last executing test programs:

2m58.057147314s ago: executing program 32 (id=149):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
munmap(&(0x7f0000004000/0x2000)=nil, 0x2000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0x8004587d, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x9cf, 0x1, 0x800000000001004})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000010000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000010100)={0x4, 0xf, 0x200, 0x7, 0xda, 0x10001, &(0x7f0000010000)="2d547af59663519b5bdc9cdfc29f80666d15f6e38ed1957b3ad618a3486213a9ce7ba7769246861a6002e3b72cf0ffdbe8e998d8076be44278bcbf3c7e34d3561225220b422208d82e928bfa7f4cb102d571027916f1da17c896ee5fcb8ca6c0e88da1e46ba5c8a19dfaf3ccbfbf8a032f295c4c064404f16b7f718f3c9eb36f64eb8cdb48b7294cf5006db12a85f8ee60ae71ddbfb4ea994803ca4cfe84f1d24cb10753e2306fd3efedc1257e33ef2e0c532e1d67032d6d7d63a0a8d60f38cbe37caf17932d733e6b7f0c5bfad61be1c14213e7b8682b9eb8eb"})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r6}, &(0x7f00000004c0), &(0x7f0000000300)=r7}, 0x20)
r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001940), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r8, 0xc0189374, &(0x7f0000001980)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x5}}, './file0\x00'})

2m24.190650294s ago: executing program 33 (id=598):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d61737100000000140002800800024000000008080003"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0)
r1 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', <r2=>0x0})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r3 = fsopen(&(0x7f0000000140)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x1, 0x0)
symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r4, &(0x7f0000000080)='./file0\x00')
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r6}, 0x18)
mkdirat(r4, &(0x7f0000000040)='./file0/../file0\x00', 0xa)
syz_open_procfs$namespace(0x0, &(0x7f0000001040)='ns/net\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESHEX=0x0, @ANYBLOB="00000000000000cf452b9f45846993fe3344484400b704000008000000850000e57700000095e8371598f6d0a88d4d9e4596bb798e131ed4b1ec259cccfb4b630075e67a7a211b490fd0240194bc423d76ff8643ff8bc348506890901e73fecdf73b466d0009b87e58337da5e0fe6a5922cdd0203b797bad4cf93a37415ca3ac7acb454c994e47d3c02d8151"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000004000000000000000100000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x4000800)
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe, 0x1}, {0x0, 0x3}}}, 0x24}}, 0x800)

2m18.219887232s ago: executing program 1 (id=660):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0)
ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000)

2m18.094409005s ago: executing program 1 (id=663):
r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854529f45826cb35be51682e30944313e2080000000000000080221daeccfda5eb75cfe2bad94f000066b2ddab614fec2236da7d88ea07c9ee"}, 0x48, 0xfffffffffffffffe)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
keyctl$search(0xa, r0, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0)

2m17.964485808s ago: executing program 1 (id=665):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sys_enter\x00', r0, 0x0, 0x8001}, 0x18)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000340)='kfree\x00', r2}, 0x18)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101600, 0x0)
ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0xffffffffffffffb6)
brk(0x8000000000000000)
r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150)
pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
fallocate(r4, 0x0, 0xbf5, 0x2000402)
ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0xc, r4, 0x0, 0x0, 0x0, 0xfffffffffdffffff})

2m17.251673359s ago: executing program 1 (id=668):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@jqfmt_vfsv1}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
syz_io_uring_setup(0x2, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0x0, 0x304}, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
splice(r1, &(0x7f0000000300)=0x3, r0, &(0x7f0000000340)=0x8, 0xef65, 0x8)
ptrace$getregset(0x4204, r6, 0x202, &(0x7f0000000100)={0x0})
syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00008000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x4000)
sendfile(r5, r4, 0x0, 0x100000002)

2m17.137592771s ago: executing program 0 (id=670):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10)
clock_settime(0x0, &(0x7f0000000240)={0x77359400})

2m17.137144541s ago: executing program 0 (id=671):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d61737100000000140002800800024000000008080003"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0)
r1 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', <r2=>0x0})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r3 = fsopen(&(0x7f0000000140)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
fsmount(r3, 0x1, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r5}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000001040)='ns/net\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESHEX=0x0, @ANYBLOB="00000000000000cf452b9f45846993fe3344484400b704000008000000850000e57700000095e8371598f6d0a88d4d9e4596bb798e131ed4b1ec259cccfb4b630075e67a7a211b490fd0240194bc423d76ff8643ff8bc348506890901e73fecdf73b466d0009b87e58337da5e0fe6a5922cdd0203b797bad4cf93a37415ca3ac7acb454c994e47d3c02d8151"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000004000000000000000100000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x4000800)
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe, 0x1}, {0x0, 0x3}}}, 0x24}}, 0x800)

2m17.032546861s ago: executing program 0 (id=673):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0)
ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000040))
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0x84}, 0x18)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r2 = getpgrp(0x0)
r3 = syz_pidfd_open(r2, 0x0)
fsetxattr$trusted_overlay_nlink(r3, &(0x7f00000018c0), 0x0, 0x0, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000f02000000000000bc26100000000000bf672000000000001602000000c0ffff6702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff0200000007"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000080)='syzkaller\x00'}, 0x94)
r5 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3, 0x4002)
open_tree(r5, &(0x7f00000000c0)='./file0\x00', 0x900)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

2m16.858638509s ago: executing program 0 (id=674):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@jqfmt_vfsv1}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
syz_io_uring_setup(0x2, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0x0, 0x304}, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
splice(r1, &(0x7f0000000300)=0x3, r0, &(0x7f0000000340)=0x8, 0xef65, 0x8)
ptrace$getregset(0x4204, r6, 0x202, &(0x7f0000000100)={0x0})
sendfile(r5, r4, 0x0, 0x100000002)

2m16.614758273s ago: executing program 0 (id=677):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff)
keyctl$revoke(0x3, r3)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

2m16.550799609s ago: executing program 1 (id=679):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000344000480400001800e000100627974656f726465720000002c00028008000140000000130800024000000000080004400000009b080003400000000108000540000000020900010073797a30000000000900020073797a32"], 0x98}}, 0x44800)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', <r5=>0x0})
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r5], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014)

2m16.452059759s ago: executing program 0 (id=680):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18)
syz_emit_ethernet(0x7e, &(0x7f0000000440)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cea", 0x48, 0x3c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], {0x0, 0x200, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "c88f82cb9c1d00", "11a886ad86c414dbb912c9492279249260e92303a8f0b7cc89f9735acfc9a140"}}}}}}}, 0x0)
open(0x0, 0x5a1140, 0xa0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
gettid()
timer_create(0x0, 0x0, 0x0)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
preadv(r0, &(0x7f0000000040), 0x0, 0x5b3d2934, 0xfffffff8)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c", @ANYBLOB, @ANYRES32], 0x1c}}, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x6, &(0x7f0000000280)=ANY=[], 0x3, 0x58f, &(0x7f0000000800)="$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")

2m16.432504161s ago: executing program 34 (id=680):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18)
syz_emit_ethernet(0x7e, &(0x7f0000000440)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cea", 0x48, 0x3c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], {0x0, 0x200, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "c88f82cb9c1d00", "11a886ad86c414dbb912c9492279249260e92303a8f0b7cc89f9735acfc9a140"}}}}}}}, 0x0)
open(0x0, 0x5a1140, 0xa0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
gettid()
timer_create(0x0, 0x0, 0x0)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
preadv(r0, &(0x7f0000000040), 0x0, 0x5b3d2934, 0xfffffff8)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c", @ANYBLOB, @ANYRES32], 0x1c}}, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x6, &(0x7f0000000280)=ANY=[], 0x3, 0x58f, &(0x7f0000000800)="$eJzs3c9v2+Ydx/EPXbt2NSAbtiEIAid9mmyAA7gqJTcOjJ446pHMViIFkmrtUxE0cmFE7opkAxZftlyyDdj+iF5333XYfdf9G8V6GnbTQFKy5ehXfjiRE7xfQvI8Ir/k86Us6Ava4kMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5fs11K46aQdjZM9P5tThqjS/WslR0Bm6daWaMKznZP62t6Uqx6MrPT1dfzv67ofXi2brWsmZNxz+6/JNPfra8NNx+RsKvxcNHx/fv9nrdB4tOZEEaNgySKGh5DWuCJDI770narSemHjRtsp+ktmX82HppFJsN/5ap7OxsGVvejzpho+Y17XDhnQ+rrrttPi23rRcnUfjRp+XE3w2azSBs5DHZ6izmTvZG/CxITWq9ljEHh73u1rwks6DKswRV5wVV3Wq1UqlWK9u3d27fcd3lsQXuKUeu62osYvFvWizWOX+CAy9uaVD/1VSgUB3tyUx8+KopVqTWlPUDw/r/y4/szHFH639e5ftav3K6+qry+n+9eHZ9Wv2fksuMx0q2o+fe6unHu8N9PNQjHeu+7qqnnrp6cBqzeS4jXfBHQ1ahAiWKFKglL19iBkuMdrStbbn6UruqK5FRXYGaskq0r0SpbP6O8hVrVZ5SRYpltCFft2RUUX91R1sysiprX5E6CtVQTV6+lwMd5q/71owcT4IqM4K+GL7zqjOCnqv+50Y3+Rf1H9R/XCT9Yf1/2juLyAYAAAAAALwKTv7b9+z8f0XXpBVH9aBp3UWnBQAAAAAAzlH+l//1rMm/GXdNDuf/AAAAAAC8bZz8GjtHUknvF73h5VKDXwL0f7zoHAEAAAAAwMvJ//5/PWtKWe99OU+f/wMAAAAAgDfdn6bNsf9PqT+YFnDV+cd/FMcrzuP23i+cIy9b5h0NJggcmycwrV91Lg12kjfby4Nnvl13BrNfnkyC+f2gOZg3179zDgnoL/qgiPngXtHeG64pRinVg6Yt+1Hzk4o879JSavfS335z+Dvlh//nsHXJ+eHgsNctf/Xr3r08l8fZXh4fDV6psXkUZ+TyG10rYq5NPuKV/EKMwbglR9m47ujxLxWbLz3HmE90o4i5USra0tnjX8vGrJSnHX2RxaqklzryJ7pZxNzcuFk0E7KozsmiWx19/V/otXiGLLZmZbF62OtuvWQWALAoB7OrUO6ds3X3BT7lXk91f6KNImbjav7Bunx1wie6O6+uuBPq+trJ8MvDLPq/n5LF38bugTStxmbj/vVk3Eo+7nfZBt9NrapJs+po7dv/9vtH3+ryw0fHHx4e3f26+3X3m2p1a9v92HVvV7WSH8agofYAACaYf4+duRHOx3POqn968pWCsr6S/tfv39NmfrVB/o2DiXst5dv8kH8NYXPOWWtp5A4vm3PO6k5jq88Ru/UafhIAALw+N+bU4en13xnexc/ZnHPeXRr5SuHm6Nnxuxo7Ox6t5QAA4NWw8fdOKf2jE8dB+8vKzk7FS3etiSP/MxMHtYY1QZja2N/1woY17ThKIz9qZp3Pg5pNTNJpt6M4NfUoNu0oCfbyO7+bwa3fE9vywjTwk3bTeok1fhSmnp+aWpD4pt35VTNIdm2cb5y0rR/UA99Lgyg0SdSJfVs2JrF2JDCo2TAN6kHWDU07DlpevG8+j5qdljU1m/hx0E6jYofDsYKwHsWtfLflRb/YAABcEA8fHd+/2+t1Hww7zvLTS166s+hjBAAAZ1GlAQAAAAAAAAAAAAAAAAAAAAC4+M7tIr+3qrP6Kvb8hV5Fqu9Jmh3z75I0uqTff9Yhli7Cz+JMZzjp9IyYv09YJekPi0/+zepM+rQYm48awBvs/wEAAP//j/NUaA==")

2m15.995758645s ago: executing program 1 (id=689):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@jqfmt_vfsv1}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
syz_io_uring_setup(0x2, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0x0, 0x304}, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
splice(r1, &(0x7f0000000300)=0x3, r0, &(0x7f0000000340)=0x8, 0xef65, 0x8)
ptrace$getregset(0x4204, r6, 0x202, &(0x7f0000000100)={0x0})
sendfile(r5, r4, 0x0, 0x100000002)

2m15.964252858s ago: executing program 35 (id=689):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@jqfmt_vfsv1}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
syz_io_uring_setup(0x2, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0x0, 0x304}, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
splice(r1, &(0x7f0000000300)=0x3, r0, &(0x7f0000000340)=0x8, 0xef65, 0x8)
ptrace$getregset(0x4204, r6, 0x202, &(0x7f0000000100)={0x0})
sendfile(r5, r4, 0x0, 0x100000002)

1m38.307328648s ago: executing program 7 (id=1298):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48)
fsopen(&(0x7f0000000140)='ramfs\x00', 0x1)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r1}, 0x18)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800400, &(0x7f00000009c0)={[{@quota}]}, 0x1, 0x4f3, &(0x7f0000000a00)="$eJzs3c9rXFsdAPDvnSRt0uY5eeri+cD3iq+SFu1M0tg2uCgVxF1BrfsYkkkImWRCZtI2oZQU/wBBRBeuXLkR/AME6cZ9EQq6FxGl2FYXLtSRO3PHxnQmGV4nM+3k84HTe+6P3O/3dDq399x7yAng1LoQEbciYiQiLkdEPtuey0rsN0t63MsXD5bSkkS9fudvSSTZtta5kmx5Pvux8Yj4bnJgxwHV3b31xXK5tJ2tF2sbW8Xq7t6VtY3F1dJqaXNubvb6/I35a/MzPWvrzW/++Sc//MW3bv7mq/f+uPDXSw/TtCazfQfb0UvNpo81/i5aRiNi+ySCDcBI1p6xLo8/e8L5AABwtPQe/7MR8aXG/X8+Rhp3cwAAAMAwqScR/0oi6gAAAMDQyjXGwCa5QjYWYDJyuUKhOYb383EuV65Ua19ZqexsLjfHyk7FWG5lrVyaycYKT8VYkq7PNuqv1q8eWp+LiPcj4sf5iWTlbJQKS5Xy8qAffgAAAMApcf5Q//8f+Wb/HwAAABgyU4NOAAAAADhx+v8AAAAw/Dr2/xOTAQAAAMAQ+Pbt22mpt+a/Xr67u7NeuXtluVRdL2zsLBWWKttbhdVKZbVcKixVNo47X7lS2fpabO7cL9ZK1Vqxuru3sFHZ2awtNOb1Xih1O080AAAA0Dvvf/z4D0lE7H99olFSZ7J9+uow3HLHHzJxoJ6cZC5Af40MOgFgYD7dAF/DgmEYHNfHf16v9ykTYFCO69iPd9rxpPe5AAAAJ2P6C53f/wPDrYv3/23c6nkeQP95/w+nlzf5cHoZ4w+82ft/g4QAAOBdMNkoSa6QvQucjFyuUIh4rzEtwFiyslYuzUTEZyLi9/mxs+n67KCTBgAAAAAAAAAAAAAAAAAAAAAAAIB3TL2eRP2wM69vAgAAAN5dEbm/JNn8X9P5i5OHnw+cSf6Zbywj4t7P7vz0/mKttj2bbn+efzVrWLb9at8fXwAAAACp3/7/aquf3urHAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAP1ZPmcunliwdL/Qz87BsRMRWRxm2V5p7RGG8sx2MsIs79PYnRAz+X5jvSg/j7jyLig3bxkzStmMqyOBw/FxETA45/vgfx4TR7nF5/brX7/uXiQmPZ/vs3mpU39exCp+tf7n/Xv5EO17/3uozx4dNfFTvGfxTx4Wj7608rftIh/iddxv/+9/b2Ou2r/zxiOtrHPxirWNvYKlZ3966sbSyullZLm3Nzs9fnb8xfm58prqyVS9mfbWP86Iu//s9R7T/XIf7UMe2/2GX7//30/ovPvbb14dVW/EuftP/8Pzgifvpv4svZ/wPp/ulWfb9ZP+ijX/7uo6Pav9yh/cd9/pe6bP/l7/zgT10eCgD0QXV3b32xXC5tH1l5Escf079K6z7kbcknvRdKKzf7F7T16KGXZ/44Pd+JJj8Rb8XnpdJNZYAXJQAA4ES8uukfdCYAAAAAAAAAAAAAAAAAAABwevXj14kNuo0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN34bwAAAP//tfDGOw==")
symlink(0x0, &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1m38.064022813s ago: executing program 7 (id=1300):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d61737100000000140002800800024000000008080003"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0)
r1 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', <r2=>0x0})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r3 = fsopen(&(0x7f0000000140)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x1, 0x0)
symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r4, &(0x7f0000000080)='./file0\x00')
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000001040)='ns/net\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESHEX=0x0, @ANYBLOB="00000000000000cf452b9f45846993fe3344484400b704000008000000850000e57700000095e8371598f6d0a88d4d9e4596bb798e131ed4b1ec259cccfb4b630075e67a7a211b490fd0240194bc423d76ff8643ff8bc348506890901e73fecdf73b466d0009b87e58337da5e0fe6a5922cdd0203b797bad4cf93a37415ca3ac7acb454c994e47d3c02d8151"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000004000000000000000100000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x4000800)
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe, 0x1}, {0x0, 0x3}}}, 0x24}}, 0x800)

1m37.745343224s ago: executing program 7 (id=1303):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x4000, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
syz_emit_ethernet(0x4e, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x3, 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x9}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x3)

1m36.833838436s ago: executing program 7 (id=1322):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r1}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r1, &(0x7f00000014c0)='o', &(0x7f0000000b40)=""/31}, 0x20)
socket$phonet_pipe(0x23, 0x5, 0x2)
ftruncate(r0, 0x2007ffc)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_tos_u8={{0x11, 0x110}}], 0x18}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
r3 = syz_io_uring_setup(0x14f2, &(0x7f0000000400)={0x0, 0xd144, 0x0, 0xffffffff, 0x289}, &(0x7f00000001c0)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x30}})
io_uring_enter(r3, 0x3516, 0xddd6, 0x4, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x800000009)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r6}, 0x18)
unshare(0x400)
flock(0xffffffffffffffff, 0x8)
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001600)=@newtaction={0x2e00, 0x30, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [{0x2a54, 0x1, [@m_police={0x2a50, 0x16, 0x0, 0x0, {{0xb}, {0x2a04, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x4, 0x80, 0x55, 0x4, 0x3, 0xcee1, 0x4, 0x1, 0x7, 0x4, 0xe, 0x3, 0x8, 0x67080000, 0x7ff, 0xaad, 0x0, 0x5, 0x9, 0x9, 0x9, 0x6, 0x8, 0x9, 0x7, 0x800, 0x6, 0x8, 0xcc9, 0xd29, 0x6, 0x1000, 0x4, 0x10, 0x5, 0x5, 0x0, 0x1, 0xbbd, 0x6, 0x6, 0x7, 0x2, 0x2, 0x3ff, 0x6b4, 0x6, 0x7, 0x5, 0x5, 0x1aa, 0x30000, 0x7f, 0x1, 0x4, 0x9be2, 0x5b17, 0x0, 0x7fffffff, 0xbe7f, 0x3, 0x0, 0x8, 0x2, 0xe9, 0x24000000, 0x3, 0x1, 0x0, 0x0, 0x3774, 0x2, 0x10001, 0x4, 0x4, 0xfffffff6, 0x8000, 0x1, 0x9da, 0xfffffbfb, 0x80, 0x8, 0x6, 0xbf, 0x5, 0x2, 0x64a021d0, 0x8, 0x2, 0x5, 0xfffffffa, 0x0, 0x4, 0x9, 0x5, 0xe3e, 0x7, 0x79b, 0x3, 0xfffffff7, 0x2, 0x5, 0x3, 0x5, 0x7, 0x1, 0xd, 0x9, 0x7f, 0x60e, 0xfffffffd, 0x0, 0xae, 0x7, 0x2, 0x7ff, 0x81, 0x6, 0x9, 0x400, 0x6, 0x2, 0x80, 0x1, 0x9fa, 0x8d4, 0x6, 0x3, 0x4, 0x2, 0xc30, 0x54, 0x400, 0x3, 0x8ed, 0xfffffeff, 0x0, 0xa3e9, 0x7, 0x8, 0xfffffff8, 0x2, 0x6, 0x9, 0x400, 0x4, 0x7ff, 0x889, 0xd, 0x7, 0x1ff, 0x2, 0x8, 0x8, 0x3, 0x2, 0x1, 0xffff, 0x4, 0x2, 0x73f9, 0x8, 0x9c8, 0x6, 0xe2a9, 0xb, 0x7, 0x1ffcd341, 0x2fd, 0xffffffff, 0xc, 0x9, 0x800, 0x4, 0x7, 0x6, 0x9, 0x1, 0x1, 0x0, 0x0, 0x3b, 0xe159, 0x80000000, 0x1, 0x63b15fb8, 0xada5, 0x1, 0x6, 0x5, 0x0, 0x17a4901c, 0x2, 0x1, 0x1, 0x80000000, 0x6, 0xccc, 0x1, 0x9, 0x7fffffff, 0xd11b, 0x5, 0x0, 0x7, 0xc5, 0x6, 0xe, 0x0, 0x7, 0x80000000, 0xffff, 0x1, 0x1, 0x30000, 0xf75, 0x6, 0x0, 0x70b, 0x8000, 0x2, 0x4, 0x3, 0x2aa70000, 0x4, 0x8, 0x2, 0x0, 0xd662, 0xb, 0x7, 0x31, 0xfff, 0x5, 0x0, 0x2, 0xcc, 0x2, 0xfe20, 0x4, 0xf, 0x99, 0x4, 0x92, 0x3, 0x80000000, 0x5, 0x8, 0x3, 0xfff, 0x2, 0x3, 0x3, 0x4, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x3, 0x1, 0xd, 0x2, 0xf68, 0x8, 0x8, 0x9, 0x9, 0x10000, 0x7, 0x0, 0xcee4, 0x0, 0x6a, 0x8, 0x4, 0x7, 0x10000, 0x3, 0x7fffffff, 0x7f, 0x2, 0x2, 0x200, 0xd, 0x7, 0x3, 0x815, 0x40, 0x5, 0x0, 0x6, 0x3ff, 0x25e1, 0x1, 0x6, 0x81, 0x0, 0x3, 0x3, 0x1, 0x7, 0x6, 0x1, 0x8, 0xd, 0xa, 0x0, 0x10001, 0x3, 0x1, 0xfffffff7, 0xe39e, 0x6, 0x9, 0xf5a9, 0x6, 0x3, 0xfffffffb, 0x9, 0x289e, 0x7, 0xcb91, 0x3, 0x3, 0xac, 0x40, 0x5, 0x5, 0x4, 0xc, 0x6, 0x1, 0x6, 0x4, 0xfcd, 0x8, 0x7, 0x4, 0x7, 0x3, 0x42, 0x5, 0x1, 0x0, 0xd4da, 0xa, 0x1, 0x3ff, 0x4d, 0x7, 0x2, 0x44f4, 0x7fff, 0x913, 0x81, 0x1400000, 0x1, 0x4, 0x3ff, 0x8, 0x4e, 0x2, 0x5, 0x9a, 0x5, 0xa, 0x8000, 0x0, 0xffff, 0x7, 0x3, 0xedb, 0x9, 0xfffffc01, 0x7, 0x8, 0x2, 0x4, 0x2, 0x9f60, 0x5, 0x9, 0x5, 0x8, 0x3, 0xa, 0x2, 0xf, 0xef12, 0x6, 0x3, 0x6, 0xfdc, 0x4, 0x7, 0xff, 0xfb, 0x8, 0x6, 0xa, 0xfffffffb, 0x9, 0xffffffff, 0x3, 0x80000001, 0x6, 0x6, 0xd90, 0x9, 0x917, 0xc, 0x0, 0x4, 0x972, 0x401, 0x1, 0x7, 0x9, 0xfe, 0x1, 0x4, 0xfffffc00, 0x9e48, 0x5, 0x0, 0x1, 0x8, 0xff, 0x7, 0x5, 0x0, 0x35, 0x4, 0x9, 0x5, 0xffffffff, 0x7f, 0x6, 0x8, 0xbc39, 0x1, 0x8, 0x7, 0xffffffff, 0x6a1, 0x8, 0x5, 0x2, 0xd, 0x0, 0x7, 0x44, 0xffffff80, 0xd, 0xffffffff, 0x7, 0x4, 0xfff, 0x2eb00000, 0x3d3f, 0x37, 0x0, 0x5, 0x2, 0x1, 0x9, 0x0, 0xf326, 0x5, 0x8, 0xfffffffc, 0x5, 0x80, 0x8, 0x5, 0x8001, 0x3, 0x80000001, 0x7, 0x4, 0x8001, 0x1, 0x81, 0x800, 0x3, 0x7, 0x8, 0xc3, 0x5, 0x3, 0x1ff, 0x3, 0x8, 0xefde, 0x8, 0xfffffffb, 0xffffffff, 0xb, 0x101, 0x0, 0x1, 0x4, 0x9, 0x3, 0xfffffffd, 0x1, 0x8, 0xbea7, 0xffffff47, 0x2, 0x1, 0x0, 0x5]}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0xffffffffffffffff, 0x4, 0xe, 0xfffffff7, {0xb8, 0x0, 0x4, 0xa66, 0x2, 0x8045}, {0xba, 0x0, 0x6, 0x1c, 0x7, 0x10001}, 0xdb, 0x10000, 0xfffffff9}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x6, 0x101, 0x4, 0x6, 0x5, 0x8, 0xa2e, 0x8000, 0x6, 0x9, 0x0, 0x2, 0xc, 0x7, 0x1, 0x8, 0x433701a4, 0x0, 0xfff, 0x200, 0x81, 0x10, 0x5, 0x4, 0x610, 0x7, 0x7, 0x3, 0x9c9, 0x3, 0x0, 0x8, 0x5, 0x2, 0x3, 0x1, 0x8, 0xd7a, 0x6, 0x7f94, 0x8, 0x3, 0xa4e8, 0x8000, 0x2, 0x7, 0x1, 0x3, 0x10000, 0xfff, 0xb, 0x5, 0x6, 0x5, 0x10, 0x8787, 0x9, 0x1000, 0x0, 0x7, 0x80000001, 0xac, 0x6, 0x401, 0x2, 0x800, 0x4, 0x8, 0x40, 0x3, 0x40, 0x3, 0x1, 0x7, 0x9, 0x10001, 0x8001, 0x6, 0x3, 0x4, 0x4, 0x200, 0x8, 0x6, 0x3, 0x28, 0x40, 0x2, 0x8a30fd80, 0x1, 0x5e, 0x4, 0x7, 0x5, 0x0, 0x50d8, 0x8, 0xffffffff, 0x2, 0x0, 0xb, 0xfffffffa, 0x4, 0x9, 0x4, 0x0, 0x800, 0x80000, 0xead, 0x0, 0x5, 0x50e, 0xfffffff4, 0x200, 0xc, 0x4, 0xc, 0x7fffffff, 0x9, 0xffff, 0x7f, 0x5, 0xa, 0x7, 0x8, 0x6, 0x2c1ba767, 0x5, 0x0, 0x9345, 0x5, 0x3, 0x5, 0x7ff, 0x19, 0x9, 0x80000000, 0xd, 0x0, 0x4, 0x2, 0x961, 0x3, 0x11c, 0x2, 0x3, 0xd, 0x10001, 0x6, 0x5, 0x3, 0x800, 0x5cb, 0x1, 0x0, 0x24000000, 0x0, 0x0, 0x3, 0x5, 0x5e, 0xaf, 0x8, 0x6, 0x4, 0x9, 0xfffffffa, 0x5, 0x8000000, 0x80, 0xead, 0x80, 0xd56, 0x3, 0x9, 0x6, 0x200000d, 0x0, 0x8, 0xffffff08, 0x3, 0x5b2, 0xf13, 0xd, 0x4, 0x6, 0x0, 0x7, 0x7, 0xe, 0x9, 0x8, 0x7, 0x2, 0x6, 0x7fffffff, 0x10001, 0x1000, 0x81, 0x6, 0x2, 0x2, 0x9, 0x7f, 0x3bdd3607, 0xd, 0x6, 0x7f, 0xe0, 0xe, 0x9, 0x9, 0xa, 0xff, 0x42, 0x81, 0xfffffff8, 0x9, 0x0, 0x3, 0x7f, 0x2000, 0x6, 0xd, 0x1000, 0x8, 0x6, 0xffffff00, 0x7, 0x1, 0xa8fc, 0x8, 0x9, 0x9, 0x100, 0x101, 0xa, 0x10000, 0x8, 0x9, 0x10001, 0xa23, 0x8e, 0x8, 0x3, 0xb28a, 0x3ff, 0x3ff, 0x6, 0xeef, 0x7fffffff, 0x3, 0x0, 0x796, 0x4]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x7fff, 0x2, 0x5, 0xb2a4, 0x0, 0x207d, 0x9, 0xfffff2cd, 0x2000, 0x7, 0xce4a, 0xfffffff9, 0xfffff174, 0x7, 0x9, 0x4e06, 0x8, 0x9, 0x1, 0x3, 0xfffff6b7, 0x7, 0x2, 0x37, 0x80000001, 0x3, 0x3, 0x5, 0x3, 0x8, 0x400, 0x3ff, 0xf, 0x6, 0x800, 0x6, 0x2, 0x9, 0x49cd, 0x2, 0x2, 0x343b, 0x0, 0xfff, 0x100, 0x80000000, 0xce, 0x6, 0x7f1b, 0x8, 0x9ef, 0xfffffffe, 0x4c6, 0x3, 0x101, 0x0, 0xffffff17, 0x80, 0x6, 0x2f, 0x4, 0x6, 0x6, 0xff, 0x1, 0x9, 0x1000, 0x3, 0x3ff, 0x4, 0x80, 0x3, 0x1, 0x7, 0x7, 0x6, 0x5, 0x5, 0x8000, 0x6, 0xc, 0x10000, 0x2, 0x2, 0x2, 0x6, 0x2, 0xf, 0x8001, 0xe3b6, 0x3, 0x0, 0x281bce41, 0x6, 0x7, 0x4, 0x7, 0xd5, 0x3, 0x7, 0x9, 0x7, 0x4, 0x54, 0x5, 0xaf9e, 0x7, 0x6, 0x6c18, 0x1, 0x1000, 0x9, 0x2, 0xffff, 0xea5, 0x3, 0x80000001, 0x6, 0x1, 0x3, 0x1, 0xfffffff7, 0xfffffffe, 0x200, 0x80000000, 0xfef1, 0x400, 0x7, 0xa85, 0xa55, 0x2, 0x2, 0x9, 0x6, 0x6, 0x6, 0x6, 0x6, 0x8000, 0x7, 0x1, 0x3ff, 0xb69, 0x6c8, 0x6, 0x7, 0xdaa5, 0x5, 0x8, 0x8, 0x4, 0x3, 0x8, 0x4, 0x81, 0x9, 0x1c, 0x0, 0x0, 0x1, 0x6ea, 0xffff, 0x1, 0x61c5, 0x7f, 0xffffff01, 0x2, 0x925, 0x2, 0xff, 0x3, 0x3c8, 0x3, 0x39, 0x6, 0x2, 0x9, 0x7, 0x3, 0xfffffa04, 0x81, 0x400, 0x3ff, 0xb, 0x17c, 0x5, 0x101, 0x7ff, 0x7, 0x6, 0x3, 0xc3, 0x4ee20600, 0x686, 0x3ff, 0x81, 0x0, 0x200, 0x4, 0x2, 0x8, 0x1000, 0x3, 0x6, 0x5aaf, 0x5, 0x3, 0x6, 0x2, 0x9, 0x8, 0x10, 0x8, 0x80000001, 0x7, 0x5, 0x1, 0x1, 0x9, 0x6, 0xff7, 0x2, 0x4, 0x7, 0x0, 0x8070, 0x9, 0x7, 0x6, 0x9, 0x4, 0x2, 0xffffff89, 0x3, 0x146e, 0x8, 0x80000000, 0x0, 0x7, 0x400, 0x9, 0x7, 0x5, 0x5d1, 0xfff, 0x800000, 0x8, 0x5, 0x5, 0x0, 0x63, 0x70, 0x2, 0x7, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8000, 0x0, 0x9, 0x2, 0x1, 0xf39, 0x1f, 0x4, 0x7f, 0x7, 0x10, 0x8, 0x0, 0x6, 0x2, 0xfffffffc, 0xffff, 0xfffffffe, 0x9, 0x40, 0xff, 0x401, 0x4, 0xfffffff7, 0x6, 0xae, 0x5, 0x200, 0x4b48, 0x9, 0xf77, 0x4, 0xa39, 0xffffff00, 0x10001, 0x9, 0x800, 0x6, 0x7, 0x3, 0x2, 0x99f2, 0x3, 0x9, 0x7, 0xfffff7fd, 0x200, 0x7, 0x9, 0x2, 0x4, 0x8, 0x0, 0x7, 0x0, 0x3c, 0x8, 0x1, 0x9, 0x5, 0xe, 0x9, 0x1000, 0xffffff67, 0x7, 0x7, 0xaf9, 0x10001, 0x7, 0x0, 0x2, 0xdd, 0x120, 0x1, 0x6, 0xffff, 0x0, 0x8000, 0xa7, 0xfffffff7, 0x1, 0x3, 0x4, 0xb, 0x6, 0x2, 0x528c, 0x1, 0xff, 0x3, 0x8, 0x4, 0x1, 0x0, 0x6, 0x8, 0x7, 0x2, 0x68, 0x6, 0x15, 0x5, 0x934e, 0x0, 0xfffffffc, 0x7f, 0x50, 0x9, 0x3ff, 0x7, 0x54fa, 0x5, 0xe99, 0x1, 0x7fffffff, 0x9, 0x7, 0x2, 0x99, 0xed41, 0x0, 0x7, 0xb2bf, 0x5, 0xa, 0x8, 0x8, 0x9, 0x40, 0xc, 0x0, 0x2, 0x2, 0x401, 0x2, 0x6000000, 0x38, 0x5, 0x8, 0x6, 0x3e14, 0xc0, 0x9, 0x3ff, 0x6, 0x80, 0x7f, 0x8, 0x5, 0x6, 0xfffffffc, 0x7, 0x240, 0x7, 0x5, 0x4, 0xac9, 0x7, 0x1ff, 0x2, 0x2, 0x8, 0xe, 0xb0, 0x7fff, 0x2, 0x7f, 0x1ff, 0x7, 0xe, 0x52, 0x8, 0xc0, 0x2, 0xfffff001, 0x7, 0x10001, 0x0, 0x5, 0xfff, 0x2f0e, 0x800, 0xf52, 0x5, 0x5, 0xb4, 0xfffff006, 0x2, 0x1, 0x9, 0x5, 0x3, 0xfffffffe, 0x4, 0x0, 0x7, 0x5, 0x0, 0x9, 0xebb6, 0x3, 0xfff, 0x8, 0x0, 0x70000, 0x6, 0x5, 0x7fff, 0xff, 0x5, 0xffff, 0x5, 0x761, 0x5, 0x8, 0x4, 0x8000, 0x9, 0x3, 0x40, 0x5, 0x34, 0x9, 0x2000, 0xcba, 0xc, 0x55d5, 0x9, 0xf4e, 0x3, 0x8000, 0x10000, 0x3, 0x7ff, 0x4, 0x8000, 0x0, 0xc, 0x4, 0xb4, 0x68b, 0x3dc, 0x400, 0x3f80000, 0x1, 0x100, 0x7, 0x8, 0x40, 0x1, 0x3, 0x66, 0x7b, 0x2, 0x767, 0x7fff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xd6c1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9276}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1bb9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x401, 0x7, 0x2, 0x6, 0x40, {0xdf, 0x0, 0x8, 0x5, 0x999, 0xffffff4f}, {0xd, 0x1, 0x8, 0xfffc, 0x7, 0x40}, 0x4, 0xc738, 0x82}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x40}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x0, 0xd1d, 0x0, 0x9774, {0x22, 0x3, 0x3, 0x5, 0x5, 0x7fffffff}, {0xcf, 0x0, 0x101, 0x2, 0x4, 0x7}, 0x1, 0xeae, 0x8}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xdef, 0x6, 0xffff, 0x0, 0x0, 0x70b5, 0x2, 0x38ec, 0x6, 0x8, 0xbd9, 0x5, 0x5, 0x8e01, 0x355, 0x8, 0x8, 0x3, 0x4, 0x3ff, 0x7ff, 0x5, 0x2, 0x5, 0x73ad, 0x0, 0x3, 0x5, 0xdd81, 0x81, 0x6, 0x1, 0x9, 0x6, 0xffff0709, 0x2, 0xffffffff, 0x9, 0x10, 0xfffffffb, 0x8001, 0xfffffff1, 0x7, 0x5, 0x401, 0xc3, 0x236c467c, 0x7a1c, 0x1, 0x1, 0x3fc0000, 0x4, 0x200, 0x36, 0x2, 0xfffeffff, 0x6, 0x5f188169, 0x5, 0x348, 0xfffff42d, 0x3, 0x9, 0x9, 0x2, 0xfff, 0x100, 0xcae, 0x9, 0x1, 0x6, 0xfffff21c, 0x8, 0xd23, 0x9224, 0x6, 0x9, 0x8001, 0xa, 0xff, 0x2, 0xfffffffe, 0x7, 0x5, 0x7, 0xf, 0x81, 0x1, 0x4, 0x532, 0x200, 0x7f8e, 0xe, 0x2, 0x7, 0x7, 0x0, 0x0, 0x4, 0x5, 0x5, 0x8, 0x3, 0x5, 0x2, 0x4, 0x7, 0x5, 0x6, 0x0, 0x5, 0x9, 0x4, 0xfffffff9, 0xfffffba3, 0x9e4, 0x1ff, 0x5, 0x0, 0x1, 0x80, 0xcca, 0xff, 0x3, 0x2, 0x6, 0xe, 0xe, 0x5, 0x80000001, 0xcb, 0x4, 0x8001, 0x2, 0xffff, 0x1140, 0x1, 0x5, 0x8, 0x9, 0x2, 0xfffffff9, 0x40, 0x6, 0x9, 0x0, 0x7ac4, 0x9, 0xa1c, 0x3, 0x8997, 0x7fffffff, 0x1, 0x9, 0x8, 0x80000001, 0x48, 0x1, 0xffffffae, 0x6, 0x1, 0x5, 0x7, 0x6, 0x0, 0x9, 0x800, 0x5, 0x0, 0x0, 0x8, 0xd0, 0x9, 0xffffffff, 0x7, 0x5, 0x1, 0x10001, 0x10, 0x8, 0x2, 0x2, 0x4, 0x8, 0x10001, 0xffff, 0x6, 0x10, 0x8001, 0x2, 0x3, 0x0, 0x3, 0x280, 0x2, 0x9, 0xfffffff9, 0x8, 0x9, 0x1, 0xf42, 0x40d9, 0x3, 0x6, 0x1, 0xffffff85, 0x7fffffff, 0x6, 0x9, 0x36, 0x4, 0x1, 0x5, 0x1, 0x1f, 0x9, 0x8, 0x7, 0x0, 0x8001, 0x8, 0x9, 0x3ff, 0x5, 0x0, 0xf0c, 0x64f, 0x40, 0x2, 0xffff95db, 0x3f, 0x6, 0x0, 0x8000, 0x6, 0x8, 0x5, 0x93a, 0x800, 0x2, 0x9, 0x0, 0x80, 0x8, 0x0, 0x80, 0x4, 0x0, 0x8, 0x6, 0x7, 0x7, 0x0, 0x2, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x0, 0x0, 0x6, 0x4, 0x4, 0x0, 0x7fff, 0xffffe5df, 0xbd, 0x4, 0x5, 0x2, 0x7, 0x2, 0xa, 0x7, 0x7, 0x3, 0x80000000, 0xffffff00, 0x4dd, 0xc8, 0x4, 0x1043, 0x5, 0x6, 0x3, 0x9, 0x3, 0x7fffffff, 0x428f, 0x21, 0x7, 0x401, 0x0, 0x6, 0xc, 0x5, 0x4, 0x8, 0x8, 0x2, 0x1ad2, 0x5, 0x7, 0x6, 0x7, 0xc, 0x7, 0x7d, 0x7ff, 0x538192b0, 0x9, 0x4, 0x8e55, 0xffff, 0x1, 0x6, 0x2, 0xfffffffb, 0x6, 0x101, 0xd, 0x6, 0xd6, 0x4, 0x3, 0x800, 0x5, 0x2, 0x3, 0x80, 0x5, 0x1, 0xffffa2d2, 0x5, 0x1, 0x9, 0x9, 0x8fc6, 0x6, 0x100, 0x4, 0x4, 0x7, 0x7, 0xfff, 0xa5, 0x313, 0xfffffffb, 0x0, 0x1, 0x8, 0x45e7, 0x1, 0x5, 0x2, 0x7851, 0x5, 0x4, 0xffff0000, 0x1, 0x2, 0x65a6, 0x10001, 0x9, 0x7, 0x7, 0x6, 0x4, 0x9, 0x1, 0xc5, 0x1, 0x566, 0x6, 0x4, 0xc00, 0x1, 0x1, 0x1000000, 0x9, 0x9, 0xda5, 0x10000, 0x1ff, 0xb, 0x7, 0x7ff, 0x7, 0x5, 0x3, 0xd32, 0xfffff801, 0x3, 0x6d4d2bb0, 0xfffffffd, 0x1, 0xff, 0x6, 0x6f773428, 0x1000, 0x8, 0x0, 0x0, 0x9, 0x7, 0x100, 0x93, 0xbdf, 0xd, 0x1, 0x1, 0x7, 0x7fffffff, 0x7, 0x8, 0x80, 0x1, 0x1, 0x80, 0x4, 0x6bb, 0x1000, 0x8, 0x10001, 0x8, 0x8, 0x1, 0x5, 0x8, 0xc1a3, 0xfffffffa, 0x9, 0x0, 0x1000, 0x2, 0x3, 0x1, 0x1c22, 0x6, 0x5, 0x2, 0xfffffff8, 0x5, 0x8, 0x2, 0x9, 0x0, 0x10001, 0x36, 0x4, 0x0, 0x10, 0x9, 0x6, 0x0, 0x14, 0x2, 0x1, 0x95, 0x8, 0x200, 0x5, 0x7, 0xab, 0x9, 0x0, 0x0, 0x59d6, 0x9, 0xfff, 0x20000, 0x0, 0x8, 0x2161, 0x2, 0x2, 0x9, 0x4, 0x3, 0xfff, 0x5d, 0xff, 0x8, 0x8, 0x3, 0x6, 0x9, 0x1000, 0x61a5, 0x7fffffff, 0x1000, 0x8, 0xf, 0x2, 0x0, 0x7, 0x10, 0x7, 0x6, 0x7, 0x4, 0xfffffffb, 0x0, 0x7, 0x81, 0x9, 0x3c78, 0x5, 0x7, 0x4, 0x8, 0x81, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x5, 0x1, 0x9, 0xe, {0x1, 0x0, 0xed, 0x8001, 0x0, 0x4}, {0xd, 0x2, 0x2, 0x1ff, 0x8, 0x2}, 0x3, 0x2, 0x9e2}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8001}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000001, 0x9, 0x3, 0x1, 0x81, 0x9, 0x7, 0xffffffff, 0x4b, 0x3, 0x80000000, 0x0, 0x7, 0x5, 0x1, 0x5, 0x3, 0x1, 0xef, 0x8, 0xa000, 0x6, 0x9, 0xe1db, 0x2, 0xd1e0, 0x0, 0x1, 0xa1, 0x1, 0x6, 0x0, 0xffff, 0x8, 0x100, 0x992, 0x9, 0x296d, 0x27f, 0xffff8000, 0x5, 0x5, 0x2800000, 0xb, 0x3ff, 0x5, 0x0, 0x1, 0x6, 0x401, 0x0, 0x3, 0xfffffff9, 0xffff, 0x2, 0xffffffff, 0x401, 0x9, 0x4, 0x7ff, 0x4, 0x7ff, 0x0, 0xf09b, 0x9, 0x101, 0x5a66, 0x9, 0xfffffff4, 0xece458a, 0x7f, 0x2, 0x9, 0xfffeffff, 0x9, 0x4e13, 0x80000000, 0x3, 0xff5, 0x2, 0x9, 0xd07, 0x2, 0x0, 0x2, 0xa, 0x8, 0x80, 0x8, 0x3, 0x101, 0x0, 0x5, 0x3, 0x8001, 0x0, 0x2, 0x7, 0x970, 0x0, 0x1ff, 0x1, 0x8, 0x40000000, 0x5, 0x6, 0x48f, 0x7, 0x80, 0x8001, 0x7, 0x9, 0x1, 0x1, 0x3, 0xc14e, 0xffffffff, 0x9, 0x4, 0x9, 0x4, 0x747, 0xf624, 0x7, 0x9, 0xd, 0x401, 0xa7, 0x7ab, 0x7, 0x43, 0x0, 0x0, 0xcd, 0x40, 0x3d, 0x8, 0x1, 0x2e, 0x0, 0x7402815d, 0x40000, 0x7, 0x1, 0x8000, 0x7c54, 0x4, 0x3, 0x705, 0x40, 0x292, 0x2, 0x55a, 0xffffffff, 0xa8c, 0x2, 0x5, 0x4, 0x4, 0xaa0, 0x3, 0x8, 0x3ae, 0x3, 0x7, 0x5, 0x4, 0x8001, 0x2, 0x4, 0x7ff, 0x1bd, 0x1ff, 0xf0c, 0x7ff, 0x4, 0x8001, 0x2, 0x3, 0x20b5867a, 0x8, 0x41, 0x6, 0x6, 0xffffffff, 0xb, 0xfffffffa, 0x5, 0x48, 0x8, 0x3, 0x5, 0x6, 0x4, 0x9, 0x8, 0x2, 0x4, 0x1, 0x0, 0x1, 0x3, 0xd, 0x44, 0x1, 0x5, 0x9, 0x4, 0x40, 0x3, 0x9, 0xa8, 0xb, 0x4, 0x8d35, 0xa, 0x9, 0x9, 0x3e9, 0x8, 0x4, 0xab3e, 0xd, 0x4, 0xf3eee3f, 0xf9, 0x5, 0x0, 0xfffffffa, 0x3ff, 0x7, 0x5, 0x85, 0xfffffff7, 0xdbf, 0x7, 0x9, 0xd2b5, 0x1, 0x2, 0x9, 0x400, 0x0, 0xa, 0x9, 0x8001, 0x100, 0xf3f2, 0x52f, 0x2, 0x5, 0xf41, 0x4, 0x3, 0x7, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xb319}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10}, @TCA_POLICE_RATE={0x404, 0x2, [0x7fffffff, 0x2, 0x1, 0x0, 0x81, 0x9, 0xfffffffc, 0x7, 0x8, 0xffffffff, 0x0, 0xe, 0xa, 0x5, 0x6, 0x90d, 0x3, 0xd44c, 0x0, 0xebc6, 0x9, 0xfff, 0xb, 0x0, 0x2, 0x9, 0x0, 0x0, 0xdf, 0x6, 0x9, 0x2, 0x0, 0x6, 0x2, 0x2, 0x7, 0x2e, 0x8, 0x1, 0x3, 0x9, 0xd, 0xce, 0xc98, 0x3, 0x7, 0x7, 0x7, 0x7, 0x3, 0xf57, 0x18d, 0x0, 0x6, 0x4, 0xe, 0x4, 0x7e8, 0x4, 0x2, 0x5, 0x6e, 0xfffffffa, 0x4, 0x2, 0x8, 0x3, 0x0, 0x8001, 0x72d, 0x1, 0x101, 0x2, 0x4d8, 0x1, 0x9, 0x1, 0x3, 0xb45, 0x9, 0x7, 0x1ff, 0x0, 0x10, 0x7fff, 0x1ff, 0x716d, 0x1, 0x9, 0x6, 0x3ff, 0x4, 0x101, 0x2, 0x1, 0x5, 0x1, 0x5, 0x9, 0x5, 0x7fffffff, 0x400, 0x5, 0xd, 0xfffff141, 0x7, 0x3, 0x1, 0x1, 0x80000000, 0x80000000, 0x7, 0x9, 0x7, 0x2, 0xa, 0x1, 0x80000001, 0x1000, 0x9, 0x3, 0x7, 0x5, 0x3, 0x4, 0xfffeffff, 0xffff0000, 0x5, 0x4, 0x3, 0x9, 0x5, 0xffffff82, 0x7, 0xfffffffc, 0xe90, 0x2, 0x1, 0x5, 0x6c, 0x3, 0x3, 0xe, 0x7ff, 0x2, 0x2, 0x6, 0x5, 0x3, 0x800, 0x2, 0x80000001, 0xfffffffa, 0x7ff, 0xb10c, 0x1, 0x9, 0x2, 0x5, 0x101, 0x8, 0xf, 0x2, 0xe5e, 0xfffffffb, 0x10, 0x2, 0x7, 0x8, 0x6, 0x7f, 0x81, 0x7ff, 0x0, 0xc, 0x0, 0x1, 0x8, 0x2, 0x8, 0xd, 0x9, 0x3, 0x7f, 0x4, 0x6, 0x0, 0x80000001, 0x2, 0x2, 0xb, 0x9, 0x8001, 0xfffffffa, 0x61, 0xe, 0x0, 0x4, 0x81, 0x7, 0x3, 0x1ffe00, 0x5, 0x1c, 0x37, 0x8, 0x401, 0x4, 0x1, 0x7fffffff, 0xff6, 0x2, 0x4, 0x9, 0x7ff, 0xe36, 0x9, 0xafa, 0x64, 0x3, 0x3, 0x32, 0x3, 0x4, 0x0, 0x5, 0x36d, 0x0, 0x1, 0x66, 0x1, 0x0, 0x7f, 0x5a6, 0xe, 0x81, 0x4, 0x82, 0x40, 0x8, 0x9, 0x3, 0x1ff, 0x53c3, 0x10, 0x4, 0x1, 0x9, 0x8, 0x10, 0x2, 0x2, 0x7, 0xe648, 0x80]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x3, 0x1, 0xfbba, 0x4, 0x2, 0x0, 0x3ff, 0xfffffffd, 0x1180, 0xd13, 0x0, 0x170, 0x88, 0x7, 0x5, 0x8, 0x6, 0x9, 0x400, 0xd, 0x0, 0x3, 0x53b, 0x5, 0x10001, 0xffffa2c3, 0x0, 0x1, 0x3, 0x8, 0xae, 0xe7a7, 0xffffff51, 0x6b6d, 0x1, 0x9, 0x3, 0x988, 0x4, 0x1, 0x4942, 0xf, 0x8, 0x9, 0x1, 0x1, 0x97b, 0x5, 0x5, 0x80000000, 0x401, 0x80000000, 0xfffffaba, 0x5e, 0x6, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffff, 0x6, 0x7, 0x7, 0x1, 0x6, 0x10, 0xc, 0x8, 0x80000000, 0x2, 0x3, 0x1ff, 0x2, 0x8000, 0x7, 0x0, 0xef, 0x50c23fb2, 0x5, 0xffffffff, 0x633, 0x4, 0x0, 0x8001, 0x5, 0x8, 0x8, 0x80000001, 0x0, 0x2, 0x9, 0xab45, 0x6, 0x0, 0x8, 0x6, 0x2de, 0x8af, 0x2, 0x200, 0x4, 0x3, 0xe, 0x8001, 0xe3, 0x8, 0x0, 0x5, 0x7, 0x8001, 0x9, 0x0, 0x8, 0xd9b30000, 0x391e6982, 0x2, 0x4, 0x3, 0x7, 0x7, 0x200, 0x6, 0xf9e, 0x3, 0x0, 0x3, 0xffff, 0x8, 0x0, 0x0, 0x3, 0xba, 0x7, 0xe, 0xd7f3, 0x0, 0x7, 0x5, 0x2, 0xa, 0x800, 0x685, 0x1, 0x8, 0x2cb9, 0x5, 0x8612c29, 0x43, 0x9f4, 0x5, 0xe6e, 0x3, 0xa, 0x1, 0x5, 0x6f6e163a, 0x8, 0x3, 0x9, 0xff, 0x3, 0x800, 0x2, 0x3, 0xffffff00, 0xe, 0x0, 0x9, 0x8, 0xfff, 0x9, 0xfffff40e, 0xffffff00, 0x7fff, 0x9, 0x3, 0x4, 0x7, 0x1000, 0x9, 0x8001, 0x89, 0xc, 0x4367dd8d, 0x3, 0x80000000, 0x3, 0x5c, 0x7, 0x1, 0xfffffff9, 0xfffffffc, 0x3, 0x5, 0x5, 0x4, 0x9, 0x1, 0x1, 0x2, 0x0, 0xfffffff9, 0x8, 0x4, 0x2, 0x9, 0x2, 0x101, 0x1af, 0x3, 0x8, 0x1c87, 0x4, 0x9, 0x101, 0x9, 0x8001, 0x80, 0x0, 0x80000001, 0xffffffff, 0x80000000, 0xeee9bf9, 0x6, 0x7, 0x81, 0x9, 0x3, 0x7ff, 0x400, 0x8, 0x3, 0x62, 0x2000, 0x6, 0xd54, 0xa, 0x6, 0x1, 0xffffffff, 0x4, 0x4, 0xfffffff9, 0x3, 0x9, 0x200, 0xc000000, 0x7f, 0x1ff, 0x59, 0x4, 0x3367fa7f, 0x6, 0x8]}], [], [@TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x800, 0x20000000, 0xfffffffe, 0x7e6, 0x0, {0x0, 0x0, 0xede, 0x3, 0x3, 0xff}, {0xfd, 0x2, 0x9, 0xd, 0x4, 0x6}, 0x0, 0xfffff1ab, 0x4}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}]]}, {0x24, 0x6, "aa4e8b36a382161f052d519cbec9f551d6c399058eed177386ec402ff57be8ac"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}, {0x244, 0x1, [@m_simple={0x18c, 0x1, 0x0, 0x0, {{0xb}, {0x8c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x9c, 0x10000000, 0xf0}}, @TCA_DEF_DATA={0x8, 0x3, '-\\}\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x7, 0x8, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x4, 0x8, 0xf, 0xfffffffc}}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffffff, 0xe67, 0x10000000, 0x5310, 0x10}}, @TCA_DEF_DATA={0x8, 0x3, 'GPL\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x391b, 0x3, 0x2, 0xdb1f}}]}, {0xd7, 0x6, "bfbecc1734fd5fecd163faa430fe0b590cd3db60ce1a18f6bba1008ab538a8cfc1fbca63efa2eb310c52198fd1ff7ceaaf2a901ad2b587644050568a57d0773379bec2be8b631fe08b5c3ed77268e57d87bb158e4c0e560de33098d980f7a78fed60001ea87da99595628d8d8bbac861348fdd57bb235583c0e84c868162e58fa115d7b5035fe1a93f57bac334810391b1ed6178856e2ff79f564af68c305f9a771afbe2db5c128ee46ed8b94907258f6ea460447f642f7e5a13688afd4ae63f191fb4674730ff165e902fb291a79c8ac00732"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mirred={0xb4, 0x7, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x4, 0xf, 0xb, 0x80000001}, 0x2, r8}}]}, {0x68, 0x6, "ba0b59781b5176379e84467da82615996c854f815bc41a51375312497f0668e3cd2afdc297a95e8d382983497ff61ed951ec79ec1f22d31412732828aaedc056034f7f9010165e6bbfe19857ba56ade2dc934d7af24e517372e73e269b0d2508be2e425f"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, {0x154, 0x1, [@m_csum={0xa4, 0x13, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x6, 0x3, 0x8c0f, 0x8}, 0x36}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x10001, 0x6, 0x3, 0x100}, 0x1f}}]}, {0x3e, 0x6, "a2e9593c8cba537c3c421bc55ef354e8be64eb884f5bf5e9ecb8d1e779b468eb4bc845e8c91491d913907368faab40309b268881785be8592b51"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0xac, 0x3, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @random="8acee15b9a55"}, @TCA_IFE_METALST={0x28, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xfff5}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xe9}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x1}, @TCA_IFE_TYPE={0x6, 0x5, 0x8000}]}, {0x40, 0x6, "11443085f09b491597ca023e5577da25520c04cc90ab7c62c3479dc253bdaec43d89153d5cb851e9edcd4d68a2fa2d0c66d3e11f908f430434d01957"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x2e00}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r8, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x10)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
signalfd(0xffffffffffffffff, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0)

1m36.29710941s ago: executing program 7 (id=1329):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
prctl$PR_SET_NAME(0xf, 0x0)
r1 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000040)=[@ip_tos_u8={{0x11, 0x0, 0x7}}], 0x18}, 0x40010)

1m36.062453703s ago: executing program 7 (id=1333):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190da)

1m36.026899407s ago: executing program 36 (id=1333):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190da)

1m27.544136886s ago: executing program 4 (id=1578):
socket$kcm(0x10, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000050000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18)
syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0xf07d, 0x400, 0x40000, 0x105}, &(0x7f0000000400)=<r1=>0x0, &(0x7f0000000240)=<r2=>0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x89fc, &(0x7f00000006c0)={'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd_index=0x1, 0x8, &(0x7f0000002a40)=[{&(0x7f0000000280)=""/221, 0xdd}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/4099, 0x1000}, {&(0x7f0000000440)=""/107}, {&(0x7f0000000500)=""/193}, {&(0x7f00000003c0)=""/18}, {&(0x7f0000000700)=""/148}, {&(0x7f0000002840)=""/245}, {&(0x7f0000002940)=""/226}], 0x11b, 0x1d})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
r6 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33)

1m27.355190445s ago: executing program 4 (id=1582):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0)

1m27.276236473s ago: executing program 4 (id=1584):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d6173710000000014000280080002"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0)
r1 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', <r2=>0x0})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r4}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000001040)='ns/net\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESHEX=0x0, @ANYBLOB="00000000000000cf452b9f45846993fe3344484400b704000008000000850000e57700000095e8371598f6d0a88d4d9e4596bb798e131ed4b1ec259cccfb4b630075e67a7a211b490fd0240194bc423d76ff8643ff8bc348506890901e73fecdf73b466d0009b87e58337da5e0fe6a5922cdd0203b797bad4cf93a37415ca3ac7acb454c994e47d3c02d8151"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000004000000000000000100000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x4000800)
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe, 0x1}, {0x0, 0x3}}}, 0x24}}, 0x800)

1m27.166791003s ago: executing program 4 (id=1589):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008500"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000340)='kfree\x00', r1}, 0x18)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$eJzs3c9vHFcdAPDvjL22k7h1WnoABG1oCwFFWcebNqp6gHJCCFVC9AhSauyNFWXXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di7tpPYXmv385FG+9688XzfizPvzbxd7wtgbF2LiO2ImIqI9yNirtyflFu8093y4z7bebi0u/NwKYkse++fSVGe74uen8ldKc85ExE/+E7Ej5PDcdubWw8WG436epmf7zTX5tubWzfvNxdX6iv11VrtzsKdW2/dfrP2BK2ZObL0leZUmfryp3/Y/sZP82rNlnt623Gauk2v7MfJTUbE984i2BBMlO2ZGnZFeCppRLwYEa8W1/9cTBS/TQBglGXZXGRzvXkAYNSlxRxYklbLuYDZSNNqtTuH91JcThutdufGvdbG6nJ3ruxqVNJ79xv1W+Vc4dWoJHl+oUg/ytcO5G9HxAsR8YvpS0W+utRqLA/zxgcAxtiVA+P/f6a74z8AMOKO/tgMADCKjP8AMH6M/wAwfoz/ADB+uuP/pSf9sSzLfnYW1QEAzoHnfwAYP8Z/ABgr33/33XzLdsvvv17+YHPjQeuDm8v19oNqc2OputRaX6uutForxXf2NI87X6PVWlt4IzY+vPrNtXZnvr25dbfZ2ljt3C2+1/tuvVIctX0OLQMABnnhlU/+nOQj8tuXii161nKoDLVmwFlLh10BYGgmhl0BYGi6q331WaAPGHmPnvGf+EMApgdgRBx3BzDT7w+EsizLzq5KwBm7/gXz/zCuyvn/SZ8ChvFz3Px/sTawNwlhJE0OuwLA0GRZctI1/+OkBwIAF9sRc/xXz/M+BBieAe//v1i+/rZ8c+BHyweP+PgsawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX2976v9Vymd/ZSNNqNeK5YgGgSnLvfqN+KyKej4g/TVem8/zCkOsMADyr9G9Juf7X9bnXZx8revnKfnIqIn7yq/d++eFip7P+x4ip5F/Te/s7H5f7a8cGmzmLFgAAR9sbp4vXngf5z3YeLu1t51mfv3+7e1eQx93dmYrd/fiTMVm8zkQlIi7/OynzXUnP3MWz2P4oIj7fr/1JzBZzIN1bloPx89jPnVL8iRPFTx+Ln5YLNKflv8XnTqEuMG4+yfufd/pdf2lcK177X/8zRQ/17Mr+Lz/V0m7RBz6Kv9f/TQzo/66dNMYbv/9uN3XpcNlHEV+cjNiLvdvT/+zFTwbEf/2E8f/ypZdfHVSW/TrievSP3xtrvtNcm29vbt2831xcqa/UV2u1Owt3br11+83afDFHPT94NPjH2zeeH1SWt//ygPgzx7T/q4NOeuAp9zf/e/+HXzki/tdf6xc/jZeOiJ+PiV8b2OLHLV7+3cDn7jz+8uH2Jyf5/d84YfxP/7p1aNlwAGB42ptbDxYbjfq6hMTFT+T/ZS9ANfomvnVesaaif9HPX+te0weKsuypYg3qMU5j1g24CPYv+oj477ArAwAAAAAAAAAAAAAA9HUef7E07DYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwuv4fAAD//9VG0+g=")
r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150)
pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
fallocate(r2, 0x0, 0xbf5, 0x2000402)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0xc, r2, 0x0, 0x0, 0x0, 0xfffffffffdffffff})

1m26.775699113s ago: executing program 4 (id=1603):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x67, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x10}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x3}, 0x18)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0)
ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240))
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804)
socket$packet(0x11, 0x3, 0x300)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000001000390429bd7000fbdbdf2500000000", @ANYRES32, @ANYBLOB="0198000000000000180012800b000100697036746e6c0000080002e87a25239640a76d86ae04e9b2bd7a19f90d5c785da833f3eb919b46f1836efac95528efdb271d0453755014"], 0x38}, 0x1, 0x0, 0x0, 0x24000016}, 0x4048004)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x18c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x4}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x24000080}, 0x9e6604c54f69f706)

1m26.578048402s ago: executing program 4 (id=1607):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x9)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000440)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x20000013})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00'}, 0x10)
close(r0)

1m26.49879867s ago: executing program 37 (id=1607):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x9)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000440)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x20000013})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00'}, 0x10)
close(r0)

1m12.61442267s ago: executing program 6 (id=1976):
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)='./file1\x00', 0x0, 0x100, 0x12345})
r0 = syz_io_uring_setup(0x16b, &(0x7f0000000100)={0x0, 0x40, 0x10, 0x1, 0x34f}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1})
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000280)={0xb5, 0xed, 0x60ed})
socket(0xa, 0x1, 0x0)
io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0)

1m12.544424887s ago: executing program 6 (id=1978):
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
getpid()
add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

1m12.484221963s ago: executing program 6 (id=1980):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b'], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d000000"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x48, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x4}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0)

1m12.452740616s ago: executing program 6 (id=1982):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
socket$packet(0x11, 0xa, 0x300)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@dioread_lock}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffa83)
prctl$PR_SET_NAME(0xf, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)

1m12.31571421s ago: executing program 6 (id=1985):
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc)
accept4$x25(r0, 0x0, 0x0, 0x80000)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x8084)
r3 = creat(&(0x7f0000000240)='./file0\x00', 0xd931d3864d39df7d)
close(r3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000010000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100))
sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000)

1m11.411856821s ago: executing program 6 (id=2008):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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")
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r0, &(0x7f00000014c0)='o', &(0x7f0000000b40)=""/31}, 0x20)
socket$phonet_pipe(0x23, 0x5, 0x2)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
socket(0x10, 0x3, 0x0)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
signalfd(0xffffffffffffffff, 0x0, 0x0)

1m11.385037373s ago: executing program 38 (id=2008):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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")
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r0, &(0x7f00000014c0)='o', &(0x7f0000000b40)=""/31}, 0x20)
socket$phonet_pipe(0x23, 0x5, 0x2)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
socket(0x10, 0x3, 0x0)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
signalfd(0xffffffffffffffff, 0x0, 0x0)

3.950649525s ago: executing program 9 (id=3143):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
gettid()
timer_create(0x0, 0x0, &(0x7f0000000380))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r0, 0x2)
r1 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x2)
flock(r1, 0x2)

2.851149285s ago: executing program 9 (id=3152):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x100000001}, 0x18)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r2, @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1e8}}, 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x2)
r6 = socket$netlink(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x200000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40840d4}, 0x0)

2.359993974s ago: executing program 5 (id=3161):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x4ab}, 0x18)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100), 0x101201, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, r3, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x81}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x8}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x2400c011}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="d8000000180081084e81f782db44b904021d0800fd007c06e8fe55a10a0015400600142603600e120800060000000201a80016000800014003e01100036010fab94dcf5c0461c1d67f6f9400e08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef409001b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed1bffec62070000cbee5de6ccd44a677575a62cef352a92954b43370e9701ee1b6ec75a526c5d5b5701cf8773", 0xd8}], 0x1}, 0x400c0)

2.352467705s ago: executing program 5 (id=3162):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
gettid()
timer_create(0x0, 0x0, &(0x7f0000000380))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r0, 0x2)
r1 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x2)
flock(r1, 0x2)

1.872751513s ago: executing program 9 (id=3167):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10)
socket$netlink(0x10, 0x3, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@dioread_lock}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff)
sendfile(r4, r3, 0x0, 0xfffa83)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
prctl$PR_SET_NAME(0xf, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
unlink(&(0x7f0000000000)='./file0\x00')
fallocate(r5, 0x2, 0x200, 0x0)
getresuid(&(0x7f00000000c0), 0x0, &(0x7f00000001c0))
lstat(&(0x7f0000000340)='./file1/file3\x00', &(0x7f0000000380))
statx(0xffffffffffffffff, &(0x7f0000000440)='./file1/file3\x00', 0x0, 0x400, &(0x7f0000000480))
renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0)
umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1f0, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0x1a8, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x190, 0x1, [@m_nat={0xe0, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x6, 0x10000000, 0x80000001}, @empty, @multicast1, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x6, 0x6, 0x6979, 0x28}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xffffffff, 0x1}}]}, {0x65, 0x6, "525dfeac86ce84c0651b02d8cfcfb2e8ebe4fa883a2e8593252c80a728a5f4291635480f6cbc84b2432cef684200149d9d5edd825c13eb2d4d0d699ac1ca3cc36e4a09f088dc445f0783cc90f1d501855767e6d7c186ca9b4e0cb1c4bf18117b10"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_simple={0xac, 0x1e, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x4, 0x10000000, 0x633, 0xe2d}}]}, {0x66, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bfb320865cee27f05adfbc7dae04880a34e7bf775010128401ec5a80f551da79136f2a4ff74f3588c03c976e1c54366c6747dbbdd2e1e0d6da659b84a2ea14191b4223d2b6eeb46549"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080)
r6 = socket(0x10, 0x803, 0x0)
sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)

1.834029967s ago: executing program 2 (id=3169):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
munmap(&(0x7f0000004000/0x2000)=nil, 0x2000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000030000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x9cf, 0x1, 0x800000000001004})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000010100)={0x4, 0xf, 0x200, 0x7, 0xda, 0x10001, &(0x7f0000010000)="2d547af59663519b5bdc9cdfc29f80666d15f6e38ed1957b3ad618a3486213a9ce7ba7769246861a6002e3b72cf0ffdbe8e998d8076be44278bcbf3c7e34d3561225220b422208d82e928bfa7f4cb102d571027916f1da17c896ee5fcb8ca6c0e88da1e46ba5c8a19dfaf3ccbfbf8a032f295c4c064404f16b7f718f3c9eb36f64eb8cdb48b7294cf5006db12a85f8ee60ae71ddbfb4ea994803ca4cfe84f1d24cb10753e2306fd3efedc1257e33ef2e0c532e1d67032d6d7d63a0a8d60f38cbe37caf17932d733e6b7f0c5bfad61be1c14213e7b8682b9eb8eb"})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000300)=r2}, 0x20)

1.793367941s ago: executing program 2 (id=3171):
pipe2(&(0x7f0000001cc0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x678)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f00000000c0)={0xfffffff8, 0x8, 0xfffbfffd, 0x984, 0x79, "bea08812dd0909000400000000000000000200", 0x4, 0x200})
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCXONC(r4, 0x540a, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000240)=0x30)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, <r5=>0x0}, &(0x7f00000001c0)=0xc)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r5}}]}})

1.733329397s ago: executing program 9 (id=3172):
socket(0x10, 0x803, 0x0)
socket$unix(0x1, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='kmem_cache_free\x00', r0, 0x0, 0x1}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000240)='./file0/../file0\x00', 0x0)

1.708605069s ago: executing program 9 (id=3174):
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a547ae412132", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @multicast2, @local}, {0x16, 0x0, 0x0, @multicast1}}}}}, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @rand_addr=0x64010101}}, 0x1e)
r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301)
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000140)={0x4, 0xb, 0x7f, 0x8001, 0x0, 0x9, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000008000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0x3, 0x288}, &(0x7f0000000100)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r9}, 0x10)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r5, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}})
io_uring_enter(r6, 0x3516, 0xddd3, 0x4, 0x0, 0x0)
shutdown(r4, 0x1)
syz_mount_image$ext4(&(0x7f0000000840)='ext4\x00', &(0x7f0000000800)='./file1\x00', 0x40, &(0x7f0000000740)={[{@user_xattr}, {@nodioread_nolock}], [{@permit_directio}, {@fsname={'fsname', 0x3d, '!'}}]}, 0x1, 0x576, &(0x7f0000000140)="$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")
bind$802154_raw(0xffffffffffffffff, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.659673314s ago: executing program 2 (id=3175):
pipe2(&(0x7f0000001cc0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x678)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f00000000c0)={0xfffffff8, 0x8, 0xfffbfffd, 0x984, 0x79, "bea08812dd0909000400000000000000000200", 0x4, 0x200})
r5 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCXONC(r5, 0x540a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x1e}, 0x18)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, <r6=>0x0}, &(0x7f00000001c0)=0xc)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r6}}]}})

1.523205178s ago: executing program 2 (id=3177):
syz_open_procfs(0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r1}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00')
preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/35, 0x23}], 0x1, 0x0, 0x0)
writev(r2, &(0x7f00000003c0), 0x100000000000022d)
pipe(&(0x7f0000005880)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000f00)={0x7f, <r5=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x16, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES32=r1, @ANYBLOB="00000000be000000182a0000", @ANYRES32=r0, @ANYBLOB="0000000007000000186000000a00000000000000ff0f0000"], &(0x7f0000000dc0)='GPL\x00', 0xb, 0xfeee, &(0x7f0000000e80)=""/96, 0x41000, 0x1, '\x00', 0x0, @flow_dissector=0x11, r3, 0x8, &(0x7f0000000e00)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, r5, r3, 0x7, 0x0, &(0x7f0000000f40)=[{0x2, 0x3, 0xb, 0x2}, {0x2, 0x4, 0xc, 0xb}, {0x5, 0x3, 0x1, 0x9}, {0x5, 0x2, 0x9, 0x5}, {0x2, 0x1, 0xc, 0x8}, {0x3, 0x2, 0xd, 0x2}, {0x5, 0x5, 0x4, 0xc}], 0x10, 0x9}, 0x94)
fsetxattr$security_selinux(r4, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$inet_nvme(r0, &(0x7f0000000840)={&(0x7f0000000240)=@alg, 0x80, &(0x7f0000000940)=[{}, {&(0x7f00000003c0)=""/248, 0xf8}, {&(0x7f0000000080)=""/1, 0x1}, {&(0x7f00000004c0)=""/29, 0x1d}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/50, 0x32}, {&(0x7f0000000680)=""/150, 0x96}, {&(0x7f0000000740)=""/203, 0xcb}], 0x8, &(0x7f0000000ac0)=""/244, 0xf4}, 0x40000000)
ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x202}], 0x2, 0x0, 0x0, 0x0)

1.472184473s ago: executing program 9 (id=3178):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x100000001}, 0x18)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r2, @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1e8}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x200000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40840d4}, 0x0)

1.452592485s ago: executing program 5 (id=3179):
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d"], 0xfe33)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33)

1.420243598s ago: executing program 8 (id=3181):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
add_key(&(0x7f00000002c0)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff)

1.40154961s ago: executing program 5 (id=3182):
socket(0x10, 0x803, 0x0)
socket$unix(0x1, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='kmem_cache_free\x00', r0, 0x0, 0x1}, 0x18)
chroot(&(0x7f0000000100)='./file0\x00')

1.385363871s ago: executing program 8 (id=3183):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10)
socket$netlink(0x10, 0x3, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@dioread_lock}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff)
sendfile(r4, r3, 0x0, 0xfffa83)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
prctl$PR_SET_NAME(0xf, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
unlink(&(0x7f0000000000)='./file0\x00')
fallocate(r5, 0x2, 0x200, 0x0)
getresuid(&(0x7f00000000c0), 0x0, &(0x7f00000001c0))
lstat(&(0x7f0000000340)='./file1/file3\x00', &(0x7f0000000380))
statx(0xffffffffffffffff, &(0x7f0000000440)='./file1/file3\x00', 0x0, 0x400, &(0x7f0000000480))
renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0)
umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1f0, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0x1a8, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x190, 0x1, [@m_nat={0xe0, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x6, 0x10000000, 0x80000001}, @empty, @multicast1, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x6, 0x6, 0x6979, 0x28}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xffffffff, 0x1}}]}, {0x65, 0x6, "525dfeac86ce84c0651b02d8cfcfb2e8ebe4fa883a2e8593252c80a728a5f4291635480f6cbc84b2432cef684200149d9d5edd825c13eb2d4d0d699ac1ca3cc36e4a09f088dc445f0783cc90f1d501855767e6d7c186ca9b4e0cb1c4bf18117b10"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_simple={0xac, 0x1e, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x4, 0x10000000, 0x633, 0xe2d}}]}, {0x66, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bfb320865cee27f05adfbc7dae04880a34e7bf775010128401ec5a80f551da79136f2a4ff74f3588c03c976e1c54366c6747dbbdd2e1e0d6da659b84a2ea14191b4223d2b6eeb46549"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080)
r6 = socket(0x10, 0x803, 0x0)
sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)

1.373967233s ago: executing program 5 (id=3184):
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a547ae412132", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @multicast2, @local}, {0x16, 0x0, 0x0, @multicast1}}}}}, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @rand_addr=0x64010101}}, 0x1e)
r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301)
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000140)={0x4, 0xb, 0x7f, 0x8001, 0x0, 0x9, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000008000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0x3, 0x288}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r8}, 0x10)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r4, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}})
io_uring_enter(r5, 0x3516, 0xddd3, 0x4, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000840)='ext4\x00', &(0x7f0000000800)='./file1\x00', 0x40, &(0x7f0000000740)={[{@user_xattr}, {@nodioread_nolock}], [{@permit_directio}, {@fsname={'fsname', 0x3d, '!'}}]}, 0x1, 0x576, &(0x7f0000000140)="$eJzs3T1sG2UfAPD/neO3X3nf9JXeVwLUoQKkIlV1kn5AYWpXRKVKHZBYIHLcqIoTV7EDTZQh3StEBwSoS9lgYAQxMCAWRlYWEDNSRSOQmg5g5K80TZzglDouud9POvuee87+P8+d/499pzs5gMw62nhII56OiItJxMi6uqFoVx5trbe6slS8v7JUTKJev/RLEklE3FtZKnbWT9rPhyJiOSKeiohv8hHH081xqwuL0xPlcmmuXR6tzVwdrS4snrgyMzFVmirNnnrp5TNnT58ZPzm+/mX36+tL+Z319caPN9+98d2rt29++tmR5eL7E0mci+F23fp+PE6tbZKPcxuWn+5HsAFKBt0AHkmuneeNVPp/jESunfXd1Ed2tWlAn9X3RdSBjErkP2RU53dA4/i3M+3m748751sHII24q+2pVTPUOjcR+5vHJgd/TR46Mmkcbx7ezYayJy1fj4ixoaHNn/+k/fl7dGOPo4H01dfnWztq8/5P18af6DL+DHfOnf5NnfFvddP49yB+bovx72KPMX5/46ePtox/PeKZrvGTtfhJl/hpRLzVY/xbr395dqu6+scRx6J7/I5k+/PDo5evlEtjrceuMb46duSV7fp/cIv4rXO2+5tfM922f5fT2l198e3nzy5vE/+F57bf/922/4GIeK/H+P+998lrW9XduZ7cbfwK2On+TyIft3uM/+K5oz/0uCoAAAAAAAAAALADafNatiQtrM2naaHQuof3f3EwLVeqteOXK/Ozk61r3g5HPu1caTXSKieN8nj7etxO+eSG8qlcO2DuQLNcKFbKkwPuOwAAAAAAAAAAAAAAAAAAADwpDm24//+3XPP+/41/Vw3sVVv/5Tew18l/yK6H8z8ZWDuA3ef7HzKrLv8hu+Q/ZJf8h+yS/5Bd8h+yS/5Ddsl/AAAAAAAAAAAAAAAAAAAAAAAAAADoi4sXLjSm+v2VpWKjPDm0MD9defvEZKk6XZiZLxaKlbmrhalKZapcKhQrM3/1fkmlcnUsZuevjdZK1dpodWHxzZnK/GznP0VL+b73CAAAAAAAAAAAAAAAAAAAAP55hptTkhYiIm3Op2mhEPHviDicRHL5Srk0FhH/iYjvc/l9jfL4oBsNAAAAAAAAAAAAAAAAAAAAe0x1YXF6olwuzWVkZmgnK0fE8uNtRuMdd/yqfHtfPSnb0EwWZgY8MAEAAAAAAAAAAAAAAAAAQAY9uOm311f80d8GAQAAAAAAAAAAAAAAAAAAQCalPycR0ZiOjTw/vLH2X8lqrvkcEe/cuvTBtYlabW68sfzu2vLah+3lJwfRfqBXnTzt5DEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwQHVhcXqiXC7N9XFm0H0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBR/BgAA///eANcP")
syz_usb_connect(0x1, 0x24, &(0x7f0000000500)=ANY=[], 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.19962525s ago: executing program 8 (id=3185):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18)
chroot(&(0x7f0000000100)='./file0\x00')
pivot_root(&(0x7f0000000240)='./file0/../file0\x00', 0x0)

1.140133586s ago: executing program 8 (id=3186):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0)
r0 = syz_clone(0x4000, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000280), &(0x7f0000000340))
sched_setscheduler(r0, 0x1, &(0x7f00000003c0)=0x1)
r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x242, 0x2e0)
sendfile(r1, r1, 0x0, 0xa)
fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x1, 0xc, 0x5, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, 0x0, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r5, 0x0, 0xb}, 0x18)
r6 = socket$unix(0x1, 0x1, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bind$unix(r6, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

657.739684ms ago: executing program 2 (id=3188):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
munmap(&(0x7f0000004000/0x2000)=nil, 0x2000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x9cf, 0x1, 0x800000000001004})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000010100)={0x4, 0xf, 0x200, 0x7, 0xda, 0x10001, &(0x7f0000010000)="2d547af59663519b5bdc9cdfc29f80666d15f6e38ed1957b3ad618a3486213a9ce7ba7769246861a6002e3b72cf0ffdbe8e998d8076be44278bcbf3c7e34d3561225220b422208d82e928bfa7f4cb102d571027916f1da17c896ee5fcb8ca6c0e88da1e46ba5c8a19dfaf3ccbfbf8a032f295c4c064404f16b7f718f3c9eb36f64eb8cdb48b7294cf5006db12a85f8ee60ae71ddbfb4ea994803ca4cfe84f1d24cb10753e2306fd3efedc1257e33ef2e0c532e1d67032d6d7d63a0a8d60f38cbe37caf17932d733e6b7f0c5bfad61be1c14213e7b8682b9eb8eb"})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000300)=r2}, 0x20)

614.981919ms ago: executing program 2 (id=3189):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r1, 0x2)
r2 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x2)
flock(r2, 0x2)

614.320538ms ago: executing program 5 (id=3190):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000300)=[{{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000400)="14959e136ada675b673d115ffdcb4c6509a102d80d388239e87dbbbc74c12e830bf896283fc07c8b82d60a85e233cb5407ce9ee42117e26a189973d6cfc844e064053bb11f6066ce3518ef7a4a89253718f47e6947eb84eb547e8fa60546e1e60d9f80d921da78af352e5e3b195db8d0c3f9c6d6fe5cdc7dbdad5059e59c1264b3e5876f316b7612c9ca936e599dbaa3c37490c6c6d108f1d398add5564cd04418eb0fc7e271d77a686bc241c68e8a02580b9a44f5096c21ffffd95f4c3a0514749de19e9936c5bd1f47946f17db800f2f8208007950a0d7719d204ec3cf41c91668e82bd1f7ef6ac66195b500e5f0501a4d", 0xf2}, {&(0x7f0000000240)="f637d131e48bfcef5224b4a43b5a683296285545d18486919d542f6ccaf0d7e230812024af7b4f6f2d6e823697a5e99ecafb4e9e693c500ac16e6b5eb4d7912a9aec47ba31cb931853b63ff51bbb9c30998ae5761dd739e8180727325113c3465fc07453", 0x64}], 0x2, 0x0, 0x0, 0x8000}}], 0x1, 0x40000)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000800000000201ca070da6c6e685400"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x6}, 0x18)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
r5 = syz_io_uring_setup(0xbc3, &(0x7f0000000100)={0x0, 0x1568, 0x10000, 0x2, 0x285}, &(0x7f0000000040)=<r6=>0x0, &(0x7f00000000c0)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10)
io_uring_enter(r5, 0x29ab, 0xd480, 0x0, 0x0, 0x0)

506.47904ms ago: executing program 3 (id=3191):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89fc, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e120800", 0x2a}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33)

470.221433ms ago: executing program 3 (id=3192):
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab0700"], 0xfe33)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33)

454.572595ms ago: executing program 3 (id=3193):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
add_key(&(0x7f00000002c0)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff)

439.740276ms ago: executing program 3 (id=3194):
socket(0x10, 0x803, 0x0)
socket$unix(0x1, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='kmem_cache_free\x00', r0, 0x0, 0x1}, 0x18)
chroot(&(0x7f0000000100)='./file0\x00')

424.113948ms ago: executing program 3 (id=3195):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
write$cgroup_pid(r0, 0x0, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, 0x0)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000280)})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x6fbc0c40b348e70)
r3 = io_uring_setup(0x39f0, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
ioctl$BTRFS_IOC_SPACE_INFO(r3, 0xc0109414, 0x0)
io_uring_setup(0x138a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0)

391.884241ms ago: executing program 3 (id=3196):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f00000001c0)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x800000002400}, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
pipe(&(0x7f0000005880)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
fsetxattr$security_selinux(r3, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xfffffffffffffff5]}, 0x8, 0x0)
syz_open_procfs(0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000)
r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3)

121.588868ms ago: executing program 8 (id=3197):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0)
ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000000040))
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2, 0x0, 0x84}, 0x18)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000002000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r4 = getpgrp(0x0)
r5 = syz_pidfd_open(r4, 0x0)
fsetxattr$trusted_overlay_nlink(r5, &(0x7f00000018c0), 0x0, 0x0, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000f02000000000000bc26100000000000bf672000000000001602000000c0ffff6702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0}, 0x94)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000080)='syzkaller\x00'}, 0x94)
r7 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3, 0x4002)
open_tree(r7, &(0x7f00000000c0)='./file0\x00', 0x900)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

0s ago: executing program 8 (id=3198):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f00000001c0)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x800000002400}, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
pipe(&(0x7f0000005880)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
fsetxattr$security_selinux(r3, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xfffffffffffffff5]}, 0x8, 0x0)
syz_open_procfs(0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3)

kernel console output (not intermixed with test programs):

212.974751][T10935] loop9: detected capacity change from 0 to 1024
[  212.981421][T10935] EXT4-fs: Ignoring removed orlov option
[  212.991328][T10937] netlink: 'syz.2.2572': attribute type 1 has an invalid length.
[  212.999162][T10937] netlink: 'syz.2.2572': attribute type 4 has an invalid length.
[  213.006964][T10937] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2572'.
[  213.018346][T10935] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  213.057668][ T5919] Bluetooth: hci0: Frame reassembly failed (-84)
[  213.090284][T10936] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2574'.
[  213.140788][T10945] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  213.140788][T10945]    program syz.8.2576 not setting count and/or reply_len properly
[  213.183543][T10945] netlink: 'syz.8.2576': attribute type 1 has an invalid length.
[  213.219824][T10945] 8021q: adding VLAN 0 to HW filter on device bond1
[  213.259354][T10945] bond1: (slave geneve2): making interface the new active one
[  213.294374][T10945] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  213.303417][ T5919] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  213.316983][ T5919] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  213.346061][ T5919] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  213.365422][ T5919] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  213.411032][T10950] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2577'.
[  213.472584][T10950] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2577'.
[  213.655341][T10967] loop8: detected capacity change from 0 to 512
[  213.697965][T10967] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.733035][T10967] ext4 filesystem being mounted at /403/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  213.746043][T10973] netlink: 'syz.3.2586': attribute type 1 has an invalid length.
[  213.754012][T10973] netlink: 'syz.3.2586': attribute type 4 has an invalid length.
[  213.761828][T10973] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2586'.
[  213.773910][T10967] EXT4-fs (loop8): shut down requested (0)
[  213.795514][ T5855] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.805114][T10974] netlink: 'syz.3.2586': attribute type 1 has an invalid length.
[  213.812932][T10974] netlink: 'syz.3.2586': attribute type 4 has an invalid length.
[  213.820837][T10974] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2586'.
[  213.859391][T10976] loop8: detected capacity change from 0 to 512
[  213.939348][T10976] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.983176][T10976] ext4 filesystem being mounted at /404/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  214.015928][T10976] EXT4-fs (loop8): shut down requested (0)
[  214.113049][ T5855] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.254846][T10998] loop5: detected capacity change from 0 to 512
[  214.281813][T10998] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  214.304884][T10998] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  214.338850][ T7658] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.349932][T10998] EXT4-fs (loop5): shut down requested (0)
[  214.397583][ T9411] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.413182][T11011] loop9: detected capacity change from 0 to 512
[  214.466483][T11011] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  214.497517][T11011] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  214.551902][T11011] EXT4-fs (loop9): shut down requested (0)
[  214.603252][ T7658] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.615081][T10984] chnl_net:caif_netlink_parms(): no params data found
[  214.707955][T10984] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.715146][T10984] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.752889][T10984] bridge_slave_0: entered allmulticast mode
[  214.773653][T10984] bridge_slave_0: entered promiscuous mode
[  214.792670][T10984] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.799835][T10984] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.847657][T10984] bridge_slave_1: entered allmulticast mode
[  214.856883][T10984] bridge_slave_1: entered promiscuous mode
[  214.888309][T10984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  214.900298][T10984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  214.919516][T11022] loop9: detected capacity change from 0 to 512
[  214.926406][T11022] EXT4-fs: Ignoring removed nobh option
[  214.937296][T11022] EXT4-fs: old and new quota format mixing
[  214.947378][T10984] team0: Port device team_slave_0 added
[  214.954049][T10984] team0: Port device team_slave_1 added
[  214.988014][T10984] batman_adv: batadv0: Adding interface: batadv_slave_0
[  214.995023][T10984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  215.021040][T10984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  215.037707][T10984] batman_adv: batadv0: Adding interface: batadv_slave_1
[  215.044696][T10984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  215.070718][T10984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  215.096880][ T6771] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  215.103224][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[  215.136482][T10984] hsr_slave_0: entered promiscuous mode
[  215.153095][T10984] hsr_slave_1: entered promiscuous mode
[  215.159148][T10984] debugfs: 'hsr0' already exists in 'hsr'
[  215.164887][T10984] Cannot create hsr debugfs directory
[  215.263976][T10984] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.318461][T10984] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.368650][T10984] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.390250][T11043] loop9: detected capacity change from 0 to 512
[  215.398459][T11043] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2
[  215.406726][T11043] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.2606: invalid indirect mapped block 2683928664 (level 1)
[  215.451029][T11032] loop2: detected capacity change from 0 to 512
[  215.457924][T11032] EXT4-fs: Ignoring removed nobh option
[  215.478955][T11032] EXT4-fs: old and new quota format mixing
[  215.484997][T11043] EXT4-fs (loop9): Remounting filesystem read-only
[  215.493015][T11043] EXT4-fs (loop9): 1 truncate cleaned up
[  215.499203][T11043] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  215.518111][T10984] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.567412][ T7658] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.632381][T11050] FAULT_INJECTION: forcing a failure.
[  215.632381][T11050] name failslab, interval 1, probability 0, space 0, times 0
[  215.645083][T11050] CPU: 0 UID: 0 PID: 11050 Comm: syz.8.2607 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  215.645124][T11050] Tainted: [W]=WARN
[  215.645194][T11050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  215.645275][T11050] Call Trace:
[  215.645283][T11050]  <TASK>
[  215.645292][T11050]  __dump_stack+0x1d/0x30
[  215.645319][T11050]  dump_stack_lvl+0xe8/0x140
[  215.645346][T11050]  dump_stack+0x15/0x1b
[  215.645392][T11050]  should_fail_ex+0x265/0x280
[  215.645545][T11050]  should_failslab+0x8c/0xb0
[  215.645580][T11050]  kmem_cache_alloc_lru_noprof+0x55/0x490
[  215.645610][T11050]  ? __d_alloc+0x3d/0x340
[  215.645694][T11050]  __d_alloc+0x3d/0x340
[  215.645734][T11050]  d_alloc_parallel+0x58/0xc70
[  215.645758][T11050]  ? __rcu_read_unlock+0x4f/0x70
[  215.645783][T11050]  ? __d_lookup+0x316/0x340
[  215.645801][T11050]  ? default_pointer+0xf2/0x5e0
[  215.645842][T11050]  __lookup_slow+0x8c/0x250
[  215.645862][T11050]  lookup_noperm+0xc9/0x180
[  215.645881][T11050]  simple_start_creating+0x97/0x120
[  215.645911][T11050]  debugfs_start_creating+0xe9/0x160
[  215.645939][T11050]  __debugfs_create_file+0x6b/0x330
[  215.645959][T11050]  debugfs_create_file_full+0x3f/0x60
[  215.646063][T11050]  ? __pfx_macsec_setup+0x10/0x10
[  215.646090][T11050]  ref_tracker_dir_debugfs+0x100/0x1e0
[  215.646142][T11050]  alloc_netdev_mqs+0x1a7/0xa50
[  215.646163][T11050]  rtnl_create_link+0x239/0x710
[  215.646259][T11050]  rtnl_newlink_create+0x14c/0x620
[  215.646330][T11050]  ? security_capable+0x83/0x90
[  215.646364][T11050]  ? netlink_ns_capable+0x86/0xa0
[  215.646412][T11050]  rtnl_newlink+0xf29/0x12d0
[  215.646447][T11050]  ? try_charge_memcg+0x215/0xa10
[  215.646473][T11050]  ? __rcu_read_unlock+0x4f/0x70
[  215.646498][T11050]  ? css_rstat_updated+0xb7/0x240
[  215.646573][T11050]  ? __account_obj_stock+0x211/0x350
[  215.646599][T11050]  ? __rcu_read_unlock+0x4f/0x70
[  215.646702][T11050]  ? avc_has_perm_noaudit+0x1b1/0x200
[  215.646723][T11050]  ? cred_has_capability+0x210/0x280
[  215.646766][T11050]  ? selinux_capable+0x31/0x40
[  215.646796][T11050]  ? security_capable+0x83/0x90
[  215.646846][T11050]  ? ns_capable+0x7d/0xb0
[  215.646876][T11050]  ? __pfx_rtnl_newlink+0x10/0x10
[  215.646906][T11050]  rtnetlink_rcv_msg+0x5fe/0x6d0
[  215.647029][T11050]  ? avc_has_perm_noaudit+0x1b1/0x200
[  215.647056][T11050]  netlink_rcv_skb+0x123/0x220
[  215.647088][T11050]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  215.647116][T11050]  rtnetlink_rcv+0x1c/0x30
[  215.647144][T11050]  netlink_unicast+0x5c0/0x690
[  215.647241][T11050]  netlink_sendmsg+0x58b/0x6b0
[  215.647277][T11050]  ? __pfx_netlink_sendmsg+0x10/0x10
[  215.647318][T11050]  __sock_sendmsg+0x145/0x180
[  215.647345][T11050]  ____sys_sendmsg+0x31e/0x4e0
[  215.647373][T11050]  ___sys_sendmsg+0x17b/0x1d0
[  215.647414][T11050]  __x64_sys_sendmsg+0xd4/0x160
[  215.647443][T11050]  x64_sys_call+0x191e/0x3000
[  215.647503][T11050]  do_syscall_64+0xd2/0x200
[  215.647527][T11050]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  215.647570][T11050]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  215.647635][T11050]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.647656][T11050] RIP: 0033:0x7f82eb0af6c9
[  215.647671][T11050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  215.647695][T11050] RSP: 002b:00007f82e9ad5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  215.647718][T11050] RAX: ffffffffffffffda RBX: 00007f82eb306180 RCX: 00007f82eb0af6c9
[  215.647766][T11050] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004
[  215.647777][T11050] RBP: 00007f82e9ad5090 R08: 0000000000000000 R09: 0000000000000000
[  215.647791][T11050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  215.647806][T11050] R13: 00007f82eb306218 R14: 00007f82eb306180 R15: 00007ffdc4bbc1c8
[  215.647831][T11050]  </TASK>
[  216.032881][T11050] macsec1: entered promiscuous mode
[  216.038240][T11050] bridge0: entered promiscuous mode
[  216.220025][ T5919] Bluetooth: hci0: Frame reassembly failed (-84)
[  216.712317][T11072] loop8: detected capacity change from 0 to 512
[  216.722289][T11072] EXT4-fs: Ignoring removed nobh option
[  216.732568][T11072] EXT4-fs: old and new quota format mixing
[  216.750928][   T30] kauditd_printk_skb: 281 callbacks suppressed
[  216.750945][   T30] audit: type=1326 audit(2000000062.520:15009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11064 comm="syz.5.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b7f6f6c9 code=0x7ffc0000
[  216.780771][   T30] audit: type=1326 audit(2000000062.520:15010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11064 comm="syz.5.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b7f6f6c9 code=0x7ffc0000
[  216.969879][   T30] audit: type=1400 audit(2000000062.740:15011): avc:  denied  { create } for  pid=11077 comm="syz.5.2619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  216.989684][   T30] audit: type=1400 audit(2000000062.740:15012): avc:  denied  { listen } for  pid=11077 comm="syz.5.2619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  217.009350][   T30] audit: type=1400 audit(2000000062.740:15013): avc:  denied  { accept } for  pid=11077 comm="syz.5.2619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  217.029253][   T30] audit: type=1400 audit(2000000062.790:15014): avc:  denied  { ioctl } for  pid=11077 comm="syz.5.2619" path="socket:[33827]" dev="sockfs" ino=33827 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  217.029431][T11079] loop5: detected capacity change from 0 to 512
[  217.067164][T11079] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  217.083047][T11079] EXT4-fs (loop5): orphan cleanup on readonly fs
[  217.089805][T11079] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  217.104808][T11079] EXT4-fs (loop5): Remounting filesystem read-only
[  217.111573][T11079] EXT4-fs (loop5): 1 truncate cleaned up
[  217.117813][T11079] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  217.144961][T10984] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  217.154228][T10984] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  217.163805][T10984] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  217.173472][T10984] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  217.229605][T10984] 8021q: adding VLAN 0 to HW filter on device bond0
[  217.245029][T10984] 8021q: adding VLAN 0 to HW filter on device team0
[  217.257945][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.265051][ T5955] bridge0: port 1(bridge_slave_0) entered forwarding state
[  217.280886][ T5915] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.288018][ T5915] bridge0: port 2(bridge_slave_1) entered forwarding state
[  217.369751][T10984] 8021q: adding VLAN 0 to HW filter on device batadv0
[  217.378403][ T5957] bridge_slave_1: left allmulticast mode
[  217.384090][ T5957] bridge_slave_1: left promiscuous mode
[  217.390009][ T5957] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.401282][ T5957] bridge_slave_0: left allmulticast mode
[  217.407138][ T5957] bridge_slave_0: left promiscuous mode
[  217.412978][ T5957] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.507626][   T30] audit: type=1326 audit(2000000063.280:15015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11111 comm="syz.2.2629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974827f6c9 code=0x7ffc0000
[  217.531442][   T30] audit: type=1326 audit(2000000063.280:15016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11111 comm="syz.2.2629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974827f6c9 code=0x7ffc0000
[  217.557618][   T30] audit: type=1326 audit(2000000063.280:15017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11111 comm="syz.2.2629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f974827f6c9 code=0x7ffc0000
[  217.581270][   T30] audit: type=1326 audit(2000000063.280:15018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11111 comm="syz.2.2629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974827f6c9 code=0x7ffc0000
[  217.608375][ T5957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  217.618574][ T5957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  217.628931][ T5957] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  217.640876][ T5957] bond0 (unregistering): Released all slaves
[  217.710396][T10984] veth0_vlan: entered promiscuous mode
[  217.725052][T10984] veth1_vlan: entered promiscuous mode
[  217.753829][T10984] veth0_macvtap: entered promiscuous mode
[  217.762263][T10984] veth1_macvtap: entered promiscuous mode
[  217.771088][ T5957] hsr_slave_0: left promiscuous mode
[  217.772481][T11124] __nla_validate_parse: 6 callbacks suppressed
[  217.772498][T11124] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2632'.
[  217.791771][ T5957] hsr_slave_1: left promiscuous mode
[  217.799041][ T5957] veth1_macvtap: left promiscuous mode
[  217.804610][ T5957] veth0_macvtap: left promiscuous mode
[  217.821939][ T9411] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.841657][T11124] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2632'.
[  217.885473][ T5957] team0 (unregistering): Port device team_slave_0 removed
[  217.893273][ T5940] smc: removing ib device syz!
[  217.938825][T10984] batman_adv: batadv0: Interface activated: batadv_slave_0
[  217.953877][T10984] batman_adv: batadv0: Interface activated: batadv_slave_1
[  217.965578][T11134] FAULT_INJECTION: forcing a failure.
[  217.965578][T11134] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  217.978995][T11134] CPU: 0 UID: 0 PID: 11134 Comm: syz.8.2636 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  217.979068][T11134] Tainted: [W]=WARN
[  217.979074][T11134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  217.979085][T11134] Call Trace:
[  217.979091][T11134]  <TASK>
[  217.979096][T11134]  __dump_stack+0x1d/0x30
[  217.979134][T11134]  dump_stack_lvl+0xe8/0x140
[  217.979207][T11134]  dump_stack+0x15/0x1b
[  217.979223][T11134]  should_fail_ex+0x265/0x280
[  217.979254][T11134]  should_fail+0xb/0x20
[  217.979362][T11134]  should_fail_usercopy+0x1a/0x20
[  217.979380][T11134]  _copy_from_iter+0xd2/0xe80
[  217.979400][T11134]  ? __build_skb_around+0x1ab/0x200
[  217.979427][T11134]  ? __alloc_skb+0x223/0x320
[  217.979528][T11134]  netlink_sendmsg+0x471/0x6b0
[  217.979548][T11134]  ? __pfx_netlink_sendmsg+0x10/0x10
[  217.979565][T11134]  __sock_sendmsg+0x145/0x180
[  217.979603][T11134]  ____sys_sendmsg+0x31e/0x4e0
[  217.979623][T11134]  ___sys_sendmsg+0x17b/0x1d0
[  217.979657][T11134]  __x64_sys_sendmsg+0xd4/0x160
[  217.979678][T11134]  x64_sys_call+0x191e/0x3000
[  217.979697][T11134]  do_syscall_64+0xd2/0x200
[  217.979716][T11134]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  217.979806][T11134]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  217.979837][T11134]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.979921][T11134] RIP: 0033:0x7f82eb0af6c9
[  217.979935][T11134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  217.979990][T11134] RSP: 002b:00007f82e9b17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  217.980007][T11134] RAX: ffffffffffffffda RBX: 00007f82eb305fa0 RCX: 00007f82eb0af6c9
[  217.980018][T11134] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003
[  217.980029][T11134] RBP: 00007f82e9b17090 R08: 0000000000000000 R09: 0000000000000000
[  217.980041][T11134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  217.980052][T11134] R13: 00007f82eb306038 R14: 00007f82eb305fa0 R15: 00007ffdc4bbc1c8
[  217.980131][T11134]  </TASK>
[  217.983878][ T5919] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  218.203661][ T5919] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  218.218012][ T5919] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  218.243816][ T5919] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  218.292220][T11141] loop5: detected capacity change from 0 to 512
[  218.336903][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[  218.344560][T11141] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  218.359941][T11141] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  218.370495][ T6771] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  218.383914][T11141] EXT4-fs (loop5): shut down requested (0)
[  218.434128][ T9411] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.997432][T11162] validate_nla: 4 callbacks suppressed
[  219.997487][T11162] netlink: 'syz.2.2645': attribute type 6 has an invalid length.
[  220.179947][ T5940] Bluetooth: hci0: Frame reassembly failed (-84)
[  220.270340][T11165] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2646'.
[  220.317257][ T5955] Bluetooth: hci1: Frame reassembly failed (-84)
[  220.332442][T11182] loop5: detected capacity change from 0 to 512
[  220.363367][T11182] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  220.382565][T11182] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  220.430443][T11182] EXT4-fs (loop5): shut down requested (0)
[  220.468695][ T9411] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.520004][T11195] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2656'.
[  220.533629][T11195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2656'.
[  220.548757][T11195] team0: Port device team_slave_1 removed
[  220.594194][T11196] netlink: 'syz.5.2655': attribute type 21 has an invalid length.
[  221.109026][T11205] FAULT_INJECTION: forcing a failure.
[  221.109026][T11205] name failslab, interval 1, probability 0, space 0, times 0
[  221.121723][T11205] CPU: 0 UID: 0 PID: 11205 Comm: syz.8.2660 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  221.121831][T11205] Tainted: [W]=WARN
[  221.121895][T11205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  221.121906][T11205] Call Trace:
[  221.121912][T11205]  <TASK>
[  221.121918][T11205]  __dump_stack+0x1d/0x30
[  221.121938][T11205]  dump_stack_lvl+0xe8/0x140
[  221.121956][T11205]  dump_stack+0x15/0x1b
[  221.121971][T11205]  should_fail_ex+0x265/0x280
[  221.122074][T11205]  ? audit_log_d_path+0x8d/0x150
[  221.122093][T11205]  should_failslab+0x8c/0xb0
[  221.122141][T11205]  __kmalloc_cache_noprof+0x4c/0x4a0
[  221.122171][T11205]  audit_log_d_path+0x8d/0x150
[  221.122189][T11205]  audit_log_d_path_exe+0x42/0x70
[  221.122344][T11205]  audit_log_task+0x1e9/0x250
[  221.122379][T11205]  ? kstrtouint+0x76/0xc0
[  221.122521][T11205]  audit_seccomp+0x61/0x100
[  221.122562][T11205]  ? __seccomp_filter+0x82d/0x1250
[  221.122594][T11205]  __seccomp_filter+0x83e/0x1250
[  221.122631][T11205]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  221.122659][T11205]  ? vfs_write+0x7e8/0x960
[  221.122680][T11205]  ? __rcu_read_unlock+0x4f/0x70
[  221.122703][T11205]  ? __fget_files+0x184/0x1c0
[  221.122861][T11205]  __secure_computing+0x82/0x150
[  221.122886][T11205]  syscall_trace_enter+0xcf/0x1e0
[  221.122917][T11205]  do_syscall_64+0xac/0x200
[  221.122936][T11205]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  221.123020][T11205]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  221.123050][T11205]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.123068][T11205] RIP: 0033:0x7f82eb0af6c9
[  221.123081][T11205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  221.123097][T11205] RSP: 002b:00007f82e9b17038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1
[  221.123129][T11205] RAX: ffffffffffffffda RBX: 00007f82eb305fa0 RCX: 00007f82eb0af6c9
[  221.123140][T11205] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  221.123150][T11205] RBP: 00007f82e9b17090 R08: 0000000000000000 R09: 0000000000000000
[  221.123161][T11205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  221.123171][T11205] R13: 00007f82eb306038 R14: 00007f82eb305fa0 R15: 00007ffdc4bbc1c8
[  221.123188][T11205]  </TASK>
[  221.444741][T11207] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2661'.
[  221.515319][T11220] loop8: detected capacity change from 0 to 512
[  221.528905][T11220] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  221.541873][T11220] ext4 filesystem being mounted at /427/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  221.554894][T11220] EXT4-fs (loop8): shut down requested (0)
[  221.572802][ T5855] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.656480][T11226] loop5: detected capacity change from 0 to 512
[  221.672552][T11226] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  221.683844][T11226] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  221.694963][T11226] EXT4-fs (loop5): group descriptors corrupted!
[  221.718997][T11226] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  221.728022][T11226] netdevsim netdevsim5 netdevsim0: left allmulticast mode
[  221.847152][T11235] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  221.907755][   T30] kauditd_printk_skb: 228 callbacks suppressed
[  221.907772][   T30] audit: type=1400 audit(2000000067.680:15247): avc:  denied  { execute } for  pid=11236 comm="syz.8.2672" name="cgroup" dev="tmpfs" ino=2296 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1
[  221.951013][   T30] audit: type=1400 audit(2000000067.720:15248): avc:  denied  { name_bind } for  pid=11233 comm="syz.5.2671" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  221.951907][T11235] FAULT_INJECTION: forcing a failure.
[  221.951907][T11235] name failslab, interval 1, probability 0, space 0, times 0
[  221.973156][   T30] audit: type=1400 audit(2000000067.720:15249): avc:  denied  { node_bind } for  pid=11233 comm="syz.5.2671" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  221.985571][T11235] CPU: 0 UID: 0 PID: 11235 Comm: syz.5.2671 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  221.985620][T11235] Tainted: [W]=WARN
[  221.985628][T11235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  221.985647][T11235] Call Trace:
[  221.985670][T11235]  <TASK>
[  221.985732][T11235]  __dump_stack+0x1d/0x30
[  221.985837][T11235]  dump_stack_lvl+0xe8/0x140
[  221.985866][T11235]  dump_stack+0x15/0x1b
[  221.985891][T11235]  should_fail_ex+0x265/0x280
[  221.986023][T11235]  should_failslab+0x8c/0xb0
[  221.986063][T11235]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[  221.986105][T11235]  ? __alloc_skb+0x101/0x320
[  221.986153][T11235]  __alloc_skb+0x101/0x320
[  221.986207][T11235]  tcp_stream_alloc_skb+0x2d/0x1d0
[  221.986247][T11235]  tcp_sendmsg_locked+0xcbf/0x2c00
[  221.986288][T11235]  ? mntput_no_expire+0x6f/0x440
[  221.986319][T11235]  ? __rcu_read_unlock+0x4f/0x70
[  221.986386][T11235]  ? __pfx_tcp_sendmsg+0x10/0x10
[  221.986426][T11235]  tcp_sendmsg+0x2f/0x50
[  221.986493][T11235]  inet_sendmsg+0x76/0xd0
[  221.986539][T11235]  __sock_sendmsg+0x102/0x180
[  221.986574][T11235]  __sys_sendto+0x268/0x330
[  221.986737][T11235]  __x64_sys_sendto+0x76/0x90
[  221.986783][T11235]  x64_sys_call+0x2d14/0x3000
[  221.986816][T11235]  do_syscall_64+0xd2/0x200
[  221.986845][T11235]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  221.986932][T11235]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  221.986978][T11235]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.987007][T11235] RIP: 0033:0x7ff0b7f6f6c9
[  221.987022][T11235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  221.987077][T11235] RSP: 002b:00007ff0b69b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  221.987196][T11235] RAX: ffffffffffffffda RBX: 00007ff0b81c6090 RCX: 00007ff0b7f6f6c9
[  221.987216][T11235] RDX: ffffffffffffff94 RSI: 0000200000000000 RDI: 0000000000000004
[  221.987234][T11235] RBP: 00007ff0b69b6090 R08: 0000000000000000 R09: 0000000000000000
[  221.987249][T11235] R10: 000000000000000b R11: 0000000000000246 R12: 0000000000000001
[  221.987266][T11235] R13: 00007ff0b81c6128 R14: 00007ff0b81c6090 R15: 00007ffd7b9f5408
[  221.987292][T11235]  </TASK>
[  222.038401][T11240] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  222.216842][ T6771] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  222.224722][ T3806] Bluetooth: hci0: command 0x1003 tx timeout
[  222.266715][   T30] audit: type=1400 audit(2000000068.030:15250): avc:  denied  { create } for  pid=11243 comm="syz.5.2673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  222.286799][   T30] audit: type=1400 audit(2000000068.030:15251): avc:  denied  { ioctl } for  pid=11243 comm="syz.5.2673" path="socket:[33452]" dev="sockfs" ino=33452 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  222.311903][   T30] audit: type=1400 audit(2000000068.040:15252): avc:  denied  { execmem } for  pid=11243 comm="syz.5.2673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  222.376812][   T44] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  222.445376][T11253] loop9: detected capacity change from 0 to 512
[  222.459033][T11253] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  222.471747][T11253] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  222.484279][T11253] EXT4-fs (loop9): shut down requested (0)
[  222.503830][ T7658] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.561841][T11256] bridge0: entered promiscuous mode
[  222.567231][T11256] macsec1: entered promiscuous mode
[  222.573496][T11256] bridge0: port 3(macsec1) entered blocking state
[  222.579988][T11256] bridge0: port 3(macsec1) entered disabled state
[  222.586513][T11256] macsec1: entered allmulticast mode
[  222.591911][T11256] bridge0: entered allmulticast mode
[  222.599410][T11256] macsec1: left allmulticast mode
[  222.604470][T11256] bridge0: left allmulticast mode
[  222.617021][T11256] bridge0: left promiscuous mode
[  222.850368][   T30] audit: type=1404 audit(2000000068.620:15253): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[  222.928835][   T30] audit: type=1400 audit(2000000068.660:15254): avc:  denied  { read write } for  pid=5855 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  222.953341][   T30] audit: type=1404 audit(2000000068.660:15255): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[  222.968729][   T30] audit: type=1400 audit(2000000068.660:15256): avc:  denied  { prog_load } for  pid=11257 comm="syz.5.2678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  223.092760][T11268] loop9: detected capacity change from 0 to 512
[  223.112633][T11268] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  223.141241][T11268] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  223.157054][T11268] EXT4-fs (loop9): shut down requested (0)
[  223.179762][T11266] loop5: detected capacity change from 0 to 512
[  223.181859][ T7658] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.204741][T11266] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  223.215238][T11266] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  223.226035][T11266] EXT4-fs (loop5): group descriptors corrupted!
[  223.294383][T11274] loop9: detected capacity change from 0 to 512
[  223.320050][T11274] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  223.339119][T11266] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  223.348384][T11274] EXT4-fs (loop9): orphan cleanup on readonly fs
[  223.357396][T11266] netdevsim netdevsim5 netdevsim0: left allmulticast mode
[  223.371975][T11274] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.2682: Failed to acquire dquot type 1
[  223.391030][T11274] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2682: bg 0: block 40: padding at end of block bitmap is not set
[  223.405731][T11274] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  223.414907][T11274] EXT4-fs (loop9): 1 truncate cleaned up
[  223.421203][T11274] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  223.453806][T11284] loop2: detected capacity change from 0 to 512
[  223.475530][ T7658] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.489148][T11284] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  223.503485][T11284] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  223.536651][T11291] netlink: 'syz.9.2688': attribute type 1 has an invalid length.
[  223.544479][T11291] netlink: 'syz.9.2688': attribute type 4 has an invalid length.
[  223.552252][T11291] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.2688'.
[  223.571383][T11291] netlink: 'syz.9.2688': attribute type 1 has an invalid length.
[  223.579255][T11291] netlink: 'syz.9.2688': attribute type 4 has an invalid length.
[  223.587045][T11291] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.2688'.
[  223.588582][T11284] EXT4-fs (loop2): shut down requested (0)
[  223.617591][T11295] netlink: 'syz.5.2690': attribute type 10 has an invalid length.
[  223.630052][T11295] team0: Port device dummy0 added
[  223.679051][ T8361] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.711312][T11303] netlink: 'syz.9.2695': attribute type 1 has an invalid length.
[  223.719145][T11303] netlink: 'syz.9.2695': attribute type 4 has an invalid length.
[  223.726988][T11303] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.2695'.
[  223.755428][T11306] netlink: 'syz.2.2696': attribute type 1 has an invalid length.
[  223.763271][T11306] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.2696'.
[  223.763538][T11307] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.2695'.
[  223.772918][T11306] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.2696'.
[  223.822242][T11308] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2693'.
[  223.837165][T11311] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2697'.
[  223.877442][T11311] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=11311 comm=syz.8.2697
[  223.940433][T11314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2698'.
[  224.530868][T11335] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2705'.
[  224.630530][T11341] loop5: detected capacity change from 0 to 512
[  224.641049][T11341] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.2708: corrupted in-inode xattr: invalid ea_ino
[  224.654952][T11341] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2708: couldn't read orphan inode 15 (err -117)
[  224.667337][T11341] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  224.691435][ T9411] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.733113][T11346] loop5: detected capacity change from 0 to 512
[  224.751704][T11346] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  224.773624][T11346] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  224.808419][T11346] EXT4-fs (loop5): shut down requested (0)
[  224.829333][ T9411] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.907274][T11360] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  224.948757][T11360] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  224.999217][T11368] tipc: Started in network mode
[  225.004555][T11368] tipc: Node identity ac14140f, cluster identity 4711
[  225.019104][T11368] tipc: New replicast peer: 255.255.255.83
[  225.024994][T11368] tipc: Enabled bearer <udp:£ >, priority 10
[  225.046025][T11350] loop9: detected capacity change from 0 to 512
[  225.065482][T11350] EXT4-fs: Ignoring removed nobh option
[  225.073495][T11350] EXT4-fs: old and new quota format mixing
[  225.239522][T11378] loop8: detected capacity change from 0 to 2048
[  225.387429][T11384] FAULT_INJECTION: forcing a failure.
[  225.387429][T11384] name failslab, interval 1, probability 0, space 0, times 0
[  225.400171][T11384] CPU: 1 UID: 0 PID: 11384 Comm: syz.3.2725 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  225.400218][T11384] Tainted: [W]=WARN
[  225.400227][T11384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  225.400242][T11384] Call Trace:
[  225.400251][T11384]  <TASK>
[  225.400336][T11384]  __dump_stack+0x1d/0x30
[  225.400364][T11384]  dump_stack_lvl+0xe8/0x140
[  225.400384][T11384]  dump_stack+0x15/0x1b
[  225.400420][T11384]  should_fail_ex+0x265/0x280
[  225.400464][T11384]  should_failslab+0x8c/0xb0
[  225.400509][T11384]  __kvmalloc_node_noprof+0x12e/0x670
[  225.400551][T11384]  ? alloc_netdev_mqs+0xa5/0xa50
[  225.400570][T11384]  ? __pfx_ip6gre_tap_setup+0x10/0x10
[  225.400690][T11384]  alloc_netdev_mqs+0xa5/0xa50
[  225.400716][T11384]  rtnl_create_link+0x239/0x710
[  225.400764][T11384]  rtnl_newlink_create+0x14c/0x620
[  225.400850][T11384]  ? __schedule+0x6b9/0xb30
[  225.400889][T11384]  rtnl_newlink+0xf29/0x12d0
[  225.400918][T11384]  ? perf_event_read_local+0x4af/0x4f0
[  225.401018][T11384]  ? bpf_trace_run3+0x12c/0x1d0
[  225.401057][T11384]  ? __kfree_skb+0x109/0x150
[  225.401087][T11384]  ? __kfree_skb+0x109/0x150
[  225.401115][T11384]  ? __memcg_slab_free_hook+0x135/0x230
[  225.401207][T11384]  ? __rcu_read_unlock+0x4f/0x70
[  225.401308][T11384]  ? avc_has_perm_noaudit+0x1b1/0x200
[  225.401329][T11384]  ? cred_has_capability+0x210/0x280
[  225.401384][T11384]  ? selinux_capable+0x31/0x40
[  225.401413][T11384]  ? security_capable+0x83/0x90
[  225.401453][T11384]  ? ns_capable+0x7d/0xb0
[  225.401476][T11384]  ? __pfx_rtnl_newlink+0x10/0x10
[  225.401526][T11384]  rtnetlink_rcv_msg+0x5fe/0x6d0
[  225.401559][T11384]  netlink_rcv_skb+0x123/0x220
[  225.401661][T11384]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  225.401691][T11384]  rtnetlink_rcv+0x1c/0x30
[  225.401721][T11384]  netlink_unicast+0x5c0/0x690
[  225.401833][T11384]  netlink_sendmsg+0x58b/0x6b0
[  225.401858][T11384]  ? __pfx_netlink_sendmsg+0x10/0x10
[  225.401877][T11384]  __sock_sendmsg+0x145/0x180
[  225.401901][T11384]  ____sys_sendmsg+0x31e/0x4e0
[  225.401958][T11384]  ___sys_sendmsg+0x17b/0x1d0
[  225.401994][T11384]  __x64_sys_sendmsg+0xd4/0x160
[  225.402017][T11384]  x64_sys_call+0x191e/0x3000
[  225.402043][T11384]  do_syscall_64+0xd2/0x200
[  225.402120][T11384]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  225.402157][T11384]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  225.402266][T11384]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.402290][T11384] RIP: 0033:0x7f4d23aef6c9
[  225.402309][T11384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  225.402332][T11384] RSP: 002b:00007f4d22557038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  225.402356][T11384] RAX: ffffffffffffffda RBX: 00007f4d23d45fa0 RCX: 00007f4d23aef6c9
[  225.402373][T11384] RDX: 000000000c000802 RSI: 0000200000000000 RDI: 0000000000000003
[  225.402386][T11384] RBP: 00007f4d22557090 R08: 0000000000000000 R09: 0000000000000000
[  225.402398][T11384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  225.402413][T11384] R13: 00007f4d23d46038 R14: 00007f4d23d45fa0 R15: 00007ffc8a924268
[  225.402501][T11384]  </TASK>
[  225.764357][T11378] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  225.778733][T11394] validate_nla: 3 callbacks suppressed
[  225.778750][T11394] netlink: 'syz.9.2728': attribute type 1 has an invalid length.
[  225.803961][T11394] netlink: 'syz.9.2728': attribute type 1 has an invalid length.
[  225.874447][ T5855] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.004914][T11417] loop2: detected capacity change from 0 to 512
[  226.038525][T11417] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  226.052221][T11417] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  226.087448][T11417] EXT4-fs (loop2): shut down requested (0)
[  226.128355][   T36] tipc: Node number set to 2886997007
[  226.161379][ T8361] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.242900][T11437] SELinux:  Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped).
[  226.255008][T11437] xt_l2tp: v2 sid > 0xffff: 4294901760
[  226.306123][T11443] loop8: detected capacity change from 0 to 512
[  226.346063][T11443] EXT4-fs error (device loop8): ext4_iget_extra_inode:5075: inode #15: comm syz.8.2748: corrupted in-inode xattr: invalid ea_ino
[  226.403059][T11448] loop9: detected capacity change from 0 to 512
[  226.427045][T11443] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.2748: couldn't read orphan inode 15 (err -117)
[  226.457836][T11448] EXT4-fs error (device loop9): ext4_iget_extra_inode:5075: inode #15: comm syz.9.2750: corrupted in-inode xattr: invalid ea_ino
[  226.482451][T11443] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  226.485570][T11459] netlink: 'syz.2.2753': attribute type 4 has an invalid length.
[  226.508339][T11448] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.2750: couldn't read orphan inode 15 (err -117)
[  226.563060][T11459] netlink: 'syz.2.2753': attribute type 4 has an invalid length.
[  226.580394][ T5855] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.598818][T11448] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  226.685884][ T7658] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.922104][   T30] kauditd_printk_skb: 487 callbacks suppressed
[  226.922130][   T30] audit: type=1400 audit(2000000072.690:15742): avc:  denied  { read } for  pid=11477 comm="syz.8.2761" dev="nsfs" ino=4026532822 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  226.950059][   T30] audit: type=1400 audit(2000000072.690:15743): avc:  denied  { open } for  pid=11477 comm="syz.8.2761" path="net:[4026532822]" dev="nsfs" ino=4026532822 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  226.982197][ T5915] Bluetooth: hci0: Frame reassembly failed (-84)
[  227.172702][   T30] audit: type=1400 audit(2000000072.710:15744): avc:  denied  { create } for  pid=11479 comm="syz.9.2762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  227.192996][   T30] audit: type=1400 audit(2000000072.710:15745): avc:  denied  { ioctl } for  pid=11479 comm="syz.9.2762" path="socket:[34879]" dev="sockfs" ino=34879 ioctlcmd=0x48e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  227.218455][   T30] audit: type=1400 audit(2000000072.790:15746): avc:  denied  { read write } for  pid=11460 comm="syz.3.2755" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  227.242338][   T30] audit: type=1400 audit(2000000072.790:15747): avc:  denied  { open } for  pid=11460 comm="syz.3.2755" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  227.266254][   T30] audit: type=1400 audit(2000000072.790:15748): avc:  denied  { ioctl } for  pid=11460 comm="syz.3.2755" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  227.364112][   T30] audit: type=1326 audit(2000000073.040:15749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11462 comm="syz.2.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974827f6c9 code=0x7ffc0000
[  227.387783][   T30] audit: type=1326 audit(2000000073.040:15750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11462 comm="syz.2.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974827f6c9 code=0x7ffc0000
[  227.411419][   T30] audit: type=1400 audit(2000000073.070:15751): avc:  denied  { create } for  pid=11482 comm="syz.3.2763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  227.589959][T11494] loop5: detected capacity change from 0 to 512
[  227.627895][T11494] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.2768: corrupted in-inode xattr: invalid ea_ino
[  227.660313][T11494] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2768: couldn't read orphan inode 15 (err -117)
[  227.682283][T11494] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  228.897462][T11526] __nla_validate_parse: 15 callbacks suppressed
[  228.897481][T11526] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2782'.
[  228.946219][T11529] loop2: detected capacity change from 0 to 512
[  228.953548][T11529] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  228.964902][T11529] EXT4-fs (loop2): 1 truncate cleaned up
[  229.018717][ T6771] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  229.019443][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[  229.090247][ T5919] Bluetooth: hci0: Frame reassembly failed (-84)
[  229.181530][T11546] FAULT_INJECTION: forcing a failure.
[  229.181530][T11546] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  229.194713][T11546] CPU: 0 UID: 0 PID: 11546 Comm: syz.2.2790 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  229.194753][T11546] Tainted: [W]=WARN
[  229.194762][T11546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  229.194777][T11546] Call Trace:
[  229.194785][T11546]  <TASK>
[  229.194795][T11546]  __dump_stack+0x1d/0x30
[  229.194861][T11546]  dump_stack_lvl+0xe8/0x140
[  229.194881][T11546]  dump_stack+0x15/0x1b
[  229.194897][T11546]  should_fail_ex+0x265/0x280
[  229.194937][T11546]  should_fail+0xb/0x20
[  229.195021][T11546]  should_fail_usercopy+0x1a/0x20
[  229.195040][T11546]  _copy_from_user+0x1c/0xb0
[  229.195111][T11546]  ___sys_recvmsg+0xaa/0x370
[  229.195135][T11546]  ? _parse_integer+0x27/0x40
[  229.195185][T11546]  do_recvmmsg+0x1ef/0x540
[  229.195210][T11546]  ? fput+0x8f/0xc0
[  229.195312][T11546]  __x64_sys_recvmmsg+0xe5/0x170
[  229.195341][T11546]  x64_sys_call+0x27aa/0x3000
[  229.195371][T11546]  do_syscall_64+0xd2/0x200
[  229.195398][T11546]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  229.195470][T11546]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  229.195569][T11546]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.195598][T11546] RIP: 0033:0x7f974827f6c9
[  229.195617][T11546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  229.195641][T11546] RSP: 002b:00007f9746cdf038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  229.195661][T11546] RAX: ffffffffffffffda RBX: 00007f97484d5fa0 RCX: 00007f974827f6c9
[  229.195674][T11546] RDX: 0000000000000002 RSI: 0000200000000e40 RDI: 0000000000000003
[  229.195686][T11546] RBP: 00007f9746cdf090 R08: 0000000000000000 R09: 0000000000000000
[  229.195715][T11546] R10: 0000000020010002 R11: 0000000000000246 R12: 0000000000000001
[  229.195730][T11546] R13: 00007f97484d6038 R14: 00007f97484d5fa0 R15: 00007ffc1fa6e528
[  229.195755][T11546]  </TASK>
[  229.430393][T11553] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2793'.
[  229.742036][ T5915] Bluetooth: hci1: Frame reassembly failed (-84)
[  230.060432][T11570] bridge0: entered promiscuous mode
[  230.065703][T11570] macvlan0: entered promiscuous mode
[  230.125656][T11574] loop2: detected capacity change from 0 to 512
[  230.140211][T11574] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  230.160853][T11574] EXT4-fs (loop2): shut down requested (0)
[  230.206326][T11579] loop5: detected capacity change from 0 to 1024
[  230.213799][T11581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2803'.
[  230.219301][T11579] EXT4-fs (loop5): stripe (3889) is not aligned with cluster size (16), stripe is disabled
[  230.276427][T11585] loop2: detected capacity change from 0 to 256
[  230.353956][T11585] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2805'.
[  230.370399][T11585] FAT-fs (loop2): error, invalid FAT chain (i_pos 196, last_block 1024)
[  230.378914][T11585] FAT-fs (loop2): Filesystem has been set read-only
[  230.526715][T11601] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2813'.
[  230.546663][T11603] loop2: detected capacity change from 0 to 512
[  230.579631][T11603] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  230.601056][T11603] EXT4-fs (loop2): shut down requested (0)
[  230.661976][T11611] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2816'.
[  230.704701][T11611] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2816'.
[  230.753088][T11619] netlink: 'syz.8.2820': attribute type 1 has an invalid length.
[  230.760994][T11619] netlink: 'syz.8.2820': attribute type 4 has an invalid length.
[  230.768798][T11619] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.2820'.
[  230.779046][T11619] netlink: 'syz.8.2820': attribute type 1 has an invalid length.
[  230.786882][T11619] netlink: 'syz.8.2820': attribute type 4 has an invalid length.
[  230.794636][T11619] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.2820'.
[  230.949480][T11640] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2827'.
[  230.999366][T11646] loop2: detected capacity change from 0 to 512
[  231.009977][T11646] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  231.023065][T11646] EXT4-fs (loop2): shut down requested (0)
[  231.051368][T11651] netlink: 'syz.2.2832': attribute type 1 has an invalid length.
[  231.059301][T11651] netlink: 'syz.2.2832': attribute type 4 has an invalid length.
[  231.067498][T11651] netlink: 'syz.2.2832': attribute type 1 has an invalid length.
[  231.075233][T11651] netlink: 'syz.2.2832': attribute type 4 has an invalid length.
[  231.096896][ T3806] Bluetooth: hci0: command 0x1003 tx timeout
[  231.103004][ T6771] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  231.269649][T11667] loop9: detected capacity change from 0 to 512
[  231.285659][T11667] EXT4-fs: quotafile must be on filesystem root
[  231.400344][T11676] loop2: detected capacity change from 0 to 512
[  231.415257][T11676] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  231.432306][T11676] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  231.442765][T11676] EXT4-fs (loop2): group descriptors corrupted!
[  231.809672][T11688] capability: warning: `syz.8.2845' uses 32-bit capabilities (legacy support in use)
[  231.816949][   T44] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  231.927132][   T30] kauditd_printk_skb: 344 callbacks suppressed
[  231.927174][   T30] audit: type=1400 audit(2000000077.700:16096): avc:  denied  { ioctl } for  pid=11696 comm="syz.3.2849" path="socket:[35280]" dev="sockfs" ino=35280 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  231.969944][   T30] audit: type=1400 audit(2000000077.730:16097): avc:  denied  { bind } for  pid=11696 comm="syz.3.2849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  231.989514][   T30] audit: type=1400 audit(2000000077.730:16098): avc:  denied  { write } for  pid=11696 comm="syz.3.2849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  232.009191][   T30] audit: type=1326 audit(2000000077.740:16099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11699 comm="syz.8.2850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82eb0af6c9 code=0x7ffc0000
[  232.032848][   T30] audit: type=1326 audit(2000000077.740:16100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11699 comm="syz.8.2850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82eb0af6c9 code=0x7ffc0000
[  232.056643][   T30] audit: type=1326 audit(2000000077.740:16101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11699 comm="syz.8.2850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82eb0af6c9 code=0x7ffc0000
[  232.080468][   T30] audit: type=1326 audit(2000000077.740:16102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11699 comm="syz.8.2850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82eb0af6c9 code=0x7ffc0000
[  232.104224][   T30] audit: type=1326 audit(2000000077.740:16103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11699 comm="syz.8.2850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82eb0af6c9 code=0x7ffc0000
[  232.127840][   T30] audit: type=1326 audit(2000000077.740:16104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11699 comm="syz.8.2850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82eb0af6c9 code=0x7ffc0000
[  232.181137][T11697] loop5: detected capacity change from 0 to 512
[  232.200741][   T30] audit: type=1326 audit(2000000077.740:16105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11699 comm="syz.8.2850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f82eb0af6c9 code=0x7ffc0000
[  232.227606][T11697] EXT4-fs: Ignoring removed nobh option
[  232.233862][T11697] EXT4-fs: old and new quota format mixing
[  232.392247][T11731] capability: warning: `syz.9.2856' uses deprecated v2 capabilities in a way that may be insecure
[  232.447786][T11727] loop5: detected capacity change from 0 to 1024
[  232.482060][T11727] EXT4-fs: Ignoring removed bh option
[  232.498781][T11727] EXT4-fs: inline encryption not supported
[  232.505714][T11727] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  232.521289][T11737] loop2: detected capacity change from 0 to 512
[  232.537211][T11727] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  232.546453][T11727] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.2857: lblock 2 mapped to illegal pblock 2 (length 1)
[  232.566939][T11737] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  232.596025][T11742] loop9: detected capacity change from 0 to 2048
[  232.617471][T11737] EXT4-fs (loop2): 1 truncate cleaned up
[  232.626632][T11727] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.2857: lblock 0 mapped to illegal pblock 48 (length 1)
[  232.681884][T11727] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.2857: Failed to acquire dquot type 0
[  232.802015][T11727] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  232.819419][T11727] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.2857: mark_inode_dirty error
[  232.840995][T11727] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  232.862542][T11727] EXT4-fs (loop5): 1 orphan inode deleted
[  233.017923][ T5940] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:34: lblock 1 mapped to illegal pblock 1 (length 1)
[  233.041308][ T5940] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:34: Failed to release dquot type 0
[  233.079663][T11727] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.2857: lblock 0 mapped to illegal pblock 48 (length 1)
[  233.161654][T11753] devtmpfs: Too few inodes for current use
[  233.212974][ T3402] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4
[  233.220738][ T3402] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2
[  233.246359][ T3402] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x3
[  233.253901][T11722] syz.9.2856 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  233.268236][T11722] CPU: 0 UID: 0 PID: 11722 Comm: syz.9.2856 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  233.268274][T11722] Tainted: [W]=WARN
[  233.268280][T11722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  233.268348][T11722] Call Trace:
[  233.268357][T11722]  <TASK>
[  233.268367][T11722]  __dump_stack+0x1d/0x30
[  233.268394][T11722]  dump_stack_lvl+0xe8/0x140
[  233.268415][T11722]  dump_stack+0x15/0x1b
[  233.268511][T11722]  dump_header+0x81/0x220
[  233.268537][T11722]  oom_kill_process+0x342/0x400
[  233.268580][T11722]  out_of_memory+0x979/0xb80
[  233.268691][T11722]  try_charge_memcg+0x610/0xa10
[  233.268734][T11722]  obj_cgroup_charge_pages+0xa6/0x150
[  233.268759][T11722]  __memcg_kmem_charge_page+0x9f/0x170
[  233.268804][T11722]  __alloc_frozen_pages_noprof+0x188/0x360
[  233.268849][T11722]  alloc_pages_mpol+0xb3/0x260
[  233.268879][T11722]  alloc_pages_noprof+0x90/0x130
[  233.268904][T11722]  __vmalloc_node_range_noprof+0x7a5/0xed0
[  233.268977][T11722]  __kvmalloc_node_noprof+0x483/0x670
[  233.269021][T11722]  ? ip_set_alloc+0x24/0x30
[  233.269097][T11722]  ? ip_set_alloc+0x24/0x30
[  233.269127][T11722]  ? __kmalloc_cache_noprof+0x249/0x4a0
[  233.269161][T11722]  ip_set_alloc+0x24/0x30
[  233.269203][T11722]  hash_netiface_create+0x282/0x740
[  233.269328][T11722]  ? __pfx_hash_netiface_create+0x10/0x10
[  233.269441][T11722]  ip_set_create+0x3cc/0x970
[  233.269481][T11722]  ? __nla_parse+0x40/0x60
[  233.269545][T11722]  nfnetlink_rcv_msg+0x4c6/0x590
[  233.269600][T11722]  netlink_rcv_skb+0x123/0x220
[  233.269640][T11722]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  233.269718][T11722]  nfnetlink_rcv+0x167/0x16c0
[  233.269828][T11722]  ? kmem_cache_free+0xe4/0x3d0
[  233.269953][T11722]  ? __kfree_skb+0x109/0x150
[  233.270058][T11722]  ? nlmon_xmit+0x4f/0x60
[  233.270088][T11722]  ? consume_skb+0x49/0x150
[  233.270123][T11722]  ? nlmon_xmit+0x4f/0x60
[  233.270224][T11722]  ? dev_hard_start_xmit+0x3b0/0x3e0
[  233.270266][T11722]  ? __dev_queue_xmit+0x1200/0x2000
[  233.270338][T11722]  ? __dev_queue_xmit+0x182/0x2000
[  233.270358][T11722]  ? ref_tracker_free+0x37d/0x3e0
[  233.270474][T11722]  ? __netlink_deliver_tap+0x4dc/0x500
[  233.270519][T11722]  netlink_unicast+0x5c0/0x690
[  233.270557][T11722]  netlink_sendmsg+0x58b/0x6b0
[  233.270664][T11722]  ? __pfx_netlink_sendmsg+0x10/0x10
[  233.270685][T11722]  __sock_sendmsg+0x145/0x180
[  233.270753][T11722]  ____sys_sendmsg+0x31e/0x4e0
[  233.270776][T11722]  ___sys_sendmsg+0x17b/0x1d0
[  233.270888][T11722]  __x64_sys_sendmsg+0xd4/0x160
[  233.270916][T11722]  x64_sys_call+0x191e/0x3000
[  233.270945][T11722]  do_syscall_64+0xd2/0x200
[  233.270972][T11722]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  233.271010][T11722]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  233.271084][T11722]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.271105][T11722] RIP: 0033:0x7efc75e7f6c9
[  233.271121][T11722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  233.271144][T11722] RSP: 002b:00007efc748e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  233.271188][T11722] RAX: ffffffffffffffda RBX: 00007efc760d5fa0 RCX: 00007efc75e7f6c9
[  233.271201][T11722] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004
[  233.271213][T11722] RBP: 00007efc75f01f91 R08: 0000000000000000 R09: 0000000000000000
[  233.271226][T11722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  233.271242][T11722] R13: 00007efc760d6038 R14: 00007efc760d5fa0 R15: 00007ffd145475c8
[  233.271267][T11722]  </TASK>
[  233.271275][T11722] memory: usage 307200kB, limit 307200kB, failcnt 133
[  233.292244][ T3402] hid-generic 0000:3000000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  233.296747][T11722] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0
[  233.380721][T11761] netlink: 'syz.5.2867': attribute type 1 has an invalid length.
[  233.382103][T11722] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0
[  233.389198][T11761] netlink: 'syz.5.2867': attribute type 1 has an invalid length.
[  233.392101][T11722] Memory cgroup stats for /syz9:
[  233.434113][T11722] cache 0
[  233.496387][T11759] loop8: detected capacity change from 0 to 512
[  233.500725][T11722] rss 0
[  233.500735][T11722] shmem 0
[  233.500744][T11722] mapped_file 0
[  233.500752][T11722] dirty 0
[  233.531851][T11759] EXT4-fs: Ignoring removed nobh option
[  233.536139][T11722] writeback 0
[  233.536149][T11722] workingset_refault_anon 61
[  233.566858][T11759] EXT4-fs: old and new quota format mixing
[  233.574786][T11722] workingset_refault_file 0
[  233.715533][T11722] swap 208896
[  233.718878][T11722] swapcached 8192
[  233.722532][T11722] pgpgin 185687
[  233.726032][T11722] pgpgout 185684
[  233.729603][T11722] pgfault 201946
[  233.733157][T11722] pgmajfault 45
[  233.736605][T11722] inactive_anon 0
[  233.740262][T11722] active_anon 8192
[  233.743990][T11722] inactive_file 0
[  233.747718][T11722] active_file 4096
[  233.751448][T11722] unevictable 0
[  233.754950][T11722] hierarchical_memory_limit 314572800
[  233.760399][T11722] hierarchical_memsw_limit 9223372036854771712
[  233.766558][T11722] total_cache 0
[  233.770063][T11722] total_rss 0
[  233.773356][T11722] total_shmem 0
[  233.776835][T11722] total_mapped_file 0
[  233.780829][T11722] total_dirty 0
[  233.784285][T11722] total_writeback 0
[  233.788118][T11722] total_workingset_refault_anon 61
[  233.793242][T11722] total_workingset_refault_file 0
[  233.798316][T11722] total_swap 208896
[  233.802134][T11722] total_swapcached 8192
[  233.806298][T11722] total_pgpgin 185687
[  233.810329][T11722] total_pgpgout 185684
[  233.814421][T11722] total_pgfault 201946
[  233.818531][T11722] total_pgmajfault 45
[  233.822610][T11722] total_inactive_anon 0
[  233.826817][T11722] total_active_anon 8192
[  233.831068][T11722] total_inactive_file 0
[  233.835214][T11722] total_active_file 4096
[  233.839471][T11722] total_unevictable 0
[  233.843471][T11722] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.2856,pid=11721,uid=0
[  233.858229][T11722] Memory cgroup out of memory: Killed process 11721 (syz.9.2856) total-vm:96136kB, anon-rss:1140kB, file-rss:22512kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  233.888021][T11742] syz.9.2856 (11742) used greatest stack depth: 9016 bytes left
[  234.094734][T11722] syz.9.2856 (11722) used greatest stack depth: 7304 bytes left
[  234.125451][T11780] loop2: detected capacity change from 0 to 512
[  234.182624][T11780] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  234.199448][T11780] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  234.209918][T11780] EXT4-fs (loop2): group descriptors corrupted!
[  234.751276][T11804] __nla_validate_parse: 10 callbacks suppressed
[  234.751293][T11804] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2881'.
[  234.817630][T11806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2882'.
[  234.869910][T11806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2882'.
[  234.906640][T11815] loop2: detected capacity change from 0 to 512
[  234.920133][T11815] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  234.992596][T11815] EXT4-fs (loop2): 1 truncate cleaned up
[  235.044235][T11821] netlink: 'syz.9.2886': attribute type 1 has an invalid length.
[  235.052112][T11821] netlink: 'syz.9.2886': attribute type 4 has an invalid length.
[  235.059888][T11821] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.2886'.
[  235.077436][T11821] netlink: 'syz.9.2886': attribute type 1 has an invalid length.
[  235.085260][T11821] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.2886'.
[  235.141395][T11829] netlink: 16150 bytes leftover after parsing attributes in process `syz.9.2890'.
[  235.161904][T11829] netlink: 16150 bytes leftover after parsing attributes in process `syz.9.2890'.
[  235.182543][T11825] loop5: detected capacity change from 0 to 512
[  235.258553][T11825] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  235.270075][T11825] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  235.282329][T11825] EXT4-fs (loop5): group descriptors corrupted!
[  235.295548][T11834] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2891'.
[  235.462319][T11848] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2897'.
[  236.508161][T11862] loop9: detected capacity change from 0 to 512
[  236.537140][T11862] EXT4-fs: Ignoring removed i_version option
[  236.560544][T11858] loop8: detected capacity change from 0 to 512
[  236.567346][T11858] EXT4-fs: Ignoring removed nobh option
[  236.606389][T11858] EXT4-fs: old and new quota format mixing
[  236.637059][T11862] ext4 filesystem being mounted at /263/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  236.690033][T11870] loop5: detected capacity change from 0 to 512
[  236.746701][T11870] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  236.770278][T11870] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  236.781518][T11870] EXT4-fs (loop5): group descriptors corrupted!
[  236.908597][ T7658] EXT4-fs unmount: 18 callbacks suppressed
[  236.908610][ T7658] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.936433][T11888] FAULT_INJECTION: forcing a failure.
[  236.936433][T11888] name failslab, interval 1, probability 0, space 0, times 0
[  236.949261][T11888] CPU: 0 UID: 0 PID: 11888 Comm: syz.9.2910 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  236.949330][T11888] Tainted: [W]=WARN
[  236.949467][T11888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  236.949478][T11888] Call Trace:
[  236.949546][T11888]  <TASK>
[  236.949554][T11888]  __dump_stack+0x1d/0x30
[  236.949573][T11888]  dump_stack_lvl+0xe8/0x140
[  236.949592][T11888]  dump_stack+0x15/0x1b
[  236.949683][T11888]  should_fail_ex+0x265/0x280
[  236.949714][T11888]  should_failslab+0x8c/0xb0
[  236.949750][T11888]  kmem_cache_alloc_noprof+0x50/0x480
[  236.949777][T11888]  ? getname_flags+0x80/0x3b0
[  236.949845][T11888]  getname_flags+0x80/0x3b0
[  236.949914][T11888]  __x64_sys_linkat+0x66/0xa0
[  236.949938][T11888]  x64_sys_call+0x28ff/0x3000
[  236.949957][T11888]  do_syscall_64+0xd2/0x200
[  236.949976][T11888]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  236.950051][T11888]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  236.950083][T11888]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.950112][T11888] RIP: 0033:0x7efc75e7f6c9
[  236.950148][T11888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  236.950168][T11888] RSP: 002b:00007efc748e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000109
[  236.950185][T11888] RAX: ffffffffffffffda RBX: 00007efc760d5fa0 RCX: 00007efc75e7f6c9
[  236.950196][T11888] RDX: ffffffffffffffff RSI: 00002000000004c0 RDI: ffffffffffffffff
[  236.950207][T11888] RBP: 00007efc748e7090 R08: 0000000000000c00 R09: 0000000000000000
[  236.950218][T11888] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001
[  236.950259][T11888] R13: 00007efc760d6038 R14: 00007efc760d5fa0 R15: 00007ffd145475c8
[  236.950277][T11888]  </TASK>
[  237.242893][   T30] kauditd_printk_skb: 377 callbacks suppressed
[  237.242910][   T30] audit: type=1400 audit(2000000083.010:16479): avc:  denied  { read write } for  pid=11885 comm="syz.8.2909" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  237.272977][   T30] audit: type=1400 audit(2000000083.010:16480): avc:  denied  { open } for  pid=11885 comm="syz.8.2909" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  237.358306][   T30] audit: type=1326 audit(2000000083.120:16481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11889 comm="syz.9.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc75e7f6c9 code=0x7ffc0000
[  237.382034][   T30] audit: type=1326 audit(2000000083.120:16482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11889 comm="syz.9.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7efc75e7f6c9 code=0x7ffc0000
[  237.405613][   T30] audit: type=1326 audit(2000000083.120:16483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11889 comm="syz.9.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc75e7f6c9 code=0x7ffc0000
[  237.429303][   T30] audit: type=1326 audit(2000000083.120:16484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11889 comm="syz.9.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc75e7f6c9 code=0x7ffc0000
[  237.582301][   T30] audit: type=1326 audit(2000000083.290:16485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11899 comm="syz.2.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974827f6c9 code=0x7ffc0000
[  237.606138][   T30] audit: type=1326 audit(2000000083.290:16486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11899 comm="syz.2.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974827f6c9 code=0x7ffc0000
[  237.629783][   T30] audit: type=1326 audit(2000000083.290:16487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11899 comm="syz.2.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f974827f6c9 code=0x7ffc0000
[  237.653381][   T30] audit: type=1326 audit(2000000083.300:16488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11899 comm="syz.2.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974827f6c9 code=0x7ffc0000
[  237.715508][T11907] FAULT_INJECTION: forcing a failure.
[  237.715508][T11907] name failslab, interval 1, probability 0, space 0, times 0
[  237.728350][T11907] CPU: 0 UID: 0 PID: 11907 Comm: syz.2.2914 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  237.728415][T11907] Tainted: [W]=WARN
[  237.728421][T11907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  237.728433][T11907] Call Trace:
[  237.728438][T11907]  <TASK>
[  237.728445][T11907]  __dump_stack+0x1d/0x30
[  237.728472][T11907]  dump_stack_lvl+0xe8/0x140
[  237.728490][T11907]  dump_stack+0x15/0x1b
[  237.728505][T11907]  should_fail_ex+0x265/0x280
[  237.728575][T11907]  should_failslab+0x8c/0xb0
[  237.728601][T11907]  kmem_cache_alloc_noprof+0x50/0x480
[  237.728630][T11907]  ? audit_log_start+0x342/0x720
[  237.728703][T11907]  audit_log_start+0x342/0x720
[  237.728722][T11907]  ? kstrtouint+0x76/0xc0
[  237.728799][T11907]  audit_seccomp+0x48/0x100
[  237.728827][T11907]  ? __seccomp_filter+0x82d/0x1250
[  237.728914][T11907]  __seccomp_filter+0x83e/0x1250
[  237.728939][T11907]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  237.728996][T11907]  ? vfs_write+0x7e8/0x960
[  237.729017][T11907]  ? __rcu_read_unlock+0x4f/0x70
[  237.729040][T11907]  ? __fget_files+0x184/0x1c0
[  237.729109][T11907]  __secure_computing+0x82/0x150
[  237.729134][T11907]  syscall_trace_enter+0xcf/0x1e0
[  237.729232][T11907]  do_syscall_64+0xac/0x200
[  237.729305][T11907]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  237.729330][T11907]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  237.729430][T11907]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.729458][T11907] RIP: 0033:0x7f974827f6c9
[  237.729477][T11907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  237.729511][T11907] RSP: 002b:00007f9746cdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000026
[  237.729533][T11907] RAX: ffffffffffffffda RBX: 00007f97484d5fa0 RCX: 00007f974827f6c9
[  237.729544][T11907] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[  237.729554][T11907] RBP: 00007f9746cdf090 R08: 0000000000000000 R09: 0000000000000000
[  237.729565][T11907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  237.729575][T11907] R13: 00007f97484d6038 R14: 00007f97484d5fa0 R15: 00007ffc1fa6e528
[  237.729672][T11907]  </TASK>
[  237.729681][T11907] syz.2.2914 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  238.138271][T11919] loop9: detected capacity change from 0 to 512
[  238.150149][T11922] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2920'.
[  238.183503][T11919] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  238.196501][T11912] loop5: detected capacity change from 0 to 512
[  238.222904][T11919] ext4 filesystem being mounted at /267/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  238.235450][T11912] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  238.238564][T11919] EXT4-fs (loop9): shut down requested (0)
[  238.269096][T11912] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  238.280266][T11912] EXT4-fs (loop5): group descriptors corrupted!
[  238.315266][ T7658] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.409754][T11912] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  238.427303][T11912] netdevsim netdevsim5 netdevsim0: left allmulticast mode
[  238.472822][T11939] FAULT_INJECTION: forcing a failure.
[  238.472822][T11939] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  238.486188][T11939] CPU: 1 UID: 0 PID: 11939 Comm: syz.3.2928 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  238.486235][T11939] Tainted: [W]=WARN
[  238.486244][T11939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  238.486260][T11939] Call Trace:
[  238.486267][T11939]  <TASK>
[  238.486276][T11939]  __dump_stack+0x1d/0x30
[  238.486304][T11939]  dump_stack_lvl+0xe8/0x140
[  238.486330][T11939]  dump_stack+0x15/0x1b
[  238.486361][T11939]  should_fail_ex+0x265/0x280
[  238.486403][T11939]  should_fail+0xb/0x20
[  238.486441][T11939]  should_fail_usercopy+0x1a/0x20
[  238.486467][T11939]  _copy_from_iter+0xd2/0xe80
[  238.486558][T11939]  ? __build_skb_around+0x1ab/0x200
[  238.486662][T11939]  ? __alloc_skb+0x223/0x320
[  238.486703][T11939]  netlink_sendmsg+0x471/0x6b0
[  238.486743][T11939]  ? __pfx_netlink_sendmsg+0x10/0x10
[  238.486782][T11939]  __sock_sendmsg+0x145/0x180
[  238.486813][T11939]  ____sys_sendmsg+0x31e/0x4e0
[  238.486843][T11939]  ___sys_sendmsg+0x17b/0x1d0
[  238.486886][T11939]  __x64_sys_sendmsg+0xd4/0x160
[  238.486990][T11939]  x64_sys_call+0x191e/0x3000
[  238.487013][T11939]  do_syscall_64+0xd2/0x200
[  238.487034][T11939]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  238.487063][T11939]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  238.487101][T11939]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.487126][T11939] RIP: 0033:0x7f4d23aef6c9
[  238.487222][T11939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  238.487241][T11939] RSP: 002b:00007f4d22557038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  238.487261][T11939] RAX: ffffffffffffffda RBX: 00007f4d23d45fa0 RCX: 00007f4d23aef6c9
[  238.487273][T11939] RDX: 0000000000000000 RSI: 00002000000037c0 RDI: 0000000000000006
[  238.487286][T11939] RBP: 00007f4d22557090 R08: 0000000000000000 R09: 0000000000000000
[  238.487298][T11939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  238.487310][T11939] R13: 00007f4d23d46038 R14: 00007f4d23d45fa0 R15: 00007ffc8a924268
[  238.487392][T11939]  </TASK>
[  238.738288][T11958] validate_nla: 3 callbacks suppressed
[  238.738324][T11958] netlink: 'syz.3.2936': attribute type 1 has an invalid length.
[  238.756035][T11958] netlink: 'syz.3.2936': attribute type 1 has an invalid length.
[  238.772283][T11964] loop8: detected capacity change from 0 to 512
[  238.781156][T11964] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  238.789124][T11961] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  238.802872][T11964] EXT4-fs (loop8): 1 truncate cleaned up
[  238.813595][T11964] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  238.817370][T11961] netdevsim netdevsim5 netdevsim0: left allmulticast mode
[  238.875961][ T5855] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.899415][T11967] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  238.899415][T11967]    program syz.9.2940 not setting count and/or reply_len properly
[  238.946983][T11971] FAULT_INJECTION: forcing a failure.
[  238.946983][T11971] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  238.960287][T11971] CPU: 0 UID: 0 PID: 11971 Comm: syz.9.2944 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  238.960322][T11971] Tainted: [W]=WARN
[  238.960330][T11971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  238.960418][T11971] Call Trace:
[  238.960426][T11971]  <TASK>
[  238.960435][T11971]  __dump_stack+0x1d/0x30
[  238.960441][T11975] loop8: detected capacity change from 0 to 512
[  238.960470][T11971]  dump_stack_lvl+0xe8/0x140
[  238.960493][T11971]  dump_stack+0x15/0x1b
[  238.960570][T11971]  should_fail_ex+0x265/0x280
[  238.960619][T11971]  should_fail+0xb/0x20
[  238.960664][T11971]  should_fail_usercopy+0x1a/0x20
[  238.960724][T11971]  _copy_to_user+0x20/0xa0
[  238.960758][T11971]  simple_read_from_buffer+0xb5/0x130
[  238.960808][T11971]  proc_fail_nth_read+0x10e/0x150
[  238.960853][T11971]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  238.960938][T11971]  vfs_read+0x1a8/0x770
[  238.960970][T11971]  ? __rcu_read_unlock+0x4f/0x70
[  238.961063][T11971]  ? __fget_files+0x184/0x1c0
[  238.961105][T11971]  ksys_read+0xda/0x1a0
[  238.961162][T11971]  __x64_sys_read+0x40/0x50
[  238.961197][T11971]  x64_sys_call+0x27c0/0x3000
[  238.961266][T11971]  do_syscall_64+0xd2/0x200
[  238.961295][T11971]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  238.961335][T11971]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  238.961382][T11971]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.961421][T11971] RIP: 0033:0x7efc75e7e0dc
[  238.961443][T11971] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  238.961467][T11971] RSP: 002b:00007efc748e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  238.961494][T11971] RAX: ffffffffffffffda RBX: 00007efc760d5fa0 RCX: 00007efc75e7e0dc
[  238.961512][T11971] RDX: 000000000000000f RSI: 00007efc748e70a0 RDI: 0000000000000005
[  238.961529][T11971] RBP: 00007efc748e7090 R08: 0000000000000000 R09: 0000000000000000
[  238.961546][T11971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  238.961612][T11971] R13: 00007efc760d6038 R14: 00007efc760d5fa0 R15: 00007ffd145475c8
[  238.961638][T11971]  </TASK>
[  239.099885][T11978] loop5: detected capacity change from 0 to 256
[  239.148512][T11975] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  239.196099][T11975] ext4 filesystem being mounted at /486/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  239.210921][T11975] EXT4-fs (loop8): shut down requested (0)
[  239.307299][ T5855] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.410191][T11991] loop5: detected capacity change from 0 to 512
[  239.450956][T11991] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  239.464100][T11987] loop8: detected capacity change from 0 to 4096
[  239.480686][T11991] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  239.508662][T11987] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  239.527901][ T9411] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.585425][ T5855] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.630610][T12003] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  239.648474][T12003] netdevsim netdevsim5 netdevsim0: left allmulticast mode
[  239.658292][T12005] vhci_hcd: default hub control req: 040b v007f i0001 l0
[  239.818649][T12017] netlink: 'syz.2.2961': attribute type 1 has an invalid length.
[  239.826487][T12017] netlink: 'syz.2.2961': attribute type 4 has an invalid length.
[  239.834274][T12017] __nla_validate_parse: 5 callbacks suppressed
[  239.834286][T12017] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2961'.
[  239.855239][T12018] loop9: detected capacity change from 0 to 1024
[  239.871295][T12017] netlink: 'syz.2.2961': attribute type 1 has an invalid length.
[  239.879170][T12017] netlink: 'syz.2.2961': attribute type 4 has an invalid length.
[  239.886941][T12017] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2961'.
[  239.899405][T12018] ext4: Unknown parameter 'permit_directio'
[  239.968001][T12005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  239.976663][T12005] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  240.124370][T12024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2963'.
[  240.265966][T12025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2963'.
[  240.494206][T12031] loop2: detected capacity change from 0 to 128
[  240.554446][T12031] syz.2.2965: attempt to access beyond end of device
[  240.554446][T12031] loop2: rw=2049, sector=154, nr_sectors = 6 limit=128
[  240.685195][T12031] syz.2.2965: attempt to access beyond end of device
[  240.685195][T12031] loop2: rw=2049, sector=158, nr_sectors = 2 limit=128
[  240.698773][T12031] Buffer I/O error on dev loop2, logical block 79, lost async page write
[  240.721494][T12033] loop9: detected capacity change from 0 to 512
[  240.742342][T12033] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended
[  240.751472][T12033] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem
[  240.848858][T12033] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended
[  240.871121][T12034] syz.2.2965: attempt to access beyond end of device
[  240.871121][T12034] loop2: rw=2049, sector=170, nr_sectors = 80 limit=128
[  240.897648][T12033] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  240.925717][T12033] System zones: 0-2, 18-18, 34-35
[  240.931288][T12031] syz.2.2965: attempt to access beyond end of device
[  240.931288][T12031] loop2: rw=2049, sector=160, nr_sectors = 2 limit=128
[  240.933632][T12034] syz.2.2965: attempt to access beyond end of device
[  240.933632][T12034] loop2: rw=2049, sector=138, nr_sectors = 16 limit=128
[  240.944863][T12031] Buffer I/O error on dev loop2, logical block 80, lost async page write
[  240.946332][T12033] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  240.983781][T12040] FAULT_INJECTION: forcing a failure.
[  240.983781][T12040] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  240.996960][T12040] CPU: 1 UID: 0 PID: 12040 Comm: syz.5.2969 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  240.996998][T12040] Tainted: [W]=WARN
[  240.997006][T12040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  240.997065][T12040] Call Trace:
[  240.997074][T12040]  <TASK>
[  240.997084][T12040]  __dump_stack+0x1d/0x30
[  240.997112][T12040]  dump_stack_lvl+0xe8/0x140
[  240.997137][T12040]  dump_stack+0x15/0x1b
[  240.997155][T12040]  should_fail_ex+0x265/0x280
[  240.997255][T12040]  should_fail+0xb/0x20
[  240.997287][T12040]  should_fail_usercopy+0x1a/0x20
[  240.997314][T12040]  _copy_to_user+0x20/0xa0
[  240.997420][T12040]  simple_read_from_buffer+0xb5/0x130
[  240.997445][T12040]  proc_fail_nth_read+0x10e/0x150
[  240.997477][T12040]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  240.997524][T12040]  vfs_read+0x1a8/0x770
[  240.997585][T12040]  ? __rcu_read_unlock+0x4f/0x70
[  240.997611][T12040]  ? __fget_files+0x184/0x1c0
[  240.997648][T12040]  ksys_read+0xda/0x1a0
[  240.997676][T12040]  __x64_sys_read+0x40/0x50
[  240.997746][T12040]  x64_sys_call+0x27c0/0x3000
[  240.997772][T12040]  do_syscall_64+0xd2/0x200
[  240.997799][T12040]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  240.997835][T12040]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  240.997886][T12040]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.997949][T12040] RIP: 0033:0x7ff0b7f6e0dc
[  240.997966][T12040] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  240.997991][T12040] RSP: 002b:00007ff0b69d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  240.998016][T12040] RAX: ffffffffffffffda RBX: 00007ff0b81c5fa0 RCX: 00007ff0b7f6e0dc
[  240.998044][T12040] RDX: 000000000000000f RSI: 00007ff0b69d70a0 RDI: 0000000000000003
[  240.998056][T12040] RBP: 00007ff0b69d7090 R08: 0000000000000000 R09: 0000000000000000
[  240.998068][T12040] R10: 0000000000000042 R11: 0000000000000246 R12: 0000000000000001
[  240.998080][T12040] R13: 00007ff0b81c6038 R14: 00007ff0b81c5fa0 R15: 00007ffd7b9f5408
[  240.998099][T12040]  </TASK>
[  240.998350][T12031] syz.2.2965: attempt to access beyond end of device
[  240.998350][T12031] loop2: rw=2049, sector=162, nr_sectors = 6 limit=128
[  241.217874][T12031] syz.2.2965: attempt to access beyond end of device
[  241.217874][T12031] loop2: rw=2049, sector=166, nr_sectors = 2 limit=128
[  241.231331][T12031] Buffer I/O error on dev loop2, logical block 83, lost async page write
[  241.239815][T12031] syz.2.2965: attempt to access beyond end of device
[  241.239815][T12031] loop2: rw=2049, sector=168, nr_sectors = 2 limit=128
[  241.253301][T12031] Buffer I/O error on dev loop2, logical block 84, lost async page write
[  241.270862][ T7658] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.346173][T12053] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2974'.
[  241.379929][T12044] vhci_hcd: invalid port number 9
[  241.577979][T12071] netlink: 'syz.3.2981': attribute type 21 has an invalid length.
[  241.586032][T12071] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2981'.
[  241.595135][T12071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2981'.
[  241.774018][T12074] loop2: detected capacity change from 0 to 8192
[  241.903463][T12076] loop8: detected capacity change from 0 to 256
[  241.932741][T12076] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2983'.
[  241.958614][T12079] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2984'.
[  242.136504][T12093] loop5: detected capacity change from 0 to 256
[  242.150464][T12093] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2989'.
[  242.232516][T12095] loop5: detected capacity change from 0 to 512
[  242.257334][T12095] EXT4-fs: Ignoring removed i_version option
[  242.293278][   T30] kauditd_printk_skb: 484 callbacks suppressed
[  242.293295][   T30] audit: type=1400 audit(2000000088.060:16971): avc:  denied  { read } for  pid=12096 comm="syz.9.2991" dev="nsfs" ino=4026532369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  242.321429][   T30] audit: type=1400 audit(2000000088.060:16972): avc:  denied  { open } for  pid=12096 comm="syz.9.2991" path="net:[4026532369]" dev="nsfs" ino=4026532369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  242.419961][T12095] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  242.479893][   T30] audit: type=1400 audit(2000000088.110:16973): avc:  denied  { create } for  pid=12096 comm="syz.9.2991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  242.499586][   T30] audit: type=1326 audit(2000000088.120:16974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12096 comm="syz.9.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc75e7f6c9 code=0x7ffc0000
[  242.523187][   T30] audit: type=1326 audit(2000000088.120:16975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12096 comm="syz.9.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc75e7f6c9 code=0x7ffc0000
[  242.546870][   T30] audit: type=1326 audit(2000000088.130:16976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12096 comm="syz.9.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc75e7f6c9 code=0x7ffc0000
[  242.570578][   T30] audit: type=1326 audit(2000000088.130:16977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12096 comm="syz.9.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc75e7f6c9 code=0x7ffc0000
[  242.594252][   T30] audit: type=1326 audit(2000000088.130:16978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12096 comm="syz.9.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc75e7f6c9 code=0x7ffc0000
[  242.617831][   T30] audit: type=1326 audit(2000000088.130:16979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12096 comm="syz.9.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc75e7f6c9 code=0x7ffc0000
[  242.641453][   T30] audit: type=1326 audit(2000000088.130:16980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12096 comm="syz.9.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7efc75e7f6c9 code=0x7ffc0000
[  242.689921][T12095] ext4 filesystem being mounted at /166/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  242.775820][T12108] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  242.786282][T12108] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  242.873820][T12114] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  242.881581][T12114] batman_adv: batadv0: Removing interface: batadv_slave_0
[  242.892251][T12114] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  242.899955][T12114] batman_adv: batadv0: Removing interface: batadv_slave_1
[  243.074249][ T9411] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.244696][T12137] loop5: detected capacity change from 0 to 512
[  243.348059][T12137] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  243.382668][T12144] loop8: detected capacity change from 0 to 1024
[  243.398707][T12137] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  243.410080][T12144] EXT4-fs: Ignoring removed bh option
[  243.415540][T12144] EXT4-fs: inline encryption not supported
[  243.470486][T12137] EXT4-fs (loop5): shut down requested (0)
[  243.483198][T12144] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  243.527371][T12144] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  243.552514][ T9411] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.564386][T12144] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 2: comm syz.8.3007: lblock 2 mapped to illegal pblock 2 (length 1)
[  243.611284][T12144] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.3007: lblock 0 mapped to illegal pblock 48 (length 1)
[  243.657580][T12144] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.3007: Failed to acquire dquot type 0
[  243.691317][T12144] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  243.705168][T12125] loop9: detected capacity change from 0 to 512
[  243.723776][T12125] EXT4-fs: Ignoring removed nobh option
[  243.734772][T12144] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.3007: mark_inode_dirty error
[  243.766582][T12144] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  243.777054][T12144] EXT4-fs (loop8): 1 orphan inode deleted
[  243.783248][T12144] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  243.793646][T12125] EXT4-fs: old and new quota format mixing
[  243.801661][ T5915] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1)
[  243.825416][T12154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.861782][ T5915] EXT4-fs error (device loop8): ext4_release_dquot:6981: comm kworker/u8:14: Failed to release dquot type 0
[  243.878438][T12162] netlink: 'syz.5.3014': attribute type 1 has an invalid length.
[  243.886227][T12162] netlink: 'syz.5.3014': attribute type 4 has an invalid length.
[  243.909862][T12139] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.3007: lblock 0 mapped to illegal pblock 48 (length 1)
[  243.918977][T12162] netlink: 'syz.5.3014': attribute type 1 has an invalid length.
[  243.931868][T12162] netlink: 'syz.5.3014': attribute type 4 has an invalid length.
[  243.944068][T12154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.974049][ T5855] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.000392][T12154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.020522][T12174] netlink: 'syz.5.3018': attribute type 1 has an invalid length.
[  244.028412][T12174] netlink: 'syz.5.3018': attribute type 4 has an invalid length.
[  244.037392][T12174] netlink: 'syz.5.3018': attribute type 1 has an invalid length.
[  244.045196][T12174] netlink: 'syz.5.3018': attribute type 4 has an invalid length.
[  244.082479][T12154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.101234][T12176] netdevsim netdevsim8 netdevsim0: entered allmulticast mode
[  244.116446][T12176] netdevsim netdevsim8 netdevsim0: left allmulticast mode
[  244.127423][T12180] vhci_hcd: default hub control req: 040b v007f i0001 l0
[  244.134667][T12178] loop9: detected capacity change from 0 to 2048
[  244.159533][ T3470] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  244.195763][ T5915] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  244.211146][T12178] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  244.226277][ T5915] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  244.251534][T12186] loop5: detected capacity change from 0 to 1024
[  244.255677][T12178] ext4 filesystem being mounted at /281/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  244.264627][ T5915] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  244.280813][T12186] ext4: Unknown parameter 'permit_directio'
[  244.377387][T12195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  244.406230][T12195] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  244.449341][T12195] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3019: bg 0: block 345: padding at end of block bitmap is not set
[  244.489694][T12195] EXT4-fs (loop9): Remounting filesystem read-only
[  244.527255][T12201] netlink: 'syz.3.3027': attribute type 1 has an invalid length.
[  244.535178][T12201] netlink: 'syz.3.3027': attribute type 4 has an invalid length.
[  244.536020][T12203] loop5: detected capacity change from 0 to 2048
[  244.580015][T12203] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  245.086557][ T9411] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.127757][ T7658] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.167257][T12221] loop9: detected capacity change from 0 to 512
[  245.192915][T12221] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  245.230658][T12219] loop5: detected capacity change from 0 to 512
[  245.237494][T12219] EXT4-fs: Ignoring removed i_version option
[  245.266856][T12221] EXT4-fs (loop9): 1 truncate cleaned up
[  245.277011][T12219] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  245.298927][T12230] loop8: detected capacity change from 0 to 512
[  245.306455][T12221] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  245.364008][T12219] ext4 filesystem being mounted at /178/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  245.390412][T12230] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  245.414261][T12236] __nla_validate_parse: 17 callbacks suppressed
[  245.414277][T12236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3039'.
[  245.447885][T12230] ext4 filesystem being mounted at /501/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  245.465057][ T7658] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.495685][T12241] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3040'.
[  245.506598][T12230] EXT4-fs (loop8): shut down requested (0)
[  245.534769][ T5855] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.560570][T12244] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3042'.
[  245.573309][T12249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3039'.
[  245.618183][T12244] loop9: detected capacity change from 0 to 1024
[  245.635093][T12244] EXT4-fs: Ignoring removed bh option
[  245.649287][T12244] EXT4-fs: inline encryption not supported
[  245.655600][T12244] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  245.666862][T12244] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  245.675885][T12244] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 2: comm syz.9.3042: lblock 2 mapped to illegal pblock 2 (length 1)
[  245.690455][T12244] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 48: comm syz.9.3042: lblock 0 mapped to illegal pblock 48 (length 1)
[  245.712855][T12244] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.3042: Failed to acquire dquot type 0
[  245.726355][ T9411] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.735655][T12244] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  245.746389][T12244] EXT4-fs error (device loop9): ext4_evict_inode:254: inode #11: comm syz.9.3042: mark_inode_dirty error
[  245.758037][T12244] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  245.784738][T12244] EXT4-fs (loop9): 1 orphan inode deleted
[  245.797056][ T5920] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:19: lblock 1 mapped to illegal pblock 1 (length 1)
[  245.814262][T12258] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3045'.
[  245.830587][T12244] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  245.844875][ T5920] EXT4-fs error (device loop9): ext4_release_dquot:6981: comm kworker/u8:19: Failed to release dquot type 0
[  245.887342][T12244] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 48: comm syz.9.3042: lblock 0 mapped to illegal pblock 48 (length 1)
[  245.932764][ T7658] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.984219][T12268] loop5: detected capacity change from 0 to 512
[  245.998703][T12268] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  246.049280][T12268] EXT4-fs (loop5): 1 truncate cleaned up
[  246.055738][T12275] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3053'.
[  246.064362][T12268] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  246.087722][T12272] vhci_hcd: default hub control req: 040b v007f i0001 l0
[  246.117090][T12277] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3054'.
[  246.123712][ T9411] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.166580][T12277] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3054'.
[  246.212846][T12282] loop9: detected capacity change from 0 to 1024
[  246.246724][T12282] ext4: Unknown parameter 'permit_directio'
[  246.324448][T12282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  246.337865][T12282] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  246.649861][T12291] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  246.682451][T12281] loop5: detected capacity change from 0 to 512
[  246.689522][T12281] EXT4-fs: Ignoring removed nobh option
[  246.710638][T12281] EXT4-fs: old and new quota format mixing
[  246.741439][T12292] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  246.984233][T12295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3059'.
[  247.022297][T12303] loop5: detected capacity change from 0 to 2048
[  247.044917][T12295] loop2: detected capacity change from 0 to 1024
[  247.053307][T12295] EXT4-fs: Ignoring removed bh option
[  247.062459][T12295] EXT4-fs: inline encryption not supported
[  247.069769][T12295] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  247.090578][T12295] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  247.109189][ T5915] Bluetooth: hci0: Frame reassembly failed (-84)
[  247.115821][T12295] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.3059: lblock 2 mapped to illegal pblock 2 (length 1)
[  247.138982][T12295] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.3059: lblock 0 mapped to illegal pblock 48 (length 1)
[  247.156071][T12303] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  247.172017][T12295] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.3059: Failed to acquire dquot type 0
[  247.197440][T12295] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  247.220070][T12295] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.3059: mark_inode_dirty error
[  247.222902][T12319] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3067'.
[  247.241136][T12295] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  247.252633][T12295] EXT4-fs (loop2): 1 orphan inode deleted
[  247.268771][ T5919] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:18: lblock 1 mapped to illegal pblock 1 (length 1)
[  247.293448][ T5919] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:18: Failed to release dquot type 0
[  247.307139][T12295] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  247.351668][   T30] kauditd_printk_skb: 579 callbacks suppressed
[  247.351761][   T30] audit: type=1326 audit(2000000093.120:17549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12294 comm="syz.2.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f974827df10 code=0x7ffc0000
[  247.393863][T12295] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.3059: lblock 0 mapped to illegal pblock 48 (length 1)
[  247.406837][   T30] audit: type=1326 audit(2000000093.120:17550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12294 comm="syz.2.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f974827e417 code=0x7ffc0000
[  247.431845][   T30] audit: type=1326 audit(2000000093.120:17551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12294 comm="syz.2.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f974827df10 code=0x7ffc0000
[  247.455744][   T30] audit: type=1326 audit(2000000093.120:17552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12294 comm="syz.2.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974827f6c9 code=0x7ffc0000
[  247.455961][T12295] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=-117
[  247.479382][   T30] audit: type=1326 audit(2000000093.120:17553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12294 comm="syz.2.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974827f6c9 code=0x7ffc0000
[  247.479433][   T30] audit: type=1326 audit(2000000093.150:17554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12294 comm="syz.2.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f974827f6c9 code=0x7ffc0000
[  247.536609][   T30] audit: type=1326 audit(2000000093.150:17555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12294 comm="syz.2.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f974827f703 code=0x7ffc0000
[  247.560218][   T30] audit: type=1326 audit(2000000093.150:17556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12294 comm="syz.2.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f974827e17f code=0x7ffc0000
[  247.583862][   T30] audit: type=1326 audit(2000000093.160:17557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12294 comm="syz.2.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f974827f757 code=0x7ffc0000
[  247.667313][ T8361] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.810988][T12341] loop2: detected capacity change from 0 to 256
[  247.832953][ T9411] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.855141][T12345] loop9: detected capacity change from 0 to 256
[  248.331458][T12353] loop2: detected capacity change from 0 to 1024
[  248.387417][T12353] ext4: Unknown parameter 'permit_directio'
[  248.420972][T12357] loop5: detected capacity change from 0 to 256
[  248.431261][T12352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  248.445189][T12352] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  248.469508][T12360] loop5: detected capacity change from 0 to 512
[  248.485657][T12360] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  248.586343][T12360] EXT4-fs (loop5): 1 truncate cleaned up
[  248.621947][T12360] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  248.737694][ T9411] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.812783][T12372] loop5: detected capacity change from 0 to 512
[  248.838761][T12372] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  248.865336][T12372] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  248.888987][T12372] EXT4-fs (loop5): shut down requested (0)
[  248.912310][ T9411] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.066111][T12385] validate_nla: 2 callbacks suppressed
[  249.066128][T12385] netlink: 'syz.5.3089': attribute type 21 has an invalid length.
[  249.125482][T12376] loop8: detected capacity change from 0 to 512
[  249.159217][T12376] EXT4-fs: Ignoring removed nobh option
[  249.169076][T12376] EXT4-fs: old and new quota format mixing
[  249.176784][ T6771] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  249.302823][ T5915] Bluetooth: hci0: Frame reassembly failed (-84)
[  250.941197][T12409] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  251.071028][T12420] __nla_validate_parse: 11 callbacks suppressed
[  251.071043][T12420] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3101'.
[  251.088460][T12409] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  251.153097][T12429] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3101'.
[  251.197483][T12427] vhci_hcd: default hub control req: 040b v007f i0001 l0
[  251.302597][T12431] loop9: detected capacity change from 0 to 2048
[  251.338860][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  251.369171][T12431] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  251.395729][T12439] netlink: 'syz.3.3107': attribute type 21 has an invalid length.
[  251.404090][T12439] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3107'.
[  251.413174][T12439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3107'.
[  251.618263][T12446] loop5: detected capacity change from 0 to 512
[  251.642587][T12446] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  251.663032][T12434] loop8: detected capacity change from 0 to 512
[  251.666983][T12446] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  251.672508][T12434] EXT4-fs: Ignoring removed nobh option
[  251.829723][T12434] EXT4-fs: old and new quota format mixing
[  251.914939][T12446] EXT4-fs (loop5): shut down requested (0)
[  252.078369][ T9411] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.186640][T12453] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3112'.
[  252.197419][T12453] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3112'.
[  252.298428][T12457] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  252.317261][T12457] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  252.447770][   T30] kauditd_printk_skb: 239 callbacks suppressed
[  252.447829][   T30] audit: type=1400 audit(2000000098.220:17797): avc:  denied  { create } for  pid=12463 comm="syz.2.3116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  252.467835][T12466] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3117'.
[  252.493137][T12462] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3115'.
[  252.503232][   T30] audit: type=1400 audit(2000000098.250:17798): avc:  denied  { bind } for  pid=12463 comm="syz.2.3116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  252.509997][T12462] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3115'.
[  252.523022][   T30] audit: type=1400 audit(2000000098.250:17799): avc:  denied  { write } for  pid=12463 comm="syz.2.3116" name="001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  252.559074][T12468] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3118'.
[  252.575182][T12464] vhci_hcd: default hub control req: 040b v007f i0001 l0
[  252.644518][T12472] vhci_hcd: default hub control req: 040b v007f i0001 l0
[  252.658139][ T7658] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.707451][   T30] audit: type=1400 audit(2000000098.480:17800): avc:  denied  { read write } for  pid=12463 comm="syz.2.3116" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  252.731285][   T30] audit: type=1400 audit(2000000098.480:17801): avc:  denied  { open } for  pid=12463 comm="syz.2.3116" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  252.765111][T12477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  252.774649][T12477] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  252.786875][   T30] audit: type=1400 audit(2000000098.530:17802): avc:  denied  { ioctl } for  pid=12463 comm="syz.2.3116" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  252.879307][   T30] audit: type=1326 audit(2000000098.650:17803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12479 comm="syz.9.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc75e7f6c9 code=0x7ffc0000
[  252.904626][   T30] audit: type=1326 audit(2000000098.680:17804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12479 comm="syz.9.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc75e7f6c9 code=0x7ffc0000
[  252.928307][   T30] audit: type=1326 audit(2000000098.680:17805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12479 comm="syz.9.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7efc75e7f6c9 code=0x7ffc0000
[  252.951889][   T30] audit: type=1326 audit(2000000098.680:17806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12479 comm="syz.9.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc75e7f6c9 code=0x7ffc0000
[  253.576891][T12510] loop8: detected capacity change from 0 to 256
[  253.601899][T12512] loop9: detected capacity change from 0 to 512
[  253.637764][T12512] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  253.651041][T12512] ext4 filesystem being mounted at /297/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  253.680850][T12512] EXT4-fs (loop9): shut down requested (0)
[  253.723624][ T7658] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.767732][T12521] netlink: 'syz.8.3138': attribute type 21 has an invalid length.
[  253.797697][T12519] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  253.835538][T12519] netdevsim netdevsim5 netdevsim0: left allmulticast mode
[  254.219482][T12542] vhci_hcd: default hub control req: 040b v007f i0001 l0
[  255.159556][ T5920] Bluetooth: hci0: Frame reassembly failed (-84)
[  255.187073][T12557] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  255.282557][T12559] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.324055][T12557] netdevsim netdevsim5 netdevsim0: left allmulticast mode
[  255.433308][T12559] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.458512][T12574] vhci_hcd: default hub control req: 040b v007f i0001 l0
[  255.516701][T12582] netlink: 'syz.5.3161': attribute type 21 has an invalid length.
[  255.566039][T12579] loop8: detected capacity change from 0 to 1024
[  255.614115][T12579] EXT4-fs: Ignoring removed bh option
[  255.634989][T12559] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.646210][T12579] EXT4-fs: inline encryption not supported
[  255.655783][T12579] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  255.673903][T12579] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  255.684999][T12579] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 2: comm syz.8.3160: lblock 2 mapped to illegal pblock 2 (length 1)
[  255.699499][T12579] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.3160: lblock 0 mapped to illegal pblock 48 (length 1)
[  255.726542][T12579] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.3160: Failed to acquire dquot type 0
[  255.742494][T12579] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  255.757522][T12579] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.3160: mark_inode_dirty error
[  255.769426][T12579] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  255.780054][T12579] EXT4-fs (loop8): 1 orphan inode deleted
[  255.786297][T12579] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  255.800407][T12559] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.811462][ T5915] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1)
[  255.841253][ T5915] EXT4-fs error (device loop8): ext4_release_dquot:6981: comm kworker/u8:14: Failed to release dquot type 0
[  255.853308][T12579] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.3160: lblock 0 mapped to illegal pblock 48 (length 1)
[  255.902678][ T5855] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.938605][ T5955] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  255.960463][ T5955] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  255.992819][ T5919] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  256.006045][ T5919] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  256.055003][T12613] loop9: detected capacity change from 0 to 512
[  256.063934][T12613] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  256.097434][T12613] EXT4-fs (loop9): 1 truncate cleaned up
[  256.112102][T12613] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  256.143501][ T7658] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.227428][T12627] vhci_hcd: default hub control req: 040b v007f i0001 l0
[  256.341661][T12632] loop9: detected capacity change from 0 to 1024
[  256.357059][T12632] ext4: Unknown parameter 'permit_directio'
[  256.375066][T12634] __nla_validate_parse: 23 callbacks suppressed
[  256.375084][T12634] netlink: 16162 bytes leftover after parsing attributes in process `syz.8.3176'.
[  256.395473][T12634] netlink: 16162 bytes leftover after parsing attributes in process `syz.8.3176'.
[  256.465184][T12639] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3178'.
[  256.484773][T12639] netlink: 128 bytes leftover after parsing attributes in process `syz.9.3178'.
[  256.538534][T12639] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.554607][T12650] loop8: detected capacity change from 0 to 512
[  256.562918][T12650] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  256.575081][T12650] EXT4-fs (loop8): 1 truncate cleaned up
[  256.581829][T12651] vhci_hcd: default hub control req: 040b v007f i0001 l0
[  256.582091][T12650] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  256.641612][T12651] loop5: detected capacity change from 0 to 1024
[  256.661994][T12651] ext4: Unknown parameter 'permit_directio'
[  256.671601][T12639] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.683973][T12651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  256.701777][ T5855] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.701780][T12651] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  256.794168][T12639] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.832948][T12639] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.176806][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[  257.182873][ T6771] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  257.398470][T12672] netlink: 16162 bytes leftover after parsing attributes in process `syz.3.3191'.
[  257.408091][T12672] netlink: 16162 bytes leftover after parsing attributes in process `syz.3.3191'.
[  257.519134][   T30] kauditd_printk_skb: 483 callbacks suppressed
[  257.519149][   T30] audit: type=1326 audit(2000000103.290:18286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12681 comm="syz.3.3196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d23aef6c9 code=0x7ffc0000
[  257.549491][   T30] audit: type=1326 audit(2000000103.290:18287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12681 comm="syz.3.3196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d23aef6c9 code=0x7ffc0000
[  257.573262][   T30] audit: type=1326 audit(2000000103.300:18288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12681 comm="syz.3.3196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f4d23aef6c9 code=0x7ffc0000
[  257.596995][   T30] audit: type=1326 audit(2000000103.300:18289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12681 comm="syz.3.3196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d23aef6c9 code=0x7ffc0000
[  257.620756][   T30] audit: type=1326 audit(2000000103.300:18290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12681 comm="syz.3.3196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f4d23aef6c9 code=0x7ffc0000
[  257.644384][   T30] audit: type=1326 audit(2000000103.300:18291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12681 comm="syz.3.3196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d23aef6c9 code=0x7ffc0000
[  257.668071][   T30] audit: type=1326 audit(2000000103.300:18292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12681 comm="syz.3.3196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f4d23aef6c9 code=0x7ffc0000
[  257.691733][   T30] audit: type=1326 audit(2000000103.300:18293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12681 comm="syz.3.3196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d23aef6c9 code=0x7ffc0000
[  257.715380][   T30] audit: type=1326 audit(2000000103.300:18294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12681 comm="syz.3.3196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d23aef6c9 code=0x7ffc0000
[  257.738975][   T30] audit: type=1326 audit(2000000103.300:18295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12681 comm="syz.3.3196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4d23aedf10 code=0x7ffc0000
[  257.891601][T12686] loop8: detected capacity change from 0 to 2048
[  257.907172][ T3305] ==================================================================
[  257.915315][ T3305] BUG: KCSAN: data-race in _copy_to_iter / _copy_to_iter
[  257.922373][ T3305] 
[  257.924713][ T3305] write to 0xffff88812f141000 of 2048 bytes by task 5919 on cpu 1:
[  257.932702][ T3305]  _copy_to_iter+0x602/0xe70
[  257.937309][ T3305]  copy_page_to_iter+0x18f/0x2d0
[  257.942260][ T3305]  shmem_file_read_iter+0x2d6/0x540
[  257.947482][ T3305]  lo_rw_aio+0x6a0/0x760
[  257.951743][ T3305]  loop_process_work+0x52d/0xa60
[  257.956695][ T3305]  loop_workfn+0x31/0x40
[  257.960955][ T3305]  process_scheduled_works+0x4ce/0x9d0
[  257.966433][ T3305]  worker_thread+0x582/0x770
[  257.971025][ T3305]  kthread+0x489/0x510
[  257.975190][ T3305]  ret_from_fork+0x122/0x1b0
[  257.979785][ T3305]  ret_from_fork_asm+0x1a/0x30
[  257.984560][ T3305] 
[  257.986885][ T3305] read to 0xffff88812f141000 of 512 bytes by task 3305 on cpu 0:
[  257.994600][ T3305]  _copy_to_iter+0x130/0xe70
[  257.999195][ T3305]  copy_page_to_iter+0x18f/0x2d0
[  258.004141][ T3305]  filemap_read+0x407/0xa00
[  258.008660][ T3305]  blkdev_read_iter+0x22d/0x2e0
[  258.013532][ T3305]  vfs_read+0x64c/0x770
[  258.017724][ T3305]  ksys_read+0xda/0x1a0
[  258.021890][ T3305]  __x64_sys_read+0x40/0x50
[  258.026408][ T3305]  x64_sys_call+0x27c0/0x3000
[  258.031119][ T3305]  do_syscall_64+0xd2/0x200
[  258.035641][ T3305]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.041552][ T3305] 
[  258.043879][ T3305] Reported by Kernel Concurrency Sanitizer on:
[  258.050045][ T3305] CPU: 0 UID: 0 PID: 3305 Comm: udevd Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  258.060900][ T3305] Tainted: [W]=WARN
[  258.064713][ T3305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  258.074773][ T3305] ==================================================================
[  258.094193][T12686] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  258.124865][ T5855] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.672066][ T3470] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  259.682907][ T3470] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  259.694587][ T3470] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  259.705918][ T3470] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0