last executing test programs:

6m3.824867031s ago: executing program 4 (id=1727):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd"], 0x0}, 0x94)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = fcntl$getown(r1, 0x9)
ptrace$poke(0x5, r2, &(0x7f0000000000), 0x1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4)
sendto$inet6(r3, &(0x7f0000000800)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e612721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ec3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a068e9607f57f626a5b8d476636ef1ee76307524009ae49be402000000000000001e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408074c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dfff01a9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669cabc206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb252f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2e02fad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea093680ffffff802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c59d88a29af5886c1f5dfc6837c58aaef12a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e2cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe90400fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97107339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f40029d7cfcaf26fd1900d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60e7222697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20d4774d66c5ae270adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5207cc9bb8d686982c2f158e0d8f5c7ec6cbfd500"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c)
r4 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
pivot_root(&(0x7f0000000240)='./file0\x00', 0x0)

6m3.748978857s ago: executing program 4 (id=1729):
r0 = creat(&(0x7f0000000080)='./file0\x00', 0xac)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r1 = syz_usbip_server_init(0x5)
write$usbip_server(r1, &(0x7f0000000040)=@ret_unlink={{0x4, 0x1, 0x0, 0x1, 0x4}, {0x23}}, 0x30)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
ptrace$peeksig(0x4209, r2, &(0x7f00000002c0)={0x8b31, 0x0, 0x1}, &(0x7f0000000300)=[{}])
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x465f}, 0x8)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r4, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback, 0x9}, 0x1c)
listen(r4, 0x4)
getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000380)={<r5=>0x0, 0xfffffffb, 0x3ff, 0xf}, &(0x7f00000003c0)=0x10)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000400)={r5, 0x40000008}, 0x8)
sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket(0x23, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10)
r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'})
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32=r4], 0xc)

6m3.184146553s ago: executing program 4 (id=1745):
prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)

6m3.151172105s ago: executing program 4 (id=1747):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x4000000)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r2}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000003800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x5c, 0x160, 0xd0, 0x3e0, 0x1e0, 0x228, 0x25a, 0x1e0, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0x1fe], 'veth0_to_batadv\x00', 'batadv_slave_0\x00', {}, {0xff}}, 0x5002, 0xa8, 0xd0, 0x52020000, {0x0, 0x6802000000000000}}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@dev, @mcast1, [], [], 'virt_wifi0\x00', 'lo\x00', {}, {}, 0x89}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x7, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10)
sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0)
recvmmsg(r4, &(0x7f0000001140), 0x700, 0x2, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', r6, 0x0, 0x200002}, 0x18)
syz_emit_ethernet(0x66, &(0x7f00000004c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x1000002, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0xfffff788}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0xffff}}}, {0x8, 0x6558, 0xfffffffe}}}}}}, 0x0)
msgsnd(0x0, 0x0, 0xfd1, 0x0)
r7 = socket(0x10, 0x803, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x74, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x5, 0xd, 0x3, 0x4, 0x13, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x2, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}]}}]}, 0x74}}, 0x24040084)

6m3.109093619s ago: executing program 4 (id=1748):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x108284, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0x0)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
fallocate(r1, 0x0, 0xbf5, 0x2000402)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x26}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000000)={[{@mblk_io_submit}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x7b9, &(0x7f00000007c0)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20)
unlink(&(0x7f0000000100)='./file1\x00')
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='rxrpc_propose_ack\x00', r3}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast})

6m2.445415482s ago: executing program 4 (id=1761):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000340)={0x1000, {{0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00', 0x5}}}, 0x88)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2, 0x0, 0x400007}, 0x18)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000"], 0x110}}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@caif=@rfm, 0x80, &(0x7f0000000880)=[{&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f0000000540)=""/122, 0x7a}, {&(0x7f00000005c0)=""/89, 0x59}, {&(0x7f0000000640)=""/190, 0xbe}, {&(0x7f0000000800)=""/101, 0x65}], 0x5, &(0x7f0000000900)=""/245, 0xf5}, 0x7fff}, {{&(0x7f0000000a00)=@pppol2tp, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000400)=""/46, 0x2e}, {&(0x7f0000000a80)=""/74, 0x4a}, {&(0x7f0000000b00)=""/219, 0xdb}, {&(0x7f0000000700)=""/31, 0x1f}, {&(0x7f0000000c00)=""/223, 0xdf}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/183, 0xb7}, {&(0x7f0000001dc0)=""/104, 0x68}, {&(0x7f0000001e40)=""/74, 0x4a}], 0x9, &(0x7f0000001f80)=""/97, 0x61}, 0x1}, {{&(0x7f0000002000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000000780)=""/30, 0x1e}, {&(0x7f0000002080)=""/18, 0x12}], 0x2}, 0x5}, {{&(0x7f0000002100)=@isdn, 0x80, &(0x7f00000022c0)=[{&(0x7f0000002180)=""/250, 0xfa}, {&(0x7f0000002280)=""/50, 0x32}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x3, &(0x7f0000002300)=""/139, 0x8b}, 0xfffffffa}, {{&(0x7f0000003480)=@alg, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003500)=""/166, 0xa6}, {&(0x7f00000035c0)=""/92, 0x5c}, {&(0x7f0000003640)=""/56, 0x38}, {&(0x7f0000003680)=""/54, 0x36}], 0x4, &(0x7f0000003700)=""/190, 0xbe}, 0xea2}], 0x5, 0x40, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x26}, 0x94)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r9}, 0x10)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r10}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast})

5m47.268409557s ago: executing program 32 (id=1761):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000340)={0x1000, {{0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00', 0x5}}}, 0x88)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2, 0x0, 0x400007}, 0x18)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000"], 0x110}}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@caif=@rfm, 0x80, &(0x7f0000000880)=[{&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f0000000540)=""/122, 0x7a}, {&(0x7f00000005c0)=""/89, 0x59}, {&(0x7f0000000640)=""/190, 0xbe}, {&(0x7f0000000800)=""/101, 0x65}], 0x5, &(0x7f0000000900)=""/245, 0xf5}, 0x7fff}, {{&(0x7f0000000a00)=@pppol2tp, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000400)=""/46, 0x2e}, {&(0x7f0000000a80)=""/74, 0x4a}, {&(0x7f0000000b00)=""/219, 0xdb}, {&(0x7f0000000700)=""/31, 0x1f}, {&(0x7f0000000c00)=""/223, 0xdf}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/183, 0xb7}, {&(0x7f0000001dc0)=""/104, 0x68}, {&(0x7f0000001e40)=""/74, 0x4a}], 0x9, &(0x7f0000001f80)=""/97, 0x61}, 0x1}, {{&(0x7f0000002000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000000780)=""/30, 0x1e}, {&(0x7f0000002080)=""/18, 0x12}], 0x2}, 0x5}, {{&(0x7f0000002100)=@isdn, 0x80, &(0x7f00000022c0)=[{&(0x7f0000002180)=""/250, 0xfa}, {&(0x7f0000002280)=""/50, 0x32}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x3, &(0x7f0000002300)=""/139, 0x8b}, 0xfffffffa}, {{&(0x7f0000003480)=@alg, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003500)=""/166, 0xa6}, {&(0x7f00000035c0)=""/92, 0x5c}, {&(0x7f0000003640)=""/56, 0x38}, {&(0x7f0000003680)=""/54, 0x36}], 0x4, &(0x7f0000003700)=""/190, 0xbe}, 0xea2}], 0x5, 0x40, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x26}, 0x94)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r9}, 0x10)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r10}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast})

1.644905458s ago: executing program 1 (id=7932):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={<r2=>0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r3=>0x0]}, &(0x7f0000000240)=0x8)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r4}, 0x10)
socket(0x10, 0x803, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x18)
r9 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0})
io_uring_enter(r5, 0x40f9, 0x217, 0xa5, 0x0, 0xf5)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={r3, 0x401, 0x7}, &(0x7f0000000080)=0x8)
r10 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0)
sendmsg$kcm(r10, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr, 0x62, 0x0}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0)
r11 = socket(0x10, 0x3, 0x0)
write(r11, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r11, 0x84, 0x7c, &(0x7f00000000c0)={r2, 0xe63, 0x9}, &(0x7f0000000100)=0x8)
bind$xdp(0xffffffffffffffff, &(0x7f00000001c0), 0x2a)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r11, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40008c0}, 0x8885)

1.334473972s ago: executing program 5 (id=7943):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)

1.316790724s ago: executing program 5 (id=7945):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r2})

1.290758636s ago: executing program 5 (id=7946):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r1}, 0x10)
socket(0x10, 0x803, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0), &(0x7f0000000280))
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x18)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10)
write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24)

1.045614526s ago: executing program 2 (id=7948):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x2c, 0x0, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0)

1.020622848s ago: executing program 2 (id=7950):
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&')

999.34916ms ago: executing program 2 (id=7951):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000080000000000", @ANYRES16=r1, @ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x7c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2)
r3 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100, 0x200}, &(0x7f0000000200), &(0x7f0000000100))
io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000010007fbf8f99d91bde2f0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7, <r8=>0xffffffffffffffff}, 0x4)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r9}, 0x10)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x1002, 0x0, 0x2, 0xffffffff}}}}]}, 0x4c}}, 0x20000000)

963.511442ms ago: executing program 2 (id=7953):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r3 = dup(r2)
write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mq_getsetattr(r3, &(0x7f0000000380)={0x8, 0x800, 0x1000, 0x2}, 0x0)

864.60118ms ago: executing program 2 (id=7957):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[], 0x18)

864.256341ms ago: executing program 2 (id=7958):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x165000, 0x20)
flock(r0, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYRES32=0x0], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
poll(0x0, 0x0, 0x3)
r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r5, 0x1)

749.15968ms ago: executing program 1 (id=7962):
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&')

695.084174ms ago: executing program 1 (id=7963):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000580)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="1a6f9f325e43651aba66512fb11276f4a52c2c8229451ca504361f51dcc556214359159912c3a0ad01a19888", 0x2c}], 0x1}}], 0x2, 0x8008801)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="11", 0x1}], 0x1}}], 0x1, 0x0)

694.648934ms ago: executing program 1 (id=7964):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000180)={@multicast1, @rand_addr, <r1=>0x0}, &(0x7f00000001c0)=0xc)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r1, 0x700, 0x8, 0x3, 0x8, {{0x6, 0x4, 0x2, 0x1c, 0x18, 0x64, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@noop, @noop]}}}}})
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0xfffffffffffffe02, &(0x7f00000003c0)={&(0x7f00000004c0)={0x80, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffe8b}, {0x5, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x80}}, 0x0)

553.762656ms ago: executing program 0 (id=7968):
unshare(0x22020600)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x4, 0x9}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0}, 0x50)
close(r0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) (fail_nth: 3)

491.005101ms ago: executing program 0 (id=7970):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r2)
getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="1748000040000200280012800a000100767863616e0000001800028014000100000000", @ANYRES32=r3], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0)

490.314891ms ago: executing program 0 (id=7971):
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r1})

465.368163ms ago: executing program 0 (id=7972):
capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0xfff}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r2}, 0x10)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x4, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='cpu<-0\t\t\t')
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=@ipv6_delrule={0x38, 0x21, 0x1, 0x70bd27, 0x25dfdbff, {0xa, 0x14, 0x0, 0x7, 0x7, 0x0, 0x0, 0x6, 0x1000c}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x1c64}, @FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)

431.019086ms ago: executing program 5 (id=7975):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000140)=@framed={{}, [@jmp={0x5, 0x1, 0x6, 0xa, 0x6, 0xffffffffffffffff}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000015850000001700000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3, 0x0, 0x400007}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x30, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)}, 0xc001)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfe33)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r8, 0x0, 0xffffffffffffffff}, 0x18)
r9 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&')
dup(r6)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x759, &(0x7f0000000780)={[{@noload}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}, 0x0}, {@data_journal}, {@journal_dev={'journal_dev', 0x3d, 0xf}}, {@i_version}, {@nobarrier}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xb6a}}, {@data_err_ignore}], [], 0x2c}, 0x2, 0x4f9, &(0x7f0000000200)="$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")

423.950666ms ago: executing program 1 (id=7976):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000485028008000a0067"], 0x3c}}, 0x0)
getdents(r0, &(0x7f0000000080)=""/43, 0x2b)
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x4, 0x0)
mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
getdents(r0, 0x0, 0xbb)

205.633634ms ago: executing program 3 (id=7980):
r0 = socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
syz_read_part_table(0x60d, &(0x7f0000002200)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1)

165.457837ms ago: executing program 5 (id=7981):
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
pipe2$9p(&(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r2, 0x0, r1, &(0x7f0000000140)=0x8, 0x8, 0x8)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
time(&(0x7f0000000180))
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket(0x1d, 0x3, 0x40) (async, rerun: 32)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) (rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x18) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={0x0}}, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000740)={0x204, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x168, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x708fed9bfa34006c}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xec0006a4793ab285}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x204}}, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) (async)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)={0x100, r7, 0x4, 0x70bd2d, 0x25dfdbee, {}, [@ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xb4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x7b, 0x4, "4bf6d3076fd9f21a48ce17516e1059f0ab91b0ac5addd25f40c5f8eacc96d1bc7cab7c32c24630622fb4df8a5097da069f5ef700546b7caac1e96dcc8d6b84a5512659d73661f029379d35ad75144dcd1abc98ccc0ee008c1fe6a95735b8aaaa75022245304735c8841df3d4c4d91b5ee512217ebf2309"}, @ETHTOOL_A_BITSET_MASK={0x2a, 0x5, "ebd2bae8697d980361c5be97c1915f91b706a63fbc11e5503c2d677846871cf39914f0344a08"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4}, 0x1) (async)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async, rerun: 64)
r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64)
ioctl$TIOCMIWAIT(r10, 0x545c, 0x200000000000000) (async)
r11 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
writev(r11, &(0x7f00000004c0)=[{&(0x7f0000000400)="4419040ab0eca862e6c082f1aa83f9466978f47cf52163ce7a8848332e2df0610f7d1c0f2a51c085ddcfa6557e711d420b5080b9e4830df7b642447ddd69b95546349a9205", 0x45}], 0x1) (async, rerun: 64)
preadv2(r11, &(0x7f0000000280)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r12}, 0x18) (async)
socket$netlink(0x10, 0x3, 0x0)

147.335628ms ago: executing program 3 (id=7982):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r1)
getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="1748000040000200280012800a000100767863616e0000001800028014000100000000", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0)

123.59222ms ago: executing program 1 (id=7983):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000990000000d", @ANYRES8=0x0], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf9}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r2, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
accept4(r2, 0x0, 0x0, 0x400000000000000)

122.316871ms ago: executing program 0 (id=7984):
unshare(0x22020600)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x4, 0x9}, 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa108000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r3, 0x0, 0xe, 0x0, &(0x7f0000000600)="e0b9547ed387db3b8691d2c0e201", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0d00000006000006000000000100000000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
close(r0)
mount$tmpfs(0x0, &(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000140), 0x10008, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}]})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20)

110.803061ms ago: executing program 3 (id=7985):
r0 = socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
syz_read_part_table(0x60d, &(0x7f0000002200)="$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")
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='ufshcd_exception_event\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000bc0)=@newtfilter={0x84, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0x2, 0x4}, {}, {0xfff8, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x54, 0x2, [@TCA_FLOW_EMATCHES={0x50, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x2c, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5, 0x8}}}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_VAR="fd3c0d57acb4", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x2]}]}}]}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000340)={'team_slave_1\x00', 0x8000})
getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000040)=0x7, &(0x7f00000000c0)=0x2)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000380)={0x2, 0x4e22, @multicast2}, 0x10)
setsockopt$sock_int(r6, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4)
fchmod(r7, 0x98)
bind$inet6(r7, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)
socket$netlink(0x10, 0x3, 0x8000000004)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10)
symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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")
open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19)

34.041038ms ago: executing program 0 (id=7986):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r1}, 0x10)
socket(0x10, 0x803, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0), &(0x7f0000000280))
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10)
write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24)

33.661438ms ago: executing program 5 (id=7987):
syz_emit_ethernet(0x183, &(0x7f0000000d40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004a0c01750066000000219078ac1414bbac1e0101830fa4ac14141700000000ac1e010186300000000301020006cadc803a0611378316aeef820d86d3060d07ffb96706088f93f47010c60603fb07069c644dac9404000001890f1d7f000001ffffffffac14142f004e244e2204419078304a1e9afffbd196d46c559bc617fa599be9d2c54df144aacd7236ac714a9263c4e30756812f4e8c9cd8ec817a6c90283f2cb02e2b65ac1ff5fe04260400d2d22a6e852e4bf2463882cfbaf399bd8ea327edcde72d8980d6c78be26656c9bf609593a32b2927c27aee85fc0fe068514716352023d110c1fda4335f58bc5b1ee4e65f67fdfe6421abac015be2bf95c8f3dca6ed107d1f58ca9df249dfeb96993d23482e8a1328c0d612b89ba8131c3fbbcf004ec9afa026ec016a78472a27a23db99c78257acbe1a73eb6ca52159dc2e7bf2916f421082daa4c7cb384fa8b766dc3460b97dbe16f0f2be27999442d88e579dfd99f2a3b49f4f41f7f1fc10c2d3ed3fa785622"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000003c0)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000440)="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", 0xff}], 0x1, &(0x7f00000007c0)}}, {{&(0x7f00000009c0)=@vsock={0x28, 0x0, 0xffffffff}, 0x80, &(0x7f0000000b80)=[{0x0}, {0x0}, {&(0x7f0000000b40)}], 0x3}}], 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)={0x11c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40}, 0x20)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
syz_emit_ethernet(0x41, &(0x7f0000000300)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0xb, 0x2c, 0x0, @remote, @local, {[@routing={0x89, 0x0, 0x2, 0x1}], "b93653"}}}}}, 0x0)

33.436668ms ago: executing program 3 (id=7988):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)

13.344689ms ago: executing program 3 (id=7989):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000100c280000700030004"], 0x48}}, 0x0)

0s ago: executing program 3 (id=7990):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r3=>0x0]}, &(0x7f0000000080)=0x8)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000100)={r3, @in={{0x2, 0x4e21, @empty}}, 0x7, 0x1}, &(0x7f0000000000)=0x90)
setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={r3, 0x2}, 0x8)
close(r1)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000280)={0x6, 'ipvlan1\x00', {0x101}, 0xd5})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r6=>0x0]}, &(0x7f0000000240)=0x8)
sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r6}}], 0x20, 0x2400e044}, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={r6, 0x1}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, 0x0, 0x0)

kernel console output (not intermixed with test programs):

detected capacity change from 0 to 128
[  447.185491][T25926] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  447.217437][T25929] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  447.220049][T25921] can0: slcan on ttyS3.
[  447.362370][T25937] can0 (unregistered): slcan off ttyS3.
[  447.375524][T25921] can0: slcan on ttyS3.
[  447.445022][T25920] can0 (unregistered): slcan off ttyS3.
[  447.505865][T25960] loop0: detected capacity change from 0 to 512
[  447.524605][T25960] EXT4-fs: Ignoring removed mblk_io_submit option
[  447.545581][T25960] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  447.560950][T25960] EXT4-fs (loop0): 1 truncate cleaned up
[  447.568310][T25960] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  447.595644][T25199] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  447.619453][T25980] loop0: detected capacity change from 0 to 512
[  447.626368][T25980] EXT4-fs: Ignoring removed nobh option
[  447.646047][T25980] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.6417: corrupted inode contents
[  447.659229][T25980] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.6417: mark_inode_dirty error
[  447.671080][T25980] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.6417: corrupted inode contents
[  447.683153][T25980] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.6417: mark_inode_dirty error
[  447.694853][T25980] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.6417: Failed to acquire dquot type 0
[  447.706577][T25980] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.6417: corrupted inode contents
[  447.719334][T25980] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.6417: mark_inode_dirty error
[  447.731338][T25980] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.6417: corrupted inode contents
[  447.748087][T25980] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.6417: mark_inode_dirty error
[  447.759837][T25980] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.6417: corrupted inode contents
[  447.773148][T25980] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[  447.781916][T25980] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.6417: corrupted inode contents
[  447.794056][T25980] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.6417: mark_inode_dirty error
[  447.806615][T25980] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[  447.816081][T25980] EXT4-fs (loop0): 1 truncate cleaned up
[  447.832492][T25980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  447.849440][T25980] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  447.870170][   T29] kauditd_printk_skb: 189 callbacks suppressed
[  447.870221][   T29] audit: type=1400 audit(1755196836.711:9967): avc:  denied  { create } for  pid=25979 comm="syz.0.6417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  447.896058][   T29] audit: type=1326 audit(1755196836.711:9968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25979 comm="syz.0.6417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea0636ebe9 code=0x7ffc0000
[  447.919649][   T29] audit: type=1326 audit(1755196836.711:9969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25979 comm="syz.0.6417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea0636ebe9 code=0x7ffc0000
[  447.943147][   T29] audit: type=1326 audit(1755196836.711:9970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25979 comm="syz.0.6417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fea0636ebe9 code=0x7ffc0000
[  447.966516][   T29] audit: type=1326 audit(1755196836.711:9971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25979 comm="syz.0.6417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea0636ebe9 code=0x7ffc0000
[  447.990012][   T29] audit: type=1326 audit(1755196836.711:9972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25979 comm="syz.0.6417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea0636ebe9 code=0x7ffc0000
[  448.013614][   T29] audit: type=1326 audit(1755196836.711:9973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25979 comm="syz.0.6417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea0636ebe9 code=0x7ffc0000
[  448.037110][   T29] audit: type=1326 audit(1755196836.711:9974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25979 comm="syz.0.6417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea0636ebe9 code=0x7ffc0000
[  448.060578][   T29] audit: type=1326 audit(1755196836.711:9975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25979 comm="syz.0.6417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea0636ebe9 code=0x7ffc0000
[  448.084136][   T29] audit: type=1326 audit(1755196836.711:9976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25979 comm="syz.0.6417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea0636ebe9 code=0x7ffc0000
[  448.108954][T25990] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  448.334483][T26019] netlink: 'syz.0.6426': attribute type 1 has an invalid length.
[  448.351006][T26019] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  448.389646][T26021] netlink: 'syz.5.6428': attribute type 21 has an invalid length.
[  448.761360][T26044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6437'.
[  448.794267][T26052] netlink: 'syz.3.6439': attribute type 1 has an invalid length.
[  448.850573][T26054] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6440'.
[  450.757615][T26147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6473'.
[  450.768191][T26147] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  450.817353][T26147] batman_adv: batadv0: Removing interface: batadv_slave_1
[  450.988502][T26164] loop1: detected capacity change from 0 to 1024
[  451.016807][T26164] EXT4-fs: Ignoring removed bh option
[  451.022884][T26164] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  451.055501][T26164] EXT4-fs error (device loop1): ext4_quota_enable:7124: comm syz.1.6479: inode #2304: comm syz.1.6479: iget: illegal inode #
[  451.087963][T26164] EXT4-fs (loop1): Remounting filesystem read-only
[  451.094554][T26164] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix.
[  451.131535][T26164] EXT4-fs (loop1): mount failed
[  451.153927][T26181] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6486'.
[  451.745877][T26208] loop5: detected capacity change from 0 to 512
[  451.752666][T26208] EXT4-fs: Ignoring removed mblk_io_submit option
[  451.759942][T26208] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  451.770979][T26208] EXT4-fs (loop5): 1 truncate cleaned up
[  451.776951][T26208] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  451.854162][T26211] netlink: 'syz.3.6496': attribute type 8 has an invalid length.
[  452.398515][T26244] netlink: 'syz.1.6508': attribute type 1 has an invalid length.
[  452.419666][T26244] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  452.437005][T26244] can0: slcan on ttyS3.
[  452.509915][T26244] can0 (unregistered): slcan off ttyS3.
[  452.523538][T26241] can0: slcan on ttyS3.
[  452.557374][T26241] loop1: detected capacity change from 0 to 512
[  452.616177][T26241] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  452.679824][T22071] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  452.688917][T26241] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002]
[  452.706357][T26241] System zones: 1-12
[  452.714378][T26241] EXT4-fs (loop1): orphan cleanup on readonly fs
[  452.746140][T26241] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6508: bg 0: block 361: padding at end of block bitmap is not set
[  452.769627][T26241] EXT4-fs (loop1): Remounting filesystem read-only
[  452.782674][T26241] EXT4-fs (loop1): 1 truncate cleaned up
[  452.788765][T26241] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  452.859687][T26240] can0 (unregistered): slcan off ttyS3.
[  452.865057][T26285] loop5: detected capacity change from 0 to 512
[  452.882014][T26285] EXT4-fs: Ignoring removed i_version option
[  452.893762][T26285] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  452.907937][   T29] kauditd_printk_skb: 107 callbacks suppressed
[  452.907955][   T29] audit: type=1326 audit(1755197609.756:10084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26289 comm="syz.3.6520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28a92ebe9 code=0x7ffc0000
[  452.937867][   T29] audit: type=1326 audit(1755197609.756:10085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26289 comm="syz.3.6520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa28a92ebe9 code=0x7ffc0000
[  452.968082][T23488] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  452.991470][   T29] audit: type=1326 audit(1755197609.756:10086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26289 comm="syz.3.6520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28a92ebe9 code=0x7ffc0000
[  452.996302][T26285] EXT4-fs (loop5): 1 truncate cleaned up
[  453.015171][   T29] audit: type=1326 audit(1755197609.756:10087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26289 comm="syz.3.6520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28a92ebe9 code=0x7ffc0000
[  453.044659][   T29] audit: type=1326 audit(1755197609.816:10088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26289 comm="syz.3.6520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa28a92ebe9 code=0x7ffc0000
[  453.068320][   T29] audit: type=1326 audit(1755197609.816:10089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26289 comm="syz.3.6520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28a92ebe9 code=0x7ffc0000
[  453.092297][   T29] audit: type=1326 audit(1755197609.816:10090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26289 comm="syz.3.6520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa28a92ebe9 code=0x7ffc0000
[  453.115939][   T29] audit: type=1326 audit(1755197609.816:10091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26289 comm="syz.3.6520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28a92ebe9 code=0x7ffc0000
[  453.128531][T26304] loop1: detected capacity change from 0 to 512
[  453.140123][   T29] audit: type=1326 audit(1755197609.816:10092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26289 comm="syz.3.6520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa28a92ebe9 code=0x7ffc0000
[  453.149785][T26285] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  453.169603][   T29] audit: type=1326 audit(1755197609.816:10093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26289 comm="syz.3.6520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28a92ebe9 code=0x7ffc0000
[  453.195488][T26304] EXT4-fs: Ignoring removed nobh option
[  453.283740][T26310] netlink: 'syz.2.6524': attribute type 10 has an invalid length.
[  453.322301][T26304] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.6521: corrupted inode contents
[  453.334878][T26304] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.6521: mark_inode_dirty error
[  453.357049][T26304] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.6521: corrupted inode contents
[  453.380325][T26304] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.6521: mark_inode_dirty error
[  453.402550][T26304] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.6521: Failed to acquire dquot type 0
[  453.445072][T26304] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.6521: corrupted inode contents
[  453.445966][T22071] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  453.458812][T26304] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.6521: mark_inode_dirty error
[  453.477784][T26304] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.6521: corrupted inode contents
[  453.492404][T26304] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.6521: mark_inode_dirty error
[  453.503972][T26304] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.6521: corrupted inode contents
[  453.504456][T26326] netlink: 'syz.3.6527': attribute type 1 has an invalid length.
[  453.516853][T26304] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[  453.533923][T26304] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.6521: corrupted inode contents
[  453.538317][T26326] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  453.548529][T26304] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.6521: mark_inode_dirty error
[  453.576434][T26304] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[  453.595544][T26331] can0: slcan on ttyS3.
[  453.606114][T26304] EXT4-fs (loop1): 1 truncate cleaned up
[  453.613151][T26304] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  453.626213][T26304] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  453.680440][T26329] netlink: 'syz.2.6531': attribute type 1 has an invalid length.
[  453.689751][T26329] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  453.709812][T26321] can0 (unregistered): slcan off ttyS3.
[  453.718832][T26326] can0: slcan on ttyS3.
[  453.725933][T26343] loop5: detected capacity change from 0 to 512
[  453.746959][T23488] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  453.757081][T26329] loop2: detected capacity change from 0 to 512
[  453.786854][T26343] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  453.798912][T26329] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  453.822828][T26355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6536'.
[  453.835717][T26353] loop1: detected capacity change from 0 to 512
[  453.844542][T26329] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002]
[  453.853189][T26343] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 1
[  453.854954][T26353] EXT4-fs: Ignoring removed mblk_io_submit option
[  453.887361][T26353] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  453.887426][T26329] System zones: 1-12
[  453.887498][T26329] EXT4-fs (loop2): orphan cleanup on readonly fs
[  453.898354][T26343] EXT4-fs (loop5): 1 truncate cleaned up
[  453.917993][T26353] EXT4-fs (loop1): 1 truncate cleaned up
[  453.922966][T26329] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6531: bg 0: block 361: padding at end of block bitmap is not set
[  453.924312][T26353] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  453.939563][T26343] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  453.952862][T26329] EXT4-fs (loop2): Remounting filesystem read-only
[  453.969680][T26329] EXT4-fs (loop2): 1 truncate cleaned up
[  453.975707][T26329] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  454.017430][T26343] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm +}[@: deleted inode referenced: 12
[  454.074872][T22071] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  454.099278][T26327] can0 (unregistered): slcan off ttyS3.
[  454.168488][T20296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  454.566272][T26404] loop5: detected capacity change from 0 to 512
[  454.600396][T26404] EXT4-fs: Ignoring removed nobh option
[  454.643271][T26404] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.6546: corrupted inode contents
[  454.729928][T26404] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.6546: mark_inode_dirty error
[  454.742824][T26415] loop2: detected capacity change from 0 to 1024
[  454.752051][T26404] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.6546: corrupted inode contents
[  454.774523][T26415] EXT4-fs: Ignoring removed bh option
[  454.795312][T26404] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.6546: mark_inode_dirty error
[  454.821062][T26404] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.6546: Failed to acquire dquot type 0
[  454.832588][T26415] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  454.850516][T26415] EXT4-fs error (device loop2): ext4_quota_enable:7124: comm syz.2.6549: inode #2304: comm syz.2.6549: iget: illegal inode #
[  454.868985][T26404] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.6546: corrupted inode contents
[  454.881747][T23488] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  454.898076][T26404] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.6546: mark_inode_dirty error
[  454.909498][T26415] EXT4-fs (loop2): Remounting filesystem read-only
[  454.916011][T26415] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix.
[  454.931489][T26415] EXT4-fs (loop2): mount failed
[  454.936597][T26404] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.6546: corrupted inode contents
[  454.960979][T26404] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.6546: mark_inode_dirty error
[  454.973506][T26404] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.6546: corrupted inode contents
[  454.986084][T26422] loop1: detected capacity change from 0 to 512
[  454.987259][T26404] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem
[  455.001508][T26420] netlink: 'syz.3.6552': attribute type 1 has an invalid length.
[  455.011115][T26420] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  455.028033][T26422] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  455.032224][T26404] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.6546: corrupted inode contents
[  455.055732][T26404] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.6546: mark_inode_dirty error
[  455.067573][T26404] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem
[  455.084533][T26404] EXT4-fs (loop5): 1 truncate cleaned up
[  455.094713][T26422] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 1
[  455.094784][T26404] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  455.119300][T26422] EXT4-fs (loop1): 1 truncate cleaned up
[  455.125783][T26422] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  455.139014][T26404] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  455.151060][T26422] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm +}[@: deleted inode referenced: 12
[  455.190879][T26432] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6555'.
[  455.203073][T22071] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  455.304790][T23488] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  455.761568][T26456] netlink: 'syz.1.6562': attribute type 1 has an invalid length.
[  455.770475][T26456] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  455.798436][T26456] can0: slcan on ttyS3.
[  455.868149][T26456] can0 (unregistered): slcan off ttyS3.
[  455.890411][T26467] can0: slcan on ttyS3.
[  455.913263][T26456] loop1: detected capacity change from 0 to 512
[  455.929040][T26456] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  455.958793][T26456] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002]
[  455.975700][T26456] System zones: 1-12
[  455.980132][T26456] EXT4-fs (loop1): orphan cleanup on readonly fs
[  456.000602][T26456] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6562: bg 0: block 361: padding at end of block bitmap is not set
[  456.030170][T26456] EXT4-fs (loop1): Remounting filesystem read-only
[  456.078123][T26456] EXT4-fs (loop1): 1 truncate cleaned up
[  456.084554][T26456] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  456.221760][T26455] can0 (unregistered): slcan off ttyS3.
[  456.283012][T23488] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  456.460948][T26523] loop1: detected capacity change from 0 to 512
[  456.471746][T26523] EXT4-fs: Ignoring removed mblk_io_submit option
[  456.478674][T26523] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  456.512261][T26523] EXT4-fs (loop1): 1 truncate cleaned up
[  456.523114][T26523] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  456.566921][T26531] loop2: detected capacity change from 0 to 1024
[  456.589379][T26531] EXT4-fs: Ignoring removed bh option
[  456.597569][T26531] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  456.661475][T26531] EXT4-fs error (device loop2): ext4_quota_enable:7124: comm syz.2.6580: inode #2304: comm syz.2.6580: iget: illegal inode #
[  456.680653][T26531] EXT4-fs (loop2): Remounting filesystem read-only
[  456.683337][T23488] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  456.687179][T26531] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix.
[  456.711208][T26531] EXT4-fs (loop2): mount failed
[  457.105127][T26559] loop1: detected capacity change from 0 to 512
[  457.112599][T26559] EXT4-fs: Ignoring removed mblk_io_submit option
[  457.141615][T26559] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  457.157091][T26565] loop5: detected capacity change from 0 to 1024
[  457.167892][T26565] EXT4-fs: Ignoring removed bh option
[  457.185057][T26565] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  457.196062][T26559] EXT4-fs (loop1): 1 truncate cleaned up
[  457.203551][T26565] EXT4-fs error (device loop5): ext4_quota_enable:7124: comm syz.5.6594: inode #2304: comm syz.5.6594: iget: illegal inode #
[  457.207647][T26559] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  457.236388][T26561] netlink: 'syz.3.6593': attribute type 1 has an invalid length.
[  457.269147][T23488] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  457.280181][T26561] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  457.300838][T26565] EXT4-fs (loop5): Remounting filesystem read-only
[  457.307500][T26565] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix.
[  457.324189][T26565] EXT4-fs (loop5): mount failed
[  457.342405][T26575] loop1: detected capacity change from 0 to 512
[  457.389537][T26575] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  457.425633][T26575] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 1
[  457.440688][T26575] EXT4-fs (loop1): 1 truncate cleaned up
[  457.446854][T26575] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  457.497615][T26575] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm +}[@: deleted inode referenced: 12
[  457.573212][T23488] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  457.650388][T26598] loop1: detected capacity change from 0 to 512
[  457.682276][T26598] EXT4-fs: Ignoring removed mblk_io_submit option
[  457.699266][T26598] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  457.726211][T26598] EXT4-fs (loop1): 1 truncate cleaned up
[  457.738685][T26598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  457.785457][T26605] loop5: detected capacity change from 0 to 1024
[  457.816714][T26605] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  458.008866][T22071] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  458.204439][T26614] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6609'.
[  458.283907][   T29] kauditd_printk_skb: 380 callbacks suppressed
[  458.283922][   T29] audit: type=1326 audit(1755198127.134:10464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26572 comm="syz.0.6597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea0636ebe9 code=0x7ffc0000
[  458.313896][   T29] audit: type=1326 audit(1755198127.134:10465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26572 comm="syz.0.6597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea0636ebe9 code=0x7ffc0000
[  458.392999][   T29] audit: type=1326 audit(1755198127.244:10466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26621 comm="syz.2.6611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431305ebe9 code=0x7ffc0000
[  458.416789][   T29] audit: type=1326 audit(1755198127.244:10467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26621 comm="syz.2.6611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431305ebe9 code=0x7ffc0000
[  458.440422][   T29] audit: type=1326 audit(1755198127.244:10468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26621 comm="syz.2.6611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f431305ebe9 code=0x7ffc0000
[  458.464190][   T29] audit: type=1326 audit(1755198127.284:10469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26626 comm="syz.2.6611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f43130914a5 code=0x7ffc0000
[  458.487961][   T29] audit: type=1326 audit(1755198127.284:10470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26621 comm="syz.2.6611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431305ebe9 code=0x7ffc0000
[  458.511688][   T29] audit: type=1326 audit(1755198127.284:10471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26621 comm="syz.2.6611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431305ebe9 code=0x7ffc0000
[  458.535356][   T29] audit: type=1326 audit(1755198127.304:10472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26621 comm="syz.2.6611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f431305ebe9 code=0x7ffc0000
[  458.558975][   T29] audit: type=1326 audit(1755198127.304:10473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26621 comm="syz.2.6611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431305ebe9 code=0x7ffc0000
[  458.611934][T23488] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  458.680656][T26636] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  458.819422][T26645] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6619'.
[  459.177736][T26674] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  459.409358][T26686] netlink: 'syz.1.6634': attribute type 1 has an invalid length.
[  459.418161][T26686] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  459.442313][T26686] can0: slcan on ttyS3.
[  459.516492][T26686] can0 (unregistered): slcan off ttyS3.
[  459.537435][T26686] can0: slcan on ttyS3.
[  459.550623][T26686] loop1: detected capacity change from 0 to 512
[  459.567288][T26686] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  459.578821][T26686] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002]
[  459.586988][T26686] System zones: 1-12
[  459.651189][T26686] EXT4-fs (loop1): orphan cleanup on readonly fs
[  459.675357][T26686] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6634: bg 0: block 361: padding at end of block bitmap is not set
[  459.711726][T26686] EXT4-fs (loop1): Remounting filesystem read-only
[  459.733525][T26686] EXT4-fs (loop1): 1 truncate cleaned up
[  459.744865][T26686] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  459.866723][T26685] can0 (unregistered): slcan off ttyS3.
[  459.905842][T23488] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  459.952697][T26749] netlink: 'syz.3.6648': attribute type 10 has an invalid length.
[  460.006065][T26753] loop5: detected capacity change from 0 to 1024
[  460.013159][T26753] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  460.036842][T26753] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  460.038476][T26765] loop1: detected capacity change from 0 to 512
[  460.055841][T26753] JBD2: no valid journal superblock found
[  460.061763][T26753] EXT4-fs (loop5): Could not load journal inode
[  460.086376][T26765] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  460.094534][T26765] EXT4-fs (loop1): orphan cleanup on readonly fs
[  460.151223][T26765] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  460.194720][T26765] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  460.206857][T26774] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6657'.
[  460.218931][T26765] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6654: bg 0: block 40: padding at end of block bitmap is not set
[  460.233601][T26765] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  460.242731][T26765] EXT4-fs (loop1): 1 truncate cleaned up
[  460.248885][T26765] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  460.296887][T26782] loop5: detected capacity change from 0 to 1024
[  460.319060][T26784] FAULT_INJECTION: forcing a failure.
[  460.319060][T26784] name failslab, interval 1, probability 0, space 0, times 0
[  460.331896][T26784] CPU: 1 UID: 0 PID: 26784 Comm: syz.1.6660 Tainted: G        W           6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) 
[  460.331934][T26784] Tainted: [W]=WARN
[  460.331941][T26784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  460.331952][T26784] Call Trace:
[  460.331971][T26784]  <TASK>
[  460.331978][T26784]  __dump_stack+0x1d/0x30
[  460.332072][T26784]  dump_stack_lvl+0xe8/0x140
[  460.332091][T26784]  dump_stack+0x15/0x1b
[  460.332108][T26784]  should_fail_ex+0x265/0x280
[  460.332129][T26784]  ? __se_sys_memfd_create+0x1cc/0x590
[  460.332148][T26784]  should_failslab+0x8c/0xb0
[  460.332168][T26784]  __kmalloc_cache_noprof+0x4c/0x320
[  460.332233][T26784]  ? fput+0x8f/0xc0
[  460.332279][T26784]  __se_sys_memfd_create+0x1cc/0x590
[  460.332300][T26784]  __x64_sys_memfd_create+0x31/0x40
[  460.332337][T26784]  x64_sys_call+0x2abe/0x2ff0
[  460.332354][T26784]  do_syscall_64+0xd2/0x200
[  460.332375][T26784]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  460.332393][T26784]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  460.332478][T26784]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.332495][T26784] RIP: 0033:0x7f3e6e95ebe9
[  460.332511][T26784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  460.332527][T26784] RSP: 002b:00007f3e6d3bee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  460.332625][T26784] RAX: ffffffffffffffda RBX: 00000000000004f2 RCX: 00007f3e6e95ebe9
[  460.332636][T26784] RDX: 00007f3e6d3beef0 RSI: 0000000000000000 RDI: 00007f3e6e9e27e8
[  460.332646][T26784] RBP: 0000200000000b00 R08: 00007f3e6d3bebb7 R09: 00007f3e6d3bee40
[  460.332656][T26784] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000
[  460.332667][T26784] R13: 00007f3e6d3beef0 R14: 00007f3e6d3beeb0 R15: 0000200000000040
[  460.332683][T26784]  </TASK>
[  460.335314][T26782] EXT4-fs: Ignoring removed bh option
[  460.540472][T26782] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  460.558407][T26782] EXT4-fs error (device loop5): ext4_quota_enable:7124: comm syz.5.6661: inode #2304: comm syz.5.6661: iget: illegal inode #
[  460.571951][T26782] EXT4-fs (loop5): Remounting filesystem read-only
[  460.578605][T26782] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix.
[  460.597086][T26782] EXT4-fs (loop5): mount failed
[  460.645631][T26802] loop2: detected capacity change from 0 to 512
[  460.661930][T26802] EXT4-fs: Ignoring removed nobh option
[  460.917090][T26802] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.6667: corrupted inode contents
[  460.930225][T26802] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.6667: mark_inode_dirty error
[  460.942972][T26802] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.6667: corrupted inode contents
[  460.956013][T26815] netlink: 'syz.1.6672': attribute type 21 has an invalid length.
[  461.102647][T26802] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.6667: mark_inode_dirty error
[  461.125642][T26802] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.6667: Failed to acquire dquot type 0
[  461.152725][T26802] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.6667: corrupted inode contents
[  461.180859][T26802] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.6667: mark_inode_dirty error
[  461.228163][T26802] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.6667: corrupted inode contents
[  461.257240][T26802] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.6667: mark_inode_dirty error
[  461.268935][T26802] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.6667: corrupted inode contents
[  461.281594][T26802] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[  461.290381][T26802] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.6667: corrupted inode contents
[  461.303408][T26802] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.6667: mark_inode_dirty error
[  461.314669][T26802] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[  461.324579][T26802] EXT4-fs (loop2): 1 truncate cleaned up
[  461.331171][T26802] ext4 filesystem being mounted at /326/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  461.546616][T26842] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  461.561154][T26835] tipc: Resetting bearer <eth:syzkaller0>
[  461.586195][T26835] tipc: Disabling bearer <eth:syzkaller0>
[  461.613553][T26849] loop5: detected capacity change from 0 to 128
[  461.662501][T26852] loop2: detected capacity change from 0 to 512
[  461.674073][T26852] EXT4-fs: Ignoring removed nobh option
[  461.698724][T26852] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.6684: corrupted inode contents
[  461.719721][T26852] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.6684: mark_inode_dirty error
[  461.737082][T26852] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.6684: corrupted inode contents
[  461.757964][T26852] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.6684: mark_inode_dirty error
[  461.812395][T26852] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.6684: Failed to acquire dquot type 0
[  461.826447][T26852] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.6684: corrupted inode contents
[  461.844386][T26852] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.6684: mark_inode_dirty error
[  461.857203][T26852] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.6684: corrupted inode contents
[  461.870868][T26852] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.6684: mark_inode_dirty error
[  461.883195][T26852] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.6684: corrupted inode contents
[  461.896474][T26852] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[  461.905621][T26852] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.6684: corrupted inode contents
[  461.918108][T26852] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.6684: mark_inode_dirty error
[  461.942864][T26852] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[  462.055399][T26852] EXT4-fs (loop2): 1 truncate cleaned up
[  462.061532][T26852] EXT4-fs mount: 3 callbacks suppressed
[  462.061544][T26852] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  462.089859][T26852] ext4 filesystem being mounted at /328/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  462.192856][T26851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  462.284659][T26878] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6690'.
[  462.472820][T26894] loop5: detected capacity change from 0 to 512
[  462.479522][T26894] EXT4-fs: Ignoring removed nobh option
[  462.496815][T26894] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.6698: corrupted inode contents
[  462.517277][T26894] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.6698: mark_inode_dirty error
[  462.549989][T26902] loop2: detected capacity change from 0 to 512
[  462.552548][T26894] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.6698: corrupted inode contents
[  462.558992][T26902] EXT4-fs: Ignoring removed nobh option
[  462.618421][T26902] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.6700: corrupted inode contents
[  462.631592][T26894] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.6698: mark_inode_dirty error
[  462.655904][T26902] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.6700: mark_inode_dirty error
[  462.671088][T26907] loop1: detected capacity change from 0 to 512
[  462.674941][T26894] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.6698: Failed to acquire dquot type 0
[  462.677949][T26907] EXT4-fs: Ignoring removed nobh option
[  462.703335][T26902] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.6700: corrupted inode contents
[  462.716246][T26894] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.6698: corrupted inode contents
[  462.729403][T26902] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.6700: mark_inode_dirty error
[  462.729908][T26894] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.6698: mark_inode_dirty error
[  462.753308][T26907] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.6702: corrupted inode contents
[  462.766512][T26894] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.6698: corrupted inode contents
[  462.767412][T26902] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.6700: Failed to acquire dquot type 0
[  462.779880][T26894] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.6698: mark_inode_dirty error
[  462.791545][T26907] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.6702: mark_inode_dirty error
[  462.812373][T26894] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.6698: corrupted inode contents
[  462.814956][T26902] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.6700: corrupted inode contents
[  462.835215][T26907] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.6702: corrupted inode contents
[  462.837548][T26902] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.6700: mark_inode_dirty error
[  462.853545][T26894] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem
[  462.861142][T26902] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.6700: corrupted inode contents
[  462.870692][T26907] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.6702: mark_inode_dirty error
[  462.893300][T26894] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.6698: corrupted inode contents
[  462.906181][T26894] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.6698: mark_inode_dirty error
[  462.909626][T26907] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.6702: Failed to acquire dquot type 0
[  462.919064][T26902] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.6700: mark_inode_dirty error
[  462.931052][T26907] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.6702: corrupted inode contents
[  462.940089][T26894] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem
[  462.952736][T26907] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.6702: mark_inode_dirty error
[  462.960992][T26894] EXT4-fs (loop5): 1 truncate cleaned up
[  462.972178][T26902] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.6700: corrupted inode contents
[  462.980864][T26894] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  463.002567][T26894] ext4 filesystem being mounted at /235/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  463.021023][T26907] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.6702: corrupted inode contents
[  463.035232][T26902] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[  463.046273][T26902] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.6700: corrupted inode contents
[  463.047351][T26907] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.6702: mark_inode_dirty error
[  463.058922][T26902] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.6700: mark_inode_dirty error
[  463.081415][T26902] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[  463.091174][T26902] EXT4-fs (loop2): 1 truncate cleaned up
[  463.099531][T26902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  463.119138][T26902] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  463.143693][T22071] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  463.163912][T26907] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.6702: corrupted inode contents
[  463.181940][T26907] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[  463.190868][T26907] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.6702: corrupted inode contents
[  463.203856][T26907] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.6702: mark_inode_dirty error
[  463.235310][T26907] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[  463.253407][T26907] EXT4-fs (loop1): 1 truncate cleaned up
[  463.254474][T26902] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  463.269800][T26907] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  463.271071][T26926] netlink: 'syz.0.6710': attribute type 1 has an invalid length.
[  463.292007][T26926] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  463.364379][T26907] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  463.411580][T26934] loop5: detected capacity change from 0 to 128
[  463.422991][   T29] kauditd_printk_skb: 741 callbacks suppressed
[  463.423007][   T29] audit: type=1326 audit(1755198388.273:11186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26906 comm="syz.1.6702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e6e95ebe9 code=0x7ffc0000
[  463.454730][   T29] audit: type=1326 audit(1755198388.273:11187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26906 comm="syz.1.6702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e6e95ebe9 code=0x7ffc0000
[  463.478468][   T29] audit: type=1326 audit(1755198388.313:11188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26906 comm="syz.1.6702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3e6e95ebe9 code=0x7ffc0000
[  463.502307][   T29] audit: type=1326 audit(1755198388.313:11189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26906 comm="syz.1.6702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e6e95ebe9 code=0x7ffc0000
[  463.526043][   T29] audit: type=1326 audit(1755198388.313:11190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26906 comm="syz.1.6702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e6e95ebe9 code=0x7ffc0000
[  463.600500][   T29] audit: type=1326 audit(1755198388.313:11191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26906 comm="syz.1.6702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e6e95ebe9 code=0x7ffc0000
[  463.624724][   T29] audit: type=1326 audit(1755198388.313:11192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26906 comm="syz.1.6702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e6e95ebe9 code=0x7ffc0000
[  463.648414][   T29] audit: type=1326 audit(1755198388.313:11193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26906 comm="syz.1.6702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e6e95ebe9 code=0x7ffc0000
[  463.672157][   T29] audit: type=1326 audit(1755198388.363:11194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26906 comm="syz.1.6702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e6e95ebe9 code=0x7ffc0000
[  463.695977][   T29] audit: type=1326 audit(1755198388.363:11195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26906 comm="syz.1.6702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e6e95ebe9 code=0x7ffc0000
[  463.739035][T26951] netlink: 'syz.2.6719': attribute type 8 has an invalid length.
[  463.767638][T26948] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  463.811836][T26958] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6721'.
[  463.833822][T26952] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6718'.
[  463.845392][T26963] loop1: detected capacity change from 0 to 128
[  464.128254][T26994] loop2: detected capacity change from 0 to 512
[  464.131642][T26993] loop1: detected capacity change from 0 to 128
[  464.141078][T26994] EXT4-fs: Ignoring removed nobh option
[  464.178710][T26994] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.6736: corrupted inode contents
[  464.191417][T26999] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6737'.
[  464.200942][T26994] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.6736: mark_inode_dirty error
[  464.227083][T26994] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.6736: corrupted inode contents
[  464.268348][T26994] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.6736: mark_inode_dirty error
[  464.287705][T26994] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.6736: Failed to acquire dquot type 0
[  464.306243][T27008] 9pnet_fd: p9_fd_create_tcp (27008): problem connecting socket to 127.0.0.1
[  464.361278][T26994] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.6736: corrupted inode contents
[  464.380996][T26994] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.6736: mark_inode_dirty error
[  464.392913][T26994] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.6736: corrupted inode contents
[  464.407620][T26994] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.6736: mark_inode_dirty error
[  464.430710][T26994] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.6736: corrupted inode contents
[  464.550108][T26994] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[  464.577443][T26994] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.6736: corrupted inode contents
[  464.591508][T26994] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.6736: mark_inode_dirty error
[  464.603382][T26994] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[  464.614445][T26994] EXT4-fs (loop2): 1 truncate cleaned up
[  464.620825][T26994] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  464.634692][T26994] ext4 filesystem being mounted at /339/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  464.694972][T20296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  465.033910][T27033] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6748'.
[  465.215470][T27043] netlink: 'syz.1.6752': attribute type 8 has an invalid length.
[  465.217058][T27049] loop5: detected capacity change from 0 to 512
[  465.232783][T27049] EXT4-fs: Ignoring removed nobh option
[  465.255974][T27049] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.6756: corrupted inode contents
[  465.268837][T27049] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.6756: mark_inode_dirty error
[  465.330529][T27049] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.6756: corrupted inode contents
[  465.357883][T27049] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.6756: mark_inode_dirty error
[  465.386221][T27049] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.6756: Failed to acquire dquot type 0
[  465.388861][T27048] netlink: 'syz.3.6755': attribute type 1 has an invalid length.
[  465.406313][T27048] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  465.421428][T27059] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  465.438202][T27049] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.6756: corrupted inode contents
[  465.455411][T27049] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.6756: mark_inode_dirty error
[  465.467103][T27055] tipc: Resetting bearer <eth:syzkaller0>
[  465.480470][T27055] tipc: Disabling bearer <eth:syzkaller0>
[  465.487116][T27049] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.6756: corrupted inode contents
[  465.500460][T27049] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.6756: mark_inode_dirty error
[  465.525817][T27049] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.6756: corrupted inode contents
[  465.539270][T27049] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem
[  465.561567][T27049] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.6756: corrupted inode contents
[  465.576236][T27049] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.6756: mark_inode_dirty error
[  465.588960][T27049] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem
[  465.600153][T27049] EXT4-fs (loop5): 1 truncate cleaned up
[  465.608734][T27065] loop1: detected capacity change from 0 to 512
[  465.617251][T27065] EXT4-fs: Ignoring removed mblk_io_submit option
[  465.625007][T27065] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  465.671808][T27049] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  465.687066][T27065] EXT4-fs (loop1): 1 truncate cleaned up
[  465.709826][T27065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  465.737292][T27049] ext4 filesystem being mounted at /247/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  465.791255][T27079] loop2: detected capacity change from 0 to 512
[  465.807817][T27079] EXT4-fs: Ignoring removed nobh option
[  465.834931][T27079] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.6767: corrupted inode contents
[  465.854633][T27049] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  465.854705][T27079] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.6767: mark_inode_dirty error
[  465.887380][T27079] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.6767: corrupted inode contents
[  465.912875][T27079] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.6767: mark_inode_dirty error
[  465.970971][T27079] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.6767: Failed to acquire dquot type 0
[  465.990221][T27079] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.6767: corrupted inode contents
[  466.032016][T27092] netlink: 'syz.0.6771': attribute type 7 has an invalid length.
[  466.073103][T27079] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.6767: mark_inode_dirty error
[  466.123400][T27079] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.6767: corrupted inode contents
[  466.154630][T27079] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.6767: mark_inode_dirty error
[  466.166907][T27079] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.6767: corrupted inode contents
[  466.218681][T27079] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[  466.241563][T27079] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.6767: corrupted inode contents
[  466.254649][T27079] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.6767: mark_inode_dirty error
[  466.267967][T27079] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[  466.288466][T27079] EXT4-fs (loop2): 1 truncate cleaned up
[  466.295030][T27079] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  466.309727][T27079] ext4 filesystem being mounted at /342/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  466.360597][T27105] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6776'.
[  466.383922][T20296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  466.439226][T27117] random: crng reseeded on system resumption
[  466.537990][T23488] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  466.753384][T27135] netlink: 'syz.2.6787': attribute type 7 has an invalid length.
[  466.787447][T27138] loop2: detected capacity change from 0 to 512
[  466.798824][T27138] EXT4-fs: Ignoring removed nobh option
[  466.836308][T27138] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.6788: corrupted inode contents
[  466.858708][T27138] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.6788: mark_inode_dirty error
[  466.873683][T27138] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.6788: corrupted inode contents
[  466.901711][T27138] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.6788: mark_inode_dirty error
[  466.918912][T27148] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  466.928279][T27138] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.6788: Failed to acquire dquot type 0
[  466.949171][T27138] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.6788: corrupted inode contents
[  466.971727][T27138] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.6788: mark_inode_dirty error
[  466.990898][T27138] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.6788: corrupted inode contents
[  467.004223][T27138] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.6788: mark_inode_dirty error
[  467.017398][T27138] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.6788: corrupted inode contents
[  467.047101][T27138] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[  467.061272][T27138] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.6788: corrupted inode contents
[  467.089303][T27159] netlink: 'syz.3.6796': attribute type 21 has an invalid length.
[  467.119002][T27138] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.6788: mark_inode_dirty error
[  467.130671][T27138] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[  467.131918][T27162] netlink: 'syz.0.6797': attribute type 1 has an invalid length.
[  467.141759][T27138] EXT4-fs (loop2): 1 truncate cleaned up
[  467.148888][T27162] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  467.154800][T27138] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  467.181999][T27138] ext4 filesystem being mounted at /346/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  467.224889][T20296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  467.341147][T27193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6810'.
[  467.672787][T27221] random: crng reseeded on system resumption
[  467.931322][T27252] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6835'.
[  468.344686][T27283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6848'.
[  468.612273][T27289] netlink: 'syz.2.6849': attribute type 1 has an invalid length.
[  468.621312][T27289] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  468.747564][T27288] can0: slcan on ttyS3.
[  468.921806][T27288] can0 (unregistered): slcan off ttyS3.
[  468.965926][T27289] can0: slcan on ttyS3.
[  469.075348][T27288] loop2: detected capacity change from 0 to 512
[  469.109409][T27288] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  469.148433][T27288] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002]
[  469.149447][T27296] netlink: 'syz.3.6851': attribute type 21 has an invalid length.
[  469.156603][T27288] System zones: 1-12
[  469.168385][T27288] EXT4-fs (loop2): orphan cleanup on readonly fs
[  469.186447][T27288] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6849: bg 0: block 361: padding at end of block bitmap is not set
[  469.216058][   T29] kauditd_printk_skb: 639 callbacks suppressed
[  469.216073][   T29] audit: type=1326 audit(1755199162.068:11824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27306 comm="syz.1.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e6e95ebe9 code=0x7ffc0000
[  469.252152][T27288] EXT4-fs (loop2): Remounting filesystem read-only
[  469.262276][T27310] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  469.292589][T27288] EXT4-fs (loop2): 1 truncate cleaned up
[  469.298733][T27288] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  469.340038][   T29] audit: type=1326 audit(1755199162.068:11825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27306 comm="syz.1.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f3e6e95ebe9 code=0x7ffc0000
[  469.363686][   T29] audit: type=1326 audit(1755199162.068:11826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27306 comm="syz.1.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e6e95ebe9 code=0x7ffc0000
[  469.387919][   T29] audit: type=1326 audit(1755199162.068:11827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27306 comm="syz.1.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3e6e95ebe9 code=0x7ffc0000
[  469.411735][   T29] audit: type=1326 audit(1755199162.068:11828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27306 comm="syz.1.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e6e95ebe9 code=0x7ffc0000
[  469.435398][   T29] audit: type=1326 audit(1755199162.068:11829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27306 comm="syz.1.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3e6e95ebe9 code=0x7ffc0000
[  469.458913][   T29] audit: type=1326 audit(1755199162.068:11830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27306 comm="syz.1.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e6e95ebe9 code=0x7ffc0000
[  469.482778][   T29] audit: type=1326 audit(1755199162.068:11831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27306 comm="syz.1.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e6e95ebe9 code=0x7ffc0000
[  469.482810][   T29] audit: type=1326 audit(1755199162.068:11832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27306 comm="syz.1.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e6e95ebe9 code=0x7ffc0000
[  469.482836][   T29] audit: type=1326 audit(1755199162.068:11833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27306 comm="syz.1.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e6e95ebe9 code=0x7ffc0000
[  469.781105][T27287] can0 (unregistered): slcan off ttyS3.
[  469.841441][T27381] syz_tun: entered allmulticast mode
[  469.853265][T20296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  469.869459][T27379] syz_tun: left allmulticast mode
[  470.054861][T27398] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6873'.
[  470.322199][T27412] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  470.333284][   T31] tipc: Resetting bearer <eth:syzkaller0>
[  470.390424][T27408] tipc: Resetting bearer <eth:syzkaller0>
[  470.431423][T27408] tipc: Disabling bearer <eth:syzkaller0>
[  470.603923][T27436] netlink: 'syz.1.6883': attribute type 21 has an invalid length.
[  470.605415][T27430] netlink: 'syz.3.6882': attribute type 1 has an invalid length.
[  470.681759][T27430] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  471.109792][T27454] loop2: detected capacity change from 0 to 1024
[  471.121917][T27454] EXT4-fs: Ignoring removed oldalloc option
[  471.180696][T27454] ext4: Unknown parameter 'dont_measure'
[  471.238832][T27466] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  471.265699][T27469] random: crng reseeded on system resumption
[  471.609934][T27504] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6910'.
[  471.653061][T27506] netlink: 'syz.3.6911': attribute type 21 has an invalid length.
[  471.720454][T27520] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6916'.
[  471.961127][T27543] FAULT_INJECTION: forcing a failure.
[  471.961127][T27543] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  471.974222][T27543] CPU: 1 UID: 0 PID: 27543 Comm: syz.2.6926 Tainted: G        W           6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) 
[  471.974316][T27543] Tainted: [W]=WARN
[  471.974320][T27543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  471.974327][T27543] Call Trace:
[  471.974332][T27543]  <TASK>
[  471.974337][T27543]  __dump_stack+0x1d/0x30
[  471.974404][T27543]  dump_stack_lvl+0xe8/0x140
[  471.974415][T27543]  dump_stack+0x15/0x1b
[  471.974444][T27543]  should_fail_ex+0x265/0x280
[  471.974455][T27543]  should_fail+0xb/0x20
[  471.974533][T27543]  should_fail_usercopy+0x1a/0x20
[  471.974545][T27543]  _copy_from_user+0x1c/0xb0
[  471.974560][T27543]  __sys_sendto+0x19e/0x330
[  471.974614][T27543]  __x64_sys_sendto+0x76/0x90
[  471.974631][T27543]  x64_sys_call+0x2d05/0x2ff0
[  471.974643][T27543]  do_syscall_64+0xd2/0x200
[  471.974657][T27543]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  471.974733][T27543]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  471.974746][T27543]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.974818][T27543] RIP: 0033:0x7f431305ebe9
[  471.974828][T27543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  471.974838][T27543] RSP: 002b:00007f4311abf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  471.974849][T27543] RAX: ffffffffffffffda RBX: 00007f4313285fa0 RCX: 00007f431305ebe9
[  471.974856][T27543] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008
[  471.974862][T27543] RBP: 00007f4311abf090 R08: 0000200000b63fe4 R09: 000000000000001c
[  471.974869][T27543] R10: 0000000022004001 R11: 0000000000000246 R12: 0000000000000001
[  471.974902][T27543] R13: 00007f4313286038 R14: 00007f4313285fa0 R15: 00007ffc45f63258
[  471.974912][T27543]  </TASK>
[  472.258717][T27559] loop1: detected capacity change from 0 to 512
[  472.267847][T27559] EXT4-fs: Ignoring removed nobh option
[  472.310251][T27559] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.6933: corrupted inode contents
[  472.323065][T27559] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.6933: mark_inode_dirty error
[  472.334825][T27559] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.6933: corrupted inode contents
[  472.346793][T27559] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.6933: mark_inode_dirty error
[  472.358455][T27559] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.6933: Failed to acquire dquot type 0
[  472.371935][T27559] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.6933: corrupted inode contents
[  472.384988][T27559] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.6933: mark_inode_dirty error
[  472.396553][T27559] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.6933: corrupted inode contents
[  472.408724][T27559] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.6933: mark_inode_dirty error
[  472.421854][T27559] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.6933: corrupted inode contents
[  472.434667][T27559] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[  472.443747][T27559] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.6933: corrupted inode contents
[  472.456598][T27559] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.6933: mark_inode_dirty error
[  472.468077][T27559] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[  472.477484][T27559] EXT4-fs (loop1): 1 truncate cleaned up
[  472.484123][T27559] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  472.496972][T27559] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  472.540359][T23488] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  472.853365][T27592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6945'.
[  472.941648][T27598] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6946'.
[  473.142954][T27623] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6959'.
[  473.234037][T27627] netlink: 'syz.5.6961': attribute type 21 has an invalid length.
[  473.289456][T27638] loop1: detected capacity change from 0 to 512
[  473.316661][T27638] EXT4-fs: Ignoring removed nobh option
[  473.350863][T27643] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  473.352180][T27638] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.6964: corrupted inode contents
[  473.410003][T27638] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.6964: mark_inode_dirty error
[  473.438859][T27638] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.6964: corrupted inode contents
[  473.451223][T27638] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.6964: mark_inode_dirty error
[  473.462874][T27638] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.6964: Failed to acquire dquot type 0
[  473.475653][T27638] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.6964: corrupted inode contents
[  473.487864][T27638] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.6964: mark_inode_dirty error
[  473.501955][T27638] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.6964: corrupted inode contents
[  473.518141][T27654] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6970'.
[  473.524082][T27638] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.6964: mark_inode_dirty error
[  473.538833][T27638] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.6964: corrupted inode contents
[  473.569371][T27638] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[  473.589822][T27660] netlink: 'syz.5.6973': attribute type 21 has an invalid length.
[  473.595794][T27638] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.6964: corrupted inode contents
[  473.615625][T27638] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.6964: mark_inode_dirty error
[  473.627341][T27665] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6974'.
[  473.628398][T27638] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[  473.636431][T27665] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6974'.
[  473.646419][T27638] EXT4-fs (loop1): 1 truncate cleaned up
[  473.661151][T27638] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  473.676650][T27638] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  473.699700][T27667] bridge_slave_0: left allmulticast mode
[  473.705398][T27667] bridge_slave_0: left promiscuous mode
[  473.711198][T27667] bridge0: port 1(bridge_slave_0) entered disabled state
[  473.731313][T27667] bridge_slave_1: left allmulticast mode
[  473.737119][T27667] bridge_slave_1: left promiscuous mode
[  473.742928][T27667] bridge0: port 2(bridge_slave_1) entered disabled state
[  473.759401][T27667] bond0: (slave bond_slave_0): Releasing backup interface
[  473.780432][T27667] bond0: (slave bond_slave_1): Releasing backup interface
[  473.792243][T27667] team0: Port device C removed
[  473.800282][T27667] team0: Port device team_slave_1 removed
[  473.841856][T23488] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  473.882982][T27678] random: crng reseeded on system resumption
[  473.907441][T27680] netlink: 'syz.0.6980': attribute type 3 has an invalid length.
[  474.027654][T27693] netlink: 'syz.0.6986': attribute type 21 has an invalid length.
[  474.283566][   T29] kauditd_printk_skb: 337 callbacks suppressed
[  474.283609][   T29] audit: type=1400 audit(1755199935.142:12167): avc:  denied  { recv } for  pid=27726 comm="syz.1.7000" saddr=10.128.0.163 src=30036 daddr=10.128.0.207 dest=60294 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  474.342658][   T29] audit: type=1400 audit(1755199935.152:12168): avc:  denied  { kexec_image_load } for  pid=27728 comm="syz.3.7001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  474.362944][   T29] audit: type=1400 audit(1755199935.152:12169): avc:  denied  { read write } for  pid=23488 comm="syz-executor" name="loop1" dev="devtmpfs" ino=1503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  474.387546][   T29] audit: type=1400 audit(1755199935.152:12170): avc:  denied  { open } for  pid=23488 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=1503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  474.412054][   T29] audit: type=1400 audit(1755199935.152:12171): avc:  denied  { ioctl } for  pid=23488 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=1503 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  474.438024][   T29] audit: type=1400 audit(1755199935.182:12172): avc:  denied  { prog_load } for  pid=27724 comm="syz.0.6999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  474.457412][   T29] audit: type=1400 audit(1755199935.182:12173): avc:  denied  { bpf } for  pid=27724 comm="syz.0.6999" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  474.478263][   T29] audit: type=1400 audit(1755199935.182:12174): avc:  denied  { perfmon } for  pid=27724 comm="syz.0.6999" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  474.500244][   T29] audit: type=1400 audit(1755199935.182:12175): avc:  denied  { prog_run } for  pid=27724 comm="syz.0.6999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  474.519765][   T29] audit: type=1400 audit(1755199935.182:12176): avc:  denied  { bind } for  pid=27716 comm="syz.2.6996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  474.716742][T27748] netlink: 'syz.3.7008': attribute type 1 has an invalid length.
[  474.726226][T27748] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  474.988087][T27769] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  475.060783][T27774] netlink: 'syz.5.7019': attribute type 1 has an invalid length.
[  475.068810][T27774] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  475.160903][T27792] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  475.216535][T27799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7032'.
[  475.637417][T27825] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7040'.
[  475.715627][T27832] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7043'.
[  475.724522][T27827] netlink: 'syz.5.7042': attribute type 21 has an invalid length.
[  475.742178][T27824] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  475.749557][T27823] tipc: Resetting bearer <eth:syzkaller0>
[  475.787488][T27823] tipc: Disabling bearer <eth:syzkaller0>
[  475.809950][T27843] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7047'.
[  475.847057][T27848] netlink: 340 bytes leftover after parsing attributes in process `syz.3.7049'.
[  476.059740][T27874] FAULT_INJECTION: forcing a failure.
[  476.059740][T27874] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  476.073034][T27874] CPU: 0 UID: 0 PID: 27874 Comm: syz.1.7057 Tainted: G        W           6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) 
[  476.073069][T27874] Tainted: [W]=WARN
[  476.073098][T27874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  476.073108][T27874] Call Trace:
[  476.073113][T27874]  <TASK>
[  476.073120][T27874]  __dump_stack+0x1d/0x30
[  476.073141][T27874]  dump_stack_lvl+0xe8/0x140
[  476.073160][T27874]  dump_stack+0x15/0x1b
[  476.073177][T27874]  should_fail_ex+0x265/0x280
[  476.073247][T27874]  should_fail+0xb/0x20
[  476.073261][T27874]  should_fail_usercopy+0x1a/0x20
[  476.073301][T27874]  _copy_from_user+0x1c/0xb0
[  476.073328][T27874]  ___sys_sendmsg+0xc1/0x1d0
[  476.073424][T27874]  __x64_sys_sendmsg+0xd4/0x160
[  476.073446][T27874]  x64_sys_call+0x191e/0x2ff0
[  476.073464][T27874]  do_syscall_64+0xd2/0x200
[  476.073484][T27874]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  476.073555][T27874]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  476.073578][T27874]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.073597][T27874] RIP: 0033:0x7f3e6e95ebe9
[  476.073613][T27874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  476.073633][T27874] RSP: 002b:00007f3e6d3bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  476.073728][T27874] RAX: ffffffffffffffda RBX: 00007f3e6eb85fa0 RCX: 00007f3e6e95ebe9
[  476.073767][T27874] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  476.073837][T27874] RBP: 00007f3e6d3bf090 R08: 0000000000000000 R09: 0000000000000000
[  476.073850][T27874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  476.073863][T27874] R13: 00007f3e6eb86038 R14: 00007f3e6eb85fa0 R15: 00007ffd96249098
[  476.073886][T27874]  </TASK>
[  476.260258][T27875] lo speed is unknown, defaulting to 1000
[  476.266154][T27875] lo speed is unknown, defaulting to 1000
[  476.286616][T27875] lo speed is unknown, defaulting to 1000
[  476.293522][T27875] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  476.307697][T27875] lo speed is unknown, defaulting to 1000
[  476.321248][T27883] loop1: detected capacity change from 0 to 512
[  476.328747][T27883] EXT4-fs: Ignoring removed nobh option
[  476.372309][T27875] lo speed is unknown, defaulting to 1000
[  476.379502][T27883] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.7063: corrupted inode contents
[  476.382413][T27875] lo speed is unknown, defaulting to 1000
[  476.394349][T27891] netlink: 'syz.3.7066': attribute type 1 has an invalid length.
[  476.407165][T27891] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  476.407967][T27883] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.7063: mark_inode_dirty error
[  476.424902][T27875] lo speed is unknown, defaulting to 1000
[  476.441159][T27875] lo speed is unknown, defaulting to 1000
[  476.447222][T27875] lo speed is unknown, defaulting to 1000
[  476.453539][T27875] lo speed is unknown, defaulting to 1000
[  476.481757][T27883] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.7063: corrupted inode contents
[  476.498406][T27883] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.7063: mark_inode_dirty error
[  476.511420][T27883] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.7063: Failed to acquire dquot type 0
[  476.523476][T27883] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.7063: corrupted inode contents
[  476.537130][T27883] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.7063: mark_inode_dirty error
[  476.552694][T27883] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.7063: corrupted inode contents
[  476.581030][T27883] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.7063: mark_inode_dirty error
[  476.596501][T27883] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.7063: corrupted inode contents
[  476.609895][T27883] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[  476.619556][T27883] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.7063: corrupted inode contents
[  476.632796][T27883] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.7063: mark_inode_dirty error
[  476.644265][T27883] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[  476.654704][T27883] EXT4-fs (loop1): 1 truncate cleaned up
[  476.660880][T27883] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  476.708376][T27883] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  476.775768][T27883] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  476.785208][T27912] netlink: 'syz.0.7072': attribute type 1 has an invalid length.
[  476.796461][T27912] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  476.906919][T27926] loop2: detected capacity change from 0 to 1024
[  476.917216][T27926] EXT4-fs: Ignoring removed bh option
[  476.923172][T27926] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  476.935686][T27926] EXT4-fs error (device loop2): ext4_quota_enable:7124: comm syz.2.7077: inode #2304: comm syz.2.7077: iget: illegal inode #
[  476.948792][T27926] EXT4-fs (loop2): Remounting filesystem read-only
[  476.955401][T27926] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix.
[  476.970874][T27926] EXT4-fs (loop2): mount failed
[  477.011171][T27934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7080'.
[  477.077020][T27942] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  477.307621][T27970] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7097'.
[  477.410080][T27989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7105'.
[  477.557786][T27999] netlink: 'syz.3.7109': attribute type 21 has an invalid length.
[  477.792640][T28021] netlink: 'syz.0.7117': attribute type 1 has an invalid length.
[  477.802373][T28021] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  478.334873][T28041] netlink: 'syz.0.7121': attribute type 21 has an invalid length.
[  478.797730][T28058] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7130'.
[  479.430382][T28103] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7149'.
[  479.500360][   T29] kauditd_printk_skb: 446 callbacks suppressed
[  479.500376][   T29] audit: type=1326 audit(1755200196.354:12621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28106 comm="syz.2.7151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431305ebe9 code=0x7ffc0000
[  479.530458][   T29] audit: type=1326 audit(1755200196.354:12622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28106 comm="syz.2.7151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f431305ebe9 code=0x7ffc0000
[  479.554368][   T29] audit: type=1326 audit(1755200196.354:12623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28106 comm="syz.2.7151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431305ebe9 code=0x7ffc0000
[  479.577963][   T29] audit: type=1326 audit(1755200196.354:12624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28106 comm="syz.2.7151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f431305ebe9 code=0x7ffc0000
[  479.601502][   T29] audit: type=1326 audit(1755200196.354:12625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28106 comm="syz.2.7151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431305ebe9 code=0x7ffc0000
[  479.691414][T28122] loop2: detected capacity change from 0 to 512
[  479.701813][T28122] EXT4-fs: Ignoring removed nobh option
[  479.708092][   T29] audit: type=1326 audit(1755200196.535:12626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28118 comm="syz.2.7155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431305ebe9 code=0x7ffc0000
[  479.709524][T28115] netlink: 'syz.3.7153': attribute type 1 has an invalid length.
[  479.731927][   T29] audit: type=1326 audit(1755200196.535:12627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28118 comm="syz.2.7155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431305ebe9 code=0x7ffc0000
[  479.763250][   T29] audit: type=1326 audit(1755200196.535:12628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28118 comm="syz.2.7155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f431305ebe9 code=0x7ffc0000
[  479.787019][   T29] audit: type=1326 audit(1755200196.535:12629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28118 comm="syz.2.7155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431305ebe9 code=0x7ffc0000
[  479.810764][   T29] audit: type=1326 audit(1755200196.535:12630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28118 comm="syz.2.7155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f431305ebe9 code=0x7ffc0000
[  479.834513][T28115] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  479.896531][T28122] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.7156: corrupted inode contents
[  479.908949][T28122] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.7156: mark_inode_dirty error
[  479.923909][T28122] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.7156: corrupted inode contents
[  479.959730][T28122] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.7156: mark_inode_dirty error
[  479.976046][T28122] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.7156: Failed to acquire dquot type 0
[  479.989335][T28122] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.7156: corrupted inode contents
[  480.005828][T28122] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.7156: mark_inode_dirty error
[  480.031663][T28122] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.7156: corrupted inode contents
[  480.049310][T28136] syz.5.7160 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  480.063525][T28136] netdevsim netdevsim5: Direct firmware load for ..€ failed with error -2
[  480.086500][T28122] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.7156: mark_inode_dirty error
[  480.104185][T28122] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.7156: corrupted inode contents
[  480.119966][T28122] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[  480.129815][T28122] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.7156: corrupted inode contents
[  480.183519][T28122] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.7156: mark_inode_dirty error
[  480.205454][T28122] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[  480.219990][T28122] EXT4-fs (loop2): 1 truncate cleaned up
[  480.226258][T28122] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  480.240025][T28122] ext4 filesystem being mounted at /401/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  480.328351][T20296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  480.526309][T28166] hub 8-0:1.0: USB hub found
[  480.530991][T28166] hub 8-0:1.0: 8 ports detected
[  480.548459][T28175] __nla_validate_parse: 1 callbacks suppressed
[  480.548472][T28175] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7176'.
[  480.616455][T28184] netlink: 'syz.5.7179': attribute type 5 has an invalid length.
[  480.639515][T28186] netlink: 332 bytes leftover after parsing attributes in process `syz.1.7177'.
[  480.765407][T28202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7187'.
[  480.783356][T28200] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7186'.
[  480.846381][T28207] netlink: 'syz.1.7189': attribute type 1 has an invalid length.
[  480.914293][T28207] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  481.266511][T28229] lo speed is unknown, defaulting to 1000
[  481.382987][T28247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7205'.
[  481.613269][T28271] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2
[  481.625381][T28273] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7216'.
[  481.697159][T28278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7218'.
[  481.712700][T28281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7220'.
[  481.757988][T28291] netdevsim netdevsim0: Direct firmware load for ..€ failed with error -2
[  481.801130][T28299] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7229'.
[  481.856307][T28305] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7226'.
[  482.199340][T28332] netlink: 'syz.3.7242': attribute type 5 has an invalid length.
[  482.234609][T28336] netlink: 'syz.3.7244': attribute type 3 has an invalid length.
[  482.394961][ T3365] usb usb8-port1: attempt power cycle
[  482.457971][T28347] netlink: 'syz.3.7249': attribute type 27 has an invalid length.
[  482.483467][T28347] bridge0: port 2(bridge_slave_1) entered disabled state
[  482.490836][T28347] bridge0: port 1(bridge_slave_0) entered disabled state
[  482.558758][T28348] 8021q: adding VLAN 0 to HW filter on device bond0
[  482.566711][T28348] 8021q: adding VLAN 0 to HW filter on device team0
[  482.574296][T28347] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370
[  482.582728][T28348] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  482.598382][   T31] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  482.608355][   T31] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  482.622737][   T31] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  482.632752][   T31] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  482.741872][T28360] netlink: 'syz.1.7254': attribute type 5 has an invalid length.
[  482.879481][T28369] netlink: 'syz.1.7258': attribute type 1 has an invalid length.
[  482.889322][T28369] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  482.965345][T28377] bond_slave_1: entered promiscuous mode
[  482.972304][T28377] bond0: (slave bond_slave_1): Releasing backup interface
[  482.980939][T28377] bond_slave_1 (unregistering): left promiscuous mode
[  483.951909][T28436] siw: device registration error -23
[  483.951951][T28435] siw: device registration error -23
[  484.254288][ T3365] usb usb8-port1: unable to enumerate USB device
[  484.437210][T28453] netlink: 'syz.2.7289': attribute type 21 has an invalid length.
[  484.538185][   T29] kauditd_printk_skb: 681 callbacks suppressed
[  484.538200][   T29] audit: type=1326 audit(1755200457.403:13310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28457 comm="syz.5.7291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac681febe9 code=0x7ffc0000
[  484.569773][   T29] audit: type=1326 audit(1755200457.403:13311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28457 comm="syz.5.7291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac681febe9 code=0x7ffc0000
[  484.594021][   T29] audit: type=1326 audit(1755200457.403:13312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28457 comm="syz.5.7291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac681febe9 code=0x7ffc0000
[  484.618301][   T29] audit: type=1326 audit(1755200457.403:13313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28457 comm="syz.5.7291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac681febe9 code=0x7ffc0000
[  484.643114][   T29] audit: type=1326 audit(1755200457.403:13314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28457 comm="syz.5.7291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fac681febe9 code=0x7ffc0000
[  484.668568][   T29] audit: type=1326 audit(1755200457.403:13315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28457 comm="syz.5.7291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac681febe9 code=0x7ffc0000
[  484.694062][   T29] audit: type=1326 audit(1755200457.403:13316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28459 comm="syz.5.7291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fac682314a5 code=0x7ffc0000
[  484.719116][   T29] audit: type=1326 audit(1755200457.403:13317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28457 comm="syz.5.7291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac681febe9 code=0x7ffc0000
[  484.748332][   T29] audit: type=1326 audit(1755200457.403:13318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28457 comm="syz.5.7291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fac681febe9 code=0x7ffc0000
[  484.772759][   T29] audit: type=1326 audit(1755200457.403:13319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28457 comm="syz.5.7291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac681febe9 code=0x7ffc0000
[  485.072535][T28477] netdevsim netdevsim5: Direct firmware load for ..€ failed with error -2
[  485.185237][T28494] random: crng reseeded on system resumption
[  485.206705][T28489] lo speed is unknown, defaulting to 1000
[  485.237822][T28496] siw: device registration error -23
[  485.407144][T28518] netlink: 'syz.2.7310': attribute type 21 has an invalid length.
[  485.465670][T28524] netdevsim netdevsim0: Direct firmware load for ..€ failed with error -2
[  486.054781][T28560] netdevsim netdevsim1: Direct firmware load for ..€ failed with error -2
[  486.067852][T28562] lo speed is unknown, defaulting to 1000
[  486.142975][T28568] __nla_validate_parse: 7 callbacks suppressed
[  486.142991][T28568] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7335'.
[  486.539380][T28597] netlink: 'syz.2.7348': attribute type 3 has an invalid length.
[  486.577068][T28600] siw: device registration error -23
[  486.905944][T28623] loop2: detected capacity change from 0 to 512
[  486.912782][T28623] EXT4-fs: Ignoring removed nobh option
[  486.952977][T28623] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.7358: iget: bad i_size value: 38620345925642
[  486.977816][T28623] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.7358: couldn't read orphan inode 15 (err -117)
[  487.030614][T28623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  487.100657][T28632] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7358'.
[  487.141589][T28629] lo speed is unknown, defaulting to 1000
[  487.244993][T28641] netlink: 'syz.1.7363': attribute type 21 has an invalid length.
[  487.467865][T28660] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7370'.
[  487.524983][T28664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7372'.
[  487.559385][T28666] netlink: 'syz.3.7373': attribute type 3 has an invalid length.
[  487.587546][   T31] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:1: bg 0: block 5: invalid block bitmap
[  487.612055][T28673] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7376'.
[  487.628692][   T31] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  487.635028][T28670] lo speed is unknown, defaulting to 1000
[  487.641178][   T31] EXT4-fs (loop2): This should not happen!! Data will be lost
[  487.641178][   T31] 
[  487.656639][   T31] EXT4-fs (loop2): Total free blocks count 0
[  487.662669][   T31] EXT4-fs (loop2): Free/Dirty block details
[  487.668605][   T31] EXT4-fs (loop2): free_blocks=0
[  487.673581][   T31] EXT4-fs (loop2): dirty_blocks=16016
[  487.678950][   T31] EXT4-fs (loop2): Block reservation details
[  487.685042][   T31] EXT4-fs (loop2): i_reserved_data_blocks=16016
[  487.717690][T25140] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[  487.891251][T28707] siw: device registration error -23
[  487.954815][T28718] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7395'.
[  488.024040][T28724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7399'.
[  488.050693][T28729] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7397'.
[  488.154317][T28739] netlink: 'syz.5.7404': attribute type 21 has an invalid length.
[  488.209656][T28744] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7406'.
[  488.239375][T28753] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7410'.
[  488.276949][T28757] netdevsim netdevsim5: Direct firmware load for ..€ failed with error -2
[  488.321307][T28766] netlink: 'syz.1.7417': attribute type 5 has an invalid length.
[  488.483004][T28782] lo speed is unknown, defaulting to 1000
[  488.726405][T28797] netlink: 'syz.1.7428': attribute type 1 has an invalid length.
[  488.756566][T28797] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  488.942945][T28800] bond0: (slave bond_slave_1): Releasing backup interface
[  489.193752][T28834] bond0: (slave bond_slave_1): Releasing backup interface
[  489.219898][T28838] netlink: 'syz.5.7448': attribute type 5 has an invalid length.
[  489.352598][T28856] netdevsim netdevsim0: Direct firmware load for ..€ failed with error -2
[  489.380481][T28863] loop2: detected capacity change from 0 to 1024
[  489.399355][T28863] EXT4-fs: Ignoring removed bh option
[  489.473327][T28863] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  489.497839][T28863] EXT4-fs error (device loop2): ext4_quota_enable:7124: comm syz.2.7458: inode #2304: comm syz.2.7458: iget: illegal inode #
[  489.512249][T28863] EXT4-fs (loop2): Remounting filesystem read-only
[  489.518773][T28863] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix.
[  489.547313][   T29] kauditd_printk_skb: 278 callbacks suppressed
[  489.547325][   T29] audit: type=1326 audit(1755200718.412:13598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28861 comm="syz.3.7459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28a92ebe9 code=0x7ffc0000
[  489.550134][T28863] EXT4-fs (loop2): mount failed
[  489.553696][   T29] audit: type=1326 audit(1755200718.412:13599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28861 comm="syz.3.7459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28a92ebe9 code=0x7ffc0000
[  489.625287][   T29] audit: type=1326 audit(1755200718.482:13600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28861 comm="syz.3.7459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fa28a92ebe9 code=0x7ffc0000
[  489.648949][   T29] audit: type=1326 audit(1755200718.482:13601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28861 comm="syz.3.7459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28a92ebe9 code=0x7ffc0000
[  489.672560][   T29] audit: type=1326 audit(1755200718.482:13602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28861 comm="syz.3.7459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28a92ebe9 code=0x7ffc0000
[  489.696592][   T29] audit: type=1326 audit(1755200718.482:13603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28861 comm="syz.3.7459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fa28a92ebe9 code=0x7ffc0000
[  489.699955][T28874] netlink: 'syz.5.7462': attribute type 5 has an invalid length.
[  489.720203][   T29] audit: type=1326 audit(1755200718.482:13604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28861 comm="syz.3.7459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28a92ebe9 code=0x7ffc0000
[  489.751570][   T29] audit: type=1326 audit(1755200718.482:13605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28861 comm="syz.3.7459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28a92ebe9 code=0x7ffc0000
[  489.775185][   T29] audit: type=1326 audit(1755200718.482:13606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28861 comm="syz.3.7459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa28a92ebe9 code=0x7ffc0000
[  489.798975][   T29] audit: type=1326 audit(1755200718.482:13607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28861 comm="syz.3.7459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28a92ebe9 code=0x7ffc0000
[  490.046023][T28902] netlink: 'syz.5.7475': attribute type 5 has an invalid length.
[  490.063458][T28898] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  490.112089][T28910] loop2: detected capacity change from 0 to 512
[  490.144897][T28910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  490.160872][T28910] ext4 filesystem being mounted at /433/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  490.189345][T28917] siw: device registration error -23
[  490.239319][T20296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  490.343668][T28934] can: request_module (can-proto-5) failed.
[  490.407194][T28927] lo speed is unknown, defaulting to 1000
[  490.482304][T28947] validate_nla: 1 callbacks suppressed
[  490.482320][T28947] netlink: 'syz.5.7493': attribute type 1 has an invalid length.
[  490.495684][T28947] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  490.525519][T28959] bond_slave_1: entered promiscuous mode
[  490.537650][T28959] bond0: (slave bond_slave_1): Releasing backup interface
[  490.546759][T28959] bond_slave_1 (unregistering): left promiscuous mode
[  490.647294][T28971] random: crng reseeded on system resumption
[  490.956410][T29002] netlink: 'syz.5.7516': attribute type 5 has an invalid length.
[  491.745008][T29049] loop2: detected capacity change from 0 to 512
[  491.820890][T29049] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  491.867284][T29060] netlink: 'syz.1.7540': attribute type 5 has an invalid length.
[  491.900624][T29049] ext4 filesystem being mounted at /441/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  491.969717][T20296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  492.353283][T29084] can0: slcan on ttyS3.
[  492.514097][T29091] loop2: detected capacity change from 0 to 512
[  492.576265][T29084] can0 (unregistered): slcan off ttyS3.
[  492.681306][T29088] can0: slcan on ttyS3.
[  493.163003][T29091] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  493.194377][T29091] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002]
[  493.203830][T29091] System zones: 1-12
[  493.207900][T29091] EXT4-fs (loop2): orphan cleanup on readonly fs
[  493.219642][T29091] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7551: bg 0: block 361: padding at end of block bitmap is not set
[  493.221243][T29126] __nla_validate_parse: 8 callbacks suppressed
[  493.221257][T29126] netlink: 18 bytes leftover after parsing attributes in process `syz.3.7558'.
[  493.249207][T29126] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7558'.
[  493.277621][T29091] EXT4-fs (loop2): Remounting filesystem read-only
[  493.440637][T29091] EXT4-fs (loop2): 1 truncate cleaned up
[  493.456160][T29091] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  493.526421][T29148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7564'.
[  493.687357][T29168] netlink: 'syz.1.7567': attribute type 21 has an invalid length.
[  493.695968][T29083] can0 (unregistered): slcan off ttyS3.
[  493.725076][T29166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7566'.
[  493.767254][T20296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  493.832789][T29186] netdevsim netdevsim2: Direct firmware load for ..€ failed with error -2
[  494.046377][T29206] loop2: detected capacity change from 0 to 512
[  494.105342][T29206] EXT4-fs: Ignoring removed nobh option
[  494.351212][T29213] netlink: 'syz.3.7577': attribute type 1 has an invalid length.
[  494.359180][T29213] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  494.398133][T29206] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.7573: corrupted inode contents
[  494.412877][T29206] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.7573: mark_inode_dirty error
[  494.425008][T29206] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.7573: corrupted inode contents
[  494.437455][T29206] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.7573: mark_inode_dirty error
[  494.454725][T29206] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.7573: Failed to acquire dquot type 0
[  494.467001][T29206] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.7573: corrupted inode contents
[  494.481468][T29206] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.7573: mark_inode_dirty error
[  494.493670][T29206] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.7573: corrupted inode contents
[  494.506462][T29206] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.7573: mark_inode_dirty error
[  494.518077][T29206] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.7573: corrupted inode contents
[  494.531199][T29206] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[  494.540273][T29206] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.7573: corrupted inode contents
[  494.553235][T29206] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.7573: mark_inode_dirty error
[  494.564553][T29206] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[  494.574960][T29206] EXT4-fs (loop2): 1 truncate cleaned up
[  494.581033][T29206] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  494.595487][T29206] ext4 filesystem being mounted at /448/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  494.640375][T29232] lo speed is unknown, defaulting to 1000
[  494.668398][T29206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7573'.
[  494.709994][T20296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  494.941183][   T29] kauditd_printk_skb: 317 callbacks suppressed
[  494.941196][   T29] audit: type=1326 audit(1755200723.815:13923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29260 comm="syz.0.7595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea0636ebe9 code=0x7ffc0000
[  494.980175][T29261] netlink: 'syz.0.7595': attribute type 5 has an invalid length.
[  495.003020][   T29] audit: type=1326 audit(1755200723.845:13924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29260 comm="syz.0.7595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea0636ebe9 code=0x7ffc0000
[  495.026716][   T29] audit: type=1326 audit(1755200723.845:13925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29260 comm="syz.0.7595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea0636ebe9 code=0x7ffc0000
[  495.050613][   T29] audit: type=1326 audit(1755200723.845:13926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29260 comm="syz.0.7595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea0636ebe9 code=0x7ffc0000
[  495.074292][   T29] audit: type=1326 audit(1755200723.845:13927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29260 comm="syz.0.7595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea0636ebe9 code=0x7ffc0000
[  495.098135][   T29] audit: type=1326 audit(1755200723.845:13928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29260 comm="syz.0.7595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea0636ebe9 code=0x7ffc0000
[  495.121920][   T29] audit: type=1326 audit(1755200723.845:13929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29260 comm="syz.0.7595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea0636ebe9 code=0x7ffc0000
[  495.145678][   T29] audit: type=1326 audit(1755200723.845:13930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29260 comm="syz.0.7595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea0636ebe9 code=0x7ffc0000
[  495.154447][T29269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7598'.
[  495.169479][   T29] audit: type=1326 audit(1755200723.845:13931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29260 comm="syz.0.7595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea0636ebe9 code=0x7ffc0000
[  495.201934][   T29] audit: type=1326 audit(1755200723.845:13932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29260 comm="syz.0.7595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fea0636ebe9 code=0x7ffc0000
[  495.560452][T29303] lo speed is unknown, defaulting to 1000
[  495.898833][T29312] lo speed is unknown, defaulting to 1000
[  496.118456][T29331] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7621'.
[  496.146471][T29334] siw: device registration error -23
[  496.194613][T29339] netdevsim netdevsim0: Direct firmware load for ..€ failed with error -2
[  497.868042][T29421] netlink: 'syz.1.7660': attribute type 5 has an invalid length.
[  497.902596][T29423] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7661'.
[  497.988550][T29425] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7662'.
[  498.206467][T29449] lo speed is unknown, defaulting to 1000
[  498.302886][T29465] wireguard0: entered promiscuous mode
[  498.308478][T29465] wireguard0: entered allmulticast mode
[  498.317744][T29470] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29470 comm=syz.5.7675
[  498.405399][T29478] netlink: 'syz.2.7683': attribute type 21 has an invalid length.
[  498.938562][T29491] siw: device registration error -23
[  499.354459][T29500] loop2: detected capacity change from 0 to 512
[  499.370647][T29500] EXT4-fs: Ignoring removed bh option
[  499.412247][T29500] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  499.421422][T29500] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  499.476203][T29500] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  499.491861][T29504] lo speed is unknown, defaulting to 1000
[  499.526274][T29500] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  499.544770][T29500] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  499.552070][T29509] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7693'.
[  499.584246][T29500] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  499.802432][T29522] lo speed is unknown, defaulting to 1000
[  500.116390][   T29] kauditd_printk_skb: 280 callbacks suppressed
[  500.116405][   T29] audit: type=1326 audit(1755200984.996:14213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29537 comm="syz.5.7703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac681febe9 code=0x7ffc0000
[  500.146413][   T29] audit: type=1326 audit(1755200984.996:14214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29537 comm="syz.5.7703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac681febe9 code=0x7ffc0000
[  500.183982][   T29] audit: type=1326 audit(1755200985.056:14215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29537 comm="syz.5.7703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac681febe9 code=0x7ffc0000
[  500.207623][   T29] audit: type=1326 audit(1755200985.056:14216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29537 comm="syz.5.7703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac681febe9 code=0x7ffc0000
[  500.231203][   T29] audit: type=1326 audit(1755200985.056:14217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29537 comm="syz.5.7703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac681febe9 code=0x7ffc0000
[  500.267098][T29540] bond_slave_1: entered promiscuous mode
[  500.273226][T29540] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7704'.
[  500.294058][   T29] audit: type=1326 audit(1755200985.056:14218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29537 comm="syz.5.7703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac681febe9 code=0x7ffc0000
[  500.317860][   T29] audit: type=1326 audit(1755200985.056:14219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29537 comm="syz.5.7703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac681febe9 code=0x7ffc0000
[  500.341581][   T29] audit: type=1326 audit(1755200985.056:14220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29537 comm="syz.5.7703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac681febe9 code=0x7ffc0000
[  500.365307][   T29] audit: type=1326 audit(1755200985.056:14221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29537 comm="syz.5.7703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fac681febe9 code=0x7ffc0000
[  500.389252][   T29] audit: type=1326 audit(1755200985.056:14222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29537 comm="syz.5.7703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac681febe9 code=0x7ffc0000
[  500.441194][T29540] bond_slave_1 (unregistering): left promiscuous mode
[  500.461596][T29546] netlink: 'syz.1.7707': attribute type 5 has an invalid length.
[  500.534189][T29555] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7708'.
[  500.578917][T29554] netlink: 164 bytes leftover after parsing attributes in process `syz.5.7711'.
[  500.614133][T29567] netdevsim netdevsim1: Direct firmware load for ..€ failed with error -2
[  500.731452][T29583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7723'.
[  500.780548][T29579] netlink: 164 bytes leftover after parsing attributes in process `syz.5.7722'.
[  500.863962][T29598] netlink: 'syz.2.7731': attribute type 21 has an invalid length.
[  500.883258][T29602] lo speed is unknown, defaulting to 1000
[  500.911926][T29603] lo speed is unknown, defaulting to 1000
[  501.132245][T29622] netlink: 'syz.2.7738': attribute type 3 has an invalid length.
[  501.309400][T29628] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7740'.
[  501.629347][T29651] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2
[  501.895065][T29668] netlink: 'syz.3.7758': attribute type 3 has an invalid length.
[  502.104769][T29681] netlink: 76 bytes leftover after parsing attributes in process `syz.5.7763'.
[  502.182705][T29686] netlink: 'syz.3.7765': attribute type 3 has an invalid length.
[  502.328130][T29706] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7774'.
[  502.446544][T29720] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7779'.
[  502.696349][T29753] netlink: 'syz.3.7797': attribute type 3 has an invalid length.
[  503.165191][T29778] lo speed is unknown, defaulting to 1000
[  503.626567][T29801] lo speed is unknown, defaulting to 1000
[  504.017186][T29839] siw: device registration error -23
[  504.134687][T29846] 9pnet_fd: p9_fd_create_tcp (29846): problem connecting socket to 127.0.0.1
[  504.197488][T29858] lo speed is unknown, defaulting to 1000
[  504.451252][T29882] netlink: 'syz.0.7843': attribute type 21 has an invalid length.
[  504.654688][T29904] __nla_validate_parse: 4 callbacks suppressed
[  504.654705][T29904] netlink: 88 bytes leftover after parsing attributes in process `syz.2.7852'.
[  505.110910][T29934] netlink: 'syz.3.7862': attribute type 21 has an invalid length.
[  505.160465][T29941] lo speed is unknown, defaulting to 1000
[  505.259822][   T29] kauditd_printk_skb: 413 callbacks suppressed
[  505.259859][   T29] audit: type=1400 audit(1755201246.128:14636): avc:  denied  { lock } for  pid=29951 comm="syz.3.7869" path="socket:[81149]" dev="sockfs" ino=81149 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  505.470993][   T29] audit: type=1326 audit(1755201246.338:14637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29960 comm="syz.5.7873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac681febe9 code=0x7ffc0000
[  505.497559][T29961] netlink: 'syz.5.7873': attribute type 5 has an invalid length.
[  505.535352][   T29] audit: type=1326 audit(1755201246.378:14638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29960 comm="syz.5.7873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac681febe9 code=0x7ffc0000
[  505.559267][   T29] audit: type=1326 audit(1755201246.378:14639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29960 comm="syz.5.7873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac681febe9 code=0x7ffc0000
[  505.582964][   T29] audit: type=1326 audit(1755201246.378:14640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29960 comm="syz.5.7873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac681febe9 code=0x7ffc0000
[  505.606819][   T29] audit: type=1326 audit(1755201246.378:14641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29960 comm="syz.5.7873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac681febe9 code=0x7ffc0000
[  505.630462][   T29] audit: type=1326 audit(1755201246.378:14642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29960 comm="syz.5.7873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac681febe9 code=0x7ffc0000
[  505.654174][   T29] audit: type=1326 audit(1755201246.378:14643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29960 comm="syz.5.7873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac681febe9 code=0x7ffc0000
[  505.677838][   T29] audit: type=1326 audit(1755201246.378:14644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29960 comm="syz.5.7873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac681febe9 code=0x7ffc0000
[  505.701573][   T29] audit: type=1326 audit(1755201246.378:14645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29960 comm="syz.5.7873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac681febe9 code=0x7ffc0000
[  505.741746][T29970] lo speed is unknown, defaulting to 1000
[  505.894176][T29977] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7878'.
[  505.948913][T30001] netlink: 'syz.5.7889': attribute type 1 has an invalid length.
[  505.974337][T30000] lo speed is unknown, defaulting to 1000
[  506.015066][T30005] lo speed is unknown, defaulting to 1000
[  506.283471][T30042] netlink: 164 bytes leftover after parsing attributes in process `syz.5.7904'.
[  506.390956][T30055] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7913'.
[  506.464041][T30064] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7917'.
[  506.730116][T30091] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7925'.
[  506.774634][T30092] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7928'.
[  506.997463][T30105] lo speed is unknown, defaulting to 1000
[  507.009943][T30107] siw: device registration error -23
[  507.589274][T30141] lo speed is unknown, defaulting to 1000
[  507.666304][T30161] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7954'.
[  507.678842][T30162] siw: device registration error -23
[  507.684897][T30162] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7952'.
[  507.840432][T30180] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7961'.
[  508.578154][T30241] ==================================================================
[  508.586309][T30241] BUG: KCSAN: data-race in __unmap_hugepage_range / alloc_surplus_hugetlb_folio
[  508.595431][T30241] 
[  508.597764][T30241] write to 0xffffffff88e73818 of 8 bytes by task 30243 on cpu 1:
[  508.605474][T30241]  alloc_surplus_hugetlb_folio+0x26f/0x2d0
[  508.611294][T30241]  hugetlb_acct_memory+0x32f/0xa50
[  508.616432][T30241]  hugetlb_reserve_pages+0x767/0xc00
[  508.621712][T30241]  hugetlbfs_file_mmap+0x27e/0x340
[  508.626827][T30241]  mmap_region+0xfad/0x1630
[  508.631327][T30241]  do_mmap+0x9b3/0xbe0
[  508.635402][T30241]  vm_mmap_pgoff+0x17a/0x2e0
[  508.640178][T30241]  ksys_mmap_pgoff+0x2d0/0x310
[  508.644945][T30241]  x64_sys_call+0x14a3/0x2ff0
[  508.649613][T30241]  do_syscall_64+0xd2/0x200
[  508.654123][T30241]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.660086][T30241] 
[  508.662418][T30241] read to 0xffffffff88e73818 of 8 bytes by task 30241 on cpu 0:
[  508.670144][T30241]  __unmap_hugepage_range+0xad6/0x1290
[  508.675614][T30241]  unmap_vmas+0x2f0/0x3a0
[  508.679955][T30241]  vms_clear_ptes+0x1f7/0x2d0
[  508.684641][T30241]  vms_complete_munmap_vmas+0x159/0x440
[  508.690174][T30241]  do_vmi_align_munmap+0x383/0x3d0
[  508.695375][T30241]  do_vmi_munmap+0x1db/0x220
[  508.699966][T30241]  mremap_at+0x110/0x630
[  508.704205][T30241]  __se_sys_mremap+0x6c5/0xc60
[  508.709056][T30241]  __x64_sys_mremap+0x67/0x80
[  508.713737][T30241]  x64_sys_call+0x2a24/0x2ff0
[  508.718506][T30241]  do_syscall_64+0xd2/0x200
[  508.723022][T30241]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.728942][T30241] 
[  508.731267][T30241] value changed: 0x0000000000000001 -> 0x0000000000000002
[  508.738356][T30241] 
[  508.740675][T30241] Reported by Kernel Concurrency Sanitizer on:
[  508.746809][T30241] CPU: 0 UID: 0 PID: 30241 Comm: syz.5.7987 Tainted: G        W           6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) 
[  508.761379][T30241] Tainted: [W]=WARN
[  508.765163][T30241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  508.775210][T30241] ==================================================================