last executing test programs:

2.995982464s ago: executing program 4 (id=1870):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20040000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0xb80, &(0x7f0000000c40)="$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")
chown(&(0x7f0000001840)='./file1\x00', 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

2.557267796s ago: executing program 4 (id=1877):
r0 = semget(0x0, 0x2, 0x0)
semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000a40)=""/4096)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r2}, 0x4)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/reserved_size', 0x141a82, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x9, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x20000}, 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xd}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4)
sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000)
syz_usb_connect$uac1(0x0, 0x7a, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902680003010000000904000000010100000a240152ab000002010209040100000102000009040101010102"], 0x0)
sendfile(r3, r3, 0x0, 0x3)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f0000000200)={[{@grpquota}, {@stripe={'stripe', 0x3d, 0x2}}, {@usrquota}, {@stripe={'stripe', 0x3d, 0x7}}]}, 0x2a, 0x63f, &(0x7f0000000d80)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r9 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write$binfmt_misc(r9, &(0x7f0000000240), 0xfffffecc)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r10}, 0x10)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
r12 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r12, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r12, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r12, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(r12, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range(r11, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[], 0x118}}, 0x0)

2.344289727s ago: executing program 1 (id=1879):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x117d, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x5, 0xfffe, 0x0, 0x7, 0x80000001, 0x20, 0x0, 0x0, 0x0, 0xc1}, 0x0, 0xdffff7ffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000900)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f00000004c0)="0155c31e85673788d29c423805fc284a788865780c3a462c0670e1d4f0259b29bb245781c109", 0x26}], 0x1}}], 0x1, 0x20000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpeername(r3, &(0x7f0000000440)=@l2tp={0x2, 0x0, @dev}, &(0x7f0000000340)=0x80)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r7}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x4, 0x0, 0x0)
tee(r4, r6, 0x2, 0x3)
ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_mtu=0x2})
ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x27, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r8 = add_key$keyring(&(0x7f0000000180), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$restrict_keyring(0xa, r8, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd')
r9 = socket$kcm(0x10, 0x2, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r10)
sendmsg$kcm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000)

2.19721363s ago: executing program 0 (id=1880):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xff}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00')
syz_open_procfs$pagemap(0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x87, 0x7, 0x7ffc0001}]})
r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0xc, &(0x7f0000000800)=ANY=[@ANYRESOCT=r4, @ANYRES64=r1, @ANYBLOB="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"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000000000000002eea1352d20a0498dae25f6286c232c93456043d981e961032116cd8b9218a2d9da68ef851c82a0418efa214a9743231f05228be2089698d408b860fc3bd3af2a2642a7c0e89b3b15eaeff295acb3076f526f28b27822bc0e281e4c6c1ee7b1ff8bd6d2611ae86cfe6bcd49e18ac52d51220b0490d91"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18)
getdents(r2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00'}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x3, 0x0, 0x0, 0x0, 0x82, 0x0, 0xa8c24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x3a8, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x40, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', <r6=>0x0})
bind$packet(r5, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x6, 0x6, @remote}, 0x14)
sendmmsg$sock(r5, &(0x7f0000004640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@txtime={{0x14, 0x1, 0x51, 0x8000}}], 0x14}}], 0x2, 0x24000814)
semtimedop(0x0, 0x0, 0x0, 0x0)

2.114476898s ago: executing program 1 (id=1881):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x24, r1, 0xc4fc9e906872338b, 0x70bd2e, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x4, 0x146}]}, 0x24}}, 0x40000)

2.083846941s ago: executing program 1 (id=1882):
r0 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x10)
syz_open_dev$MSR(0x0, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x9)
syz_open_procfs(0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x84, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10)
close(r5)
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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")
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800"], 0x74}}, 0x0)
r7 = socket$inet(0x2, 0x4000000000000001, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f00000007c0)=@allocspi={0x120, 0x16, 0x207, 0x70bd29, 0x25dfdbfd, {{{@in6=@dev={0xfe, 0x80, '\x00', 0x3d}, @in=@multicast2, 0x4e23, 0x400, 0x4e21, 0x3, 0xa, 0xb0, 0xa0, 0x87}, {@in6=@empty, 0x4d6, 0x6c}, @in6=@loopback, {0x6, 0x5, 0x2, 0x7fffffff, 0x3c, 0x5, 0x2, 0x5}, {0x5, 0x2, 0x1352, 0xffffffffffffff52}, {0x3, 0xd06, 0x7}, 0x70bd2d, 0x3507, 0x2, 0x2, 0x5, 0x2a}, 0x1, 0x1ff}, [@address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x43}, @in6=@empty, 0xa, 0x7, 0x4}}]}, 0x120}, 0x1, 0x0, 0x0, 0x2}, 0x880)
setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
getsockopt$inet_tcp_int(r7, 0x6, 0x2, 0x0, &(0x7f0000000140))
r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00')
exit(0x1f52b4ba)
pread64(r9, &(0x7f0000000000)=""/88, 0x58, 0x8)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r10 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r10, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708})

2.001299559s ago: executing program 0 (id=1883):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x5}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = eventfd(0x67)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
gettid()
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x15544}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x4001)
write$eventfd(r1, &(0x7f0000000080)=0xffffffffffffffc0, 0x8)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000900)=@newtaction={0x898, 0x30, 0x937, 0xfffffffc, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x396bad78, 0x5, 0x8, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xd96f, 0xfffffffe, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x84, 0x5, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffc, 0x9, 0x4, 0x4, 0x0, 0x1a, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x20000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3ffffffc, 0xffffffff, 0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffefffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10200, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x80000000, 0x0, 0x100000, 0x0, 0xff, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x6, 0x2, 0x0, 0x2, 0x80000000, 0x7fffffff, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x5, 0x2, 0x9, 0x2, 0xb14f, 0x40, 0x1, 0x3, 0xff, 0x0, 0xfa, 0x4, 0x4, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x3, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x5, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x6, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x0, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0x1, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff5, 0x4, 0x9, 0x2, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x7, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x7, 0x74e4, 0x7fff, 0x17, 0x7ff, 0x1, 0x80000d70, 0x1, 0x8, 0xa, 0x800007, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x9, 0x81, 0x7, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x8003, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x400000, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x21eb, 0x4, 0x6, 0x4, 0x7, 0x0, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x4, 0x4, 0x7fff, 0x4a5, 0x27, 0x6, 0x9, 0x8, 0x4000000, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0x6, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x7ffffffd, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0xd, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x13c5, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x1, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x14c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x4008050}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21481e, &(0x7f0000000300)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@nodiscard}]}, 0x1, 0x4f2, &(0x7f0000000600)="$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")
set_mempolicy(0x6005, 0x0, 0x4)
syz_read_part_table(0x5c2, &(0x7f0000000000)="$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")
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000b00), 0x141001)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a85323, &(0x7f0000000b40)={{0x8, 0x8}, 'port0\x00', 0x6c, 0x0, 0x7, 0x10, 0x1ff, 0xb39, 0xfff, 0x0, 0x4, 0xff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18)
link(0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000640)={0xce9, 0xfffffc00, 0x3ff, 0x101, 0x8, 0x5})

1.88351108s ago: executing program 3 (id=1884):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0xc020)
r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000001ac0)=@urb_type_bulk={0x3, {0x1, 0x1}, 0xffff, 0x40, &(0x7f00000000c0)='\x00', 0x1, 0x200006, 0x75, 0x6, 0x8, 0x79, 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]})
close_range(r3, 0xffffffffffffffff, 0x0)

1.285120168s ago: executing program 2 (id=1887):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20040000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0xb80, &(0x7f0000000c40)="$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")
chown(&(0x7f0000001840)='./file1\x00', 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10)
name_to_handle_at(0xffffffffffffffff, &(0x7f0000000240)='./mnt\x00', 0x0, 0x0, 0x1400)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x50)
syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket(0xa, 0x3, 0x3a)
r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r6)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0x20)
r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r7, 0x80000000)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700))

1.211315905s ago: executing program 1 (id=1888):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x880)

1.209566075s ago: executing program 3 (id=1889):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000004000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ac1414aa0000000000000000000000000600000005"], 0xfc}}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0xffffffff, @remote}, 0x80, 0x0}, 0x20000810)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r4, 0xf505, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5)
stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000800))
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_DEP_LINK_UP(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x24, r6, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048850}, 0x80)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NFC_CMD_LLC_SDREQ(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000900)={0x208, r8, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_SDP={0x50, 0x13, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [{0xc, 0x1, 'nl80211\x00'}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '*'}]}, {0x2c, 0x0, 0x0, 0x1, [{0xa, 0x1, 'kfree\x00'}, {0x5, 0x1, '\x00'}, {0x7, 0x1, '}!:'}, {0x5, 0x1, '-'}, {0x4}]}]}, @NFC_ATTR_LLC_SDP={0x150, 0x13, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [{0xa, 0x1, 'kfree\x00'}, {0x5, 0x1, '\x00'}, {0x4}, {0xc, 0x1, 'nl80211\x00'}]}, {0x14, 0x0, 0x0, 0x1, [{0x8, 0x1, 'GPL\x00'}, {0x6, 0x1, '}\''}]}, {0x14, 0x0, 0x0, 0x1, [{0x8, 0x1, 'GPL\x00'}, {0x8, 0x1, 'GPL\x00'}]}, {0x2c, 0x0, 0x0, 0x1, [{0xd, 0x1, '-\'[-)\'-\xd0-'}, {0x8, 0x1, 'GPL\x00'}, {0xd, 0x1, '+}[*\'.+-$'}]}, {0x18, 0x0, 0x0, 0x1, [{0x7, 0x1, '\a@*'}, {0x9, 0x1, '/]&\x90&'}]}, {0x48, 0x0, 0x0, 0x1, [{0x8, 0x1, 'GPL\x00'}, {0xa, 0x1, 'kfree\x00'}, {0xa, 0x1, '!#@,.-'}, {0x8, 0x1, '..%$'}, {0xb, 0x1, '!-@%\x13-!'}, {0x8, 0x1, 'GPL\x00'}, {0x5, 0x1, '\x00'}]}, {0x2c, 0x0, 0x0, 0x1, [{0x4}, {0xc, 0x1, 'nl80211\x00'}, {0x4}, {0xa, 0x1, '\xc9#^}-('}, {0x6, 0x1, '^#'}]}, {0x44, 0x0, 0x0, 0x1, [{0x4}, {0x8, 0x1, '(+^/'}, {0xc, 0x1, 'nl80211\x00'}, {0xc, 0x1, '-#/!])::'}, {0xa, 0x1, 'kfree\x00'}, {0x6, 0x1, '\x00^'}, {0x5, 0x1, '\x00'}]}]}, @NFC_ATTR_LLC_SDP={0x4c, 0x13, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0xc, 0x1, 'nl80211\x00'}, {0x8, 0x1, 'GPL\x00'}, {0x8, 0x1, 'GPL\x00'}, {0xc, 0x1, 'nl80211\x00'}, {0xc, 0x1, 'nl80211\x00'}, {0x5, 0x1, ','}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x208}, 0x1, 0x0, 0x0, 0x84}, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r4)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={<r11=>0x0, @loopback, @empty}, &(0x7f0000000400)=0xc)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000128bd7000ffdbdf25010000003c00018008000100", @ANYRES32=r11, @ANYBLOB="140002006d6163766c616e3000000000000000001400020076657468305f766c616e0000000000000800030001000000500002804c000180080001000c00000008000100010000000800010004000000080001000300000008000100040000000800010007000000080001000000000008000100050000000800010006000000500002801c0001800800010007000000080001000200000008000100655463b424000180080001000900000008000100070000000800010007000000080001000a0000000c00018008000100a078b2de040003002c00028014000180080001000800000008000100010000001400018008000100070000000800010000000000040003001800028014000180080001000600000008000100020000001800018014000200766972745f7769666930000000000000"], 0x154}, 0x1, 0x0, 0x0, 0x2400498c}, 0x1)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0)

1.123042753s ago: executing program 1 (id=1890):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="000000000000000080b7030000000000008500000083000000bf0900000000ddff54090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
openat2(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r2}, 0x18)
r3 = socket$inet(0x2, 0x2, 0x1)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r4}, 0x18)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x44010)
sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4f21, @multicast2}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000300)="0800c8460f2a2a2a", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048003000000070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a3200000000140000001100b6139fef4efb712400000000000a"], 0x78}}, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
unshare(0x6a040000)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000)

1.056951189s ago: executing program 0 (id=1891):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000e00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x18)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x26, &(0x7f0000000000))
r3 = socket$inet6(0xa, 0x3, 0x1)
getsockopt(r3, 0xff, 0x24, 0x0, &(0x7f00000002c0))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
nanosleep(&(0x7f0000000180)={0x0, 0x989680}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x60}, {0x16, 0x0, 0x1}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f0000000100)={'macvtap0\x00', @link_local})
bind$bt_sco(r0, &(0x7f0000000100)={0x1f, @none}, 0x8)
removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00')

1.041287941s ago: executing program 2 (id=1892):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x24, r1, 0xc4fc9e906872338b, 0x70bd2e, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x4, 0x146}]}, 0x24}}, 0x40000)

1.007392524s ago: executing program 3 (id=1893):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r1, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gre0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4021004)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r0}, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r4}, 0x40)
syz_emit_ethernet(0x10b2, &(0x7f0000003d80)=ANY=[], 0x0)
socket$kcm(0x29, 0x7, 0x0)

970.534188ms ago: executing program 2 (id=1894):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xff71, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x20084844}, 0x0)
close(r0)
setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000640)=0x3, 0x4)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000002840)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x1, @private1, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="14", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e24, 0x10, @private0, 0x7fff}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000000740)='8A', 0x2}], 0x1}}], 0x2, 0x54)
shutdown(r1, 0x1)
getsockopt$bt_hci(r1, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94)
r3 = socket$inet6(0xa, 0x3, 0x3)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x4000000, @loopback, 0x3}}]}, 0x58}, 0x1, 0x7}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r2, r4, 0x25, 0x0, @void}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x4e4}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x2)
nanosleep(&(0x7f0000000300), 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)

910.971934ms ago: executing program 3 (id=1895):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x7, 0x0, 0x0, 0x3ff, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x2}, 0x10005, 0x1, 0xfffffbff, 0x3, 0x5, 0x80000000, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffe0400000000001, 0xffffffffffffffff, 0x9)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000091cac3943880cfa257507b555917887a7b7df68ca0593a228ec1c8954f78084c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003800)=@delchain={0xc9c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x6}, {0x0, 0x1}, {0xa, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xc68, 0x2, [@TCA_BPF_POLICE={0x4}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x800, 0xc0, 0x7, 0x6}, {0xf, 0x9, 0x2, 0x10000}, {0x5, 0x3, 0x5, 0x3}, {0x2, 0x4, 0x2, 0x8}]}}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x3, 0x49, 0x7, 0x4}]}}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_POLICE={0xc10, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x0, 0x7, 0x5, 0x9a16, 0x4, 0xa, 0xffff, 0x0, 0x7f, 0x88, 0x3, 0x5, 0xa, 0x1, 0x7fffffff, 0x3, 0x8, 0x8001, 0x4, 0x102, 0x8, 0x0, 0x6, 0x7, 0x4, 0x85, 0x6, 0x2, 0x3ff, 0x0, 0x7, 0x3, 0x8, 0x0, 0x10001, 0x3000000, 0x9, 0xc92, 0xcc57614, 0x9, 0x4, 0x2, 0x7, 0x2c, 0x1, 0xffffff80, 0xdf6a, 0xd, 0x7ff, 0xf648, 0x2, 0x2, 0x8, 0x1, 0x7ff, 0xadd1, 0xa, 0x5, 0x86, 0x6, 0x8, 0xfdeb, 0xff, 0x8, 0x4, 0x8, 0xf7, 0xc2, 0x1, 0x9, 0x4, 0x9, 0x0, 0x17c, 0x1ff, 0x0, 0x0, 0x10, 0x95a, 0x8, 0x7, 0xd0, 0xfffffff7, 0x4, 0x1, 0x5, 0x8, 0xffffffff, 0x1, 0x1, 0x6, 0x2, 0x4, 0xf5, 0x6, 0x4, 0x7f, 0xffffff8b, 0x400, 0x2, 0x3016, 0x9, 0x10, 0x7, 0x5, 0x2, 0x7, 0x81, 0x7f, 0xe, 0x50, 0x49, 0x100, 0x7f, 0x6, 0x6, 0x10, 0x1f, 0xcab, 0x1ff, 0x3, 0x8001, 0x1, 0x5, 0x3bfe, 0x7, 0x4, 0x5, 0x4, 0x93, 0x9, 0x2c, 0xc, 0x81, 0x4, 0x0, 0x1a, 0x5, 0xa, 0x3, 0x5, 0x3, 0x400, 0x4435553f, 0xcd1, 0xfff, 0x6, 0x21, 0x5, 0x8, 0x7ff, 0x5, 0x7, 0x9, 0xfffffffe, 0x0, 0x0, 0x3, 0x8, 0x400, 0x8, 0x5, 0x0, 0x6, 0x10000, 0xe78, 0x6, 0x1000, 0x80, 0xb92b, 0x200, 0x2, 0xfffffffe, 0x8, 0xa, 0x80000000, 0x9, 0x0, 0x0, 0x1, 0x4, 0x34bf, 0xfffffffd, 0xacd, 0x7, 0x5, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x2, 0x5a, 0x978, 0x7, 0x80000001, 0x4f35, 0x7f, 0x6, 0x1, 0x7ff, 0x4, 0x200, 0x9, 0xee, 0xfffffffa, 0x8000000, 0x59c, 0xd4c, 0x849, 0xe7de, 0x0, 0xe23, 0xffffffa0, 0x1, 0xe, 0x7, 0x3, 0x4bfa, 0x4, 0x59d1cc8b, 0x3, 0x5, 0xff, 0x10200, 0x6, 0x9, 0x7, 0x5, 0x7, 0x1, 0x3296, 0x8, 0xf, 0x800, 0x8000, 0x4, 0xffff, 0xe, 0x7, 0x8, 0x0, 0x62c, 0x0, 0xee5, 0x1, 0xffff8000, 0x80, 0x7f, 0x0, 0x80, 0x6, 0x10000, 0x80, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffff8000, 0x7, 0x4, 0x1, 0x8000, 0x4, 0x1, 0x7, 0x4, 0x1dc80, 0xfffeffff, 0x9, 0xfff, 0xb, 0x0, 0xe, 0x7, 0x1a0, 0x0, 0x2, 0x3, 0x0, 0x1004, 0x9, 0x3, 0xffff, 0x8, 0x7, 0xc0000, 0x8, 0x89, 0x4, 0xae, 0x0, 0x3, 0x7, 0xffffffff, 0x0, 0x4, 0x101, 0x8, 0x6, 0x8, 0x8, 0xf, 0x4, 0x3, 0x6, 0x5044, 0x8565, 0x2, 0x5, 0x7, 0x6, 0x83, 0x9, 0x3, 0x5, 0xffffffff, 0x5, 0x6, 0x6, 0x1e37, 0x6, 0x2, 0x6, 0x1, 0x5, 0x10, 0x9, 0x8, 0x2, 0x7, 0x3, 0xfeef, 0x80, 0x9c, 0x9739, 0xfffffffe, 0x1000, 0x9, 0x0, 0x401, 0x9, 0x61, 0x0, 0x100, 0x9, 0x7252, 0x8, 0x1, 0xfff, 0x5, 0x6, 0x61, 0x80, 0x400, 0x8, 0x4, 0x6, 0x9, 0x5, 0x400, 0x8, 0x9, 0x8, 0x4, 0x120, 0x0, 0x0, 0xfffffffe, 0x1, 0x40, 0x8, 0x4, 0x6, 0x9, 0xf1c, 0x5, 0x4, 0x3, 0x7, 0x10000, 0x8, 0x1ff, 0x9, 0x7, 0xc, 0x10001, 0x1, 0x20040, 0x4, 0x6c6e, 0x6, 0xfffffff6, 0xaebb, 0x7, 0x1, 0x270abb5a, 0x6, 0x8, 0x3ff, 0x3ff, 0x8, 0x80, 0x8, 0x5, 0x5, 0x8, 0x10001, 0x40, 0x8000, 0x9, 0x5, 0x9, 0x8001, 0x9, 0x7a35, 0x7, 0x1, 0xffff, 0x9, 0x2, 0x4, 0x2, 0x7, 0x4, 0x1ff, 0x5, 0xb, 0xfffffff7, 0x8, 0x3, 0x6, 0x1, 0xfffffff6, 0xffffffff, 0x200, 0x9, 0x0, 0x0, 0x0, 0x9, 0x5, 0xcaeb, 0xdd8, 0x1e992ce6, 0x800, 0x3, 0x6, 0x5, 0x0, 0x2, 0x5, 0x5, 0x7, 0x4, 0x1, 0x80000000, 0x1, 0x5, 0x3, 0x3, 0x7, 0x8, 0xfff, 0x88, 0x2, 0x9, 0x5, 0xc9, 0x10001, 0x8, 0xf, 0x9, 0x1000, 0x7, 0x33f, 0x0, 0x4, 0x2, 0x10, 0x9, 0x7, 0x1e38d535, 0x9, 0x5, 0x9, 0x8, 0x976, 0x1, 0x10, 0x5, 0x1, 0x1, 0x5, 0x4, 0x0, 0x3, 0x1, 0xd, 0xfffffffb, 0x7, 0x3, 0x7fffffff, 0x57f, 0x7d, 0x7, 0x100, 0x6, 0x7ff, 0xbba3, 0x4, 0xfffffffe, 0x2, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x5, 0x6, 0x2, 0x0, 0xfffffc01, 0xd41e, 0x9, 0x8, 0x816, 0x6, 0xfffffff8, 0x4, 0x8d7e, 0xb, 0x3ff, 0x0, 0x594, 0x8, 0x40, 0x9, 0x5, 0x3d, 0xd, 0x80000000, 0x1, 0x5, 0x84, 0x0, 0x4, 0x7915, 0xd479, 0x1, 0xff, 0x5, 0x6, 0x2, 0x7, 0x1, 0x1000, 0x0, 0x4, 0x800, 0xffffff38, 0x356ec313, 0x81, 0x1, 0x9f21a54, 0x6, 0x100, 0x7, 0x0, 0xc9f, 0x76, 0x8, 0x101, 0x1, 0x1, 0x3cc, 0x4, 0x7f, 0x7, 0x6, 0x10001, 0x9, 0xfffffff4, 0x8, 0x10000, 0x6, 0x3, 0x2, 0x7f, 0x1, 0x9, 0xbca, 0x2, 0x8001, 0x4, 0x1ff, 0x6, 0x4, 0x1, 0x2, 0xffff, 0x1, 0x5, 0x400, 0x0, 0x0, 0x3314, 0x20000, 0x8, 0x1, 0xb, 0x2, 0x1, 0xc, 0x8, 0xb, 0x7, 0xf8000000, 0xe7ba, 0x0, 0x7a51b394, 0x89, 0x6, 0x1, 0x3, 0x1, 0x401, 0x2, 0x5, 0x47, 0x9, 0x3, 0x3, 0x6, 0x4, 0x9, 0xffffffff, 0xe, 0xc6, 0x7, 0x1, 0x6, 0x7, 0x3, 0x10001, 0x4, 0x400, 0xffffff00, 0x0, 0x8001, 0xfffffff8, 0x6, 0x3, 0x5, 0x3b, 0x1, 0x2, 0x2, 0xd, 0xe64, 0x1ff, 0x7, 0x6, 0x2, 0x4, 0x5, 0x2, 0xb, 0x6, 0xa455, 0x0, 0x7ff, 0x7fff, 0x3, 0x5, 0xcf7, 0x7, 0x7, 0x1, 0x7ff, 0x9, 0xfffffffc, 0x1, 0x101, 0x7, 0xf, 0x0, 0x40, 0x4, 0x7f, 0x7, 0x4, 0x79be, 0x3, 0xf, 0x8, 0x7, 0x4, 0x6, 0x2, 0x9, 0x1, 0x71a3, 0x101, 0xfff, 0xb176, 0x3, 0xffff, 0x8, 0xffffffff, 0x4, 0x5, 0x2, 0x7, 0xbd, 0x5, 0x4, 0x5, 0x9, 0x2, 0x7, 0xb, 0xde8, 0x2, 0x1000, 0x9, 0x8, 0x6, 0x1ff, 0x4, 0x10001, 0xfff, 0x3, 0x8000000, 0x2, 0x1, 0xf6, 0xfffffffb, 0xba, 0x3, 0x1, 0x5, 0xffff, 0x146, 0x1a910cb1, 0x6, 0x3, 0x9, 0x3, 0x3, 0x8, 0xfffffffb, 0x3, 0x9, 0x1, 0x0, 0x3, 0xffffffff, 0x5, 0x9, 0x9, 0x9, 0x1000, 0xf6a, 0x2, 0x5, 0xc9b, 0x4, 0x621, 0x0, 0x2, 0x80, 0x7264]}]}, @TCA_BPF_FLAGS={0x8, 0x8, 0x80000000}]}}]}, 0xc9c}, 0x1, 0x0, 0x0, 0x81}, 0x28000080)
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='8\x00\x00', @ANYRESOCT=r2, @ANYBLOB="010000000000000000000100000024000180060005004e230000815b7ced8fbf86883ae1d33f060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x4c080)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[], 0x14}}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
socket$tipc(0x1e, 0x5, 0x0)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r7}, 0x10)
fcntl$getown(r8, 0x9)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x4, 0x0, 0x0)
ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_mtu=0x2})
ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000))
r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getpeername$llc(r9, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

909.726414ms ago: executing program 0 (id=1896):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20040000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0xb80, &(0x7f0000000c40)="$eJzs3MtrXFUYAPDv3jyaNrGTiqgtggGpFcVp2hSFrlrXooIuuuyYTErI9GEmggldpHWvLkRcFKR/guDeunAluKgLrX9BEYsU3bQuInce6dBkktjO9PTx+8GZe86c6XzfN5fOPQfmJoAn1kTxkEfsjYiTWUSp9XweEcON3kjESvN1t2+eny5aFqur7/+VRRYRt26en26/V9Y6jrYGIxFx9a0snv50fdz60vJ8pVarLrTGBxdPnztYX1p+fe505VT1VPXMkak3j0y9MTXVw1qvn/vw6xd+eefli5c/m3z3q90/ZXEsxlpznXX0ykRMrH0mnQYjotLrYIkMtOrprDMbTJgQAACbyjvWcM9GKQbizuKtFD/+mjQ5AAAAoCdWByJWAQAAgMdcZv8PAAAAj7n27wBu3Tw/3W5pf5HwYN04HhHjzfrb9zc3ZwZjpXEciaGI2PV3Fp23tWbNf3bfJopI3/1cLVr06T7kzaxciIjnNzr/WaP+8cZd3OvrzyNisgfxJ+4aP0r1H+tB/NT1A/BkunK8eSFbf/3L19Y/scH1b3CDa9e9SH39a6//bq9b/92pf6DL+u+9bcbY9++rV7vNda7/Tnz++0wRvzjeV1H/w40LEfsGN6o/W6s/61L/yW3GGJ2+fqnbXFF/UW+7Pej6Vy9H7I+N62/LNvv7RAdn52rVyeZjlxj7fzhxoFv8zvNftCJ+ey/wIBTnf1eX+rc6/+e2GWP8uT/3dpvbuv78j+Hsg0ZvuPXMJ5XFxYVDEcPZ2+ufP7x5Lu3XtN+jqP+Vlzb//79R/cV3wkrrcyj2Ahdax2J88a6Yo/sPf3vv9fdXUf/MPZ7/L7YZ45vvL33UbS51/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GvKIGIssL6/187xcjhiNiGdiV147W198bfbsx2dmirmI8RjKZ+dq1cmIKDXHWTE+1OjfGR++azwVEXsi4svSzsa4PH22NpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaMRsRYZHk5IvKI+KeU5+Vy6qwAAACAnhtPnQAAAADQd/b/AAAA8Piz/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDP9rx45VoWEStHdzZaYbg1N5Q0M6Df8tQJAMkMpE4ASGYwdQJAMvb4QLbF/EjXmR09zwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh9eBvVeuZRGxcnRnoxWGW3NDSTMD+i1PnQCQzEDqBIBkBlMnACRjjw9kW8yPdJ3Z0fNcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHh4jTValpcjIm/087xcjngqIsZjKJudq1UnI2J3RPxWGtpRjA+lThoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICeqy8tz1dqteqCjo6Ozlon9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp1JeW5yu1WnWhnjoTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAILX60vJ8pVarLvSxk7pGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADS+S8AAP//szUGGQ==")
chown(&(0x7f0000001840)='./file1\x00', 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

798.591674ms ago: executing program 2 (id=1897):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000e00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x18)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x26, &(0x7f0000000000))
r3 = socket$inet6(0xa, 0x3, 0x1)
getsockopt(r3, 0xff, 0x24, 0x0, &(0x7f00000002c0))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
nanosleep(&(0x7f0000000180)={0x0, 0x989680}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x60}, {0x16, 0x0, 0x1}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f0000000100)={'macvtap0\x00', @link_local})
bind$bt_sco(r0, &(0x7f0000000100)={0x1f, @none}, 0x8)
removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00')

773.957976ms ago: executing program 1 (id=1898):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000040)=""/58, 0x3a)

755.491228ms ago: executing program 0 (id=1899):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa3b}, 0x94)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
socket$nl_route(0x10, 0x3, 0x0)
io_uring_setup(0x3b2f, &(0x7f0000000000)={0x0, 0xa948, 0x200, 0x4, 0x2a8})
socket$packet(0x11, 0x2, 0x300) (async)
socket$packet(0x11, 0x2, 0x300)
close(r0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0)
splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x25a5, 0x0) (async)
splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x25a5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000080900010073797a3000000000ec020000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000004a8020980c00002801c"], 0x334}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
sendmsg(r3, &(0x7f0000002900)={&(0x7f0000000780)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}, 0x20000000)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc9df5d0180000004e0001002abd700000000000020300000400028080a097a0079266a15c0196"], 0x18}}, 0x24048014) (async)
sendmsg$nl_generic(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc9df5d0180000004e0001002abd700000000000020300000400028080a097a0079266a15c0196"], 0x18}}, 0x24048014)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0xfffc, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x416, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5785f2fc1bb47e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0)
close(0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100))
socket$nl_route(0x10, 0x3, 0x0)
socket$isdn(0x22, 0x3, 0x4) (async)
socket$isdn(0x22, 0x3, 0x4)

690.535754ms ago: executing program 2 (id=1900):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4090000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000030801030000000000000020010000090900010173797a3000"/48], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x6a2f440099fe9278)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r1}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x9)
signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xfffffffffffffff5]}, 0x8, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900010073797a30000000000c0002400000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$kcm(0x29, 0x2, 0x0)
sendmmsg$inet(r6, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="b8", 0x1}], 0x1}}], 0x1, 0x810)
close(r6)

647.895798ms ago: executing program 0 (id=1901):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x5}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = eventfd(0x67)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
gettid()
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x15544}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x4001)
write$eventfd(r1, &(0x7f0000000080)=0xffffffffffffffc0, 0x8)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000900)=@newtaction={0x898, 0x30, 0x937, 0xfffffffc, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x396bad78, 0x5, 0x8, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xd96f, 0xfffffffe, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x84, 0x5, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffc, 0x9, 0x4, 0x4, 0x0, 0x1a, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x20000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3ffffffc, 0xffffffff, 0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffefffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10200, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x80000000, 0x0, 0x100000, 0x0, 0xff, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x6, 0x2, 0x0, 0x2, 0x80000000, 0x7fffffff, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x5, 0x2, 0x9, 0x2, 0xb14f, 0x40, 0x1, 0x3, 0xff, 0x0, 0xfa, 0x4, 0x4, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x3, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x5, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x6, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x0, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0x1, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff5, 0x4, 0x9, 0x2, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x7, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x7, 0x74e4, 0x7fff, 0x17, 0x7ff, 0x1, 0x80000d70, 0x1, 0x8, 0xa, 0x800007, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x9, 0x81, 0x7, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x8003, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x400000, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x21eb, 0x4, 0x6, 0x4, 0x7, 0x0, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x4, 0x4, 0x7fff, 0x4a5, 0x27, 0x6, 0x9, 0x8, 0x4000000, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0x6, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x7ffffffd, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0xd, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x13c5, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x1, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x14c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x4008050}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21481e, &(0x7f0000000300)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@nodiscard}]}, 0x1, 0x4f2, &(0x7f0000000600)="$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")

646.975048ms ago: executing program 2 (id=1902):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x5}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = eventfd(0x67)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
gettid()
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x15544}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x4001)
write$eventfd(r1, &(0x7f0000000080)=0xffffffffffffffc0, 0x8)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000900)=@newtaction={0x898, 0x30, 0x937, 0xfffffffc, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x396bad78, 0x5, 0x8, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xd96f, 0xfffffffe, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x84, 0x5, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffc, 0x9, 0x4, 0x4, 0x0, 0x1a, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x20000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3ffffffc, 0xffffffff, 0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffefffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10200, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x80000000, 0x0, 0x100000, 0x0, 0xff, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x6, 0x2, 0x0, 0x2, 0x80000000, 0x7fffffff, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x5, 0x2, 0x9, 0x2, 0xb14f, 0x40, 0x1, 0x3, 0xff, 0x0, 0xfa, 0x4, 0x4, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x3, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x5, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x6, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x0, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0x1, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff5, 0x4, 0x9, 0x2, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x7, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x7, 0x74e4, 0x7fff, 0x17, 0x7ff, 0x1, 0x80000d70, 0x1, 0x8, 0xa, 0x800007, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x9, 0x81, 0x7, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x8003, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x400000, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x21eb, 0x4, 0x6, 0x4, 0x7, 0x0, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x4, 0x4, 0x7fff, 0x4a5, 0x27, 0x6, 0x9, 0x8, 0x4000000, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0x6, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x7ffffffd, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0xd, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x13c5, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x1, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x14c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x4008050}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21481e, &(0x7f0000000300)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@nodiscard}]}, 0x1, 0x4f2, &(0x7f0000000600)="$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")
set_mempolicy(0x6005, 0x0, 0x4)
syz_read_part_table(0x5c2, &(0x7f0000000000)="$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")
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000b00), 0x141001)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a85323, &(0x7f0000000b40)={{0x8, 0x8}, 'port0\x00', 0x6c, 0x0, 0x7, 0x10, 0x1ff, 0xb39, 0xfff, 0x0, 0x4, 0xff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18)
link(0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000640)={0xce9, 0xfffffc00, 0x3ff, 0x101, 0x8, 0x5})

342.208328ms ago: executing program 4 (id=1903):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000e00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x18)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x26, &(0x7f0000000000))
r3 = socket$inet6(0xa, 0x3, 0x1)
getsockopt(r3, 0xff, 0x24, 0x0, &(0x7f00000002c0))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r4, 0x0, 0xffffffffffffffff}, 0x18)
nanosleep(&(0x7f0000000180)={0x0, 0x989680}, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x60}, {0x16, 0x0, 0x1}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000000100)={'macvtap0\x00', @link_local})
bind$bt_sco(r0, &(0x7f0000000100)={0x1f, @none}, 0x8)
removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00')

278.045814ms ago: executing program 4 (id=1904):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x24, r1, 0xc4fc9e906872338b, 0x70bd2e, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x4, 0x146}]}, 0x24}}, 0x40000)

263.030035ms ago: executing program 4 (id=1905):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r1, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gre0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4021004)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r0}, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r4}, 0x40)
syz_emit_ethernet(0x10b2, &(0x7f0000003d80)=ANY=[], 0x0)
socket$kcm(0x29, 0x7, 0x0)

242.865367ms ago: executing program 4 (id=1906):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x5}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = eventfd(0x67)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
gettid()
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x15544}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x4001)
write$eventfd(r1, &(0x7f0000000080)=0xffffffffffffffc0, 0x8)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000900)=@newtaction={0x898, 0x30, 0x937, 0xfffffffc, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x396bad78, 0x5, 0x8, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xd96f, 0xfffffffe, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x84, 0x5, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffc, 0x9, 0x4, 0x4, 0x0, 0x1a, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x20000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3ffffffc, 0xffffffff, 0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffefffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10200, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x80000000, 0x0, 0x100000, 0x0, 0xff, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x6, 0x2, 0x0, 0x2, 0x80000000, 0x7fffffff, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x5, 0x2, 0x9, 0x2, 0xb14f, 0x40, 0x1, 0x3, 0xff, 0x0, 0xfa, 0x4, 0x4, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x3, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x5, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x6, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x0, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0x1, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff5, 0x4, 0x9, 0x2, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x7, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x7, 0x74e4, 0x7fff, 0x17, 0x7ff, 0x1, 0x80000d70, 0x1, 0x8, 0xa, 0x800007, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x9, 0x81, 0x7, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x8003, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x400000, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x21eb, 0x4, 0x6, 0x4, 0x7, 0x0, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x4, 0x4, 0x7fff, 0x4a5, 0x27, 0x6, 0x9, 0x8, 0x4000000, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0x6, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x7ffffffd, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0xd, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x13c5, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x1, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x14c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x4008050}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21481e, &(0x7f0000000300)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@nodiscard}]}, 0x1, 0x4f2, &(0x7f0000000600)="$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")
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
syz_read_part_table(0x5c2, &(0x7f0000000000)="$eJzs2z1oU2sYB/AnavCil+vi5GQdnFwURzOoJFFRCNEu4qCgiBi4EEGIECjoYDO0NEPp2KUUsvRjapqhw6Wlhc6ldOil0KHTpV0KXZpL6Xv39vYDhN8PDg/v+/7Pec4znPEEv7QL8U+3281ERPfy8e/ubeULT2+WHpZfRWTiTUT0/PXH1MFJJiX+e+qttF5P67HRK53+nSfZ1trL3dtv5xsX0nlfuq6Ot3tPPBxnbiK3cO37j2pxoJb7tFqsb/5cWX4xuZ0vt583mlPPso/fp9xiqpdS/RK1+Baf411UohIfonpK/UdaG3f3bxRbMx8f7BU6g3P3Uq50wjmP2v9rz9DrZv3Rnenrw/drs0vlrYuHucr/+LoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADh/E7mFa99/VIsDtdyn1WJ98+fK8ovJ7Xy5/bzRnHqWffw+5RZTvZTql6jFt/gc76ISlfgQ1VPqP9LauLt/o9ia+fhgr9AZnLuXcqUTznnU/l97hl4364/uTF8fvl+bXSpvXTzMVS6f0QsAAAAAAAAAAAAAAAAAAABAROQLT2+WHpZfRWTiTUT8+fvczMF+N/3vnkm5W6mup/2x0Sud/p0n2dbay93bb+cbf6f9vt8i+iLi6ni799yH4dj+DQAA///B9JXf")
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000b00), 0x141001)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a85323, &(0x7f0000000b40)={{0x8, 0x8}, 'port0\x00', 0x6c, 0x0, 0x7, 0x10, 0x1ff, 0xb39, 0xfff, 0x0, 0x4, 0xff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18)
link(0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000640)={0xce9, 0xfffffc00, 0x3ff, 0x101, 0x8, 0x5})

61.164974ms ago: executing program 3 (id=1907):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a6970"], 0x60}}, 0x0)

0s ago: executing program 3 (id=1908):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="0f00000004000000040000000200020000000000", @ANYRES32, @ANYBLOB="fdffffff00000000000000dfffffffffffffff00f634f34483266cc783833abe93c18fcd417b346c57ca4248f151b2771bd0d2f189a8d9543100c07f7bc5762860e40e0324d05f6968660abbc7f66d69620e6623a128ac0dfce4cac564084df45884f857c3c93f74609083af9e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r3, &(0x7f0000004200)='t', 0x1)
sendfile(r3, r2, 0x0, 0x3ffff)
sendfile(r3, r2, 0x0, 0x7ffff000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)

kernel console output (not intermixed with test programs):

t claim interface 0 before use
[  149.992266][T24916] usb usb8: usbfs: process 24916 (syz.2.1371) did not claim interface 0 before use
[  150.062817][T24919] loop1: detected capacity change from 0 to 512
[  150.069739][T24919] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  150.081891][T24919] EXT4-fs (loop1): 1 truncate cleaned up
[  150.091765][T24919] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1372' sets config #1
[  150.107917][T24914] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1370' sets config #1
[  150.224441][T24926] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  150.309304][T24932] loop2: detected capacity change from 0 to 1024
[  150.316232][T24932] EXT4-fs: Ignoring removed orlov option
[  150.525390][T24943] loop3: detected capacity change from 0 to 512
[  150.538699][T24940] wg1 speed is unknown, defaulting to 1000
[  150.550960][T24943] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.1379: inode has both inline data and extents flags
[  150.565482][T24943] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1379: couldn't read orphan inode 15 (err -117)
[  150.635664][T24950] macvtap0: refused to change device tx_queue_len
[  150.639367][T24952] FAULT_INJECTION: forcing a failure.
[  150.639367][T24952] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  150.655355][T24952] CPU: 0 UID: 0 PID: 24952 Comm: syz.0.1381 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  150.655388][T24952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  150.655475][T24952] Call Trace:
[  150.655482][T24952]  <TASK>
[  150.655508][T24952]  __dump_stack+0x1d/0x30
[  150.655608][T24952]  dump_stack_lvl+0x95/0xd0
[  150.655642][T24952]  dump_stack+0x15/0x1b
[  150.655661][T24952]  should_fail_ex+0x265/0x280
[  150.655684][T24952]  should_fail+0xb/0x20
[  150.655702][T24952]  should_fail_usercopy+0x1a/0x20
[  150.655751][T24952]  _copy_from_user+0x1c/0xb0
[  150.655786][T24952]  __sys_bind+0x106/0x2a0
[  150.655832][T24952]  __x64_sys_bind+0x3f/0x50
[  150.655859][T24952]  x64_sys_call+0x2ceb/0x3000
[  150.655890][T24952]  do_syscall_64+0xca/0x2b0
[  150.655976][T24952]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.656003][T24952] RIP: 0033:0x7f845df7f749
[  150.656081][T24952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  150.656103][T24952] RSP: 002b:00007f845c9df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  150.656127][T24952] RAX: ffffffffffffffda RBX: 00007f845e1d5fa0 RCX: 00007f845df7f749
[  150.656143][T24952] RDX: 000000000000000e RSI: 0000200000000080 RDI: 0000000000000004
[  150.656159][T24952] RBP: 00007f845c9df090 R08: 0000000000000000 R09: 0000000000000000
[  150.656248][T24952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  150.656259][T24952] R13: 00007f845e1d6038 R14: 00007f845e1d5fa0 R15: 00007ffc120034f8
[  150.656278][T24952]  </TASK>
[  150.844971][T24955] loop2: detected capacity change from 0 to 1024
[  150.851825][T24955] EXT4-fs: Ignoring removed orlov option
[  150.859525][T24958] loop0: detected capacity change from 0 to 512
[  150.866966][T24958] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  150.896937][T24958] EXT4-fs (loop0): 1 truncate cleaned up
[  150.908399][T24958] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1384' sets config #1
[  151.314051][T24976] IPv6: Can't replace route, no match found
[  151.564766][T24980] wg1 speed is unknown, defaulting to 1000
[  151.637500][T24983] macvtap0: refused to change device tx_queue_len
[  151.682291][T24985] loop0: detected capacity change from 0 to 512
[  151.691396][T24985] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.1393: inode has both inline data and extents flags
[  151.705999][T24985] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1393: couldn't read orphan inode 15 (err -117)
[  151.986476][T24995] loop1: detected capacity change from 0 to 512
[  151.994255][T24995] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  152.005590][T24995] EXT4-fs (loop1): 1 truncate cleaned up
[  152.041124][T24995] usb usb8: usbfs: process 24995 (syz.1.1397) did not claim interface 0 before use
[  152.084842][T24998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.126655][T24998] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.155383][T25005] usb usb8: usbfs: process 25005 (syz.0.1399) did not claim interface 0 before use
[  152.195871][T24998] loop2: detected capacity change from 0 to 1024
[  152.220666][T24998] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (4096), stripe is disabled
[  152.262147][T24998] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm +}[@: Invalid block bitmap block 0 in block_group 0
[  152.411671][T24998] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm +}[@: Failed to acquire dquot type 0
[  152.446994][T24998] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm +}[@: Freeing blocks not in datazone - block = 0, count = 4096
[  152.521151][T24998] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm +}[@: Invalid inode bitmap blk 0 in block_group 0
[  152.549972][T24998] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[  152.572953][   T37] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 0
[  152.573140][T24998] EXT4-fs (loop2): 1 orphan inode deleted
[  152.632764][T24995] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1397' sets config #1
[  152.682816][T25018] __nla_validate_parse: 10 callbacks suppressed
[  152.682836][T25018] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1401'.
[  152.751779][T25020] wg1 speed is unknown, defaulting to 1000
[  152.941913][T25026] Symlink component flag not implemented
[  152.941937][T25026] Symlink component flag not implemented
[  152.942034][T25026] Symlink component flag not implemented (129)
[  152.942043][T25026] Symlink component flag not implemented (6)
[  152.954359][T25026] rock: directory entry would overflow storage
[  152.954369][T25026] rock: sig=0x4f50, size=4, remaining=3
[  152.954384][T25026] iso9660: Corrupted directory entry in block 6 of inode 1792
[  153.002184][T25029] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  153.009626][T25029] EXT4-fs (loop4): 1 truncate cleaned up
[  153.044916][T25029] usb usb8: usbfs: process 25029 (syz.4.1405) did not claim interface 0 before use
[  153.047149][T25029] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1405' sets config #1
[  153.097918][T25034] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1407'.
[  153.102081][T25034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1407'.
[  153.143542][T25035] EXT4-fs: Ignoring removed orlov option
[  153.273684][T25043] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  153.307003][T25046] Symlink component flag not implemented
[  153.307013][T25046] Symlink component flag not implemented
[  153.307046][T25046] Symlink component flag not implemented (129)
[  153.307060][T25046] Symlink component flag not implemented (6)
[  153.307610][T25046] rock: directory entry would overflow storage
[  153.338189][T25046] rock: sig=0x4f50, size=4, remaining=3
[  153.338208][T25046] iso9660: Corrupted directory entry in block 6 of inode 1792
[  153.421034][T25043] EXT4-fs (loop3): 1 truncate cleaned up
[  153.594400][T25013] kexec: Could not allocate control_code_buffer
[  153.673869][T25050] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  153.686785][T25050] EXT4-fs (loop4): 1 truncate cleaned up
[  153.690422][T25050] usb usb8: usbfs: process 25050 (syz.4.1414) did not claim interface 0 before use
[  153.735291][T25058] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  153.771406][T25058] EXT4-fs (loop1): 1 truncate cleaned up
[  153.775285][T25058] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1416' sets config #1
[  154.046087][T25050] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1414' sets config #1
[  154.067709][T25068] wg1 speed is unknown, defaulting to 1000
[  154.133988][T25074] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  154.141727][T25074] EXT4-fs (loop4): 1 truncate cleaned up
[  154.186342][   T29] kauditd_printk_skb: 930 callbacks suppressed
[  154.186355][   T29] audit: type=1326 audit(1766326713.105:13491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25071 comm="syz.3.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1555dbf749 code=0x7ffc0000
[  154.186544][   T29] audit: type=1326 audit(1766326713.105:13492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25071 comm="syz.3.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1555dbf749 code=0x7ffc0000
[  154.186876][   T29] audit: type=1326 audit(1766326713.105:13493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25071 comm="syz.3.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1555dbf749 code=0x7ffc0000
[  154.187047][   T29] audit: type=1326 audit(1766326713.105:13494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25071 comm="syz.3.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f1555dbf749 code=0x7ffc0000
[  154.187178][T25076] Symlink component flag not implemented
[  154.187197][T25076] Symlink component flag not implemented
[  154.187251][T25076] Symlink component flag not implemented (129)
[  154.306298][T25076] Symlink component flag not implemented (6)
[  154.311315][T25076] rock: directory entry would overflow storage
[  154.311328][T25076] rock: sig=0x4f50, size=4, remaining=3
[  154.311433][T25076] iso9660: Corrupted directory entry in block 6 of inode 1792
[  154.311664][   T29] audit: type=1326 audit(1766326713.235:13495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25071 comm="syz.3.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1555dbf749 code=0x7ffc0000
[  154.319936][   T29] audit: type=1326 audit(1766326713.235:13496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25071 comm="syz.3.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1555dbf749 code=0x7ffc0000
[  154.319971][   T29] audit: type=1326 audit(1766326713.235:13497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25071 comm="syz.3.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1555dbf749 code=0x7ffc0000
[  154.320004][   T29] audit: type=1326 audit(1766326713.235:13498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25071 comm="syz.3.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1555dbf749 code=0x7ffc0000
[  154.320186][   T29] audit: type=1326 audit(1766326713.235:13499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25071 comm="syz.3.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1555dbf749 code=0x7ffc0000
[  154.320220][   T29] audit: type=1326 audit(1766326713.235:13500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25071 comm="syz.3.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1555dbf749 code=0x7ffc0000
[  154.324520][T25080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1422'.
[  154.416991][T25083] EXT4-fs: Ignoring removed orlov option
[  154.633882][T25090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1425'.
[  154.725417][T25093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1426'.
[  154.875792][T25100] set_capacity_and_notify: 10 callbacks suppressed
[  154.875813][T25100] loop3: detected capacity change from 0 to 512
[  154.877867][T25100] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  154.902390][T25101] loop1: detected capacity change from 0 to 512
[  154.902943][T25101] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  154.904999][T25100] EXT4-fs (loop3): 1 truncate cleaned up
[  154.914752][T25101] EXT4-fs (loop1): 1 truncate cleaned up
[  154.931183][T25100] usb usb8: usbfs: process 25100 (syz.3.1430) did not claim interface 0 before use
[  154.967511][T25101] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1429' sets config #1
[  155.137290][T25107] wg1 speed is unknown, defaulting to 1000
[  155.223609][T25100] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1430' sets config #1
[  155.517063][T25309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1440'.
[  155.706592][T25388] infiniband syz!: set active
[  155.711474][T25388] infiniband syz!: added team_slave_0
[  155.724588][T25388] RDS/IB: syz!: added
[  155.728704][T25388] smc: adding ib device syz! with port count 1
[  155.735037][T25388] smc:    ib device syz! port 1 has no pnetid
[  155.792508][T25353] IPv6: Can't replace route, no match found
[  155.973942][T25658] loop3: detected capacity change from 0 to 512
[  155.994188][T25658] EXT4-fs (loop3): too many log groups per flexible block group
[  156.021761][T25658] EXT4-fs (loop3): failed to initialize mballoc (-12)
[  156.023354][T25688] wg1 speed is unknown, defaulting to 1000
[  156.034821][T25658] EXT4-fs (loop3): mount failed
[  156.075844][T25658] loop3: detected capacity change from 0 to 2048
[  156.124751][T25658] Alternate GPT is invalid, using primary GPT.
[  156.131072][T25658]  loop3: p1 p2 p3
[  156.134848][T25658] loop3: partition table partially beyond EOD, truncated
[  156.162477][T25719] loop4: detected capacity change from 0 to 1024
[  156.175677][T25719] EXT4-fs: Ignoring removed orlov option
[  156.327300][T25729] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  156.394935][T25733] macvtap0: refused to change device tx_queue_len
[  156.424266][T25735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1452'.
[  156.452839][T25731] macvtap0: refused to change device tx_queue_len
[  156.470470][T25737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1453'.
[  156.485558][T25739] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1454'.
[  156.509598][T25743] loop2: detected capacity change from 0 to 1024
[  156.527569][T25743] EXT4-fs: Ignoring removed orlov option
[  156.535595][T25746] FAULT_INJECTION: forcing a failure.
[  156.535595][T25746] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  156.549360][T25746] CPU: 1 UID: 0 PID: 25746 Comm: syz.1.1457 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  156.549470][T25746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  156.549485][T25746] Call Trace:
[  156.549499][T25746]  <TASK>
[  156.549508][T25746]  __dump_stack+0x1d/0x30
[  156.549531][T25746]  dump_stack_lvl+0x95/0xd0
[  156.549551][T25746]  dump_stack+0x15/0x1b
[  156.549572][T25746]  should_fail_ex+0x265/0x280
[  156.549631][T25746]  should_fail+0xb/0x20
[  156.549649][T25746]  should_fail_usercopy+0x1a/0x20
[  156.549697][T25746]  _copy_from_iter+0xcf/0xe70
[  156.549724][T25746]  ? __alloc_skb+0x396/0x4b0
[  156.549745][T25746]  ? __alloc_skb+0x228/0x4b0
[  156.549806][T25746]  netlink_sendmsg+0x471/0x6b0
[  156.549838][T25746]  ? __pfx_netlink_sendmsg+0x10/0x10
[  156.549925][T25746]  __sock_sendmsg+0x145/0x180
[  156.550025][T25746]  ____sys_sendmsg+0x31e/0x4a0
[  156.550062][T25746]  ___sys_sendmsg+0x17b/0x1d0
[  156.550108][T25746]  __x64_sys_sendmsg+0xd4/0x160
[  156.550147][T25746]  x64_sys_call+0x17ba/0x3000
[  156.550297][T25746]  do_syscall_64+0xca/0x2b0
[  156.550338][T25746]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.550364][T25746] RIP: 0033:0x7faf8402f749
[  156.550378][T25746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  156.550395][T25746] RSP: 002b:00007faf82a97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  156.550423][T25746] RAX: ffffffffffffffda RBX: 00007faf84285fa0 RCX: 00007faf8402f749
[  156.550435][T25746] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  156.550450][T25746] RBP: 00007faf82a97090 R08: 0000000000000000 R09: 0000000000000000
[  156.550465][T25746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  156.550480][T25746] R13: 00007faf84286038 R14: 00007faf84285fa0 R15: 00007ffca64c3bd8
[  156.550508][T25746]  </TASK>
[  156.791439][T25751] loop3: detected capacity change from 0 to 512
[  156.813402][T25751] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  156.856991][T25749] loop1: detected capacity change from 0 to 512
[  156.866919][T25753] wg1 speed is unknown, defaulting to 1000
[  156.912274][T25749] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.1458: inode has both inline data and extents flags
[  156.925991][T25751] EXT4-fs (loop3): 1 truncate cleaned up
[  156.933677][T25749] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1458: couldn't read orphan inode 15 (err -117)
[  156.950671][T25751] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1459' sets config #1
[  157.103916][T25770] loop1: detected capacity change from 0 to 1024
[  157.111539][T25770] EXT4-fs: Ignoring removed orlov option
[  157.258722][T25782] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  157.374612][T25790] loop0: detected capacity change from 0 to 1024
[  157.377003][T25792] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  157.391213][T25790] EXT4-fs: Ignoring removed orlov option
[  157.421111][T25792] EXT4-fs (loop2): 1 truncate cleaned up
[  157.441966][T25792] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1474' sets config #1
[  157.492991][T25804] wg1 speed is unknown, defaulting to 1000
[  157.721202][T25821] syz!: rxe_newlink: already configured on team_slave_0
[  157.725993][T25822] IPv6: Can't replace route, no match found
[  157.802034][T25826] __nla_validate_parse: 8 callbacks suppressed
[  157.802051][T25826] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1485'.
[  157.821348][T25829] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1486'.
[  157.822826][T25827] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  157.840281][T25829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1486'.
[  157.869829][T25827] EXT4-fs (loop0): 1 truncate cleaned up
[  157.968248][T25836] wg1 speed is unknown, defaulting to 1000
[  158.131961][T25847] wg1 speed is unknown, defaulting to 1000
[  158.172328][T25850] EXT4-fs (loop2): too many log groups per flexible block group
[  158.190937][T25850] EXT4-fs (loop2): failed to initialize mballoc (-12)
[  158.198030][T25850] EXT4-fs (loop2): mount failed
[  158.314393][T25864] syz!: rxe_newlink: already configured on team_slave_0
[  158.342554][T25850] Alternate GPT is invalid, using primary GPT.
[  158.348908][T25850]  loop2: p1 p2 p3
[  158.353483][T25850] loop2: partition table partially beyond EOD, truncated
[  158.461106][T25863] IPv6: Can't replace route, no match found
[  158.549426][T25876] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1499'.
[  158.585452][T25878] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1500'.
[  158.616778][T25879] IPv6: Can't replace route, no match found
[  158.623149][T25878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1500'.
[  158.759938][T25887] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1503'.
[  158.821964][T25890] macvtap0: refused to change device tx_queue_len
[  158.887621][T25892] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  158.911282][T25892] EXT4-fs (loop0): 1 truncate cleaned up
[  158.960635][T25892] usb usb8: usbfs: process 25892 (syz.0.1506) did not claim interface 0 before use
[  159.144435][T25898] wg1 speed is unknown, defaulting to 1000
[  159.346001][   T29] kauditd_printk_skb: 464 callbacks suppressed
[  159.346019][   T29] audit: type=1326 audit(1766326718.265:13965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25891 comm="syz.0.1506" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f845df7f749 code=0x0
[  159.362736][   T29] audit: type=1326 audit(1766326718.285:13966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25902 comm="syz.4.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db8eef749 code=0x7ffc0000
[  159.363056][   T29] audit: type=1326 audit(1766326718.285:13967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25902 comm="syz.4.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8db8eef749 code=0x7ffc0000
[  159.363438][   T29] audit: type=1326 audit(1766326718.285:13968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25902 comm="syz.4.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db8eef749 code=0x7ffc0000
[  159.363802][   T29] audit: type=1326 audit(1766326718.285:13969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25902 comm="syz.4.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f8db8eef749 code=0x7ffc0000
[  159.363978][T25905] Symlink component flag not implemented
[  159.363988][T25905] Symlink component flag not implemented
[  159.364019][T25905] Symlink component flag not implemented (129)
[  159.364039][T25905] Symlink component flag not implemented (6)
[  159.364486][T25905] rock: directory entry would overflow storage
[  159.364493][T25905] rock: sig=0x4f50, size=4, remaining=3
[  159.364505][T25905] iso9660: Corrupted directory entry in block 6 of inode 1792
[  159.364612][   T29] audit: type=1326 audit(1766326718.285:13970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25902 comm="syz.4.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db8eef749 code=0x7ffc0000
[  159.368492][   T29] audit: type=1326 audit(1766326718.285:13971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25902 comm="syz.4.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8db8eef749 code=0x7ffc0000
[  159.369556][   T29] audit: type=1326 audit(1766326718.285:13972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25902 comm="syz.4.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db8eef749 code=0x7ffc0000
[  159.371690][   T29] audit: type=1326 audit(1766326718.295:13973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25902 comm="syz.4.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8db8eef749 code=0x7ffc0000
[  159.371931][   T29] audit: type=1326 audit(1766326718.295:13974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25902 comm="syz.4.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db8eef749 code=0x7ffc0000
[  159.476076][T25909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1510'.
[  159.484535][T25906] Symlink component flag not implemented
[  159.484544][T25906] Symlink component flag not implemented
[  159.484614][T25906] Symlink component flag not implemented (129)
[  159.484623][T25906] Symlink component flag not implemented (6)
[  159.485530][T25906] rock: directory entry would overflow storage
[  159.485540][T25906] rock: sig=0x4f50, size=4, remaining=3
[  159.485553][T25906] iso9660: Corrupted directory entry in block 6 of inode 1792
[  159.690069][T25912] usb usb8: usbfs: process 25912 (syz.0.1511) did not claim interface 0 before use
[  160.101049][T25916] IPv6: Can't replace route, no match found
[  160.179432][T25918] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1513'.
[  160.246150][T25922] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1514'.
[  160.270749][T25924] set_capacity_and_notify: 7 callbacks suppressed
[  160.270768][T25924] loop1: detected capacity change from 0 to 512
[  160.293934][T25924] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  160.326312][T25926] loop0: detected capacity change from 0 to 1024
[  160.344686][T25931] loop4: detected capacity change from 0 to 512
[  160.354705][T25924] EXT4-fs (loop1): 1 truncate cleaned up
[  160.361581][T25931] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  160.375298][T25924] EXT4-fs mount: 106 callbacks suppressed
[  160.375359][T25924] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  160.381131][T25926] EXT4-fs: Ignoring removed orlov option
[  160.404385][T25926] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  160.418799][T25931] EXT4-fs (loop4): 1 truncate cleaned up
[  160.430219][T25931] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  160.449673][T25920] IPv6: Can't replace route, no match found
[  160.456886][T25924] usb usb8: usbfs: process 25924 (syz.1.1515) did not claim interface 0 before use
[  160.471086][T25931] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1520' sets config #1
[  160.529744][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.657863][T25939] wg1 speed is unknown, defaulting to 1000
[  160.680911][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.738574][T25948] FAULT_INJECTION: forcing a failure.
[  160.738574][T25948] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  160.751795][T25948] CPU: 0 UID: 0 PID: 25948 Comm: syz.2.1525 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  160.751896][T25948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  160.751912][T25948] Call Trace:
[  160.751919][T25948]  <TASK>
[  160.751928][T25948]  __dump_stack+0x1d/0x30
[  160.752035][T25948]  dump_stack_lvl+0x95/0xd0
[  160.752060][T25948]  dump_stack+0x15/0x1b
[  160.752082][T25948]  should_fail_ex+0x265/0x280
[  160.752153][T25948]  should_fail+0xb/0x20
[  160.752181][T25948]  should_fail_usercopy+0x1a/0x20
[  160.752207][T25948]  _copy_from_user+0x1c/0xb0
[  160.752278][T25948]  input_event_from_user+0x5f/0x160
[  160.752307][T25948]  evdev_write+0x1b1/0x290
[  160.752342][T25948]  ? __pfx_evdev_write+0x10/0x10
[  160.752415][T25948]  vfs_write+0x269/0x960
[  160.752434][T25948]  ? __rcu_read_unlock+0x4f/0x70
[  160.752462][T25948]  ? __fget_files+0x184/0x1c0
[  160.752577][T25948]  ksys_write+0xda/0x1a0
[  160.752631][T25948]  __x64_sys_write+0x40/0x50
[  160.752651][T25948]  x64_sys_call+0x2847/0x3000
[  160.752677][T25948]  do_syscall_64+0xca/0x2b0
[  160.752775][T25948]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.752798][T25948] RIP: 0033:0x7f7345fbf749
[  160.752814][T25948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  160.752833][T25948] RSP: 002b:00007f7344a1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  160.752914][T25948] RAX: ffffffffffffffda RBX: 00007f7346215fa0 RCX: 00007f7345fbf749
[  160.752930][T25948] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000005
[  160.752945][T25948] RBP: 00007f7344a1f090 R08: 0000000000000000 R09: 0000000000000000
[  160.752960][T25948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  160.752975][T25948] R13: 00007f7346216038 R14: 00007f7346215fa0 R15: 00007ffc096d95e8
[  160.752999][T25948]  </TASK>
[  160.947660][T25942] loop3: detected capacity change from 0 to 1024
[  160.967881][T25942] EXT4-fs: Ignoring removed orlov option
[  160.993871][T25951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.008941][T25942] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.021515][T25952] usb usb8: usbfs: process 25952 (syz.0.1524) did not claim interface 0 before use
[  161.110743][T25951] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.170796][T25951] loop2: detected capacity change from 0 to 1024
[  161.182157][T25951] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (4096), stripe is disabled
[  161.326522][T25951] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm +}[@: Invalid block bitmap block 0 in block_group 0
[  161.354991][T25951] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm +}[@: Failed to acquire dquot type 0
[  161.392725][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.409654][T25951] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm +}[@: Freeing blocks not in datazone - block = 0, count = 4096
[  161.463163][T25964] loop0: detected capacity change from 0 to 512
[  161.469574][T25951] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm +}[@: Invalid inode bitmap blk 0 in block_group 0
[  161.487143][T19857] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:28: Failed to release dquot type 0
[  161.529404][T25951] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[  161.538914][T25964] EXT4-fs (loop0): too many log groups per flexible block group
[  161.548262][T25964] EXT4-fs (loop0): failed to initialize mballoc (-12)
[  161.559955][T25951] EXT4-fs (loop2): 1 orphan inode deleted
[  161.571143][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.580353][T25964] EXT4-fs (loop0): mount failed
[  161.585683][T25951] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.156375][T25964] loop0: detected capacity change from 0 to 2048
[  162.180956][T25964] Alternate GPT is invalid, using primary GPT.
[  162.181055][T25964]  loop0: p1 p2 p3
[  162.181065][T25964] loop0: partition table partially beyond EOD, truncated
[  162.702207][T26241] IPv6: Can't replace route, no match found
[  163.064831][T26573] __nla_validate_parse: 5 callbacks suppressed
[  163.064849][T26573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1535'.
[  163.131600][T26585] IPv6: Can't replace route, no match found
[  163.281681][T26592] usb usb8: usbfs: process 26592 (syz.0.1538) did not claim interface 0 before use
[  163.311746][T26596] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1539'.
[  163.313141][T26596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1539'.
[  163.366264][T26598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1540'.
[  163.550962][T26846] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1541'.
[  163.608663][T26901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  163.608739][T26901] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  163.632310][T26901] loop1: detected capacity change from 0 to 1024
[  163.633203][T26901] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (4096), stripe is disabled
[  163.634753][T26901] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm +}[@: Invalid block bitmap block 0 in block_group 0
[  163.635026][T26901] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm +}[@: Failed to acquire dquot type 0
[  163.635249][T26901] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm +}[@: Freeing blocks not in datazone - block = 0, count = 4096
[  163.635540][T26901] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm +}[@: Invalid inode bitmap blk 0 in block_group 0
[  163.639310][T26901] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem
[  163.639431][T26901] EXT4-fs (loop1): 1 orphan inode deleted
[  163.642418][T26901] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.650048][ T1004] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:9: Failed to release dquot type 0
[  163.753299][T27119] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1543'.
[  163.754325][T27119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1543'.
[  164.098683][T27402] loop4: detected capacity change from 0 to 512
[  164.106932][T27402] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  164.129341][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.140203][T27402] EXT4-fs (loop4): 1 truncate cleaned up
[  164.146321][T27402] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.190794][T27402] usb usb8: usbfs: process 27402 (syz.4.1548) did not claim interface 0 before use
[  164.443845][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.537991][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.757184][T27406] wg1 speed is unknown, defaulting to 1000
[  164.856008][T27414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1549'.
[  164.882523][T27416] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1550'.
[  165.055420][T27418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1552'.
[  165.180463][T27423] usb usb8: usbfs: process 27423 (syz.2.1554) did not claim interface 0 before use
[  165.289530][   T29] kauditd_printk_skb: 93 callbacks suppressed
[  165.289564][   T29] audit: type=1326 audit(1766326724.205:14062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27422 comm="syz.2.1554" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7345fbf749 code=0x0
[  165.506505][T27432] loop3: detected capacity change from 0 to 1024
[  165.537485][T27432] EXT4-fs: Ignoring removed orlov option
[  165.573044][T27432] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.746336][T27444] loop0: detected capacity change from 0 to 512
[  165.765714][T27444] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  165.783954][T27444] EXT4-fs (loop0): 1 truncate cleaned up
[  165.791565][T27444] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  165.834792][T27444] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1560' sets config #1
[  165.958245][T27448] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  165.992651][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.043521][T27450] wg1 speed is unknown, defaulting to 1000
[  166.055299][   T29] audit: type=1326 audit(1766326724.975:14063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27452 comm="syz.4.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db8eef749 code=0x7ffc0000
[  166.109865][   T29] audit: type=1326 audit(1766326725.005:14064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27452 comm="syz.4.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f8db8eef749 code=0x7ffc0000
[  166.133609][   T29] audit: type=1326 audit(1766326725.005:14065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27452 comm="syz.4.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db8eef749 code=0x7ffc0000
[  166.219170][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.253062][   T29] audit: type=1326 audit(1766326725.175:14066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27464 comm="syz.0.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845df7f749 code=0x7ffc0000
[  166.253239][   T29] audit: type=1326 audit(1766326725.175:14067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27464 comm="syz.0.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f845df7f749 code=0x7ffc0000
[  166.253734][   T29] audit: type=1326 audit(1766326725.175:14068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27464 comm="syz.0.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845df7f749 code=0x7ffc0000
[  166.341214][   T29] audit: type=1326 audit(1766326725.225:14069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27464 comm="syz.0.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f845df7f749 code=0x7ffc0000
[  166.364886][   T29] audit: type=1326 audit(1766326725.225:14070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27464 comm="syz.0.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845df7f749 code=0x7ffc0000
[  166.388553][   T29] audit: type=1326 audit(1766326725.225:14071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27464 comm="syz.0.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f845df7f749 code=0x7ffc0000
[  166.417334][T27468] loop4: detected capacity change from 0 to 764
[  166.454037][T27460] Symlink component flag not implemented
[  166.459892][T27460] Symlink component flag not implemented
[  166.470868][T27460] Symlink component flag not implemented (129)
[  166.477185][T27460] Symlink component flag not implemented (6)
[  166.587664][T27460] rock: directory entry would overflow storage
[  166.593925][T27460] rock: sig=0x4f50, size=4, remaining=3
[  166.599686][T27460] iso9660: Corrupted directory entry in block 6 of inode 1792
[  166.665167][T27478] loop1: detected capacity change from 0 to 512
[  166.696555][T27479] loop3: detected capacity change from 0 to 512
[  166.731222][T27478] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  166.741376][T27479] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  166.831545][T27479] EXT4-fs (loop3): 1 truncate cleaned up
[  166.837778][T27478] EXT4-fs (loop1): 1 truncate cleaned up
[  166.844992][T27487] usb usb8: usbfs: process 27487 (syz.4.1574) did not claim interface 0 before use
[  166.856395][T27479] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  166.869173][T27478] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  166.916908][T27479] usb usb8: usbfs: process 27479 (syz.3.1573) did not claim interface 0 before use
[  166.931867][T27478] usb usb8: usbfs: process 27478 (syz.1.1572) did not claim interface 0 before use
[  167.692736][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.708799][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.895692][T27513] IPv6: Can't replace route, no match found
[  168.016259][T27512] wg1 speed is unknown, defaulting to 1000
[  168.110951][T27521] __nla_validate_parse: 12 callbacks suppressed
[  168.110965][T27521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1585'.
[  168.206893][T27526] IPv6: Can't replace route, no match found
[  168.221630][T27523] loop1: detected capacity change from 0 to 512
[  168.229910][T27523] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  168.234604][T27525] usb usb8: usbfs: process 27525 (syz.2.1586) did not claim interface 0 before use
[  168.262345][T27523] EXT4-fs (loop1): 1 truncate cleaned up
[  168.268526][T27523] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  168.388809][T27531] loop3: detected capacity change from 0 to 512
[  168.397306][T27523] usb usb8: usbfs: process 27523 (syz.1.1584) did not claim interface 0 before use
[  168.415912][T27531] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  168.442415][T27531] EXT4-fs (loop3): 1 truncate cleaned up
[  168.448588][T27531] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  168.477062][T27531] usb usb8: usbfs: process 27531 (syz.3.1588) did not claim interface 0 before use
[  168.771716][T27502] kexec: Could not allocate control_code_buffer
[  168.797781][T27537] loop2: detected capacity change from 0 to 512
[  168.805827][T27537] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  168.817205][T27537] EXT4-fs (loop2): 1 truncate cleaned up
[  168.824301][T27537] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  168.840670][T27537] usb usb8: usbfs: process 27537 (syz.2.1590) did not claim interface 0 before use
[  168.866774][T27539] loop0: detected capacity change from 0 to 4096
[  168.893965][T27539] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.965864][T27539] bridge_slave_0: left allmulticast mode
[  168.971721][T27539] bridge_slave_0: left promiscuous mode
[  168.977420][T27539] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.993789][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.007138][T27539] bridge_slave_1: left allmulticast mode
[  169.012982][T27539] bridge_slave_1: left promiscuous mode
[  169.018737][T27539] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.033344][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.059887][T27539] bond0: (slave bond_slave_0): Releasing backup interface
[  169.072108][T27539] bond0: (slave bond_slave_1): Releasing backup interface
[  169.079124][T27546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1592'.
[  169.095150][T27539] team0: Port device team_slave_0 removed
[  169.106831][T27539] team0: Port device team_slave_1 removed
[  169.114795][T27539] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  169.122319][T27539] batman_adv: batadv0: Removing interface: batadv_slave_0
[  169.132563][T27539] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  169.140035][T27539] batman_adv: batadv0: Removing interface: batadv_slave_1
[  169.152507][T27539] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  169.174552][ T3494] syz!: Port: 1 Link DOWN
[  169.244913][T27552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1594'.
[  169.270966][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.318040][T27550] loop3: detected capacity change from 0 to 8192
[  169.332981][T27556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1595'.
[  169.359528][T27563] Symlink component flag not implemented
[  169.359535][T27563] Symlink component flag not implemented
[  169.359577][T27563] Symlink component flag not implemented (129)
[  169.359587][T27563] Symlink component flag not implemented (6)
[  169.360152][T27563] rock: directory entry would overflow storage
[  169.360162][T27563] rock: sig=0x4f50, size=4, remaining=3
[  169.360173][T27563] iso9660: Corrupted directory entry in block 6 of inode 1792
[  169.418467][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.505960][T27582] IPv6: Can't replace route, no match found
[  169.533991][T27586] macvtap0: refused to change device tx_queue_len
[  169.559104][T27617] wg1 speed is unknown, defaulting to 1000
[  169.656333][T27623] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1601'.
[  169.792847][T27628] EXT4-fs: Ignoring removed orlov option
[  169.820401][T27628] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.025775][T27636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1604'.
[  170.058646][T27638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1605'.
[  170.167448][T27640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1606'.
[  170.328325][T27625] veth0_to_team: entered promiscuous mode
[  170.394635][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.415759][   T29] kauditd_printk_skb: 93 callbacks suppressed
[  170.415772][   T29] audit: type=1326 audit(1766326729.335:14165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27646 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7345fbf749 code=0x7ffc0000
[  170.444808][   T29] audit: type=1326 audit(1766326729.335:14166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27646 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7345fbf749 code=0x7ffc0000
[  170.468412][T27649] Symlink component flag not implemented
[  170.474125][T27649] Symlink component flag not implemented
[  170.484665][T27649] Symlink component flag not implemented (129)
[  170.490972][T27649] Symlink component flag not implemented (6)
[  170.501520][T27649] rock: directory entry would overflow storage
[  170.507778][T27649] rock: sig=0x4f50, size=4, remaining=3
[  170.513444][T27649] iso9660: Corrupted directory entry in block 6 of inode 1792
[  170.522663][   T29] audit: type=1326 audit(1766326729.385:14167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27646 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7345fbf749 code=0x7ffc0000
[  170.545585][   T29] audit: type=1326 audit(1766326729.385:14168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27646 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7345fbf749 code=0x7ffc0000
[  170.546267][T27653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  170.568408][   T29] audit: type=1326 audit(1766326729.445:14169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27646 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7345fbf749 code=0x7ffc0000
[  170.568447][   T29] audit: type=1326 audit(1766326729.445:14170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27646 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7345fbf749 code=0x7ffc0000
[  170.568497][   T29] audit: type=1326 audit(1766326729.445:14171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27646 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7345fbf749 code=0x7ffc0000
[  170.570049][   T29] audit: type=1326 audit(1766326729.495:14172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27646 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7345fbf749 code=0x7ffc0000
[  170.668170][   T29] audit: type=1326 audit(1766326729.495:14173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27646 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7345fbf749 code=0x7ffc0000
[  170.668518][T27652] set_capacity_and_notify: 4 callbacks suppressed
[  170.668567][T27652] loop1: detected capacity change from 0 to 1024
[  170.691066][   T29] audit: type=1326 audit(1766326729.495:14174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27646 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7345fbf749 code=0x7ffc0000
[  170.727526][T27653] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  170.763256][T27653] loop3: detected capacity change from 0 to 1024
[  170.770483][T27653] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (4096), stripe is disabled
[  170.783276][T27653] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm +}[@: Invalid block bitmap block 0 in block_group 0
[  170.796512][T27653] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm +}[@: Failed to acquire dquot type 0
[  170.830193][T27652] EXT4-fs: Ignoring removed orlov option
[  170.872886][T27653] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm +}[@: Freeing blocks not in datazone - block = 0, count = 4096
[  170.886661][T27653] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm +}[@: Invalid inode bitmap blk 0 in block_group 0
[  170.903219][T27653] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[  170.912938][T27652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.927453][T27653] EXT4-fs (loop3): 1 orphan inode deleted
[  170.933741][T27653] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.001342][T27621] kexec: Could not allocate control_code_buffer
[  171.008062][T19857] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:28: Failed to release dquot type 0
[  171.035043][T27661] wg1 speed is unknown, defaulting to 1000
[  171.323875][T27669] IPv6: Can't replace route, no match found
[  171.424728][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.541793][T27673] wg1 speed is unknown, defaulting to 1000
[  171.566404][T27671] loop4: detected capacity change from 0 to 8192
[  171.923547][T27678] IPv6: Can't replace route, no match found
[  172.039315][T27681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1615'.
[  172.160507][T27687] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1619'.
[  172.173580][T27683] wg1 speed is unknown, defaulting to 1000
[  172.319250][T27693] loop4: detected capacity change from 0 to 512
[  172.369911][T27693] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  172.386441][T27693] EXT4-fs (loop4): 1 truncate cleaned up
[  172.386952][T27693] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  172.410511][T27693] usb usb8: usbfs: process 27693 (syz.4.1622) did not claim interface 0 before use
[  172.637569][T27696] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  172.659743][T27698] usb usb8: usbfs: process 27698 (syz.0.1624) did not claim interface 0 before use
[  172.704659][T27701] loop2: detected capacity change from 0 to 1024
[  172.704988][T27701] EXT4-fs: Ignoring removed orlov option
[  172.719095][T27701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.930459][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.998568][T27685] kexec: Could not allocate control_code_buffer
[  173.016582][T27707] loop4: detected capacity change from 0 to 512
[  173.045501][T27707] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  173.080794][T27707] EXT4-fs (loop4): 1 truncate cleaned up
[  173.081311][T27707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  173.085538][T27707] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1626' sets config #1
[  173.107665][T27709] wg1 speed is unknown, defaulting to 1000
[  173.158772][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.235467][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.268081][T27721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1631'.
[  173.305158][T27723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1632'.
[  173.350568][T27727] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1633'.
[  173.352688][T27727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1633'.
[  173.453281][T27730] loop0: detected capacity change from 0 to 512
[  173.455104][T27730] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.1635: inode has both inline data and extents flags
[  173.455292][T27730] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1635: couldn't read orphan inode 15 (err -117)
[  173.455804][T27730] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.554935][T27739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.564487][T27739] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  173.578783][T27739] loop2: detected capacity change from 0 to 1024
[  173.586810][T27739] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (4096), stripe is disabled
[  173.611176][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.622593][T27739] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm +}[@: Invalid block bitmap block 0 in block_group 0
[  173.636488][T27739] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm +}[@: Failed to acquire dquot type 0
[  173.648280][T27739] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm +}[@: Freeing blocks not in datazone - block = 0, count = 4096
[  173.664208][T27739] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm +}[@: Invalid inode bitmap blk 0 in block_group 0
[  173.676662][T27739] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[  173.686037][T27739] EXT4-fs (loop2): 1 orphan inode deleted
[  173.704886][T27739] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  174.046709][T27743] loop1: detected capacity change from 0 to 512
[  174.047268][T27743] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  174.055301][T27743] EXT4-fs (loop1): 1 truncate cleaned up
[  174.055742][T27743] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  174.088079][T27743] usb usb8: usbfs: process 27743 (syz.1.1640) did not claim interface 0 before use
[  174.350631][T27743] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1640' sets config #1
[  174.471118][T19856] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:27: Failed to release dquot type 0
[  174.472093][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.480583][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.513603][T27751] veth0_to_team: entered promiscuous mode
[  174.531044][T27749] usb usb8: usbfs: process 27749 (syz.0.1638) did not claim interface 0 before use
[  174.558304][T27752] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1639'.
[  174.626046][T27754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1642'.
[  174.744523][T27757] macvtap0: refused to change device tx_queue_len
[  174.826224][T27760] wg1 speed is unknown, defaulting to 1000
[  175.238969][T27764] wg1 speed is unknown, defaulting to 1000
[  175.296322][T27769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1646'.
[  175.329134][T27771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1647'.
[  175.482969][   T29] kauditd_printk_skb: 70 callbacks suppressed
[  175.483026][   T29] audit: type=1326 audit(1766326734.405:14239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27773 comm="syz.1.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8402f749 code=0x7ffc0000
[  175.483173][   T29] audit: type=1326 audit(1766326734.405:14240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27773 comm="syz.1.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7faf8402f749 code=0x7ffc0000
[  175.489436][   T29] audit: type=1326 audit(1766326734.405:14241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27773 comm="syz.1.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8402f749 code=0x7ffc0000
[  175.489633][   T29] audit: type=1326 audit(1766326734.405:14242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27773 comm="syz.1.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7faf8402f749 code=0x7ffc0000
[  175.496388][T27747] kexec: Could not allocate control_code_buffer
[  175.498668][   T29] audit: type=1326 audit(1766326734.405:14243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27773 comm="syz.1.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8402f749 code=0x7ffc0000
[  175.498870][   T29] audit: type=1326 audit(1766326734.415:14244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27773 comm="syz.1.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7faf8402f749 code=0x7ffc0000
[  175.504588][   T29] audit: type=1326 audit(1766326734.425:14245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27773 comm="syz.1.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8402f749 code=0x7ffc0000
[  175.531394][   T29] audit: type=1326 audit(1766326734.455:14246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27773 comm="syz.1.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8402f749 code=0x7ffc0000
[  175.531458][   T29] audit: type=1326 audit(1766326734.455:14247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27773 comm="syz.1.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf8402f749 code=0x7ffc0000
[  175.531488][   T29] audit: type=1326 audit(1766326734.455:14248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27773 comm="syz.1.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8402f749 code=0x7ffc0000
[  175.627871][T27779] loop0: detected capacity change from 0 to 512
[  175.629294][T27779] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  175.632978][T27782] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  175.682552][T27779] EXT4-fs (loop0): 1 truncate cleaned up
[  175.690704][T27782] EXT4-fs (loop3): 1 truncate cleaned up
[  175.724075][T27784] bridge_slave_0: left allmulticast mode
[  175.735223][T27782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  175.770752][T27779] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  175.784987][T27784] bridge_slave_0: left promiscuous mode
[  175.806388][T27783] EXT4-fs (loop4): too many log groups per flexible block group
[  175.812236][T27784] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.815567][T27783] EXT4-fs (loop4): failed to initialize mballoc (-12)
[  175.835677][T27782] usb usb8: usbfs: process 27782 (syz.3.1650) did not claim interface 0 before use
[  175.838830][T27783] EXT4-fs (loop4): mount failed
[  175.853737][T27779] usb usb8: usbfs: process 27779 (syz.0.1652) did not claim interface 0 before use
[  175.903664][T27784] bridge_slave_1: left allmulticast mode
[  175.903688][T27784] bridge_slave_1: left promiscuous mode
[  175.903836][T27784] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.916954][T27784] bond0: (slave bond_slave_0): Releasing backup interface
[  175.919714][T27784] bond0: (slave bond_slave_1): Releasing backup interface
[  175.933665][T27784] team0: Port device team_slave_0 removed
[  175.936755][T27784] team0: Port device team_slave_1 removed
[  175.937958][T27784] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  175.937978][T27784] batman_adv: batadv0: Removing interface: batadv_slave_0
[  175.939391][T27784] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  175.939471][T27784] batman_adv: batadv0: Removing interface: batadv_slave_1
[  175.942816][T27784] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  175.942956][   T36] wg1 speed is unknown, defaulting to 1000
[  175.986587][T27783] set_capacity_and_notify: 2 callbacks suppressed
[  175.986603][T27783] loop4: detected capacity change from 0 to 2048
[  176.027504][T27783] Alternate GPT is invalid, using primary GPT.
[  176.027594][T27783]  loop4: p1 p2 p3
[  176.027671][T27783] loop4: partition table partially beyond EOD, truncated
[  176.085905][T27792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1654'.
[  176.337771][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.357216][T27790] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1652' sets config #1
[  176.497194][T27800] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1657'.
[  176.585162][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.607894][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.685843][T27806] wg1 speed is unknown, defaulting to 1000
[  177.139394][T27815] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  177.206540][T27821] loop4: detected capacity change from 0 to 512
[  177.214227][T27821] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  177.231680][T27821] EXT4-fs (loop4): 1 truncate cleaned up
[  177.237843][T27821] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  177.297951][T27821] usb usb8: usbfs: process 27821 (syz.4.1667) did not claim interface 0 before use
[  177.320154][T27828] loop0: detected capacity change from 0 to 1024
[  177.341501][T27828] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  177.400733][T27828] ext4 filesystem being mounted at /354/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  177.421096][T27827] wg1 speed is unknown, defaulting to 1000
[  177.487581][T27828] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1659: bg 0: block 112: padding at end of block bitmap is not set
[  177.567160][T27835] loop2: detected capacity change from 0 to 512
[  177.585579][T27837] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.1659: Freeing blocks not in datazone - block = 0, count = 16
[  177.650999][T27835] EXT4-fs (loop2): too many log groups per flexible block group
[  177.674026][T27835] EXT4-fs (loop2): failed to initialize mballoc (-12)
[  177.691758][T27828] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  177.702071][T27835] EXT4-fs (loop2): mount failed
[  177.770378][T27835] loop2: detected capacity change from 0 to 2048
[  177.788080][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  177.800047][T27845] loop3: detected capacity change from 0 to 1024
[  177.806786][T27845] EXT4-fs: Ignoring removed orlov option
[  177.826875][T27845] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  177.862329][T27835] Alternate GPT is invalid, using primary GPT.
[  177.868644][T27835]  loop2: p1 p2 p3
[  177.872450][T27835] loop2: partition table partially beyond EOD, truncated
[  177.935573][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.032488][T27856] loop1: detected capacity change from 0 to 8192
[  178.180155][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.328346][T27865] loop4: detected capacity change from 0 to 512
[  178.336336][T27865] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  178.356405][T27865] EXT4-fs (loop4): 1 truncate cleaned up
[  178.372258][T27865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.435254][T27872] loop2: detected capacity change from 0 to 512
[  178.442360][T27865] usb usb8: usbfs: process 27865 (syz.4.1679) did not claim interface 0 before use
[  178.453290][T27872] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  178.473406][T27872] EXT4-fs (loop2): 1 truncate cleaned up
[  178.486072][T27872] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  179.072747][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.444061][T27865] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1679' sets config #1
[  179.491499][T27881] syz!: rxe_newlink: already configured on team_slave_0
[  179.531849][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.554499][T27883] loop0: detected capacity change from 0 to 1024
[  179.561396][T27883] EXT4-fs: Ignoring removed orlov option
[  179.572018][T27883] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.745207][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.795948][T27890] __nla_validate_parse: 4 callbacks suppressed
[  179.796036][T27890] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1683'.
[  179.914230][T27894] Symlink component flag not implemented
[  179.920004][T27894] Symlink component flag not implemented
[  179.947863][T27888] bridge_slave_0: left allmulticast mode
[  179.953660][T27888] bridge_slave_0: left promiscuous mode
[  179.959508][T27888] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.977217][T27888] bridge_slave_1: left allmulticast mode
[  179.983161][T27888] bridge_slave_1: left promiscuous mode
[  179.989357][T27888] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.018742][T27894] Symlink component flag not implemented (129)
[  180.025043][T27894] Symlink component flag not implemented (6)
[  180.034909][T27888] bond0: (slave bond_slave_0): Releasing backup interface
[  180.054286][T27888] bond0: (slave bond_slave_1): Releasing backup interface
[  180.062850][T27894] rock: directory entry would overflow storage
[  180.069073][T27894] rock: sig=0x4f50, size=4, remaining=3
[  180.074720][T27894] iso9660: Corrupted directory entry in block 6 of inode 1792
[  180.089003][T27888] team0: Port device team_slave_0 removed
[  180.099366][T27888] team0: Port device team_slave_1 removed
[  180.109279][T27888] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  180.116769][T27888] batman_adv: batadv0: Removing interface: batadv_slave_0
[  180.143814][T27888] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  180.151477][T27888] batman_adv: batadv0: Removing interface: batadv_slave_1
[  180.187145][T27888] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  180.217502][T27905] macvtap0: refused to change device tx_queue_len
[  180.232580][T27910] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.1693: inode has both inline data and extents flags
[  180.323466][T27910] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1693: couldn't read orphan inode 15 (err -117)
[  180.359359][T27908] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  180.386008][T27916] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  180.405048][T27919] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1696'.
[  180.420463][T27916] EXT4-fs (loop2): 1 truncate cleaned up
[  180.478166][T27924] SELinux:  Context system_u:object_r:iptables_exec_t:s0 is not valid (left unmapped).
[  180.489023][T27916] usb usb8: usbfs: process 27916 (syz.2.1695) did not claim interface 0 before use
[  180.515326][   T29] kauditd_printk_skb: 161 callbacks suppressed
[  180.515345][   T29] audit: type=1400 audit(1766326739.435:14410): avc:  denied  { create } for  pid=27923 comm="syz.0.1697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  180.574913][   T29] audit: type=1400 audit(1766326739.475:14411): avc:  denied  { ioctl } for  pid=27923 comm="syz.0.1697" path="socket:[22809]" dev="sockfs" ino=22809 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  180.621989][T27931] FAULT_INJECTION: forcing a failure.
[  180.621989][T27931] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  180.635189][T27931] CPU: 0 UID: 0 PID: 27931 Comm: syz.4.1699 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  180.635256][T27931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  180.635269][T27931] Call Trace:
[  180.635274][T27931]  <TASK>
[  180.635281][T27931]  __dump_stack+0x1d/0x30
[  180.635306][T27931]  dump_stack_lvl+0x95/0xd0
[  180.635325][T27931]  dump_stack+0x15/0x1b
[  180.635346][T27931]  should_fail_ex+0x265/0x280
[  180.635380][T27931]  should_fail+0xb/0x20
[  180.635476][T27931]  should_fail_usercopy+0x1a/0x20
[  180.635504][T27931]  _copy_from_user+0x1c/0xb0
[  180.635552][T27931]  ___sys_sendmsg+0xc1/0x1d0
[  180.635604][T27931]  __x64_sys_sendmsg+0xd4/0x160
[  180.635699][T27931]  x64_sys_call+0x17ba/0x3000
[  180.635731][T27931]  do_syscall_64+0xca/0x2b0
[  180.635775][T27931]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.635865][T27931] RIP: 0033:0x7f8db8eef749
[  180.635883][T27931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  180.635941][T27931] RSP: 002b:00007f8db7957038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  180.636030][T27931] RAX: ffffffffffffffda RBX: 00007f8db9145fa0 RCX: 00007f8db8eef749
[  180.636045][T27931] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000004
[  180.636058][T27931] RBP: 00007f8db7957090 R08: 0000000000000000 R09: 0000000000000000
[  180.636071][T27931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  180.636087][T27931] R13: 00007f8db9146038 R14: 00007f8db9145fa0 R15: 00007ffdd5bbab78
[  180.636105][T27931]  </TASK>
[  180.638098][T27927] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  180.838137][T27933] wg1 speed is unknown, defaulting to 1000
[  180.905819][   T29] audit: type=1326 audit(1766326739.825:14412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27915 comm="syz.2.1695" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7345fbf749 code=0x0
[  180.934649][T27927] EXT4-fs (loop3): 1 truncate cleaned up
[  180.943593][T27927] usb usb8: usbfs: process 27927 (syz.3.1698) did not claim interface 0 before use
[  180.992211][T27945] set_capacity_and_notify: 7 callbacks suppressed
[  180.992229][T27945] loop1: detected capacity change from 0 to 512
[  181.023747][T27945] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  181.036148][T27945] EXT4-fs (loop1): 1 truncate cleaned up
[  181.062257][T27945] usb usb8: usbfs: process 27945 (syz.1.1704) did not claim interface 0 before use
[  181.110032][   T29] audit: type=1326 audit(1766326740.025:14413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27926 comm="syz.3.1698" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1555dbf749 code=0x0
[  181.234184][T27949] loop2: detected capacity change from 0 to 764
[  181.244108][T27949] Symlink component flag not implemented
[  181.249936][T27949] Symlink component flag not implemented
[  181.256000][   T29] audit: type=1326 audit(1766326740.165:14414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27948 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7345fbf749 code=0x7ffc0000
[  181.278774][   T29] audit: type=1326 audit(1766326740.165:14415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27948 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7345fbf749 code=0x7ffc0000
[  181.301632][   T29] audit: type=1326 audit(1766326740.165:14416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27948 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7345fbf749 code=0x7ffc0000
[  181.314688][T27949] Symlink component flag not implemented (129)
[  181.324450][   T29] audit: type=1326 audit(1766326740.165:14417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27948 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f7345fbf749 code=0x7ffc0000
[  181.354665][T27949] Symlink component flag not implemented (6)
[  181.364285][T27949] rock: directory entry would overflow storage
[  181.371273][T27949] rock: sig=0x4f50, size=4, remaining=3
[  181.377405][T27949] iso9660: Corrupted directory entry in block 6 of inode 1792
[  181.385443][   T29] audit: type=1326 audit(1766326740.305:14418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27948 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7345fbf749 code=0x7ffc0000
[  181.409256][   T29] audit: type=1326 audit(1766326740.325:14419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27948 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7345fbf749 code=0x7ffc0000
[  181.457239][T27955] loop3: detected capacity change from 0 to 512
[  181.466858][T27955] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  181.484343][T27957] loop4: detected capacity change from 0 to 4096
[  181.502152][T27955] EXT4-fs (loop3): 1 truncate cleaned up
[  181.517375][T27962] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1709'.
[  181.540842][T27957] bridge_slave_0: left allmulticast mode
[  181.546640][T27957] bridge_slave_0: left promiscuous mode
[  181.553106][T27957] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.563188][T27957] bridge_slave_1: left allmulticast mode
[  181.568883][T27957] bridge_slave_1: left promiscuous mode
[  181.575624][T27957] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.602388][T27957] bond0: (slave bond_slave_0): Releasing backup interface
[  181.625611][T27957] bond0: (slave bond_slave_1): Releasing backup interface
[  181.654299][T27957] team0: Port device team_slave_0 removed
[  181.679473][T27957] team0: Port device team_slave_1 removed
[  181.690889][T27957] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  181.698312][T27957] batman_adv: batadv0: Removing interface: batadv_slave_0
[  181.707595][T27968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1711'.
[  181.860462][T27957] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  181.867965][T27957] batman_adv: batadv0: Removing interface: batadv_slave_1
[  182.003401][T27957] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  182.052412][T28165] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1714'.
[  182.195471][T28183] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1715'.
[  182.573283][T28307] macvtap0: refused to change device tx_queue_len
[  182.642323][T28309] loop1: detected capacity change from 0 to 512
[  182.679263][T28309] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  182.751233][T28309] EXT4-fs (loop1): 1 truncate cleaned up
[  182.811204][T28309] usb usb8: usbfs: process 28309 (syz.1.1718) did not claim interface 0 before use
[  182.821014][T28314] usb usb8: usbfs: process 28314 (syz.0.1720) did not claim interface 0 before use
[  183.423168][T28321] loop1: detected capacity change from 0 to 512
[  183.432425][T28323] loop4: detected capacity change from 0 to 512
[  183.470974][T28323] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  183.481398][T28321] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  183.506013][T28323] EXT4-fs (loop4): 1 truncate cleaned up
[  183.515137][T28326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1723'.
[  183.525429][T28321] EXT4-fs (loop1): 1 truncate cleaned up
[  183.569521][T28331] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1725'.
[  183.615348][T28332] loop0: detected capacity change from 0 to 512
[  183.622857][T28321] usb usb8: usbfs: process 28321 (syz.1.1721) did not claim interface 0 before use
[  183.684409][T28340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1728'.
[  183.711576][T28332] EXT4-fs (loop0): too many log groups per flexible block group
[  183.734971][T28341] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1727'.
[  183.772453][T28332] EXT4-fs (loop0): failed to initialize mballoc (-12)
[  183.782497][T28332] EXT4-fs (loop0): mount failed
[  183.816406][T28343] loop4: detected capacity change from 0 to 4096
[  183.828551][T28332] loop0: detected capacity change from 0 to 2048
[  183.883644][T28332] Alternate GPT is invalid, using primary GPT.
[  183.890063][T28332]  loop0: p1 p2 p3
[  183.893822][T28332] loop0: partition table partially beyond EOD, truncated
[  183.903386][T28343] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  183.934063][T28346] wg1 speed is unknown, defaulting to 1000
[  184.064547][T28356] EXT4-fs: Ignoring removed mblk_io_submit option
[  184.150322][T28362] wg1 speed is unknown, defaulting to 1000
[  184.318616][T28508] wireguard0: entered promiscuous mode
[  184.324970][T28508] wireguard0: entered allmulticast mode
[  184.798011][T28875] IPv6: Can't replace route, no match found
[  184.990907][T28918] macvtap0: refused to change device tx_queue_len
[  185.067519][T28920] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  185.505436][T28926] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  185.528352][T28923] macvtap0: refused to change device tx_queue_len
[  185.549064][   T29] kauditd_printk_skb: 233 callbacks suppressed
[  185.549078][   T29] audit: type=1326 audit(1766326744.465:14653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28922 comm="syz.0.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f845df765e7 code=0x7ffc0000
[  185.656723][T28934] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  185.668471][T28936] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  185.680637][   T29] audit: type=1326 audit(1766326744.505:14654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28922 comm="syz.0.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f845df1b829 code=0x7ffc0000
[  185.704550][   T29] audit: type=1326 audit(1766326744.505:14655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28922 comm="syz.0.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f845df765e7 code=0x7ffc0000
[  185.728333][   T29] audit: type=1326 audit(1766326744.505:14656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28922 comm="syz.0.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f845df1b829 code=0x7ffc0000
[  185.751985][   T29] audit: type=1326 audit(1766326744.505:14657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28922 comm="syz.0.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f845df765e7 code=0x7ffc0000
[  185.775857][   T29] audit: type=1326 audit(1766326744.505:14658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28922 comm="syz.0.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f845df1b829 code=0x7ffc0000
[  185.799432][   T29] audit: type=1326 audit(1766326744.515:14659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28922 comm="syz.0.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f845df765e7 code=0x7ffc0000
[  185.823109][   T29] audit: type=1326 audit(1766326744.515:14660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28922 comm="syz.0.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f845df1b829 code=0x7ffc0000
[  185.846702][   T29] audit: type=1326 audit(1766326744.515:14661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28922 comm="syz.0.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f845df765e7 code=0x7ffc0000
[  185.870373][   T29] audit: type=1326 audit(1766326744.515:14662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28922 comm="syz.0.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f845df1b829 code=0x7ffc0000
[  185.933428][T28934] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1747: invalid indirect mapped block 2683928664 (level 1)
[  185.991931][T28930] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  186.009719][T28943] tipc: Started in network mode
[  186.014710][T28943] tipc: Node identity e0000001, cluster identity 4711
[  186.021681][T28943] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  186.030036][T28934] EXT4-fs (loop4): Remounting filesystem read-only
[  186.036785][T28934] EXT4-fs (loop4): 1 truncate cleaned up
[  186.051557][T28942] __nla_validate_parse: 3 callbacks suppressed
[  186.051586][T28942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1749'.
[  186.099030][T28934] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1747'.
[  186.108071][T28934] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1747'.
[  186.284317][T28934] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1747'.
[  186.420041][T28934] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1747'.
[  186.490976][T28946] wg1 speed is unknown, defaulting to 1000
[  186.594870][T28947] wg1 speed is unknown, defaulting to 1000
[  186.977609][T28957] set_capacity_and_notify: 4 callbacks suppressed
[  186.977630][T28957] loop0: detected capacity change from 0 to 512
[  186.991139][T28957] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  187.004928][T28957] EXT4-fs (loop0): 1 truncate cleaned up
[  187.042522][T28958] wg1 speed is unknown, defaulting to 1000
[  187.105296][T28967] wg1 speed is unknown, defaulting to 1000
[  187.250751][T28980] usb usb8: usbfs: process 28980 (syz.1.1759) did not claim interface 0 before use
[  187.253555][T28981] IPv6: Can't replace route, no match found
[  187.377618][T28985] loop0: detected capacity change from 0 to 4096
[  187.401613][T28987] loop2: detected capacity change from 0 to 512
[  187.418460][T28987] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  187.436083][T28987] EXT4-fs (loop2): orphan cleanup on readonly fs
[  187.463542][T28987] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.1763: corrupted inode contents
[  187.488708][T28985] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  187.497400][T28987] EXT4-fs (loop2): Remounting filesystem read-only
[  187.532623][T28987] EXT4-fs (loop2): 1 truncate cleaned up
[  187.538538][T19857] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  187.549274][T19857] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  187.569860][T19857] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[  187.647727][T28998] loop1: detected capacity change from 0 to 1024
[  187.676609][T28998] ext4 filesystem being mounted at /349/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  187.690451][T28998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1765'.
[  187.700264][T28998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1765'.
[  187.773749][T29005] FAULT_INJECTION: forcing a failure.
[  187.773749][T29005] name failslab, interval 1, probability 0, space 0, times 0
[  187.787375][T29005] CPU: 1 UID: 0 PID: 29005 Comm: syz.1.1766 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  187.787400][T29005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  187.787433][T29005] Call Trace:
[  187.787438][T29005]  <TASK>
[  187.787445][T29005]  __dump_stack+0x1d/0x30
[  187.787467][T29005]  dump_stack_lvl+0x95/0xd0
[  187.787487][T29005]  dump_stack+0x15/0x1b
[  187.787504][T29005]  should_fail_ex+0x265/0x280
[  187.787537][T29005]  should_failslab+0x8c/0xb0
[  187.787557][T29005]  __kmalloc_cache_noprof+0x65/0x4c0
[  187.787578][T29005]  ? x509_cert_parse+0x69/0x430
[  187.787639][T29005]  x509_cert_parse+0x69/0x430
[  187.787665][T29005]  x509_key_preparse+0x3c/0x420
[  187.787714][T29005]  ? selinux_key_permission+0x161/0x190
[  187.787788][T29005]  asymmetric_key_preparse+0x68/0xb0
[  187.787857][T29005]  __key_create_or_update+0x28b/0x750
[  187.787899][T29005]  ? key_validate+0xad/0xd0
[  187.787923][T29005]  key_create_or_update+0x42/0x60
[  187.787947][T29005]  __se_sys_add_key+0x29b/0x350
[  187.788051][T29005]  __x64_sys_add_key+0x67/0x80
[  187.788078][T29005]  x64_sys_call+0x2ea3/0x3000
[  187.788138][T29005]  do_syscall_64+0xca/0x2b0
[  187.788170][T29005]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.788190][T29005] RIP: 0033:0x7faf8402f749
[  187.788203][T29005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  187.788219][T29005] RSP: 002b:00007faf82a97038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  187.788311][T29005] RAX: ffffffffffffffda RBX: 00007faf84285fa0 RCX: 00007faf8402f749
[  187.788322][T29005] RDX: 0000200000000300 RSI: 0000000000000000 RDI: 0000200000000040
[  187.788334][T29005] RBP: 00007faf82a97090 R08: 0000000037596c14 R09: 0000000000000000
[  187.788345][T29005] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[  187.788356][T29005] R13: 00007faf84286038 R14: 00007faf84285fa0 R15: 00007ffca64c3bd8
[  187.788397][T29005]  </TASK>
[  188.077593][T29008] loop4: detected capacity change from 0 to 1024
[  188.084624][T29008] EXT4-fs: Ignoring removed orlov option
[  188.158012][T29013] FAULT_INJECTION: forcing a failure.
[  188.158012][T29013] name failslab, interval 1, probability 0, space 0, times 0
[  188.171506][T29013] CPU: 1 UID: 0 PID: 29013 Comm: syz.3.1769 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  188.171532][T29013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  188.171546][T29013] Call Trace:
[  188.171614][T29013]  <TASK>
[  188.171622][T29013]  __dump_stack+0x1d/0x30
[  188.171751][T29013]  dump_stack_lvl+0x95/0xd0
[  188.171772][T29013]  dump_stack+0x15/0x1b
[  188.171791][T29013]  should_fail_ex+0x265/0x280
[  188.171946][T29013]  should_failslab+0x8c/0xb0
[  188.171969][T29013]  __kmalloc_noprof+0xb9/0x5a0
[  188.171997][T29013]  ? aio_setup_ring+0x1e8/0x760
[  188.172031][T29013]  aio_setup_ring+0x1e8/0x760
[  188.172089][T29013]  ioctx_alloc+0x2aa/0x4c0
[  188.172133][T29013]  __se_sys_io_setup+0x6b/0x1b0
[  188.172160][T29013]  __x64_sys_io_setup+0x31/0x40
[  188.172209][T29013]  x64_sys_call+0x2a8e/0x3000
[  188.172241][T29013]  do_syscall_64+0xca/0x2b0
[  188.172318][T29013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.172406][T29013] RIP: 0033:0x7f1555dbf749
[  188.172421][T29013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  188.172475][T29013] RSP: 002b:00007f155481f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[  188.172500][T29013] RAX: ffffffffffffffda RBX: 00007f1556015fa0 RCX: 00007f1555dbf749
[  188.172516][T29013] RDX: 0000000000000000 RSI: 0000200000002400 RDI: 00000000000008f0
[  188.172532][T29013] RBP: 00007f155481f090 R08: 0000000000000000 R09: 0000000000000000
[  188.172545][T29013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  188.172605][T29013] R13: 00007f1556016038 R14: 00007f1556015fa0 R15: 00007ffc648b8228
[  188.172642][T29013]  </TASK>
[  188.443475][T29016] wg1 speed is unknown, defaulting to 1000
[  188.773915][T29026] loop1: detected capacity change from 0 to 4096
[  188.825489][T29028] loop3: detected capacity change from 0 to 4096
[  188.875142][T29026] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  189.035313][T29028] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  189.060956][T29035] IPv6: Can't replace route, no match found
[  189.101904][T29037] loop4: detected capacity change from 0 to 512
[  189.136522][T29037] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  189.167697][T29037] EXT4-fs (loop4): 1 truncate cleaned up
[  189.253122][T29043] loop3: detected capacity change from 0 to 512
[  189.301000][T29043] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  189.328350][T29043] EXT4-fs (loop3): 1 truncate cleaned up
[  189.335490][T29045] SELinux: ebitmap: truncated map
[  189.343870][T29045] SELinux: failed to load policy
[  189.401245][T29043] usb usb8: usbfs: process 29043 (syz.3.1778) did not claim interface 0 before use
[  189.512147][T29055] loop2: detected capacity change from 0 to 1024
[  189.518910][T29055] EXT4-fs: Ignoring removed orlov option
[  189.567949][T29053] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check.
[  189.671974][T29059] wg1 speed is unknown, defaulting to 1000
[  189.801449][T29063] macvtap0: refused to change device tx_queue_len
[  189.882759][T29073] wg1 speed is unknown, defaulting to 1000
[  189.897501][T29076] EXT4-fs: Ignoring removed orlov option
[  189.996902][T29068] iso9660: Unknown parameter ''
[  190.085772][T29087] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  190.100186][T29087] EXT4-fs (loop1): 1 truncate cleaned up
[  190.142618][T29084] wg1 speed is unknown, defaulting to 1000
[  190.151012][T29087] usb usb8: usbfs: process 29087 (syz.1.1791) did not claim interface 0 before use
[  190.371812][T29100] FAULT_INJECTION: forcing a failure.
[  190.371812][T29100] name failslab, interval 1, probability 0, space 0, times 0
[  190.384519][T29100] CPU: 0 UID: 0 PID: 29100 Comm: syz.3.1794 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  190.384552][T29100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  190.384611][T29100] Call Trace:
[  190.384619][T29100]  <TASK>
[  190.384628][T29100]  __dump_stack+0x1d/0x30
[  190.384656][T29100]  dump_stack_lvl+0x95/0xd0
[  190.384681][T29100]  dump_stack+0x15/0x1b
[  190.384746][T29100]  should_fail_ex+0x265/0x280
[  190.384774][T29100]  should_failslab+0x8c/0xb0
[  190.384800][T29100]  __kmalloc_cache_noprof+0x65/0x4c0
[  190.384906][T29100]  ? cma_alloc_port+0x3d/0x320
[  190.384958][T29100]  cma_alloc_port+0x3d/0x320
[  190.384991][T29100]  rdma_bind_addr_dst+0xa7f/0x1cf0
[  190.385016][T29100]  ? __kmalloc_cache_noprof+0x252/0x4c0
[  190.385069][T29100]  rdma_bind_addr+0x24/0x30
[  190.385090][T29100]  rds_ib_laddr_check+0x16c/0x300
[  190.385114][T29100]  ? __pfx_rds_ib_laddr_check+0x10/0x10
[  190.385138][T29100]  rds_bind+0x431/0xf10
[  190.385228][T29100]  __sys_bind+0x1d1/0x2a0
[  190.385258][T29100]  __x64_sys_bind+0x3f/0x50
[  190.385327][T29100]  x64_sys_call+0x2ceb/0x3000
[  190.385367][T29100]  do_syscall_64+0xca/0x2b0
[  190.385403][T29100]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.385427][T29100] RIP: 0033:0x7f1555dbf749
[  190.385444][T29100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  190.385540][T29100] RSP: 002b:00007f155481f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  190.385562][T29100] RAX: ffffffffffffffda RBX: 00007f1556015fa0 RCX: 00007f1555dbf749
[  190.385575][T29100] RDX: 000000000000001c RSI: 00002000000000c0 RDI: 0000000000000004
[  190.385589][T29100] RBP: 00007f155481f090 R08: 0000000000000000 R09: 0000000000000000
[  190.385603][T29100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  190.385617][T29100] R13: 00007f1556016038 R14: 00007f1556015fa0 R15: 00007ffc648b8228
[  190.385640][T29100]  </TASK>
[  190.602627][T29099] EXT4-fs mount: 55 callbacks suppressed
[  190.602642][T29099] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  190.627563][   T29] kauditd_printk_skb: 557 callbacks suppressed
[  190.627578][   T29] audit: type=1326 audit(1766326749.545:15214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29085 comm="syz.1.1791" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf8402f749 code=0x0
[  190.650204][T29099] ext4 filesystem being mounted at /383/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  190.670817][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.710436][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.747452][T29111] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  190.766965][T29109] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  190.768773][T29111] EXT4-fs (loop3): 1 truncate cleaned up
[  190.787346][T29109] EXT4-fs (loop4): 1 truncate cleaned up
[  190.794211][   T29] audit: type=1400 audit(1766326749.725:15215): avc:  denied  { ioctl } for  pid=29098 comm="syz.0.1795" path="/383/file1/file1" dev="loop0" ino=15 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  190.800911][T29109] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  190.831703][T29114] usb usb8: usbfs: process 29114 (syz.2.1797) did not claim interface 0 before use
[  190.842754][T29117] tipc: Started in network mode
[  190.847663][T29117] tipc: Node identity ac14140f, cluster identity 4711
[  190.860795][T29111] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  190.881172][T29109] usb usb8: usbfs: process 29109 (syz.4.1799) did not claim interface 0 before use
[  190.931378][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.934047][T29117] tipc: New replicast peer: 255.255.255.255
[  190.947548][T29117] tipc: Enabled bearer <udp:syz2>, priority 10
[  190.954691][T29116] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #18: comm syz.0.1795: corrupted inode contents
[  190.977586][   T29] audit: type=1326 audit(1766326749.895:15216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29118 comm="syz.1.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8402f749 code=0x7ffc0000
[  191.001428][   T29] audit: type=1326 audit(1766326749.895:15217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29118 comm="syz.1.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8402f749 code=0x7ffc0000
[  191.025061][   T29] audit: type=1326 audit(1766326749.895:15218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29118 comm="syz.1.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7faf8402f749 code=0x7ffc0000
[  191.048705][   T29] audit: type=1326 audit(1766326749.895:15219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29118 comm="syz.1.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8402f749 code=0x7ffc0000
[  191.072502][   T29] audit: type=1326 audit(1766326749.895:15220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29118 comm="syz.1.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8402f749 code=0x7ffc0000
[  191.096258][T29099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1795'.
[  191.105846][T29099] tipc: Disabling bearer <udp:syz2>
[  191.119617][T29116] EXT4-fs (loop0): Remounting filesystem read-only
[  191.127131][T29116] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30)
[  191.149039][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.183323][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.219382][T29124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  191.228634][T29124] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  191.235919][T29121] wg1 speed is unknown, defaulting to 1000
[  191.253587][T29124] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (4096), stripe is disabled
[  191.275625][   T29] audit: type=1326 audit(1766326750.195:15221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29113 comm="syz.2.1797" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7345fbf749 code=0x0
[  191.280722][T29127] EXT4-fs: Ignoring removed orlov option
[  191.310863][T29124] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm +}[@: Invalid block bitmap block 0 in block_group 0
[  191.335499][T29127] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.349312][   T29] audit: type=1326 audit(1766326750.275:15222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29108 comm="syz.4.1799" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8db8eef749 code=0x0
[  191.380131][T29124] Quota error (device loop0): write_blk: dquota write failed
[  191.402995][T29124] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm +}[@: Failed to acquire dquot type 0
[  191.426080][T29124] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm +}[@: Freeing blocks not in datazone - block = 0, count = 4096
[  191.473844][T29133] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  191.486252][T29124] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm +}[@: Invalid inode bitmap blk 0 in block_group 0
[  191.510678][ T1004] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:9: Failed to release dquot type 0
[  191.522975][T29133] EXT4-fs (loop1): 1 truncate cleaned up
[  191.529205][T29133] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  191.544719][T29133] usb usb8: usbfs: process 29133 (syz.1.1805) did not claim interface 0 before use
[  191.556541][T29109] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1799' sets config #1
[  191.612331][T29124] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[  191.621719][T29124] EXT4-fs (loop0): 1 orphan inode deleted
[  191.627887][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.628229][T29124] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.770750][T29138] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.793833][T29138] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  191.815985][T29144] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  191.853645][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.900605][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.943701][T29151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  191.943872][T29151] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  191.949980][T29151] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (4096), stripe is disabled
[  191.960417][T29151] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm +}[@: Invalid block bitmap block 0 in block_group 0
[  191.960877][T29151] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm +}[@: Failed to acquire dquot type 0
[  191.961071][T29151] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm +}[@: Freeing blocks not in datazone - block = 0, count = 4096
[  191.961256][T29151] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm +}[@: Invalid inode bitmap blk 0 in block_group 0
[  191.961474][T29151] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[  191.961564][T29151] EXT4-fs (loop4): 1 orphan inode deleted
[  191.961960][T29151] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.984402][  T983] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:8: Failed to release dquot type 0
[  192.114343][T29158] set_capacity_and_notify: 12 callbacks suppressed
[  192.114434][T29158] loop2: detected capacity change from 0 to 4096
[  192.118471][T29158] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  192.179038][T29158] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  192.219462][T29163] wg1 speed is unknown, defaulting to 1000
[  192.311146][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.401126][T29172] loop1: detected capacity change from 0 to 4096
[  192.495154][T29172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  192.501231][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.515945][T29172] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  192.579593][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.607202][T29176] loop2: detected capacity change from 0 to 4096
[  192.614999][T29176] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  192.625452][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.652382][T29176] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  192.743885][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.546401][T29185] loop1: detected capacity change from 0 to 1024
[  193.546674][T29185] EXT4-fs: Ignoring removed orlov option
[  193.566488][T29185] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  193.604623][T29183] loop4: detected capacity change from 0 to 4096
[  193.627013][T29183] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  193.768130][T29183] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  193.838762][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.851301][T29195] usb usb8: usbfs: process 29195 (syz.2.1823) did not claim interface 0 before use
[  193.983163][T29201] loop3: detected capacity change from 0 to 512
[  193.986911][T29199] loop4: detected capacity change from 0 to 1024
[  193.987099][T29199] EXT4-fs: Ignoring removed bh option
[  193.987130][T29199] EXT4-fs: inline encryption not supported
[  193.987489][T29201] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  194.000205][T29201] EXT4-fs (loop3): 1 truncate cleaned up
[  194.000589][T29201] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.004627][T29201] usb usb8: usbfs: process 29201 (syz.3.1826) did not claim interface 0 before use
[  194.029750][T29199] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  194.038528][T29199] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  194.039401][T29199] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.1825: lblock 2 mapped to illegal pblock 2 (length 1)
[  194.039638][T29199] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.1825: lblock 0 mapped to illegal pblock 48 (length 1)
[  194.039752][T29199] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1825: Failed to acquire dquot type 0
[  194.040335][T29199] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  194.040418][T29199] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.1825: mark_inode_dirty error
[  194.040520][T29199] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  194.040590][T29199] EXT4-fs (loop4): 1 orphan inode deleted
[  194.041030][T29199] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.050997][T19664] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1)
[  194.051110][T19664] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:14: Failed to release dquot type 0
[  194.052036][T29199] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.052360][T29199] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz.4.1825: Invalid inode table block 1 in block_group 0
[  194.052512][T29199] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  194.052768][T29199] EXT4-fs error (device loop4): ext4_quota_off:7270: inode #3: comm syz.4.1825: mark_inode_dirty error
[  194.072524][T29199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1825'.
[  194.299529][T29199] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1825'.
[  194.306330][T29199] geneve2: entered promiscuous mode
[  194.314490][T29199] geneve2: entered allmulticast mode
[  194.322687][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.347484][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.377887][T29209] wg1 speed is unknown, defaulting to 1000
[  194.404758][T29212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1828'.
[  194.438177][T29215] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1829'.
[  194.614482][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.639332][T29225] loop1: detected capacity change from 0 to 1024
[  194.654793][T29225] EXT4-fs: Ignoring removed orlov option
[  194.670404][T29225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.810349][T29241] usb usb8: usbfs: process 29241 (syz.3.1838) did not claim interface 0 before use
[  194.821879][T29244] loop4: detected capacity change from 0 to 512
[  194.881715][T29244] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  194.919405][T29244] EXT4-fs (loop4): 1 truncate cleaned up
[  194.934238][T29239] loop0: detected capacity change from 0 to 8192
[  194.942626][T29244] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  195.017861][T29244] usb usb8: usbfs: process 29244 (syz.4.1839) did not claim interface 0 before use
[  195.144445][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.180880][T29248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1840'.
[  195.276730][T29250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1841'.
[  195.329017][T29244] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1839' sets config #1
[  195.342734][T29253] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  195.395481][T29253] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  195.436940][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.472359][T29264] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  195.484779][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.542038][T29274] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  195.583122][T29274] EXT4-fs (loop1): 1 truncate cleaned up
[  195.595028][T29278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1851'.
[  195.604394][T29274] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  195.629758][T29281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1853'.
[  195.641761][   T29] kauditd_printk_skb: 278 callbacks suppressed
[  195.641773][   T29] audit: type=1326 audit(1766326754.565:15493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29270 comm="syz.4.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8db8eef749 code=0x7ffc0000
[  195.680880][T29285] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  195.723375][T29285] EXT4-fs (loop2): 1 truncate cleaned up
[  195.729512][T29285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  195.770792][   T29] audit: type=1326 audit(1766326754.665:15494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29273 comm="syz.1.1850" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf8402f749 code=0x0
[  195.831576][T29292] IPv6: Can't replace route, no match found
[  195.962700][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.973552][T29295] EXT4-fs (loop0): too many log groups per flexible block group
[  195.981806][T29295] EXT4-fs (loop0): failed to initialize mballoc (-12)
[  196.015532][T29302] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  196.025668][T29295] EXT4-fs (loop0): mount failed
[  196.034450][   T29] audit: type=1326 audit(1766326754.955:15495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29303 comm="syz.3.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1555dbf749 code=0x7ffc0000
[  196.084742][T29302] EXT4-fs (loop2): 1 truncate cleaned up
[  196.093827][T29302] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.111049][T29295] Alternate GPT is invalid, using primary GPT.
[  196.117563][T29295]  loop0: p1 p2 p3
[  196.121330][T29295] loop0: partition table partially beyond EOD, truncated
[  196.141166][   T29] audit: type=1326 audit(1766326754.975:15496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29303 comm="syz.3.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1555dbf749 code=0x7ffc0000
[  196.164879][   T29] audit: type=1326 audit(1766326754.975:15497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29303 comm="syz.3.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f1555dbf749 code=0x7ffc0000
[  196.188483][   T29] audit: type=1326 audit(1766326754.975:15498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29303 comm="syz.3.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1555dbf749 code=0x7ffc0000
[  196.212176][   T29] audit: type=1326 audit(1766326754.975:15499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29303 comm="syz.3.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1555dbf749 code=0x7ffc0000
[  196.247575][T29302] usb usb8: usbfs: process 29302 (syz.2.1859) did not claim interface 0 before use
[  196.337405][   T29] audit: type=1326 audit(1766326755.195:15500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29323 comm="syz.3.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1555dbf749 code=0x7ffc0000
[  196.361068][   T29] audit: type=1326 audit(1766326755.195:15501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29323 comm="syz.3.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1555dbf749 code=0x7ffc0000
[  196.384744][   T29] audit: type=1326 audit(1766326755.195:15502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29323 comm="syz.3.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1555dbf749 code=0x7ffc0000
[  196.530570][T29302] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1859' sets config #1
[  196.542141][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.570902][T29331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1864'.
[  196.673787][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.750223][T29338] wg1 speed is unknown, defaulting to 1000
[  196.972111][T29364] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.116875][T29364] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  197.174323][T29384] IPv6: Can't replace route, no match found
[  197.194997][T29389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1874'.
[  197.245789][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.290977][T29456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  197.309675][T29456] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  197.340749][T29455] usb usb8: usbfs: process 29455 (syz.3.1875) did not claim interface 0 before use
[  197.348432][T29456] set_capacity_and_notify: 7 callbacks suppressed
[  197.348468][T29456] loop4: detected capacity change from 0 to 1024
[  197.380813][T29456] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (4096), stripe is disabled
[  197.424525][T29456] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm +}[@: Invalid block bitmap block 0 in block_group 0
[  197.451102][T29456] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm +}[@: Failed to acquire dquot type 0
[  197.462673][T29456] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm +}[@: Freeing blocks not in datazone - block = 0, count = 4096
[  197.508390][T29456] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm +}[@: Invalid inode bitmap blk 0 in block_group 0
[  197.521430][T19670] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:16: Failed to release dquot type 0
[  197.586388][T29456] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[  197.610254][T29456] EXT4-fs (loop4): 1 orphan inode deleted
[  197.625236][T29456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.754097][T29795] loop1: detected capacity change from 0 to 1024
[  197.754405][T29795] EXT4-fs: Ignoring removed bh option
[  197.754491][T29795] EXT4-fs: inline encryption not supported
[  197.756634][T29795] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  197.757222][T29795] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  197.767494][T29795] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 2: comm syz.1.1882: lblock 2 mapped to illegal pblock 2 (length 1)
[  197.769077][T29795] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 48: comm syz.1.1882: lblock 0 mapped to illegal pblock 48 (length 1)
[  197.769251][T29795] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1882: Failed to acquire dquot type 0
[  197.769430][T29795] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  197.769539][T29795] EXT4-fs error (device loop1): ext4_evict_inode:253: inode #11: comm syz.1.1882: mark_inode_dirty error
[  197.769621][T29795] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  197.769659][T29795] EXT4-fs (loop1): 1 orphan inode deleted
[  197.770339][T29795] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.774110][T19670] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:16: lblock 1 mapped to illegal pblock 1 (length 1)
[  197.774275][T19670] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:16: Failed to release dquot type 0
[  197.775147][T29795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.775491][T29795] EXT4-fs error (device loop1): __ext4_get_inode_loc:4830: comm syz.1.1882: Invalid inode table block 1 in block_group 0
[  197.775586][T29795] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  197.775668][T29795] EXT4-fs error (device loop1): ext4_quota_off:7270: inode #3: comm syz.1.1882: mark_inode_dirty error
[  197.784124][T29795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1882'.
[  197.784171][T29795] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1882'.
[  197.791770][T29795] geneve2: entered promiscuous mode
[  197.791789][T29795] geneve2: entered allmulticast mode
[  197.893724][T29900] loop0: detected capacity change from 0 to 512
[  197.930449][T29900] EXT4-fs (loop0): too many log groups per flexible block group
[  197.930496][T29900] EXT4-fs (loop0): failed to initialize mballoc (-12)
[  197.930524][T29900] EXT4-fs (loop0): mount failed
[  197.950751][T29906] loop3: detected capacity change from 0 to 512
[  197.978567][T29908] netlink: 'syz.2.1885': attribute type 21 has an invalid length.
[  198.001201][T29906] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  198.041954][T29908] netlink: 'syz.2.1885': attribute type 1 has an invalid length.
[  198.060858][T29900] loop0: detected capacity change from 0 to 2048
[  198.064633][T29908] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1885'.
[  198.082608][T29906] EXT4-fs (loop3): 1 truncate cleaned up
[  198.083044][T29906] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.131314][T29906] usb usb8: usbfs: process 29906 (syz.3.1884) did not claim interface 0 before use
[  198.134707][T29908] FAULT_INJECTION: forcing a failure.
[  198.134707][T29908] name failslab, interval 1, probability 0, space 0, times 0
[  198.185533][T29908] CPU: 1 UID: 0 PID: 29908 Comm: syz.2.1885 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  198.185568][T29908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  198.185618][T29908] Call Trace:
[  198.185627][T29908]  <TASK>
[  198.185637][T29908]  __dump_stack+0x1d/0x30
[  198.185667][T29908]  dump_stack_lvl+0x95/0xd0
[  198.185732][T29908]  dump_stack+0x15/0x1b
[  198.185758][T29908]  should_fail_ex+0x265/0x280
[  198.185788][T29908]  should_failslab+0x8c/0xb0
[  198.185817][T29908]  kmem_cache_alloc_node_noprof+0x6b/0x4c0
[  198.185843][T29908]  ? __alloc_skb+0x2ff/0x4b0
[  198.185951][T29908]  __alloc_skb+0x2ff/0x4b0
[  198.185981][T29908]  ? __alloc_skb+0x228/0x4b0
[  198.186013][T29908]  netlink_ack+0xfd/0x500
[  198.186054][T29908]  netlink_rcv_skb+0x192/0x220
[  198.186133][T29908]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  198.186165][T29908]  rtnetlink_rcv+0x1c/0x30
[  198.186206][T29908]  netlink_unicast+0x5c0/0x690
[  198.186245][T29908]  netlink_sendmsg+0x58b/0x6b0
[  198.186327][T29908]  ? __pfx_netlink_sendmsg+0x10/0x10
[  198.186366][T29908]  __sock_sendmsg+0x145/0x180
[  198.186390][T29908]  ____sys_sendmsg+0x31e/0x4a0
[  198.186431][T29908]  ___sys_sendmsg+0x17b/0x1d0
[  198.186521][T29908]  __x64_sys_sendmsg+0xd4/0x160
[  198.186552][T29908]  x64_sys_call+0x17ba/0x3000
[  198.186667][T29908]  do_syscall_64+0xca/0x2b0
[  198.186711][T29908]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.186740][T29908] RIP: 0033:0x7f7345fbf749
[  198.186781][T29908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  198.186806][T29908] RSP: 002b:00007f7344a1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  198.186825][T29908] RAX: ffffffffffffffda RBX: 00007f7346215fa0 RCX: 00007f7345fbf749
[  198.186837][T29908] RDX: 0000000020010000 RSI: 0000200000000080 RDI: 0000000000000005
[  198.186854][T29908] RBP: 00007f7344a1f090 R08: 0000000000000000 R09: 0000000000000000
[  198.186865][T29908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  198.186881][T29908] R13: 00007f7346216038 R14: 00007f7346215fa0 R15: 00007ffc096d95e8
[  198.186956][T29908]  </TASK>
[  198.202743][T29900] Alternate GPT is invalid, using primary GPT.
[  198.406361][T29900]  loop0: p1 p2 p3
[  198.410132][T29900] loop0: partition table partially beyond EOD, truncated
[  198.553225][T29915] loop2: detected capacity change from 0 to 4096
[  198.585483][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.611050][T29915] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.621790][T29920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1889'.
[  198.658673][T29915] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  198.760860][T29922] wg1 speed is unknown, defaulting to 1000
[  198.764549][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.827188][T29930] Illegal XDP return value 4294967274 on prog  (id 1561) dev syz_tun, expect packet loss!
[  198.838642][T29928] macvtap0: refused to change device tx_queue_len
[  198.905234][T29934] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check.
[  198.941612][T29938] loop0: detected capacity change from 0 to 4096
[  198.950799][T29938] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.987598][T29938] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  199.038793][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.042521][T19857] Bluetooth: hci0: Frame reassembly failed (-84)
[  199.060718][T29942] macvtap0: refused to change device tx_queue_len
[  199.075332][T29947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1899'.
[  199.084393][T29947] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1899'.
[  199.093403][T29947] netlink: 484 bytes leftover after parsing attributes in process `syz.0.1899'.
[  199.116838][T29949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1900'.
[  199.206541][T29954] loop0: detected capacity change from 0 to 512
[  199.213068][T29955] loop2: detected capacity change from 0 to 512
[  199.231717][T29954] EXT4-fs (loop0): too many log groups per flexible block group
[  199.231953][T29955] EXT4-fs (loop2): too many log groups per flexible block group
[  199.239878][T29954] EXT4-fs (loop0): failed to initialize mballoc (-12)
[  199.249678][T29955] EXT4-fs (loop2): failed to initialize mballoc (-12)
[  199.254345][T29954] EXT4-fs (loop0): mount failed
[  199.265321][T29955] EXT4-fs (loop2): mount failed
[  199.281300][T29955] loop2: detected capacity change from 0 to 2048
[  199.321985][T29955] Alternate GPT is invalid, using primary GPT.
[  199.328415][T29955]  loop2: p1 p2 p3
[  199.332161][T29955] loop2: partition table partially beyond EOD, truncated
[  199.451496][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.491250][T29961] macvtap0: refused to change device tx_queue_len
[  199.631184][T29968] EXT4-fs (loop4): too many log groups per flexible block group
[  199.639036][T29968] EXT4-fs (loop4): failed to initialize mballoc (-12)
[  199.646528][T29968] EXT4-fs (loop4): mount failed
[  199.702168][T29968] Alternate GPT is invalid, using primary GPT.
[  199.708540][T29968]  loop4: p1 p2 p3
[  199.712362][T29968] loop4: partition table partially beyond EOD, truncated
[  199.759764][T29974] EXT4-fs: Ignoring removed orlov option
[  199.768764][T29974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.894060][T29974] ==================================================================
[  199.902212][T29974] BUG: KCSAN: data-race in filemap_read / filemap_read
[  199.909103][T29974] 
[  199.911446][T29974] read to 0xffff88810c98a9a8 of 8 bytes by task 29976 on cpu 0:
[  199.919098][T29974]  filemap_read+0x6f/0xa00
[  199.923559][T29974]  generic_file_read_iter+0x79/0x330
[  199.928879][T29974]  ext4_file_read_iter+0x1cc/0x290
[  199.934060][T29974]  copy_splice_read+0x442/0x660
[  199.938942][T29974]  splice_direct_to_actor+0x290/0x680
[  199.944372][T29974]  do_splice_direct+0xda/0x150
[  199.949174][T29974]  do_sendfile+0x380/0x650
[  199.953631][T29974]  __x64_sys_sendfile64+0x105/0x150
[  199.958866][T29974]  x64_sys_call+0x2db1/0x3000
[  199.963592][T29974]  do_syscall_64+0xca/0x2b0
[  199.968137][T29974]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.974076][T29974] 
[  199.976428][T29974] write to 0xffff88810c98a9a8 of 8 bytes by task 29974 on cpu 1:
[  199.984170][T29974]  filemap_read+0x974/0xa00
[  199.988717][T29974]  generic_file_read_iter+0x79/0x330
[  199.994042][T29974]  ext4_file_read_iter+0x1cc/0x290
[  199.999221][T29974]  copy_splice_read+0x442/0x660
[  200.004118][T29974]  splice_direct_to_actor+0x290/0x680
[  200.009523][T29974]  do_splice_direct+0xda/0x150
[  200.014322][T29974]  do_sendfile+0x380/0x650
[  200.018773][T29974]  __x64_sys_sendfile64+0x105/0x150
[  200.024011][T29974]  x64_sys_call+0x2db1/0x3000
[  200.028725][T29974]  do_syscall_64+0xca/0x2b0
[  200.033270][T29974]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.039193][T29974] 
[  200.041529][T29974] value changed: 0x000000000000025c -> 0x000000000000025d
[  200.048642][T29974] 
[  200.051028][T29974] Reported by Kernel Concurrency Sanitizer on:
[  200.057193][T29974] CPU: 1 UID: 0 PID: 29974 Comm: syz.3.1908 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  200.067009][T29974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  200.077084][T29974] ==================================================================
[  200.112036][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.079910][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  201.080521][T24268] Bluetooth: hci0: command 0x1003 tx timeout