last executing test programs:

25.843378472s ago: executing program 0 (id=587):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x404, &(0x7f0000000280)={[{@errors_remount}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@barrier}, {@lazytime}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad1f50ad32d3fd25dfd73a015e0ca6a0f68a7d007f15451dfb265a0e3ccae669e173a64bc1cfd5587d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661ca3dbe74bd09de8793dbcceef76b2e5feecf9c66c54c3b3ffe1b4ce25d7c983c044c06cd0a48dfe3e26e7a23129d6606fd28a69989d552af6d9a9df2c3af36e0360050011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a13ed38ae82f87925bfacba83109753f541cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b70a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a92895614cd50cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba73c31b05c00fba8a4aee676d7c45bb29671a68ee2e60da7b01a2e5785a238afa4aba70c07fcd95bf8b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf334178b04963d67dd5a5707e618a1ef9057fec00f9e930219fa8d30e716de8cde9c60f0000000c3b64d10f0939b42b788daa7075fa542242b00f6bf9b64ad460e386b6f388351fbdacb3ad074574ee9d450f9dcfaef1be95ff3c449e6482e4403174618c20e887d6f320616d31d78a0e5421d5742cc52509fd90cf2df6d1404f6b8f810d7b94d421971b77a3270153a0d57cccfe27872f3e8e44480f93c33421986a7737842627301fb2fee8cabab074adaa2024ff57e609ba2f4d83b3bbf52309484532416f48f43b31395c6f45fee8f1682a4e8d5e3b9ae634ed24fb0e8b5fadaf5cb7eea62b7bb4264e72950c9dc791d771acc24c08cdb6ef24c813d082a86d9b879bdf5aefdfd905a2bd4ea36b0b54915a68fe149db154a8340017e1855511e9c0fe62d0cf55"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file2\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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")
r3 = open(&(0x7f00000006c0)='./file2\x00', 0x105142, 0x19d)
sendfile(r3, r3, 0x0, 0x800000009)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000050000000300"/21], 0x50)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000080)=0xdd3)
close(r4)

24.327780974s ago: executing program 0 (id=596):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x76, &(0x7f0000000140)=@assoc_value, 0x8) (async)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg2\x00', <r6=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x20, r5, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x10007ffffffff}, 0x18) (async)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r3) (async)
r8 = syz_open_procfs$userns(0x0, &(0x7f0000000200))
r9 = getpgrp(0xffffffffffffffff)
r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp(r9, r10, 0x5, 0xffffffffffffffff, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x88, r7, 0x1, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004000}, 0x844) (async)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0x8)
fcntl$setlease(r11, 0x400, 0x0) (async)
request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0)

24.157667991s ago: executing program 0 (id=597):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x2410}, 0x1})
io_uring_enter(r1, 0x2ded, 0x2285, 0x0, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x80fe, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

24.080500028s ago: executing program 0 (id=599):
close(0xffffffffffffffff)
r0 = perf_event_open(&(0x7f0000000880)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4002, 0xb, 0x3, 0xcd0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0)
pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x6c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @loopback={0x2d21}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r3}, 0x10)
r5 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5`\xda\xca\xd1\xab:\x18\x10\x9b\xd0w', 0x0)
write$binfmt_misc(r5, &(0x7f0000000180)="e502", 0x2)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESHEX], 0x2, 0x699, &(0x7f0000000140)="$eJzs3V9rG9n9x/HPyLIte3+E5dcSQsifk6QLDk2VkbxxMCl01dHInlbSiBm52FBY0o29hMjZNkmh8c3WN/0D2yfQu970og+i0Ot9Fr0pLSztXaE3KnNmJEvRv3ijOLvN+2V2NTrznTnfmaPoy9iaIwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADle1XVLjupBc2fXTOZVo7AxZX26t0XdTBduzuxXcpL/VCjoQtp04Zsnq88n/7uuS+mzSyokDwUdvXP+3XvfyOd6209J6MvQaXf49PnRo/udzv6Tl4hd0Kl3/yYp11taycZkTNCW3wziMGhUtnwTxKHZ3Nhwb2/XYlML6n68F7f9hvEiP9cOI7Pm3TSlzc114xf3wp3mVrVS93uNd79Tdt0N84PldKAlFWNvO6jXg+aWjUlWJzF3zWc/TgP8SsOYg4ed/fVZR5IElV4mqDwrqOyWy6VSuVzauLN5567r5kca3ITj9mkkYu4vWnzNzOeNG5iDXFL//+pIdRXU1I52Zcb+eKoqUqjGhPWZXv1/77Y/td/B+t+r8hek72WrL8rW/yvpsyuT6v+EXIyM3WDcGmdC++l+Fm1GRk/1XEd6pPvqqKN9PZnDvo3M1bns5Qx+tuSrqUCxQgVqqGJbTNZitKkNbcjVh9pWTbGMagpUl69Ye4rVlm9fUZ4i+aqorVCRjNbk6aaMStrUptZl5KuoPYXaUVNbqqqif3e73QM9tOd9fUqO6gWVJgQsDwaVp+xpUv3/yafp6zSr/y71/22Vvg6W04fPp8UAXwHd7Pp/UG72ZldfX0YAAAAAAGDeHPvbd8f+7f6ypK5qQd1333RaAAAAAABgjhx1l3VJTnL9L+myHK7/AQAAAAD4X+PYe+wcSav2Q/3OyZ1QL/NLgIUzSBEAAAAAALwie+f/lSWpayetuCrnVNf/AAAAAADga+A3A3Ps53tz7HZ7f9bPSYpby86f/7msaNE5bu1+yzmsJGsqh1nMyCcA2rWLzrlsol77sCTJPvP8S07WWzYJZn/ewS8OZs3170QvJLC0MLiDCQk4Sc8b+eyZPtO1dJNr2TzzD45ysmvSXlZrQd0vemH9XkmVyrlc299t//zxw19IUf84Dx529osffdJ5YHM5TpqOD5OdfjqUTm78yTjJ5Zmdb8HeczHuiFdU63X522Zj1bH9ur3jX1DlMDfY0bQBOOnzV7qejtn11TR29ag/435y/IXk+EtFO2RDRx8tOidZlF488nEDMSGLgs3iRhpzY+2Gyn9Ll/ujkHMK316QysXRMRjKojyYxexz4fxr5FwMZGEfemsGzsV6ksVfkh1NyGL9dFmMjAgAvCkHuiz7LnRZdhLzfhUqZHW3Vx56b2pfqu7Mru4fDFf3Z7/vdu0GC1I++9vE1F4KSt7R1xxbh5bSQ8pfHPOO7mZ1paAJ7+juK1S3pK8/nXwHUpb2SBb/6Xa790q239+9UFX/MNTdSL9xvbyQnMLbzw5/aifAT3y8//H+43J5fcN933XvlLVoDyN7WBC1BwAwYvZ37MyMcN7XtTTi2oN/vJcuDVW8/+9/pKCoj/SJOnqgW72vELg6fq+rAx9DuJVetWrgqtWcf/ee/V664diSbk28qrO1dCC23I9dVG+T4Up9Erv+mkcBAICzdX1GHR5f/wtD9f+W1tKItYtjr7uHa3l2ddy/pJ8UW5qd/AfzPhsAALwd/OgLZ7X9ayeKgtaHpc3NUqW97Zso9H5ooqC65Zug2fYjb7vS3PJNKwrboRfWTSvSclD1YxPvtFph1Da1MDKtMA527Te/m+yr32O/UWm2Ay9u1f1K7BsvbLYrXttUg9gzrZ3v14N424/sxnHL94Ja4FXaQdg0cbgTeX7RmNj3BwKDqt9sB7UgWWyaVhQ0KtGe+VFY32n4purHXhS02mG6w15fQbMWRg2722K+O+7zAgAAvHWePj96dL/T2X/y4sJKcmmethxrQszowpKePk+uypOWfLaKOYIAAPiKOSngp9io8BoTAgAAAAAAAAAAAAAAAAAAAAAAI2bf0nfKhcVxNwtK/Zafncta9Eud3GI4sh9H807sNAu5027VuyXi6NHnU4JX+i290z8Yc3xmB/j3/5PesS1KW/Lz72tlyuC+joXvHqRndGJMsnLsquX+WOTn/88hWXj8xwmrut1ud/rmy8PncGnaAQ4v5CU9WXqFITj79yIAZ+u/AQAA//9b5DOa")
execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES8=0x0, @ANYRES64=r4], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r7}, 0x18)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff8646000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
unshare(0x2040400)
r11 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0xc5ec3, 0x0)
flock(r11, 0x2)
sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f0000000840)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="080027bd7000fbdbdf250103000000000000000002006261746164775f736c6176655f310000080003000000000014000200626f6e645f736c6176655f3000000000140002007069683672656700000000000000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x20000004}, 0x4048880)
r12 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5e}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}}, [@tmpl={0xc4, 0x5, [{{@in6=@local, 0x0, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@private1}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in6=@empty, 0x0, 0x1, 0x3}]}]}, 0x17c}}, 0x50)

23.713655046s ago: executing program 0 (id=603):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000)

23.245672762s ago: executing program 0 (id=606):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000200)=ANY=[], 0xc0) (fail_nth: 1)

23.231830014s ago: executing program 32 (id=606):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000200)=ANY=[], 0xc0) (fail_nth: 1)

2.938854066s ago: executing program 5 (id=848):
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xa, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000a00)={0x105, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private=0xa010100}}}, 0x108)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
write$P9_RREADLINK(r5, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
fadvise64(r5, 0x807f, 0x1000000, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0a00000001010000ff1f2569a60f44081183bbf4677d338f7f00004530d3f100000000bc1f94e691e08cb1766c5b0ccb2ff26368f6377c938fc6eb9ceedd94d33b463a06a0ba18bc69eabec8d79a9edaf25218e75f0f7410def402e6b42f24c92f32ec3ac1010c8fcd90b6b03c1e7f9287ab68dce15db208f9b4cbe9106d19463a7f02ff77f970e8998f2cb5d4b08f2a4ed451aff40180246882ea465598454296f9f8f446dade37d3aaf927c5b770098693ad64f3540bc40f697cdc507ed33d85154bec6145940e0989aea1b3339e8dceaeae22c413793ec1b2a52db396696cebafda68c556e122757cd7d6e25799960c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESOCT=r4, @ANYRES32, @ANYRESHEX=r5], 0x50)
r6 = gettid()
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r7, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000100)='f2fs_iostat\x00', r9, 0x0, 0x7}, 0x18)
sendmsg$inet6(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)="e5f1fddfe175759743a2d6055bef6ad67f4806ff6a", 0x15}], 0x1}, 0x20000044)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r6}, &(0x7f0000bbdffc))
write$cgroup_pid(r5, &(0x7f00000000c0)=r6, 0x12)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)

2.417138048s ago: executing program 1 (id=859):
munmap(&(0x7f0000002000/0x3000)=nil, 0x3000)
msync(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x6)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000f651fc"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='kfree\x00', r0}, 0x18)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000005840)={&(0x7f0000000640)=ANY=[@ANYBLOB='(\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x1090}, 0x40080)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0x3e57}, {0x6}]}, 0x10)
r2 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x0, @perf_config_ext={0x20000000}, 0x4002, 0x0, 0x6, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='cpu>=0|&!')
r3 = getpgrp(0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r4, 0x0)
futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300)
syz_pidfd_open(r3, 0x0)
syz_open_procfs(r3, &(0x7f0000000080)='attr/prev\x00')
r5 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r6 = inotify_init()
inotify_add_watch(r6, &(0x7f00000001c0)='./file0\x00', 0x4a9)
removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00')
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x48}}, 0x0)
r7 = gettid()
tkill(r7, 0x7)
prlimit64(r7, 0x1, &(0x7f0000000140)={0x2, 0x2}, &(0x7f00000001c0))
r8 = syz_io_uring_setup(0x3e4c, &(0x7f00000000c0)={0x0, 0x2bdb, 0x2, 0x8000, 0x40024e}, &(0x7f0000000340)=<r9=>0x0, &(0x7f0000000040))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
io_uring_enter(r8, 0x627, 0x4c1, 0x43, 0x0, 0x30)

2.274382322s ago: executing program 1 (id=862):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x80000000006}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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")
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x801460, 0x0, 0x2, 0x0, &(0x7f0000000000))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r3}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r6}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

2.230447297s ago: executing program 2 (id=864):
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f00000001c0)=0x7, 0x4)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002100)=ANY=[@ANYBLOB="c8010000000201010000000000004c000700000294000a80080001400000000008000140000000000800014000000000700002800600034000010000060003400001000006000340100100000c00028005000100110000002c00018014000300fe8000000000800000000000000000bb14000400fe80000000000000000000000000001206000340000300000c000280050001000600000006000340000000000800214000000001f00003800c00028005f7d9db2619310ea600018014000300ff02000000000000800000000000000114000400ff0200000000000000f20000000000010c00028005000100210000001400018008000100ac14142308000200e00000022c000180140003000000000000000000000000000000000014000400fc0000000000000000000000000000001400018008000100ac1414bb08000200e00000022c000180140003002001000000000000000000000000000014000400200100000000000000000000400000011400018008000100ac1414bb08000200ac1414aa14000180080001006401010108000200ffffffff0e0006007369702d32303030300000000e0006006674702d007369702d323030303000"/456], 0x1c8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})
syz_open_dev$sg(&(0x7f00000000c0), 0xd, 0x200000)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01"], 0xd4}}, 0x8818)
write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r2, 0x0, 0x2}, 0xb)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0)
fsopen(&(0x7f0000000040)='9p\x00', 0x0)
open(&(0x7f0000000300)='./file2\x00', 0x145142, 0x29)

1.973645412s ago: executing program 5 (id=867):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x78, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_EXPRESSIONS={0x3c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x20050800)

1.913457998s ago: executing program 5 (id=870):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003b00)=ANY=[], 0x38}}, 0x0)

1.893500801s ago: executing program 5 (id=871):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x80000000006}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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")
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x801460, 0x0, 0x2, 0x0, &(0x7f0000000000))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r3}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r6}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1.629291917s ago: executing program 1 (id=874):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18)
r4 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x4002, 0x0, 0x3, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000180)='cpu>=0|&!')
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES16=r4, @ANYRES32, @ANYRESDEC=r2, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000000600000000ff17b28e334cb8120000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00', r7}, 0x18)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x7, 0x6, 0x8, 0xfffffe68, r8}, 0x10)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000002c0)={r8, 0x4, 0x6, 0x7, 0x80000001, 0x81}, &(0x7f0000000380)=0x14)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x20)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1}}}}}}, 0x0)
syz_open_dev$usbfs(0x0, 0x70, 0x103301)
r10 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(r10, 0x0, 0x80000000, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c9eee00", @ANYRES16=r1, @ANYBLOB="01000000000000000000540000000e0002006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r11}, 0x10)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0xa2, 0x0, 0x0, 0x0, 0x0, 0x4600, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000580)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0)

1.422009458s ago: executing program 4 (id=877):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
socket(0x10, 0x803, 0xfffffffe)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000080)})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0)
fcntl$addseals(r0, 0x409, 0x8)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r5, &(0x7f0000000180)=""/65, 0x41)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2)
bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="05000000040000000900"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18)
memfd_secret(0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x40000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r6 = io_uring_setup(0x4fee, 0x0)
io_uring_enter(r6, 0x2219, 0x7721, 0x5e, 0x0, 0x0)

1.342288096s ago: executing program 2 (id=878):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc680000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a31000000003c0003803800008008000340000000022c0007800a0001006c696d69740000001c0002800c00024000000000000000050c000140000000000000000414000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x24000850}, 0x40)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
close(0xffffffffffffffff)

1.10497795s ago: executing program 4 (id=880):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
r0 = socket$igmp(0x2, 0x3, 0x2)
unshare(0x20000400)
tee(r0, r0, 0x17e, 0x0)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000080), 0x4)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'})

1.014920769s ago: executing program 2 (id=882):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES64], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='f2fs_fallocate\x00', r2, 0x0, 0x1000003}, 0x18)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r4, 0x0, 0x2}, 0x18)
syz_clone(0x40102000, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103302)
ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x6, 0x0, @scatter={0x1, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/204, 0xcc}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001180)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES8=r1], 0x114}], 0x1, 0x0, 0x0, 0x4041}, 0xd4)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000001080)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@data_err_ignore}, {@sysvgroups}, {@data_err_ignore}, {@noblock_validity}, {@delalloc}, {@nomblk_io_submit}, {@orlov}, {@user_xattr}, {@nodioread_nolock}, {@barrier}]}, 0x1, 0x572, &(0x7f0000000980)="$eJzs3c9rHOUbAPBnNkl/f79NoRQVkUAPVmo3TeKPCh7qUbRY0Htdkmko2XRLdlObWGh7sBcvUgSRFsS73j0W/wH/ioIWipSgBy+R2cwmabObbNNNdut+PjDhfXdm95lnZ95338k7ywbQt0ayP4WIlyPimyTicEQk+brByFeOrGy39Pj6ZLYksbz86Z9Jfbus3nitxvMO5pWXIuLXryJOFjbGrS4szpTK5XQur4/WZq+MVhcWT12aLU2n0+nl8YmJM29PjL/37jsdy/WN839//8n9D898fXzpu58fHrmTxNk4lK9bn8dzuLm+MhIj+XsyFGef2nCsA8F6SdLtHWBbBvJ2PhRZH3A4BvJWD/z33YiIZaBPJdo/9KnGOKBxbd+h6+AXxqMPVi6ANuY/uPK/kdhXvzY6sJQ8cWWUXe8OdyB+FuOXP+7dyZbo3P8hALZ081ZEnB4c3Nj/JXn/t32n29jm6Rj6P9g997Pxz5vNxj+F1fFPNBn/HGzSdrdj6/ZfeNiBMC1l47/3m45/Vyethgfy2v/qY76h5OKlcpr1bf+PiBMxtDerbzafc2bpwXKrdevHf9mSxW+MBfP9eDi498nnTJVqpefJeb1HtyJeaTr+TVaPf9Lk+Gfvx/k2YxxL773Wat3W+e+s5R8jXm96/NdmtJLN5ydH6+fDaOOs2Oiv28d+axW/2/lnx//A5vkPJ+vna6vPHuOHff+krdY9kX+s5j+wtkXz839P8lm9vCd/7FqpVpsbi9iTfLzx8fG15zbqje2z/E8c37z/a3b+74+Iz9vM//bRn15tK/8uHf+pZzr+z1548NGXd1vFb6//e6teOpE/0k7/1+4OPs97BwAAAAAAAL2mEBGHIikUV8uFQrG4cn/H0ThQKFeqtZMXK/OXp6L+XdnhGCo0ZroPr7sfYiy/H7ZRH3+qPhERRyLi24H99XpxslKe6nbyAAAAAAAAAAAAAAAAAAAA0CMOtvj+f+b3gW7vHbDj/OQ39K8t238nfukJ6Ek+/6F/af/Qv7R/6F9btv8bu7MfwO7z+Q/9S/uH/tVm+/9ip/cD2H0+/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCjzp87ly3LS4+vT2b1qasL8zOVq6em0upMcXZ+sjhZmbtSnK5UpstpcbIyu9XrlSuVK2PjMX9ttJZWa6PVhcULs5X5y7ULl2ZL0+mFdGhXsgIAAAAAAAAAAAAAAAAAAIAXS3VhcaZULqdzCgrbKgx28gXv7l85LXsgr14u3NqFWN3umQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgzb8BAAD//3XgNVw=")
r6 = gettid()
ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r6, 0x4, 0x4002)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$int_in(r7, 0x5452, &(0x7f0000b28000)=0x20000000000000ff)
fcntl$setsig(r7, 0xa, 0x12)
poll(&(0x7f0000b2c000)=[{r8}], 0x2c, 0xffffffffffbffff8)
r9 = dup2(r7, r8)
timer_create(0x4, &(0x7f0000000200)={0x0, 0x2d, 0x1, @thr={&(0x7f0000000280)="b2a2ebefae5e913ccd3e289fe4e41628c6c7d37418ebb465f52d9251c467d4fc3d0d7a7bd4ea869b0bbaf49a0f5cf035492f863e6074108d8515c9383eb8ff158e3a067eb8ea62e368434a06b2b87bc79930f1644e8f27f4a5915c177582e7bdc19bf564393e27956bc9b987a4", &(0x7f0000000480)="4113f4c0ae6fc8374427def7c5608f36144584aca1b5ae8e570f7ba6ada7f7875fc2ff27b1845482eb15d80665ff38c1346cdcc4df0a857444d99f3e0f87cf04bd382d057661a953364f85c37fa531d274aedb"}}, &(0x7f0000000300))
ioctl$KDMKTONE(r9, 0x4b30, 0xffffffff)
fcntl$setown(r7, 0x8, r6)
r10 = syz_open_procfs(0x0, &(0x7f0000002140)='sched\x00')
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200})
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00', <r12=>0x0})
ioctl$sock_inet6_SIOCADDRT(r11, 0x890b, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0xa}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3, 0x0, 0x0, 0x280, 0x8, 0x4d2005e, r12})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x1c, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000200000000000000fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000036c3d588181200", @ANYRESDEC=r3, @ANYBLOB="000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000001800000003c6d50f00000000050000008510000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0xca, &(0x7f0000000840)=""/202, 0x40f00, 0x0, '\x00', r12, 0x25, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000fc0)=[{0x2, 0x3, 0x1, 0xc}, {0x3, 0x1, 0xa, 0x7}, {0x0, 0x2, 0x4, 0x6}, {0x1, 0x5, 0x5, 0x7}, {0x5, 0x3, 0x9, 0x4}, {0x1, 0x2, 0x0, 0xa}, {0x5, 0x5, 0xa, 0xd}, {0x1, 0x2, 0xe, 0x4}, {0x4, 0x1, 0x8, 0xc}], 0x10, 0x101}, 0x94)
preadv(r10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/163, 0xa3}], 0x1, 0x0, 0x5)

1.014585279s ago: executing program 1 (id=883):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
r0 = socket$igmp(0x2, 0x3, 0x2)
unshare(0x20000400)
tee(r0, r0, 0x17e, 0x0)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000080), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'})

984.451761ms ago: executing program 1 (id=884):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x80000000006}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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")
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x801460, 0x0, 0x2, 0x0, &(0x7f0000000000))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r3}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r6}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

918.300538ms ago: executing program 5 (id=886):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e"], 0x40}, 0x20000000)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x14, 0x4, 0x4, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r1, &(0x7f0000000380)}, 0x20)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r2, 0x0)
syz_emit_ethernet(0xe2, &(0x7f0000000840)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x5, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0xf, 0x0, [@dev, @broadcast, @loopback]}, @cipso={0x86, 0x54, 0x0, [{0x7, 0x12, "12054b0604000000b983fc5843e178fe"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x7, 0xa, "2189ea43a2149b84"}, {0x6, 0xb, "f7d11634eea26b75af"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0x12, "1afd922c6bad0f24d6430eaa843b7703"}]}, @timestamp={0x44, 0x14, 0x56, 0x0, 0x0, [0x20, 0x0, 0xfffffffe, 0x0]}]}}}}}}}, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000010340)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x4, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0xf, 0x6b, [@empty, @local, @multicast1]}, @timestamp={0x44, 0x4, 0x5, 0x3}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'erspan0\x00', @broadcast})
socket$kcm(0x29, 0x0, 0x0)
sendmsg$tipc(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x20000090)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket(0x10, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000740)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0))
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00000000000000001c0012800b000100697036746e6c00000c00028008000100", @ANYRES32=r5], 0x3c}}, 0x4880)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000004600)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r7, @ANYBLOB="0000000020010000300012800b000100697036746e6c00002000028008000100"], 0x50}}, 0x20004010)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))

910.770049ms ago: executing program 4 (id=887):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x39)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x1, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x104, 0x2, 0xc, 0xfff, 0x0, 0x8ba, 0x400000a1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x7ffd, 0x400, 0x255, 0x6, 0xc, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0xc, 0x200, 0xfffffffd, 0x5, 0xb9a, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x80000001, 0x7c, 0xfffffffc, 0x5, 0x3, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0x400, 0x80, 0x90000010, 0x3800000, 0x0, 0xfffff30b, 0x0, 0x2, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x5, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x10008e, 0x80000005, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x4, 0x955, 0x5, 0x6cdf139e, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x10002, 0x18d0, 0x0, 0x3, 0x9486, 0x80, 0x5, 0x80000000, 0xdb, 0x3, 0x80, 0xffbf7ffc, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8008, 0x2, 0x8, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x2, 0x40, 0x5, 0x27f, 0x200, 0x7, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x104, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x7, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49d, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0x8d, 0x6, 0xfffffef7, 0x89c3, 0x6319da67, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x7, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x45c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
r9 = socket$igmp6(0xa, 0x3, 0x2)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000)
setsockopt$MRT6_DEL_MIF(r9, 0x29, 0xcb, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r10}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x368, 0xa, 0x148, 0x0, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x4, 0x1, 0x1, 0x0, 0x1], 0x3}, {0x3, [0x2, 0x6, 0x1, 0x0, 0x0, 0x3], 0x4}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x280, 0x268, 0x300, 0x280, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x240, 0x280, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x21, "6bb6778f9bdec125b0fb4f26be757b1e6f2fb8e9079627dc6726c4bc85e9"}}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x511)
write$UHID_CREATE2(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
write$UHID_SET_REPORT_REPLY(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00"], 0xc)

730.385837ms ago: executing program 3 (id=888):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'})

667.995763ms ago: executing program 3 (id=889):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
prlimit64(0x0, 0x9, &(0x7f0000000d80)={0x3, 0x1c88000000}, 0x0)
r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r1)
execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)
execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200)={[&(0x7f0000000340)='^-%-\\x\\$})\'!&}*', &(0x7f0000000440)='syz0']}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000020c0)={r1, 0xe0, &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000001e40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001e80)=[0x0, 0x0, 0x0], <r3=>0x0, 0x3f, &(0x7f0000001ec0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001f00), &(0x7f0000001f40), 0x8, 0x75, 0x8, 0x8, &(0x7f0000001f80)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x94)
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00')
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x80000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xff, @local, 0x1ff}}]}, 0x80}, 0x1, 0x7}, 0x0)
setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
r5 = socket(0x2, 0x2, 0x1)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0x800000000006}, 0x18)
syz_emit_ethernet(0x0, 0x0, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x24000850)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r9)
sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r11)
socket$unix(0x1, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r11, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'team_slave_1\x00'})

465.155374ms ago: executing program 3 (id=890):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x3, 0x2b5}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000580)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r4 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457})
io_uring_enter(r1, 0x46bc, 0x3, 0x20, 0x0, 0x20) (fail_nth: 5)

361.071234ms ago: executing program 4 (id=891):
socketpair(0x0, 0x4, 0x3, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_ifreq(r0, 0x8992, &(0x7f0000000080)={'veth0_virt_wifi\x00', @ifru_addrs=@nl=@unspec})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r5}, 0x18)
r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x9}, 0x2000, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='cpu<20\t||')
r7 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x3, 0x2b5}, &(0x7f0000000040)=<r8=>0x0, &(0x7f0000000580)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
chmod(&(0x7f0000000200)='./file0\x00', 0x60)
r10 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457})
io_uring_enter(r7, 0x46bc, 0x3, 0x20, 0x0, 0x20)

245.642985ms ago: executing program 3 (id=892):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc680000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a31000000003c0003803800008008000340000000022c0007800a0001006c696d69740000001c0002800c00024000000000000000050c000140000000000000000414000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x24000850}, 0x40)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
close(r0)

232.164407ms ago: executing program 1 (id=893):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18)
r1 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$vsock(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd61fbddf000083afffe88000000000000000000000000010100000000000000000000000000000001"], 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000e602000000000000000000f3d28e3b2579f6ae4ecbb1d800006d78692de556f06f137cf0729ce406c2ae31226b16505858324364444ab4cdb99c3c563510838b1eb110cf83c63f8443ae98f11c10348901a6b6828acc4493d10194402c895685b8194c61cab787bdc8fff45464abee1f68c20dca7ac438daf9a98cab913a04f159085290d156f6eff6ff6696d5120c33adac0cc2f78097570cf771815ef07f88531dd25e9b26fc3a9440e6b5f557e975741db1f31ab68244a1aa3d713aac7c46e0871dd2efa4cacaf3645d"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x5, 0xb68, 0xfffffffffffffeb9, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0xe}, 0x48)
symlinkat(&(0x7f0000000200)='./file0/../file0\x00', 0xffffffffffffffff, &(0x7f0000002980)='./file0\x00')
accept$unix(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000300)=0x6e)
r5 = socket$inet6(0xa, 0x80000, 0x84)
shutdown(r5, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000004c0))
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x111ffe)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8441}, 0x4000000)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)

213.058559ms ago: executing program 3 (id=894):
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x400017e)
clock_adjtime(0x0, 0x0)
mkdir(&(0x7f0000000140)='./control\x00', 0x111)
rmdir(0x0)
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00'})
add_key$fscrypt_v1(&(0x7f0000000300), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
socket$can_bcm(0x1d, 0x2, 0x2)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e000000000000ea08000f0001000000", 0x24) (fail_nth: 2)

182.978732ms ago: executing program 2 (id=895):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003b00)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8b3300000000000000000500000008000300"], 0x38}}, 0x0)

182.540852ms ago: executing program 3 (id=896):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="000000000000001e"], 0x20}, 0x1, 0x0, 0x0, 0x20000881}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
unshare(0x6a040000)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x22, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000001400000000000000181100009a891f56870fc31d9cff68e1495bfb4024062559b46398230306fea8cfcf600737d214dee24fc96412aff1c4bdff5510c93a78ba9cf986b00fb3831889c7599cf7984d3e0b2ccac5b9ea50be32fe9f291110c067a3b2329b2d88e3548a85cdaf04d808ab2f28a8490f067db9a2fbfbfd03000000d19a97a1802ad6e190c3a124c17ac00d1540d2a58a1df1e129be121fb67f864021a5a41fa0417bfa501b1a9e1553732a1f2041060475746a4e8d4ea84d9d8ac74b0b529f8f390a23d29795c3a95a77", @ANYRES32=r2, @ANYRESHEX], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd6d}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xf, 0xc, &(0x7f0000000280)=ANY=[@ANYRES64=r3], &(0x7f0000000140)='syzkaller\x00', 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='bcache_read\x00', r4, 0x0, 0x802}, 0xc972c1d2891fa07f)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0)
mmap(&(0x7f0000d64000/0x2000)=nil, 0x2000, 0x8, 0x13, 0xffffffffffffffff, 0xffffc000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, r4, 0x4eb62000)
mkdir(0x0, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x8000005, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]})
io_uring_enter(0xffffffffffffffff, 0x4092, 0x2229, 0x0, 0x0, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$setregs(0xd, r5, 0x7, &(0x7f0000000680)="fa0550f01c36e4096ee96b24912a40733378b6047c848d33b2a8a479ca2a5abd36e4d4c71a6007c6647617dadb8beb6b2f2867466fbc688282ba3eb60ca69be1f4eaa77e44504b7c1d8d893c1dcc7f18bde1168f06b93da82acbcdf088dd38ccbc47d50c29d40000000000000000")
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a3200000000140000001100"], 0x7c}}, 0x4004944)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f0000019200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000019440)={&(0x7f0000000840)=ANY=[@ANYBLOB="4008008afb36fe8b60ed610000000000", @ANYRES16=r1, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x880}, 0x4c010)
sendmsg$NFT_BATCH(r6, &(0x7f0000019280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="a432cba5be165132e7f0759bdbe9472b3e7706b1e310b8cc8e0098eaa887dcfa36e9a47ed30237040fd9a1a669ec29ed76a8dcb1fb5365777de8a564aa5011043c519e6adb19ba976024a55736e8416c4bdc8cb06e3b34399460c1af566b2b940d4b1f3475d9f15dbd1efc04bd2ec6cda9dc5b6cc79320e8be442f350a3cb02bcea3939543d11c7bb52a0e9b8c32d385756453b49301281863ddc61998160f43002595fec4a2c17d54bc353de6eec4126eb7f3a826d5ff0bb712921731e3677e59fab3d5a6859c10366125d17b3518abb7310ec0f28f9ab8b249f7a94889c4e62223d65ec524a5f256e1067dea37f0d392ba07", @ANYRES8=0x0, @ANYRES8, @ANYRES16], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r7 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
gettid()
r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
futex(&(0x7f0000000000)=0x2, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0xffffffff)
read$ptp(r8, 0x0, 0x0)
write$cgroup_subtree(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB='s \x00\x00\x00\x00\x00\x00\x00'], 0x9)

101.9255ms ago: executing program 4 (id=897):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
r0 = socket$igmp(0x2, 0x3, 0x2)
unshare(0x20000400)
tee(r0, r0, 0x17e, 0x0)
socket$kcm(0xa, 0x922000000003, 0x11)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'})

101.43381ms ago: executing program 2 (id=898):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x80, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x3c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x20050800)

58.653664ms ago: executing program 4 (id=899):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0)

30.567267ms ago: executing program 2 (id=900):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
r0 = socket$igmp(0x2, 0x3, 0x2)
unshare(0x20000400)
tee(r0, r0, 0x17e, 0x0)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000080), 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'})

0s ago: executing program 5 (id=901):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
r0 = socket$igmp(0x2, 0x3, 0x2)
unshare(0x20000400)
tee(r0, r0, 0x17e, 0x0)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000080), 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'})

kernel console output (not intermixed with test programs):

n
[   79.595846][ T5893] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.628222][ T5875] netlink: 'syz.0.378': attribute type 1 has an invalid length.
[   79.635916][ T5875] netlink: 224 bytes leftover after parsing attributes in process `syz.0.378'.
[   79.652919][ T5875] loop0: detected capacity change from 0 to 1024
[   79.668795][ T5875] EXT4-fs: Ignoring removed nomblk_io_submit option
[   79.675616][ T5875] EXT4-fs: Ignoring removed orlov option
[   79.691199][ T5875] EXT4-fs: Mount option(s) incompatible with ext2
[   79.712376][ T5893] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12)
[   79.719057][ T5893] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[   79.727310][ T5893] vhci_hcd vhci_hcd.0: Device attached
[   79.735704][ T5920] vhci_hcd: connection closed
[   79.736017][   T12] vhci_hcd: stop threads
[   79.745075][   T12] vhci_hcd: release socket
[   79.749537][   T12] vhci_hcd: disconnect device
[   80.267656][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.289527][ T5934] netlink: 'syz.2.383': attribute type 10 has an invalid length.
[   80.439508][   T29] kauditd_printk_skb: 105 callbacks suppressed
[   80.439528][   T29] audit: type=1326 audit(1762976712.666:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5939 comm="syz.0.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29169f6c9 code=0x7ffc0000
[   80.469301][   T29] audit: type=1326 audit(1762976712.666:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5939 comm="syz.0.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29169f6c9 code=0x7ffc0000
[   80.492696][   T29] audit: type=1326 audit(1762976712.666:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5939 comm="syz.0.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff29169f6c9 code=0x7ffc0000
[   80.516069][   T29] audit: type=1326 audit(1762976712.666:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5939 comm="syz.0.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29169f6c9 code=0x7ffc0000
[   80.539511][   T29] audit: type=1326 audit(1762976712.666:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5939 comm="syz.0.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff29169f6c9 code=0x7ffc0000
[   80.562902][   T29] audit: type=1326 audit(1762976712.666:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5939 comm="syz.0.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29169f6c9 code=0x7ffc0000
[   80.586281][   T29] audit: type=1326 audit(1762976712.666:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5939 comm="syz.0.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff29169f6c9 code=0x7ffc0000
[   80.609621][   T29] audit: type=1326 audit(1762976712.666:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5939 comm="syz.0.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29169f6c9 code=0x7ffc0000
[   80.633015][   T29] audit: type=1326 audit(1762976712.666:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5939 comm="syz.0.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff29169f6c9 code=0x7ffc0000
[   80.656347][   T29] audit: type=1326 audit(1762976712.666:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5939 comm="syz.0.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29169f6c9 code=0x7ffc0000
[   81.303833][ T5956] netlink: 236 bytes leftover after parsing attributes in process `syz.2.384'.
[   81.596505][ T5959] netlink: 236 bytes leftover after parsing attributes in process `syz.1.386'.
[   81.677817][ T6015] netlink: 'syz.2.391': attribute type 29 has an invalid length.
[   81.757673][ T6011] loop3: detected capacity change from 0 to 512
[   81.816906][ T6029] netlink: 'syz.1.394': attribute type 10 has an invalid length.
[   81.843841][ T6026] loop0: detected capacity change from 0 to 512
[   81.846890][ T6029] team0: Device ipvlan0 failed to register rx_handler
[   81.863697][ T6011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.880025][ T6026] EXT4-fs: Ignoring removed nobh option
[   81.889713][ T6011] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   81.928452][ T6026] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.392: corrupted inode contents
[   81.956292][ T6052] netlink: 'syz.4.395': attribute type 1 has an invalid length.
[   81.964087][ T6052] netlink: 224 bytes leftover after parsing attributes in process `syz.4.395'.
[   81.981023][ T6052] loop4: detected capacity change from 0 to 1024
[   81.989487][ T6052] EXT4-fs: Ignoring removed nomblk_io_submit option
[   81.996282][ T6052] EXT4-fs: Ignoring removed orlov option
[   82.036109][ T6026] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #3: comm syz.0.392: mark_inode_dirty error
[   82.064480][ T6052] EXT4-fs: Mount option(s) incompatible with ext2
[   82.074862][ T6026] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.392: corrupted inode contents
[   82.087128][ T6011] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.390: corrupted inode contents
[   82.122106][ T6011] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.390: mark_inode_dirty error
[   82.139295][ T6026] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.392: mark_inode_dirty error
[   82.170818][ T6011] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.390: corrupted inode contents
[   82.216471][ T6026] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.392: Failed to acquire dquot type 0
[   82.237181][ T6011] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.390: mark_inode_dirty error
[   82.274415][ T6064] loop1: detected capacity change from 0 to 512
[   82.275201][ T6026] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.392: corrupted inode contents
[   82.308688][ T6026] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #16: comm syz.0.392: mark_inode_dirty error
[   82.330778][ T6026] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.392: corrupted inode contents
[   82.370904][ T6026] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.392: mark_inode_dirty error
[   82.386534][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.404112][ T6064] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.422124][ T6026] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.392: corrupted inode contents
[   82.441317][ T6064] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   82.454287][ T6026] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem
[   82.466207][ T6026] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.392: corrupted inode contents
[   82.549482][ T6026] EXT4-fs error (device loop0): ext4_truncate:4637: inode #16: comm syz.0.392: mark_inode_dirty error
[   82.561800][ T6026] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem
[   82.586925][ T6026] EXT4-fs (loop0): 1 truncate cleaned up
[   82.593079][ T6026] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.606191][ T6026] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   82.668977][ T6064] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.399: corrupted inode contents
[   82.811700][ T6104] netlink: 236 bytes leftover after parsing attributes in process `syz.3.401'.
[   82.951462][ T6064] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.399: mark_inode_dirty error
[   83.058410][ T6064] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.399: corrupted inode contents
[   83.084991][ T6064] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.399: mark_inode_dirty error
[   83.141098][ T6134] netlink: 'syz.2.403': attribute type 29 has an invalid length.
[   83.195421][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.286979][ T6149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.407'.
[   83.352119][ T6150] loop2: detected capacity change from 0 to 512
[   83.397278][ T6150] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.512141][ T6150] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   83.529293][ T6137] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.404: corrupted inode contents
[   83.561005][ T6137] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.404: mark_inode_dirty error
[   83.575210][ T6137] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.404: corrupted inode contents
[   83.590685][ T6137] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.404: mark_inode_dirty error
[   83.688721][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.738162][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.767520][ T6206] netlink: 'syz.2.412': attribute type 1 has an invalid length.
[   83.775205][ T6206] netlink: 224 bytes leftover after parsing attributes in process `syz.2.412'.
[   83.807329][ T6206] loop2: detected capacity change from 0 to 1024
[   83.819466][ T6206] EXT4-fs: Ignoring removed nomblk_io_submit option
[   83.826198][ T6206] EXT4-fs: Ignoring removed orlov option
[   83.839997][ T6206] EXT4-fs: Mount option(s) incompatible with ext2
[   83.898304][ T6195] loop3: detected capacity change from 0 to 512
[   83.951984][ T6248] netlink: 'syz.4.416': attribute type 10 has an invalid length.
[   84.000641][ T6195] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.041800][ T6195] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   84.095405][ T6195] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.411: corrupted inode contents
[   84.130591][ T6195] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.411: mark_inode_dirty error
[   84.158651][ T6195] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.411: corrupted inode contents
[   84.250671][ T6195] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.411: mark_inode_dirty error
[   84.384171][ T6266] netlink: 236 bytes leftover after parsing attributes in process `syz.4.418'.
[   84.781355][ T6275] loop0: detected capacity change from 0 to 512
[   84.799137][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.840168][ T6275] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.852877][ T6275] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   84.888640][ T6274] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.422: corrupted inode contents
[   84.977334][ T6274] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.422: mark_inode_dirty error
[   85.015680][ T6274] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.422: corrupted inode contents
[   85.057510][ T6274] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.422: mark_inode_dirty error
[   85.114034][ T6347] netlink: 'syz.4.427': attribute type 10 has an invalid length.
[   85.163932][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.411346][ T6363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.429'.
[   85.544879][ T6368] loop1: detected capacity change from 0 to 512
[   85.711318][ T6368] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.892097][ T6368] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   86.096712][ T6355] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.430: corrupted inode contents
[   86.118218][ T6381] loop3: detected capacity change from 0 to 1024
[   86.135315][ T6381] EXT4-fs: Ignoring removed orlov option
[   86.151818][ T6355] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.430: mark_inode_dirty error
[   86.188442][ T6381] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   86.224376][ T6355] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.430: corrupted inode contents
[   86.258059][   T29] kauditd_printk_skb: 26 callbacks suppressed
[   86.258075][   T29] audit: type=1326 audit(1762976718.496:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3de44af6c9 code=0x7ffc0000
[   86.287521][   T29] audit: type=1326 audit(1762976718.496:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3de44af6c9 code=0x7ffc0000
[   86.310858][   T29] audit: type=1326 audit(1762976718.496:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f3de44af6c9 code=0x7ffc0000
[   86.334205][   T29] audit: type=1326 audit(1762976718.496:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3de44af6c9 code=0x7ffc0000
[   86.368661][ T6389] netlink: 'syz.0.432': attribute type 1 has an invalid length.
[   86.376361][ T6389] netlink: 224 bytes leftover after parsing attributes in process `syz.0.432'.
[   86.405873][ T6381] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12)
[   86.412495][ T6381] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[   86.420700][ T6381] vhci_hcd vhci_hcd.0: Device attached
[   86.451709][ T6394] loop0: detected capacity change from 0 to 1024
[   86.456505][ T6355] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.430: mark_inode_dirty error
[   86.458608][ T6394] EXT4-fs: Ignoring removed nomblk_io_submit option
[   86.476183][ T6394] EXT4-fs: Ignoring removed orlov option
[   86.481955][ T6390] vhci_hcd: connection closed
[   86.486097][   T12] vhci_hcd: stop threads
[   86.495059][   T12] vhci_hcd: release socket
[   86.499511][   T12] vhci_hcd: disconnect device
[   86.504723][ T6394] EXT4-fs: Mount option(s) incompatible with ext2
[   86.512113][   T29] audit: type=1326 audit(1762976718.596:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3de44af6c9 code=0x7ffc0000
[   86.535480][   T29] audit: type=1326 audit(1762976718.596:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3de44af6c9 code=0x7ffc0000
[   86.558815][   T29] audit: type=1326 audit(1762976718.596:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f3de44af6c9 code=0x7ffc0000
[   86.582243][   T29] audit: type=1326 audit(1762976718.596:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3de44af6c9 code=0x7ffc0000
[   86.605612][   T29] audit: type=1326 audit(1762976718.596:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3de44af6c9 code=0x7ffc0000
[   86.629022][   T29] audit: type=1326 audit(1762976718.596:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3de44af6c9 code=0x7ffc0000
[   86.920531][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.123078][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.341739][ T6439] netlink: 236 bytes leftover after parsing attributes in process `syz.4.434'.
[   87.752243][ T6468] loop2: detected capacity change from 0 to 512
[   87.787740][ T6472] loop3: detected capacity change from 0 to 512
[   87.918022][ T6468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.941630][ T6472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.949284][ T6468] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   87.966454][ T6472] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   87.977870][ T3397] Process accounting resumed
[   87.993646][ T6488] Process accounting resumed
[   88.035713][ T6468] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.438: corrupted inode contents
[   88.059981][ T6468] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.438: mark_inode_dirty error
[   88.073384][ T6472] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.439: corrupted inode contents
[   88.095105][ T6472] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.439: mark_inode_dirty error
[   88.116896][ T6468] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.438: corrupted inode contents
[   88.133591][ T6472] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.439: corrupted inode contents
[   88.148318][ T6468] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.438: mark_inode_dirty error
[   88.163030][ T6501] loop1: detected capacity change from 0 to 512
[   88.192165][ T6501] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.212783][ T6506] loop0: detected capacity change from 0 to 1024
[   88.220168][ T6472] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.439: mark_inode_dirty error
[   88.226165][ T6501] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   88.245042][ T6506] EXT4-fs: Ignoring removed orlov option
[   88.245219][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.281287][ T6513] loop2: detected capacity change from 0 to 512
[   88.298024][ T6494] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.444: corrupted inode contents
[   88.319779][ T6494] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.444: mark_inode_dirty error
[   88.333130][ T6506] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.348450][ T6494] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.444: corrupted inode contents
[   88.375515][ T6513] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   88.400351][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.410820][ T6494] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.444: mark_inode_dirty error
[   88.424883][ T6513] EXT4-fs (loop2): 1 truncate cleaned up
[   88.437864][ T6506] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12)
[   88.444497][ T6506] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[   88.452727][ T6506] vhci_hcd vhci_hcd.0: Device attached
[   88.514109][ T6518] vhci_hcd: connection closed
[   88.514684][   T31] vhci_hcd: stop threads
[   88.523724][   T31] vhci_hcd: release socket
[   88.528190][   T31] vhci_hcd: disconnect device
[   88.557770][ T6529] netlink: 'syz.2.449': attribute type 29 has an invalid length.
[   88.936925][ T6548] netlink: 236 bytes leftover after parsing attributes in process `syz.2.451'.
[   89.026783][ T6577] loop4: detected capacity change from 0 to 512
[   89.037295][ T6544] loop1: detected capacity change from 0 to 1024
[   89.094777][ T6577] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   89.109202][ T6544] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled
[   89.152513][ T6577] EXT4-fs (loop4): 1 truncate cleaned up
[   89.617089][ T6597] loop4: detected capacity change from 0 to 512
[   89.730995][ T6633] loop3: detected capacity change from 0 to 512
[   89.740156][ T6597] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   89.773663][ T6633] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   89.805777][ T6597] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.457: corrupted inode contents
[   89.832436][ T6597] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.457: mark_inode_dirty error
[   89.856697][ T6633] EXT4-fs (loop3): 1 truncate cleaned up
[   89.867864][ T6597] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.457: corrupted inode contents
[   89.898576][ T6597] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.457: mark_inode_dirty error
[   90.051245][ T6648] FAULT_INJECTION: forcing a failure.
[   90.051245][ T6648] name failslab, interval 1, probability 0, space 0, times 0
[   90.064059][ T6648] CPU: 1 UID: 0 PID: 6648 Comm: syz.4.468 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   90.064135][ T6648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   90.064151][ T6648] Call Trace:
[   90.064159][ T6648]  <TASK>
[   90.064168][ T6648]  __dump_stack+0x1d/0x30
[   90.064213][ T6648]  dump_stack_lvl+0xe8/0x140
[   90.064236][ T6648]  dump_stack+0x15/0x1b
[   90.064292][ T6648]  should_fail_ex+0x265/0x280
[   90.064329][ T6648]  should_failslab+0x8c/0xb0
[   90.064364][ T6648]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[   90.064428][ T6648]  ? __alloc_skb+0x101/0x320
[   90.064469][ T6648]  __alloc_skb+0x101/0x320
[   90.064536][ T6648]  netlink_alloc_large_skb+0xbf/0xf0
[   90.064569][ T6648]  netlink_sendmsg+0x3cf/0x6b0
[   90.064596][ T6648]  ? __pfx_netlink_sendmsg+0x10/0x10
[   90.064640][ T6648]  __sock_sendmsg+0x145/0x180
[   90.064730][ T6648]  ____sys_sendmsg+0x31e/0x4e0
[   90.064810][ T6648]  ___sys_sendmsg+0x17b/0x1d0
[   90.064853][ T6648]  __x64_sys_sendmsg+0xd4/0x160
[   90.064884][ T6648]  x64_sys_call+0x191e/0x3000
[   90.064937][ T6648]  do_syscall_64+0xd2/0x200
[   90.064960][ T6648]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   90.065017][ T6648]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   90.065053][ T6648]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.065089][ T6648] RIP: 0033:0x7f86cc50f6c9
[   90.065123][ T6648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   90.065165][ T6648] RSP: 002b:00007f86caf6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   90.065184][ T6648] RAX: ffffffffffffffda RBX: 00007f86cc765fa0 RCX: 00007f86cc50f6c9
[   90.065196][ T6648] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005
[   90.065212][ T6648] RBP: 00007f86caf6f090 R08: 0000000000000000 R09: 0000000000000000
[   90.065253][ T6648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   90.065264][ T6648] R13: 00007f86cc766038 R14: 00007f86cc765fa0 R15: 00007fff5a628068
[   90.065364][ T6648]  </TASK>
[   90.279152][ T6649] netlink: 'syz.3.467': attribute type 21 has an invalid length.
[   90.287008][ T6649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.467'.
[   90.305666][ T6651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.469'.
[   90.314545][ T6651] netlink: 348 bytes leftover after parsing attributes in process `syz.0.469'.
[   90.323600][ T6651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.469'.
[   90.332412][ T6651] netlink: 348 bytes leftover after parsing attributes in process `syz.0.469'.
[   90.378864][ T6651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.469'.
[   90.416937][ T6649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.467'.
[   90.453015][ T6673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.474'.
[   90.461885][ T6673] netlink: 348 bytes leftover after parsing attributes in process `syz.4.474'.
[   90.573536][ T6677] netlink: 'syz.0.473': attribute type 1 has an invalid length.
[   90.633963][ T6709] loop4: detected capacity change from 0 to 1024
[   90.666546][ T6709] EXT4-fs: Ignoring removed orlov option
[   90.675693][ T6716] loop2: detected capacity change from 0 to 512
[   90.744604][ T6709] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12)
[   90.751235][ T6709] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[   90.759443][ T6709] vhci_hcd vhci_hcd.0: Device attached
[   90.794346][ T6725] vhci_hcd: connection closed
[   90.794533][ T3456] vhci_hcd: stop threads
[   90.803612][ T3456] vhci_hcd: release socket
[   90.808105][ T3456] vhci_hcd: disconnect device
[   90.829247][ T6716] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   90.877782][ T6676] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.475: corrupted inode contents
[   90.931985][ T6676] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.475: mark_inode_dirty error
[   90.985944][ T6676] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.475: corrupted inode contents
[   91.020611][ T6676] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.475: mark_inode_dirty error
[   91.386592][   T29] kauditd_printk_skb: 133 callbacks suppressed
[   91.386605][   T29] audit: type=1400 audit(1762976723.626:2481): avc:  denied  { connect } for  pid=6748 comm="syz.4.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   91.419530][   T29] audit: type=1326 audit(1762976723.646:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86cc50f6c9 code=0x7ffc0000
[   91.443235][   T29] audit: type=1326 audit(1762976723.646:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f86cc50f6c9 code=0x7ffc0000
[   91.467057][   T29] audit: type=1326 audit(1762976723.646:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86cc50f6c9 code=0x7ffc0000
[   91.490395][   T29] audit: type=1326 audit(1762976723.646:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86cc50f6c9 code=0x7ffc0000
[   91.513787][   T29] audit: type=1326 audit(1762976723.646:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86cc50f6c9 code=0x7ffc0000
[   91.537269][   T29] audit: type=1326 audit(1762976723.646:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f86cc50f6c9 code=0x7ffc0000
[   91.560502][   T29] audit: type=1326 audit(1762976723.646:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86cc50f6c9 code=0x7ffc0000
[   91.583902][   T29] audit: type=1326 audit(1762976723.646:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86cc50f6c9 code=0x7ffc0000
[   91.607307][   T29] audit: type=1326 audit(1762976723.646:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86cc50f6c9 code=0x7ffc0000
[   91.881280][ T6786] loop0: detected capacity change from 0 to 512
[   91.900108][ T6786] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   91.929709][ T6786] EXT4-fs (loop0): 1 truncate cleaned up
[   92.102493][ T6818] loop2: detected capacity change from 0 to 1024
[   92.112809][ T6818] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled
[   92.130652][ T6798] loop1: detected capacity change from 0 to 512
[   92.190006][ T6798] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   92.230417][ T6798] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.495: corrupted inode contents
[   92.258568][ T6798] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.495: mark_inode_dirty error
[   92.272184][ T6798] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.495: corrupted inode contents
[   92.306129][ T6798] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.495: mark_inode_dirty error
[   92.600551][ T6896] loop3: detected capacity change from 0 to 512
[   92.608233][ T6896] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   92.629041][ T6896] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[   92.640667][ T6896] netlink: 'syz.3.508': attribute type 12 has an invalid length.
[   92.734840][ T6905] loop3: detected capacity change from 0 to 1024
[   92.759923][ T6905] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled
[   92.894576][ T6937] loop0: detected capacity change from 0 to 1024
[   92.927958][ T6937] EXT4-fs: Ignoring removed orlov option
[   93.081343][ T6937] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12)
[   93.088115][ T6937] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[   93.096272][ T6937] vhci_hcd vhci_hcd.0: Device attached
[   93.107144][ T6966] vhci_hcd: connection closed
[   93.108582][   T53] vhci_hcd: stop threads
[   93.117601][   T53] vhci_hcd: release socket
[   93.122063][   T53] vhci_hcd: disconnect device
[   93.167150][ T6941] loop1: detected capacity change from 0 to 512
[   93.577969][ T6941] ext4 filesystem being mounted at /105/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   93.639697][ T6941] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.512: corrupted inode contents
[   93.656611][ T6941] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.512: mark_inode_dirty error
[   93.694085][ T6941] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.512: corrupted inode contents
[   93.707291][ T6941] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.512: mark_inode_dirty error
[   94.144295][ T7043] netlink: 'syz.0.526': attribute type 29 has an invalid length.
[   94.288966][ T7044] loop3: detected capacity change from 0 to 512
[   94.400156][ T7044] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   94.642662][ T7041] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.525: corrupted inode contents
[   94.663323][ T7082] netlink: 'syz.0.529': attribute type 21 has an invalid length.
[   94.671188][ T7082] __nla_validate_parse: 9 callbacks suppressed
[   94.671202][ T7082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.529'.
[   94.697412][ T7041] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.525: mark_inode_dirty error
[   94.716013][ T7041] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.525: corrupted inode contents
[   94.744375][ T7091] loop4: detected capacity change from 0 to 512
[   94.752106][ T7041] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.525: mark_inode_dirty error
[   94.758719][ T7091] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   94.785770][ T7107] loop1: detected capacity change from 0 to 1024
[   94.795001][ T7091] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.530: invalid indirect mapped block 4294967295 (level 0)
[   94.795583][ T7082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.529'.
[   94.810838][ T7107] EXT4-fs: Ignoring removed orlov option
[   94.837365][ T7091] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.530: invalid indirect mapped block 4294967295 (level 1)
[   94.854742][ T7104] netlink: 332 bytes leftover after parsing attributes in process `syz.0.529'.
[   94.874271][ T7091] EXT4-fs (loop4): 1 orphan inode deleted
[   94.880117][ T7091] EXT4-fs (loop4): 1 truncate cleaned up
[   94.902408][ T7091] netlink: 40 bytes leftover after parsing attributes in process `syz.4.530'.
[   94.947714][ T7107] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12)
[   94.954396][ T7107] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[   94.962548][ T7107] vhci_hcd vhci_hcd.0: Device attached
[   95.013859][ T7127] vhci_hcd: connection closed
[   95.014452][   T12] vhci_hcd: stop threads
[   95.023442][   T12] vhci_hcd: release socket
[   95.027896][   T12] vhci_hcd: disconnect device
[   95.088646][ T7124] loop2: detected capacity change from 0 to 512
[   95.201876][ T7124] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   95.259331][ T7124] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.533: corrupted inode contents
[   95.293781][ T7161] netlink: 'syz.3.536': attribute type 1 has an invalid length.
[   95.301481][ T7161] netlink: 224 bytes leftover after parsing attributes in process `syz.3.536'.
[   95.328748][ T7166] netlink: 236 bytes leftover after parsing attributes in process `syz.4.535'.
[   95.363372][ T7124] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.533: mark_inode_dirty error
[   95.388365][ T7168] netlink: 12 bytes leftover after parsing attributes in process `syz.0.537'.
[   95.568681][ T7124] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.533: corrupted inode contents
[   95.623423][ T7194] loop3: detected capacity change from 0 to 1024
[   95.631920][ T7124] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.533: mark_inode_dirty error
[   95.632206][ T7194] EXT4-fs: Ignoring removed nomblk_io_submit option
[   95.632229][ T7194] EXT4-fs: Ignoring removed orlov option
[   95.644469][ T7194] EXT4-fs: Mount option(s) incompatible with ext2
[   95.897296][ T7239] random: crng reseeded on system resumption
[   95.908236][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.540'.
[   95.917169][ T7239] netlink: 'syz.2.540': attribute type 5 has an invalid length.
[   95.924808][ T7239] netlink: 20 bytes leftover after parsing attributes in process `syz.2.540'.
[   95.940346][ T7239] geneve2: entered promiscuous mode
[   95.945608][ T7239] geneve2: entered allmulticast mode
[   95.954772][ T1394] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   95.972137][ T1394] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   95.981841][ T1394] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[   95.991053][ T1394] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[   96.120886][ T7247] loop4: detected capacity change from 0 to 512
[   96.203660][ T7247] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   96.207424][ T7277] netlink: 'syz.3.549': attribute type 29 has an invalid length.
[   96.262252][ T7247] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.544: corrupted inode contents
[   96.287363][ T7247] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.544: mark_inode_dirty error
[   96.305429][ T7247] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.544: corrupted inode contents
[   96.319017][ T7247] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.544: mark_inode_dirty error
[   96.414136][ T7293] loop0: detected capacity change from 0 to 512
[   96.503468][ T7293] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   96.526465][ T7299] netlink: 'syz.3.555': attribute type 1 has an invalid length.
[   96.534206][ T7299] netlink: 224 bytes leftover after parsing attributes in process `syz.3.555'.
[   96.560541][ T7280] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.551: corrupted inode contents
[   96.588878][ T7280] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.551: mark_inode_dirty error
[   96.925440][ T7344] netlink: 'syz.2.557': attribute type 1 has an invalid length.
[   96.951748][ T7280] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.551: corrupted inode contents
[   97.063067][ T7344] loop2: detected capacity change from 0 to 1024
[   97.072039][ T7344] EXT4-fs: Ignoring removed nomblk_io_submit option
[   97.078771][ T7344] EXT4-fs: Ignoring removed orlov option
[   97.085560][ T7280] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.551: mark_inode_dirty error
[   97.098178][ T7344] EXT4-fs: Mount option(s) incompatible with ext2
[   97.160081][ T7362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=7362 comm=syz.3.559
[   97.843259][ T7406] loop3: detected capacity change from 0 to 512
[   97.856945][ T7406] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   97.928616][ T7406] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[   97.953896][ T7440] loop0: detected capacity change from 0 to 512
[   97.982496][ T7406] netlink: 'syz.3.565': attribute type 12 has an invalid length.
[   97.991734][ T7440] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   98.043249][ T7450] loop3: detected capacity change from 0 to 1024
[   98.056710][ T7450] EXT4-fs: Ignoring removed orlov option
[   98.122613][   T29] kauditd_printk_skb: 604 callbacks suppressed
[   98.122658][   T29] audit: type=1326 audit(1762976730.356:3095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7449 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3de44af6c9 code=0x7ffc0000
[   98.152278][   T29] audit: type=1326 audit(1762976730.356:3096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7449 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3de44af6c9 code=0x7ffc0000
[   98.179168][ T7440] EXT4-fs (loop0): 1 truncate cleaned up
[   98.196830][ T7458] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   98.222603][ T7450] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12)
[   98.229244][ T7450] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[   98.237464][ T7450] vhci_hcd vhci_hcd.0: Device attached
[   98.260794][ T7459] vhci_hcd: connection closed
[   98.276918][ T1394] vhci_hcd: stop threads
[   98.285985][ T1394] vhci_hcd: release socket
[   98.290437][ T1394] vhci_hcd: disconnect device
[   98.321345][ T7465] loop2: detected capacity change from 0 to 512
[   98.334515][ T7465] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   98.367002][ T7465] EXT4-fs (loop2): 1 truncate cleaned up
[   98.380198][   T29] audit: type=1326 audit(1762976730.426:3097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7449 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f3de44af6c9 code=0x7ffc0000
[   98.403577][   T29] audit: type=1326 audit(1762976730.426:3098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7449 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3de44af6c9 code=0x7ffc0000
[   98.426999][   T29] audit: type=1326 audit(1762976730.426:3099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7449 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3de44af6c9 code=0x7ffc0000
[   98.450333][   T29] audit: type=1326 audit(1762976730.426:3100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7449 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3de44af6c9 code=0x7ffc0000
[   98.473818][   T29] audit: type=1326 audit(1762976730.426:3101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7449 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f3de44af6c9 code=0x7ffc0000
[   98.497157][   T29] audit: type=1326 audit(1762976730.426:3102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7449 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3de44af6c9 code=0x7ffc0000
[   98.520490][   T29] audit: type=1326 audit(1762976730.426:3103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7449 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3de44af6c9 code=0x7ffc0000
[   98.543827][   T29] audit: type=1326 audit(1762976730.426:3104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7449 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3de44af6c9 code=0x7ffc0000
[   98.584411][ T7475] loop4: detected capacity change from 0 to 512
[   98.594624][ T7477] FAULT_INJECTION: forcing a failure.
[   98.594624][ T7477] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   98.607723][ T7477] CPU: 0 UID: 0 PID: 7477 Comm: syz.1.572 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   98.607755][ T7477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   98.607779][ T7477] Call Trace:
[   98.607787][ T7477]  <TASK>
[   98.607796][ T7477]  __dump_stack+0x1d/0x30
[   98.607892][ T7477]  dump_stack_lvl+0xe8/0x140
[   98.607920][ T7477]  dump_stack+0x15/0x1b
[   98.607944][ T7477]  should_fail_ex+0x265/0x280
[   98.607974][ T7477]  should_fail+0xb/0x20
[   98.607996][ T7477]  should_fail_usercopy+0x1a/0x20
[   98.608025][ T7477]  _copy_from_user+0x1c/0xb0
[   98.608057][ T7477]  copy_from_sockptr_offset+0x66/0xa0
[   98.608141][ T7477]  do_ip6t_set_ctl+0x5d1/0x840
[   98.608186][ T7477]  ? kstrtoull+0x111/0x140
[   98.608228][ T7477]  ? __rcu_read_unlock+0x4f/0x70
[   98.608307][ T7477]  nf_setsockopt+0x199/0x1b0
[   98.608334][ T7477]  ipv6_setsockopt+0x11a/0x130
[   98.608436][ T7477]  tcp_setsockopt+0x98/0xb0
[   98.608456][ T7477]  sock_common_setsockopt+0x69/0x80
[   98.608550][ T7477]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   98.608580][ T7477]  __sys_setsockopt+0x184/0x200
[   98.608665][ T7477]  __x64_sys_setsockopt+0x64/0x80
[   98.608703][ T7477]  x64_sys_call+0x20ec/0x3000
[   98.608779][ T7477]  do_syscall_64+0xd2/0x200
[   98.608816][ T7477]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   98.608946][ T7477]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   98.609093][ T7477]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.609122][ T7477] RIP: 0033:0x7f493647f6c9
[   98.609141][ T7477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   98.609166][ T7477] RSP: 002b:00007f4934edf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   98.609190][ T7477] RAX: ffffffffffffffda RBX: 00007f49366d5fa0 RCX: 00007f493647f6c9
[   98.609217][ T7477] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003
[   98.609234][ T7477] RBP: 00007f4934edf090 R08: 0000000000000468 R09: 0000000000000000
[   98.609251][ T7477] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000001
[   98.609267][ T7477] R13: 00007f49366d6038 R14: 00007f49366d5fa0 R15: 00007ffde7b51b28
[   98.609293][ T7477]  </TASK>
[   99.259190][ T7475] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   99.328860][ T7513] FAULT_INJECTION: forcing a failure.
[   99.328860][ T7513] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   99.342067][ T7513] CPU: 1 UID: 0 PID: 7513 Comm: syz.0.574 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   99.342125][ T7513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   99.342138][ T7513] Call Trace:
[   99.342144][ T7513]  <TASK>
[   99.342151][ T7513]  __dump_stack+0x1d/0x30
[   99.342175][ T7513]  dump_stack_lvl+0xe8/0x140
[   99.342247][ T7513]  dump_stack+0x15/0x1b
[   99.342271][ T7513]  should_fail_ex+0x265/0x280
[   99.342298][ T7513]  should_fail+0xb/0x20
[   99.342372][ T7513]  should_fail_usercopy+0x1a/0x20
[   99.342398][ T7513]  _copy_from_iter+0xd2/0xe80
[   99.342444][ T7513]  ? __build_skb_around+0x1ab/0x200
[   99.342480][ T7513]  ? __alloc_skb+0x223/0x320
[   99.342647][ T7513]  netlink_sendmsg+0x471/0x6b0
[   99.342747][ T7513]  ? __pfx_netlink_sendmsg+0x10/0x10
[   99.342774][ T7513]  __sock_sendmsg+0x145/0x180
[   99.342809][ T7513]  ____sys_sendmsg+0x31e/0x4e0
[   99.342856][ T7513]  ___sys_sendmsg+0x17b/0x1d0
[   99.342937][ T7513]  __x64_sys_sendmsg+0xd4/0x160
[   99.342960][ T7513]  x64_sys_call+0x191e/0x3000
[   99.342985][ T7513]  do_syscall_64+0xd2/0x200
[   99.343008][ T7513]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   99.343102][ T7513]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   99.343137][ T7513]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.343165][ T7513] RIP: 0033:0x7ff29169f6c9
[   99.343185][ T7513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   99.343239][ T7513] RSP: 002b:00007ff290107038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   99.343265][ T7513] RAX: ffffffffffffffda RBX: 00007ff2918f5fa0 RCX: 00007ff29169f6c9
[   99.343283][ T7513] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[   99.343300][ T7513] RBP: 00007ff290107090 R08: 0000000000000000 R09: 0000000000000000
[   99.343317][ T7513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   99.343332][ T7513] R13: 00007ff2918f6038 R14: 00007ff2918f5fa0 R15: 00007ffe573d7f08
[   99.343373][ T7513]  </TASK>
[   99.560562][ T7455] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.570: corrupted inode contents
[   99.610834][ T7455] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.570: mark_inode_dirty error
[   99.811465][ T7536] netlink: 'syz.1.575': attribute type 21 has an invalid length.
[   99.819354][ T7536] __nla_validate_parse: 6 callbacks suppressed
[   99.819371][ T7536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.575'.
[   99.835821][ T7455] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.570: corrupted inode contents
[   99.893650][ T7540] 9pnet_fd: Insufficient options for proto=fd
[  100.067182][ T7565] netlink: 'syz.0.579': attribute type 13 has an invalid length.
[  100.265954][ T7565] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.282458][ T7570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.583'.
[  100.292782][ T7455] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.570: mark_inode_dirty error
[  100.328017][ T7565] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.337548][ T7565] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.412000][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.451487][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.474334][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.549545][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.564159][ T7536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.575'.
[  100.577095][ T3323] EXT4-fs unmount: 47 callbacks suppressed
[  100.577113][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.593961][ T7577] netlink: 'syz.0.584': attribute type 21 has an invalid length.
[  100.601862][ T7577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.584'.
[  100.752921][ T7580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.584'.
[  100.832861][ T7608] loop0: detected capacity change from 0 to 512
[  100.859916][ T7608] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  101.215465][ T7619] netlink: 236 bytes leftover after parsing attributes in process `syz.4.588'.
[  101.959989][ T7643] netlink: 236 bytes leftover after parsing attributes in process `syz.1.589'.
[  102.160895][ T7608] EXT4-fs (loop0): 1 truncate cleaned up
[  102.181202][ T7657] loop4: detected capacity change from 0 to 1024
[  102.189170][ T7608] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.208436][ T7683] netlink: 'syz.1.594': attribute type 29 has an invalid length.
[  102.219461][ T7657] EXT4-fs: Ignoring removed orlov option
[  102.237902][ T7657] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.314716][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.397864][ T7657] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12)
[  102.404509][ T7657] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  102.412710][ T7657] vhci_hcd vhci_hcd.0: Device attached
[  102.424171][ T7723] loop1: detected capacity change from 0 to 512
[  102.469286][ T7723] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.497587][ T7723] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  102.497718][ T7714] vhci_hcd: connection closed
[  102.526945][ T1394] vhci_hcd: stop threads
[  102.533879][ T7709] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.595: corrupted inode contents
[  102.535972][ T1394] vhci_hcd: release socket
[  102.535983][ T1394] vhci_hcd: disconnect device
[  102.564156][ T7709] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.595: mark_inode_dirty error
[  102.583680][ T7709] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.595: corrupted inode contents
[  102.599826][ T7709] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.595: mark_inode_dirty error
[  102.627003][ T7743] loop3: detected capacity change from 0 to 1024
[  102.643358][ T7743] EXT4-fs: Ignoring removed orlov option
[  102.651170][ T7747] tipc: Started in network mode
[  102.656103][ T7747] tipc: Node identity 0000000000002d210000000000000001, cluster identity 4711
[  102.665008][ T7747] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  102.690170][ T7747] loop0: detected capacity change from 0 to 164
[  102.691129][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.707486][ T7743] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.767341][ T7747] process 'syz.0.599' launched '/dev/fd/7' with NULL argv: empty string added
[  102.787203][ T7747] syz.0.599: attempt to access beyond end of device
[  102.787203][ T7747] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  102.801318][ T7743] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12)
[  102.807998][ T7743] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  102.816160][ T7743] vhci_hcd vhci_hcd.0: Device attached
[  102.826091][ T7747] syz.0.599: attempt to access beyond end of device
[  102.826091][ T7747] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164
[  102.843717][ T7754] vhci_hcd: connection closed
[  102.844114][ T1394] vhci_hcd: stop threads
[  102.853177][ T1394] vhci_hcd: release socket
[  102.857656][ T1394] vhci_hcd: disconnect device
[  102.858660][ T7747] iso9660: Corrupted directory entry in block 4 of inode 1792
[  102.886062][ T3316] iso9660: Corrupted directory entry in block 4 of inode 1792
[  102.895384][ T3316] ISOFS: unable to read i-node block
[  102.901789][ T3316] ISOFS: unable to read i-node block
[  102.997690][ T7765] netlink: 236 bytes leftover after parsing attributes in process `syz.2.602'.
[  103.244535][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.339672][ T7796] loop4: detected capacity change from 0 to 512
[  103.356900][ T7798] netlink: 'syz.1.605': attribute type 29 has an invalid length.
[  103.374150][ T7796] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.604: bad orphan inode 15
[  103.408452][ T7796] ext4_test_bit(bit=14, block=18) = 1
[  103.413974][ T7796] is_bad_inode(inode)=0
[  103.418388][ T7796] NEXT_ORPHAN(inode)=1023
[  103.422731][ T7796] max_ino=32
[  103.425937][ T7796] i_nlink=0
[  103.447313][ T7796] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2967: inode #15: comm syz.4.604: corrupted xattr block 19: invalid header
[  103.468714][ T7796] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117)
[  103.486543][ T7796] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[  103.494913][   T29] kauditd_printk_skb: 87 callbacks suppressed
[  103.494944][   T29] audit: type=1400 audit(1762976735.726:3192): avc:  denied  { mounton } for  pid=7807 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  103.513416][ T7796] ext4 filesystem being mounted at /122/�q�Y�3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  103.540952][ T7808] netlink: 'syz.1.608': attribute type 1 has an invalid length.
[  103.548707][ T7808] netlink: 224 bytes leftover after parsing attributes in process `syz.1.608'.
[  103.626877][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.636578][ T7813] loop1: detected capacity change from 0 to 1024
[  103.643605][ T7813] EXT4-fs: Ignoring removed nomblk_io_submit option
[  103.650309][ T7813] EXT4-fs: Ignoring removed orlov option
[  103.664042][ T7815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.610'.
[  103.697068][ T7813] EXT4-fs: Mount option(s) incompatible with ext2
[  103.747124][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[  103.779146][ T7813] veth1_to_bridge: entered allmulticast mode
[  103.804475][ T5185] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.068014][ T7807] chnl_net:caif_netlink_parms(): no params data found
[  104.154420][ T7807] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.161800][ T7807] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.177105][ T7807] bridge_slave_0: entered allmulticast mode
[  104.184016][ T7807] bridge_slave_0: entered promiscuous mode
[  104.191367][ T7807] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.198566][ T7807] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.205910][ T7807] bridge_slave_1: entered allmulticast mode
[  104.212836][ T7807] bridge_slave_1: entered promiscuous mode
[  104.236141][   T31] bridge_slave_1: left allmulticast mode
[  104.241868][   T31] bridge_slave_1: left promiscuous mode
[  104.247643][   T31] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.256381][   T31] bridge_slave_0: left allmulticast mode
[  104.262063][   T31] bridge_slave_0: left promiscuous mode
[  104.267879][   T31] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.380106][   T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  104.393182][   T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  104.403029][   T31] bond0 (unregistering): Released all slaves
[  104.428895][ T7807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  104.445901][ T7807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  104.455111][   T31] tipc: Left network mode
[  104.533631][ T7807] team0: Port device team_slave_0 added
[  104.545981][   T31] hsr_slave_0: left promiscuous mode
[  104.554576][   T31] hsr_slave_1: left promiscuous mode
[  104.561229][   T31] batman_adv: batadv0: Removing interface: batadv_slave_0
[  104.569051][ T8118] loop2: detected capacity change from 0 to 512
[  104.575798][ T8118] EXT4-fs: Ignoring removed nobh option
[  104.586698][   T31] batman_adv: batadv0: Removing interface: batadv_slave_1
[  104.607773][ T8118] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.615: corrupted inode contents
[  104.636292][ T8118] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #3: comm syz.2.615: mark_inode_dirty error
[  104.649427][   T31] team0 (unregistering): Port device team_slave_1 removed
[  104.660588][ T8118] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.615: corrupted inode contents
[  104.672974][ T8118] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.615: mark_inode_dirty error
[  104.684454][ T8118] Quota error (device loop2): write_blk: dquota write failed
[  104.691997][ T8118] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  104.703135][ T8118] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.615: Failed to acquire dquot type 0
[  104.714912][ T8118] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.615: corrupted inode contents
[  104.728272][   T31] team0 (unregistering): Port device team_slave_0 removed
[  104.737867][ T8118] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #16: comm syz.2.615: mark_inode_dirty error
[  104.750155][ T8118] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.615: corrupted inode contents
[  104.766533][ T8118] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.615: mark_inode_dirty error
[  104.778026][ T8118] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.615: corrupted inode contents
[  104.789940][ T8118] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem
[  104.798610][ T8118] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.615: corrupted inode contents
[  104.810663][ T8118] EXT4-fs error (device loop2): ext4_truncate:4637: inode #16: comm syz.2.615: mark_inode_dirty error
[  104.821863][ T8118] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem
[  104.822547][ T7807] team0: Port device team_slave_1 added
[  104.831631][ T8118] EXT4-fs (loop2): 1 truncate cleaned up
[  104.842999][ T8118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.855558][ T8118] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  104.875038][ T7807] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.882096][ T7807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  104.908077][ T7807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.919548][ T7807] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.926642][ T7807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  104.952639][ T7807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.990715][ T7807] hsr_slave_0: entered promiscuous mode
[  104.997061][ T7807] hsr_slave_1: entered promiscuous mode
[  105.002955][ T7807] debugfs: 'hsr0' already exists in 'hsr'
[  105.008731][ T7807] Cannot create hsr debugfs directory
[  105.015022][ T8189] netlink: 'syz.3.617': attribute type 29 has an invalid length.
[  105.120341][   T29] audit: type=1400 audit(1762976737.356:3193): avc:  denied  { read } for  pid=8111 comm="syz.2.615" name="file1" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[  105.142925][   T29] audit: type=1400 audit(1762976737.356:3194): avc:  denied  { unlink } for  pid=8111 comm="syz.2.615" name="file1" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[  105.152127][ T7807] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  105.173620][ T8118] EXT4-fs error (device loop2): ext4_generic_delete_entry:2668: inode #12: block 13: comm syz.2.615: bad entry in directory: inode out of bounds - offset=24, inode=33554445, rec_len=16, size=4096 fake=0
[  105.201117][ T8118] EXT4-fs error (device loop2) in ext4_delete_entry:2739: Corrupt filesystem
[  105.226435][ T7807] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  105.241941][   T29] audit: type=1326 audit(1762976737.476:3195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8276 comm="syz.1.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f493647f6c9 code=0x7ffc0000
[  105.265448][   T29] audit: type=1326 audit(1762976737.476:3196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8276 comm="syz.1.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f493647f6c9 code=0x7ffc0000
[  105.288855][   T29] audit: type=1326 audit(1762976737.476:3197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8276 comm="syz.1.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f493647f6c9 code=0x7ffc0000
[  105.312225][   T29] audit: type=1326 audit(1762976737.476:3198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8276 comm="syz.1.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f493647f6c9 code=0x7ffc0000
[  105.335631][   T29] audit: type=1326 audit(1762976737.476:3199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8276 comm="syz.1.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f493647f6c9 code=0x7ffc0000
[  105.339622][ T7807] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  105.370292][ T7807] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  105.399664][ T8290] loop1: detected capacity change from 0 to 1024
[  105.406957][ T8290] EXT4-fs: inline encryption not supported
[  105.412799][ T8290] EXT4-fs: Ignoring removed orlov option
[  105.454799][ T8290] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  105.497605][ T8290] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002]
[  105.509474][ T8283] loop3: detected capacity change from 0 to 512
[  105.510624][ T7807] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.522945][ T8290] System zones: 0-1, 3-12
[  105.543396][ T8290] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.578549][ T7807] 8021q: adding VLAN 0 to HW filter on device team0
[  105.588786][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.595856][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.613301][ T1717] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.620508][ T1717] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.681744][ T8283] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.716747][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.734447][ T8283] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  105.762460][ T8328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.624'.
[  105.799884][ T8283] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.622: corrupted inode contents
[  105.810994][ T7807] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.821598][ T8283] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.622: mark_inode_dirty error
[  105.827747][ T8118] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.842485][ T1717] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:6: Failed to release dquot type 1
[  105.855318][ T8283] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.622: corrupted inode contents
[  105.904651][ T8283] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.622: mark_inode_dirty error
[  105.992218][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.114722][ T7807] veth0_vlan: entered promiscuous mode
[  106.123640][ T7807] veth1_vlan: entered promiscuous mode
[  106.156329][ T7807] veth0_macvtap: entered promiscuous mode
[  106.164107][ T7807] veth1_macvtap: entered promiscuous mode
[  106.189913][ T8405] netlink: 'syz.3.628': attribute type 29 has an invalid length.
[  106.203169][ T7807] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.215162][ T7807] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.227014][   T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.242564][   T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.265863][   T31] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.283186][   T31] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.356569][ T8426] netlink: 'syz.3.631': attribute type 10 has an invalid length.
[  106.364793][ T8426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.631'.
[  106.378719][ T8427] netlink: 'syz.5.607': attribute type 1 has an invalid length.
[  106.386423][ T8427] netlink: 224 bytes leftover after parsing attributes in process `syz.5.607'.
[  106.408381][ T8427] loop5: detected capacity change from 0 to 1024
[  106.415486][ T8427] EXT4-fs: Ignoring removed nomblk_io_submit option
[  106.422292][ T8427] EXT4-fs: Ignoring removed orlov option
[  106.432578][ T8427] EXT4-fs: Mount option(s) incompatible with ext2
[  106.501870][ T8419] veth1_to_bridge: entered allmulticast mode
[  106.509757][ T1717] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.570570][ T8457] loop3: detected capacity change from 0 to 512
[  106.582983][ T8457] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  106.599984][ T8457] EXT4-fs (loop3): 1 truncate cleaned up
[  106.618235][ T8457] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.689471][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.766362][ T8479] netlink: 'syz.3.638': attribute type 29 has an invalid length.
[  106.803362][ T8469] loop1: detected capacity change from 0 to 512
[  106.877251][ T8495] netlink: 'syz.4.642': attribute type 10 has an invalid length.
[  106.885344][ T8495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.642'.
[  106.920224][ T8469] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.948531][ T8469] ext4 filesystem being mounted at /133/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  106.981927][ T8469] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.636: corrupted inode contents
[  107.004448][ T8469] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.636: mark_inode_dirty error
[  107.019831][ T8507] loop3: detected capacity change from 0 to 512
[  107.030072][ T8469] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.636: corrupted inode contents
[  107.063768][ T8469] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.636: mark_inode_dirty error
[  107.092408][ T8507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.165353][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.175497][ T8507] ext4 filesystem being mounted at /142/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  107.300059][ T8530] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  107.334545][ T8491] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.640: corrupted inode contents
[  107.552722][ T8537] netlink: 236 bytes leftover after parsing attributes in process `syz.5.650'.
[  107.654320][ T8491] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.640: mark_inode_dirty error
[  107.772128][ T8491] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.640: corrupted inode contents
[  107.786784][ T8560] netlink: 56 bytes leftover after parsing attributes in process `syz.2.653'.
[  107.797355][ T8491] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.640: mark_inode_dirty error
[  107.827997][ T8564] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  107.901291][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.937913][ T8573] netlink: 'syz.4.657': attribute type 10 has an invalid length.
[  107.949273][ T8576] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  107.958520][ T8573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.657'.
[  108.156428][ T8604] netlink: 'syz.4.661': attribute type 1 has an invalid length.
[  108.164210][ T8604] netlink: 224 bytes leftover after parsing attributes in process `syz.4.661'.
[  108.274118][ T8624] loop4: detected capacity change from 0 to 1024
[  108.306720][ T8624] EXT4-fs: Ignoring removed nomblk_io_submit option
[  108.313371][ T8624] EXT4-fs: Ignoring removed orlov option
[  108.324077][ T8609] loop1: detected capacity change from 0 to 512
[  108.414767][ T8624] EXT4-fs: Mount option(s) incompatible with ext2
[  108.488813][ T8609] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.765508][ T8666] netlink: 236 bytes leftover after parsing attributes in process `syz.5.666'.
[  108.855423][ T8609] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  109.215560][ T8609] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.664: corrupted inode contents
[  109.335694][ T8609] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.664: mark_inode_dirty error
[  109.336709][ T8705] netlink: 'syz.4.670': attribute type 21 has an invalid length.
[  109.355038][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.670'.
[  109.378246][ T8609] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.664: corrupted inode contents
[  109.464517][ T8609] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.664: mark_inode_dirty error
[  109.479114][ T8713] loop3: detected capacity change from 0 to 1024
[  109.486218][ T8713] EXT4-fs: Ignoring removed orlov option
[  109.538840][ T8713] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.571434][ T8728] loop5: detected capacity change from 0 to 512
[  109.618760][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.661250][   T29] kauditd_printk_skb: 69 callbacks suppressed
[  109.661264][   T29] audit: type=1326 audit(1762976742.892:3268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8712 comm="syz.3.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3de44af6c9 code=0x7ffc0000
[  109.690812][   T29] audit: type=1326 audit(1762976742.892:3269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8712 comm="syz.3.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f3de44af6c9 code=0x7ffc0000
[  109.714203][   T29] audit: type=1326 audit(1762976742.892:3270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8712 comm="syz.3.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3de44af6c9 code=0x7ffc0000
[  109.737556][   T29] audit: type=1326 audit(1762976742.892:3271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8712 comm="syz.3.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3de44af6c9 code=0x7ffc0000
[  109.761143][   T29] audit: type=1326 audit(1762976742.892:3272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8712 comm="syz.3.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3de44af6c9 code=0x7ffc0000
[  109.784527][   T29] audit: type=1326 audit(1762976742.892:3273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8712 comm="syz.3.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f3de44af6c9 code=0x7ffc0000
[  109.807891][   T29] audit: type=1326 audit(1762976742.892:3274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8712 comm="syz.3.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3de44af6c9 code=0x7ffc0000
[  109.831361][   T29] audit: type=1326 audit(1762976742.892:3275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8712 comm="syz.3.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3de44af6c9 code=0x7ffc0000
[  109.833662][ T8738] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12)
[  109.854661][   T29] audit: type=1326 audit(1762976742.892:3276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8712 comm="syz.3.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3de44af6c9 code=0x7ffc0000
[  109.861226][ T8738] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  109.861395][ T8738] vhci_hcd vhci_hcd.0: Device attached
[  109.884687][   T29] audit: type=1326 audit(1762976742.892:3277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8712 comm="syz.3.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3de44af6c9 code=0x7ffc0000
[  109.904363][ T8728] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.934896][ T8728] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  109.973963][ T8739] vhci_hcd: connection closed
[  109.974198][ T3456] vhci_hcd: stop threads
[  109.983233][ T3456] vhci_hcd: release socket
[  109.987700][ T3456] vhci_hcd: disconnect device
[  110.026135][ T8720] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.676: corrupted inode contents
[  110.043460][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.070747][ T8720] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.676: mark_inode_dirty error
[  110.100130][ T8747] loop2: detected capacity change from 0 to 512
[  110.109333][ T8720] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.676: corrupted inode contents
[  110.245460][ T8747] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  110.246315][ T8720] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.676: mark_inode_dirty error
[  110.257391][ T8747] EXT4-fs (loop2): 1 truncate cleaned up
[  110.273723][ T8747] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.079348][ T8771] __nla_validate_parse: 3 callbacks suppressed
[  111.079366][ T8771] netlink: 236 bytes leftover after parsing attributes in process `syz.1.683'.
[  111.318332][ T7807] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.336298][ T8767] netlink: 236 bytes leftover after parsing attributes in process `syz.4.682'.
[  111.432848][ T8834] netlink: 24 bytes leftover after parsing attributes in process `syz.5.686'.
[  111.447259][ T8831] loop1: detected capacity change from 0 to 1024
[  111.456137][ T8831] EXT4-fs: Ignoring removed orlov option
[  111.561870][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.594391][ T8831] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.660172][ T8850] loop5: detected capacity change from 0 to 1024
[  111.667994][ T8850] EXT4-fs: Ignoring removed orlov option
[  111.913040][ T8852] netlink: 236 bytes leftover after parsing attributes in process `syz.3.688'.
[  111.925024][ T8851] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  111.933514][ T8851] netlink: 348 bytes leftover after parsing attributes in process `+}[@'.
[  111.942118][ T8851] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  111.950477][ T8851] netlink: 348 bytes leftover after parsing attributes in process `+}[@'.
[  111.962417][ T8851] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  111.994314][ T8856] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  112.078363][ T8850] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.110462][ T8831] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11)
[  112.117217][ T8831] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  112.125446][ T8831] vhci_hcd vhci_hcd.0: Device attached
[  112.142950][ T8880] vhci_hcd: connection closed
[  112.143324][ T3456] vhci_hcd: stop threads
[  112.152463][ T3456] vhci_hcd: release socket
[  112.156909][ T3456] vhci_hcd: disconnect device
[  112.212963][ T8850] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12)
[  112.213110][ T8888] loop4: detected capacity change from 0 to 512
[  112.219662][ T8850] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  112.219754][ T8850] vhci_hcd vhci_hcd.0: Device attached
[  112.246816][ T8888] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.693: bad orphan inode 15
[  112.271926][ T8888] ext4_test_bit(bit=14, block=18) = 1
[  112.277444][ T8888] is_bad_inode(inode)=0
[  112.281610][ T8888] NEXT_ORPHAN(inode)=1023
[  112.285946][ T8888] max_ino=32
[  112.289246][ T8888] i_nlink=0
[  112.290238][ T8885] vhci_hcd: connection closed
[  112.293808][ T8888] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2967: inode #15: comm syz.4.693: corrupted xattr block 19: invalid header
[  112.312097][ T5185] vhci_hcd: stop threads
[  112.316388][ T5185] vhci_hcd: release socket
[  112.320808][ T5185] vhci_hcd: disconnect device
[  112.329170][ T8888] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117)
[  112.354304][ T8888] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[  112.383852][ T8888] ext4 filesystem being mounted at /138/�q�Y�3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  112.418890][ T8904] netlink: 28 bytes leftover after parsing attributes in process `syz.3.697'.
[  112.449482][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[  112.483328][ T8913] loop4: detected capacity change from 0 to 512
[  112.492668][ T8913] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  112.517329][ T8913] EXT4-fs (loop4): 1 truncate cleaned up
[  112.524437][ T8913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.604056][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.741801][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.111128][ T8958] loop1: detected capacity change from 0 to 512
[  113.184455][ T8960] loop2: detected capacity change from 0 to 1024
[  113.192767][ T8960] EXT4-fs: inline encryption not supported
[  113.198670][ T8960] EXT4-fs: Ignoring removed orlov option
[  113.228759][ T7807] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.246145][ T8960] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  113.279243][ T8958] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.291916][ T8958] ext4 filesystem being mounted at /143/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  113.296846][ T8960] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002]
[  113.310487][ T8960] System zones: 0-1, 3-12
[  113.315544][ T8960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.329303][ T8954] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.708: corrupted inode contents
[  113.345757][ T8954] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.708: mark_inode_dirty error
[  113.361089][ T8954] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.708: corrupted inode contents
[  113.377328][ T8954] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.708: mark_inode_dirty error
[  113.400333][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.424444][ T8998] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.431936][ T8998] batman_adv: batadv0: Removing interface: batadv_slave_0
[  113.445798][ T8998] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.453317][ T8998] batman_adv: batadv0: Removing interface: batadv_slave_1
[  113.468327][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.499558][ T9012] loop1: detected capacity change from 0 to 512
[  113.526109][ T9012] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  113.570897][ T9012] EXT4-fs (loop1): 1 truncate cleaned up
[  113.584894][ T9019] loop2: detected capacity change from 0 to 512
[  113.596709][ T9012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.611482][ T9019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.629941][ T9019] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  113.654659][ T9003] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.712: corrupted inode contents
[  113.671957][ T9003] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.712: mark_inode_dirty error
[  113.672044][ T9030] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  113.703304][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.711764][ T9033] loop5: detected capacity change from 0 to 512
[  113.719916][ T9003] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.712: corrupted inode contents
[  113.733351][ T9003] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.712: mark_inode_dirty error
[  113.751813][ T9033] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.717: bad orphan inode 15
[  113.765538][ T9033] ext4_test_bit(bit=14, block=18) = 1
[  113.771005][ T9033] is_bad_inode(inode)=0
[  113.775200][ T9033] NEXT_ORPHAN(inode)=1023
[  113.779747][ T9033] max_ino=32
[  113.783033][ T9033] i_nlink=0
[  113.786538][ T9033] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2967: inode #15: comm syz.5.717: corrupted xattr block 19: invalid header
[  113.801362][ T9033] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117)
[  113.811635][ T9033] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[  113.823971][ T9033] ext4 filesystem being mounted at /14/�q�Y�3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  113.861819][ T7807] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[  113.919118][ T9049] netlink: 'syz.5.720': attribute type 21 has an invalid length.
[  113.951995][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.989331][ T9055] loop2: detected capacity change from 0 to 512
[  113.998693][ T9055] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  114.052752][ T9079] hugetlbfs: Bad value for 'gid'
[  114.057811][ T9079] hugetlbfs: Bad value for 'gid'
[  114.186947][ T9095] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  114.251492][ T9102] loop5: detected capacity change from 0 to 512
[  114.259175][ T9102] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  114.271330][ T9102] EXT4-fs (loop5): 1 truncate cleaned up
[  114.277684][ T9102] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.326936][ T7807] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.395367][ T9116] loop5: detected capacity change from 0 to 512
[  114.408229][ T9116] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.731: bad orphan inode 15
[  114.446225][ T9116] ext4_test_bit(bit=14, block=18) = 1
[  114.451656][ T9116] is_bad_inode(inode)=0
[  114.455879][ T9116] NEXT_ORPHAN(inode)=1023
[  114.460395][ T9116] max_ino=32
[  114.463674][ T9116] i_nlink=0
[  114.468452][ T9116] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2967: inode #15: comm syz.5.731: corrupted xattr block 19: invalid header
[  114.489474][ T9116] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117)
[  114.506599][ T9116] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[  114.523144][ T9116] ext4 filesystem being mounted at /21/�q�Y�3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  114.544787][ T9125] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  114.582085][ T7807] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[  114.649995][ T9139] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  114.729535][ T9148] loop5: detected capacity change from 0 to 512
[  114.738190][ T9148] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  114.748222][ T9136] loop3: detected capacity change from 0 to 512
[  114.753335][ T9148] EXT4-fs (loop5): 1 truncate cleaned up
[  114.771005][ T9148] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.801449][ T9136] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.814809][ T9136] ext4 filesystem being mounted at /166/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  114.832728][ T9136] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.736: corrupted inode contents
[  114.845673][ T9136] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.736: mark_inode_dirty error
[  114.866546][ T9136] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.736: corrupted inode contents
[  114.879407][ T9136] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.736: mark_inode_dirty error
[  114.879752][ T7807] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.985097][   T29] kauditd_printk_skb: 111 callbacks suppressed
[  114.985113][   T29] audit: type=1326 audit(1762976748.212:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9164 comm="syz.5.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b2e8ff6c9 code=0x7ffc0000
[  115.014694][   T29] audit: type=1326 audit(1762976748.212:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9164 comm="syz.5.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b2e8ff6c9 code=0x7ffc0000
[  115.048317][   T29] audit: type=1326 audit(1762976748.272:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9164 comm="syz.5.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b2e8ff6c9 code=0x7ffc0000
[  115.071769][   T29] audit: type=1326 audit(1762976748.272:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9164 comm="syz.5.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b2e8ff6c9 code=0x7ffc0000
[  115.095148][   T29] audit: type=1326 audit(1762976748.272:3393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9164 comm="syz.5.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b2e8ff6c9 code=0x7ffc0000
[  115.118503][   T29] audit: type=1326 audit(1762976748.272:3394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9164 comm="syz.5.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b2e8ff6c9 code=0x7ffc0000
[  115.120323][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.141840][   T29] audit: type=1326 audit(1762976748.272:3395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9164 comm="syz.5.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f8b2e8ff6c9 code=0x7ffc0000
[  115.141959][   T29] audit: type=1326 audit(1762976748.272:3396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9164 comm="syz.5.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b2e8ff6c9 code=0x7ffc0000
[  115.197875][   T29] audit: type=1326 audit(1762976748.272:3397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9164 comm="syz.5.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8b2e8ff6c9 code=0x7ffc0000
[  115.221277][   T29] audit: type=1326 audit(1762976748.272:3398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9164 comm="syz.5.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b2e8ff6c9 code=0x7ffc0000
[  115.223848][ T9175] loop5: detected capacity change from 0 to 128
[  115.245427][ T9172] loop2: detected capacity change from 0 to 512
[  115.297150][ T9172] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.746: bad orphan inode 15
[  115.338940][ T9172] ext4_test_bit(bit=14, block=18) = 1
[  115.344384][ T9172] is_bad_inode(inode)=0
[  115.348595][ T9172] NEXT_ORPHAN(inode)=1023
[  115.352935][ T9172] max_ino=32
[  115.356276][ T9172] i_nlink=0
[  115.361353][ T9189] loop3: detected capacity change from 0 to 1024
[  115.398589][ T9189] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.398572][ T9196] netlink: 'syz.1.748': attribute type 1 has an invalid length.
[  115.398661][ T9189] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  115.418526][ T9196] loop1: detected capacity change from 0 to 1024
[  115.436057][ T9196] EXT4-fs: Ignoring removed nomblk_io_submit option
[  115.442685][ T9196] EXT4-fs: Ignoring removed orlov option
[  115.443942][ T9172] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2967: inode #15: comm syz.2.746: corrupted xattr block 19: invalid header
[  115.462272][ T9172] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117)
[  115.476636][ T9172] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[  115.539233][ T9215] loop9: detected capacity change from 0 to 7
[  115.548715][ T9172] ext4 filesystem being mounted at /132/�q�Y�3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  115.565688][ T9196] EXT4-fs: Mount option(s) incompatible with ext2
[  115.572809][ T9215] Buffer I/O error on dev loop9, logical block 0, async page read
[  115.582234][ T9215] Buffer I/O error on dev loop9, logical block 0, async page read
[  115.590171][ T9215]  loop9: unable to read partition table
[  115.612771][ T9215] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  115.612771][ T9215] 
) failed (rc=-5)
[  115.614070][ T3309] Buffer I/O error on dev loop9, logical block 0, async page read
[  115.641998][ T9184] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.669363][ T3309] Buffer I/O error on dev loop9, logical block 0, async page read
[  115.677805][ T3309] Buffer I/O error on dev loop9, logical block 0, async page read
[  115.685856][ T3309] Buffer I/O error on dev loop9, logical block 0, async page read
[  115.694547][ T3309] Buffer I/O error on dev loop9, logical block 0, async page read
[  115.710940][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[  115.799719][ T9259] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  115.889337][ T9266] loop5: detected capacity change from 0 to 2048
[  115.927453][ T9266] Alternate GPT is invalid, using primary GPT.
[  115.933716][ T9266]  loop5: p1 p2 p3
[  116.022075][ T9287] FAULT_INJECTION: forcing a failure.
[  116.022075][ T9287] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  116.035374][ T9287] CPU: 0 UID: 0 PID: 9287 Comm: syz.5.759 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  116.035446][ T9287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  116.035462][ T9287] Call Trace:
[  116.035470][ T9287]  <TASK>
[  116.035479][ T9287]  __dump_stack+0x1d/0x30
[  116.035529][ T9287]  dump_stack_lvl+0xe8/0x140
[  116.035557][ T9287]  dump_stack+0x15/0x1b
[  116.035615][ T9287]  should_fail_ex+0x265/0x280
[  116.035646][ T9287]  should_fail+0xb/0x20
[  116.035674][ T9287]  should_fail_usercopy+0x1a/0x20
[  116.035703][ T9287]  _copy_from_user+0x1c/0xb0
[  116.035787][ T9287]  __sys_bpf+0x183/0x7c0
[  116.035867][ T9287]  __x64_sys_bpf+0x41/0x50
[  116.035902][ T9287]  x64_sys_call+0x2aee/0x3000
[  116.035930][ T9287]  do_syscall_64+0xd2/0x200
[  116.035955][ T9287]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  116.036066][ T9287]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  116.036149][ T9287]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.036177][ T9287] RIP: 0033:0x7f8b2e8ff6c9
[  116.036195][ T9287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  116.036271][ T9287] RSP: 002b:00007f8b2d367038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  116.036295][ T9287] RAX: ffffffffffffffda RBX: 00007f8b2eb55fa0 RCX: 00007f8b2e8ff6c9
[  116.036310][ T9287] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000002
[  116.036325][ T9287] RBP: 00007f8b2d367090 R08: 0000000000000000 R09: 0000000000000000
[  116.036337][ T9287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  116.036351][ T9287] R13: 00007f8b2eb56038 R14: 00007f8b2eb55fa0 R15: 00007ffd34ebac48
[  116.036373][ T9287]  </TASK>
[  116.208527][ T9285] loop4: detected capacity change from 0 to 512
[  116.244951][ T3617] udevd[3617]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  116.255603][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  116.258405][ T3620] udevd[3620]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[  116.312024][ T9302] loop1: detected capacity change from 0 to 1024
[  116.325221][ T9285] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.331157][ T9302] EXT4-fs: Ignoring removed orlov option
[  116.345214][ T9285] ext4 filesystem being mounted at /142/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  116.378513][ T9302] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.411861][ T9324] loop5: detected capacity change from 0 to 512
[  116.440557][ T9302] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12)
[  116.447227][ T9302] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  116.455550][ T9302] vhci_hcd vhci_hcd.0: Device attached
[  116.470590][ T9260] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.756: corrupted inode contents
[  116.488813][ T9324] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.762: bad orphan inode 15
[  116.499819][ T9260] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.756: mark_inode_dirty error
[  116.513357][ T9328] vhci_hcd: connection closed
[  116.513799][   T37] vhci_hcd: stop threads
[  116.522856][   T37] vhci_hcd: release socket
[  116.527442][   T37] vhci_hcd: disconnect device
[  116.532147][ T9324] ext4_test_bit(bit=14, block=18) = 1
[  116.537657][ T9324] is_bad_inode(inode)=0
[  116.541890][ T9324] NEXT_ORPHAN(inode)=1023
[  116.546301][ T9324] max_ino=32
[  116.549527][ T9324] i_nlink=0
[  116.553308][ T9324] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2967: inode #15: comm syz.5.762: corrupted xattr block 19: invalid header
[  116.555519][ T9260] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.756: corrupted inode contents
[  116.567032][ T9324] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117)
[  116.567490][ T9324] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[  116.567653][ T9324] ext4 filesystem being mounted at /37/�q�Y�3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  116.643816][ T9260] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.756: mark_inode_dirty error
[  116.817481][ T9372] loop5: detected capacity change from 0 to 512
[  116.834374][ T9372] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  117.097310][ T9398] __nla_validate_parse: 14 callbacks suppressed
[  117.097364][ T9398] netlink: 12 bytes leftover after parsing attributes in process `syz.3.775'.
[  117.859871][ T9404] netlink: 236 bytes leftover after parsing attributes in process `syz.2.771'.
[  117.924757][ T9400] netlink: 236 bytes leftover after parsing attributes in process `syz.5.770'.
[  118.101261][ T9454] FAULT_INJECTION: forcing a failure.
[  118.101261][ T9454] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  118.114394][ T9454] CPU: 1 UID: 0 PID: 9454 Comm: syz.1.774 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  118.114427][ T9454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  118.114442][ T9454] Call Trace:
[  118.114450][ T9454]  <TASK>
[  118.114459][ T9454]  __dump_stack+0x1d/0x30
[  118.114513][ T9454]  dump_stack_lvl+0xe8/0x140
[  118.114538][ T9454]  dump_stack+0x15/0x1b
[  118.114558][ T9454]  should_fail_ex+0x265/0x280
[  118.114637][ T9454]  should_fail+0xb/0x20
[  118.114656][ T9454]  should_fail_usercopy+0x1a/0x20
[  118.114680][ T9454]  _copy_from_user+0x1c/0xb0
[  118.114779][ T9454]  ___sys_sendmsg+0xc1/0x1d0
[  118.114817][ T9454]  __x64_sys_sendmsg+0xd4/0x160
[  118.114843][ T9454]  x64_sys_call+0x191e/0x3000
[  118.114944][ T9454]  do_syscall_64+0xd2/0x200
[  118.114968][ T9454]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  118.115002][ T9454]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  118.115127][ T9454]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.115151][ T9454] RIP: 0033:0x7f493647f6c9
[  118.115169][ T9454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  118.115251][ T9454] RSP: 002b:00007f4934edf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  118.115348][ T9454] RAX: ffffffffffffffda RBX: 00007f49366d5fa0 RCX: 00007f493647f6c9
[  118.115363][ T9454] RDX: 0000000004000000 RSI: 00002000000002c0 RDI: 0000000000000003
[  118.115377][ T9454] RBP: 00007f4934edf090 R08: 0000000000000000 R09: 0000000000000000
[  118.115391][ T9454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  118.115413][ T9454] R13: 00007f49366d6038 R14: 00007f49366d5fa0 R15: 00007ffde7b51b28
[  118.115472][ T9454]  </TASK>
[  118.530081][ T9456] loop4: detected capacity change from 0 to 512
[  118.567486][ T9459] netlink: 'syz.2.778': attribute type 10 has an invalid length.
[  118.588548][ T9464] netlink: 'syz.1.777': attribute type 21 has an invalid length.
[  118.596353][ T9464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.777'.
[  118.620283][ T9468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.778'.
[  118.633412][ T9456] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.773: bad orphan inode 15
[  118.680917][ T9456] ext4_test_bit(bit=14, block=18) = 1
[  118.686377][ T9456] is_bad_inode(inode)=0
[  118.690581][ T9456] NEXT_ORPHAN(inode)=1023
[  118.694927][ T9456] max_ino=32
[  118.698245][ T9456] i_nlink=0
[  118.709782][ T9479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.777'.
[  118.714181][ T9478] netlink: 12 bytes leftover after parsing attributes in process `syz.5.776'.
[  118.728337][ T9479] netlink: 332 bytes leftover after parsing attributes in process `syz.1.777'.
[  118.758498][ T9456] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2967: inode #15: comm syz.4.773: corrupted xattr block 19: invalid header
[  118.798574][ T9488] netlink: 24 bytes leftover after parsing attributes in process `syz.3.782'.
[  118.808245][ T9456] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117)
[  118.842525][ T9456] ext4 filesystem being mounted at /143/�q�Y�3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  118.987677][ T9527] loop3: detected capacity change from 0 to 1024
[  119.014032][ T9527] EXT4-fs: Ignoring removed orlov option
[  119.055658][ T9527] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12)
[  119.062320][ T9527] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  119.070563][ T9527] vhci_hcd vhci_hcd.0: Device attached
[  119.093227][ T9534] vhci_hcd: connection closed
[  119.093533][ T5185] vhci_hcd: stop threads
[  119.102644][ T5185] vhci_hcd: release socket
[  119.107239][ T5185] vhci_hcd: disconnect device
[  119.201817][ T9554] loop4: detected capacity change from 0 to 512
[  119.247330][ T9554] ext4 filesystem being mounted at /146/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  119.272104][ T9562] FAULT_INJECTION: forcing a failure.
[  119.272104][ T9562] name failslab, interval 1, probability 0, space 0, times 0
[  119.284872][ T9562] CPU: 0 UID: 0 PID: 9562 Comm: syz.1.788 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  119.284983][ T9562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  119.285066][ T9562] Call Trace:
[  119.285075][ T9562]  <TASK>
[  119.285085][ T9562]  __dump_stack+0x1d/0x30
[  119.285115][ T9562]  dump_stack_lvl+0xe8/0x140
[  119.285142][ T9562]  dump_stack+0x15/0x1b
[  119.285211][ T9562]  should_fail_ex+0x265/0x280
[  119.285236][ T9562]  should_failslab+0x8c/0xb0
[  119.285271][ T9562]  kmem_cache_alloc_noprof+0x50/0x480
[  119.285304][ T9562]  ? audit_log_start+0x342/0x720
[  119.285353][ T9562]  audit_log_start+0x342/0x720
[  119.285505][ T9562]  ? kstrtouint+0x76/0xc0
[  119.285606][ T9562]  audit_seccomp+0x48/0x100
[  119.285651][ T9562]  ? __seccomp_filter+0x82d/0x1250
[  119.285698][ T9562]  __seccomp_filter+0x83e/0x1250
[  119.285745][ T9562]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  119.285787][ T9562]  ? vfs_write+0x7e8/0x960
[  119.285825][ T9562]  __secure_computing+0x82/0x150
[  119.285938][ T9562]  syscall_trace_enter+0xcf/0x1e0
[  119.286035][ T9562]  do_syscall_64+0xac/0x200
[  119.286062][ T9562]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  119.286093][ T9562]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  119.286140][ T9562]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.286218][ T9562] RIP: 0033:0x7f493647f6c9
[  119.286237][ T9562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  119.286262][ T9562] RSP: 002b:00007f4934edf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ff
[  119.286287][ T9562] RAX: ffffffffffffffda RBX: 00007f49366d5fa0 RCX: 00007f493647f6c9
[  119.286304][ T9562] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff
[  119.286321][ T9562] RBP: 00007f4934edf090 R08: 0000000000000000 R09: 0000000000000000
[  119.286336][ T9562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  119.286400][ T9562] R13: 00007f49366d6038 R14: 00007f49366d5fa0 R15: 00007ffde7b51b28
[  119.286419][ T9562]  </TASK>
[  119.599820][ T9574] netlink: 4 bytes leftover after parsing attributes in process `syz.5.793'.
[  119.679581][ T9594] dvmrp1: entered allmulticast mode
[  119.696781][ T9594] dvmrp1: left allmulticast mode
[  119.832593][ T9610] loop5: detected capacity change from 0 to 2048
[  119.904021][ T9610] Alternate GPT is invalid, using primary GPT.
[  119.910366][ T9610]  loop5: p1 p2 p3
[  119.933885][ T3004] Alternate GPT is invalid, using primary GPT.
[  119.940313][ T3004]  loop5: p1 p2 p3
[  119.990644][ T3615] udevd[3615]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[  120.002027][ T3620] udevd[3620]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  120.014376][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  120.031998][ T9642] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  120.054894][ T3620] udevd[3620]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  120.055570][ T3615] udevd[3615]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[  120.066484][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  120.134303][ T9652] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  120.169785][ T9655] loop5: detected capacity change from 0 to 512
[  120.199231][ T9655] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  120.215467][   T29] kauditd_printk_skb: 151 callbacks suppressed
[  120.215485][   T29] audit: type=1400 audit(1762976753.442:3548): avc:  denied  { ioctl } for  pid=9653 comm="syz.5.808" path="/49/file1/file2" dev="loop5" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  120.248073][ T9655] FAULT_INJECTION: forcing a failure.
[  120.248073][ T9655] name failslab, interval 1, probability 0, space 0, times 0
[  120.260861][ T9655] CPU: 0 UID: 0 PID: 9655 Comm: syz.5.808 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  120.260969][ T9655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  120.260984][ T9655] Call Trace:
[  120.260993][ T9655]  <TASK>
[  120.261079][ T9655]  __dump_stack+0x1d/0x30
[  120.261105][ T9655]  dump_stack_lvl+0xe8/0x140
[  120.261132][ T9655]  dump_stack+0x15/0x1b
[  120.261156][ T9655]  should_fail_ex+0x265/0x280
[  120.261186][ T9655]  should_failslab+0x8c/0xb0
[  120.261225][ T9655]  __kmalloc_noprof+0xa5/0x570
[  120.261255][ T9655]  ? fib6_info_alloc+0x2e/0x90
[  120.261283][ T9655]  fib6_info_alloc+0x2e/0x90
[  120.261353][ T9655]  ip6_route_info_create+0xe7/0x390
[  120.261397][ T9655]  inet6_rtm_newroute+0x35e/0x1020
[  120.261432][ T9655]  ? css_rstat_updated+0xb7/0x240
[  120.261505][ T9655]  ? __memcg_slab_free_hook+0x135/0x230
[  120.261546][ T9655]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[  120.261573][ T9655]  rtnetlink_rcv_msg+0x5fe/0x6d0
[  120.261614][ T9655]  netlink_rcv_skb+0x123/0x220
[  120.261674][ T9655]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  120.261707][ T9655]  rtnetlink_rcv+0x1c/0x30
[  120.261733][ T9655]  netlink_unicast+0x5c0/0x690
[  120.261785][ T9655]  netlink_sendmsg+0x58b/0x6b0
[  120.261815][ T9655]  ? __pfx_netlink_sendmsg+0x10/0x10
[  120.261840][ T9655]  __sock_sendmsg+0x145/0x180
[  120.261874][ T9655]  ____sys_sendmsg+0x31e/0x4e0
[  120.261916][ T9655]  ___sys_sendmsg+0x17b/0x1d0
[  120.262068][ T9655]  __x64_sys_sendmsg+0xd4/0x160
[  120.262100][ T9655]  x64_sys_call+0x191e/0x3000
[  120.262125][ T9655]  do_syscall_64+0xd2/0x200
[  120.262164][ T9655]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  120.262203][ T9655]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  120.262237][ T9655]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.262258][ T9655] RIP: 0033:0x7f8b2e8ff6c9
[  120.262292][ T9655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  120.262314][ T9655] RSP: 002b:00007f8b2d367038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  120.262333][ T9655] RAX: ffffffffffffffda RBX: 00007f8b2eb55fa0 RCX: 00007f8b2e8ff6c9
[  120.262419][ T9655] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000009
[  120.262435][ T9655] RBP: 00007f8b2d367090 R08: 0000000000000000 R09: 0000000000000000
[  120.262450][ T9655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  120.262462][ T9655] R13: 00007f8b2eb56038 R14: 00007f8b2eb55fa0 R15: 00007ffd34ebac48
[  120.262486][ T9655]  </TASK>
[  120.615185][ T9671] netlink: 'syz.5.811': attribute type 21 has an invalid length.
[  120.623213][ T9671] netlink: 'syz.5.811': attribute type 4 has an invalid length.
[  120.654193][   T29] audit: type=1400 audit(1762976753.882:3549): avc:  denied  { connect } for  pid=9670 comm="syz.5.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  120.684897][ T9671] bond0: option arp_interval: invalid value (18446744073265055750)
[  120.692892][ T9671] bond0: option arp_interval: allowed values 0 - 2147483647
[  120.701458][   T29] audit: type=1400 audit(1762976753.942:3550): avc:  denied  { setopt } for  pid=9670 comm="syz.5.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  120.799913][ T9684] netlink: 'syz.5.813': attribute type 21 has an invalid length.
[  120.827515][   T29] audit: type=1326 audit(1762976754.062:3551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9679 comm="syz.3.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3de44af6c9 code=0x7ffc0000
[  120.891369][   T29] audit: type=1326 audit(1762976754.062:3552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9679 comm="syz.3.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3de44af6c9 code=0x7ffc0000
[  120.914732][   T29] audit: type=1326 audit(1762976754.062:3553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9679 comm="syz.3.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3de44af6c9 code=0x7ffc0000
[  120.938154][   T29] audit: type=1326 audit(1762976754.062:3554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9679 comm="syz.3.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3de44af6c9 code=0x7ffc0000
[  120.961588][   T29] audit: type=1326 audit(1762976754.062:3555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9679 comm="syz.3.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3de44af6c9 code=0x7ffc0000
[  120.984971][   T29] audit: type=1326 audit(1762976754.062:3556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9679 comm="syz.3.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3de44af6c9 code=0x7ffc0000
[  121.008320][   T29] audit: type=1326 audit(1762976754.062:3557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9679 comm="syz.3.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3de44af6c9 code=0x7ffc0000
[  121.088826][ T9704] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  121.136041][ T9704] batman_adv: batadv0: Removing interface: batadv_slave_1
[  121.141128][ T9709] binfmt_misc: register: failed to install interpreter file ./file2
[  121.266919][ T9729] FAULT_INJECTION: forcing a failure.
[  121.266919][ T9729] name failslab, interval 1, probability 0, space 0, times 0
[  121.279629][ T9729] CPU: 0 UID: 0 PID: 9729 Comm: syz.3.823 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  121.279666][ T9729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  121.279685][ T9729] Call Trace:
[  121.279693][ T9729]  <TASK>
[  121.279705][ T9729]  __dump_stack+0x1d/0x30
[  121.279735][ T9729]  dump_stack_lvl+0xe8/0x140
[  121.279762][ T9729]  dump_stack+0x15/0x1b
[  121.279811][ T9729]  should_fail_ex+0x265/0x280
[  121.279838][ T9729]  ? __se_sys_mount+0xef/0x2e0
[  121.279874][ T9729]  should_failslab+0x8c/0xb0
[  121.279952][ T9729]  __kmalloc_cache_noprof+0x4c/0x4a0
[  121.279998][ T9729]  ? memdup_user+0x99/0xd0
[  121.280039][ T9729]  __se_sys_mount+0xef/0x2e0
[  121.280067][ T9729]  ? fput+0x8f/0xc0
[  121.280155][ T9729]  ? ksys_write+0x192/0x1a0
[  121.280193][ T9729]  __x64_sys_mount+0x67/0x80
[  121.280229][ T9729]  x64_sys_call+0x2b51/0x3000
[  121.280258][ T9729]  do_syscall_64+0xd2/0x200
[  121.280287][ T9729]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  121.280339][ T9729]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  121.280431][ T9729]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.280457][ T9729] RIP: 0033:0x7f3de44af6c9
[  121.280478][ T9729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  121.280523][ T9729] RSP: 002b:00007f3de2f0f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  121.280551][ T9729] RAX: ffffffffffffffda RBX: 00007f3de4705fa0 RCX: 00007f3de44af6c9
[  121.280569][ T9729] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000000000
[  121.280587][ T9729] RBP: 00007f3de2f0f090 R08: 0000200000000400 R09: 0000000000000000
[  121.280604][ T9729] R10: 0000000002208840 R11: 0000000000000246 R12: 0000000000000001
[  121.280621][ T9729] R13: 00007f3de4706038 R14: 00007f3de4705fa0 R15: 00007ffd26df7938
[  121.280689][ T9729]  </TASK>
[  121.609157][ T9735] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.679712][ T9735] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.723841][ T9707] FAULT_INJECTION: forcing a failure.
[  121.723841][ T9707] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  121.737021][ T9707] CPU: 0 UID: 0 PID: 9707 Comm: syz.5.819 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  121.737047][ T9707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  121.737118][ T9707] Call Trace:
[  121.737128][ T9707]  <TASK>
[  121.737137][ T9707]  __dump_stack+0x1d/0x30
[  121.737250][ T9707]  dump_stack_lvl+0xe8/0x140
[  121.737279][ T9707]  dump_stack+0x15/0x1b
[  121.737302][ T9707]  should_fail_ex+0x265/0x280
[  121.737327][ T9707]  should_fail+0xb/0x20
[  121.737398][ T9707]  should_fail_usercopy+0x1a/0x20
[  121.737427][ T9707]  _copy_from_user+0x1c/0xb0
[  121.737462][ T9707]  io_eventfd_register+0x77/0x1e0
[  121.737501][ T9707]  __se_sys_io_uring_register+0xc42/0xf00
[  121.737557][ T9707]  ? fput+0x8f/0xc0
[  121.737581][ T9707]  ? ksys_write+0x192/0x1a0
[  121.737613][ T9707]  __x64_sys_io_uring_register+0x55/0x70
[  121.737657][ T9707]  x64_sys_call+0x18a3/0x3000
[  121.737705][ T9707]  do_syscall_64+0xd2/0x200
[  121.737744][ T9707]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  121.737855][ T9707]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  121.737964][ T9707]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.737994][ T9707] RIP: 0033:0x7f8b2e8ff6c9
[  121.738022][ T9707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  121.738048][ T9707] RSP: 002b:00007f8b2d367038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[  121.738149][ T9707] RAX: ffffffffffffffda RBX: 00007f8b2eb55fa0 RCX: 00007f8b2e8ff6c9
[  121.738163][ T9707] RDX: 0000200000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  121.738179][ T9707] RBP: 00007f8b2d367090 R08: 0000000000000000 R09: 0000000000000000
[  121.738195][ T9707] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[  121.738281][ T9707] R13: 00007f8b2eb56038 R14: 00007f8b2eb55fa0 R15: 00007ffd34ebac48
[  121.738308][ T9707]  </TASK>
[  121.742610][ T9735] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.803618][ T9753] loop2: detected capacity change from 0 to 2048
[  122.030774][ T9735] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.239156][ T9787] __nla_validate_parse: 5 callbacks suppressed
[  122.239192][ T9787] netlink: 236 bytes leftover after parsing attributes in process `syz.4.830'.
[  122.257423][ T1717] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.465074][ T1717] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.538801][ T1717] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.622004][ T1717] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.108952][ T9822] netlink: 236 bytes leftover after parsing attributes in process `syz.5.834'.
[  123.253090][ T9825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.835'.
[  123.766456][ T9897] IPv6: Can't replace route, no match found
[  123.985076][ T9909] loop3: detected capacity change from 0 to 512
[  124.060884][ T9909] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.851: bad orphan inode 15
[  124.122487][ T9909] ext4_test_bit(bit=14, block=18) = 1
[  124.128026][ T9909] is_bad_inode(inode)=0
[  124.132241][ T9909] NEXT_ORPHAN(inode)=1023
[  124.136668][ T9909] max_ino=32
[  124.139876][ T9909] i_nlink=0
[  124.196187][ T9909] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2967: inode #15: comm syz.3.851: corrupted xattr block 19: invalid header
[  124.238300][ T9909] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117)
[  124.288884][ T9909] ext4 filesystem being mounted at /193/�q�Y�3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  124.557421][ T9977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.864'.
[  124.614305][ T9978] loop1: detected capacity change from 0 to 512
[  124.650222][ T9978] ext4 filesystem being mounted at /163/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  124.685763][ T9954] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.862: corrupted inode contents
[  124.756437][ T9954] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.862: mark_inode_dirty error
[  124.844991][ T9954] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.862: corrupted inode contents
[  124.873506][T10015] loop5: detected capacity change from 0 to 512
[  124.882266][ T9954] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.862: mark_inode_dirty error
[  124.968291][T10037] SELinux:  Context @ is not valid (left unmapped).
[  125.129180][T10015] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  125.173298][T10042] netlink: 'syz.3.875': attribute type 1 has an invalid length.
[  125.191001][T10015] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.871: corrupted inode contents
[  125.216546][T10042] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  125.225700][   T29] kauditd_printk_skb: 114 callbacks suppressed
[  125.225717][   T29] audit: type=1326 audit(1762976758.452:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10059 comm="syz.4.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86cc50f6c9 code=0x7ffc0000
[  125.282938][T10015] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.871: mark_inode_dirty error
[  125.300479][   T29] audit: type=1326 audit(1762976758.512:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10059 comm="syz.4.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86cc50f6c9 code=0x7ffc0000
[  125.324073][   T29] audit: type=1326 audit(1762976758.512:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10059 comm="syz.4.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86cc50f6c9 code=0x7ffc0000
[  125.347920][   T29] audit: type=1326 audit(1762976758.512:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10059 comm="syz.4.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86cc50f6c9 code=0x7ffc0000
[  125.371450][   T29] audit: type=1326 audit(1762976758.512:3676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10059 comm="syz.4.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86cc50f6c9 code=0x7ffc0000
[  125.394871][   T29] audit: type=1326 audit(1762976758.512:3677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10059 comm="syz.4.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86cc50f6c9 code=0x7ffc0000
[  125.418540][   T29] audit: type=1326 audit(1762976758.512:3678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10059 comm="syz.4.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86cc50f6c9 code=0x7ffc0000
[  125.441997][   T29] audit: type=1326 audit(1762976758.512:3679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10059 comm="syz.4.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86cc50f6c9 code=0x7ffc0000
[  125.465487][   T29] audit: type=1326 audit(1762976758.512:3680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10059 comm="syz.4.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f86cc50f6c9 code=0x7ffc0000
[  125.488888][   T29] audit: type=1326 audit(1762976758.512:3681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10059 comm="syz.4.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86cc50f6c9 code=0x7ffc0000
[  125.513946][T10015] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.871: corrupted inode contents
[  125.537093][T10015] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.871: mark_inode_dirty error
[  125.613827][T10077] netlink: 28 bytes leftover after parsing attributes in process `syz.3.881'.
[  125.671947][T10084] netlink: 'syz.2.882': attribute type 1 has an invalid length.
[  125.679745][T10084] netlink: 224 bytes leftover after parsing attributes in process `syz.2.882'.
[  125.741358][T10092] sch_tbf: peakrate 7 is lower than or equals to rate 7 !
[  125.805215][T10110] netlink: 12 bytes leftover after parsing attributes in process `syz.5.886'.
[  125.818169][T10115] Cannot find del_set index 3 as target
[  125.876260][T10084] loop2: detected capacity change from 0 to 1024
[  125.876792][ T2967] hid-generic 0000:86010001:0006.0001: unknown main item tag 0x0
[  125.896803][ T2967] hid-generic 0000:86010001:0006.0001: hidraw0: <UNKNOWN> HID v69662f.2e Device [syz1] on syz0
[  125.918181][T10127] loop1: detected capacity change from 0 to 512
[  125.956813][T10084] EXT4-fs: Ignoring removed nomblk_io_submit option
[  125.963470][T10084] EXT4-fs: Ignoring removed orlov option
[  125.995023][T10127] ext4 filesystem being mounted at /166/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  126.006302][T10084] EXT4-fs: Mount option(s) incompatible with ext2
[  126.091862][T10155] +
: renamed from syzkaller0
[  126.111541][T10086] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.884: corrupted inode contents
[  126.188268][T10086] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.884: mark_inode_dirty error
[  126.211717][T10086] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.884: corrupted inode contents
[  126.225506][T10086] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.884: mark_inode_dirty error
[  126.288657][T10195] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  126.507441][T10212] netlink: 28 bytes leftover after parsing attributes in process `syz.2.895'.
[  126.641883][   T37] ==================================================================
[  126.649998][   T37] BUG: KCSAN: data-race in alloc_pid / copy_process
[  126.656649][   T37] 
[  126.658989][   T37] read-write to 0xffffffff8685ff98 of 4 bytes by task 3456 on cpu 0:
[  126.667075][   T37]  alloc_pid+0x539/0x720
[  126.671325][   T37]  copy_process+0xe25/0x2000
[  126.675932][   T37]  kernel_clone+0x16c/0x5c0
[  126.680462][   T37]  user_mode_thread+0x7d/0xb0
[  126.685149][   T37]  call_usermodehelper_exec_work+0x41/0x160
[  126.691137][   T37]  process_scheduled_works+0x4ce/0x9d0
[  126.696619][   T37]  worker_thread+0x582/0x770
[  126.701212][   T37]  kthread+0x489/0x510
[  126.705292][   T37]  ret_from_fork+0x122/0x1b0
[  126.709889][   T37]  ret_from_fork_asm+0x1a/0x30
[  126.714674][   T37] 
[  126.716996][   T37] read to 0xffffffff8685ff98 of 4 bytes by task 37 on cpu 1:
[  126.724371][   T37]  copy_process+0x17fc/0x2000
[  126.729064][   T37]  kernel_clone+0x16c/0x5c0
[  126.733583][   T37]  user_mode_thread+0x7d/0xb0
[  126.738276][   T37]  call_usermodehelper_exec_work+0x41/0x160
[  126.744173][   T37]  process_scheduled_works+0x4ce/0x9d0
[  126.749650][   T37]  worker_thread+0x582/0x770
[  126.754244][   T37]  kthread+0x489/0x510
[  126.758346][   T37]  ret_from_fork+0x122/0x1b0
[  126.762946][   T37]  ret_from_fork_asm+0x1a/0x30
[  126.767757][   T37] 
[  126.770083][   T37] value changed: 0x800000ef -> 0x800000f0
[  126.775800][   T37] 
[  126.778128][   T37] Reported by Kernel Concurrency Sanitizer on:
[  126.784278][   T37] CPU: 1 UID: 0 PID: 37 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  126.794000][   T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  126.804271][   T37] Workqueue: events_unbound call_usermodehelper_exec_work
[  126.811396][   T37] ==================================================================
[  126.837883][T10221] netlink: 'syz.1.893': attribute type 10 has an invalid length.
[  126.879931][T10221] team0 (unregistering): Port device team_slave_0 removed
[  126.910271][T10221] team0 (unregistering): Port device team_slave_1 removed