last executing test programs:

1m45.469838715s ago: executing program 3 (id=175):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b'], 0x48)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='sched_switch\x00', r0}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x1, @ANYBLOB="001f00000000000084652fed00", @ANYRES32=0x0, @ANYRES32], 0x48)
r1 = epoll_create(0x3ff)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0000000, 0x1b54c8})

1m45.469350215s ago: executing program 3 (id=176):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x35}, {}, {0xfffffffffffffffd, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x70bd2a, 0x70bd28}}]}, 0x154}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0)

1m45.206601791s ago: executing program 3 (id=186):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000880)='kfree\x00', r0}, 0x18)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="02030003130000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2300000007ff010080fe0000000000000000000001010000800000000002000100000000000000070c0000008005000500000000000a004e23000000fffe8000000000000000000000000000aaff010000000000000200130002"], 0x98}, 0x1, 0x7}, 0x0)

1m44.920787458s ago: executing program 3 (id=189):
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan0\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="ec0000002100010026bd7000feffffff7f000001000000000000000000000000fc020000000000000000000000000001fffc0000000000000a00e00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000009c001100fe800000a8010000000000000000001164010102000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a00fc020000000000000000000000000001e0000002000000000000000000000000fe880000000000080000000000000101200100000000000000000000000000022b010000043500000a000200"], 0xec}, 0x1, 0x0, 0x0, 0x801}, 0x0)

1m44.8959248s ago: executing program 3 (id=190):
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x10)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xe)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10)
modify_ldt$write2(0x11, &(0x7f0000000180)={0x8aa, 0x20100000, 0x2000, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}, 0x10)
r5 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000800000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000f00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x18)
readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000180)='cpu==0||!')
fchmodat(r1, &(0x7f0000000140)='./file0\x00', 0x1c9)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x408cd, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES32=0x41424344, @ANYRES16=r0, @ANYRES32=r1], 0x0)

1m44.801711019s ago: executing program 3 (id=193):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b'], 0x48)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='sched_switch\x00', r0}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x1, @ANYBLOB="001f00000000000084652fed00", @ANYRES32=0x0, @ANYRES32], 0x48)
r1 = epoll_create(0x3ff)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0000000, 0x1b54c8})

1m33.687142148s ago: executing program 2 (id=388):
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10)
socket$inet6_icmp(0xa, 0x2, 0x3a)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x400c041)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="021300000500000000000000000000000300"], 0x28}}, 0x0)

1m33.658217111s ago: executing program 2 (id=389):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xa}}}, 0x24}}, 0x40440c0)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="d6a365dd00ca"}, 0x14)
sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)

1m33.592200108s ago: executing program 2 (id=392):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085200000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94)

1m33.504271306s ago: executing program 2 (id=395):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f0000000380)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@i_version}]}, 0x6, 0x5fc, &(0x7f0000000600)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=")
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a15000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500010007000000050004000000000005000500020000001400078008000840000000df08001240"], 0x64}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8000)

1m33.099474835s ago: executing program 2 (id=400):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f00000010c0)={0xb, {"a2e3ad21ed9b52f91b5d340987f70e06d038e7ff7fc6e5539b3247298b089b3408356d090890e0878f0e1ac6e7049b3350959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b31070d074b0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496b19443f166bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa94a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f411bc4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cda7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70e69002bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000693802f00", 0x1000}}, 0x1006)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$eJzs289PHFUcAPDv7EKR/hBs6o/Sqmg1En9AobX24EWjiQdNTPRQjwi0wW6LKZjYhigaU4+miXfj0cS/wJNejHoy8ap306QxXFo9rZndGdhddrdAF7a6n08y8N7MW9777szbfW8eE0DPGk1/JBH7I+L3iBiqZusLjFZ/3Vpdnvl7dXkmiXL5rb+SSrmbq8szedH8dfvyTF9E4bMkjjSpd/HylfPTpdLcpSw/sXTh/YnFy1eem78wfW7u3NzFqdOnT56YfOHU1PMdiTON6+bIRwtHD7/2zrU3Zs5ce/fnb5M8/oY4OmS03cEny+UOV9ddB2rSSV8XG8KWFKvdNPor/X8oirF+8obi1U+72jhgR5XL5fIDrQ+vlIH/sSS63QKgO/Iv+nT+m2+7NPS4K9x4qToBSuO+lW3VI31RyMr0N8xvO2k0Is6s/PNVusXO3IcAAKjzfTr+ebbZ+K8QtfeF7s3WUIYj4r6IOBgRpyLiUETcH1Ep+2BEPNSskqR1/Y2LJBvHP4Xr2w5uE9Lx34vZ2lb9+C8f/cVwMcsdqMTfn5ydL80dz96TsegfSPOTber44ZXfvmh1rHb8l25p/flYMGvH9b6B+tfMTi9N30nMtW58EjHS1yz+ZG0lID19hyNiZJt1zD/9zdFWx24ffxsdWGcqfx3xVPX8r0RD/Lmk/frkxD1Rmjs+kV8VG/3y69U3W9V/R/F3QHr+9za9/tfiH05q12sXt17H1T8+bzmn2e71vyd5u27fh9NLS5cmI/Ykr1cbXbt/qqHc1Hr5NP6xY837/8FYfyeORER6ET8cEY9ExKNZ2x+LiMcj4lib+H96+Yn3thf/QJu/2hlp/LNbOv/riT3RuKd5onj+x+/qKh3ebPyRnf+TldRYtmczn3+badf2rmYAAAD47ylExP5ICuNr6UJhfLz6P/yHYm+htLC49MzZhQ8uzlafERiO/kJ+p2uo5n7oZDatz/NTDfkT2X3jL4uDlfz4zEJpttvBQ4/b16L/p/4sdrt1wI7zvBb0Lv0fepf+D71L/4fe1aT/D3ajHcDua/b9/3EX2gHsvob+b9kPeoj5P/Qu/R96l/4PPWlxMG7/kLyExIZEFO6KZkjsUKLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//zpS5t0=")
r2 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r3, 0x0, 0x9}, 0x18)
socket(0x10, 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5)
sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000180))
sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000)

1m32.847326449s ago: executing program 2 (id=404):
syz_mount_image$iso9660(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x0, &(0x7f0000000000)={[{@block={'block', 0x3d, 0xc00}}, {@overriderock}, {@map_off}, {@overriderock}, {@unhide}, {@hide}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@nojoliet}]}, 0xfd, 0x671, &(0x7f0000000700)="$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")

1m32.780648375s ago: executing program 32 (id=404):
syz_mount_image$iso9660(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x0, &(0x7f0000000000)={[{@block={'block', 0x3d, 0xc00}}, {@overriderock}, {@map_off}, {@overriderock}, {@unhide}, {@hide}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@nojoliet}]}, 0xfd, 0x671, &(0x7f0000000700)="$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")

1m29.808868768s ago: executing program 33 (id=193):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b'], 0x48)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='sched_switch\x00', r0}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x1, @ANYBLOB="001f00000000000084652fed00", @ANYRES32=0x0, @ANYRES32], 0x48)
r1 = epoll_create(0x3ff)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0000000, 0x1b54c8})

10.822820228s ago: executing program 0 (id=1786):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x65, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x20, 0x0, [{0x0, 0x8, "5e000000ff00"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0xd, "9606053d0006ff00800000"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x6}, @timestamp={0x44, 0x4}]}}}}}}}, 0x0)

10.745616356s ago: executing program 0 (id=1787):
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @multicast1}, 0x0)
socket(0x2, 0x80805, 0x0)
syz_io_uring_setup(0x49a, 0x0, &(0x7f0000000340)=<r0=>0x0, &(0x7f00000000c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f00000003c0)='task_rename\x00', r2, 0x0, 0xff}, 0x18)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000400)='veno', 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback=0xa, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
socket$inet_udplite(0x2, 0x2, 0x88)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYRES16=r3, @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0)
shmget(0x0, 0x2000, 0x2c000400, &(0x7f0000fae000/0x2000)=nil)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x7c}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000a000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000000)='objagg_destroy\x00', r6, 0x0, 0x9}, 0x18)
socket$kcm(0x10, 0x2, 0x0)

10.58959941s ago: executing program 0 (id=1790):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="c3c700fe0000000072101a00000000a195"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)

10.497353499s ago: executing program 0 (id=1791):
r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000300)={[{@nombcache}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@journal_dev={'journal_dev', 0x3d, 0x460b8000}}]}, 0x1, 0x52a, &(0x7f0000001440)="$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")
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='cachefiles_coherency\x00', r1, 0x0, 0xfffe}, 0x7b)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
fsetxattr(r5, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x7c8, 0x0)
write$tun(r1, &(0x7f0000000400)=ANY=[@ANYRES32=r5, @ANYRES32=0x41424344, @ANYRESHEX, @ANYBLOB="5020000590780000", @ANYRES8=r2, @ANYRES8=r3, @ANYRESDEC=r0, @ANYRESHEX=0x0, @ANYRESOCT=r5], 0x36)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000005c0))
pwritev2(r6, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r6}, 0x8)
ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, &(0x7f0000000080))
ioctl$EXT4_IOC_MIGRATE(r6, 0x6609)
pidfd_getfd(r6, r6, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
io_setup(0x2, &(0x7f0000000000)=<r7=>0x0)
r8 = eventfd(0x0)
io_submit(r7, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r8, &(0x7f0000000180)="0100fd6400000000", 0x8, 0x36}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0, 0xfe, 0x0, 0x0, 0x1, r8}])
openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x48102, 0x0)
unshare(0x400)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r5}, 0x38)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r10}, 0x10)
open(&(0x7f0000000000)='./bus\x00', 0x40, 0x171)

10.006195566s ago: executing program 0 (id=1800):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='mm_page_free\x00', r0, 0x0, 0x7}, 0x18)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800)
ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080))
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='mm_page_free\x00', r0, 0x0, 0x7}, 0x18) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) (async)
ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080)) (async)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) (async)

9.732685962s ago: executing program 0 (id=1808):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x1}, 0x8)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x158, 0x11, 0x148, 0x0, 0x0, 0x230, 0x2a8, 0x2a8, 0x230, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x158, 0x0, {0x0, 0x11}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x40, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x4, 0x18}}}, @common=@unspec=@limit={{0x48}, {0x5, 0x5, 0x4, 0x3, 0x9, 0x3, 0xfffffffffffffff8}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @multicast1, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x9, 0x5, 0x1, 'netbios-ns\x00', 'syz0\x00', {0x4a7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328)

9.605451174s ago: executing program 34 (id=1808):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x1}, 0x8)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x158, 0x11, 0x148, 0x0, 0x0, 0x230, 0x2a8, 0x2a8, 0x230, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x158, 0x0, {0x0, 0x11}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x40, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x4, 0x18}}}, @common=@unspec=@limit={{0x48}, {0x5, 0x5, 0x4, 0x3, 0x9, 0x3, 0xfffffffffffffff8}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @multicast1, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x9, 0x5, 0x1, 'netbios-ns\x00', 'syz0\x00', {0x4a7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328)

5.941720033s ago: executing program 4 (id=1856):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00000007c0)={0x4000000ffffff80, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e000000000000000000000000000800120000000280ff00f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080)

5.908463516s ago: executing program 4 (id=1857):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f00000007c0)={0x4000000ffffff80, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e000000000000000000000000000800120000000200ff80f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080)

5.850424632s ago: executing program 4 (id=1858):
r0 = socket$kcm(0x1e, 0x4, 0x0)
r1 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c)
setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000005c0)={'filter\x00', 0x0, 0x0, 0x0, [0xffffffff, 0x3, 0x7fffffffffffffff, 0xfffffffffffffffa, 0xa43, 0x8000000000000001], 0x1, 0x0, 0x0, [{}]}, 0x88)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r2 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x101d0)
sendmsg$kcm(r2, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800)
gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'wg0\x00', <r6=>0x0})
sendto$packet(r5, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14)
ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x21000000000000ff)
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0xde2}}]}, 0xfd, 0x269, &(0x7f0000000a00)="$eJzs3U9oHFUcB/Df7B/jJotEvQjiHxARDYR4E7zEi0JAQhARVIiIeJJEiAnesp68eNCzSkDwEkpvTXssvYReWgo9pW0O6aXQhh4aemgPW3Znt2ySDW33b9n5fGCYmbz35r0J832zLMxsAJk1GRGzEZGPiKmIKEZE0lrh7XSZbOxulLYXI6rVL+4m9XrpfqrZbiIiKhHxUUShWba29c3e/Z3P3vtjtfju/1tflwZ1fq3293Y/P/h3/vczcx+uXb56ez6J2Sg3ylrPo5eSNn8rJBGv9KOz50RSGPYIeBoLv56+Vsv9qxHxTj3/xcg1IvvnygsXivHBPye1/evOldcHOVag96rVYu0eWKkCmZOLiHIkuemISLdzuenp9DP89fx47qfllV+mflxeXfph2DMV0CvlSHY/PTd2duJI/m/l0/wDo6scsfvlwuaN2vZBftijAfqm9dv2N9JVLf9T362/H/IPmSP/kF3yD9kl/zACOsyu/EN2dZP/F/s0JmAw3P9hhBWbG5W2xfIP2SX/MKL+a/fU6WHyD9nVmn8AIFuqY8N+AhkYlmHPPwAAAAAAAAAAAAAAAAAAwHEbpe3F5jKoPi/+HbH/SUQU2vWfr/8ecfNt4+P3klq1x5K0WVe+favLA3TpVM+evi511Oqlm73qvzOX3uzPcX87vHviP2d9KaJSqzxTKBy//pLG9de5l59QXvy+yw6e0dG3An781WD7P+rh5nD7n9uJOF+bf2bazT+5eK2+bj//lFtfsdyhnx90eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG5lEAAAD//4oibec=")
r7 = syz_open_dev$tty1(0xc, 0x4, 0x3)
dup(r7)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x4)
sendmsg$NFT_BATCH(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000)

4.82050203s ago: executing program 4 (id=1876):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$selinux_context(r2, &(0x7f00000002c0)='system_u:object_r:zero_device_t:s0\x00', 0x23)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r3 = getpid()
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r5}, 0x10)
ftruncate(0xffffffffffffffff, 0xc17a)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x20, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x4002dd}}, [@tmpl={0x144, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x2b}, 0x4d5, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x80000000}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@empty}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0x0, 0x6c}, 0x2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x0, 0x3c}, 0x2, @in=@empty, 0xffffffff}]}]}, 0x1fc}}, 0x0)

3.622909594s ago: executing program 4 (id=1891):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000))
accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000180)=0x10, 0x80800)
ioctl$TUNGETDEVNETNS(r0, 0x5460, 0x20000000)
r1 = socket(0x2000000000000021, 0x2, 0x22)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@noinit_itable}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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")
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0)
syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@nodioread_nolock}, {@user_xattr}, {@mblk_io_submit}, {@jqfmt_vfsv0}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x460, &(0x7f0000000dc0)="$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")
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00')
connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000100)=0x1, 0x4)
socket$inet_smc(0x2b, 0x1, 0x0)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
dup(r0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'virt_wifi0\x00', &(0x7f0000000080)=@ethtool_rxnfc={0x2f, 0xd, 0xb1, {0x12, @ah_ip6_spec={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0xc, 0x1}, {0x0, @local, 0x7f, 0xff24, [0xde43, 0xff]}, @hdata="da98b44b034c34fe96dd9d2d765d8e9c22ded7f05b41359c1d607f654ccaef71f318811cea81c4b0136efce2ac0fef7a2d93f4c1", {0x0, @remote, 0x100, 0x3, [0x800, 0x3ff]}, 0xff80000000, 0x7}, 0x1, [0x80000000]}})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='start_task_reaping\x00', r3, 0x0, 0x8001}, 0x18)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r3}, 0x18)
clock_getres(0x6, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="421c000059580000800c0001006d6163766c616e003000028008000300010000000a000400000000000000000008000700f7ffffff080001000d0000000800030002000000140003007866726d3000"/89], 0x74}, 0x1, 0x0, 0x0, 0x24048014}, 0x20004000)

2.121160547s ago: executing program 4 (id=1910):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000004000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)

1.437591453s ago: executing program 1 (id=1923):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x0)
splice(r3, 0x0, r2, 0x0, 0x7f, 0xe)
write(r1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00')
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r7}, 0x10)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x9, 0xfffffffc, 0xffffffff, 0x6})
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r8, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc)
lseek(r5, 0x2004, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

1.412148525s ago: executing program 5 (id=1924):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$ptys(0xc, 0x3, 0x0)
mmap(&(0x7f00003f0000/0x2000)=nil, 0x2000, 0x4, 0xf1112, r0, 0x38e5a000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000580)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x80, 0x0, 0x200, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x7, 0x0, 0x5, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = gettid()
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b000000000000"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYRESOCT=r2, @ANYRES64=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f00000002c0)={[{@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$eJzs28tvVNUfAPDvvX0APx7tD/EBolaJSaOxpQWVhRuNJsZgNNEFLms7kIaBGlqNIJFiDG5MDImujUujf4E7Y2LUlYlb3bgyJETZALqpuXfuLdNpp1A6ZWrn80lue869Z+ac79zXuefMBNCxBrI/ScS2iPg1Ivpq2YUFBmr/rl05O379ytnxJObmXvszyctdvXJ2vCxavm5rkRlMI9IPk6KShaZPnzk+Vq1WThX54ZkTbw1Pnz7zxDsnxo5VjlVOjh46dPDAyNNPjT7ZkjizuK7ueX9q7+4X37j48viRi2/++HXW3m3F9vo4WmUgC/yvuVzd6vxjerTVlbXZ9rp00t3GhrAiXRGR7a6e/Pzvi664sfP64oUP2to4YE1l96ZNzTfPzgEbWBLtbgHQHuWNPnv+LZc71PVYFy4/W3sAyuK+Viy1Ld2RFmV6Gp5vW2kgIo7M/v15tsQajUMAANT7ePyzw70R8d71r17K+h5981vSuCf//3v+d0cxh9IfEf+PiJ0RcVdE7IqIuyPysvdGxH2rbM/i/k96aZVvuays//dMMbe1sP9X9v6iv6vIbc/j70mOTlYr+4vPZDB6NmX5kWXq+Pb5Xz5ptq2+/5ctWf1lX7Box6XuhgG6ibGZsbxT2gKXz0fs6V4q/mR+JiCJiN0RsWdlb72jTEw+9uXeZoVuHv8yWjDPNPdFFt5sFv9sNMRfSurnJycXzU8Ob45qZf9weVQs9tPPF15tVv9AzN1+/C1wuRL/xMLjv7FIf1I/Xzu98jou/PZR02ea2zz+097k9XyeubdY9+7YzMypkYje5HCeX7B+9MZry3xZPjv+B/ctff7vLF6TxX9/RGQH8QMR8WBEPFS0/eGIeCQi9i0T/w/PNd9Wxh9pm/b/+YiJJa9/88d/w/5feaLr+PffNKv/1vb/wTw1WKzJr383sVRzsstFYwNX89kBAADAf0Wafwc+SYfm02k6NFT7Dv+u+F9anZqeefzo1NsnJ2rfle+PnrQc6eorxkOrk9XKSDJbvGNtfHS0GCsux0sPFOPGn3ZtyfND41PViTbHDp1ua5PzP/NHV7tbB6yxLUuuHe294w0B2qBxHj1dmD33SrgYwEbl99rQuZqf/5tjcXcA2Ejc/6FzLXX+n2vImwuAjcn9HzqX8x86VPpdu1sAtJH7P3Sk1fyufw0Tm9dHM9qTWK87JU9ElIl0XbRHYqWJLbdWuN1XJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNb4NwAA///Xm+pu")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
socket$rxrpc(0x21, 0x2, 0x2)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0))
add_key$keyring(&(0x7f0000000040), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r7)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
clock_gettime(0x0, &(0x7f00000000c0))
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r8 = socket$pptp(0x18, 0x1, 0x2)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000240))
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r9, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r9, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000280)={0x0, 0x15, 0xc, 0x3, 0xe3, 0x10001, &(0x7f0000000480)="8e24e4095bc473ca8a1d55d81992d84ded59b3f81f03b87de8f234d9ceb4701a2cb9b219b1cfd671cd699d3a9eeb08d558f12c1b60da40fab1c014aba782fe214a71e12b695f107a737f79d45571af6a2fb3b097e54e4794b1ec3c0cc9dc3363db078e963d8f58cf2dbbb53e92f50ff428999f230807eccc308c7444ad1855b433cb5fc083c786d574dd48c1e0878f2dd31ac5b5db4a4788e4b7d28a87e25400312559ac07dde5d712dc58a0b67c62adb5d54f5f56e33ae4a2673e791def2b56d9bdc6bf6e8c1df3bb82f259646af9d62209d918e899a89e03caf104b2b5ef9763f4f4"})
syz_clone(0x26801000, 0x0, 0x700, 0x0, 0x0, 0x0)

1.263895679s ago: executing program 6 (id=1926):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000000), 0x1, 0x267, &(0x7f0000000e40)="$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")
bpf$MAP_CREATE(0x0, 0x0, 0x48)
chdir(&(0x7f0000000240)='./file0\x00')

1.066691878s ago: executing program 6 (id=1927):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x4000})
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0xffffffd1, 0x1, 0xffffffff, 0x831a, 0x1, "030000000000000000049dd0ffd76d7fcb0b0e", 0x6, 0x201})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x4)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xff)

1.063420618s ago: executing program 6 (id=1928):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000640)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@commit={'commit', 0x3d, 0x8}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x2}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x6, 0x3}, 0x0, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = gettid()
r1 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f000036f000/0x3000)=nil, 0x3000, 0x3000000, 0x13, r1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8d}, 0x0)
getpid()
socket$netlink(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
syz_emit_ethernet(0x66, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @time_exceed={0xa1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%kT', 0x0, 0x0, 0x0, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3b}}}}}}}}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r2}, &(0x7f0000001c00), &(0x7f0000001c40)=r3}, 0x20)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000400000041000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000640400"/20, @ANYRES32=0x0, @ANYBLOB="024000", @ANYRES64=r4], 0x50)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r6, &(0x7f0000004200)='t', 0x1)
sendfile(r6, r5, 0x0, 0x3ffff)
sendfile(r6, r5, 0x0, 0x7ffff000)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))

899.462044ms ago: executing program 6 (id=1929):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x19, 0x8, &(0x7f0000000340)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
r1 = syz_open_dev$usbmon(&(0x7f0000000180), 0x40, 0x24800)
ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000300)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x3})
bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x97a3}, 0x18)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0)

876.242696ms ago: executing program 6 (id=1930):
r0 = socket$kcm(0x1e, 0x4, 0x0)
r1 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c)
setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000005c0)={'filter\x00', 0x0, 0x0, 0x0, [0xffffffff, 0x3, 0x7fffffffffffffff, 0xfffffffffffffffa, 0xa43, 0x8000000000000001], 0x1, 0x0, 0x0, [{}]}, 0x88)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r2 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x101d0)
sendmsg$kcm(r2, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800)
gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'wg0\x00', <r6=>0x0})
sendto$packet(r5, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14)
ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x21000000000000ff)
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0xde2}}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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")
r7 = syz_open_dev$tty1(0xc, 0x4, 0x3)
dup(r7)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x4)
sendmsg$NFT_BATCH(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000)

799.785503ms ago: executing program 1 (id=1931):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f5000000000039ff000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0)

689.480454ms ago: executing program 1 (id=1932):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
syz_emit_ethernet(0x22f, &(0x7f0000000380)={@broadcast, @local, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, '\x00', 0x1f5, 0x3a, 0x0, @empty, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x27a2, {0x5, 0x6, "54c03a", 0x402, 0x88, 0x1, @loopback, @rand_addr=' \x01\x00', [@dstopts={0x88}, @hopopts={0xc, 0x2f, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x2, 0x12c, "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"}, @calipso={0x7, 0x30, {0x2, 0xa, 0xff, 0x7fff, [0x3, 0x0, 0x91bc, 0xffffffffffffffdf, 0x36cf8b49]}}, @hao={0xc9, 0x10, @private0}]}], "2bee2fb5d141cee01578d1f248eda985258201b17050e203dfc47daa676fc49784c391e022e6e1d8754351a0debf16390dea04e1c39826d9f3c946232f"}}}}}}}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030003130000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2400000004ff010000000000000000000000000001ffffffff0000000002000100000000000005070c0100000005000500000000000a004e24000000090000000000000000000000000000000000090000000000000200130003"], 0x98}, 0x1, 0x7}, 0x0)

653.819697ms ago: executing program 7 (id=1933):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20880, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10040}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18)
pipe2(0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x378, 0x3a8, 0x3a8, 0x378, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x280, 0xff00, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x1, 0x2}, {0x1, 0x2, 0x2}, 0x4f6, 0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8)

635.823619ms ago: executing program 1 (id=1934):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x14, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffa}, 0x18)
syz_emit_ethernet(0x4e, &(0x7f0000000340)=ANY=[@ANYRESOCT=r2], 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18)
openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
io_setup(0x3, 0x0)
setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB], 0x24, 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000010c0)=0x100, 0x4)
mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r4, 0x80000000)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000003c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000580)={'wg1\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1000, 0x1)
gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000800)="ccf1e0c33c78c938591690c237305b4db6065b9ae2989ba56216513188cb17c55a7a3bdfb47c45538e93af5f4905109fa9ed6b66782d2c06ee4942d64016827f6428aad9b998e852fbbba7da1073344c0563a5d2fb1c19f227342af14877424f6966aab020f69b5aefea2ecfba213d97c159450a92c88728322bf61e158ff2bce6d62b01215c98a553bd6f495ec88c8ab0370815cee05714c2c702e7fb4b781e93e8d36b58351324ddca9d5102ce6ff2e782f404b5bf7c549aedc7634c523235c88dd7cd6302c453a356e2fb23f04b766016617eef3f3a2d4943", &(0x7f0000000300)="4fb01a"}}, &(0x7f0000000400)=<r7=>0x0)
timer_settime(r7, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000)

589.417763ms ago: executing program 7 (id=1935):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x3, 0xfffffffffffffff4}, 0x100002, 0x7, 0xfffffffc, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8a}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000843c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000006d85500001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000ac55038014000080100001800a0001"], 0x565c}}, 0x0)

537.577378ms ago: executing program 1 (id=1936):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="02000000040000000700000002"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r4=>r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10)
r5 = getpgrp(0xffffffffffffffff)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES16=r5, @ANYRES16, @ANYRESHEX=r4, @ANYBLOB="a818003892043148afda817fe525ef01774154a05724059b10fe0bb3cb", @ANYRESHEX=0x0, @ANYRES16=r5, @ANYRESDEC=r1, @ANYRESDEC, @ANYBLOB="354dfe4abaec"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000800)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x4}, 0x18)
io_setup(0x7, 0x0)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r8, <r9=>0xffffffffffffffff}, 0x4)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r10}, 0x10)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r11)
syz_open_dev$mouse(&(0x7f0000000040), 0x8, 0x101000)
sendmsg$NFC_CMD_DEP_LINK_UP(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2d, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000580), &(0x7f00000007c0)}, 0x20)
socket$inet_icmp(0x2, 0x2, 0x1)
r14 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCADDRT(r14, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty}, @can, @nl=@unspec, 0xa00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2})

537.066398ms ago: executing program 7 (id=1937):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4)
sendmsg$netlink(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000003740)={0x24, 0x12, 0x1, 0x70bd27, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @nested={0x4, 0x31}]}, 0x24}], 0x1}, 0x4000800)
getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f00000004c0)=""/231, &(0x7f0000000180)=0xe7)
r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r4}, 0x18)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x800, 0x5, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff})
ioctl$SG_BLKTRACETEARDOWN(r3, 0x1276, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)

531.906509ms ago: executing program 5 (id=1938):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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")

505.057242ms ago: executing program 1 (id=1939):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000640)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@commit={'commit', 0x3d, 0x8}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x2}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x6, 0x3}, 0x0, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = gettid()
r1 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f000036f000/0x3000)=nil, 0x3000, 0x3000000, 0x13, r1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8d}, 0x0)
getpid()
socket$netlink(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
syz_emit_ethernet(0x66, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @time_exceed={0xa1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%kT', 0x0, 0x0, 0x0, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3b}}}}}}}}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r2}, &(0x7f0000001c00), &(0x7f0000001c40)=r3}, 0x20)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000400000041000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000640400"/20, @ANYRES32=0x0, @ANYBLOB="024000", @ANYRES64=r4], 0x50)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r6, &(0x7f0000004200)='t', 0x1)
sendfile(r6, r5, 0x0, 0x3ffff)
sendfile(r6, r5, 0x0, 0x7ffff000)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))

379.329673ms ago: executing program 5 (id=1940):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x19, 0x8, &(0x7f0000000340)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
r1 = syz_open_dev$usbmon(&(0x7f0000000180), 0x40, 0x24800)
ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000300)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x3})
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x97a3}, 0x18)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0)

347.058736ms ago: executing program 5 (id=1941):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="7800000002060108000000000000000000000000050005000a0000001400078008001140000000000500150000000000050001000700000005000400000000000900020073797a310000000011000300686173683a6e65742c6e65740000000015000300686173683a69702c706f72742c6e6574"], 0x78}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000fffffc000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

298.369691ms ago: executing program 7 (id=1942):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000024000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001fff500090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c00048048000180080001"], 0x122}}, 0x4008090)

209.41592ms ago: executing program 5 (id=1943):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]})
r0 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000005980)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="bcdfc45dd30325c315223f92e8f1a3246939bb7830b83eb36137b11cffe4a29d282859bf", 0x24}, {&(0x7f0000000580)="0a9ac28bd79d370e2ede297807b064710e185ad0e896c0ab9ba48964475b801a233873d0714c526add5d250e1c04e0574de6fc9e1330bafcd8798cc7f946160fe05d8bf937ed3ed2e1299dc4f210de232b0ee4ae43a21b4f094d2976ade6c57f01f409b094c81776817199a4877006f04c35bec8ff9ddf967ba89e1df784a10d1e79edacdf0efb2d1b29404a755e86734df3141c05a2679052020c075f115a57141108bae51201eadd72228fc5edd76a654649b4308ceef64dcd76f6bbbab403ca34998a04e7859e0997f188125095906eb0b5a24679597803b6", 0xda}, {&(0x7f00000002c0)="353d0d7864d7bbee6620728ac2e005b3e34e32317c69473a88af975092", 0x1d}, {&(0x7f0000000800)="19080dfc347157dbfb46132e161a9f79e43472b608c7445e96cb7bf62b97b30faeeac0d3d42c3eb85c862305b0011521509713f5f2b457643d9c5f84a15308d821a634c61f1c00a7b6aac0c1376036b5cb61a000ba35", 0x56}, {&(0x7f00000019c0)="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", 0x542}], 0x5, &(0x7f00000006c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x38, 0x800}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="04000000"], 0x18, 0x40810}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4080}}, {{0x0, 0x0, &(0x7f0000002ec0), 0x0, &(0x7f00000030c0)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x10}}], 0x50, 0x84}}], 0x4, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32=<r4=>0x0], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r3, 0x0, 0xcfdc}, 0x1a0fb94f25892cbe)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000008500000001", @ANYRES64=r5], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x17)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r6, @ANYBLOB="000000000000000081000000000000009500000000000000"], &(0x7f0000000d40)='syzkaller\x00'}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
unshare(0x2060600)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, 0x0, 0x0, 0x4}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
timer_create(0x7, &(0x7f0000000280)={0x0, 0x3d, 0x1}, &(0x7f0000000300))
getpeername(r1, &(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000500)=0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r8}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
semget$private(0x0, 0x20000000102, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x148, 0x24, 0xf0b, 0x70bd2e, 0xfffffffe, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x400, 0x7, 0x3, 0x3, 0x20, 0xf, 0x2}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x10}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)

180.624772ms ago: executing program 5 (id=1944):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x6, 0x8604, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fef, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x10000, 0x0, 0x4, 0x6916, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syslog(0x2, &(0x7f0000000640)=""/177, 0xb1)
socket(0x1e, 0x805, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r3 = syz_open_dev$loop(&(0x7f00000001c0), 0x8001, 0x10000)
r4 = syz_open_dev$loop(&(0x7f0000000280), 0x8000000000000000, 0x604d41)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000800)={r4, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x12, 0x19, 0x8, "41d7bb3e4c1d7f2280539dd72d6d19ff66ea06cbfc3c5f4a97cae37fc183b0851d2d3eb39f0308436d268cd095947b277a407302d7b9d7c40929a4fe32a53651", "98142dfb2212bc235d69e6420adf8ec99a4483140e0fb24d660ef2f28a54b3c5547313f368f61c169c540dc41457efb16aae84258f3d73198c582f979eef2949", "746a14f3e27d6102437afe177b5ad1954bd2106d52adefa12f44de4a456ec7c6", [0x6, 0xec]}})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x100000001}, 0x18)
getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000))
socket$kcm(0x1e, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@journal_dev={'journal_dev', 0x3d, 0x100000000001}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x1827}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0)
perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58)
r6 = socket(0xa, 0x5, 0x0)
listen(r6, 0x8)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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")

164.003864ms ago: executing program 7 (id=1945):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="05000000040600000000000000fc7c3416d77fb71c9d818816960169063c0b109b111a4814a8049d291801acc92c55fac1ab0e7a81ed77df465eceb351203d19ac5410be5e2e8c4a1f98343975784eb8ccdc0a067b71082165d6686cf28b627f570ffe78469c8cbb93b9fe011349083c9f342540410f65e7cb5c63c8e8ac078933375206eb894d5c37e491abac85160ad88d0145d6629c8f0ff52b8611197599f84bc3fa1cb6a4ab9067516bf46866cf6b0bc8cc35fd"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r2 = perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0xfc, 0x3, 0x6, 0xe0, 0x0, 0x4e, 0x80004, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000100), 0x9}, 0x18, 0x3, 0x2, 0x0, 0x7fffffffffffffff, 0x9, 0x84, 0x0, 0x8a, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x88c7, 0x10000, 0x8, 0x1, 0x80a, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x14)
r3 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xffdffffd, @dev={0xfe, 0x80, '\x00', 0x2}, 0x4}, 0x1000, {[0x9, 0x2, 0xfffffffe, 0xfffffcf9, 0x0, 0x40001, 0x2, 0x5]}}, 0x5c)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff})
tee(r4, r4, 0x1, 0x8)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, {<r5=>0xee00, 0xffffffffffffffff}}, './file0\x00'})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0, <r7=>0x0}}, {{@in=@initdev}, 0x0, @in=@empty}}, &(0x7f00000004c0)=0xe8)
newfstatat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x1000)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r10, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c)
connect$pppl2tp(r9, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, r10, {0x2, 0x4e21, @remote}, 0x4, 0x0, 0x2}}, 0x2e)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x8, &(0x7f0000003b40)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x14, '\x00', r6, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r11}, 0x10)
writev(r9, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000440), 0x48, &(0x7f0000001700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000.L,dfltuid=', @ANYRESHEX=r5, @ANYBLOB="2c6198816363b8b956e5d7d67f5c53ec6573", @ANYRESDEC=r7, @ANYBLOB=',rootcontext=staff_u,euid<', @ANYRESDEC=r8, @ANYBLOB=',\x00'])
r12 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCSETD(r12, 0x5423, &(0x7f00000003c0)=0x11)
ioctl$TIOCVHANGUP(r12, 0x5437, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000000101043a6e23d60000000002000000"], 0x14}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1803000000000000aed0b09c85ce470c9acec5d000000069b2748dd132d700e600000085100000060023050000180000000000009b6cd58890cd6c4f00852000000500000018000000ea0105000000000000007325e9b8c20000000000f6000000000000950000000000000000000095403733f217f94e3c8b0a684d475c18fc8c4550031eb7a22fac91bfd5e5cc9e151585e30ae2edb4441c96e435e800000000000000000000000000001d59d51279b2ac9db6fda7f5b5487a78874dc5c9b7af5e206d0953bc3e135be52f53c02461c339b7"], &(0x7f0000000000)='GPL\x00'}, 0x94)
unshare(0x0)

13.349558ms ago: executing program 7 (id=1946):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94)
socket$packet(0x11, 0xa, 0x300)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0xac}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}]}}]}, 0x4c}}, 0x40440c0)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="d6a365dd00ca"}, 0x14)
sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)

0s ago: executing program 6 (id=1947):
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000380)={0x28, 0x0, 0x0, @host}, 0x10, 0x80800)
setsockopt(r0, 0xe000, 0x43, &(0x7f00000003c0)="9f33d46b558e8f3abf4a9b1b86fac4ec230b180bf4fbd527cc3f9547b11aba84a42194e5735df1b4bae32f0295472f86feb8790005fc45e2851cbfaf68343c71bcfd45e9621dfd0d1157d1623e2974537c413886337e0597bc151e69132b84", 0x5f)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000004000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
set_mempolicy_home_node(&(0x7f0000151000/0x2000)=nil, 0x2000, 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf)
r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r5, &(0x7f0000000300)='asymmetric\x00', &(0x7f00000001c0)='dn:\xff\xffe{')
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@private2}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8)
keyctl$chown(0x4, r5, r6, 0xffffffffffffffff)
ioctl$TCFLSH(r4, 0x400455c8, 0x0)

kernel console output (not intermixed with test programs):

em 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.370454][ T7539] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.1264: Failed to acquire dquot type 1
[  103.384956][ T7540] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  103.408658][ T7539] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  103.424587][ T7539] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.1264: corrupted inode contents
[  103.437005][ T7539] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #12: comm syz.6.1264: mark_inode_dirty error
[  103.448696][ T7539] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.1264: corrupted inode contents
[  103.464558][ T7539] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.1264: mark_inode_dirty error
[  103.476516][ T7539] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.1264: corrupted inode contents
[  103.496376][ T7539] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem
[  103.514412][ T7539] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.1264: corrupted inode contents
[  103.541754][ T7539] EXT4-fs error (device loop6): ext4_truncate:4635: inode #12: comm syz.6.1264: mark_inode_dirty error
[  103.563097][ T4703] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.572638][ T7539] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem
[  103.583055][ T7539] EXT4-fs (loop6): 1 truncate cleaned up
[  103.583653][ T7539] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  103.597135][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.636211][ T7539] netlink: 'syz.6.1264': attribute type 4 has an invalid length.
[  103.664732][ T4869] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.748693][ T3315] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  104.106177][ T7555] loop0: detected capacity change from 0 to 512
[  104.185368][ T7555] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.1270: Parent and EA inode have the same ino 15
[  104.255493][ T7561] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1269'.
[  104.272870][ T7555] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.1270: Parent and EA inode have the same ino 15
[  104.285885][ T7555] EXT4-fs (loop0): 1 orphan inode deleted
[  104.292170][ T7555] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.338943][ T7562] loop1: detected capacity change from 0 to 1024
[  104.396835][ T7555] EXT4-fs error (device loop0): ext4_lookup:1789: inode #2: comm syz.0.1270: deleted inode referenced: 15
[  104.409395][ T7555] EXT4-fs error (device loop0): ext4_lookup:1789: inode #2: comm syz.0.1270: deleted inode referenced: 15
[  104.435127][ T7562] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1268: bad orphan inode 134217728
[  104.448030][ T7562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.837709][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.852252][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.917815][ T7579] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1275'.
[  104.928297][ T7575] loop6: detected capacity change from 0 to 512
[  104.995098][ T7575] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1277: bg 0: block 248: padding at end of block bitmap is not set
[  105.030107][ T7591] loop5: detected capacity change from 0 to 128
[  105.044788][ T7575] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.1277: Failed to acquire dquot type 1
[  105.057756][ T7575] EXT4-fs (loop6): 1 truncate cleaned up
[  105.063866][ T7575] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.173909][ T1005] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:9: Failed to release dquot type 1
[  105.196240][ T7603] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1284'.
[  105.212988][ T7605] loop6: detected capacity change from 0 to 512
[  105.245902][ T7603] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  105.292519][ T7605] SELinux:  Context @ is not valid (left unmapped).
[  105.330168][ T7611] loop4: detected capacity change from 0 to 512
[  105.337982][ T7613] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1287'.
[  105.361232][ T7611] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.1286: corrupted in-inode xattr: invalid ea_ino
[  105.384929][ T7611] EXT4-fs (loop4): Remounting filesystem read-only
[  105.502667][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1288'.
[  105.517410][ T7622] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  105.529388][ T7622] EXT4-fs (loop4): invalid journal inode
[  105.531055][ T7625] bridge5: the hash_elasticity option has been deprecated and is always 16
[  105.546186][ T7622] EXT4-fs (loop4): can't get journal size
[  105.557144][ T7622] EXT4-fs (loop4): 1 truncate cleaned up
[  105.668070][ T7636] tipc: Enabling of bearer <eth:s> rejected, max 3 bearers permitted
[  105.700092][ T7642] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1296'.
[  105.742529][ T7644] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1298'.
[  105.806042][ T7644] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  105.959205][ T7651] batman_adv: batadv0: Adding interface: dummy0
[  105.965527][ T7651] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  106.001454][ T7651] batman_adv: batadv0: Interface activated: dummy0
[  106.039721][ T7651] batadv0: mtu less than device minimum
[  106.046351][ T7651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  106.057212][ T7651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  106.068503][ T7651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  106.079686][ T7651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  106.090865][ T7651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  106.102022][ T7651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  106.383108][ T7672] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  106.399870][ T7648] syz.6.1299: attempt to access beyond end of device
[  106.399870][ T7648] loop6: rw=2049, sector=138, nr_sectors = 2 limit=128
[  106.404973][ T7651] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt.
[  106.458719][ T7672] EXT4-fs (loop4): 1 truncate cleaned up
[  106.588614][ T7681] devtmpfs: Bad value for 'nr_blocks'
[  106.621376][ T7681] net_ratelimit: 13 callbacks suppressed
[  106.621472][ T7681] veth0_macvtap: mtu greater than device maximum
[  106.686155][ T7691] EXT4-fs: Ignoring removed nobh option
[  106.797939][ T7689] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1314: bg 0: block 234: padding at end of block bitmap is not set
[  106.812742][ T7689] EXT4-fs (loop5): Remounting filesystem read-only
[  106.831361][ T7696] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.1315: bad orphan inode 134217728
[  106.843114][ T3005] udevd[3005]: worker [3307] terminated by signal 33 (Unknown signal 33)
[  106.856808][ T3005] udevd[3005]: worker [3307] failed while handling '/devices/virtual/block/loop0'
[  106.910311][ T7706] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1318'.
[  106.951768][ T3005] udevd[3005]: worker [4743] terminated by signal 33 (Unknown signal 33)
[  106.984083][ T3005] udevd[3005]: worker [4743] failed while handling '/devices/virtual/block/loop0'
[  106.988253][ T7708] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  107.006674][ T7708] EXT4-fs (loop6): 1 truncate cleaned up
[  107.094604][ T7717] FAULT_INJECTION: forcing a failure.
[  107.094604][ T7717] name failslab, interval 1, probability 0, space 0, times 0
[  107.097355][ T7716] IPVS: Unknown mcast interface: macvtap0
[  107.107369][ T7717] CPU: 1 UID: 0 PID: 7717 Comm: syz.5.1322 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  107.107400][ T7717] Tainted: [W]=WARN
[  107.107408][ T7717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  107.107420][ T7717] Call Trace:
[  107.107426][ T7717]  <TASK>
[  107.107434][ T7717]  __dump_stack+0x1d/0x30
[  107.107460][ T7717]  dump_stack_lvl+0x95/0xd0
[  107.107561][ T7717]  dump_stack+0x15/0x1b
[  107.107581][ T7717]  should_fail_ex+0x265/0x280
[  107.107605][ T7717]  should_failslab+0x8c/0xb0
[  107.107688][ T7717]  kmem_cache_alloc_noprof+0x69/0x4b0
[  107.107709][ T7717]  ? getname_kernel+0x3c/0x1f0
[  107.107807][ T7717]  ? should_fail_ex+0xdb/0x280
[  107.107829][ T7717]  getname_kernel+0x3c/0x1f0
[  107.107853][ T7717]  kern_path+0x23/0x130
[  107.107888][ T7717]  bpf_uprobe_multi_link_attach+0x232/0x900
[  107.107961][ T7717]  ? __rcu_read_unlock+0x4f/0x70
[  107.107982][ T7717]  ? __fget_files+0x184/0x1c0
[  107.108036][ T7717]  link_create+0x639/0x690
[  107.108061][ T7717]  __sys_bpf+0x628/0x7c0
[  107.108088][ T7717]  __x64_sys_bpf+0x41/0x50
[  107.108119][ T7717]  x64_sys_call+0x28e1/0x3000
[  107.108194][ T7717]  do_syscall_64+0xca/0x2b0
[  107.108227][ T7717]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.108297][ T7717] RIP: 0033:0x7fe4a71af749
[  107.108313][ T7717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  107.108377][ T7717] RSP: 002b:00007fe4a5c0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  107.108398][ T7717] RAX: ffffffffffffffda RBX: 00007fe4a7405fa0 RCX: 00007fe4a71af749
[  107.108412][ T7717] RDX: 0000000000000040 RSI: 00002000000005c0 RDI: 000000000000001c
[  107.108425][ T7717] RBP: 00007fe4a5c0f090 R08: 0000000000000000 R09: 0000000000000000
[  107.108438][ T7717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  107.108450][ T7717] R13: 00007fe4a7406038 R14: 00007fe4a7405fa0 R15: 00007ffea304a848
[  107.108469][ T7717]  </TASK>
[  107.304675][ T7723] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1324: bad orphan inode 134217728
[  107.371395][ T7718] netlink: 19 bytes leftover after parsing attributes in process `syz.6.1323'.
[  107.466954][ T7733] netlink: 'syz.5.1329': attribute type 4 has an invalid length.
[  107.492328][ T7733] netlink: 'syz.5.1329': attribute type 4 has an invalid length.
[  107.674340][ T7735] __quota_error: 459 callbacks suppressed
[  107.674358][ T7735] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6).
[  107.697032][ T7735] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  107.712845][ T7735] EXT4-fs (loop0): mount failed
[  107.741602][ T7756] SELinux:  Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped).
[  107.784128][   T29] audit: type=1400 audit(107.731:3117): avc:  denied  { relabelto } for  pid=7752 comm="syz.4.1336" name="278" dev="tmpfs" ino=1487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0"
[  107.811842][   T29] audit: type=1400 audit(107.731:3118): avc:  denied  { associate } for  pid=7752 comm="syz.4.1336" name="278" dev="tmpfs" ino=1487 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0"
[  108.031280][ T7756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1336'.
[  108.056715][   T29] audit: type=1400 audit(108.031:3119): avc:  denied  { add_name } for  pid=7752 comm="syz.4.1336" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0"
[  108.114619][   T29] audit: type=1400 audit(108.031:3120): avc:  denied  { associate } for  pid=7752 comm="syz.4.1336" name="file7" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  108.159286][   T29] audit: type=1400 audit(108.121:3121): avc:  denied  { remove_name } for  pid=3321 comm="syz-executor" name="file7" dev="tmpfs" ino=1492 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0"
[  108.186673][   T29] audit: type=1400 audit(108.121:3122): avc:  denied  { rmdir } for  pid=3321 comm="syz-executor" name="file7" dev="tmpfs" ino=1492 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  108.208472][   T29] audit: type=1400 audit(108.131:3123): avc:  denied  { rmdir } for  pid=3321 comm="syz-executor" name="278" dev="tmpfs" ino=1487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0"
[  108.267994][ T7773] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  108.387148][ T7770] cgroup: fork rejected by pids controller in /syz4
[  108.918992][ T8113] set_capacity_and_notify: 12 callbacks suppressed
[  108.919011][ T8113] loop5: detected capacity change from 0 to 164
[  109.339681][ T8284] loop1: detected capacity change from 0 to 1024
[  109.390011][ T8284] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1348: bad orphan inode 134217728
[  109.449098][ T8292] syzkaller1: entered promiscuous mode
[  109.454691][ T8292] syzkaller1: entered allmulticast mode
[  109.463803][ T8292] syzkaller1: left promiscuous mode
[  109.469083][ T8292] syzkaller1: left allmulticast mode
[  109.697169][ T8305] loop4: detected capacity change from 0 to 512
[  109.718064][ T8305] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  109.754720][ T8305] EXT4-fs (loop4): 1 truncate cleaned up
[  109.824252][ T8312] __nla_validate_parse: 1 callbacks suppressed
[  109.824267][ T8312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1357'.
[  109.886383][ T8317] 9p: Bad value for 'rfdno'
[  110.015804][   T29] audit: type=1326 audit(109.991:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8322 comm="syz.5.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a71af749 code=0x7ffc0000
[  110.071448][ T8323] loop5: detected capacity change from 0 to 1024
[  110.112067][   T29] audit: type=1326 audit(110.021:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8322 comm="syz.5.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a71af749 code=0x7ffc0000
[  110.168171][ T8326] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  110.201579][ T8329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1361'.
[  110.238268][ T8323] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85
[  110.296200][ T8326] loop0: detected capacity change from 0 to 512
[  110.380627][ T8326] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  110.410397][ T8326] EXT4-fs (loop0): 1 truncate cleaned up
[  112.177603][ T7716] Set syz1 is full, maxelem 65536 reached
[  112.306175][ T8342] loop5: detected capacity change from 0 to 128
[  112.339421][ T8348] loop1: detected capacity change from 0 to 512
[  112.347155][ T8348] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  112.366748][ T8350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1374'.
[  112.375802][ T8350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1374'.
[  112.413256][ T8354] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1376'.
[  112.438638][ T8348] EXT4-fs (loop1): 1 truncate cleaned up
[  112.494737][ T8357] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8357 comm=syz.5.1377
[  112.508414][ T8357] netlink: 'syz.5.1377': attribute type 39 has an invalid length.
[  112.583308][ T8366] loop6: detected capacity change from 0 to 1024
[  112.592904][ T8370] loop5: detected capacity change from 0 to 1024
[  112.630275][ T8374] loop4: detected capacity change from 0 to 512
[  112.647819][ T8370] EXT4-fs: Ignoring removed oldalloc option
[  112.667077][ T8374] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  112.678737][ T8366] batman_adv: batadv0: Adding interface: dummy0
[  112.685360][ T8366] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  112.694002][   T29] kauditd_printk_skb: 170 callbacks suppressed
[  112.694017][   T29] audit: type=1326 audit(112.651:3296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8365 comm="syz.6.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6139df749 code=0x7ffc0000
[  112.720625][ T8366] batman_adv: batadv0: Interface activated: dummy0
[  112.740176][   T29] audit: type=1326 audit(112.651:3297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8365 comm="syz.6.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6139df749 code=0x7ffc0000
[  112.765975][ T8374] EXT4-fs (loop4): 1 truncate cleaned up
[  112.769550][   T29] audit: type=1326 audit(112.651:3298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8365 comm="syz.6.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6139df749 code=0x7ffc0000
[  112.780491][ T8374] EXT4-fs (loop4): shut down requested (0)
[  112.798056][   T29] audit: type=1326 audit(112.651:3299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8365 comm="syz.6.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc6139df749 code=0x7ffc0000
[  112.814107][ T8366] batadv0: mtu less than device minimum
[  112.827205][   T29] audit: type=1326 audit(112.731:3300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8365 comm="syz.6.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6139df749 code=0x7ffc0000
[  112.833039][ T8366] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  112.855000][   T29] audit: type=1326 audit(112.731:3301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8365 comm="syz.6.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc6139df783 code=0x7ffc0000
[  112.865843][ T8366] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  112.888090][   T29] audit: type=1326 audit(112.731:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8365 comm="syz.6.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc6139df807 code=0x7ffc0000
[  112.898953][ T8366] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  112.921202][   T29] audit: type=1326 audit(112.731:3303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8365 comm="syz.6.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fc613996bdd code=0x7ffc0000
[  112.932067][ T8366] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  112.954123][   T29] audit: type=1326 audit(112.731:3304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8365 comm="syz.6.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fc613a13e89 code=0x7ffc0000
[  112.965087][ T8366] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  112.987300][   T29] audit: type=1326 audit(112.731:3305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8365 comm="syz.6.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fc613996c47 code=0x7ffc0000
[  112.998216][ T8366] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  113.031211][ T8366] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  113.042057][ T8366] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  113.064846][ T8370] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002]
[  113.073602][ T8370] System zones: 0-1, 3-12
[  113.203450][ T8393] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1391'.
[  113.237983][ T8401] FAULT_INJECTION: forcing a failure.
[  113.237983][ T8401] name failslab, interval 1, probability 0, space 0, times 0
[  113.238748][ T8398] netlink: 'syz.0.1392': attribute type 15 has an invalid length.
[  113.250758][ T8401] CPU: 0 UID: 0 PID: 8401 Comm: syz.6.1389 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  113.250820][ T8401] Tainted: [W]=WARN
[  113.250828][ T8401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  113.250840][ T8401] Call Trace:
[  113.250846][ T8401]  <TASK>
[  113.250853][ T8401]  __dump_stack+0x1d/0x30
[  113.250881][ T8401]  dump_stack_lvl+0x95/0xd0
[  113.250994][ T8401]  dump_stack+0x15/0x1b
[  113.251016][ T8401]  should_fail_ex+0x265/0x280
[  113.251097][ T8401]  should_failslab+0x8c/0xb0
[  113.251120][ T8401]  kmem_cache_alloc_noprof+0x69/0x4b0
[  113.251190][ T8401]  ? getname_flags+0x80/0x3b0
[  113.251213][ T8401]  ? should_fail_ex+0xdb/0x280
[  113.251289][ T8401]  getname_flags+0x80/0x3b0
[  113.251313][ T8401]  user_path_at+0x28/0x130
[  113.251342][ T8401]  __se_sys_mount+0x25b/0x2e0
[  113.251367][ T8401]  __x64_sys_mount+0x67/0x80
[  113.251448][ T8401]  x64_sys_call+0x2cca/0x3000
[  113.251506][ T8401]  do_syscall_64+0xca/0x2b0
[  113.251539][ T8401]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.251562][ T8401] RIP: 0033:0x7fc6139df749
[  113.251586][ T8401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  113.251604][ T8401] RSP: 002b:00007fc612447038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  113.251626][ T8401] RAX: ffffffffffffffda RBX: 00007fc613c35fa0 RCX: 00007fc6139df749
[  113.251639][ T8401] RDX: 0000200000000040 RSI: 0000200000000300 RDI: 0000000000000000
[  113.251653][ T8401] RBP: 00007fc612447090 R08: 0000200000000340 R09: 0000000000000000
[  113.251759][ T8401] R10: 0000000000200080 R11: 0000000000000246 R12: 0000000000000001
[  113.251770][ T8401] R13: 00007fc613c36038 R14: 00007fc613c35fa0 R15: 00007fffe4faa958
[  113.251824][ T8401]  </TASK>
[  113.312310][ T8400] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  113.313211][ T8398] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1392'.
[  113.329463][ T8393] batman_adv: batadv0: Interface deactivated: dummy0
[  113.385046][ T8400] EXT4-fs (loop1): 1 truncate cleaned up
[  113.386379][ T8393] batman_adv: batadv0: Removing interface: dummy0
[  113.486932][ T8393] bridge_slave_0: left allmulticast mode
[  113.492756][ T8393] bridge_slave_0: left promiscuous mode
[  113.500190][ T8393] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.541612][ T8411] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  113.554857][ T8393] bridge_slave_1: left allmulticast mode
[  113.560546][ T8393] bridge_slave_1: left promiscuous mode
[  113.567004][ T8393] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.583125][ T8411] EXT4-fs (loop6): 1 truncate cleaned up
[  113.600649][ T8393] bond0: (slave bond_slave_0): Releasing backup interface
[  113.607744][ T8411] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1397: bg 0: block 465: padding at end of block bitmap is not set
[  113.639863][ T8393] bond0: (slave bond_slave_1): Releasing backup interface
[  113.662437][ T8393] team0: Port device team_slave_0 removed
[  113.664084][ T8411] EXT4-fs (loop6): Remounting filesystem read-only
[  113.692369][ T8393] team0: Port device team_slave_1 removed
[  113.706636][ T8424] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=25623 sclass=netlink_xfrm_socket pid=8424 comm=syz.1.1396
[  113.707666][ T8393] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.726886][ T8393] batman_adv: batadv0: Removing interface: batadv_slave_0
[  113.736558][ T8393] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.742294][ T3402] kernel write not supported for file bpf-prog (pid: 3402 comm: kworker/0:3)
[  113.744074][ T8393] batman_adv: batadv0: Removing interface: batadv_slave_1
[  113.789713][ T8413] netlink: 'syz.1.1396': attribute type 29 has an invalid length.
[  113.798020][ T8418] netlink: 'syz.1.1396': attribute type 29 has an invalid length.
[  113.882717][ T8426] batman_adv: batadv0: Adding interface: dummy0
[  113.889395][ T8426] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  113.917356][ T8436] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1404'.
[  113.955496][ T8426] batman_adv: batadv0: Interface activated: dummy0
[  113.985056][ T8444] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1406'.
[  114.026219][ T8448] set_capacity_and_notify: 4 callbacks suppressed
[  114.026237][ T8448] loop5: detected capacity change from 0 to 512
[  114.068549][ T8448] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  114.080921][ T8443] wg1 speed is unknown, defaulting to 1000
[  114.087413][ T8443] ip6_vti0 speed is unknown, defaulting to 1000
[  114.115450][ T8448] EXT4-fs (loop5): 1 truncate cleaned up
[  114.306081][ T8462] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1412'.
[  114.327720][ T8460] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.370962][ T8465] batman_adv: batadv0: Interface deactivated: dummy0
[  114.377859][ T8465] batman_adv: batadv0: Removing interface: dummy0
[  114.389133][ T8465] bridge_slave_0: left allmulticast mode
[  114.394880][ T8465] bridge_slave_0: left promiscuous mode
[  114.400623][ T8465] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.422344][ T8465] bridge_slave_1: left allmulticast mode
[  114.428198][ T8465] bridge_slave_1: left promiscuous mode
[  114.434200][ T8465] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.450885][ T8465] $Hÿ: (slave bond_slave_0): Releasing backup interface
[  114.473026][ T8465] bond_slave_0: left promiscuous mode
[  114.480637][ T8473] FAULT_INJECTION: forcing a failure.
[  114.480637][ T8473] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  114.494052][ T8473] CPU: 1 UID: 0 PID: 8473 Comm: syz.5.1416 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  114.494087][ T8473] Tainted: [W]=WARN
[  114.494095][ T8473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  114.494107][ T8473] Call Trace:
[  114.494112][ T8473]  <TASK>
[  114.494117][ T8473]  __dump_stack+0x1d/0x30
[  114.494147][ T8473]  dump_stack_lvl+0x95/0xd0
[  114.494162][ T8473]  dump_stack+0x15/0x1b
[  114.494201][ T8473]  should_fail_ex+0x265/0x280
[  114.494217][ T8473]  should_fail+0xb/0x20
[  114.494230][ T8473]  should_fail_usercopy+0x1a/0x20
[  114.494246][ T8473]  _copy_to_user+0x20/0xa0
[  114.494336][ T8473]  simple_read_from_buffer+0xb5/0x130
[  114.494351][ T8473]  proc_fail_nth_read+0x10e/0x150
[  114.494370][ T8473]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  114.494388][ T8473]  vfs_read+0x1a8/0x770
[  114.494470][ T8473]  ? __rcu_read_unlock+0x4f/0x70
[  114.494504][ T8473]  ? __fget_files+0x184/0x1c0
[  114.494519][ T8473]  ? mutex_lock+0x58/0x90
[  114.494533][ T8473]  ksys_read+0xda/0x1a0
[  114.494544][ T8473]  __x64_sys_read+0x40/0x50
[  114.494556][ T8473]  x64_sys_call+0x2889/0x3000
[  114.494568][ T8473]  do_syscall_64+0xca/0x2b0
[  114.494585][ T8473]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.494628][ T8473] RIP: 0033:0x7fe4a71ae15c
[  114.494638][ T8473] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  114.494648][ T8473] RSP: 002b:00007fe4a5c0f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  114.494659][ T8473] RAX: ffffffffffffffda RBX: 00007fe4a7405fa0 RCX: 00007fe4a71ae15c
[  114.494681][ T8473] RDX: 000000000000000f RSI: 00007fe4a5c0f0a0 RDI: 0000000000000004
[  114.494688][ T8473] RBP: 00007fe4a5c0f090 R08: 0000000000000000 R09: 0000000000000000
[  114.494695][ T8473] R10: 0000200000001b40 R11: 0000000000000246 R12: 0000000000000001
[  114.494703][ T8473] R13: 00007fe4a7406038 R14: 00007fe4a7405fa0 R15: 00007ffea304a848
[  114.494741][ T8473]  </TASK>
[  114.495122][ T8465] $Hÿ: (slave bond_slave_1): Releasing backup interface
[  114.651089][ T8482] loop5: detected capacity change from 0 to 512
[  114.708878][ T8465] bond_slave_1: left promiscuous mode
[  114.719531][ T8465] team0: Port device team_slave_0 removed
[  114.742083][ T8482] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  114.755386][ T8465] team0: Port device team_slave_1 removed
[  114.763178][ T8465] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.763529][ T8484] loop0: detected capacity change from 0 to 512
[  114.770654][ T8465] batman_adv: batadv0: Removing interface: batadv_slave_0
[  114.785816][ T8482] EXT4-fs (loop5): 1 truncate cleaned up
[  114.806642][ T8465] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.814410][ T8465] batman_adv: batadv0: Removing interface: batadv_slave_1
[  114.860448][ T8460] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.917801][ T8484] netlink: 'syz.0.1420': attribute type 29 has an invalid length.
[  114.926704][ T8488] netlink: 'syz.0.1420': attribute type 29 has an invalid length.
[  114.937861][ T8460] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.973428][ T8484] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=25623 sclass=netlink_xfrm_socket pid=8484 comm=syz.0.1420
[  114.997650][ T4314] kernel write not supported for file bpf-prog (pid: 4314 comm: kworker/1:8)
[  115.021815][ T8460] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.033847][ T8495] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  115.041679][ T8495] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  115.152886][ T7766] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.182382][ T7763] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.239002][ T7763] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.267664][ T7763] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.277796][ T8516] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.314849][ T8524] FAULT_INJECTION: forcing a failure.
[  115.314849][ T8524] name failslab, interval 1, probability 0, space 0, times 0
[  115.322246][ T8517] __nla_validate_parse: 1 callbacks suppressed
[  115.322262][ T8517] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1432'.
[  115.327631][ T8524] CPU: 0 UID: 0 PID: 8524 Comm: syz.1.1434 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  115.327665][ T8524] Tainted: [W]=WARN
[  115.327672][ T8524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  115.327686][ T8524] Call Trace:
[  115.327692][ T8524]  <TASK>
[  115.327699][ T8524]  __dump_stack+0x1d/0x30
[  115.327777][ T8524]  dump_stack_lvl+0x95/0xd0
[  115.327799][ T8524]  dump_stack+0x15/0x1b
[  115.327909][ T8524]  should_fail_ex+0x265/0x280
[  115.327934][ T8524]  should_failslab+0x8c/0xb0
[  115.327957][ T8524]  kmem_cache_alloc_node_noprof+0x6b/0x4c0
[  115.327980][ T8524]  ? __alloc_skb+0x2ff/0x4b0
[  115.328063][ T8524]  __alloc_skb+0x2ff/0x4b0
[  115.328085][ T8524]  ? __alloc_skb+0x228/0x4b0
[  115.328109][ T8524]  netlink_alloc_large_skb+0xbf/0xf0
[  115.328147][ T8524]  netlink_sendmsg+0x3cf/0x6b0
[  115.328180][ T8524]  ? __pfx_netlink_sendmsg+0x10/0x10
[  115.328219][ T8524]  __sock_sendmsg+0x145/0x180
[  115.328278][ T8524]  __sys_sendto+0x268/0x330
[  115.328310][ T8524]  __x64_sys_sendto+0x76/0x90
[  115.328335][ T8524]  x64_sys_call+0x29a7/0x3000
[  115.328360][ T8524]  do_syscall_64+0xca/0x2b0
[  115.328464][ T8524]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.328486][ T8524] RIP: 0033:0x7fe9abf1f749
[  115.328567][ T8524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  115.328585][ T8524] RSP: 002b:00007fe9aa97f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  115.328606][ T8524] RAX: ffffffffffffffda RBX: 00007fe9ac175fa0 RCX: 00007fe9abf1f749
[  115.328620][ T8524] RDX: 000000000000001c RSI: 00002000000002c0 RDI: 0000000000000004
[  115.328633][ T8524] RBP: 00007fe9aa97f090 R08: 0000000000000000 R09: 0000000000000000
[  115.328645][ T8524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  115.328673][ T8524] R13: 00007fe9ac176038 R14: 00007fe9ac175fa0 R15: 00007ffd51b18a88
[  115.328691][ T8524]  </TASK>
[  115.539028][ T8517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1432'.
[  115.547966][ T8517] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1432'.
[  115.551021][ T8538] hub 2-0:1.0: USB hub found
[  115.557140][ T8517] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1432'.
[  115.574102][ T8538] hub 2-0:1.0: 8 ports detected
[  115.605276][ T8516] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.623309][ T8540] loop5: detected capacity change from 0 to 128
[  115.633148][ T8540] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  115.640538][ T8536] netlink: 24 bytes leftover after parsing attributes in process `gtp'.
[  115.678307][ T8542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1442'.
[  115.682021][ T8540] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  115.697995][ T8516] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.760951][ T8516] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.798318][ T8551] loop1: detected capacity change from 0 to 512
[  115.804764][ T8538] loop6: detected capacity change from 0 to 1024
[  115.822166][ T8538] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 112: padding at end of block bitmap is not set
[  115.894309][ T8538] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: block 2: comm gtp: lblock 2 mapped to illegal pblock 2 (length 4)
[  115.923011][ T8538] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: comm gtp: lblock 0 mapped to illegal pblock 0 (length 1)
[  115.936117][ T8538] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: comm gtp: lblock 0 mapped to illegal pblock 0 (length 1)
[  115.949632][ T8538] EXT4-fs error (device loop6): ext4_ext_remove_space:2955: inode #15: comm gtp: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  115.969104][ T8538] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: comm gtp: lblock 0 mapped to illegal pblock 0 (length 1)
[  115.983077][ T8538] EXT4-fs error (device loop6): ext4_ext_remove_space:2955: inode #15: comm gtp: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 4, max 4(4), depth 0(0)
[  116.055934][ T8577] x_tables: duplicate underflow at hook 1
[  116.072618][ T8565] loop5: detected capacity change from 0 to 128
[  116.085539][ T8565] msdos: Unknown parameter 'nod{ts'
[  116.118047][ T8565] netlink: 372 bytes leftover after parsing attributes in process `syz.5.1449'.
[  116.216565][ T8592] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1458'.
[  116.265035][ T8598] wg1 speed is unknown, defaulting to 1000
[  116.290969][ T8598] ip6_vti0 speed is unknown, defaulting to 1000
[  116.297664][ T8600] loop5: detected capacity change from 0 to 1024
[  116.318207][ T8600] EXT4-fs: Ignoring removed bh option
[  116.331770][ T8600] EXT4-fs: inline encryption not supported
[  116.339125][ T8600] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  116.370053][ T8600] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  116.382546][ T8611] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  116.402363][ T8600] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 2: comm syz.5.1461: lblock 2 mapped to illegal pblock 2 (length 1)
[  116.417742][ T8600] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 48: comm syz.5.1461: lblock 0 mapped to illegal pblock 48 (length 1)
[  116.434264][ T8600] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.1461: Failed to acquire dquot type 0
[  116.445160][ T8613] IPv6: Can't replace route, no match found
[  116.451573][ T8600] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  116.461318][ T8600] EXT4-fs error (device loop5): ext4_evict_inode:253: inode #11: comm syz.5.1461: mark_inode_dirty error
[  116.462894][ T8613] bridge10: the hash_elasticity option has been deprecated and is always 16
[  116.481664][ T8600] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  116.502094][ T8600] EXT4-fs (loop5): 1 orphan inode deleted
[  116.515761][  T353] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1)
[  116.561145][  T353] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 0
[  116.616502][ T8600] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz.5.1461: Invalid inode table block 1 in block_group 0
[  116.631128][ T8600] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  116.667917][ T8600] EXT4-fs error (device loop5): ext4_quota_off:7270: inode #3: comm syz.5.1461: mark_inode_dirty error
[  116.739444][ T8628] loop6: detected capacity change from 0 to 512
[  116.766861][ T8628] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  116.780792][ T8629] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1473'.
[  116.791441][ T8628] EXT4-fs (loop6): 1 truncate cleaned up
[  116.898208][ T8639] loop6: detected capacity change from 0 to 512
[  116.915656][ T8639] netlink: 'syz.6.1477': attribute type 29 has an invalid length.
[  116.934958][ T8639] netlink: 'syz.6.1477': attribute type 29 has an invalid length.
[  116.950744][ T8639] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=25623 sclass=netlink_xfrm_socket pid=8639 comm=syz.6.1477
[  116.968794][ T8644] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  116.983370][ T8644] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002]
[  116.991615][ T8644] EXT4-fs (loop1): failed to initialize system zone (-117)
[  116.999033][ T8644] EXT4-fs (loop1): mount failed
[  117.016792][ T5902] kernel write not supported for file bpf-prog (pid: 5902 comm: kworker/1:10)
[  117.339124][ T8682] netlink: 300 bytes leftover after parsing attributes in process `syz.6.1489'.
[  117.391081][ T8678] net_ratelimit: 34 callbacks suppressed
[  117.391099][ T8678] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  117.421060][ T8691] netlink: 'syz.0.1492': attribute type 29 has an invalid length.
[  117.452886][ T8691] netlink: 'syz.0.1492': attribute type 29 has an invalid length.
[  117.598979][ T8715] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=8715 comm=wg1
[  117.691366][ T8729] SELinux:  policydb version -1411311999 does not match my version range 15-35
[  117.711202][ T8729] SELinux: failed to load policy
[  117.718575][ T8727] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  117.807668][   T29] kauditd_printk_skb: 241 callbacks suppressed
[  117.807685][   T29] audit: type=1326 audit(117.781:3544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.5.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a71af749 code=0x7ffc0000
[  117.841692][   T29] audit: type=1326 audit(117.811:3545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.5.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe4a71af749 code=0x7ffc0000
[  117.863217][ T8743] tipc: Started in network mode
[  117.864788][   T29] audit: type=1326 audit(117.811:3546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.5.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a71af749 code=0x7ffc0000
[  117.869429][ T8743] tipc: Node identity ac1414aa, cluster identity 4711
[  117.892941][   T29] audit: type=1326 audit(117.811:3547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.5.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a71af749 code=0x7ffc0000
[  117.922003][   T29] audit: type=1326 audit(117.811:3548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.5.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4a71af749 code=0x7ffc0000
[  117.945191][   T29] audit: type=1326 audit(117.811:3549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.5.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a71af749 code=0x7ffc0000
[  117.945938][ T8743] tipc: Enabled bearer <udp:s>, priority 10
[  117.968158][   T29] audit: type=1326 audit(117.811:3550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.5.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7fe4a71af749 code=0x7ffc0000
[  117.968195][   T29] audit: type=1326 audit(117.811:3551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.5.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a71af749 code=0x7ffc0000
[  117.968309][   T29] audit: type=1326 audit(117.811:3552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.5.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe4a71af749 code=0x7ffc0000
[  117.968377][   T29] audit: type=1326 audit(117.811:3553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.5.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a71af749 code=0x7ffc0000
[  117.989242][ T8739] netlink: 'syz.5.1513': attribute type 4 has an invalid length.
[  118.124786][ T3508]  loop6: p1 < > p4
[  118.128694][ T3508] loop6: partition table partially beyond EOD, truncated
[  118.137748][ T3508] loop6: p1 start 65535 is beyond EOD, truncated
[  118.144378][ T3508] loop6: p4 size 8388608 extends beyond EOD, truncated
[  118.175128][ T8741]  loop6: p1 < > p4
[  118.179060][ T8741] loop6: partition table partially beyond EOD, truncated
[  118.196518][ T8741] loop6: p1 start 65535 is beyond EOD, truncated
[  118.202956][ T8741] loop6: p4 size 8388608 extends beyond EOD, truncated
[  118.282620][ T3508] udevd[3508]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  118.455393][ T8767] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  118.518439][ T8773] wg1 speed is unknown, defaulting to 1000
[  118.524991][ T8773] ip6_vti0 speed is unknown, defaulting to 1000
[  118.706527][ T8792] xt_hashlimit: max too large, truncated to 1048576
[  118.924747][ T8792]  loop1: p2 < > p4
[  118.929791][ T8792] loop1: p4 size 262144 extends beyond EOD, truncated
[  119.103019][   T36] tipc: Node number set to 2886997162
[  119.200987][ T8810] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  119.442300][ T8831] set_capacity_and_notify: 4 callbacks suppressed
[  119.442316][ T8831] loop1: detected capacity change from 0 to 1024
[  119.481545][ T8831] batman_adv: batadv0: Adding interface: dummy0
[  119.487876][ T8831] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  119.513727][ T8831] batman_adv: batadv0: Interface activated: dummy0
[  119.517009][ T8832] loop6: detected capacity change from 0 to 1024
[  119.531509][ T8832] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  119.544109][ T8832] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  119.555376][ T8832] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  119.570668][ T8839] loop0: detected capacity change from 0 to 512
[  119.575870][ T8831] batadv0: mtu less than device minimum
[  119.583372][ T8831] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  119.583529][ T8839] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  119.594543][ T8831] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  119.612872][ T8832] JBD2: no valid journal superblock found
[  119.615192][ T8831] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  119.620226][ T8832] EXT4-fs (loop6): Could not load journal inode
[  119.624626][ T8839] EXT4-fs (loop0): 1 truncate cleaned up
[  119.631320][ T8831] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  119.650688][ T8840] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt.
[  119.653581][ T8831] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  119.879834][ T8854] loop0: detected capacity change from 0 to 512
[  119.887938][ T8854] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  119.907635][ T8855] loop1: detected capacity change from 0 to 512
[  119.927196][ T8855] EXT4-fs: Ignoring removed nomblk_io_submit option
[  119.943603][ T8854] EXT4-fs (loop0): 1 truncate cleaned up
[  119.944313][ T8855] EXT4-fs: Ignoring removed nomblk_io_submit option
[  119.959652][ T8855] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  119.983549][ T8855] EXT4-fs (loop1): 1 truncate cleaned up
[  120.080900][ T8865] loop6: detected capacity change from 0 to 1024
[  120.146075][ T8875] SELinux: failed to load policy
[  120.156929][ T8875] xt_bpf: check failed: parse error
[  120.160536][ T8865] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt.
[  120.198763][ T7761] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  120.218398][  T827] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  120.234552][  T827] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  120.256674][  T827] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  120.297422][ T8882] loop4: detected capacity change from 0 to 512
[  120.313765][ T8882] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  120.372218][ T8882] EXT4-fs (loop4): 1 truncate cleaned up
[  120.399292][ T8889] loop6: detected capacity change from 0 to 1024
[  120.437639][ T8889] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  120.458729][ T8889] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #3: block 1: comm syz.6.1569: lblock 1 mapped to illegal pblock 1 (length 1)
[  120.479093][ T8889] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.1569: Failed to acquire dquot type 0
[  120.494173][ T8889] EXT4-fs error (device loop6): ext4_free_blocks:6728: comm syz.6.1569: Freeing blocks not in datazone - block = 0, count = 4096
[  120.506767][ T8900] rdma_op ffff88810d225580 conn xmit_rdma 0000000000000000
[  120.515125][ T8889] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.1569: Invalid inode bitmap blk 0 in block_group 0
[  120.528461][   T45] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  120.542803][ T8889] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem
[  120.551880][ T8889] EXT4-fs (loop6): 1 orphan inode deleted
[  120.574199][   T45] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 0
[  120.766422][ T8911] tmpfs: Bad value for 'mpol'
[  120.837482][ T8913] __nla_validate_parse: 8 callbacks suppressed
[  120.837500][ T8913] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1580'.
[  121.829864][ T8938] rdma_op ffff88810d225580 conn xmit_rdma 0000000000000000
[  121.888189][ T8940] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1588'.
[  121.940194][ T8942] netlink: 'syz.1.1589': attribute type 4 has an invalid length.
[  121.977398][ T8942] netlink: 'syz.1.1589': attribute type 4 has an invalid length.
[  122.042390][ T8948] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1592'.
[  122.205711][ T8962] wireguard0: entered promiscuous mode
[  122.211265][ T8962] wireguard0: entered allmulticast mode
[  122.238764][ T8966] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1600'.
[  122.364284][ T8971] loop0: detected capacity change from 0 to 1024
[  122.371437][ T8971] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 not in group (block 5)!
[  122.381504][ T8971] EXT4-fs (loop0): group descriptors corrupted!
[  122.492403][ T8978] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1605'.
[  122.518931][ T8982] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1606'.
[  122.542905][ T8984] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1607'.
[  122.637557][ T8990] loop0: detected capacity change from 0 to 512
[  122.644218][ T8990] EXT4-fs: Ignoring removed oldalloc option
[  122.657199][ T8990] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 217: padding at end of block bitmap is not set
[  122.671936][ T8990] EXT4-fs (loop0): Remounting filesystem read-only
[  122.728374][ T8999] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1613'.
[  122.814054][   T29] kauditd_printk_skb: 758 callbacks suppressed
[  122.814118][   T29] audit: type=1326 audit(122.781:4307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9005 comm="syz.0.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f441c92f749 code=0x7ffc0000
[  122.845571][   T29] audit: type=1326 audit(122.801:4308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9005 comm="syz.0.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441c92f749 code=0x7ffc0000
[  122.868589][   T29] audit: type=1326 audit(122.801:4309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9005 comm="syz.0.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441c92f749 code=0x7ffc0000
[  122.891512][   T29] audit: type=1326 audit(122.821:4310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9005 comm="syz.0.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f441c92f749 code=0x7ffc0000
[  122.914811][   T29] audit: type=1326 audit(122.821:4311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9005 comm="syz.0.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441c92f749 code=0x7ffc0000
[  122.937748][   T29] audit: type=1326 audit(122.821:4312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9005 comm="syz.0.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441c92f749 code=0x7ffc0000
[  122.976754][ T9011] xt_TPROXY: Can be used only with -p tcp or -p udp
[  123.061224][ T9013] xt_hashlimit: size too large, truncated to 1048576
[  123.079632][ T9017] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  123.104034][   T29] audit: type=1326 audit(123.031:4313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9012 comm="syz.0.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441c92f749 code=0x7ffc0000
[  123.127012][   T29] audit: type=1326 audit(123.031:4314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9012 comm="syz.0.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441c92f749 code=0x7ffc0000
[  123.150132][   T29] audit: type=1326 audit(123.031:4315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9012 comm="syz.0.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441c92f749 code=0x7ffc0000
[  123.173643][   T29] audit: type=1326 audit(123.031:4316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9012 comm="syz.0.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441c92f749 code=0x7ffc0000
[  123.198584][ T9017] EXT4-fs (loop6): 1 truncate cleaned up
[  123.300540][ T9023] netlink: 'syz.5.1622': attribute type 29 has an invalid length.
[  123.320626][ T9023] netlink: 'syz.5.1622': attribute type 29 has an invalid length.
[  123.342280][ T9023] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=25623 sclass=netlink_xfrm_socket pid=9023 comm=syz.5.1622
[  123.356682][ T3389] kernel write not supported for file bpf-prog (pid: 3389 comm: kworker/1:3)
[  123.429247][ T9036] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1628'.
[  123.483283][ T9036] batman_adv: batadv0: Interface deactivated: dummy0
[  123.490115][ T9036] batman_adv: batadv0: Removing interface: dummy0
[  123.529966][ T9036] net_ratelimit: 16 callbacks suppressed
[  123.529981][ T9036] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  123.653766][ T9048] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.706142][ T9048] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.743826][ T9052] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  123.758761][ T9052] EXT4-fs (loop1): 1 truncate cleaned up
[  123.767352][ T9048] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.798546][ T9048] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.873550][ T7762] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.900802][ T7762] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.918842][ T7762] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.927387][ T7762] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  124.024640][ T9069] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  124.218034][ T9061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  124.226792][ T9061] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  124.631655][ T9134] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  124.651524][ T9134] EXT4-fs (loop6): 1 truncate cleaned up
[  124.915312][ T9151] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1651'.
[  125.020556][ T9153] set_capacity_and_notify: 5 callbacks suppressed
[  125.020576][ T9153] loop6: detected capacity change from 0 to 512
[  125.071999][ T9151] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  125.237634][ T9173] loop0: detected capacity change from 0 to 512
[  125.262480][ T9173] netlink: 'syz.0.1659': attribute type 29 has an invalid length.
[  125.278529][ T9173] netlink: 'syz.0.1659': attribute type 29 has an invalid length.
[  125.342781][ T9173] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=25623 sclass=netlink_xfrm_socket pid=9173 comm=syz.0.1659
[  125.363839][ T3407] kernel write not supported for file bpf-prog (pid: 3407 comm: kworker/0:4)
[  125.379094][ T9179] loop4: detected capacity change from 0 to 128
[  125.395274][ T9175] wg1 speed is unknown, defaulting to 1000
[  125.401571][ T9175] ip6_vti0 speed is unknown, defaulting to 1000
[  125.438075][ T9183] loop1: detected capacity change from 0 to 512
[  125.475976][ T9183] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  125.485495][ T9183] EXT4-fs (loop1): 1 truncate cleaned up
[  125.553474][ T9178] FAULT_INJECTION: forcing a failure.
[  125.553474][ T9178] name failslab, interval 1, probability 0, space 0, times 0
[  125.566397][ T9178] CPU: 0 UID: 0 PID: 9178 Comm: syz.1.1660 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  125.566422][ T9178] Tainted: [W]=WARN
[  125.566426][ T9178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  125.566432][ T9178] Call Trace:
[  125.566435][ T9178]  <TASK>
[  125.566439][ T9178]  __dump_stack+0x1d/0x30
[  125.566453][ T9178]  dump_stack_lvl+0x95/0xd0
[  125.566464][ T9178]  dump_stack+0x15/0x1b
[  125.566543][ T9178]  should_fail_ex+0x265/0x280
[  125.566621][ T9178]  should_failslab+0x8c/0xb0
[  125.566668][ T9178]  kmem_cache_alloc_node_noprof+0x6b/0x4c0
[  125.566681][ T9178]  ? __alloc_skb+0x2ff/0x4b0
[  125.566694][ T9178]  __alloc_skb+0x2ff/0x4b0
[  125.566785][ T9178]  ? __alloc_skb+0x228/0x4b0
[  125.566798][ T9178]  netlink_alloc_large_skb+0xbf/0xf0
[  125.566813][ T9178]  netlink_sendmsg+0x3cf/0x6b0
[  125.566905][ T9178]  ? __pfx_netlink_sendmsg+0x10/0x10
[  125.566963][ T9178]  __sock_sendmsg+0x145/0x180
[  125.566973][ T9178]  ____sys_sendmsg+0x31e/0x4a0
[  125.566988][ T9178]  ___sys_sendmsg+0x17b/0x1d0
[  125.567081][ T9178]  __x64_sys_sendmsg+0xd4/0x160
[  125.567140][ T9178]  x64_sys_call+0x17ba/0x3000
[  125.567152][ T9178]  do_syscall_64+0xca/0x2b0
[  125.567169][ T9178]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.567198][ T9178] RIP: 0033:0x7fe9abf1f749
[  125.567288][ T9178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  125.567298][ T9178] RSP: 002b:00007fe9aa97f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  125.567310][ T9178] RAX: ffffffffffffffda RBX: 00007fe9ac175fa0 RCX: 00007fe9abf1f749
[  125.567316][ T9178] RDX: 0000000004040000 RSI: 0000200000000100 RDI: 0000000000000010
[  125.567323][ T9178] RBP: 00007fe9aa97f090 R08: 0000000000000000 R09: 0000000000000000
[  125.567330][ T9178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  125.567336][ T9178] R13: 00007fe9ac176038 R14: 00007fe9ac175fa0 R15: 00007ffd51b18a88
[  125.567428][ T9178]  </TASK>
[  125.862264][ T9195] IPVS: Error connecting to the multicast addr
[  125.956156][ T9204] __nla_validate_parse: 2 callbacks suppressed
[  125.956173][ T9204] netlink: 60 bytes leftover after parsing attributes in process `wg1'.
[  125.970866][ T9204] netlink: 60 bytes leftover after parsing attributes in process `wg1'.
[  126.093195][ T9204] netlink: 60 bytes leftover after parsing attributes in process `wg1'.
[  126.101609][ T9204] netlink: 60 bytes leftover after parsing attributes in process `wg1'.
[  126.159854][ T9204] netlink: 60 bytes leftover after parsing attributes in process `wg1'.
[  126.168289][ T9204] netlink: 60 bytes leftover after parsing attributes in process `wg1'.
[  126.277635][ T9221] loop0: detected capacity change from 0 to 512
[  126.285954][ T9221] EXT4-fs: Ignoring removed nobh option
[  126.293580][ T9221] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e118, mo2=0002]
[  126.314145][ T9221] System zones: 1-12
[  126.325580][ T9221] EXT4-fs (loop0): orphan cleanup on readonly fs
[  126.367194][ T9221] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  126.404194][ T9221] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.1676: corrupted inode contents
[  126.536421][ T9221] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.1676: mark_inode_dirty error
[  126.622202][ T9227] wg1 speed is unknown, defaulting to 1000
[  126.628799][ T9227] ip6_vti0 speed is unknown, defaulting to 1000
[  126.822008][ T9221] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.1676: corrupted inode contents
[  126.881025][ T9221] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3000: inode #15: comm syz.0.1676: mark_inode_dirty error
[  127.028156][ T9221] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #15: comm syz.0.1676: mark inode dirty (error -117)
[  127.054535][ T9233] loop4: detected capacity change from 0 to 512
[  127.068154][ T9221] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117)
[  127.098117][ T9233] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  127.114269][ T9221] EXT4-fs (loop0): 1 orphan inode deleted
[  127.126987][ T9233] EXT4-fs (loop4): 1 truncate cleaned up
[  127.135382][ T9221] EXT4-fs mount: 95 callbacks suppressed
[  127.135398][ T9221] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  127.155089][ T9233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.313769][ T9244] loop6: detected capacity change from 0 to 512
[  127.325715][ T9244] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  127.345949][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.351434][ T9244] netlink: 'syz.6.1680': attribute type 29 has an invalid length.
[  127.372099][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.392955][ T9247] syzkaller0: entered promiscuous mode
[  127.398615][ T9247] syzkaller0: entered allmulticast mode
[  127.419517][ T9248] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=25623 sclass=netlink_xfrm_socket pid=9248 comm=syz.6.1680
[  127.446674][ T9250] rdma_op ffff88815cf76180 conn xmit_rdma 0000000000000000
[  127.490097][ T9244] netlink: 'syz.6.1680': attribute type 29 has an invalid length.
[  127.537812][ T3407] kernel write not supported for file bpf-prog (pid: 3407 comm: kworker/0:4)
[  127.559930][ T4869] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.632602][ T9260] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1687'.
[  127.712203][ T9269] loop4: detected capacity change from 0 to 1024
[  127.778935][ T9275] loop6: detected capacity change from 0 to 512
[  127.832333][ T9275] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  127.855035][ T9285] loop0: detected capacity change from 0 to 2048
[  127.862036][ T9269] EXT4-fs: Ignoring removed orlov option
[  127.869968][ T9275] EXT4-fs (loop6): 1 truncate cleaned up
[  127.879619][ T9275] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.892796][ T9269] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.909155][ T9282] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  127.922558][ T4745] Alternate GPT is invalid, using primary GPT.
[  127.928910][ T4745]  loop0: p1 p2 p3
[  127.935257][ T9282] netlink: 'syz.1.1695': attribute type 29 has an invalid length.
[  127.944805][ T9282] netlink: 'syz.1.1695': attribute type 29 has an invalid length.
[  127.945756][ T9285] Alternate GPT is invalid, using primary GPT.
[  127.958946][ T9285]  loop0: p1 p2 p3
[  127.970125][ T9282] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=25623 sclass=netlink_xfrm_socket pid=9282 comm=syz.1.1695
[  127.999579][ T3407] kernel write not supported for file bpf-prog (pid: 3407 comm: kworker/0:4)
[  128.010564][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.056020][ T4869] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.066206][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.147193][ T9304] xt_TPROXY: Can be used only with -p tcp or -p udp
[  128.180162][ T3508] udevd[3508]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  128.185704][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  128.193896][ T9306] udevd[9306]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  128.269513][ T9308] FAULT_INJECTION: forcing a failure.
[  128.269513][ T9308] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  128.282917][ T9308] CPU: 1 UID: 0 PID: 9308 Comm: syz.0.1703 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  128.282950][ T9308] Tainted: [W]=WARN
[  128.282957][ T9308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  128.283047][ T9308] Call Trace:
[  128.283053][ T9308]  <TASK>
[  128.283060][ T9308]  __dump_stack+0x1d/0x30
[  128.283084][ T9308]  dump_stack_lvl+0x95/0xd0
[  128.283106][ T9308]  dump_stack+0x15/0x1b
[  128.283164][ T9308]  should_fail_ex+0x265/0x280
[  128.283193][ T9308]  should_fail_alloc_page+0xf2/0x100
[  128.283222][ T9308]  __alloc_frozen_pages_noprof+0x109/0x360
[  128.283299][ T9308]  alloc_pages_mpol+0xb3/0x260
[  128.283412][ T9308]  vma_alloc_folio_noprof+0x1aa/0x300
[  128.283446][ T9308]  do_wp_page+0xf60/0x2510
[  128.283547][ T9308]  ? css_rstat_updated+0xbb/0x280
[  128.283571][ T9308]  ? __rcu_read_lock+0x37/0x50
[  128.283626][ T9308]  handle_mm_fault+0x7b0/0x2c60
[  128.283682][ T9308]  ? __rcu_read_unlock+0x4f/0x70
[  128.283707][ T9308]  ? mt_find+0x21b/0x330
[  128.283739][ T9308]  do_user_addr_fault+0x3fe/0x1080
[  128.283831][ T9308]  exc_page_fault+0x62/0xa0
[  128.283943][ T9308]  asm_exc_page_fault+0x26/0x30
[  128.283978][ T9308] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  128.284004][ T9308] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 e9 7f 17 02 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[  128.284024][ T9308] RSP: 0018:ffffc90003ddf9a0 EFLAGS: 00050206
[  128.284090][ T9308] RAX: ffff88810920bc10 RBX: ffff8881583800c8 RCX: 0000000000008510
[  128.284106][ T9308] RDX: 0000000000000000 RSI: ffff888158387d88 RDI: 0000200000008000
[  128.284122][ T9308] RBP: 0000200000000340 R08: 0000000000000158 R09: 0000000000000000
[  128.284141][ T9308] R10: 00018881583800c8 R11: 0001888158390297 R12: 0000200000010510
[  128.284153][ T9308] R13: ffffc90003ddfe70 R14: 00000000000101d0 R15: 00007ffffffff000
[  128.284174][ T9308]  _copy_to_iter+0x141/0xe70
[  128.284202][ T9308]  ? should_fail_ex+0x30/0x280
[  128.284240][ T9308]  ? _raw_spin_lock_bh+0x56/0xb0
[  128.284267][ T9308]  ? _raw_spin_unlock_bh+0x36/0x40
[  128.284357][ T9308]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  128.284393][ T9308]  __skb_datagram_iter+0xc6/0x690
[  128.284424][ T9308]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  128.284452][ T9308]  skb_copy_datagram_iter+0x3d/0x110
[  128.284522][ T9308]  tipc_recvstream+0x4d7/0x780
[  128.284637][ T9308]  ? __pfx_tipc_recvstream+0x10/0x10
[  128.284673][ T9308]  sock_recvmsg+0x139/0x170
[  128.284699][ T9308]  ____sys_recvmsg+0xf5/0x280
[  128.284790][ T9308]  ___sys_recvmsg+0x11f/0x370
[  128.284827][ T9308]  __x64_sys_recvmsg+0xd1/0x160
[  128.284920][ T9308]  x64_sys_call+0x2cbf/0x3000
[  128.284945][ T9308]  do_syscall_64+0xca/0x2b0
[  128.284984][ T9308]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.285010][ T9308] RIP: 0033:0x7f441c92f749
[  128.285090][ T9308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  128.285112][ T9308] RSP: 002b:00007f441b38f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  128.285183][ T9308] RAX: ffffffffffffffda RBX: 00007f441cb85fa0 RCX: 00007f441c92f749
[  128.285237][ T9308] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005
[  128.285332][ T9308] RBP: 00007f441b38f090 R08: 0000000000000000 R09: 0000000000000000
[  128.285367][ T9308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  128.285379][ T9308] R13: 00007f441cb86038 R14: 00007f441cb85fa0 R15: 00007ffc0d3e8ea8
[  128.285413][ T9308]  </TASK>
[  128.686963][ T9315] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  128.700487][ T9310] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  128.715286][ T3508] udevd[3508]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  128.763361][ T3510] udevd[3510]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  128.775053][ T9315] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  128.838910][ T4869] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.931744][ T9329] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.993531][ T9334] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1713'.
[  129.008458][ T9334] batman_adv: batadv0: Interface deactivated: dummy0
[  129.015372][ T9334] batman_adv: batadv0: Removing interface: dummy0
[  129.027818][ T9334] bridge_slave_0: left promiscuous mode
[  129.033652][ T9334] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.051368][ T9334] bridge_slave_1: left allmulticast mode
[  129.057166][ T9334] bridge_slave_1: left promiscuous mode
[  129.062866][ T9334] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.076254][ T9336] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  129.116521][ T9334] bond0: (slave bond_slave_0): Releasing backup interface
[  129.136429][ T9343] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=25623 sclass=netlink_xfrm_socket pid=9343 comm=syz.1.1711
[  129.136560][ T9334] bond0: (slave bond_slave_1): Releasing backup interface
[  129.167438][ T3407] kernel write not supported for file bpf-prog (pid: 3407 comm: kworker/0:4)
[  129.177431][ T9336] EXT4-fs (loop6): 1 truncate cleaned up
[  129.183503][ T9336] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  129.223481][ T9334] team0: Port device team_slave_0 removed
[  129.235494][ T9334] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  129.242929][ T9334] batman_adv: batadv0: Removing interface: batadv_slave_0
[  129.245454][ T9347] xt_hashlimit: max too large, truncated to 1048576
[  129.258413][ T9334] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  129.264470][ T9347] xt_CT: You must specify a L4 protocol and not use inversions on it
[  129.266069][ T9334] batman_adv: batadv0: Removing interface: batadv_slave_1
[  129.297504][ T4869] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.311316][ T9334] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  129.350443][   T29] kauditd_printk_skb: 510 callbacks suppressed
[  129.350462][   T29] audit: type=1326 audit(129.321:4827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9352 comm="syz.6.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6139df749 code=0x7ffc0000
[  129.359123][ T9329] netlink: 'syz.1.1711': attribute type 29 has an invalid length.
[  129.382545][   T29] audit: type=1326 audit(129.321:4828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9352 comm="syz.6.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6139df749 code=0x7ffc0000
[  129.389026][ T9351] wg1 speed is unknown, defaulting to 1000
[  129.410399][   T29] audit: type=1326 audit(129.321:4829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9352 comm="syz.6.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6139df749 code=0x7ffc0000
[  129.425202][ T9351] ip6_vti0 speed is unknown, defaulting to 1000
[  129.438994][   T29] audit: type=1326 audit(129.321:4830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9352 comm="syz.6.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6139df749 code=0x7ffc0000
[  129.452040][ T9340] netlink: 'syz.1.1711': attribute type 29 has an invalid length.
[  129.468440][   T29] audit: type=1326 audit(129.321:4831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9352 comm="syz.6.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc6139df749 code=0x7ffc0000
[  129.468507][   T29] audit: type=1326 audit(129.321:4832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9352 comm="syz.6.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6139df749 code=0x7ffc0000
[  129.522048][   T29] audit: type=1326 audit(129.321:4833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9352 comm="syz.6.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6139df749 code=0x7ffc0000
[  129.544924][   T29] audit: type=1326 audit(129.321:4834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9352 comm="syz.6.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6139df749 code=0x7ffc0000
[  129.568144][   T29] audit: type=1326 audit(129.321:4835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9352 comm="syz.6.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6139df749 code=0x7ffc0000
[  129.591089][   T29] audit: type=1326 audit(129.321:4836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9352 comm="syz.6.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc6139df749 code=0x7ffc0000
[  129.613123][ T9349] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  129.627389][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.667217][    T9] !yz!: Port: 1 Link DOWN
[  129.700031][ T9353] vhci_hcd vhci_hcd.2: invalid port number 96
[  129.706256][ T9353] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[  129.745222][ T9366] EXT4-fs (loop4): orphan cleanup on readonly fs
[  129.752959][ T3315] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[  129.755290][ T9366] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1722: Failed to acquire dquot type 1
[  129.783722][ T9366] EXT4-fs (loop4): 1 truncate cleaned up
[  129.790289][ T9366] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  129.813149][ T3315] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  129.835051][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.886678][ T9371] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1725'.
[  129.889524][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.031859][ T9381] set_capacity_and_notify: 8 callbacks suppressed
[  130.031876][ T9381] loop6: detected capacity change from 0 to 512
[  130.054346][ T9386] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1730'.
[  130.074842][ T9381] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  130.090777][ T9388] 9p: Bad value for 'dfltuid'
[  130.095802][ T9388] 9p: Bad value for 'dfltuid'
[  130.133860][ T9381] EXT4-fs (loop6): 1 truncate cleaned up
[  130.154454][ T9381] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.246563][ T9392] wg1 speed is unknown, defaulting to 1000
[  130.262935][ T9392] ip6_vti0 speed is unknown, defaulting to 1000
[  130.309649][ T4869] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.441728][ T9405] xt_TPROXY: Can be used only with -p tcp or -p udp
[  130.673783][ T9420] ------------[ cut here ]------------
[  130.679459][ T9420] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0x0, 0x0] s64=[0x0, 0x0] u32=[0x80632f4, 0x0] s32=[0x0, 0x0] var_off=(0x0, 0x0)
[  130.695893][ T9420] WARNING: kernel/bpf/verifier.c:2748 at reg_bounds_sanity_check+0x15b/0x660, CPU#1: syz.5.1741/9420
[  130.706927][ T9420] Modules linked in:
[  130.710838][ T9420] CPU: 1 UID: 0 PID: 9420 Comm: syz.5.1741 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  130.722270][ T9420] Tainted: [W]=WARN
[  130.726104][ T9420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  130.736206][ T9420] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660
[  130.742667][ T9420] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08
[  130.762640][ T9420] RSP: 0018:ffffc900014bf3a0 EFLAGS: 00010246
[  130.768773][ T9420] RAX: ffff88811aa4ab90 RBX: 0000000000000000 RCX: 0000000000000000
[  130.776798][ T9420] RDX: ffffffff865fbb8f RSI: ffffffff864c61a3 RDI: ffffffff86db6c00
[  130.784928][ T9420] RBP: ffff888119b252e0 R08: 0000000000000000 R09: 0000000000000000
[  130.792923][ T9420] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888119b252a0
[  130.800944][ T9420] R13: 0000000000000000 R14: ffff888119b252ec R15: ffff888119b252d8
[  130.809017][ T9420] FS:  00007fe4a5b896c0(0000) GS:ffff8882aeec5000(0000) knlGS:0000000000000000
[  130.818024][ T9420] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  130.824670][ T9420] CR2: 00007fe9aa95df98 CR3: 0000000152b94000 CR4: 00000000003506f0
[  130.832672][ T9420] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  130.840810][ T9420] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  130.848849][ T9420] Call Trace:
[  130.852154][ T9420]  <TASK>
[  130.855133][ T9420]  reg_set_min_max+0x1c8/0x260
[  130.860092][ T9420]  check_cond_jmp_op+0x13bd/0x1a80
[  130.865319][ T9420]  do_check+0x3347/0x81f0
[  130.869701][ T9420]  do_check_common+0xccf/0x1300
[  130.874744][ T9420]  bpf_check+0x2f98/0xc860
[  130.879203][ T9420]  ? __alloc_frozen_pages_noprof+0x18f/0x360
[  130.885271][ T9420]  ? alloc_pages_bulk_noprof+0x4b9/0x540
[  130.890966][ T9420]  ? __vmap_pages_range_noflush+0xbc4/0xcf0
[  130.896932][ T9420]  ? css_rstat_updated+0xbb/0x280
[  130.901994][ T9420]  ? try_charge_memcg+0x215/0xa10
[  130.907061][ T9420]  ? _find_next_zero_bit+0x64/0xa0
[  130.912209][ T9420]  ? pcpu_block_refresh_hint+0x10b/0x170
[  130.917902][ T9420]  ? pcpu_block_refresh_hint+0x10b/0x170
[  130.923559][ T9420]  ? pcpu_block_update_hint_alloc+0x63d/0x660
[  130.929700][ T9420]  ? css_rstat_updated+0xbb/0x280
[  130.934782][ T9420]  ? mod_memcg_state+0x182/0x270
[  130.939836][ T9420]  ? __rcu_read_unlock+0x4f/0x70
[  130.944896][ T9420]  ? pcpu_memcg_post_alloc_hook+0xec/0x170
[  130.950729][ T9420]  ? bpf_prog_alloc+0x5b/0x150
[  130.955546][ T9420]  ? pcpu_alloc_noprof+0xd0d/0x1240
[  130.960845][ T9420]  ? should_fail_ex+0x30/0x280
[  130.965682][ T9420]  ? __kmalloc_noprof+0x2b4/0x5a0
[  130.970741][ T9420]  ? security_bpf_prog_load+0x60/0x140
[  130.976268][ T9420]  ? selinux_bpf_prog_load+0xad/0xd0
[  130.981653][ T9420]  ? security_bpf_prog_load+0x9e/0x140
[  130.987181][ T9420]  bpf_prog_load+0xf6e/0x1140
[  130.991889][ T9420]  ? security_bpf+0x2b/0x90
[  130.996574][ T9420]  __sys_bpf+0x469/0x7c0
[  131.000847][ T9420]  __x64_sys_bpf+0x41/0x50
[  131.005338][ T9420]  x64_sys_call+0x28e1/0x3000
[  131.010044][ T9420]  do_syscall_64+0xca/0x2b0
[  131.014639][ T9420]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.020555][ T9420] RIP: 0033:0x7fe4a71af749
[  131.025020][ T9420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  131.044739][ T9420] RSP: 002b:00007fe4a5b89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  131.053176][ T9420] RAX: ffffffffffffffda RBX: 00007fe4a7406090 RCX: 00007fe4a71af749
[  131.061210][ T9420] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[  131.069248][ T9420] RBP: 00007fe4a7233f91 R08: 0000000000000000 R09: 0000000000000000
[  131.077254][ T9420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  131.085344][ T9420] R13: 00007fe4a7406128 R14: 00007fe4a7406090 R15: 00007ffea304a848
[  131.093456][ T9420]  </TASK>
[  131.096525][ T9420] ---[ end trace 0000000000000000 ]---
[  131.153134][ T9424] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  131.169438][ T9413] IPVS: Error connecting to the multicast addr
[  131.224752][ T9433] loop4: detected capacity change from 0 to 512
[  131.236521][ T9437] __nla_validate_parse: 6 callbacks suppressed
[  131.236538][ T9437] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1748'.
[  131.288021][ T9439] loop6: detected capacity change from 0 to 512
[  131.298834][ T9433] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.318643][ T9439] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.1749: corrupted in-inode xattr: invalid ea_ino
[  131.341415][ T9433] netlink: 'syz.4.1746': attribute type 29 has an invalid length.
[  131.350311][ T9439] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1749: couldn't read orphan inode 15 (err -117)
[  131.378726][ T9433] netlink: 'syz.4.1746': attribute type 29 has an invalid length.
[  131.407935][ T9439] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.560300][ T9433] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=25623 sclass=netlink_xfrm_socket pid=9433 comm=syz.4.1746
[  131.602535][ T9447] loop1: detected capacity change from 0 to 128
[  131.611069][ T9445] loop0: detected capacity change from 0 to 1024
[  131.624956][ T9447] EXT4-fs: test_dummy_encryption option not supported
[  131.637380][ T3297] udevd[3297]: incorrect ext4 checksum on /dev/loop1
[  131.647498][ T9445] EXT4-fs: Ignoring removed bh option
[  131.663256][ T5902] kernel write not supported for file bpf-prog (pid: 5902 comm: kworker/1:10)
[  131.816682][ T9445] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  131.866375][ T9449] netlink: 'syz.1.1750': attribute type 1 has an invalid length.
[  131.874643][ T9445] EXT4-fs (loop0): can't mount with commit=, fs mounted w/o journal
[  131.895257][ T4869] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.926171][ T9453] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1752'.
[  131.935286][ T9453] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1752'.
[  131.946211][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.004655][ T9459] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1753'.
[  132.147533][ T9471] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1759'.
[  132.182443][ T9471] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  132.216825][ T9475] ªªªªªª: renamed from vlan0 (while UP)
[  132.245444][ T9480] xt_recent: hitcount (16777216) is larger than allowed maximum (65535)
[  132.282248][ T9484] loop4: detected capacity change from 0 to 512
[  132.319139][ T9484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.346453][ T9484] netlink: 'syz.4.1763': attribute type 29 has an invalid length.
[  132.355303][ T9484] netlink: 'syz.4.1763': attribute type 29 has an invalid length.
[  132.366938][ T9484] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=25623 sclass=netlink_xfrm_socket pid=9484 comm=syz.4.1763
[  132.385063][ T5902] kernel write not supported for file bpf-prog (pid: 5902 comm: kworker/1:10)
[  132.412148][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.442437][ T9493] loop6: detected capacity change from 0 to 128
[  132.524466][ T9504] rdma_op ffff88811984fd80 conn xmit_rdma 0000000000000000
[  132.557657][ T9508] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1768'.
[  132.615520][ T9507] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  132.711815][ T9516] wg1 speed is unknown, defaulting to 1000
[  132.730401][ T9516] ip6_vti0 speed is unknown, defaulting to 1000
[  132.811125][ T9525] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1776'.
[  133.058507][ T9538] SELinux: failed to load policy
[  133.067429][ T9535] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1782'.
[  133.722470][ T9550] loop4: detected capacity change from 0 to 1024
[  133.765710][ T9563] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1789'.
[  133.794801][ T9550] EXT4-fs: Ignoring removed oldalloc option
[  133.831485][ T9563] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  133.881360][ T9550] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.897339][ T9571] loop0: detected capacity change from 0 to 512
[  133.966347][ T9571] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.979730][ T9550] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: comm syz.4.1777: lblock 0 mapped to illegal pblock 0 (length 1)
[  134.014021][ T9550] EXT4-fs (loop4): Remounting filesystem read-only
[  134.020733][ T9582] loop6: detected capacity change from 0 to 512
[  134.047834][ T9584] x_tables: ip_tables: osf match: only valid for protocol 6
[  134.059576][ T9571] syzkaller1: entered promiscuous mode
[  134.065203][ T9571] syzkaller1: entered allmulticast mode
[  134.071489][ T9582] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  134.137883][ T9582] EXT4-fs (loop6): 1 truncate cleaned up
[  134.148813][ T9582] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  134.227259][ T9587] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #21: comm syz.0.1791: corrupted inode contents
[  134.249132][ T9587] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #21: comm syz.0.1791: mark_inode_dirty error
[  134.275536][ T9587] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #21: comm syz.0.1791: corrupted inode contents
[  134.287969][ T9587] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3000: inode #21: comm syz.0.1791: mark_inode_dirty error
[  134.300516][ T9587] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #21: comm syz.0.1791: mark inode dirty (error -117)
[  134.322726][ T9587] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117)
[  134.353477][ T3315] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816
[  134.372374][ T3315] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816
[  134.398502][ T4869] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.477513][ T9592] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.483402][ T9605] SELinux:  policydb version -1411311999 does not match my version range 15-35
[  134.525688][ T9605] SELinux: failed to load policy
[  134.637518][ T9102] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.720462][ T9102] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.818039][ T9102] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.036886][ T9643] loop1: detected capacity change from 0 to 128
[  135.061526][ T9102] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.072050][ T9643] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  135.172035][ T9654] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6)
[  135.175556][ T9635] wg1 speed is unknown, defaulting to 1000
[  135.178583][ T9654] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  135.184956][ T9635] ip6_vti0 speed is unknown, defaulting to 1000
[  135.192137][ T9654] vhci_hcd vhci_hcd.0: Device attached
[  135.212060][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  135.316089][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  135.362232][ T9659] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1816'.
[  135.377752][    T9] vhci_hcd vhci_hcd.6: vhci_device speed not set
[  135.454479][    T9] usb 13-1: new full-speed USB device number 2 using vhci_hcd
[  135.529061][ T9667] loop1: detected capacity change from 0 to 512
[  135.557365][ T9667] EXT4-fs: Ignoring removed i_version option
[  135.563618][ T9667] EXT4-fs: Ignoring removed bh option
[  135.620265][ T9667] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.650727][   T29] kauditd_printk_skb: 220 callbacks suppressed
[  135.650743][   T29] audit: type=1326 audit(135.621:5055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9671 comm="syz.4.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff443e5f749 code=0x7ffc0000
[  135.679832][   T29] audit: type=1326 audit(135.621:5056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9671 comm="syz.4.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff443e5f749 code=0x7ffc0000
[  135.702804][   T29] audit: type=1326 audit(135.621:5057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9671 comm="syz.4.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff443e5f749 code=0x7ffc0000
[  135.725705][   T29] audit: type=1326 audit(135.621:5058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9671 comm="syz.4.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff443e5f749 code=0x7ffc0000
[  135.750904][   T29] audit: type=1326 audit(135.621:5059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9671 comm="syz.4.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff443e5f749 code=0x7ffc0000
[  135.773895][   T29] audit: type=1326 audit(135.621:5060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9671 comm="syz.4.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff443e5f749 code=0x7ffc0000
[  135.784052][ T9655] vhci_hcd: connection reset by peer
[  135.796788][   T29] audit: type=1326 audit(135.621:5061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9671 comm="syz.4.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff443e5f749 code=0x7ffc0000
[  135.825126][   T29] audit: type=1326 audit(135.621:5062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9671 comm="syz.4.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff443e5f749 code=0x7ffc0000
[  135.835435][ T9114] vhci_hcd vhci_hcd.6: stop threads
[  135.848000][   T29] audit: type=1326 audit(135.631:5063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9671 comm="syz.4.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff443e5f749 code=0x7ffc0000
[  135.853190][ T9114] vhci_hcd vhci_hcd.6: release socket
[  135.853221][ T9114] vhci_hcd vhci_hcd.6: disconnect device
[  135.887804][   T29] audit: type=1326 audit(135.631:5064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9671 comm="syz.4.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff443e5f749 code=0x7ffc0000
[  135.913044][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.919664][ T9675] loop4: detected capacity change from 0 to 512
[  135.960635][ T9675] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.110411][ T9685] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=25623 sclass=netlink_xfrm_socket pid=9685 comm=syz.4.1823
[  136.126535][ T3407] kernel write not supported for file bpf-prog (pid: 3407 comm: kworker/0:4)
[  136.338580][ T9689] loop6: detected capacity change from 0 to 512
[  136.345739][ T9689] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  136.357677][ T9102] bond0 (unregistering): Released all slaves
[  136.365388][ T9689] EXT4-fs (loop6): 1 truncate cleaned up
[  136.367654][ T9102] bond1 (unregistering): Released all slaves
[  136.383909][ T9689] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  136.405348][ T9675] netlink: 'syz.4.1823': attribute type 29 has an invalid length.
[  136.424751][ T9687] wireguard0: entered promiscuous mode
[  136.430354][ T9687] wireguard0: entered allmulticast mode
[  136.448131][ T9684] netlink: 'syz.4.1823': attribute type 29 has an invalid length.
[  136.462239][ T4869] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.474639][ T9102] tipc: Disabling bearer <udp:s>
[  136.479650][ T9102] tipc: Left network mode
[  136.485510][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.521910][ T9695] __nla_validate_parse: 1 callbacks suppressed
[  136.521928][ T9695] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1827'.
[  136.552350][ T9694] loop6: detected capacity change from 0 to 128
[  136.561269][ T9694] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  136.723317][ T4869] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  136.732614][ T9102] hsr_slave_0: left promiscuous mode
[  136.745355][ T9102] hsr_slave_1: left promiscuous mode
[  136.761648][ T9102] veth1_macvtap: left promiscuous mode
[  136.797769][ T9102] veth0_macvtap: left promiscuous mode
[  136.834650][ T9102] veth1_vlan: left promiscuous mode
[  136.840032][ T9102] veth0_vlan: left promiscuous mode
[  136.970007][ T9718] loop6: detected capacity change from 0 to 1024
[  136.992059][ T9718] EXT4-fs: Mount option(s) incompatible with ext2
[  137.112984][ T9717] ip6tnl1: entered promiscuous mode
[  137.118462][ T9717] ip6tnl1: entered allmulticast mode
[  137.140163][ T9635] chnl_net:caif_netlink_parms(): no params data found
[  137.181528][ T9730] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  137.207389][ T9732] loop4: detected capacity change from 0 to 512
[  137.224359][ T9732] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  137.286120][ T9740] sg_write: data in/out 178/8 bytes for SCSI command 0xfe-- guessing data in;
[  137.286120][ T9740]    program syz.6.1840 not setting count and/or reply_len properly
[  137.305193][ T9740] netlink: 124 bytes leftover after parsing attributes in process `syz.6.1840'.
[  137.313438][ T9732] EXT4-fs (loop4): 1 truncate cleaned up
[  137.314369][ T9740] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1840'.
[  137.323479][ T9732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.344602][ T9635] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.351706][ T9635] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.367390][ T9635] bridge_slave_0: entered allmulticast mode
[  137.375345][ T9635] bridge_slave_0: entered promiscuous mode
[  137.383381][ T9635] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.390610][ T9635] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.399470][ T9635] bridge_slave_1: entered allmulticast mode
[  137.406251][ T9635] bridge_slave_1: entered promiscuous mode
[  137.431200][ T9754] loop6: detected capacity change from 0 to 512
[  137.470603][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.488363][ T9635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  137.506407][ T9635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  137.581758][ T9762] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1843'.
[  137.607278][ T9635] team0: Port device team_slave_0 added
[  137.620399][ T9635] team0: Port device team_slave_1 added
[  137.732019][ T9635] batman_adv: batadv0: Adding interface: batadv_slave_0
[  137.739201][ T9635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  137.765205][ T9635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  137.850874][ T9776] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  137.881673][ T9635] batman_adv: batadv0: Adding interface: batadv_slave_1
[  137.888734][ T9635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  137.914770][ T9635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  137.978454][ T9635] hsr_slave_0: entered promiscuous mode
[  137.997221][ T9635] hsr_slave_1: entered promiscuous mode
[  138.063593][ T9787] netlink: 'syz.5.1850': attribute type 13 has an invalid length.
[  138.071505][ T9787] netlink: 'syz.5.1850': attribute type 27 has an invalid length.
[  138.139947][ T9789] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  138.173546][ T9789] SELinux: failed to load policy
[  138.226645][ T9795] netlink: 'syz.4.1854': attribute type 2 has an invalid length.
[  138.258217][ T9795] bond5 (unregistering): Released all slaves
[  138.266825][ T9790] loop1: detected capacity change from 0 to 256
[  138.286394][ T9799] netlink: 'syz.5.1855': attribute type 29 has an invalid length.
[  138.305465][ T9635] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  138.315502][ T9799] netlink: 'syz.5.1855': attribute type 29 has an invalid length.
[  138.323600][ T9635] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  138.333419][ T9635] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  138.343830][ T9635] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  138.389624][ T9799] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=25623 sclass=netlink_xfrm_socket pid=9799 comm=syz.5.1855
[  138.396420][ T9635] 8021q: adding VLAN 0 to HW filter on device bond0
[  138.414694][ T9807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  138.431428][ T9790] FAT-fs (loop1): Directory bread(block 64) failed
[  138.441464][ T4314] kernel write not supported for file bpf-prog (pid: 4314 comm: kworker/1:8)
[  138.452237][ T9635] 8021q: adding VLAN 0 to HW filter on device team0
[  138.455627][ T9807] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  138.469514][ T9114] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.476639][ T9114] bridge0: port 1(bridge_slave_0) entered forwarding state
[  138.494767][ T9790] FAT-fs (loop1): Directory bread(block 65) failed
[  138.512762][ T9114] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.519857][ T9114] bridge0: port 2(bridge_slave_1) entered forwarding state
[  138.532014][ T9790] FAT-fs (loop1): Directory bread(block 66) failed
[  138.540511][ T9790] FAT-fs (loop1): Directory bread(block 67) failed
[  138.550628][ T9790] FAT-fs (loop1): Directory bread(block 68) failed
[  138.570652][ T9790] FAT-fs (loop1): Directory bread(block 69) failed
[  138.586526][ T9790] FAT-fs (loop1): Directory bread(block 70) failed
[  138.593155][ T9790] FAT-fs (loop1): Directory bread(block 71) failed
[  138.618231][ T9815] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  138.639020][ T9790] FAT-fs (loop1): Directory bread(block 72) failed
[  138.659447][ T9790] FAT-fs (loop1): Directory bread(block 73) failed
[  138.687921][ T9819] loop4: detected capacity change from 0 to 128
[  138.716757][ T9819] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  138.787754][ T9635] 8021q: adding VLAN 0 to HW filter on device batadv0
[  138.860544][ T9832] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  138.939328][ T9838] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  138.957080][ T9838] EXT4-fs (loop1): invalid journal inode
[  138.962902][ T9838] EXT4-fs (loop1): can't get journal size
[  138.970238][ T9838] EXT4-fs (loop1): 1 truncate cleaned up
[  138.977053][ T9838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.999894][ T9838] syzkaller0: entered allmulticast mode
[  139.013075][ T9838] syzkaller0 (unregistering): left allmulticast mode
[  139.039011][ T9847] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1865'.
[  139.077627][ T9635] veth0_vlan: entered promiscuous mode
[  139.091073][ T9635] veth1_vlan: entered promiscuous mode
[  139.118182][ T9635] veth0_macvtap: entered promiscuous mode
[  139.128234][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.131921][ T9635] veth1_macvtap: entered promiscuous mode
[  139.151953][ T9635] batman_adv: batadv0: Interface activated: batadv_slave_0
[  139.188800][ T9854] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  139.200125][ T9635] batman_adv: batadv0: Interface activated: batadv_slave_1
[  139.215704][ T9857] wg1 speed is unknown, defaulting to 1000
[  139.218552][ T9117] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  139.232074][ T9857] ip6_vti0 speed is unknown, defaulting to 1000
[  139.244176][ T9860] vlan2: entered allmulticast mode
[  139.249344][ T9860] bridge_slave_0: entered allmulticast mode
[  139.285301][ T9864] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1870'.
[  139.294562][ T9864] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1870'.
[  139.313196][ T9117] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  139.328349][ T9864] bridge0: port 1(gretap0) entered blocking state
[  139.335192][ T9864] bridge0: port 1(gretap0) entered disabled state
[  139.343055][ T9864] gretap0: entered allmulticast mode
[  139.351919][ T9864] gretap0: entered promiscuous mode
[  139.362051][ T9864] bridge0: port 1(gretap0) entered blocking state
[  139.368553][ T9864] bridge0: port 1(gretap0) entered forwarding state
[  139.390225][ T9868] gretap0: left allmulticast mode
[  139.395469][ T9868] gretap0: left promiscuous mode
[  139.400587][ T9868] bridge0: port 1(gretap0) entered disabled state
[  139.414537][ T9117] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  139.452107][ T9085] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  139.506640][ T9871] wg1 speed is unknown, defaulting to 1000
[  139.512922][ T9871] ip6_vti0 speed is unknown, defaulting to 1000
[  139.552021][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  139.553367][ T9877] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1875'.
[  139.853242][ T9877] ipvlan0: left allmulticast mode
[  139.858465][ T9877] veth0_vlan: left allmulticast mode
[  139.881686][ T9877] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  139.889233][ T9877] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  139.904030][ T9877] bridge2: left promiscuous mode
[  139.909044][ T9877] bridge2: left allmulticast mode
[  139.967702][ T9902] Falling back ldisc for ptm0.
[  139.972643][ T9102] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.983195][ T9881] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.043223][ T9102] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.075927][ T9102] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.086860][ T9881] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.111718][ T9102] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.150302][ T9911] xt_HMARK: spi-set and port-set can't be combined
[  140.181599][ T9912] set_capacity_and_notify: 2 callbacks suppressed
[  140.181616][ T9912] loop7: detected capacity change from 0 to 512
[  140.198247][ T9881] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.203974][ T9912] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  140.238707][ T9912] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  140.266603][ T9912] EXT4-fs (loop7): 1 truncate cleaned up
[  140.272819][ T9912] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  140.316480][ T9881] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.371682][ T9635] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.514630][    T9] usb 13-1: enqueue for inactive port 0
[  140.520253][    T9] usb 13-1: enqueue for inactive port 0
[  140.555941][ T7762] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.566875][ T9928] netlink: 'syz.5.1888': attribute type 1 has an invalid length.
[  140.574877][ T9928] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1888'.
[  140.592254][ T7762] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.617883][ T7762] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.634225][    T9] vhci_hcd vhci_hcd.6: vhci_device speed not set
[  140.646732][ T7762] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.669605][ T9928] netlink: 'syz.5.1888': attribute type 30 has an invalid length.
[  140.721171][ T9932] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1888'.
[  140.763841][ T9937] loop4: detected capacity change from 0 to 1024
[  140.772686][ T9937] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  140.782804][ T9937] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  140.792981][ T9937] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  140.804682][ T9937] EXT4-fs error (device loop4): ext4_get_journal_inode:5849: inode #5: comm syz.4.1891: unexpected bad inode w/o EXT4_IGET_BAD
[  140.831437][ T9937] EXT4-fs (loop4): no journal found
[  140.836792][ T9937] EXT4-fs (loop4): can't get journal size
[  140.978161][ T9937] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  141.147245][   T29] kauditd_printk_skb: 87 callbacks suppressed
[  141.147260][   T29] audit: type=1400 audit(141.124:5152): avc:  denied  { ioctl } for  pid=9947 comm="syz.5.1895" path="socket:[26078]" dev="sockfs" ino=26078 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  141.267214][   T29] audit: type=1400 audit(141.234:5153): avc:  denied  { mounton } for  pid=9933 comm="syz.4.1891" path="/340/file0/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  141.290004][   T29] audit: type=1400 audit(141.244:5154): avc:  denied  { mount } for  pid=9933 comm="syz.4.1891" name="/" dev="rpc_pipefs" ino=26092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  141.374033][ T9964] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3)
[  141.380817][ T9964] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  141.388491][ T9964] vhci_hcd vhci_hcd.0: Device attached
[  141.419244][ T9964] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(5)
[  141.425817][ T9964] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  141.433543][ T9964] vhci_hcd vhci_hcd.0: Device attached
[  141.448298][ T9964] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(7)
[  141.454862][ T9964] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  141.462743][ T9964] vhci_hcd vhci_hcd.0: Device attached
[  141.471428][ T9969] FAULT_INJECTION: forcing a failure.
[  141.471428][ T9969] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  141.485000][ T9969] CPU: 1 UID: 0 PID: 9969 Comm: syz.7.1902 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  141.485119][ T9969] Tainted: [W]=WARN
[  141.485127][ T9969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  141.485142][ T9969] Call Trace:
[  141.485149][ T9969]  <TASK>
[  141.485157][ T9969]  __dump_stack+0x1d/0x30
[  141.485185][ T9969]  dump_stack_lvl+0x95/0xd0
[  141.485271][ T9969]  dump_stack+0x15/0x1b
[  141.485295][ T9969]  should_fail_ex+0x265/0x280
[  141.485322][ T9969]  should_fail_alloc_page+0xf2/0x100
[  141.485350][ T9969]  __alloc_frozen_pages_noprof+0x109/0x360
[  141.485429][ T9969]  alloc_pages_mpol+0xb3/0x260
[  141.485464][ T9969]  vma_alloc_folio_noprof+0x1aa/0x300
[  141.485500][ T9969]  do_wp_page+0xf60/0x2510
[  141.485590][ T9969]  ? mas_state_walk+0x5c/0x650
[  141.485624][ T9969]  ? __rcu_read_lock+0x37/0x50
[  141.485650][ T9969]  handle_mm_fault+0x7b0/0x2c60
[  141.485721][ T9969]  ? __rcu_read_unlock+0x4f/0x70
[  141.485744][ T9969]  ? mt_find+0x21b/0x330
[  141.485777][ T9969]  do_user_addr_fault+0x3fe/0x1080
[  141.485813][ T9969]  exc_page_fault+0x62/0xa0
[  141.485896][ T9969]  asm_exc_page_fault+0x26/0x30
[  141.485919][ T9969] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  141.485950][ T9969] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 e9 7f 17 02 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[  141.485971][ T9969] RSP: 0018:ffffc9000180f9a0 EFLAGS: 00050206
[  141.486023][ T9969] RAX: ffff88811a98dd10 RBX: ffff8881413600c8 RCX: 0000000000007510
[  141.486038][ T9969] RDX: 0000000000000000 RSI: ffff888141368d88 RDI: 0000200000009000
[  141.486054][ T9969] RBP: 0000200000000340 R08: 00000000000000d0 R09: 0000000000000000
[  141.486069][ T9969] R10: 00018881413600c8 R11: 0001888141370297 R12: 0000200000010510
[  141.486085][ T9969] R13: ffffc9000180fe70 R14: 00000000000101d0 R15: 00007ffffffff000
[  141.486105][ T9969]  _copy_to_iter+0x141/0xe70
[  141.486148][ T9969]  ? should_fail_ex+0x30/0x280
[  141.486174][ T9969]  ? _raw_spin_lock_bh+0x56/0xb0
[  141.486200][ T9969]  ? _raw_spin_unlock_bh+0x36/0x40
[  141.486270][ T9969]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  141.486331][ T9969]  __skb_datagram_iter+0xc6/0x690
[  141.486410][ T9969]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  141.486437][ T9969]  skb_copy_datagram_iter+0x3d/0x110
[  141.486469][ T9969]  tipc_recvstream+0x4d7/0x780
[  141.486555][ T9969]  ? __pfx_tipc_recvstream+0x10/0x10
[  141.486641][ T9969]  sock_recvmsg+0x139/0x170
[  141.486664][ T9969]  ____sys_recvmsg+0xf5/0x280
[  141.486735][ T9969]  ___sys_recvmsg+0x11f/0x370
[  141.486863][ T9969]  __x64_sys_recvmsg+0xd1/0x160
[  141.486901][ T9969]  x64_sys_call+0x2cbf/0x3000
[  141.486929][ T9969]  do_syscall_64+0xca/0x2b0
[  141.487027][ T9969]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.487052][ T9969] RIP: 0033:0x7f281fd3f749
[  141.487071][ T9969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  141.487091][ T9969] RSP: 002b:00007f281e7a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  141.487114][ T9969] RAX: ffffffffffffffda RBX: 00007f281ff95fa0 RCX: 00007f281fd3f749
[  141.487140][ T9969] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005
[  141.487154][ T9969] RBP: 00007f281e7a7090 R08: 0000000000000000 R09: 0000000000000000
[  141.487168][ T9969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  141.487183][ T9969] R13: 00007f281ff96038 R14: 00007f281ff95fa0 R15: 00007ffdeec86478
[  141.487205][ T9969]  </TASK>
[  141.487767][ T9964] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(9)
[  141.838909][ T9964] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  141.846990][ T9964] vhci_hcd vhci_hcd.0: Device attached
[  141.856942][   T29] audit: type=1326 audit(141.834:5155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9933 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff443e5f749 code=0x7ffc0000
[  141.879892][   T29] audit: type=1326 audit(141.834:5156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9933 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff443e5f749 code=0x7ffc0000
[  141.902760][   T29] audit: type=1326 audit(141.834:5157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9933 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff443e5f749 code=0x7ffc0000
[  141.925829][   T29] audit: type=1326 audit(141.834:5158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9933 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff443e5f749 code=0x7ffc0000
[  141.948835][   T29] audit: type=1326 audit(141.834:5159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9933 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff443e5f749 code=0x7ffc0000
[  141.971793][   T29] audit: type=1326 audit(141.834:5160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9933 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff443e5f749 code=0x7ffc0000
[  141.994652][   T29] audit: type=1326 audit(141.834:5161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9933 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff443e5f749 code=0x7ffc0000
[  142.079150][ T9978] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(12)
[  142.085825][ T9978] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  142.093428][ T9978] vhci_hcd vhci_hcd.0: Device attached
[  142.124747][    T9] usb 13-1: new low-speed USB device number 3 using vhci_hcd
[  142.145401][ T9964] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.191196][ T9996] netlink: 'syz.7.1906': attribute type 3 has an invalid length.
[  142.204373][ T9999] xt_hashlimit: max too large, truncated to 1048576
[  142.215114][ T9997] SELinux:  policydb table sizes (4376,7) do not match mine (8,7)
[  142.223183][ T9997] SELinux: failed to load policy
[  142.229511][ T3321] EXT4-fs error (device loop4): __ext4_iget:5426: inode #15: block 1803188595: comm syz-executor: invalid block
[  142.244481][ T3321] EXT4-fs error (device loop4): __ext4_iget:5426: inode #15: block 1803188595: comm syz-executor: invalid block
[  142.267377][ T9999] xt_CT: You must specify a L4 protocol and not use inversions on it
[  142.281360][T10004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1908'.
[  142.290747][ T9978] wireguard0: entered promiscuous mode
[  142.296402][ T9978] wireguard0: entered allmulticast mode
[  142.320907][T10004] loop1: detected capacity change from 0 to 512
[  142.362421][T10011] xt_TPROXY: Can be used only with -p tcp or -p udp
[  142.379180][T10004] EXT4-fs (loop1): too many log groups per flexible block group
[  142.389983][ T9976] vhci_hcd: connection closed
[  142.390012][ T9980] vhci_hcd: connection closed
[  142.390170][ T9973] vhci_hcd: connection closed
[  142.399783][T10012] loop7: detected capacity change from 0 to 512
[  142.400473][ T9114] vhci_hcd vhci_hcd.6: stop threads
[  142.416172][ T9114] vhci_hcd vhci_hcd.6: release socket
[  142.421596][ T9114] vhci_hcd vhci_hcd.6: disconnect device
[  142.425387][T10012] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.439939][ T9965] vhci_hcd: connection reset by peer
[  142.445279][ T9967] vhci_hcd: connection closed
[  142.445470][T10004] EXT4-fs (loop1): failed to initialize mballoc (-12)
[  142.455294][ T9114] vhci_hcd vhci_hcd.6: stop threads
[  142.459237][T10012] netlink: 'syz.7.1914': attribute type 29 has an invalid length.
[  142.462477][ T9114] vhci_hcd vhci_hcd.6: release socket
[  142.475867][ T9114] vhci_hcd vhci_hcd.6: disconnect device
[  142.482795][T10004] EXT4-fs (loop1): mount failed
[  142.487969][ T9114] vhci_hcd vhci_hcd.6: stop threads
[  142.493211][ T9114] vhci_hcd vhci_hcd.6: release socket
[  142.498722][ T9114] vhci_hcd vhci_hcd.6: disconnect device
[  142.501441][T10017] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1916'.
[  142.513796][ T9114] vhci_hcd vhci_hcd.6: stop threads
[  142.519118][ T9114] vhci_hcd vhci_hcd.6: release socket
[  142.524910][ T9114] vhci_hcd vhci_hcd.6: disconnect device
[  142.538334][T10020] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=25623 sclass=netlink_xfrm_socket pid=10020 comm=syz.7.1914
[  142.557542][ T9114] vhci_hcd vhci_hcd.6: stop threads
[  142.562789][ T9114] vhci_hcd vhci_hcd.6: release socket
[  142.568403][ T9114] vhci_hcd vhci_hcd.6: disconnect device
[  142.581030][ T9964] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.594756][ T9904] kernel write not supported for file bpf-prog (pid: 9904 comm: kworker/1:16)
[  142.623003][T10012] netlink: 'syz.7.1914': attribute type 29 has an invalid length.
[  142.646196][ T9635] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.698901][T10025] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.749143][ T9964] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.802267][T10035] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=10035 comm=wg1
[  142.808174][T10033] wg1 speed is unknown, defaulting to 1000
[  142.820918][T10033] ip6_vti0 speed is unknown, defaulting to 1000
[  142.861974][ T9964] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.957383][ T7762] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  142.973442][ T7762] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  142.991043][ T7762] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  143.019351][ T7762] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  143.030524][T10044] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1925'.
[  143.058406][T10044] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  143.107802][T10047] loop6: detected capacity change from 0 to 128
[  143.144714][T10047] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  143.158163][T10025] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.184943][T10047] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  143.198137][T10047] EXT4-fs error (device loop6): __ext4_find_entry:1626: inode #2: comm syz.6.1926: checksumming directory block 0
[  143.227801][T10025] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.239301][ T4869] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  143.313278][T10054] loop6: detected capacity change from 0 to 1024
[  143.326219][T10025] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.338840][T10054] EXT4-fs: Ignoring removed bh option
[  143.354116][T10054] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  143.394130][T10054] EXT4-fs (loop6): can't mount with commit=, fs mounted w/o journal
[  143.420262][ T9098] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  143.439803][ T9098] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  143.614113][ T9114] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  143.638423][ T9114] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  143.652028][T10066] loop6: detected capacity change from 0 to 128
[  143.672947][T10066] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  143.725876][T10071] --map-set only usable from mangle table
[  143.803729][T10077] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1936'.
[  143.822263][T10077] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  143.844360][T10079] netlink: 'syz.7.1937': attribute type 49 has an invalid length.
[  143.863075][T10081] loop1: detected capacity change from 0 to 1024
[  143.870803][T10081] EXT4-fs: Ignoring removed bh option
[  143.883662][T10081] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  143.904781][T10081] EXT4-fs (loop1): can't mount with commit=, fs mounted w/o journal
[  144.047724][T10092] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1942'.
[  144.057141][T10092] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1942'.
[  144.086168][T10092] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1942'.
[  144.095355][T10092] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1942'.
[  144.156807][T10092] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1942'.
[  144.166037][T10092] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1942'.
[  144.264472][T10102] can0: slcan on ttyS3.
[  144.324775][T10102] can0 (unregistered): slcan off ttyS3.
[  144.346575][ T4869] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  144.764425][T10088] ==================================================================
[  144.772620][T10088] BUG: KCSAN: data-race in do_sendfile / do_sendfile
[  144.779281][T10088] 
[  144.781603][T10088] write to 0xffff888104f5d2b0 of 8 bytes by task 10081 on cpu 1:
[  144.789293][T10088]  do_sendfile+0x408/0x650
[  144.793696][T10088]  __x64_sys_sendfile64+0x105/0x150
[  144.798875][T10088]  x64_sys_call+0x2db1/0x3000
[  144.803533][T10088]  do_syscall_64+0xca/0x2b0
[  144.808021][T10088]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.813891][T10088] 
[  144.816192][T10088] write to 0xffff888104f5d2b0 of 8 bytes by task 10088 on cpu 0:
[  144.823893][T10088]  do_sendfile+0x408/0x650
[  144.828302][T10088]  __x64_sys_sendfile64+0x105/0x150
[  144.833478][T10088]  x64_sys_call+0x2db1/0x3000
[  144.838133][T10088]  do_syscall_64+0xca/0x2b0
[  144.842632][T10088]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.848503][T10088] 
[  144.850801][T10088] value changed: 0x0000000000000001 -> 0x0000000000002775
[  144.857968][T10088] 
[  144.860273][T10088] Reported by Kernel Concurrency Sanitizer on:
[  144.866406][T10088] CPU: 0 UID: 0 PID: 10088 Comm: syz.1.1939 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  144.877776][T10088] Tainted: [W]=WARN
[  144.881557][T10088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  144.891678][T10088] ==================================================================
[  145.325376][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.358463][ T9112] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.371063][ T9903] wg1 speed is unknown, defaulting to 1000
[  145.376999][ T9903] syz0: Port: 1 Link DOWN
[  145.387157][ T9112] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.436368][ T9112] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.505914][ T9112] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.616111][ T9118] smc: removing ib device syz2
[  146.236119][ T9112] bond0 (unregistering): Released all slaves
[  146.244471][ T9112] bond1 (unregistering): Released all slaves
[  146.252829][ T9112] bond2 (unregistering): Released all slaves
[  146.261615][ T9112] bond3 (unregistering): Released all slaves
[  146.269914][ T9112] bond4 (unregistering): Released all slaves
[  146.339737][ T9112] dummy0: left allmulticast mode
[  146.344861][ T9112] hsr0: left allmulticast mode
[  146.349654][ T9112] veth1_macvtap: left promiscuous mode
[  146.356737][ T9112] veth0_macvtap: left promiscuous mode
[  146.362334][ T9112] veth1_vlan: left promiscuous mode
[  146.368156][ T9112] veth0_vlan: left promiscuous mode
[  146.433972][ T6926] Bluetooth: hci0: command 0x1003 tx timeout
[  146.434068][ T3689] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  146.476469][ T9114] smc: removing ib device !yz!
[  147.667932][    T9] usb 13-1: enqueue for inactive port 0
[  147.673554][    T9] usb 13-1: enqueue for inactive port 0
[  147.743992][    T9] vhci_hcd vhci_hcd.6: vhci_device speed not set