvl+0xe8/0x140
[   94.168522][ T6409]  dump_stack+0x15/0x1b
[   94.168541][ T6409]  should_fail_ex+0x265/0x280
[   94.168573][ T6409]  ? ext4_getfsmap_datadev+0x7fc/0x1400
[   94.168620][ T6409]  should_failslab+0x8c/0xb0
[   94.168696][ T6409]  __kmalloc_cache_noprof+0x4c/0x320
[   94.168740][ T6409]  ext4_getfsmap_datadev+0x7fc/0x1400
[   94.168796][ T6409]  ? __pfx_ext4_getfsmap_datadev+0x10/0x10
[   94.168869][ T6409]  ext4_getfsmap+0x800/0x830
[   94.169024][ T6409]  ? __pfx_ext4_getfsmap_datadev+0x10/0x10
[   94.169134][ T6409]  ? __pfx_ext4_getfsmap_format+0x10/0x10
[   94.169221][ T6409]  ? __pfx_ext4_getfsmap_datadev+0x10/0x10
[   94.169330][ T6409]  ? ext4_fsmap_to_internal+0xba/0xd0
[   94.169377][ T6409]  ext4_ioctl+0x1ec3/0x2080
[   94.169417][ T6409]  ? __pfx_ext4_ioctl+0x10/0x10
[   94.169444][ T6409]  __se_sys_ioctl+0xce/0x140
[   94.169508][ T6409]  __x64_sys_ioctl+0x43/0x50
[   94.169527][ T6409]  x64_sys_call+0x1816/0x2ff0
[   94.169556][ T6409]  do_syscall_64+0xd2/0x200
[   94.169602][ T6409]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   94.169642][ T6409]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   94.169683][ T6409]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.169714][ T6409] RIP: 0033:0x7f718eeeeba9
[   94.169734][ T6409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   94.169757][ T6409] RSP: 002b:00007f718d94f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   94.169782][ T6409] RAX: ffffffffffffffda RBX: 00007f718f135fa0 RCX: 00007f718eeeeba9
[   94.169799][ T6409] RDX: 0000200000001f40 RSI: 00000000c0c0583b RDI: 0000000000000005
[   94.169816][ T6409] RBP: 00007f718d94f090 R08: 0000000000000000 R09: 0000000000000000
[   94.169832][ T6409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   94.169848][ T6409] R13: 00007f718f136038 R14: 00007f718f135fa0 R15: 00007ffc41477898
[   94.169890][ T6409]  </TASK>
[   94.483314][ T6421] loop2: detected capacity change from 0 to 512
[   94.511275][ T6421] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   94.602538][ T6430] loop5: detected capacity change from 0 to 164
[   94.616313][ T6430] ISOFS: unable to read i-node block
[   94.622338][ T6430] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[   94.675091][ T6436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.989'.
[   94.699729][ T6436] ipvlan2: entered promiscuous mode
[   94.727686][ T6442] loop1: detected capacity change from 0 to 128
[   94.808467][ T6445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.993'.
[   94.923201][ T6464] bridge0: entered promiscuous mode
[   94.941478][ T6464] macvtap1: entered allmulticast mode
[   94.947459][ T6464] bridge0: entered allmulticast mode
[   94.956487][ T6464] bridge0: port 3(macvtap1) entered blocking state
[   94.964177][ T6464] bridge0: port 3(macvtap1) entered disabled state
[   94.975754][ T6464] bridge0: left allmulticast mode
[   94.981610][ T6464] bridge0: left promiscuous mode
[   94.996850][ T6467] bridge0: port 3(macsec1) entered blocking state
[   95.004436][ T6467] bridge0: port 3(macsec1) entered disabled state
[   95.021544][ T6467] macsec1: entered allmulticast mode
[   95.027852][ T6467] macsec1: left allmulticast mode
[   95.099630][ T6479] loop4: detected capacity change from 0 to 128
[   95.111945][ T6480] netlink: 'syz.5.1005': attribute type 10 has an invalid length.
[   95.121755][ T6480] team0: Port device dummy0 added
[   95.127945][ T6480] netlink: 'syz.5.1005': attribute type 10 has an invalid length.
[   95.152037][ T6480] team0: Port device dummy0 removed
[   95.159967][ T6480] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   95.161746][ T6479] ext4 filesystem being mounted at /187/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   95.336693][ T6492] loop5: detected capacity change from 0 to 2048
[   95.361633][ T6492] EXT4-fs (loop5): unable to read superblock
[   95.379074][   T30] kauditd_printk_skb: 269 callbacks suppressed
[   95.379092][   T30] audit: type=1400 audit(1757751048.354:3082): avc:  denied  { execute } for  pid=6491 comm="syz.5.1011" dev="tmpfs" ino=1216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   95.420867][   T30] audit: type=1400 audit(1757751048.384:3083): avc:  denied  { execute_no_trans } for  pid=6491 comm="syz.5.1011" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   95.503904][ T6517] FAULT_INJECTION: forcing a failure.
[   95.503904][ T6517] name failslab, interval 1, probability 0, space 0, times 0
[   95.504015][ T6517] CPU: 1 UID: 0 PID: 6517 Comm: syz.2.1020 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   95.504050][ T6517] Tainted: [W]=WARN
[   95.504056][ T6517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   95.504069][ T6517] Call Trace:
[   95.504076][ T6517]  <TASK>
[   95.504084][ T6517]  __dump_stack+0x1d/0x30
[   95.504134][ T6517]  dump_stack_lvl+0xe8/0x140
[   95.504159][ T6517]  dump_stack+0x15/0x1b
[   95.504181][ T6517]  should_fail_ex+0x265/0x280
[   95.504209][ T6517]  should_failslab+0x8c/0xb0
[   95.504293][ T6517]  kmem_cache_alloc_node_noprof+0x57/0x320
[   95.504411][ T6517]  ? __alloc_skb+0x101/0x320
[   95.504439][ T6517]  __alloc_skb+0x101/0x320
[   95.504462][ T6517]  _sctp_make_chunk+0x59/0x210
[   95.504508][ T6517]  sctp_make_strreset_resp+0x46/0x1e0
[   95.504536][ T6517]  sctp_process_strreset_inreq+0x1a6/0x630
[   95.504569][ T6517]  ? sctp_verify_reconf+0x265/0xa70
[   95.504599][ T6517]  sctp_sf_do_reconf+0x423/0x5b0
[   95.504641][ T6517]  sctp_do_sm+0xbe/0x3230
[   95.504703][ T6517]  sctp_assoc_bh_rcv+0x2a8/0x420
[   95.504796][ T6517]  sctp_inq_push+0x103/0x110
[   95.504832][ T6517]  sctp_backlog_rcv+0xed/0x4d0
[   95.504889][ T6517]  ? __pfx_sctp_backlog_rcv+0x10/0x10
[   95.504997][ T6517]  sk_backlog_rcv+0x87/0x190
[   95.505045][ T6517]  __release_sock+0xb4/0x130
[   95.505087][ T6517]  release_sock+0x44/0x150
[   95.505113][ T6517]  sctp_setsockopt+0xa61/0xe30
[   95.505136][ T6517]  sock_common_setsockopt+0x69/0x80
[   95.505186][ T6517]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   95.505238][ T6517]  __sys_setsockopt+0x184/0x200
[   95.505339][ T6517]  __x64_sys_setsockopt+0x64/0x80
[   95.505386][ T6517]  x64_sys_call+0x20ec/0x2ff0
[   95.505418][ T6517]  do_syscall_64+0xd2/0x200
[   95.505501][ T6517]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   95.505579][ T6517]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   95.505624][ T6517]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.505656][ T6517] RIP: 0033:0x7ffb1fe7eba9
[   95.505680][ T6517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   95.505707][ T6517] RSP: 002b:00007ffb1e8e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   95.505815][ T6517] RAX: ffffffffffffffda RBX: 00007ffb200c5fa0 RCX: 00007ffb1fe7eba9
[   95.505834][ T6517] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000003
[   95.505852][ T6517] RBP: 00007ffb1e8e7090 R08: 000000000000000a R09: 0000000000000000
[   95.505871][ T6517] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001
[   95.505954][ T6517] R13: 00007ffb200c6038 R14: 00007ffb200c5fa0 R15: 00007fff1eef9b28
[   95.505982][ T6517]  </TASK>
[   95.625812][ T6524] loop2: detected capacity change from 0 to 512
[   95.635221][ T6524] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   95.681142][ T6520] loop5: detected capacity change from 0 to 2048
[   95.759648][   T30] audit: type=1400 audit(1757751048.724:3084): avc:  denied  { read } for  pid=6519 comm="syz.5.1021" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[   95.943384][ T6520] EXT4-fs error (device loop5): ext4_find_inline_data_nolock:169: inode #12: comm syz.5.1021: inline data xattr refers to an external xattr inode
[   95.953080][   T30] audit: type=1400 audit(1757751048.724:3085): avc:  denied  { open } for  pid=6519 comm="syz.5.1021" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[   95.953124][   T30] audit: type=1400 audit(1757751048.724:3086): avc:  denied  { ioctl } for  pid=6519 comm="syz.5.1021" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[   95.956289][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1021'.
[   96.027412][ T6544] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, 
[   96.060639][   T30] audit: type=1400 audit(1757751048.744:3087): avc:  denied  { connect } for  pid=6535 comm="syz.2.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   96.079920][ T6544] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   96.210684][   T30] audit: type=1400 audit(1757751048.744:3088): avc:  denied  { write } for  pid=6535 comm="syz.2.1028" laddr=fe80::11 lport=2 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   96.242806][   T30] audit: type=1400 audit(1757751048.754:3089): avc:  denied  { setopt } for  pid=6535 comm="syz.2.1028" laddr=fe80::11 lport=2 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   96.242853][   T30] audit: type=1400 audit(1757751048.764:3090): avc:  denied  { read } for  pid=6535 comm="syz.2.1028" path="socket:[15401]" dev="sockfs" ino=15401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   96.242999][   T30] audit: type=1400 audit(1757751048.814:3091): avc:  denied  { ioctl } for  pid=6519 comm="syz.5.1021" path="socket:[14837]" dev="sockfs" ino=14837 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   96.280902][ T6556] __nla_validate_parse: 3 callbacks suppressed
[   96.280922][ T6556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1033'.
[   96.296962][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1021'.
[   96.296990][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1021'.
[   96.297031][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1021'.
[   96.345288][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1021'.
[   96.426178][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1021'.
[   96.428854][ T6565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1036'.
[   96.438898][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1021'.
[   96.599909][ T6570] loop5: detected capacity change from 0 to 8192
[   96.619457][ T6577] netlink: 'syz.1.1041': attribute type 1 has an invalid length.
[   96.635939][ T6580] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1041'.
[   96.711436][ T6584] bridge0: port 3(macsec1) entered blocking state
[   96.719280][ T6584] bridge0: port 3(macsec1) entered disabled state
[   96.737662][ T6584] macsec1: entered allmulticast mode
[   96.745642][ T6584] macsec1: left allmulticast mode
[   96.754782][ T6591] loop2: detected capacity change from 0 to 128
[   96.782064][ T6586] loop1: detected capacity change from 0 to 512
[   96.794519][ T6591] ext4 filesystem being mounted at /202/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   96.823837][ T6586] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   96.852585][ T6598] ==================================================================
[   96.864609][ T6598] BUG: KCSAN: data-race in __se_sys_ioctl / __tty_hangup
[   96.872650][ T6598] 
[   96.876425][ T6598] write to 0xffff88811a27cf08 of 8 bytes by task 36 on cpu 1:
[   96.885190][ T6598]  __tty_hangup+0x1ef/0x540
[   96.890015][ T6598]  do_tty_hangup+0x1e/0x30
[   96.895360][ T6598]  process_scheduled_works+0x4cb/0x9d0
[   96.902044][ T6598]  worker_thread+0x582/0x770
[   96.907105][ T6598]  kthread+0x489/0x510
[   96.912083][ T6598]  ret_from_fork+0x11f/0x1b0
[   96.917725][ T6598]  ret_from_fork_asm+0x1a/0x30
[   96.922798][ T6598] 
[   96.927331][ T6598] read to 0xffff88811a27cf08 of 8 bytes by task 6598 on cpu 0:
[   96.935173][ T6598]  __se_sys_ioctl+0xa1/0x140
[   96.940487][ T6598]  __x64_sys_ioctl+0x43/0x50
[   96.945278][ T6598]  x64_sys_call+0x1816/0x2ff0
[   96.950417][ T6598]  do_syscall_64+0xd2/0x200
[   96.955583][ T6598]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.961710][ T6598] 
[   96.964151][ T6598] value changed: 0xffffffff858a1f90 -> 0xffffffff858a1e80
[   96.971726][ T6598] 
[   96.974250][ T6598] Reported by Kernel Concurrency Sanitizer on:
[   96.980949][ T6598] CPU: 0 UID: 0 PID: 6598 Comm: syz.0.1047 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   96.994327][ T6598] Tainted: [W]=WARN
[   96.998765][ T6598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   97.010941][ T6598] ==================================================================
[   97.039662][ T6586] EXT4-fs (loop1): 1 truncate cleaned up