last executing test programs:

36.675847893s ago: executing program 3 (id=1700):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0)
ioctl(r1, 0x541b, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000140)={[{@errors_continue}, {@noload}, {@errors_continue}, {@bsdgroups}, {@nobarrier}]}, 0x1, 0x636, &(0x7f0000000e40)="$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")
r2 = epoll_create1(0x0)
prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd')
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021800000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000540003805000f87f080003400000000244000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000001014000180090001006c617374"], 0x104}}, 0x0)
r5 = epoll_create1(0x0)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x20000002})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r6, &(0x7f0000000580)={0xa0002008})
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f00000000c0)={0x10})

36.275237308s ago: executing program 3 (id=1704):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x1018, r0}, './file0\x00'})

36.216910434s ago: executing program 3 (id=1706):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x300, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = openat$cgroup_devices(r2, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r3, &(0x7f00000000c0)={'a', ' *:* ', 'wm\x00'}, 0x9)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc000000000000000002000000090001006f797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)

35.836198857s ago: executing program 3 (id=1711):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000000), 0xff, 0x4a7, &(0x7f0000000280)="$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")
r0 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
process_mrelease(r1, 0x700000000000000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write(r2, &(0x7f0000000180)="7e7226ce9b4d692092ffa2b579f0ff5793012c9738a9be19ff3e69a683a0a1bbace0dc3853c661a4e1019e7a1f3af60350126cb99c5f3ace6f5616c00e0fb30b2832398fed6233b8632a001dd0a846cbb8a5d77e3208db486b055edb6ae7917f07ccf4b6811be57047aa17799359e733ec395940d1feb7a9ec2ddadb1ff61070c9c00f9db8e47f74a5271fa77b6e692e6ac97aaae883e5522f8e86c2403aec0ff8dee1cba5d40f0969470b9a2a95f6f22f9d4250809400ea8403a6540948", 0xfffffec6)
creat(&(0x7f0000000380)='./bus\x00', 0x187)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})

33.274659734s ago: executing program 3 (id=1729):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x111}}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r1, 0x0, 0xfffffffffffffffc}, 0x18)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r3, 0x0, 0x5}, 0x18)
socket$tipc(0x1e, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10)
finit_module(r4, 0x0, 0x3)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r4, &(0x7f0000000000))

32.231798196s ago: executing program 3 (id=1741):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10)
io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x842, 0xffffffffffffffff, 0x0, 0x0, 0x34}])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6275465, '\x00', 0x0, r0, 0x4, 0x0, 0x1}, 0x50)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7}]})
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffc0)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000040))
setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)

32.231300066s ago: executing program 32 (id=1741):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10)
io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x842, 0xffffffffffffffff, 0x0, 0x0, 0x34}])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6275465, '\x00', 0x0, r0, 0x4, 0x0, 0x1}, 0x50)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7}]})
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffc0)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000040))
setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)

11.340373836s ago: executing program 2 (id=2053):
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000100)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
ppoll(&(0x7f0000000080)=[{r0, 0x8}], 0x1, 0x0, 0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x0, 0x15, 0x8, 0x6, 0x6})

10.446049905s ago: executing program 2 (id=2071):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x1c, 0x80000)
sendto$inet6(r2, &(0x7f00000002c0)="c6898825417a7232edb32aaad6e6aa320737bc5428063b18838b5bea32912eb24f13145eb2d91165eadd9e4e0a6a47ef2a77d1dc4a1b65b9474fb9cdfb5fdd6ae35d7160139df33f6d867850824d2fff193600a6c982825fc41f", 0x5a, 0x844, &(0x7f00000001c0)={0xa, 0x4e22, 0xb, @private2, 0xffff}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r3=>r1, {r1}}, './file0\x00'})
io_uring_enter(r3, 0xc7b, 0x738, 0x20, &(0x7f00000003c0), 0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x204, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00', r5}, 0x10)
r6 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r6, 0x0, 0x0, 0x9c00, 0x0, 0x3)
connect$tipc(r6, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x2, 0x2}}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r7}, 0x18)
r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401)
ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x800, 0x5, 0x20c, 0xfffffffffffffff9, 0x59c, 0xffffffffffffffff})
ioctl$SG_BLKTRACETEARDOWN(r8, 0x1276, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
prctl$PR_SET_NAME(0xf, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='sched_switch\x00', r9, 0x0, 0x5}, 0x18)
r10 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r10, 0x6, 0x0, 0x0, 0x0)
r11 = fsmount(r10, 0x1, 0x0)
r12 = openat$cgroup_subtree(r11, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r12, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000039000900000000000000000001000000040000000c0001800600000005470000080002"], 0x38}}, 0x0)

10.344745244s ago: executing program 2 (id=2074):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)=<r2=>0x0)
fcntl$setown(r0, 0x8, r2)
write$selinux_load(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c69"], 0x65)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r3)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
r4 = syz_open_pts(0xffffffffffffffff, 0x0)
dup3(r4, 0xffffffffffffffff, 0x0)
socket$unix(0x1, 0x5, 0x0)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffff}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00'}, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000004000000b7020000030000108500000086000000950a5c701de660f0c6eeb4c387afdaa604cab1b8f1831c2a1b8dfee86204fba6bcdd7614016040b06dc6e9d6df31a39ca2bfb03c4f2ad4ed8bc4e29daa38bf8ea1077fa5942428c85b69d37cef5a15d739cd4f54b254c819c66fc780befff56725ccb895b6fafc8bc1b6229956530e383b464871e4e33d8281e07d5d3f9dda9b7ceb02eec6b7649b47c15777037fe70d808470ea135622e444a1adecb5da588253cbc90ef4be6ac9b0e8316a13ebe8c22f253b807e7eec6e0000000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x23, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

10.287058489s ago: executing program 2 (id=2077):
r0 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$user(&(0x7f00000001c0), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)="d8", 0x1, r0)
request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, r0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x45, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$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")
r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10)
sigaltstack(0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r5}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0)
recvmsg(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/64, 0x40}], 0x1, 0x0, 0xfffffffffffffd78}, 0x0)
write$binfmt_register(r3, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x18)
setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4)
connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000540), 0x4)
setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000feffffffff91f94413582b", "00001000", "4e67cb72f328ac2f"}, 0x28)

9.867341416s ago: executing program 2 (id=2084):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xec}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x45, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)

9.284509738s ago: executing program 2 (id=2092):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x44080, 0x0)
ioctl$SNAPSHOT_S2RAM(r0, 0x330b)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x0, 0x4c, 0x1a, 0x0, 0x75, 0x240, 0x258, 0x258, 0x240, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@ah={{0x30}, {[0x4d4, 0x4d2], 0xab1, 0x8, 0x10fd547342f285dd}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x4, 0x3}, {0x0, 0x4}, 0x1020, 0x2}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x10, 0x0, 0x1000, 'syz0\x00', 'syz0\x00', {0xb}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)

9.25599633s ago: executing program 33 (id=2092):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x44080, 0x0)
ioctl$SNAPSHOT_S2RAM(r0, 0x330b)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x0, 0x4c, 0x1a, 0x0, 0x75, 0x240, 0x258, 0x258, 0x240, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@ah={{0x30}, {[0x4d4, 0x4d2], 0xab1, 0x8, 0x10fd547342f285dd}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x4, 0x3}, {0x0, 0x4}, 0x1020, 0x2}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x10, 0x0, 0x1000, 'syz0\x00', 'syz0\x00', {0xb}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)

7.363183428s ago: executing program 4 (id=2100):
socket$igmp6(0xa, 0x3, 0x3a)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='io_uring_register\x00', r1}, 0x10)
r2 = io_uring_setup(0x55bb, &(0x7f0000007580)={0x0, 0x44bf, 0x400, 0x3, 0x6a})
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000007600), 0x1)

7.260435657s ago: executing program 4 (id=2101):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={<r3=>r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000000c0)={r3, 0x5f63}, 0x8)

7.217461751s ago: executing program 4 (id=2103):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xfbc, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x19}}, {0x4e20, 0x4e23, 0xfa8, 0x0, @wg=@data={0x4, 0x2, 0x8, "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"}}}}, 0xfca)

7.061896194s ago: executing program 4 (id=2104):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x80080)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000002c0)={{0x6, 0x7}, 0x0, 0x7fff, 0xa, {0x0, 0xfa}, 0x5, 0xd0aa})
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x45, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$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")
fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000c80)={{0x32, 0x8}, 'port1\x00', 0x10, 0x20434, 0x4, 0x6, 0x400, 0x8, 0x7, 0x0, 0x1, 0x6})
r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
write$binfmt_register(r2, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32)
r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x569, &(0x7f00000002c0)="$eJzs3U1rXFUfAPD/nWT6/jxNoRQVkYALK7WTJvGlgou61mJB93VIbkPJpFMyk9LEgu3CrqW4EQviXly7LH4BF36GghaKlKALN5E7uTOdJDPJtJ0mU+f3g1vOuS8598y5/9NzcmYyAQyt8eyfQsTLEfF1EnE0IpL82GjkB8fXz1t9dGMm25JYW/v0z6RxXpZv/qzmdYfzzEsR8ctXEacKW8utLa/MlyuVdDHPT9QXrk7UlldOX14oz6Vz6ZWp6emz70xPvf/eu32r65sX/v72k3sjee7YnSTOxZE8116PZ3CzPTMe4/lrUoxzm06c7ENhgyTpuPenXb8PnsxIHufFyPqAozGSRz3w3/dlRKwBQyp54vj/rfh87gTYXc1xQHNu36d58Avj4YfrE6Ct9R9d/91IHGjMjQ6tJhtmRtl8d6wP5Wdl/PzH3TvZFv37PQTAjm7eiogzo6Nb+78k7/+e3pkeztlchv4Pds+9bPzzVqfxT6E1/okO45/DHWL3aewc/4UHfSimq2z890HH8W9r0WpsJM/9rzHmKyaXLlfSrG/7f0ScjOL+LL/des7Z1ftr3Y61j/+yLSu/ORbM7+PB6P6N18yW6+VnqXO7h7ciXuk4/k1a7Z90aP/s9bjQYxkn0ruvdTu2c/2fr7UfIt7o2P6PV7SS7dcnJxrPw0Tzqdjqr9snfu1W/l7XP2v/Q9vXfyxpX6+ttV890lMZ3x/4J43WevJGG+ofvT//+5LPGul9+b7r5Xp9cTJiX/Jxa3+huX/q8bXNfPP8rP4nX9++/+v0/B+MiM97qn3E7eM/vtrt2CC0/2zH9m/Nbje1/5Mn7n/0xXfdyu+t/3u7kTqZ7+ml/+v1Bp/ltQMAAAAAAIBBU4iII5EUSq10oVAqrb+/43gcKlSqtfqpS9WlK7PR+KzsWBQLzZXuo23vh5jMVwyb+alN+emIOBYR34wcbORLM9XK7F5XHgAAAAAAAAAAAAAAAAAAAAbE4S6f/8/8vvXPux/Y/TsEnitf+Q3Da8f478c3PQEDyf//MLzEPwwv8Q/DS/zD8BL/MLzEPwwv8Q/DS/wDAAAAAAAAAAAAAAAAAAAAAAAAAABAX104fz7b1lYf3ZjJ8rPXlpfmq9dOz6a1+dLC0kxpprp4tTRXrc5V0tJMdWGnn1epVq9OTsXS9Yl6WqtP1JZXLi5Ul67UL15eKM+lF9PirtQKAAAAAAAAAAAAAAAAAAAAXiy15ZX5cqWSLkpIPFVidDBuQ6LPib3umQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgsX8DAAD//welMww=")
symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES8=r3], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRESDEC=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36}, 0x94)
setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(r4, &(0x7f0000000780)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804)
socket(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000004000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getrusage(0xffffffffffffffff, &(0x7f0000000280))
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r5, @ANYBLOB="101000000000000008000d0005000000e4031680a4000180"], 0x40c}}, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0x60000005, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000003c0)={[], [{@subj_type={'subj_type', 0x3d, 'ext\x00\x00'}}, {@uid_eq}]}, 0x1, 0x51a, &(0x7f0000001040)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000380)={'erspan0\x00', <r6=>0x0, 0x40, 0x20, 0x4, 0xfffff800, {{0x2f, 0x4, 0x1, 0x2, 0xbc, 0x64, 0x0, 0xf9, 0x2f, 0x0, @private=0xa010101, @multicast2, {[@generic={0x89, 0x5, "d5584f"}, @cipso={0x86, 0x68, 0x0, [{0x1, 0xc, "311f4f347d385fe4fea1"}, {0x0, 0x4, "638a"}, {0x5, 0xa, "9c1fa94c17995c05"}, {0x2, 0x3, '%'}, {0x2, 0xe, "9f595c4af0624e97c24f5915"}, {0x2, 0xc, "dc8079837001dc74b723"}, {0x7, 0x10, "c1c7d41358b2688eb3912fdc8f98"}, {0x2, 0x6, "cdc4ae69"}, {0x0, 0x10, "86a9c8258792e7b8af3c2c2054a7"}, {0x6, 0x5, "106155"}]}, @cipso={0x86, 0x2e, 0x0, [{0x1, 0x10, "6379c3d339c1c15b4e3a86a68799"}, {0x5, 0x8, "a7270d2f10ee"}, {0x1, 0x4, "9d31"}, {0x0, 0x4, "9d5f"}, {0x7, 0x5, "c88edb"}, {0x7, 0x3, "aa"}]}, @timestamp_prespec={0x44, 0xc, 0xbb, 0x3, 0x8, [{@loopback, 0x401}]}]}}}}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a0000009a5874e6180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

6.781628479s ago: executing program 4 (id=2107):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x111}}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r1, 0x0, 0xfffffffffffffffc}, 0x18)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r3, 0x0, 0x5}, 0x18)
socket$tipc(0x1e, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10)
finit_module(r4, 0x0, 0x3)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r4, &(0x7f0000000000))

6.32506924s ago: executing program 4 (id=2113):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xfbc, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x19}}, {0x4e20, 0x4e23, 0xfa8, 0x0, @wg=@data={0x4, 0x2, 0x8, "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"}}}}, 0xfca)

6.292009983s ago: executing program 34 (id=2113):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xfbc, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x19}}, {0x4e20, 0x4e23, 0xfa8, 0x0, @wg=@data={0x4, 0x2, 0x8, "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"}}}}, 0xfca)

3.436219776s ago: executing program 7 (id=2115):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x9, @remote, 0x3}]}, &(0x7f0000000080)=0x10)

3.05096997s ago: executing program 5 (id=2144):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@jqfmt_vfsv1}]}, 0x82, 0x48f, &(0x7f0000000380)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$packet(0x11, 0x2, 0x300)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x30}}, 0x48860)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', <r2=>0x0})
add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002", 0x29}], 0x1}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
writev(r4, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1)

2.842423298s ago: executing program 5 (id=2148):
openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r0, 0x0)
request_key(0x0, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x120)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x20002005})
bpf$ITER_CREATE(0x21, &(0x7f0000000a00)={r2}, 0x8)
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x401, 0x101001)
syz_open_dev$sg(&(0x7f0000000040), 0x2, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x8, 0xadea})
io_uring_setup(0x78eb, &(0x7f00000000c0)={0x0, 0xc63b, 0x400, 0x1, 0x110})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100ffff000000008d000000850000007b000000850000002300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x8, 0x7fe4, 0x1}, 0x48)
syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000000000)='./bus\x00', 0x3a0cc0a, &(0x7f0000000b00)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000005,map=normal,map=normal,session=0x000000000000000e,overriderockperm,showassoc,nocompress,utf8,map=normal,session=0x0000000000000006,map=acorn,mode=0x0000000000000086,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00', @ANYRESDEC, @ANYBLOB="e21c3011806a2c166ea609cca9f2cd04e4", @ANYRES8, @ANYRESDEC], 0x43, 0xa0e, &(0x7f00000000c0)="$eJzs3U9sXdWdB/DvfbYTj4lCgAyTQUBewgQMZBzbGcJEbCaxnxMz/jOyHYloNCIMSaooVqmgSIAqNZWqroraRdUF3SF10xUSG9hU2bXbbrqoVLHuDnUVddFX3fueYyf287MTxzbh87Gu3/3zu+f8zrv33SNfv/dO+CZrNpvVdI/LF36zncmy+5wd/+rTzz4upx/dyJ705JXii6Q/ST3pTXIoydj43Ox0l4KuJ5eS3EyKJHvTetyQSyl+ln3LyzdT/Kqqt3ThHhvGhjT5Vtvp8w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHajYmx8eHikyNTkzIU36p1VQ4B32lhbLu/LatTv4suu9SZFOaW/f2mo70MHlzc/Wf46mqdbS09XA5KnPx898uSB157orS3tv07Cm/H39mDIm97xvQ8/uv7W4uKVdzts72k3574z3KXONWYm52cnp8+ca9Qn52frp0+dGj5xfmK+PjE51Zi/OL/QmK6PzTXOLMzO1QfHXqyPnD59st4Yujh7Yebc+NBUY2nlq/8+Ojx8qv760P80zszNz86ceH1ofuz85NTU5My5KqbcXMa8Wp6I/z25UF9onJmu169eW7xy8o6M1niqy6CRbi0pg0a7BY0Oj46OjIyOjpx65fQrrw4P9y6v6Em1YvguWbXL7ZM2+x7e8+Jb6JPaBoLKi2N9C6/ecH9q7f4/U5nMTC7kjdTX/BnLeOYym+kO29uW+v9jJxrr1ruy/1/q5Q8tb34qVf//bGvp2U79f4dctu/nvXyYj3I9b2Uxi7mSd+/YuvceSmw2127Vr//Qei52usV3/pxLIzOZzHxmM5npnKnW1Ntr6jmdUzmV4byZ85nIfOqZyGSm0sh8LmY+C2lUZ9RY5tLImSz0tto4mLG8mHpGcjqnczL1NDKUi5nNhczkXMZzpirlaq5Vz/vJdXK8HTSykaDRdYJGy5N77f6/vWIT/T/fUlt9CYd71mz3/3vuWl9bHTo4tl1JAQAAAFvqX3+f/Qcf/92fk748U91jBwAAAB421dv1ni4f+sq5Z1JMTE41hlcHvr/9uQEAAABbo6g+Y1ckGcjh1tzSJ6HWuAkAAAAAfBNV//9/tnwYKOcOp/D3PwAAADxsun/HfteI4njquVFuql9uRV5uR6T6VEExMDE51Rgam516bSTPV98yUH3SYFVpPTmQVB8/eClHWlFHBlqPA8sllnX2l1EjQ6+NpD9H2w0ZfK58eG5wjcjRMvKlvNCKfGEpsj+rIk+WkQDwsDu6Tn+80f7/pRxvRRx/qvr69t6n1uiDh1s96w93qJ0AwLLuY+x0jSj+Y2n4nzX+/i8jenL1cOstBUN5O+9kMZdzvPq0QfWOg3apuVlkudSBFW9DON7lbsDAihFeji/dDzi8b837AQMrBno5vuqOQKfYk2s+d8WWHw0A2B5HV/XD6/T/zWZrbtX9//X//h/wlkIA2FVuj2D/AGfurrNvZ5oKALR17qXX0fMAEwIAAAAAAAAAAAAAAAAAAAAAAAAAAICHwIP8/v9akgc7ssB9zNxIsgvS2OaZv7QP+6pN7fU3djzDFTN7c//l9G/LCBcf/t+eXXyq39vMDl6UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2DZF0rPW+lqyN+kdTnJi+7N6cG7sdAI7rLiVW/kg+3c6DwAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh037+/9raT0+0lqV3lpyLMmlJP+70zlupVs7ncDWGig2ucOK7/8vj3maRXpbhz1F39j43Ox0VeLecvtXn372cTndS2JlAWUNdwwu0a6h816PVXsNjF957/r33/leffxsleTZhYmp8elzc/+1HPhk8XlST2taspTvD4r2WXxnyz8vW9q93rKWiare8dX1/stae9+u99hvf965bcuW07i2eGW0rGmh8cbC+9+99sGKoMdzJHluMBm8s6bvlFOHmo6kb716i6+LnxT788tcqo5/mUbRLMpD9GiyJ7V/unpt8crQ2+8sXu6Q04EcTnI56d94TodXH4kl1VlX6ytrHa6Cyl8Hu5S3rkd69jebrRJHOrThseqUGdhUG+qd21Dp8ry323iyQ0ZP5PlNH+nnu9TY9rdmS2up+Lr4U3E+f8yPV4z/USuP/7Fs5NVZxlSRK86Uzm0+ttzy0ZUb3rw7suOrkgfgp/n//Oft419bcf1vH6vtuR6tqPGBvS6KVi/UVs0fvKtHal99OmXZzvNgK6pDnv+cl1fv1yXPl7tcUbbo9X+n4uvik2Iwf80N4/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC7X5H0rLW+lhxLciDJo+VyPWluRX21gWIritmgPavW3NjG2neP2u254lZu5YPs39F0AAAAAAAAANgyZ8e/+vSzj8up+n98T/6t+CLpb/2nvzfJgeIXfWPjc7PTXQrqSy4luVnO928uh3K/7FtevlkuHdp8WwCAjflHAAAA///nD22t")
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000c40)={'team0\x00', <r6=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000d40)={'tunl0\x00', &(0x7f0000000c80)={'gre0\x00', r6, 0x8000, 0x7800, 0x10000, 0x9, {{0x1e, 0x4, 0x0, 0x1, 0x78, 0x65, 0x0, 0x6, 0x4, 0x0, @loopback, @multicast1, {[@timestamp={0x44, 0x2c, 0x4d, 0x0, 0xf, [0x10001, 0x8, 0x6, 0x5, 0x0, 0xd, 0x1, 0xffff7fff, 0x6, 0x1]}, @rr={0x7, 0x1f, 0xf5, [@rand_addr=0x64010102, @multicast2, @loopback, @local, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1f}]}, @timestamp={0x44, 0x14, 0x10, 0x0, 0x8, [0xb79f, 0x101, 0x7fffffff, 0x9]}, @ra={0x94, 0x4}]}}}}})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r5}, &(0x7f00000002c0), &(0x7f0000000200)='%ps    \x00'}, 0x20)
r8 = eventfd2(0x0, 0x0)
poll(&(0x7f0000000080)=[{r8}], 0x1, 0xda90)

2.773786284s ago: executing program 1 (id=2151):
r0 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$user(&(0x7f00000001c0), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)="d8", 0x1, r0)
request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, r0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x45, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$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")
r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10)
sigaltstack(0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r5}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0)
recvmsg(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/64, 0x40}], 0x1, 0x0, 0xfffffffffffffd78}, 0x0)
write$binfmt_register(r3, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x18)
setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4)
connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000540), 0x4)

2.59726725s ago: executing program 1 (id=2154):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000200000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x1)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18)
lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03"], 0xd8)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

2.564643233s ago: executing program 7 (id=2155):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x70bd2a, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x4, @empty, 0x5}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0xff}}}, @sadb_address={0x5, 0x6, 0x0, 0x80, 0x0, @in6={0xa, 0x4e2b, 0x3, @empty, 0xf}}]}, 0xa0}}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2c}}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10}}, {@noload}]}, 0x3, 0x44a, &(0x7f0000001380)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x10)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x10208, 0x0, 0x2, 0x0, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
epoll_create1(0x0)
r3 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
msync(&(0x7f0000414000/0x2000)=nil, 0x2000, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1b, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095", @ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x1ee357bb359d72f6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10)
socket$can_raw(0x1d, 0x3, 0x1)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00')
setns(r1, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00'}, 0x10)
preadv(r5, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000300)=0x9, 0x4)
open_by_handle_at(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="08000000020000000b"], 0x0)

2.0359145s ago: executing program 1 (id=2162):
syz_open_dev$ptys(0xc, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000640000008500000006000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0x1003, &(0x7f0000001cc0)=""/4099, 0x40f00, 0x2d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
write$tun(r2, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x9, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0x1b, 0x68, 0x0, 0x60, 0x33, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "11f3305280f125"}}, 0x29)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r6, 0x0)
ftruncate(r6, 0xc17a)
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r7 = socket$inet(0x2, 0x2, 0x1)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x44010)
sendmsg$inet(r7, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4f21, @multicast2}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000300)="0800c8460f2a2a2a", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000)

1.91393313s ago: executing program 5 (id=2164):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000400)=0x11)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x8}, 0x18)
syz_open_dev$sg(&(0x7f0000000740), 0x0, 0x18b203)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000540)=0x2, 0x4)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000480)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@errors_continue}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r4, 0x0, 0x0, 0x4fed0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0)
r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x50)
sendfile(r6, r6, 0x0, 0x800000009)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000580), &(0x7f00000005c0)=0x8)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0})
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='locks_get_lock_context\x00', r0}, 0x18)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r7, 0x26, &(0x7f0000000000))

1.885000323s ago: executing program 0 (id=2166):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0x2b, 0x0, &(0x7f0000000100))
r1 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x15e)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r4, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0)
setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f00000005c0)=0x400032, 0x4)
socket$vsock_stream(0x28, 0x1, 0x0)
fgetxattr(r1, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
close(r5)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r7=>0x0]}, &(0x7f0000000240)=0x8)
sendmsg$inet_sctp(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r7}}], 0x20, 0x2400e044}, 0x0)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={r7, 0x3}, 0x8)

1.784462282s ago: executing program 1 (id=2168):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)=<r2=>0x0)
fcntl$setown(r0, 0x8, r2)
write$selinux_load(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(0x0, r3)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
r4 = syz_open_pts(0xffffffffffffffff, 0x0)
dup3(r4, 0xffffffffffffffff, 0x0)
socket$unix(0x1, 0x5, 0x0)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffff}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00'}, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000004000000b7020000030000108500000086000000950a5c701de660f0c6eeb4c387afdaa604cab1b8f1831c2a1b8dfee86204fba6bcdd7614016040b06dc6e9d6df31a39ca2bfb03c4f2ad4ed8bc4e29daa38bf8ea1077fa5942428c85b69d37cef5a15d739cd4f54b254c819c66fc780befff56725ccb895b6fafc8bc1b6229956530e383b464871e4e33d8281e07d5d3f9dda9b7ceb02eec6b7649b47c15777037fe70d808470ea135622e444a1adecb5da588253cbc90ef4be6ac9b0e8316a13ebe8c22f253b807e7eec6e0000000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x23, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

1.739632576s ago: executing program 1 (id=2169):
socket$igmp6(0xa, 0x3, 0x3a)
bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x1000000000000008}, 0x18)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='io_uring_register\x00', r1}, 0x10)
r2 = io_uring_setup(0x55bb, &(0x7f0000007580)={0x0, 0x44bf, 0x400, 0x3, 0x6a})
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000007600), 0x1)

1.676199771s ago: executing program 1 (id=2170):
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2000)
ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080))
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c)
sendto$inet6(r5, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
r6 = dup(r5)
sendto$packet(r6, &(0x7f0000000180)="008220", 0xfffffffffffffe0a, 0x5e0ffc3d130561ca, 0x0, 0x0)
connect$unix(r6, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r7, 0x0, 0x80000}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000007000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.615140517s ago: executing program 7 (id=2172):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_read_part_table(0x5d0, &(0x7f00000006c0)="$eJzs2z9InGccB/BfokZJSrNkyhRTyFC6JGTMDW24uyZNQC51CRkSSAghB4ULBC4gWHTQGxRvEEcXEW5RO3ne4FAUBeko4mCxODgVXQQXLZ7PZDu09Q8EPh94nx/Pj9/L932Gd3yCz9rl+POw5X+819pcu2vZ3KNbHan3IiI6f/1yJiK+/iP1DtuP6+2030j7ifGrjcHdr6K2/mzvzsuFyuWI3476vem5NlnvPt3JuAhTmcXrff2l/FA5824t37M1sLrydHonW6g/qVRnHrc9fJ3mllJtTfVDlONTvI9XUYxivInSGeWP1TbvHtzM12bfPtjPNYbn76W5ruZ65cRXnN7J/I+dI8+rPd9988uN0fvlueXCdvq5iu1nFgkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDmayixe7+svtUTEu7V8z9bA6srT6Z1sof6kUp153PbwdZpbSrX1h45m/RDl+BTv41UUoxhvovQv837+5/z8UDnTzB+rbd49uJmvzb59sJ9rDM/fS3Nd7Wdy3L85mf+xc+R59UpE3Bi9X55bLmy3HM8VzykfAAAAAAAAAAAAAAAAAAAAjmRzj251fVv4MeJSvIiIn744vvB+mO67X0pzt1PdSP2J8auNwd3v22rrz/buvFyo/J76vR0RvRFxbbLefdFn4b/7KwAA//9u+Y+y") (fail_nth: 7)

1.557417012s ago: executing program 5 (id=2173):
r0 = socket$inet6(0xa, 0x3, 0x7)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00"/11], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x9}, 0x18)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)

1.46326296s ago: executing program 7 (id=2174):
r0 = socket$inet6(0xa, 0x3, 0x7)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00"/11], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x9}, 0x18)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)

1.281882567s ago: executing program 7 (id=2175):
timer_create(0x0, &(0x7f0000000480)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=<r0=>0x0)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
preadv2(r1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/66, 0x42}], 0x1, 0x80, 0x8000, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x140c, 0x300, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000004}, 0xc2e8027d9fb34f11)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040), 0x0)

1.267307318s ago: executing program 5 (id=2176):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
io_setup(0x1, &(0x7f00000000c0)=<r5=>0x0)
r6 = socket(0x10, 0x3, 0x9)
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x7fffffffffffffff)
r8 = eventfd(0xa0b4)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x184)
fcntl$lock(r9, 0x24, 0x0)
r10 = eventfd(0x3c)
r11 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r12 = fcntl$dupfd(r11, 0x406, r11)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x14, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x100}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @alu={0x4, 0x0, 0xd, 0x8, 0x9, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r12, 0x8, &(0x7f0000000300)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x1, 0x0, 0x4cb}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000580)=[r12], &(0x7f00000005c0)=[{0x5, 0x5, 0xa, 0xa}, {0x0, 0x1, 0xa, 0x6}, {0x4, 0x2, 0x10, 0xc}, {0x0, 0x4, 0x5, 0x4}, {0x0, 0x4, 0xe, 0x2}], 0x10, 0xd}, 0x94)
r13 = open$dir(&(0x7f0000000040)='./file0\x00', 0x81, 0x6fc51f600b241953)
mount_setattr(r13, &(0x7f0000000140)='./file0/file0\x00', 0x100, &(0x7f00000001c0)={0x4, 0x70, 0x80000, {r12}}, 0x20)
r14 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2)
pwritev2(r14, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3)
r15 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x1cb041, 0x8)
r16 = dup(r15)
sendfile(r16, r14, 0x0, 0x8000fffffffc)
r17 = eventfd(0x97c4)
io_submit(r5, 0x9, &(0x7f0000000980)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x3, r0, &(0x7f0000000140)="5deb3a759d8404bb1d1acee8f5b6355ed5983c99b8f6078eaf9db8b8a8760df2a1ae2ff5e15f7395a0d92966f94d07dc4e3ac93fc2638d67942de27fe9309ee15269f6581d70662f99a0d51a3743465cdfdea970b4d4a7222707426986dd04479d0ad650f7fa545628bae8953691a2b7fc381741bf884f767700ee16e33b3e223bd40e71ad042282f224d04b18cadb60730e539ddfbe7e", 0x97, 0x1, 0x0, 0x3, r7}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xe9f, r3, &(0x7f0000000280)="60ee13593c0939c50060644735ca1df3e9af4dd2533605e6618ba85012f1668bf559e3c50e1af625c9f2ed7f6d7fc59276f67e40372f4f050ce05761e184ec6e3107f6270d592c115cc366d3f5a0b6d7096538", 0x53, 0x4, 0x0, 0x0, r8}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x6, r0, &(0x7f0000000380)="e89123b83e7d9877c8c6fb39cfc445e271284a453999f70ac919523aa219b94b60f355c435aeb854a21af2237566d265111d07445739862f29bcc02556792a8a1ccbb1e09f11efec924cc827d92d372db10f207e694ea90e1a6a50d3", 0x5c, 0x7334, 0x0, 0x1, r9}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x9, r3, &(0x7f0000000440)="291d575a9fb266909a440f0c6c92b9b9e862a4e1046367737b96215e751e3b0247a6fdf5804b1c056efbb1def5b644412b0b5e7c718db0fcf5aae753c3626f16f8a49621f0df80ded1538d8e32f9d2e7982c058f0ec092f736cd5b8266c8ef60510b5055ee05", 0x66, 0x8, 0x0, 0x3, r10}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x5, 0xa, r0, &(0x7f00000005c0)="057fbc35dab22d50d6b7d5ff326a4388377f23e7f651a881116ae223d2db1ac2269a5e00b82b0a0c3cfd735b7cf8632cfd6b638725417ca7ea8fc1892142eaa679fa59c18b7b62ec7d9b2411a94844925b72f057fd83bae954f597476c63e0493ddf5235f131ba1050b1f928f4711a77f098e6a3ee9447655e883d78f0854d6a665ec95103d79b87b1d5d8f6e98fa1ed479974d7bff5d508bd66438b38f7", 0x9e, 0x9, 0x0, 0x1}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x400, r1, &(0x7f0000000680)="e1bf2982ca8cd9da40b653a84154d356e4b2584d36ad09d22f0af4ca7c77371e661b8bbce1ff43e28a1dc5e52e029baf8d99d9b1039c7de98c1ab9e7e16200d32b037884409162ee15ddd1325e89893830106aecc5daf0d4c8b75653d48c1490baa71a2efdb537ba5d0a", 0x6a, 0x8000, 0x0, 0x0, r12}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x6, 0x0, r3, &(0x7f0000000700), 0x0, 0xffff, 0x0, 0x1, r16}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x3, 0x2b, r3, &(0x7f0000000780)="d419ae212e0f77ebbc29ab16d85c68bf9e38873767eb98e85b932544bed6a470fd2f72981e135d4e293e3f7c853a5488bf12c32e5b7c160aa0218fdd8d0e72a74bc661373729b1f50dec67051f8ee3c97fa39879d672300055824b", 0x5b, 0x7ff, 0x0, 0x3}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x49b0, r3, &(0x7f0000000840)="8dcfb5a0c48c06bb132209218f7eb8304684ead2c81edf8731f2375e422bcff39120897172125b7895edac3fdc930abfb1c7243a7f9550aaf230c0d1d49b60d54c9654b03e4e0146116c0c5928669f9a3f13d01354773f57696d1bbdf98219140f5e947fb25b977d9c25710ff437f1bab44815577233124e5cdfe7e9f11ea4da2e5a5e7701450bfbf3158997f52db1c0592de4d6159bef48228894f972bbd896582273d4cb6ab4658e93a3e55c4256995bd1ef9ea85c35ff0522463762319695c6", 0xc1, 0x80000001, 0x0, 0x1, r17}])
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r18 = socket(0x400000000010, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r19=>0x0})
sendmsg$nl_route_sched(r18, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002b00)=@newtfilter={0x184c, 0x2c, 0x2, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x1820, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x100}, @TCA_U32_LINK={0x8, 0x3, 0x7fff}, @TCA_U32_ACT={0x180c, 0x7, [@m_csum={0x154, 0xb, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x2, 0x7, 0x7, 0x9}, 0xd}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x10001, 0x5, 0x40}, 0x7c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x8a46, 0x0, 0x8000, 0x4}, 0xf}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x4, 0x1, 0x24, 0x1}, 0x31}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x8, 0x10000000, 0x1ff, 0x1}, 0x5f}}]}, {0x9c, 0x6, "c1cda7171200e2c68efb63615ea17c21d224c0c48409d2d67a4690fce4ee6b9b9e938aca5c475bae30f2d937805491ec47aac156f4311ecbbadef35ec640861d17c21e5022e4ec2ad2d6bec89c521bcaa0f15fd5e663095c93566a679d6aa790e11f2232bec32457b1bcb9f68c24d995f209638124908d268397e57e6e45c06fb3f992ded78dd232d27f43afd9235911fd57a2f144d70d69"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mpls={0x10c, 0x11, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}]}, {0xd8, 0x6, "3c6cb324862343d3601e4f481b02a0710f72e65bfbab3d27b470f7985e9e47f35171549200fbd9a9e920e9b3d68daf12ed70bead75d80ca407808defcb9d147aa3e73c6130be6353b77a295ae57aec668be8393321ae11dc2b046f97ef7406bb60d2185b8a860f4459b044f902095449ef986fb14547028d0d578f368bce9794c17f1c3d449f855bf7087cbba95b641142294cf83c7a726bfb93955d43001f62579e812656bb80a32336556c262cc1dd4f08ef45996a32e8d1f0cccff334c808e39946b5d5468ff26bbdd6c97a97d420788aa5b6"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x17c, 0x1a, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xb, 0x2, 0x10000000, 0x800, 0x6}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x0, 0x6, 0x7, 0x7f}, 0x3, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1e6569bb, 0x6, 0x2, 0x1ff, 0x8}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x401, 0x4, 0x9, 0x5}, 0x4, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x9, 0x20000000, 0x1, 0x9}, 0x3, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0xda, 0x20000000, 0x0, 0x2}, 0x3, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x1000, 0x3, 0x40, 0x2}, 0x4, r19}}]}, {0x70, 0x6, "7f8f75d98a83e388ebc01c5a85ce2965a65aafd6f5fa42b44a0abe35c312dd4d7e7878d9cf1ce55575a022e1202a31f8e89d000c270d00b5b7dafa4d0d16ae57d88f66eba90fc94d77f937803adfeb078d74b4d61efd845dc91a2333c0905bebdc917aae9789ffaa178bcfe1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0x1058, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, '\\+\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xc3, 0x2, 0x2, 0xf9ff, 0x7}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0xf0, 0x13, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x2, 0x2, 0x3, 0x73f}}}]}, {0xab, 0x6, "b13bc990803614d343c730d1dc7d136ad7a6edecd56b70d287b2a4320f702c900ee40b6876102ae27babd8f5242ac6dcbbeb868fd0cf4c141cd37326de96cda0a378f87426eeaae9d24abed491ba575bfab587cab06f96868332166f8bf53817849cbf6a79707d72d264d63b043da45fbd524a344a73e11463128a0d449ecc1f21a7c9ef781f1fada6bc47ad0f8ef41c260ac1b3511ca143858b469f258a568674579b1433938e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0x154, 0xa, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8cb}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8b}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x1}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x9}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}]}, {0xf0, 0x6, "e06eed13e7b51f58c226e571b890cb79a71e70ed4b3ef56d211b760b51b8582cd542f7ee1a2575b7a0ba1346c23a501307d7ea11271655d40a34b39783a21d3c01594eedc86152ab28f3e87b518d111ee3bd0dfd1bef2be90045c3376ee9e94aba54fdd29318443c01d41148e07573dbf1612ce506dac6dfa57bf002e039bace6e2a7a66eae5d26865ed24728254a166f6a61d4ff7886a9e7e365e5f7bc56d9c7353ed68b12c361455f76a33fef9b102333d0b2c91fabbe674e2a0596491771139bc1a37514bd6ba8fe8d89f7232b7968c5b3406762f9e8653e90d5037e5008d5bcff6a6af3cabf78da6477f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_csum={0x190, 0xa, 0x0, 0x0, {{0x9}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xc8, 0x5, 0xffffffffffffffff, 0x8741, 0x2}, 0x7c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6e, 0x9, 0x7, 0x8, 0x8}, 0x76}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x7, 0x20000000, 0x0, 0x9}, 0x2c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x6, 0x5, 0x7, 0xe7d}, 0x80}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffff9, 0x0, 0x6, 0x101, 0x3}, 0x30}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x6, 0x8, 0x3, 0xf}, 0x4}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5d2, 0xa, 0x7, 0x9, 0x3ff}, 0x1c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x7, 0x8, 0xf949}, 0x2}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x5, 0x0, 0x6, 0x4}, 0x79}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x5d3a814d, 0x6, 0x2800000, 0x1}, 0x57}}]}, {0x4b, 0x6, "176c7580db0b341ddb69c3ca5fe3d5fc681871b29b36b5f706460be6fdefa6b1b04a4f66214b96c67c3511cee5f726d87c05d5c1c6e65263b2c335fd356caabd41b12bd36ae4f0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4c648d57019eb26d, 0x3}}}}]}]}}]}, 0x184c}, 0x1, 0x0, 0x0, 0x1010}, 0x4)

1.044112957s ago: executing program 6 (id=2178):
syz_open_dev$ptys(0xc, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000640000008500000006000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0x1003, &(0x7f0000001cc0)=""/4099, 0x40f00, 0x2d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
write$tun(r2, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x9, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0x1b, 0x68, 0x0, 0x60, 0x33, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "11f3305280f125"}}, 0x29)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r6, 0x0)
ftruncate(r6, 0xc17a)
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r7 = socket$inet(0x2, 0x2, 0x1)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x44010)
sendmsg$inet(r7, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4f21, @multicast2}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000300)="0800c8460f2a2a2a", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000)

999.787241ms ago: executing program 0 (id=2179):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0xfffffffffffffffe, {0x2, 0x6d8863b4f44cd1a9, 0x4}, 0xfe}, 0x18)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641", 0x3}], 0x1}, 0x4048081)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r2 = signalfd4(r0, &(0x7f0000000000)={[0x9]}, 0x8, 0x180000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000))
r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r5=>r0, {0x4}}, './file0\x00'})
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd0, '\x00', r1, r0}, 0x50)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xee, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000100)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x10, 0x80000000, 0x9}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000380)=[r4, r5, r6, r7], &(0x7f00000003c0)=[{0x5, 0x4, 0xe, 0x1}, {0x0, 0x1, 0x8, 0x8}, {0x5, 0x2, 0x8, 0x7}, {0x4, 0x5, 0xd, 0xb}], 0x10, 0xffff}, 0x94)

845.959905ms ago: executing program 6 (id=2180):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000370400000000ffffffff00000000", @ANYRES32=r4, @ANYBLOB="0b12050000000000240012800b00010069703667726500001400028008000100", @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
fadvise64(r0, 0x36a9, 0x9, 0x1)

764.731792ms ago: executing program 6 (id=2181):
socket$igmp6(0xa, 0x3, 0x3a)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x1000000000000008}, 0x18)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='io_uring_register\x00', r1}, 0x10)
r2 = io_uring_setup(0x55bb, &(0x7f0000007580)={0x0, 0x44bf, 0x400, 0x3, 0x6a})
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000007600), 0x1)

718.695986ms ago: executing program 6 (id=2182):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xec}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x45, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)

650.741402ms ago: executing program 6 (id=2183):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0b040000000000000000020000001400048010000180090001006d617371000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x68}}, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000600)="53fc7a52", 0x4}, {&(0x7f0000000640)="5767cf26f07d45440e597f4dc1", 0xd}], 0x2}, 0x40) (fail_nth: 4)

468.220048ms ago: executing program 6 (id=2184):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000400)=0x11)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x8}, 0x18)
syz_open_dev$sg(&(0x7f0000000740), 0x0, 0x18b203)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000540)=0x2, 0x4)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000480)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@errors_continue}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r4, 0x0, 0x0, 0x4fed0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0)
r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x50)
sendfile(r6, r6, 0x0, 0x800000009)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000580), &(0x7f00000005c0)=0x8)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0})
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='locks_get_lock_context\x00', r0}, 0x18)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r7, 0x26, &(0x7f0000000000))

467.805188ms ago: executing program 0 (id=2185):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94)
recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x85}], 0x1, 0x40, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
prlimit64(0x0, 0xe, 0x0, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r6}, 0x18)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bond0\x00', <r8=>0x0})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'vlan0\x00', <r9=>0x0})
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000d"], 0x0, 0x26}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, r10, 0x1, 0xffffffff}, 0x48)
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000010400000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="814f0400000000002000128008000100687372001400028008000200", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r8], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x80c0)
quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000402, 0xffffffffffffffff, 0x0)
sendmmsg$sock(r2, &(0x7f00000044c0), 0x4000000000001c0, 0x0)
recvfrom(r3, &(0x7f0000000040)=""/60, 0xdb, 0x40, 0x0, 0x0)

412.007943ms ago: executing program 7 (id=2186):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@local, @local}, 0x8)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000580)={[{@acl}, {@barrier}, {@minixdf}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {}, {@debug}, {@acl}, {@noinit_itable}]}, 0xfc, 0x592, &(0x7f0000001240)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0)
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, &(0x7f0000000240)=0x1)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x15, 0x3, 'fo\x00', 0x1, 0x0, 0x69}, 0x2c)
r4 = socket$kcm(0xa, 0x2, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000100)={{0x84, @remote, 0x4e24, 0x3, 'lblc\x00', 0x16, 0x2, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x0, 0x101c8, 0x12d61, 0x12d58}}, 0x44)
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44)
sendmsg$sock(r4, &(0x7f0000000080)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0)
link(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0)
r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
dup2(r7, r6)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r6, 0x0)

164.163035ms ago: executing program 0 (id=2187):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000007a01f0000000000000000008500000027000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2a, 0x2a, 0x5, [@decl_tag={0x8, 0x0, 0x0, 0x11, 0x4, 0x6}, @datasec={0xc, 0x1, 0x0, 0xf, 0x2, [{0x2, 0x208}], "b3b6"}]}, {0x0, [0x30, 0x2e, 0x5f]}}, &(0x7f00000004c0)=""/22, 0x49, 0x16, 0x1, 0x4}, 0x28)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x2, <r3=>0x0}, 0x8)
r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@o_path={&(0x7f00000005c0)='./file0\x00', 0x0, 0x4000, r0}, 0x18)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x50)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10)
finit_module(r6, 0x0, 0x3)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r6, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2d41, 0x10)
pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x204000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@aname={'aname', 0x3d, 'rfdno'}}]}})
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x17, 0x8, 0x10, 0x3b7, 0x40, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000780)={{0x1, 0x1, 0x18, <r10=>r0, {0x2}}, './file0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1e, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff81, 0x0, 0x0, 0x0, 0xbb}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x3ff}, @ldst={0x3, 0x3, 0x4, 0x1, 0x6, 0xfffffffffffffffe}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x6}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}]}, &(0x7f00000000c0)='GPL\x00', 0x7d, 0xd5, &(0x7f0000000340)=""/213, 0x41100, 0x0, '\x00', r1, @sk_lookup=0x24, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x3, 0x1, 0x100000, 0x8}, 0x10, r3, r0, 0x0, &(0x7f00000007c0)=[r4, r5, r6, r7, r9, r10]}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x80000000, 0x20000008b}, 0x0)
unshare(0x600)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x400000}, 0x50)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r11, 0x7, 0x0, @val=@tcx}, 0x1c)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
sendfile(r12, r12, 0x0, 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x800000, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

104.607981ms ago: executing program 0 (id=2188):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r4=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
write(r5, &(0x7f0000000240)='T', 0x1)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sys_enter\x00', r8}, 0xf)
r9 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r9, 0x0, 0x0, 0x1000f4)
copy_file_range(r9, 0x0, r9, &(0x7f0000000080)=0x87d, 0x401, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r5, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r5, &(0x7f0000000280)="ca54431731f8e74bf133d20e4901da00aadfd496c131adc5cf6d433b5ef0e4c66da3d467c6215319e03efafe0a08ef21fcfa082321c38f25b549c1", &(0x7f0000001880)=""/4096}, 0x20)

440.07µs ago: executing program 5 (id=2189):
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

0s ago: executing program 0 (id=2190):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x200000, &(0x7f0000000bc0)={[{@test_dummy_encryption_v1}, {@bh}, {@delalloc}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_async_commit}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpjquota}], [{@smackfsroot={'smackfsroot', 0x3d, '[]\xa4<ew\x81\xc1g\xb1\xc1R}!'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fowner_eq}, {@euid_eq}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/loop-control\x00'}}, {@dont_measure}, {@subj_type={'subj_type', 0x3d, 'debug_want_extra_isize'}}]}, 0x3, 0x58d, &(0x7f0000000d80)="$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")
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x26400, 0x0) (async)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x26400, 0x0)

kernel console output (not intermixed with test programs):

empt to access beyond end of device
[  158.443458][ T9492] loop3: rw=2049, sector=132, nr_sectors = 2 limit=64
[  158.456857][ T9492] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 19 starting block 66)
[  158.527354][ T9492] syz.3.1711: attempt to access beyond end of device
[  158.527354][ T9492] loop3: rw=2049, sector=136, nr_sectors = 6 limit=64
[  158.540817][ T9492] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 19 starting block 68)
[  158.571508][ T9534] FAULT_INJECTION: forcing a failure.
[  158.571508][ T9534] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  158.584646][ T9534] CPU: 1 UID: 0 PID: 9534 Comm: syz.2.1727 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  158.584759][ T9534] Tainted: [W]=WARN
[  158.584765][ T9534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  158.584778][ T9534] Call Trace:
[  158.584786][ T9534]  <TASK>
[  158.584796][ T9534]  __dump_stack+0x1d/0x30
[  158.584828][ T9534]  dump_stack_lvl+0x95/0xd0
[  158.584893][ T9534]  dump_stack+0x15/0x1b
[  158.584916][ T9534]  should_fail_ex+0x265/0x280
[  158.584944][ T9534]  should_fail+0xb/0x20
[  158.584969][ T9534]  should_fail_usercopy+0x1a/0x20
[  158.585075][ T9534]  _copy_from_iter+0xcf/0xe70
[  158.585101][ T9534]  ? __alloc_skb+0x396/0x4b0
[  158.585163][ T9534]  ? __alloc_skb+0x228/0x4b0
[  158.585190][ T9534]  netlink_sendmsg+0x471/0x6b0
[  158.585223][ T9534]  ? __pfx_netlink_sendmsg+0x10/0x10
[  158.585267][ T9534]  __sock_sendmsg+0x145/0x180
[  158.585292][ T9534]  ____sys_sendmsg+0x31e/0x4a0
[  158.585391][ T9534]  ___sys_sendmsg+0x17b/0x1d0
[  158.585466][ T9534]  __x64_sys_sendmsg+0xd4/0x160
[  158.585506][ T9534]  x64_sys_call+0x17ba/0x3000
[  158.585565][ T9534]  do_syscall_64+0xca/0x2b0
[  158.585598][ T9534]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.585674][ T9534] RIP: 0033:0x7f39c655f749
[  158.585692][ T9534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  158.585790][ T9534] RSP: 002b:00007f39c4fbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  158.585815][ T9534] RAX: ffffffffffffffda RBX: 00007f39c67b5fa0 RCX: 00007f39c655f749
[  158.585831][ T9534] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000003
[  158.585927][ T9534] RBP: 00007f39c4fbf090 R08: 0000000000000000 R09: 0000000000000000
[  158.585943][ T9534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  158.585959][ T9534] R13: 00007f39c67b6038 R14: 00007f39c67b5fa0 R15: 00007ffd8dd69078
[  158.585983][ T9534]  </TASK>
[  158.609240][ T9492] syz.3.1711: attempt to access beyond end of device
[  158.609240][ T9492] loop3: rw=2049, sector=74, nr_sectors = 8 limit=64
[  158.797140][ T9492] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 19 starting block 37)
[  158.814525][ T9492] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 19 starting block 54)
[  158.825789][ T9492] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 19 starting block 62)
[  158.837058][ T9492] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 19 starting block 125)
[  158.848597][ T9492] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 19 starting block 106)
[  158.875734][ T9498] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 18: block 165:freeing already freed block (bit 164); block bitmap corrupt.
[  158.890400][ T9498] EXT4-fs (loop3): pa ffff888107a1abd0: logic 32, phys. 161, len 32
[  158.898432][ T9498] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 30, pa_free 29
[  158.908875][ T9498] EXT4-fs error (device loop3): ext4_get_branch:178: inode #18: block 2248146944: comm syz.3.1711: invalid block
[  158.943066][ T9539] FAULT_INJECTION: forcing a failure.
[  158.943066][ T9539] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  158.956230][ T9539] CPU: 1 UID: 0 PID: 9539 Comm: syz.1.1728 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  158.956334][ T9539] Tainted: [W]=WARN
[  158.956342][ T9539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  158.956360][ T9539] Call Trace:
[  158.956369][ T9539]  <TASK>
[  158.956379][ T9539]  __dump_stack+0x1d/0x30
[  158.956407][ T9539]  dump_stack_lvl+0x95/0xd0
[  158.956428][ T9539]  dump_stack+0x15/0x1b
[  158.956494][ T9539]  should_fail_ex+0x265/0x280
[  158.956518][ T9539]  should_fail+0xb/0x20
[  158.956542][ T9539]  should_fail_usercopy+0x1a/0x20
[  158.956568][ T9539]  _copy_from_user+0x1c/0xb0
[  158.956732][ T9539]  ___sys_sendmsg+0xc1/0x1d0
[  158.956780][ T9539]  __sys_sendmmsg+0x178/0x300
[  158.956846][ T9539]  __x64_sys_sendmmsg+0x57/0x70
[  158.956874][ T9539]  x64_sys_call+0x1e28/0x3000
[  158.956904][ T9539]  do_syscall_64+0xca/0x2b0
[  158.956939][ T9539]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.957036][ T9539] RIP: 0033:0x7fb2ed2af749
[  158.957120][ T9539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  158.957144][ T9539] RSP: 002b:00007fb2ebd0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  158.957168][ T9539] RAX: ffffffffffffffda RBX: 00007fb2ed505fa0 RCX: 00007fb2ed2af749
[  158.957185][ T9539] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004
[  158.957198][ T9539] RBP: 00007fb2ebd0f090 R08: 0000000000000000 R09: 0000000000000000
[  158.957277][ T9539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  158.957291][ T9539] R13: 00007fb2ed506038 R14: 00007fb2ed505fa0 R15: 00007ffec129ba98
[  158.957316][ T9539]  </TASK>
[  159.203878][ T9498] Buffer I/O error on dev loop3, logical block 49, lost sync page write
[  159.551696][ T9548] bond0: entered promiscuous mode
[  159.557250][ T9548] bond_slave_0: entered promiscuous mode
[  159.563095][ T9548] bond_slave_1: entered promiscuous mode
[  159.592895][ T9548] bond0: left promiscuous mode
[  159.597742][ T9548] bond_slave_0: left promiscuous mode
[  159.603385][ T9548] bond_slave_1: left promiscuous mode
[  159.663319][ T9555] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[  159.680087][ T9555] SELinux: failed to load policy
[  159.777089][ T9563] set_capacity_and_notify: 2 callbacks suppressed
[  159.777107][ T9563] loop1: detected capacity change from 0 to 512
[  159.808177][ T9563] EXT4-fs (loop1): corrupt root inode, run e2fsck
[  159.842634][ T9563] EXT4-fs (loop1): mount failed
[  159.848324][ T9559] FAULT_INJECTION: forcing a failure.
[  159.848324][ T9559] name failslab, interval 1, probability 0, space 0, times 0
[  159.861163][ T9559] CPU: 1 UID: 0 PID: 9559 Comm: syz.2.1737 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  159.861273][ T9559] Tainted: [W]=WARN
[  159.861280][ T9559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  159.861293][ T9559] Call Trace:
[  159.861298][ T9559]  <TASK>
[  159.861305][ T9559]  __dump_stack+0x1d/0x30
[  159.861332][ T9559]  dump_stack_lvl+0x95/0xd0
[  159.861360][ T9559]  dump_stack+0x15/0x1b
[  159.861386][ T9559]  should_fail_ex+0x265/0x280
[  159.861483][ T9559]  should_failslab+0x8c/0xb0
[  159.861505][ T9559]  __kmalloc_cache_noprof+0x65/0x4c0
[  159.861528][ T9559]  ? rtnl_newlink+0x5c/0x1360
[  159.861705][ T9559]  ? __pfx_rtnl_newlink+0x10/0x10
[  159.861742][ T9559]  rtnl_newlink+0x5c/0x1360
[  159.861846][ T9559]  ? nlmon_xmit+0x4f/0x60
[  159.861897][ T9559]  ? dev_hard_start_xmit+0x3b0/0x3e0
[  159.861983][ T9559]  ? __dev_queue_xmit+0x13a6/0x1ee0
[  159.862010][ T9559]  ? xas_load+0x413/0x430
[  159.862039][ T9559]  ? css_rstat_updated+0xbb/0x280
[  159.862103][ T9559]  ? xas_load+0x413/0x430
[  159.862131][ T9559]  ? __memcg_slab_free_hook+0x135/0x230
[  159.862210][ T9559]  ? __rcu_read_unlock+0x4f/0x70
[  159.862234][ T9559]  ? avc_has_perm_noaudit+0xab/0x130
[  159.862346][ T9559]  ? cred_has_capability+0x210/0x280
[  159.862447][ T9559]  ? selinux_capable+0x31/0x40
[  159.862475][ T9559]  ? security_capable+0x83/0x90
[  159.862546][ T9559]  ? ns_capable+0x7d/0xb0
[  159.862595][ T9559]  ? __pfx_rtnl_newlink+0x10/0x10
[  159.862673][ T9559]  rtnetlink_rcv_msg+0x5fe/0x6d0
[  159.862720][ T9559]  netlink_rcv_skb+0x123/0x220
[  159.862755][ T9559]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  159.862827][ T9559]  rtnetlink_rcv+0x1c/0x30
[  159.862867][ T9559]  netlink_unicast+0x5c0/0x690
[  159.862899][ T9559]  netlink_sendmsg+0x58b/0x6b0
[  159.862985][ T9559]  ? __pfx_netlink_sendmsg+0x10/0x10
[  159.863017][ T9559]  __sock_sendmsg+0x145/0x180
[  159.863040][ T9559]  ____sys_sendmsg+0x31e/0x4a0
[  159.863079][ T9559]  ___sys_sendmsg+0x17b/0x1d0
[  159.863236][ T9559]  __x64_sys_sendmsg+0xd4/0x160
[  159.863268][ T9559]  x64_sys_call+0x17ba/0x3000
[  159.863295][ T9559]  do_syscall_64+0xca/0x2b0
[  159.863355][ T9559]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.863454][ T9559] RIP: 0033:0x7f39c655f749
[  159.863469][ T9559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  159.863487][ T9559] RSP: 002b:00007f39c4fbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  159.863512][ T9559] RAX: ffffffffffffffda RBX: 00007f39c67b5fa0 RCX: 00007f39c655f749
[  159.863528][ T9559] RDX: 000000000404c080 RSI: 0000200000000040 RDI: 000000000000000d
[  159.863544][ T9559] RBP: 00007f39c4fbf090 R08: 0000000000000000 R09: 0000000000000000
[  159.863559][ T9559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  159.863606][ T9559] R13: 00007f39c67b6038 R14: 00007f39c67b5fa0 R15: 00007ffd8dd69078
[  159.863635][ T9559]  </TASK>
[  160.219775][ T9573] loop2: detected capacity change from 0 to 1024
[  160.235292][   T65] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.252168][ T9576] syzkaller1: entered promiscuous mode
[  160.257723][ T9576] syzkaller1: entered allmulticast mode
[  160.264387][ T9573] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002]
[  160.273317][ T9573] EXT4-fs mount: 27 callbacks suppressed
[  160.273336][ T9573] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  160.298647][   T65] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.338750][   T29] kauditd_printk_skb: 261 callbacks suppressed
[  160.338777][   T29] audit: type=1400 audit(1767617870.881:36752): avc:  denied  { mounton } for  pid=9580 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  160.371684][ T9581] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1742: bg 0: block 88: padding at end of block bitmap is not set
[  160.444351][   T65] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.500084][   T29] audit: type=1400 audit(1767617871.041:36753): avc:  denied  { create } for  pid=9588 comm="syz.4.1745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  160.530931][   T65] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.551449][   T29] audit: type=1400 audit(1767617871.071:36754): avc:  denied  { bind } for  pid=9588 comm="syz.4.1745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  160.570892][   T29] audit: type=1400 audit(1767617871.071:36755): avc:  denied  { write } for  pid=9588 comm="syz.4.1745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  160.611956][ T9592] IPv6: NLM_F_CREATE should be specified when creating new route
[  160.707667][   T29] audit: type=1400 audit(1767617871.141:36756): avc:  denied  { setopt } for  pid=9590 comm="syz.4.1746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  160.727610][   T29] audit: type=1400 audit(1767617871.141:36757): avc:  denied  { map } for  pid=9590 comm="syz.4.1746" path="socket:[23123]" dev="sockfs" ino=23123 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  160.751166][   T29] audit: type=1400 audit(1767617871.141:36758): avc:  denied  { read } for  pid=9590 comm="syz.4.1746" path="socket:[23123]" dev="sockfs" ino=23123 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  160.774921][   T29] audit: type=1400 audit(1767617871.141:36759): avc:  denied  { getopt } for  pid=9590 comm="syz.4.1746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  160.810306][ T9597] __nla_validate_parse: 8 callbacks suppressed
[  160.810327][ T9597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1747'.
[  160.904515][   T65] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  160.915106][   T65] bond0 (unregistering): Released all slaves
[  160.927323][   T29] audit: type=1400 audit(1767617871.471:36760): avc:  denied  { ioctl } for  pid=9596 comm="syz.4.1747" path="socket:[23301]" dev="sockfs" ino=23301 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  160.961559][   T65] bond1 (unregistering): Released all slaves
[  160.987838][   T65] bond2 (unregistering): Released all slaves
[  161.000870][ T9602] loop4: detected capacity change from 0 to 512
[  161.019226][ T9580] lo speed is unknown, defaulting to 1000
[  161.025493][ T9580] lo speed is unknown, defaulting to 1000
[  161.042197][   T29] audit: type=1400 audit(1767617871.521:36761): avc:  denied  { bind } for  pid=9596 comm="syz.4.1747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  161.078289][ T9602] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  161.117316][ T9602] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002]
[  161.126141][ T9602] EXT4-fs (loop4): orphan cleanup on readonly fs
[  161.152784][ T9602] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  161.221525][ T9602] EXT4-fs (loop4): Remounting filesystem read-only
[  161.232634][ T9602] EXT4-fs (loop4): 1 truncate cleaned up
[  161.238712][   T52] EXT4-fs (loop4): Quota write (off=8192, len=1024) cancelled because transaction is not started
[  161.249426][   T52] EXT4-fs (loop4): Quota write (off=8192, len=1024) cancelled because transaction is not started
[  161.267231][ T9617] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1753'.
[  161.285912][   T52] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[  161.324513][ T9602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  161.379350][   T65] veth1_macvtap: left promiscuous mode
[  161.387060][ T9624] loop1: detected capacity change from 0 to 512
[  161.388540][   T65] veth0_macvtap: left promiscuous mode
[  161.402815][   T65] veth1_vlan: left promiscuous mode
[  161.402872][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.408136][   T65] veth0_vlan: left promiscuous mode
[  161.445306][ T9624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.511909][ T9624] ext4 filesystem being mounted at /331/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  161.540684][ T9633] loop4: detected capacity change from 0 to 512
[  161.551210][ T9630] netlink: 4 bytes leftover after parsing attributes in process `gtp'.
[  161.560408][ T9633] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  161.578948][ T9633] EXT4-fs (loop4): orphan cleanup on readonly fs
[  161.589286][ T9633] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.1760: corrupted inode contents
[  161.603652][ T9624] EXT4-fs (loop1): shut down requested (0)
[  161.610527][ T9633] EXT4-fs (loop4): Remounting filesystem read-only
[  161.613684][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.617564][ T9633] EXT4-fs (loop4): 1 truncate cleaned up
[  161.627555][  T407] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  161.642525][  T407] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  161.653302][  T407] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[  161.664341][ T9633] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  161.689656][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.723705][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.759406][ T9580] chnl_net:caif_netlink_parms(): no params data found
[  161.762399][ T9646] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1763'.
[  161.828870][ T9580] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.836242][ T9580] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.843692][ T9580] bridge_slave_0: entered allmulticast mode
[  161.850287][ T9580] bridge_slave_0: entered promiscuous mode
[  161.858084][ T9580] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.865294][ T9580] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.872632][ T9580] bridge_slave_1: entered allmulticast mode
[  161.879348][ T9580] bridge_slave_1: entered promiscuous mode
[  161.907599][ T9580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  161.930516][ T9580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  161.952859][ T9658] FAULT_INJECTION: forcing a failure.
[  161.952859][ T9658] name failslab, interval 1, probability 0, space 0, times 0
[  161.965585][ T9658] CPU: 0 UID: 0 PID: 9658 Comm: syz.0.1766 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  161.965658][ T9658] Tainted: [W]=WARN
[  161.965667][ T9658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  161.965683][ T9658] Call Trace:
[  161.965691][ T9658]  <TASK>
[  161.965700][ T9658]  __dump_stack+0x1d/0x30
[  161.965790][ T9658]  dump_stack_lvl+0x95/0xd0
[  161.965883][ T9658]  dump_stack+0x15/0x1b
[  161.965907][ T9658]  should_fail_ex+0x265/0x280
[  161.965937][ T9658]  should_failslab+0x8c/0xb0
[  161.966020][ T9658]  __kmalloc_cache_noprof+0x65/0x4c0
[  161.966052][ T9658]  ? do_eventfd+0x5b/0x1b0
[  161.966083][ T9658]  do_eventfd+0x5b/0x1b0
[  161.966111][ T9658]  __x64_sys_eventfd+0x20/0x30
[  161.966152][ T9658]  x64_sys_call+0x2a20/0x3000
[  161.966184][ T9658]  do_syscall_64+0xca/0x2b0
[  161.966228][ T9658]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.966250][ T9658] RIP: 0033:0x7f8b7d4cf749
[  161.966268][ T9658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  161.966290][ T9658] RSP: 002b:00007f8b7bf37038 EFLAGS: 00000246 ORIG_RAX: 000000000000011c
[  161.966313][ T9658] RAX: ffffffffffffffda RBX: 00007f8b7d725fa0 RCX: 00007f8b7d4cf749
[  161.966328][ T9658] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000800
[  161.966417][ T9658] RBP: 00007f8b7bf37090 R08: 0000000000000000 R09: 0000000000000000
[  161.966433][ T9658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  161.966511][ T9658] R13: 00007f8b7d726038 R14: 00007f8b7d725fa0 R15: 00007ffcbbd499e8
[  161.966535][ T9658]  </TASK>
[  162.160619][   T65] IPVS: stop unused estimator thread 0...
[  162.167991][ T9580] team0: Port device team_slave_0 added
[  162.180189][ T9580] team0: Port device team_slave_1 added
[  162.220225][ T9580] batman_adv: batadv0: Adding interface: batadv_slave_0
[  162.227256][ T9580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  162.254160][ T9580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  162.266832][ T9580] batman_adv: batadv0: Adding interface: batadv_slave_1
[  162.273953][ T9580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  162.300041][ T9580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  162.345826][ T9580] hsr_slave_0: entered promiscuous mode
[  162.356074][ T9580] hsr_slave_1: entered promiscuous mode
[  162.404018][ T9674] loop1: detected capacity change from 0 to 512
[  162.465510][ T9580] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  162.475860][ T9580] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  162.487066][ T9580] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  162.495138][ T9674] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.508434][ T9674] ext4 filesystem being mounted at /335/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  162.522135][ T9580] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  162.540483][ T9674] EXT4-fs (loop1): shut down requested (0)
[  162.582237][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.605163][ T9580] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.617409][ T9580] 8021q: adding VLAN 0 to HW filter on device team0
[  162.630661][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.637784][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  162.653745][ T9687] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1775'.
[  162.665374][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.672545][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[  162.685134][ T9691] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1774'.
[  162.816077][ T9580] 8021q: adding VLAN 0 to HW filter on device batadv0
[  162.878663][ T9715] loop4: detected capacity change from 0 to 512
[  162.942700][ T9715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.949462][ T9707] lo speed is unknown, defaulting to 1000
[  162.961291][ T9715] ext4 filesystem being mounted at /331/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  162.972187][ T9720] loop2: detected capacity change from 0 to 512
[  162.984438][ T9693] pimreg: entered allmulticast mode
[  162.990595][ T9707] lo speed is unknown, defaulting to 1000
[  162.999521][ T9693] pimreg: left allmulticast mode
[  163.001446][ T9720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.031881][ T9715] EXT4-fs (loop4): shut down requested (0)
[  163.055937][ T9720] ext4 filesystem being mounted at /389/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  163.079041][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.135700][ T9731] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1786'.
[  163.152119][ T9720] EXT4-fs (loop2): shut down requested (0)
[  163.212054][ T9739] FAULT_INJECTION: forcing a failure.
[  163.212054][ T9739] name failslab, interval 1, probability 0, space 0, times 0
[  163.217969][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.225007][ T9739] CPU: 0 UID: 0 PID: 9739 Comm: syz.4.1788 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  163.225081][ T9739] Tainted: [W]=WARN
[  163.225163][ T9739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  163.225205][ T9739] Call Trace:
[  163.225225][ T9739]  <TASK>
[  163.225248][ T9739]  __dump_stack+0x1d/0x30
[  163.225346][ T9739]  dump_stack_lvl+0x95/0xd0
[  163.225471][ T9739]  dump_stack+0x15/0x1b
[  163.225541][ T9739]  should_fail_ex+0x265/0x280
[  163.225660][ T9739]  should_failslab+0x8c/0xb0
[  163.225732][ T9739]  kmem_cache_alloc_noprof+0x69/0x4b0
[  163.225804][ T9739]  ? prepare_creds+0x39/0x550
[  163.225865][ T9739]  ? get_random_u64+0x13f/0x1f0
[  163.226000][ T9739]  prepare_creds+0x39/0x550
[  163.226069][ T9739]  copy_creds+0x8f/0x340
[  163.226122][ T9739]  ? dup_task_struct+0x60b/0x950
[  163.226194][ T9739]  copy_process+0x638/0x1ef0
[  163.226266][ T9739]  ? copy_clone_args_from_user+0x3ce/0x490
[  163.226407][ T9739]  kernel_clone+0x16c/0x5c0
[  163.226488][ T9739]  __se_sys_clone3+0x1c2/0x200
[  163.226667][ T9739]  __x64_sys_clone3+0x31/0x40
[  163.226741][ T9739]  x64_sys_call+0x2c0f/0x3000
[  163.226895][ T9739]  do_syscall_64+0xca/0x2b0
[  163.227035][ T9739]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.227100][ T9739] RIP: 0033:0x7fc035adf749
[  163.227152][ T9739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  163.227283][ T9739] RSP: 002b:00007fc03453ef08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  163.227354][ T9739] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fc035adf749
[  163.227395][ T9739] RDX: 00007fc03453ef20 RSI: 0000000000000058 RDI: 00007fc03453ef20
[  163.227497][ T9739] RBP: 00007fc03453f090 R08: 0000000000000000 R09: 0000000000000058
[  163.227538][ T9739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  163.227595][ T9739] R13: 00007fc035d36038 R14: 00007fc035d35fa0 R15: 00007fffc0da6d98
[  163.227664][ T9739]  </TASK>
[  163.360529][ T9580] veth0_vlan: entered promiscuous mode
[  163.443456][ T9580] veth1_vlan: entered promiscuous mode
[  163.493695][ T9752] bpf: Bad value for 'uid'
[  163.505933][ T9746] can0: slcan on ttyS3.
[  163.531045][ T9580] veth0_macvtap: entered promiscuous mode
[  163.551157][ T9746] loop0: detected capacity change from 0 to 1024
[  163.558233][ T9746] EXT4-fs: Ignoring removed bh option
[  163.578526][ T9580] veth1_macvtap: entered promiscuous mode
[  163.584482][ T9756] loop2: detected capacity change from 0 to 512
[  163.594585][ T9746] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.603939][ T9756] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.1795: EA inode hash validation failed
[  163.621985][ T9756] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.1795: corrupted inode contents
[  163.634548][ T9756] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.1795: mark_inode_dirty error
[  163.635884][ T9580] batman_adv: batadv0: Interface activated: batadv_slave_0
[  163.653656][ T9756] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.1795: corrupted inode contents
[  163.666270][ T9580] batman_adv: batadv0: Interface activated: batadv_slave_1
[  163.674144][ T9756] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #15: comm syz.2.1795: mark_inode_dirty error
[  163.692117][ T1580] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  163.714014][ T1580] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  163.725210][ T9756] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #15: comm syz.2.1795: mark inode dirty (error -117)
[  163.739886][   T65] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.749880][   T65] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.758029][ T9746] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt.
[  163.780085][ T9763] netlink: 'syz.4.1797': attribute type 1 has an invalid length.
[  163.784425][ T9756] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117)
[  163.801651][ T9746] EXT4-fs (loop0): Remounting filesystem read-only
[  163.808292][ T9746] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4984: inode #15: block 64: len 64: ext4_ext_map_blocks returned -30
[  163.823572][ T9756] EXT4-fs (loop2): 1 orphan inode deleted
[  163.829761][ T9756] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  163.860302][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.934962][ T9774] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.992545][ T9746] can0 (unregistered): slcan off ttyS3.
[  164.007055][ T9774] ext4 filesystem being mounted at /342/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  164.032697][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.054147][ T9774] EXT4-fs (loop1): shut down requested (0)
[  164.103535][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.122480][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1803'.
[  164.155062][ T9786] ip6gre2: entered allmulticast mode
[  164.263007][ T9789] netlink: 'syz.0.1803': attribute type 4 has an invalid length.
[  164.270927][ T9789] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1803'.
[  164.382680][ T9789] .`: renamed from bond0 (while UP)
[  164.390166][ T9791] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8842c128, mo2=0002]
[  164.411751][ T9791] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.607619][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.685917][ T5730] hid_parser_main: 12 callbacks suppressed
[  164.685956][ T5730] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0
[  164.699658][ T5730] hid-generic 0000:0000:0000.0039: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  164.782116][ T9811] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  164.791440][ T9811] EXT4-fs (loop2): orphan cleanup on readonly fs
[  164.799381][ T9811] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.1810: corrupted inode contents
[  164.811740][ T9811] EXT4-fs (loop2): Remounting filesystem read-only
[  164.818639][ T9811] EXT4-fs (loop2): 1 truncate cleaned up
[  164.824681][   T31] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  164.835298][   T31] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  164.848021][   T31] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[  164.859651][ T9811] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  164.889489][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.949966][ T9823] dummy0: entered promiscuous mode
[  164.955377][ T9823] dummy0: entered allmulticast mode
[  165.237509][ T9840] set_capacity_and_notify: 3 callbacks suppressed
[  165.237531][ T9840] loop1: detected capacity change from 0 to 512
[  165.313463][ T9840] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.346501][ T9840] ext4 filesystem being mounted at /351/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  165.399289][ T9840] EXT4-fs (loop1): shut down requested (0)
[  165.461209][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.614639][ T9848] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1825'.
[  165.733910][   T29] kauditd_printk_skb: 533 callbacks suppressed
[  165.733925][   T29] audit: type=1400 audit(1767617876.281:37275): avc:  denied  { relabelfrom } for  pid=9852 comm="syz.1.1827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  165.790354][ T9853] syzkaller0: entered promiscuous mode
[  165.796002][ T9853] syzkaller0: entered allmulticast mode
[  165.822246][ T9855] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1828'.
[  165.830583][   T29] audit: type=1400 audit(1767617876.281:37276): avc:  denied  { relabelto } for  pid=9852 comm="syz.1.1827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  165.852037][   T29] audit: type=1400 audit(1767617876.381:37277): avc:  denied  { write } for  pid=9852 comm="syz.1.1827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  165.874333][ T9855] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1828'.
[  165.889510][ T9860] FAULT_INJECTION: forcing a failure.
[  165.889510][ T9860] name failslab, interval 1, probability 0, space 0, times 0
[  165.902416][ T9860] CPU: 0 UID: 0 PID: 9860 Comm: syz.2.1829 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  165.902455][ T9860] Tainted: [W]=WARN
[  165.902462][ T9860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  165.902474][ T9860] Call Trace:
[  165.902481][ T9860]  <TASK>
[  165.902530][ T9860]  __dump_stack+0x1d/0x30
[  165.902556][ T9860]  dump_stack_lvl+0x95/0xd0
[  165.902591][ T9860]  dump_stack+0x15/0x1b
[  165.902613][ T9860]  should_fail_ex+0x265/0x280
[  165.902689][ T9860]  should_failslab+0x8c/0xb0
[  165.902806][ T9860]  kmem_cache_alloc_noprof+0x69/0x4b0
[  165.902829][ T9860]  ? alloc_empty_file+0x76/0x200
[  165.902862][ T9860]  alloc_empty_file+0x76/0x200
[  165.902892][ T9860]  alloc_file_pseudo+0xc6/0x160
[  165.903051][ T9860]  __shmem_file_setup+0x1de/0x210
[  165.903077][ T9860]  shmem_file_setup+0x3b/0x50
[  165.903112][ T9860]  __se_sys_memfd_create+0x2f7/0x6b0
[  165.903190][ T9860]  __x64_sys_memfd_create+0x31/0x40
[  165.903258][ T9860]  x64_sys_call+0x28cb/0x3000
[  165.903440][ T9860]  do_syscall_64+0xca/0x2b0
[  165.903546][ T9860]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.903581][ T9860] RIP: 0033:0x7f39c655f749
[  165.903599][ T9860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  165.903619][ T9860] RSP: 002b:00007f39c4fbee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  165.903643][ T9860] RAX: ffffffffffffffda RBX: 0000000000000451 RCX: 00007f39c655f749
[  165.903698][ T9860] RDX: 00007f39c4fbeef0 RSI: 0000000000000000 RDI: 00007f39c65e4960
[  165.903710][ T9860] RBP: 0000200000000780 R08: 00007f39c4fbebb7 R09: 00007f39c4fbee40
[  165.903722][ T9860] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000280
[  165.903734][ T9860] R13: 00007f39c4fbeef0 R14: 00007f39c4fbeeb0 R15: 0000200000000180
[  165.903756][ T9860]  </TASK>
[  165.906054][ T9855] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1828'.
[  166.155470][ T9862] syzkaller0: entered promiscuous mode
[  166.157426][   T29] audit: type=1400 audit(1767617876.701:37278): avc:  denied  { setopt } for  pid=9864 comm="syz.0.1832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  166.161683][ T9862] syzkaller0: entered allmulticast mode
[  166.371452][ T9862] netlink: 19 bytes leftover after parsing attributes in process `syz.5.1830'.
[  166.401976][   T29] audit: type=1400 audit(1767617876.851:37279): avc:  denied  { write } for  pid=9864 comm="syz.0.1832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  166.421544][   T29] audit: type=1326 audit(1767617876.891:37280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9861 comm="syz.5.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f913b9cf749 code=0x7ffc0000
[  166.445261][   T29] audit: type=1326 audit(1767617876.891:37281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9861 comm="syz.5.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f913b9cf749 code=0x7ffc0000
[  166.468814][   T29] audit: type=1326 audit(1767617876.891:37282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9861 comm="syz.5.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f913b9cf749 code=0x7ffc0000
[  166.492400][   T29] audit: type=1326 audit(1767617876.891:37283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9861 comm="syz.5.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f913b9cf749 code=0x7ffc0000
[  166.516049][   T29] audit: type=1326 audit(1767617876.891:37284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9861 comm="syz.5.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f913b9cf749 code=0x7ffc0000
[  166.562208][ T9873] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[  166.644565][ T9873] SELinux: failed to load policy
[  166.695209][ T9878] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[  166.703583][ T9878] SELinux: failed to load policy
[  166.731195][ T9880] loop1: detected capacity change from 0 to 512
[  166.741418][ T9880] EXT4-fs (loop1): 1 truncate cleaned up
[  166.747549][ T9880] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  166.786709][ T9880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1837'.
[  166.822105][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.856381][ T9887] loop1: detected capacity change from 0 to 512
[  166.873388][ T9887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.886510][ T9887] ext4 filesystem being mounted at /358/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  166.901116][ T9887] sch_fq: defrate 0 ignored.
[  166.923738][ T9887] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.087481][ T9904] loop1: detected capacity change from 0 to 1024
[  167.103045][ T9904] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002]
[  167.111868][ T9904] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  167.132584][ T9904] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1845: bg 0: block 88: padding at end of block bitmap is not set
[  167.160022][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.195722][ T9910] loop0: detected capacity change from 0 to 512
[  167.205113][ T9914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1848'.
[  167.215188][ T9914] FAULT_INJECTION: forcing a failure.
[  167.215188][ T9914] name failslab, interval 1, probability 0, space 0, times 0
[  167.227951][ T9914] CPU: 1 UID: 0 PID: 9914 Comm: syz.1.1848 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  167.228002][ T9914] Tainted: [W]=WARN
[  167.228011][ T9914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  167.228028][ T9914] Call Trace:
[  167.228037][ T9914]  <TASK>
[  167.228074][ T9914]  __dump_stack+0x1d/0x30
[  167.228105][ T9914]  dump_stack_lvl+0x95/0xd0
[  167.228134][ T9914]  dump_stack+0x15/0x1b
[  167.228160][ T9914]  should_fail_ex+0x265/0x280
[  167.228208][ T9914]  should_failslab+0x8c/0xb0
[  167.228230][ T9914]  __kvmalloc_node_noprof+0x149/0x6b0
[  167.228373][ T9914]  ? alloc_netdev_mqs+0xa5/0xa40
[  167.228407][ T9914]  ? vsnprintf+0x7ee/0x860
[  167.228437][ T9914]  ? __pfx_team_setup+0x10/0x10
[  167.228494][ T9914]  alloc_netdev_mqs+0xa5/0xa40
[  167.228575][ T9914]  rtnl_create_link+0x239/0x6e0
[  167.228692][ T9914]  rtnl_newlink_create+0x14c/0x620
[  167.228722][ T9914]  rtnl_newlink+0xf5b/0x1360
[  167.228827][ T9914]  ? __rcu_read_unlock+0x4f/0x70
[  167.228855][ T9914]  ? avc_has_perm_noaudit+0xab/0x130
[  167.228932][ T9914]  ? cred_has_capability+0x210/0x280
[  167.229032][ T9914]  ? selinux_capable+0x31/0x40
[  167.229060][ T9914]  ? security_capable+0x83/0x90
[  167.229171][ T9914]  ? ns_capable+0x7d/0xb0
[  167.229210][ T9914]  ? __pfx_rtnl_newlink+0x10/0x10
[  167.229325][ T9914]  rtnetlink_rcv_msg+0x5fe/0x6d0
[  167.229361][ T9914]  ? avc_has_perm_noaudit+0xab/0x130
[  167.229469][ T9914]  netlink_rcv_skb+0x123/0x220
[  167.229508][ T9914]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  167.229609][ T9914]  rtnetlink_rcv+0x1c/0x30
[  167.229648][ T9914]  netlink_unicast+0x5c0/0x690
[  167.229686][ T9914]  netlink_sendmsg+0x58b/0x6b0
[  167.229807][ T9914]  ? __pfx_netlink_sendmsg+0x10/0x10
[  167.229841][ T9914]  __sock_sendmsg+0x145/0x180
[  167.229866][ T9914]  ____sys_sendmsg+0x345/0x4a0
[  167.229927][ T9914]  ___sys_sendmsg+0x17b/0x1d0
[  167.229980][ T9914]  __sys_sendmmsg+0x178/0x300
[  167.230032][ T9914]  __x64_sys_sendmmsg+0x57/0x70
[  167.230095][ T9914]  x64_sys_call+0x1e28/0x3000
[  167.230121][ T9914]  do_syscall_64+0xca/0x2b0
[  167.230161][ T9914]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.230240][ T9914] RIP: 0033:0x7fb2ed2af749
[  167.230260][ T9914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  167.230353][ T9914] RSP: 002b:00007fb2ebd0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  167.230378][ T9914] RAX: ffffffffffffffda RBX: 00007fb2ed505fa0 RCX: 00007fb2ed2af749
[  167.230395][ T9914] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004
[  167.230411][ T9914] RBP: 00007fb2ebd0f090 R08: 0000000000000000 R09: 0000000000000000
[  167.230427][ T9914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  167.230442][ T9914] R13: 00007fb2ed506038 R14: 00007fb2ed505fa0 R15: 00007ffec129ba98
[  167.230468][ T9914]  </TASK>
[  167.515236][ T9910] EXT4-fs (loop0): 1 truncate cleaned up
[  167.522814][ T9902] loop2: detected capacity change from 0 to 128
[  167.523109][ T9910] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  167.567373][ T9910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1849'.
[  167.577154][ T9902] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  167.590972][ T9902] ext4 filesystem being mounted at /401/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  167.692278][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.775708][ T3318] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  167.859196][ T9938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1851'.
[  167.868295][ T9938] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1851'.
[  167.877374][ T9938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1851'.
[  167.995950][ T9942] FAULT_INJECTION: forcing a failure.
[  167.995950][ T9942] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  168.009182][ T9942] CPU: 1 UID: 0 PID: 9942 Comm: syz.2.1856 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  168.009269][ T9942] Tainted: [W]=WARN
[  168.009278][ T9942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  168.009295][ T9942] Call Trace:
[  168.009303][ T9942]  <TASK>
[  168.009311][ T9942]  __dump_stack+0x1d/0x30
[  168.009410][ T9942]  dump_stack_lvl+0x95/0xd0
[  168.009432][ T9942]  dump_stack+0x15/0x1b
[  168.009457][ T9942]  should_fail_ex+0x265/0x280
[  168.009487][ T9942]  should_fail+0xb/0x20
[  168.009519][ T9942]  should_fail_usercopy+0x1a/0x20
[  168.009545][ T9942]  _copy_from_user+0x1c/0xb0
[  168.009578][ T9942]  ___sys_recvmsg+0xaa/0x370
[  168.009608][ T9942]  ? 0xffffffff81000000
[  168.009657][ T9942]  ? __rcu_read_unlock+0x4f/0x70
[  168.009691][ T9942]  __x64_sys_recvmsg+0xd1/0x160
[  168.009735][ T9942]  x64_sys_call+0x2cbf/0x3000
[  168.009792][ T9942]  do_syscall_64+0xca/0x2b0
[  168.009826][ T9942]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.009853][ T9942] RIP: 0033:0x7f39c655f749
[  168.009872][ T9942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  168.009906][ T9942] RSP: 002b:00007f39c4fbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  168.009925][ T9942] RAX: ffffffffffffffda RBX: 00007f39c67b5fa0 RCX: 00007f39c655f749
[  168.009990][ T9942] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000005
[  168.010003][ T9942] RBP: 00007f39c4fbf090 R08: 0000000000000000 R09: 0000000000000000
[  168.010019][ T9942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  168.010035][ T9942] R13: 00007f39c67b6038 R14: 00007f39c67b5fa0 R15: 00007ffd8dd69078
[  168.010054][ T9942]  </TASK>
[  168.233304][ T9936] loop0: detected capacity change from 0 to 512
[  168.261593][ T9943] bond0: entered promiscuous mode
[  168.266753][ T9943] bond_slave_0: entered promiscuous mode
[  168.272572][ T9943] bond_slave_1: entered promiscuous mode
[  168.300951][ T9943] dummy0: entered promiscuous mode
[  168.309215][ T9936] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.1859: EA inode hash validation failed
[  168.369083][ T9936] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.1859: corrupted inode contents
[  168.405614][ T9946] loop2: detected capacity change from 0 to 512
[  168.433281][ T9936] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.1859: mark_inode_dirty error
[  168.678226][ T9941] loop5: detected capacity change from 0 to 1024
[  168.685733][ T9946] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  168.695089][ T9946] EXT4-fs (loop2): orphan cleanup on readonly fs
[  168.702583][ T9941] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002]
[  168.711204][ T9936] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.1859: corrupted inode contents
[  168.725287][ T9941] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  168.737985][ T9946] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.1860: corrupted inode contents
[  168.750546][ T9936] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3000: inode #15: comm syz.0.1859: mark_inode_dirty error
[  168.764803][ T9943] bond0: left promiscuous mode
[  168.769625][ T9943] bond_slave_0: left promiscuous mode
[  168.775361][ T9943] bond_slave_1: left promiscuous mode
[  168.782847][ T9946] EXT4-fs (loop2): Remounting filesystem read-only
[  168.789466][ T9946] EXT4-fs (loop2): 1 truncate cleaned up
[  168.795371][   T65] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  168.806095][   T65] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  168.819752][ T9936] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #15: comm syz.0.1859: mark inode dirty (error -117)
[  168.832713][ T9943] dummy0: left promiscuous mode
[  168.842842][ T5730] IPVS: starting estimator thread 0...
[  168.852198][ T9941] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1858: bg 0: block 88: padding at end of block bitmap is not set
[  168.869034][ T9936] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117)
[  168.878516][   T65] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[  168.899018][ T9936] EXT4-fs (loop0): 1 orphan inode deleted
[  168.905616][ T9946] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  168.929389][ T9580] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.940991][ T9953] IPVS: using max 1824 ests per chain, 91200 per kthread
[  168.942092][ T9936] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  168.988733][ T9955] netlink: 'syz.4.1862': attribute type 1 has an invalid length.
[  169.002909][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.059827][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.076378][ T9962] can0: slcan on ttyS3.
[  169.102129][ T9965] bpf: Bad value for 'uid'
[  169.107450][ T9962] loop5: detected capacity change from 0 to 1024
[  169.131686][ T9962] EXT4-fs: Ignoring removed bh option
[  169.152591][ T9962] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.198172][ T9962] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt.
[  169.223182][ T9962] EXT4-fs (loop5): Remounting filesystem read-only
[  169.229829][ T9962] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:4984: inode #15: block 64: len 64: ext4_ext_map_blocks returned -30
[  169.341647][ T9973] can0 (unregistered): slcan off ttyS3.
[  169.400784][ T9580] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.492532][ T9976] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1868: bad orphan inode 11862016
[  169.561882][ T9976] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  169.605095][ T9976] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  169.715434][ T9580] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  169.943006][ T9991] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  169.961457][ T9991] EXT4-fs (loop4): orphan cleanup on readonly fs
[  169.974224][ T9991] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.1873: corrupted inode contents
[  170.011543][ T9991] EXT4-fs (loop4): Remounting filesystem read-only
[  170.028363][ T9991] EXT4-fs (loop4): 1 truncate cleaned up
[  170.034402][   T31] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  170.045144][   T31] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  170.088487][   T31] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[  170.117600][ T9991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  170.182886][T10003] bpf: Bad value for 'uid'
[  170.205232][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.364404][T10028] can0: slcan on ttyS3.
[  170.383338][T10028] set_capacity_and_notify: 2 callbacks suppressed
[  170.383359][T10028] loop5: detected capacity change from 0 to 1024
[  170.403516][T10028] EXT4-fs: Ignoring removed bh option
[  170.413746][T10034] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[  170.472381][T10034] SELinux: failed to load policy
[  170.525935][T10028] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.553226][T10042] loop1: detected capacity change from 0 to 2048
[  170.560072][T10042] ext4: Unknown parameter 'obj_type'
[  170.581837][T10028] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt.
[  170.656904][T10028] EXT4-fs (loop5): Remounting filesystem read-only
[  170.692864][T10028] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:4984: inode #15: block 64: len 64: ext4_ext_map_blocks returned -30
[  171.313029][T10054] loop4: detected capacity change from 0 to 1024
[  171.341357][T10054] EXT4-fs: Ignoring removed bh option
[  171.363946][T10054] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.424743][   T29] kauditd_printk_skb: 715 callbacks suppressed
[  171.424758][   T29] audit: type=1400 audit(1767617881.971:37988): avc:  denied  { read append open } for  pid=10049 comm="syz.4.1892" path="/348/file1/cpuacct.usage_sys" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  171.515108][   T29] audit: type=1400 audit(1767617882.001:37989): avc:  denied  { lock } for  pid=10049 comm="syz.4.1892" path="/348/file1/cpuacct.usage_sys" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  171.562185][T10045] can0 (unregistered): slcan off ttyS3.
[  171.587752][T10050] can0: slcan on ttyS3.
[  171.648431][ T9580] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.671675][T10049] can0 (unregistered): slcan off ttyS3.
[  171.695810][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.799660][   T29] audit: type=1400 audit(1767617882.341:37990): avc:  denied  { write } for  pid=10071 comm="syz.5.1899" name="mcfilter6" dev="proc" ino=4026533450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  171.932383][   T29] audit: type=1400 audit(1767617882.431:37991): avc:  denied  { read write } for  pid=10075 comm="syz.2.1901" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  171.956170][   T29] audit: type=1400 audit(1767617882.431:37992): avc:  denied  { open } for  pid=10075 comm="syz.2.1901" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  172.399859][   T29] audit: type=1326 audit(1767617882.941:37993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10094 comm="syz.5.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f913b9cf749 code=0x7ffc0000
[  172.446223][T10097] __nla_validate_parse: 8 callbacks suppressed
[  172.446257][T10097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1908'.
[  172.499850][T10100] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1909'.
[  172.509177][   T29] audit: type=1326 audit(1767617882.971:37994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10094 comm="syz.5.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f913b9cf749 code=0x7ffc0000
[  172.532835][   T29] audit: type=1326 audit(1767617882.971:37995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10094 comm="syz.5.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f913b9cf749 code=0x7ffc0000
[  172.556543][   T29] audit: type=1326 audit(1767617882.971:37996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10094 comm="syz.5.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f913b9cf749 code=0x7ffc0000
[  172.580198][   T29] audit: type=1326 audit(1767617882.971:37997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10094 comm="syz.5.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f913b9cf749 code=0x7ffc0000
[  172.619799][T10097] ip6gre1: entered allmulticast mode
[  172.695761][T10097] netlink: 'syz.2.1908': attribute type 4 has an invalid length.
[  172.703790][T10097] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1908'.
[  172.765197][T10097] .`: renamed from bond0 (while UP)
[  172.808278][T10110] loop4: detected capacity change from 0 to 512
[  172.861465][T10110] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.919988][T10119] netlink: 'syz.5.1914': attribute type 4 has an invalid length.
[  172.939714][T10110] ext4 filesystem being mounted at /355/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  173.011129][T10110] EXT4-fs (loop4): shut down requested (0)
[  173.035914][T10127] dummy0: entered promiscuous mode
[  173.041321][T10127] dummy0: entered allmulticast mode
[  173.069473][T10125] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1918'.
[  173.083195][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.088344][T10123] bond0: entered promiscuous mode
[  173.097420][T10123] bond_slave_0: entered promiscuous mode
[  173.103470][T10123] bond_slave_1: entered promiscuous mode
[  173.215941][T10123] bond0: left promiscuous mode
[  173.220885][T10123] bond_slave_0: left promiscuous mode
[  173.226401][T10123] bond_slave_1: left promiscuous mode
[  173.259263][T10129] loop4: detected capacity change from 0 to 2048
[  173.348302][T10129] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8842c128, mo2=0002]
[  173.359625][T10145] loop2: detected capacity change from 0 to 1024
[  173.367183][T10145] EXT4-fs: inline encryption not supported
[  173.377454][T10145] EXT4-fs (loop2): orphan cleanup on readonly fs
[  173.385679][T10145] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1925: Failed to acquire dquot type 0
[  173.397427][T10129] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  173.410113][T10145] EXT4-fs (loop2): 1 truncate cleaned up
[  173.416305][T10145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  173.445875][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.458549][T10154] bond0: (slave dummy0): Releasing backup interface
[  173.479651][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.496336][T10154] bridge_slave_0: left allmulticast mode
[  173.502167][T10154] bridge_slave_0: left promiscuous mode
[  173.508065][T10154] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.518896][T10154] bridge_slave_1: left allmulticast mode
[  173.524700][T10154] bridge_slave_1: left promiscuous mode
[  173.530400][T10154] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.542694][T10158] netlink: 'syz.1.1928': attribute type 10 has an invalid length.
[  173.550639][T10158] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1928'.
[  173.565174][T10162] loop2: detected capacity change from 0 to 512
[  173.574096][T10154] bond0: (slave bond_slave_0): Releasing backup interface
[  173.575285][T10160] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1931'.
[  173.592392][T10154] bond0: (slave bond_slave_1): Releasing backup interface
[  173.600364][T10154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  173.608431][T10154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  173.616731][T10154] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  173.633833][T10158] veth1_vlan: left promiscuous mode
[  173.639821][T10162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.655088][T10169] loop4: detected capacity change from 0 to 1024
[  173.661789][T10158] batman_adv: batadv0: Interface activated: veth1_vlan
[  173.662576][T10169] EXT4-fs: Ignoring removed oldalloc option
[  173.674985][T10162] ext4 filesystem being mounted at /422/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  173.690247][T10169] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.708001][T10162] EXT4-fs (loop2): shut down requested (0)
[  173.711190][T10169] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  173.741461][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.761765][T10169] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1933: bg 0: block 112: padding at end of block bitmap is not set
[  173.777215][T10169] EXT4-fs (loop4): Remounting filesystem read-only
[  173.791218][T10176] loop1: detected capacity change from 0 to 1024
[  173.801314][T10176] EXT4-fs: Ignoring removed oldalloc option
[  173.802207][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  173.851683][T10176] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.864934][T10176] ext4 filesystem being mounted at /375/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  173.877012][T10176] FAULT_INJECTION: forcing a failure.
[  173.877012][T10176] name failslab, interval 1, probability 0, space 0, times 0
[  173.889954][T10176] CPU: 1 UID: 0 PID: 10176 Comm: syz.1.1936 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  173.890033][T10176] Tainted: [W]=WARN
[  173.890042][T10176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  173.890059][T10176] Call Trace:
[  173.890065][T10176]  <TASK>
[  173.890073][T10176]  __dump_stack+0x1d/0x30
[  173.890177][T10176]  dump_stack_lvl+0x95/0xd0
[  173.890199][T10176]  dump_stack+0x15/0x1b
[  173.890253][T10176]  should_fail_ex+0x265/0x280
[  173.890279][T10176]  should_failslab+0x8c/0xb0
[  173.890301][T10176]  kmem_cache_alloc_noprof+0x69/0x4b0
[  173.890325][T10176]  ? getname_flags+0x80/0x3b0
[  173.890357][T10176]  getname_flags+0x80/0x3b0
[  173.890431][T10176]  do_sys_openat2+0x60/0x150
[  173.890473][T10176]  __x64_sys_openat+0xf2/0x120
[  173.890506][T10176]  x64_sys_call+0x2b07/0x3000
[  173.890538][T10176]  do_syscall_64+0xca/0x2b0
[  173.890581][T10176]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.890623][T10176] RIP: 0033:0x7fb2ed2af749
[  173.890638][T10176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  173.890656][T10176] RSP: 002b:00007fb2ebd0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  173.890675][T10176] RAX: ffffffffffffffda RBX: 00007fb2ed505fa0 RCX: 00007fb2ed2af749
[  173.890689][T10176] RDX: 000000000000275a RSI: 0000200000001c80 RDI: ffffffffffffff9c
[  173.890745][T10176] RBP: 00007fb2ebd0f090 R08: 0000000000000000 R09: 0000000000000000
[  173.890757][T10176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  173.890825][T10176] R13: 00007fb2ed506038 R14: 00007fb2ed505fa0 R15: 00007ffec129ba98
[  173.890850][T10176]  </TASK>
[  174.073406][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  174.171999][T10193] capability: warning: `syz.2.1942' uses deprecated v2 capabilities in a way that may be insecure
[  174.201110][T10193] FAULT_INJECTION: forcing a failure.
[  174.201110][T10193] name failslab, interval 1, probability 0, space 0, times 0
[  174.213929][T10193] CPU: 1 UID: 0 PID: 10193 Comm: syz.2.1942 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  174.213971][T10193] Tainted: [W]=WARN
[  174.213979][T10193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  174.213995][T10193] Call Trace:
[  174.214073][T10193]  <TASK>
[  174.214083][T10193]  __dump_stack+0x1d/0x30
[  174.214109][T10193]  dump_stack_lvl+0x95/0xd0
[  174.214193][T10193]  dump_stack+0x15/0x1b
[  174.214213][T10193]  should_fail_ex+0x265/0x280
[  174.214237][T10193]  should_failslab+0x8c/0xb0
[  174.214273][T10193]  __kmalloc_node_track_caller_noprof+0xb9/0x5b0
[  174.214305][T10193]  ? sidtab_sid2str_get+0xa0/0x130
[  174.214405][T10193]  kmemdup_noprof+0x2b/0x70
[  174.214438][T10193]  sidtab_sid2str_get+0xa0/0x130
[  174.214475][T10193]  security_sid_to_context_core+0x1eb/0x2e0
[  174.214651][T10193]  security_sid_to_context+0x27/0x40
[  174.214684][T10193]  avc_audit_post_callback+0x10f/0x520
[  174.214719][T10193]  ? __pfx_avc_audit_post_callback+0x10/0x10
[  174.214810][T10193]  common_lsm_audit+0x1bb/0x230
[  174.214841][T10193]  ? __pfx_avc_audit_post_callback+0x10/0x10
[  174.214953][T10193]  ? avc_denied+0xe4/0x100
[  174.214995][T10193]  slow_avc_audit+0x104/0x140
[  174.215095][T10193]  avc_has_perm+0x13a/0x180
[  174.215132][T10193]  selinux_inode_setxattr+0x473/0x6d0
[  174.215228][T10193]  security_inode_setxattr+0x13a/0x1b0
[  174.215278][T10193]  __vfs_setxattr_locked+0x83/0x1c0
[  174.215308][T10193]  vfs_setxattr+0x132/0x270
[  174.215332][T10193]  file_setxattr+0x139/0x1b0
[  174.215366][T10193]  path_setxattrat+0x290/0x310
[  174.215557][T10193]  __x64_sys_fsetxattr+0x6b/0x80
[  174.215589][T10193]  x64_sys_call+0x23c4/0x3000
[  174.215615][T10193]  do_syscall_64+0xca/0x2b0
[  174.215729][T10193]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.215756][T10193] RIP: 0033:0x7f39c655f749
[  174.215772][T10193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  174.215791][T10193] RSP: 002b:00007f39c4fbf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be
[  174.215811][T10193] RAX: ffffffffffffffda RBX: 00007f39c67b5fa0 RCX: 00007f39c655f749
[  174.215823][T10193] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005
[  174.215836][T10193] RBP: 00007f39c4fbf090 R08: 0000000000000000 R09: 0000000000000000
[  174.215850][T10193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  174.215866][T10193] R13: 00007f39c67b6038 R14: 00007f39c67b5fa0 R15: 00007ffd8dd69078
[  174.215886][T10193]  </TASK>
[  174.483197][T10200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1945'.
[  174.492378][T10201] loop0: detected capacity change from 0 to 512
[  174.498452][T10200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1945'.
[  174.519538][T10201] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1943: couldn't read orphan inode 26 (err -116)
[  174.532345][T10201] EXT4-fs (loop0): Remounting filesystem read-only
[  174.539633][T10201] ext4 filesystem being mounted at /394/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  174.570135][T10207] ext4 filesystem being mounted at /425/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  174.583888][T10207] EXT4-fs (loop2): shut down requested (0)
[  174.681757][ T1580] Bluetooth: hci0: Frame reassembly failed (-84)
[  174.736571][T10225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1952'.
[  174.750607][T10225] ip6gre1: entered allmulticast mode
[  174.810300][T10227] bpf: Bad value for 'uid'
[  174.857610][T10230] netlink: 'syz.4.1952': attribute type 4 has an invalid length.
[  174.865435][T10230] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1952'.
[  174.921605][T10229] syzkaller0: entered promiscuous mode
[  174.927155][T10229] syzkaller0: entered allmulticast mode
[  174.968684][T10230] .`: renamed from bond0 (while UP)
[  175.053543][T10234] bond0: entered promiscuous mode
[  175.058658][T10234] bond_slave_0: entered promiscuous mode
[  175.064515][T10234] bond_slave_1: entered promiscuous mode
[  175.072316][T10234] bond0: left promiscuous mode
[  175.077140][T10234] bond_slave_0: left promiscuous mode
[  175.082674][T10234] bond_slave_1: left promiscuous mode
[  175.122457][T10236] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  175.130700][T10236] EXT4-fs (loop4): orphan cleanup on readonly fs
[  175.138796][T10236] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.1956: corrupted inode contents
[  175.151026][T10236] EXT4-fs (loop4): Remounting filesystem read-only
[  175.157666][T10236] EXT4-fs (loop4): 1 truncate cleaned up
[  175.165874][   T52] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  175.176474][   T52] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  175.223868][   T52] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[  175.293518][T10247] ext4 filesystem being mounted at /366/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  175.322627][T10247] EXT4-fs (loop4): shut down requested (0)
[  175.499617][T10264] bpf: Bad value for 'uid'
[  175.554365][T10265] set_capacity_and_notify: 3 callbacks suppressed
[  175.554380][T10265] loop2: detected capacity change from 0 to 128
[  175.999536][T10290] bpf: Bad value for 'uid'
[  176.056787][T10295] bpf: Bad value for 'uid'
[  176.120495][T10304] IPv6: Can't replace route, no match found
[  176.124537][T10300] bond0: entered promiscuous mode
[  176.132876][T10300] bond0: left promiscuous mode
[  176.315202][T10327] loop1: detected capacity change from 0 to 1024
[  176.333864][T10327] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002]
[  176.410115][T10335] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1988: bg 0: block 88: padding at end of block bitmap is not set
[  176.642119][   T29] kauditd_printk_skb: 860 callbacks suppressed
[  176.642137][   T29] audit: type=1326 audit(1767617887.191:38844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10347 comm="syz.5.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f913b9cf749 code=0x7ffc0000
[  176.673046][   T29] audit: type=1326 audit(1767617887.191:38845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10347 comm="syz.5.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f913b9cf749 code=0x7ffc0000
[  176.678302][T10348] bond0: entered promiscuous mode
[  176.696743][   T29] audit: type=1326 audit(1767617887.191:38846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10347 comm="syz.5.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f913b9cf749 code=0x7ffc0000
[  176.701968][T10348] bond_slave_0: entered promiscuous mode
[  176.703021][T10348] bond_slave_1: entered promiscuous mode
[  176.725573][   T29] audit: type=1326 audit(1767617887.191:38847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10347 comm="syz.5.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f913b9cf749 code=0x7ffc0000
[  176.760530][   T29] audit: type=1326 audit(1767617887.191:38848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10347 comm="syz.5.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f913b9cf749 code=0x7ffc0000
[  176.784238][   T29] audit: type=1326 audit(1767617887.191:38849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10347 comm="syz.5.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f913b9cf749 code=0x7ffc0000
[  176.791125][ T3724] Bluetooth: hci0: command 0x1003 tx timeout
[  176.807845][   T29] audit: type=1326 audit(1767617887.191:38850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10347 comm="syz.5.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f913b9cf749 code=0x7ffc0000
[  176.837614][   T29] audit: type=1326 audit(1767617887.191:38851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10347 comm="syz.5.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f913b9cf749 code=0x7ffc0000
[  176.861232][   T29] audit: type=1326 audit(1767617887.191:38852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10347 comm="syz.5.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f913b9cf749 code=0x7ffc0000
[  176.884980][   T29] audit: type=1326 audit(1767617887.191:38853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10347 comm="syz.5.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f913b9cf749 code=0x7ffc0000
[  176.908755][T10348] bond0: left promiscuous mode
[  176.909519][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  176.913635][T10348] bond_slave_0: left promiscuous mode
[  176.925181][T10348] bond_slave_1: left promiscuous mode
[  176.931160][T10355] loop1: detected capacity change from 0 to 512
[  176.943277][T10355] ext4 filesystem being mounted at /392/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  177.043451][T10370] FAULT_INJECTION: forcing a failure.
[  177.043451][T10370] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  177.056669][T10370] CPU: 0 UID: 0 PID: 10370 Comm: syz.1.2000 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  177.056699][T10370] Tainted: [W]=WARN
[  177.056704][T10370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  177.056723][T10370] Call Trace:
[  177.056729][T10370]  <TASK>
[  177.056736][T10370]  __dump_stack+0x1d/0x30
[  177.056759][T10370]  dump_stack_lvl+0x95/0xd0
[  177.056855][T10370]  dump_stack+0x15/0x1b
[  177.056873][T10370]  should_fail_ex+0x265/0x280
[  177.056893][T10370]  should_fail+0xb/0x20
[  177.056945][T10370]  should_fail_usercopy+0x1a/0x20
[  177.056988][T10370]  _copy_from_user+0x1c/0xb0
[  177.057017][T10370]  kstrtouint_from_user+0x69/0xf0
[  177.057041][T10370]  ? 0xffffffff81000000
[  177.057057][T10370]  ? selinux_file_permission+0x1e2/0x320
[  177.057149][T10370]  proc_fail_nth_write+0x50/0x160
[  177.057175][T10370]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  177.057200][T10370]  vfs_write+0x269/0x960
[  177.057278][T10370]  ? vfs_read+0x4e6/0x770
[  177.057346][T10370]  ? __rcu_read_unlock+0x4f/0x70
[  177.057363][T10370]  ? __fget_files+0x184/0x1c0
[  177.057426][T10370]  ? mutex_lock+0x58/0x90
[  177.057450][T10370]  ksys_write+0xda/0x1a0
[  177.057467][T10370]  __x64_sys_write+0x40/0x50
[  177.057484][T10370]  x64_sys_call+0x2847/0x3000
[  177.057570][T10370]  do_syscall_64+0xca/0x2b0
[  177.057601][T10370]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.057651][T10370] RIP: 0033:0x7fb2ed2ae1ff
[  177.057666][T10370] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  177.057711][T10370] RSP: 002b:00007fb2ebcee030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  177.057728][T10370] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb2ed2ae1ff
[  177.057740][T10370] RDX: 0000000000000001 RSI: 00007fb2ebcee0a0 RDI: 0000000000000004
[  177.057769][T10370] RBP: 00007fb2ebcee090 R08: 0000000000000000 R09: 0000000000000000
[  177.057780][T10370] R10: 0000000000000241 R11: 0000000000000293 R12: 0000000000000001
[  177.057790][T10370] R13: 00007fb2ed506128 R14: 00007fb2ed506090 R15: 00007ffec129ba98
[  177.057806][T10370]  </TASK>
[  177.319287][T10377] loop1: detected capacity change from 0 to 512
[  177.331839][T10377] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  177.339992][T10377] EXT4-fs (loop1): orphan cleanup on readonly fs
[  177.347904][T10377] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.2005: corrupted inode contents
[  177.360247][T10377] EXT4-fs (loop1): Remounting filesystem read-only
[  177.367391][T10377] EXT4-fs (loop1): 1 truncate cleaned up
[  177.373186][   T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  177.383842][   T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  177.394623][   T12] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started
[  177.609444][T10388] wg2: entered promiscuous mode
[  177.614413][T10388] wg2: entered allmulticast mode
[  177.656497][T10391] __nla_validate_parse: 8 callbacks suppressed
[  177.656516][T10391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2010'.
[  177.675443][T10388] loop4: detected capacity change from 0 to 512
[  177.693273][T10388] ext4 filesystem being mounted at /380/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  177.710051][T10391] hsr_slave_1 (unregistering): left promiscuous mode
[  177.862337][T10388] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.2009: corrupted inode contents
[  177.874347][T10392] loop2: detected capacity change from 0 to 128
[  177.903156][T10388] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.2009: mark_inode_dirty error
[  177.922018][T10388] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.2009: corrupted inode contents
[  177.935066][T10392] ext4 filesystem being mounted at /442/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  177.940085][T10402] bpf: Bad value for 'uid'
[  177.995033][T10388] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.2009: mark_inode_dirty error
[  178.185352][T10411] loop5: detected capacity change from 0 to 512
[  178.220087][T10409] loop0: detected capacity change from 0 to 2048
[  178.227009][T10407] syzkaller0: entered promiscuous mode
[  178.232636][T10407] syzkaller0: entered allmulticast mode
[  178.285363][T10409] Alternate GPT is invalid, using primary GPT.
[  178.291700][T10409]  loop0: p1 p2 p3
[  178.295447][T10409] loop0: partition table partially beyond EOD, truncated
[  178.421452][T10416] loop0: detected capacity change from 0 to 512
[  178.456483][T10418] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2018'.
[  178.473397][T10416] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  178.498738][T10416] EXT4-fs (loop0): orphan cleanup on readonly fs
[  178.552610][T10416] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.2017: corrupted inode contents
[  178.601395][T10416] EXT4-fs (loop0): Remounting filesystem read-only
[  178.608210][T10416] EXT4-fs (loop0): 1 truncate cleaned up
[  178.614070][   T12] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  178.624680][   T12] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  178.635272][   T12] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[  178.705135][T10403] xt_CT: You must specify a L4 protocol and not use inversions on it
[  178.839760][T10439] SELinux:  Context � is not valid (left unmapped).
[  178.866854][T10441] SELinux:  policydb string S does not match my string SE Linux
[  178.874855][T10441] SELinux: failed to load policy
[  178.886411][T10445] loop0: detected capacity change from 0 to 1024
[  178.902261][T10445] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002]
[  178.976112][T10455] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2026: bg 0: block 88: padding at end of block bitmap is not set
[  179.147916][T10463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  179.156679][T10463] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  179.157270][T10460] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  179.176418][ T9003] hid-generic 0000:3000000:0000.003A: unknown main item tag 0x4
[  179.184240][ T9003] hid-generic 0000:3000000:0000.003A: unknown main item tag 0x2
[  179.191978][ T9003] hid-generic 0000:3000000:0000.003A: unknown main item tag 0x0
[  179.199744][ T9003] hid-generic 0000:3000000:0000.003A: unknown main item tag 0x0
[  179.207490][ T9003] hid-generic 0000:3000000:0000.003A: unknown main item tag 0x0
[  179.215242][ T9003] hid-generic 0000:3000000:0000.003A: unknown main item tag 0x0
[  179.223025][ T9003] hid-generic 0000:3000000:0000.003A: unknown main item tag 0x0
[  179.230724][ T9003] hid-generic 0000:3000000:0000.003A: unknown main item tag 0x0
[  179.238469][ T9003] hid-generic 0000:3000000:0000.003A: unknown main item tag 0x0
[  179.246283][ T9003] hid-generic 0000:3000000:0000.003A: unknown main item tag 0x0
[  179.261150][T10460] EXT4-fs (loop4): orphan cleanup on readonly fs
[  179.270030][T10460] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.2029: corrupted inode contents
[  179.282199][T10463] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  179.282600][T10460] EXT4-fs (loop4): Remounting filesystem read-only
[  179.289543][T10463] vhci_hcd vhci_hcd.2: invalid port number 96
[  179.296657][T10460] EXT4-fs (loop4): 1 truncate cleaned up
[  179.302397][T10463] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[  179.316357][  T407] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  179.326974][  T407] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  179.349607][  T407] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[  179.409676][ T9003] hid-generic 0000:3000000:0000.003A: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  179.432235][T10467] dummy0: entered promiscuous mode
[  179.437625][T10467] dummy0: entered allmulticast mode
[  179.642441][T10471] FAULT_INJECTION: forcing a failure.
[  179.642441][T10471] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  179.655622][T10471] CPU: 1 UID: 0 PID: 10471 Comm: syz.1.2032 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  179.655731][T10471] Tainted: [W]=WARN
[  179.655740][T10471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  179.655754][T10471] Call Trace:
[  179.655761][T10471]  <TASK>
[  179.655769][T10471]  __dump_stack+0x1d/0x30
[  179.655795][T10471]  dump_stack_lvl+0x95/0xd0
[  179.655901][T10471]  dump_stack+0x15/0x1b
[  179.655924][T10471]  should_fail_ex+0x265/0x280
[  179.655947][T10471]  should_fail+0xb/0x20
[  179.655971][T10471]  should_fail_usercopy+0x1a/0x20
[  179.656004][T10471]  _copy_from_iter+0xcf/0xe70
[  179.656035][T10471]  ? __alloc_skb+0x396/0x4b0
[  179.656064][T10471]  ? __alloc_skb+0x228/0x4b0
[  179.656097][T10471]  netlink_sendmsg+0x471/0x6b0
[  179.656216][T10471]  ? __pfx_netlink_sendmsg+0x10/0x10
[  179.656257][T10471]  __sock_sendmsg+0x145/0x180
[  179.656334][T10471]  ____sys_sendmsg+0x31e/0x4a0
[  179.656371][T10471]  ___sys_sendmsg+0x17b/0x1d0
[  179.656420][T10471]  __x64_sys_sendmsg+0xd4/0x160
[  179.656487][T10471]  x64_sys_call+0x17ba/0x3000
[  179.656513][T10471]  do_syscall_64+0xca/0x2b0
[  179.656546][T10471]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.656591][T10471] RIP: 0033:0x7fb2ed2af749
[  179.656610][T10471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  179.656634][T10471] RSP: 002b:00007fb2ebd0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  179.656657][T10471] RAX: ffffffffffffffda RBX: 00007fb2ed505fa0 RCX: 00007fb2ed2af749
[  179.656672][T10471] RDX: 0000000020000050 RSI: 0000200000000100 RDI: 0000000000000003
[  179.656688][T10471] RBP: 00007fb2ebd0f090 R08: 0000000000000000 R09: 0000000000000000
[  179.656742][T10471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  179.656754][T10471] R13: 00007fb2ed506038 R14: 00007fb2ed505fa0 R15: 00007ffec129ba98
[  179.656778][T10471]  </TASK>
[  180.469587][T10484] SELinux:  policydb string S does not match my string SE Linux
[  180.481017][T10484] SELinux: failed to load policy
[  180.593463][T10490] can0: slcan on ttyS3.
[  180.618198][T10492] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2041'.
[  180.628216][T10490] set_capacity_and_notify: 2 callbacks suppressed
[  180.628234][T10490] loop1: detected capacity change from 0 to 1024
[  180.667089][T10490] EXT4-fs: Ignoring removed bh option
[  180.739422][T10503] loop5: detected capacity change from 0 to 512
[  180.757084][T10503] EXT4-fs (loop5): 1 truncate cleaned up
[  180.771127][T10490] can0 (unregistered): slcan off ttyS3.
[  180.793570][T10507] loop2: detected capacity change from 0 to 512
[  180.813166][T10507] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2046'.
[  180.890888][T10514] SELinux:  policydb string S does not match my string SE Linux
[  180.917750][T10514] SELinux: failed to load policy
[  180.954623][T10517] syzkaller1: entered promiscuous mode
[  180.960259][T10517] syzkaller1: entered allmulticast mode
[  181.043083][T10515] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  181.057153][T10515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2049'.
[  181.109666][T10518] loop1: detected capacity change from 0 to 128
[  181.122542][T10518] ext4 filesystem being mounted at /404/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  181.191870][T10533] loop4: detected capacity change from 0 to 512
[  181.201587][T10533] EXT4-fs (loop4): 1 truncate cleaned up
[  181.218878][T10536] FAULT_INJECTION: forcing a failure.
[  181.218878][T10536] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  181.232163][T10536] CPU: 0 UID: 0 PID: 10536 Comm: syz.1.2057 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  181.232203][T10536] Tainted: [W]=WARN
[  181.232211][T10536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  181.232228][T10536] Call Trace:
[  181.232237][T10536]  <TASK>
[  181.232247][T10536]  __dump_stack+0x1d/0x30
[  181.232352][T10536]  dump_stack_lvl+0x95/0xd0
[  181.232399][T10536]  dump_stack+0x15/0x1b
[  181.232424][T10536]  should_fail_ex+0x265/0x280
[  181.232452][T10536]  should_fail+0xb/0x20
[  181.232475][T10536]  should_fail_usercopy+0x1a/0x20
[  181.232502][T10536]  _copy_from_iter+0xcf/0xe70
[  181.232590][T10536]  ? __alloc_skb+0x396/0x4b0
[  181.232618][T10536]  ? __alloc_skb+0x228/0x4b0
[  181.232709][T10536]  netlink_sendmsg+0x471/0x6b0
[  181.232798][T10536]  ? __pfx_netlink_sendmsg+0x10/0x10
[  181.232895][T10536]  __sock_sendmsg+0x145/0x180
[  181.232919][T10536]  ____sys_sendmsg+0x31e/0x4a0
[  181.232953][T10536]  ___sys_sendmsg+0x17b/0x1d0
[  181.232997][T10536]  __x64_sys_sendmsg+0xd4/0x160
[  181.233073][T10536]  x64_sys_call+0x17ba/0x3000
[  181.233102][T10536]  do_syscall_64+0xca/0x2b0
[  181.233139][T10536]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.233248][T10536] RIP: 0033:0x7fb2ed2af749
[  181.233263][T10536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  181.233321][T10536] RSP: 002b:00007fb2ebd0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  181.233344][T10536] RAX: ffffffffffffffda RBX: 00007fb2ed505fa0 RCX: 00007fb2ed2af749
[  181.233359][T10536] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[  181.233430][T10536] RBP: 00007fb2ebd0f090 R08: 0000000000000000 R09: 0000000000000000
[  181.233458][T10536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  181.233471][T10536] R13: 00007fb2ed506038 R14: 00007fb2ed505fa0 R15: 00007ffec129ba98
[  181.233532][T10536]  </TASK>
[  181.527671][T10545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2061'.
[  181.539134][T10545] ip6gre1: entered allmulticast mode
[  181.549339][T10547] SELinux:  policydb string SE Li� does not match my string SE Linux
[  181.590898][T10547] SELinux: failed to load policy
[  181.626707][T10552] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2064'.
[  181.635788][T10552] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2064'.
[  181.657976][T10554] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2063'.
[  181.678018][T10554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2063'.
[  181.693913][   T29] kauditd_printk_skb: 480 callbacks suppressed
[  181.693930][   T29] audit: type=1400 audit(1767617892.241:39316): avc:  denied  { ioctl } for  pid=10555 comm="syz.4.2065" path="socket:[25228]" dev="sockfs" ino=25228 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  181.694010][T10556] syzkaller1: entered promiscuous mode
[  181.694105][T10556] syzkaller1: entered allmulticast mode
[  181.743710][   T29] audit: type=1400 audit(1767617892.291:39317): avc:  denied  { create } for  pid=10559 comm="syz.5.2067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  181.771482][   T29] audit: type=1400 audit(1767617892.311:39318): avc:  denied  { setopt } for  pid=10559 comm="syz.5.2067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  181.817717][   T29] audit: type=1400 audit(1767617892.361:39319): avc:  denied  { map } for  pid=10563 comm=77DEA305FF07 path="anon_inode:[io_uring]" dev="anon_inodefs" ino=26299 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  181.842372][   T29] audit: type=1400 audit(1767617892.361:39320): avc:  denied  { read write } for  pid=10563 comm=77DEA305FF07 path="anon_inode:[io_uring]" dev="anon_inodefs" ino=26299 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  181.880392][   T29] audit: type=1326 audit(1767617892.421:39321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10566 comm="syz.4.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc035adf749 code=0x7ffc0000
[  181.892584][T10567] loop4: detected capacity change from 0 to 512
[  181.913290][   T29] audit: type=1326 audit(1767617892.421:39322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10566 comm="syz.4.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc035adf749 code=0x7ffc0000
[  181.936989][   T29] audit: type=1326 audit(1767617892.431:39323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10566 comm="syz.4.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc035adf749 code=0x7ffc0000
[  181.937066][   T29] audit: type=1326 audit(1767617892.431:39324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10566 comm="syz.4.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc035adf749 code=0x7ffc0000
[  181.984308][   T29] audit: type=1326 audit(1767617892.431:39325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10566 comm="syz.4.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc035adf749 code=0x7ffc0000
[  181.998149][T10567] EXT4-fs (loop4): 1 truncate cleaned up
[  182.055117][T10571] blktrace: Concurrent blktraces are not allowed on sg0
[  182.089900][T10571] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  182.108245][T10575] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  182.136235][T10577] ip6gre2: entered allmulticast mode
[  182.148251][T10581] SELinux:  policydb string SE Li� does not match my string SE Linux
[  182.162985][T10581] SELinux: failed to load policy
[  182.207004][T10583] can0: slcan on ttyS3.
[  182.211939][T10586] loop0: detected capacity change from 0 to 512
[  182.220559][T10587] loop2: detected capacity change from 0 to 512
[  182.230449][T10587] EXT4-fs (loop2): orphan cleanup on readonly fs
[  182.245889][T10587] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.2077: bad orphan inode 13
[  182.264852][T10583] loop4: detected capacity change from 0 to 1024
[  182.272179][T10583] EXT4-fs: Ignoring removed bh option
[  182.277930][T10587] ext4_test_bit(bit=12, block=18) = 1
[  182.283497][T10587] is_bad_inode(inode)=0
[  182.287774][T10587] NEXT_ORPHAN(inode)=2130706432
[  182.287814][T10593] syzkaller1: entered promiscuous mode
[  182.287891][T10593] syzkaller1: entered allmulticast mode
[  182.292777][T10587] max_ino=32
[  182.292791][T10587] i_nlink=1
[  182.303615][T10586] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  182.319847][T10586] EXT4-fs (loop0): orphan cleanup on readonly fs
[  182.329301][T10586] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.2076: corrupted inode contents
[  182.343021][T10586] EXT4-fs (loop0): Remounting filesystem read-only
[  182.350008][T10586] EXT4-fs (loop0): 1 truncate cleaned up
[  182.358811][T10587] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  182.371025][  T407] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  182.381720][  T407] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  182.384606][T10583] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt.
[  182.397493][  T407] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[  182.420954][T10583] EXT4-fs (loop4): Remounting filesystem read-only
[  182.428623][T10583] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 64: len 64: ext4_ext_map_blocks returned -30
[  182.462011][T10587] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2077: bg 0: block 248: padding at end of block bitmap is not set
[  182.480019][T10587] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.2077: Failed to acquire dquot type 1
[  182.492651][T10587] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  182.565053][T10612] loop1: detected capacity change from 0 to 512
[  182.577777][T10587] syz.2.2077 (10587) used greatest stack depth: 9216 bytes left
[  182.585846][T10583] can0 (unregistered): slcan off ttyS3.
[  182.594741][T10612] EXT4-fs (loop1): 1 truncate cleaned up
[  182.608429][ T3318] EXT4-fs error (device loop2): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 12
[  182.620623][T10608]  loop0: p1 p3 p4
[  182.621637][ T3318] EXT4-fs error (device loop2): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 12
[  182.629794][T10608] loop0: p4 size 589824 extends beyond EOD, truncated
[  182.718903][T10618] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2085: bg 0: block 137: padding at end of block bitmap is not set
[  182.768362][T10626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  182.776693][T10629] SELinux:  policydb string SE Li� does not match my string SE Linux
[  182.777658][T10626] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  182.797047][T10629] SELinux: failed to load policy
[  182.802745][ T9003] hid-generic 0000:3000000:0000.003B: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  182.823403][   T12] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.842986][T10626] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  182.856435][T10626] vhci_hcd vhci_hcd.2: invalid port number 96
[  182.862813][T10626] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[  182.882649][   T12] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.967619][T10634] Cannot find del_set index 0 as target
[  183.006298][T10636] syzkaller1: entered promiscuous mode
[  183.011896][T10636] syzkaller1: entered allmulticast mode
[  183.042895][   T12] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.233734][   T12] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.529931][   T12] bridge_slave_1: left allmulticast mode
[  183.535767][   T12] bridge_slave_1: left promiscuous mode
[  183.541474][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.636675][   T12] bridge_slave_0: left allmulticast mode
[  183.642493][   T12] bridge_slave_0: left promiscuous mode
[  183.648210][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.815813][T10654] EXT4-fs (loop0): 1 truncate cleaned up
[  183.911274][   T12] bond1 (unregistering): (slave gretap1): Releasing active interface
[  184.073676][   T12] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  184.083566][   T12] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  184.093783][   T12] .` (unregistering): (slave dummy0): Releasing backup interface
[  184.102849][   T12] .` (unregistering): Released all slaves
[  184.112298][   T12] bond1 (unregistering): Released all slaves
[  184.132089][T10664] dummy0: entered promiscuous mode
[  184.137267][T10664] dummy0: entered allmulticast mode
[  184.519574][   T12] hsr_slave_0: left promiscuous mode
[  184.550423][   T12] hsr_slave_1: left promiscuous mode
[  184.583650][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  184.591212][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  184.664906][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  184.672376][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  184.707570][   T12] batman_adv: batadv0: Interface deactivated: veth1_vlan
[  184.714708][   T12] batman_adv: batadv0: Removing interface: veth1_vlan
[  184.772922][   T12] veth1_macvtap: left promiscuous mode
[  184.790902][   T12] veth0_macvtap: left promiscuous mode
[  184.814291][   T12] veth1_vlan: left promiscuous mode
[  184.819850][   T12] veth0_vlan: left promiscuous mode
[  184.851809][T10674] __nla_validate_parse: 5 callbacks suppressed
[  184.851836][T10674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2099'.
[  185.022270][T10648] lo speed is unknown, defaulting to 1000
[  185.022399][ T9003] lo speed is unknown, defaulting to 1000
[  185.033851][ T9003] syz1: Port: 1 Link DOWN
[  185.042080][T10674] ip6gre3: entered allmulticast mode
[  185.062903][T10648] lo speed is unknown, defaulting to 1000
[  185.070724][ T9003] lo speed is unknown, defaulting to 1000
[  185.166967][   T65] smc: removing ib device syz1
[  185.301787][T10682] syzkaller1: entered promiscuous mode
[  185.307363][T10682] syzkaller1: entered allmulticast mode
[  185.397366][T10648] chnl_net:caif_netlink_parms(): no params data found
[  185.453863][T10686] EXT4-fs (loop4): orphan cleanup on readonly fs
[  185.475064][T10686] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2104: bad orphan inode 13
[  185.498544][T10686] ext4_test_bit(bit=12, block=18) = 1
[  185.504128][T10686] is_bad_inode(inode)=0
[  185.508338][T10686] NEXT_ORPHAN(inode)=2130706432
[  185.513270][T10686] max_ino=32
[  185.516600][T10686] i_nlink=1
[  185.520907][T10648] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.528045][T10648] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.543657][T10648] bridge_slave_0: entered allmulticast mode
[  185.550241][T10648] bridge_slave_0: entered promiscuous mode
[  185.550594][T10686] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.2104: deleted inode referenced: 12
[  185.559288][T10648] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.574587][T10648] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.584880][T10648] bridge_slave_1: entered allmulticast mode
[  185.591730][T10648] bridge_slave_1: entered promiscuous mode
[  185.618478][T10648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  185.636461][T10648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  185.653411][   T12] IPVS: stop unused estimator thread 0...
[  185.684030][T10648] team0: Port device team_slave_0 added
[  185.693449][ T3326] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 12
[  185.706237][T10648] team0: Port device team_slave_1 added
[  185.717648][ T3326] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 12
[  185.747141][T10697] set_capacity_and_notify: 4 callbacks suppressed
[  185.747156][T10697] loop5: detected capacity change from 0 to 512
[  185.761807][T10648] batman_adv: batadv0: Adding interface: batadv_slave_0
[  185.768913][T10648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  185.794902][T10648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  185.821166][T10697] EXT4-fs (loop5): 1 truncate cleaned up
[  185.851845][T10648] batman_adv: batadv0: Adding interface: batadv_slave_1
[  185.858879][T10648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  185.885049][T10648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  185.892915][T10697] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2108'.
[  185.916246][T10700] bond0: entered promiscuous mode
[  185.930729][T10700] bond0: left promiscuous mode
[  185.974530][T10697] team0 (unregistering): Port device team_slave_0 removed
[  185.988250][T10697] team0 (unregistering): Port device team_slave_1 removed
[  186.030056][T10648] hsr_slave_0: entered promiscuous mode
[  186.036980][T10648] hsr_slave_1: entered promiscuous mode
[  186.045917][T10648] debugfs: 'hsr0' already exists in 'hsr'
[  186.051794][T10648] Cannot create hsr debugfs directory
[  186.053919][T10704] loop0: detected capacity change from 0 to 512
[  186.083311][T10704] EXT4-fs (loop0): orphan cleanup on readonly fs
[  186.098663][T10704] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.2110: bad orphan inode 13
[  186.111713][T10704] ext4_test_bit(bit=12, block=18) = 1
[  186.117160][T10704] is_bad_inode(inode)=0
[  186.121373][T10704] NEXT_ORPHAN(inode)=2130706432
[  186.126272][T10704] max_ino=32
[  186.129491][T10704] i_nlink=1
[  186.141498][T10710] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2112'.
[  186.162906][  T584] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.172804][T10704] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[  186.189650][T10710] ip6gre1: entered allmulticast mode
[  186.201307][T10704] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  186.232777][  T584] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.338281][  T584] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.428316][T10648] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  186.465060][T10734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  186.473729][T10648] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  186.481954][T10734] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  186.492107][  T584] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.495311][ T5732] hid_parser_main: 18 callbacks suppressed
[  186.495363][ T5732] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x4
[  186.515548][ T5732] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x2
[  186.523313][ T5732] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0
[  186.531178][ T5732] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0
[  186.538865][ T5732] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0
[  186.546588][ T5732] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0
[  186.554317][ T5732] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0
[  186.562383][ T5732] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0
[  186.570074][ T5732] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0
[  186.577839][ T5732] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0
[  186.586330][T10648] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  186.593155][ T5732] hid-generic 0000:3000000:0000.003C: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  186.608384][T10648] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  186.618948][T10734] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  186.627551][T10734] vhci_hcd vhci_hcd.2: invalid port number 96
[  186.633893][T10734] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[  186.701268][   T29] kauditd_printk_skb: 1058 callbacks suppressed
[  186.701287][   T29] audit: type=1326 audit(1767617897.251:40376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10720 comm="syz.5.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f913ba02005 code=0x7ffc0000
[  186.746298][   T29] audit: type=1326 audit(1767617897.251:40377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10720 comm="syz.5.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f913ba02005 code=0x7ffc0000
[  186.770020][   T29] audit: type=1326 audit(1767617897.251:40378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10720 comm="syz.5.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f913ba02005 code=0x7ffc0000
[  186.793780][   T29] audit: type=1326 audit(1767617897.251:40379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10720 comm="syz.5.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f913ba02005 code=0x7ffc0000
[  186.817639][   T29] audit: type=1326 audit(1767617897.251:40380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10720 comm="syz.5.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f913ba02005 code=0x7ffc0000
[  186.841367][   T29] audit: type=1326 audit(1767617897.251:40381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10720 comm="syz.5.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f913ba02005 code=0x7ffc0000
[  186.865061][   T29] audit: type=1326 audit(1767617897.251:40382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10720 comm="syz.5.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f913ba02005 code=0x7ffc0000
[  186.888771][   T29] audit: type=1326 audit(1767617897.251:40383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10720 comm="syz.5.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f913ba02005 code=0x7ffc0000
[  186.912383][   T29] audit: type=1326 audit(1767617897.261:40384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10720 comm="syz.5.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f913ba02005 code=0x7ffc0000
[  186.936123][   T29] audit: type=1326 audit(1767617897.261:40385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10720 comm="syz.5.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f913ba02005 code=0x7ffc0000
[  187.063585][  T584] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  187.076647][T10718] syz.1.2114 (10718) used greatest stack depth: 7192 bytes left
[  187.086399][  T584] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  187.099487][  T584] .` (unregistering): (slave dummy0): Releasing backup interface
[  187.113730][  T584] .` (unregistering): Released all slaves
[  187.139669][T10716] lo speed is unknown, defaulting to 1000
[  187.271918][T10648] 8021q: adding VLAN 0 to HW filter on device bond0
[  187.293203][T10716] chnl_net:caif_netlink_parms(): no params data found
[  187.344538][T10755] bond0: entered promiscuous mode
[  187.350502][T10755] bond0: left promiscuous mode
[  187.377098][T10648] 8021q: adding VLAN 0 to HW filter on device team0
[  187.390391][T10756] wireguard0: entered promiscuous mode
[  187.395986][T10756] wireguard0: entered allmulticast mode
[  187.440325][  T584] hsr_slave_0: left promiscuous mode
[  187.462849][  T584] hsr_slave_1: left promiscuous mode
[  187.483986][  T584] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  187.492148][  T584] batman_adv: batadv0: Removing interface: batadv_slave_0
[  187.506295][  T584] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  187.513800][  T584] batman_adv: batadv0: Removing interface: batadv_slave_1
[  187.523047][  T584] batman_adv: batadv0: Interface deactivated: veth1_vlan
[  187.530132][  T584] batman_adv: batadv0: Removing interface: veth1_vlan
[  187.540235][  T584] veth1_macvtap: left promiscuous mode
[  187.545960][  T584] veth0_macvtap: left promiscuous mode
[  187.552074][  T584] veth1_vlan: left promiscuous mode
[  187.576453][T10764] loop1: detected capacity change from 0 to 1024
[  187.584245][T10764] EXT4-fs: Ignoring removed bh option
[  187.589792][  T584] veth0_vlan: left promiscuous mode
[  187.803923][T10763] can0: slcan on ttyS3.
[  187.820439][  T407] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.827574][  T407] bridge0: port 1(bridge_slave_0) entered forwarding state
[  187.837670][T10716] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.845148][T10716] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.852424][T10716] bridge_slave_0: entered allmulticast mode
[  187.860311][T10716] bridge_slave_0: entered promiscuous mode
[  187.867686][T10716] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.874838][T10716] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.882085][T10716] bridge_slave_1: entered allmulticast mode
[  187.888827][T10716] bridge_slave_1: entered promiscuous mode
[  187.903481][  T407] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.910682][  T407] bridge0: port 2(bridge_slave_1) entered forwarding state
[  187.926902][T10716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  187.938418][T10716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  187.950988][T10762] can0 (unregistered): slcan off ttyS3.
[  187.968436][T10716] team0: Port device team_slave_0 added
[  187.976112][T10716] team0: Port device team_slave_1 added
[  188.015889][T10716] batman_adv: batadv0: Adding interface: batadv_slave_0
[  188.023032][T10716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  188.049102][T10716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  188.060762][T10716] batman_adv: batadv0: Adding interface: batadv_slave_1
[  188.067850][T10716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  188.093842][T10716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  188.112158][T10770] sch_tbf: burst 22 is lower than device lo mtu (65550) !
[  188.151923][T10774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2125'.
[  188.163411][T10716] hsr_slave_0: entered promiscuous mode
[  188.169593][T10716] hsr_slave_1: entered promiscuous mode
[  188.176435][T10716] debugfs: 'hsr0' already exists in 'hsr'
[  188.182342][T10716] Cannot create hsr debugfs directory
[  188.191783][T10774] ip6gre2: entered allmulticast mode
[  188.202007][  T584] IPVS: stop unused estimator thread 0...
[  188.294932][T10648] 8021q: adding VLAN 0 to HW filter on device batadv0
[  188.389210][T10716] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  188.399287][T10716] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  188.418979][T10716] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  188.472973][T10716] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  188.523556][T10716] 8021q: adding VLAN 0 to HW filter on device bond0
[  188.539045][T10716] 8021q: adding VLAN 0 to HW filter on device team0
[  188.550274][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.557452][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  188.570120][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.577279][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  188.604083][T10648] veth0_vlan: entered promiscuous mode
[  188.617434][T10648] veth1_vlan: entered promiscuous mode
[  188.643552][T10648] veth0_macvtap: entered promiscuous mode
[  188.651678][T10648] veth1_macvtap: entered promiscuous mode
[  188.663857][T10648] batman_adv: batadv0: Interface activated: batadv_slave_0
[  188.676328][T10648] batman_adv: batadv0: Interface activated: batadv_slave_1
[  188.689014][   T31] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  188.698342][   T31] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  188.708195][   T31] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  188.719978][   T31] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  188.743111][T10716] 8021q: adding VLAN 0 to HW filter on device batadv0
[  188.879791][T10716] veth0_vlan: entered promiscuous mode
[  188.890450][T10716] veth1_vlan: entered promiscuous mode
[  188.908293][T10716] veth0_macvtap: entered promiscuous mode
[  188.916748][T10716] veth1_macvtap: entered promiscuous mode
[  188.929935][T10716] batman_adv: batadv0: Interface activated: batadv_slave_0
[  188.937672][T10846] loop6: detected capacity change from 0 to 1024
[  188.943035][T10716] batman_adv: batadv0: Interface activated: batadv_slave_1
[  188.958270][   T52] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  188.967533][   T52] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  188.976850][   T52] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  188.983186][T10846] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002]
[  188.988464][   T52] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  189.066846][ T5569] IPVS: starting estimator thread 0...
[  189.073904][T10852] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2135: bg 0: block 88: padding at end of block bitmap is not set
[  189.160940][T10853] IPVS: using max 2208 ests per chain, 110400 per kthread
[  189.201926][T10857] bpf: Bad value for 'uid'
[  189.296858][T10863] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[  189.301527][T10862] loop6: detected capacity change from 0 to 1024
[  189.304664][T10863] SELinux: failed to load policy
[  189.320388][T10865] loop5: detected capacity change from 0 to 128
[  189.329853][T10862] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  189.355007][T10862] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.2139: corrupted xattr block 128: e_value size too large
[  189.374065][T10862] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=15
[  189.383216][T10862] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.2139: corrupted xattr block 128: e_value size too large
[  189.397534][T10862] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=15
[  189.410047][T10862] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.2139: corrupted xattr block 128: e_value size too large
[  189.425065][T10862] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.2139: corrupted xattr block 128: e_value size too large
[  189.439662][T10862] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=15
[  189.458921][T10862] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2139: bg 0: block 112: padding at end of block bitmap is not set
[  189.484316][T10876] loop5: detected capacity change from 0 to 512
[  189.503894][T10878] loop0: detected capacity change from 0 to 512
[  189.511222][T10876] EXT4-fs (loop5): 1 truncate cleaned up
[  189.520158][T10878] EXT4-fs (loop0): 1 truncate cleaned up
[  189.527474][T10875] loop1: detected capacity change from 0 to 512
[  189.547872][T10875] EXT4-fs (loop1): 1 truncate cleaned up
[  189.566786][T10876] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2144'.
[  189.596954][T10886] loop6: detected capacity change from 0 to 2048
[  189.604371][T10886] EXT4-fs: Ignoring removed mblk_io_submit option
[  189.621078][T10878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2146'.
[  189.635792][T10891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2145'.
[  189.662975][T10886] SELinux: failed to load policy
[  189.743336][T10899] EXT4-fs (loop1): orphan cleanup on readonly fs
[  189.747062][T10898] ext4 filesystem being mounted at /418/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  189.763085][T10895] /dev/loop5: Can't open blockdev
[  189.774907][T10899] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.2151: bad orphan inode 13
[  189.785566][T10899] ext4_test_bit(bit=12, block=18) = 1
[  189.791051][T10899] is_bad_inode(inode)=0
[  189.795224][T10899] NEXT_ORPHAN(inode)=2130706432
[  189.800134][T10899] max_ino=32
[  189.803399][T10899] i_nlink=1
[  189.817815][T10899] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  189.829053][T10905] EXT4-fs (loop0): orphan cleanup on readonly fs
[  189.836444][T10905] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.2152: bad orphan inode 13
[  189.847206][T10899] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  189.867931][T10905] ext4_test_bit(bit=12, block=18) = 1
[  189.873478][T10905] is_bad_inode(inode)=0
[  189.877910][T10905] NEXT_ORPHAN(inode)=2130706432
[  189.882911][T10905] max_ino=32
[  189.886159][T10905] i_nlink=1
[  189.926911][T10905] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[  189.946296][T10913] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  189.966770][T10905] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  189.986410][T10915] bond0: entered promiscuous mode
[  189.991749][T10915] bond_slave_0: entered promiscuous mode
[  189.997641][T10915] bond_slave_1: entered promiscuous mode
[  190.018367][T10913] EXT4-fs (loop7): 1 truncate cleaned up
[  190.027031][T10915] bond0: left promiscuous mode
[  190.031912][T10915] bond_slave_0: left promiscuous mode
[  190.037453][T10915] bond_slave_1: left promiscuous mode
[  190.057089][T10919] xt_TPROXY: Can be used only with -p tcp or -p udp
[  190.071696][T10919] EXT4-fs: Ignoring removed orlov option
[  190.084573][T10919] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  190.134469][T10919] tipc: Trying to set illegal importance in message
[  190.221857][T10928] EXT4-fs (loop6): 1 truncate cleaned up
[  190.239740][T10930] random: crng reseeded on system resumption
[  190.253459][T10928] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2158'.
[  190.275657][T10928] team0 (unregistering): Port device team_slave_0 removed
[  190.310257][T10928] team0 (unregistering): Port device team_slave_1 removed
[  190.563666][T10648] EXT4-fs unmount: 75 callbacks suppressed
[  190.563686][T10648] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.656502][T10946] EXT4-fs: Ignoring removed bh option
[  190.664576][T10941] can0: slcan on ttyS3.
[  190.701846][T10950] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[  190.709701][T10950] SELinux: failed to load policy
[  190.782817][T10946] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  190.798896][T10957] sd 0:0:1:0: device reset
[  190.860949][T10716] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.873923][T10941] can0 (unregistered): slcan off ttyS3.
[  190.907715][ T9580] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.927619][T10961] FAULT_INJECTION: forcing a failure.
[  190.927619][T10961] name failslab, interval 1, probability 0, space 0, times 0
[  190.940548][T10961] CPU: 0 UID: 0 PID: 10961 Comm: syz.7.2172 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  190.940642][T10961] Tainted: [W]=WARN
[  190.940651][T10961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  190.940673][T10961] Call Trace:
[  190.940685][T10961]  <TASK>
[  190.940695][T10961]  __dump_stack+0x1d/0x30
[  190.940724][T10961]  dump_stack_lvl+0x95/0xd0
[  190.940749][T10961]  dump_stack+0x15/0x1b
[  190.940783][T10961]  should_fail_ex+0x265/0x280
[  190.940868][T10961]  should_failslab+0x8c/0xb0
[  190.940907][T10961]  kmem_cache_alloc_noprof+0x69/0x4b0
[  190.940937][T10961]  ? security_file_alloc+0x32/0x100
[  190.940974][T10961]  security_file_alloc+0x32/0x100
[  190.941059][T10961]  init_file+0x5c/0x1c0
[  190.941096][T10961]  alloc_empty_file+0x8b/0x200
[  190.941175][T10961]  alloc_file_pseudo+0xc6/0x160
[  190.941212][T10961]  __shmem_file_setup+0x1de/0x210
[  190.941243][T10961]  shmem_file_setup+0x3b/0x50
[  190.941279][T10961]  __se_sys_memfd_create+0x2f7/0x6b0
[  190.941344][T10961]  __x64_sys_memfd_create+0x31/0x40
[  190.941382][T10961]  x64_sys_call+0x28cb/0x3000
[  190.941413][T10961]  do_syscall_64+0xca/0x2b0
[  190.941476][T10961]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.941503][T10961] RIP: 0033:0x7f93ab56f749
[  190.941521][T10961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  190.941545][T10961] RSP: 002b:00007f93a9fced68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  190.941569][T10961] RAX: ffffffffffffffda RBX: 00000000000005d0 RCX: 00007f93ab56f749
[  190.941585][T10961] RDX: 00007f93a9fcedec RSI: 0000000000000000 RDI: 00007f93ab5f4960
[  190.941601][T10961] RBP: 00002000000006c0 R08: 00007f93a9fceb07 R09: 0000000000000000
[  190.941637][T10961] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001
[  190.941654][T10961] R13: 00007f93a9fcedec R14: 00007f93a9fcedf0 R15: 00007ffe185f10e8
[  190.941678][T10961]  </TASK>
[  190.967599][T10959] bond0: entered promiscuous mode
[  191.142050][T10959] bond_slave_0: entered promiscuous mode
[  191.147869][T10959] bond_slave_1: entered promiscuous mode
[  191.156316][T10959] bond0: left promiscuous mode
[  191.161843][T10959] bond_slave_0: left promiscuous mode
[  191.167650][T10959] bond_slave_1: left promiscuous mode
[  191.504023][T10989] vcan0: tx drop: invalid sa for name 0xfffffffffffffffe
[  191.666256][T10997] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2180'.
[  191.772432][   T29] kauditd_printk_skb: 1214 callbacks suppressed
[  191.772447][   T29] audit: type=1400 audit(1767617902.321:41600): avc:  denied  { create } for  pid=11000 comm="syz.6.2182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  191.851005][   T29] audit: type=1400 audit(1767617902.351:41601): avc:  denied  { write } for  pid=11000 comm="syz.6.2182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  191.867884][T11004] audit: audit_lost=9 audit_rate_limit=0 audit_backlog_limit=64
[  191.879522][T11004] audit: out of memory in audit_log_start
[  192.021981][T11006] can0: slcan on ttyS3.
[  192.068728][T11006] set_capacity_and_notify: 8 callbacks suppressed
[  192.068749][T11006] loop6: detected capacity change from 0 to 1024
[  192.094118][   T29] audit: type=1326 audit(1767617902.631:41602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11007 comm="syz.0.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7d4cf749 code=0x7ffc0000
[  192.117975][   T29] audit: type=1326 audit(1767617902.631:41603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11007 comm="syz.0.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7d4cf749 code=0x7ffc0000
[  192.122852][T11006] EXT4-fs: Ignoring removed bh option
[  192.141791][   T29] audit: type=1326 audit(1767617902.631:41604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11007 comm="syz.0.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f8b7d4cf749 code=0x7ffc0000
[  192.170873][   T29] audit: type=1326 audit(1767617902.631:41605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11007 comm="syz.0.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7d4cf749 code=0x7ffc0000
[  192.194500][   T29] audit: type=1326 audit(1767617902.631:41606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11007 comm="syz.0.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b7d4cf749 code=0x7ffc0000
[  192.218184][   T29] audit: type=1326 audit(1767617902.631:41607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11007 comm="syz.0.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7d4cf749 code=0x7ffc0000
[  192.245911][T11010] loop7: detected capacity change from 0 to 1024
[  192.262738][T11006] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  192.327247][T11021] tmpfs: Unknown parameter '0x0000000000000003'
[  192.338514][T11010] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002]
[  192.347781][T11010] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  192.421179][T11006] can0 (unregistered): slcan off ttyS3.
[  192.455538][T11024] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2186: bg 0: block 88: padding at end of block bitmap is not set
[  192.477195][    T2] ==================================================================
[  192.485419][    T2] BUG: KCSAN: data-race in copy_process / free_pid
[  192.491992][    T2] 
[  192.494334][    T2] read-write to 0xffffffff86860008 of 4 bytes by task 10648 on cpu 1:
[  192.502500][    T2]  free_pid+0xb9/0x1d0
[  192.506594][    T2]  free_pids+0x54/0xb0
[  192.510693][    T2]  release_task+0x9a7/0xb60
[  192.515228][    T2]  wait_consider_task+0x114a/0x1660
[  192.520474][    T2]  __do_wait+0xfa/0x510
[  192.524701][    T2]  do_wait+0xb7/0x250
[  192.528707][    T2]  kernel_wait4+0x16b/0x1e0
[  192.533259][    T2]  __x64_sys_wait4+0x91/0x120
[  192.537966][    T2]  x64_sys_call+0x28ec/0x3000
[  192.542668][    T2]  do_syscall_64+0xca/0x2b0
[  192.547295][    T2]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.553219][    T2] 
[  192.555561][    T2] read to 0xffffffff86860008 of 4 bytes by task 2 on cpu 0:
[  192.562862][    T2]  copy_process+0x16d4/0x1ef0
[  192.567558][    T2]  kernel_clone+0x16c/0x5c0
[  192.572079][    T2]  kernel_thread+0xad/0xe0
[  192.576521][    T2]  kthreadd+0x26c/0x340
[  192.580702][    T2]  ret_from_fork+0x149/0x290
[  192.585320][    T2]  ret_from_fork_asm+0x1a/0x30
[  192.590108][    T2] 
[  192.592448][    T2] value changed: 0x800000f8 -> 0x800000f7
[  192.598175][    T2] 
[  192.600511][    T2] Reported by Kernel Concurrency Sanitizer on:
[  192.606677][    T2] CPU: 0 UID: 0 PID: 2 Comm: kthreadd Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  192.617553][    T2] Tainted: [W]=WARN
[  192.621373][    T2] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  192.631448][    T2] ==================================================================
[  192.647867][T10648] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.651939][ T3525] IPVS: starting estimator thread 0...
[  192.687181][T11029] loop0: detected capacity change from 0 to 1024
[  192.706881][T11029] SELinux: security_context_str_to_sid () failed with errno=-22
[  192.751143][T11026] IPVS: using max 1824 ests per chain, 91200 per kthread
[  192.872823][T10716] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.