last executing test programs:

2m37.031908968s ago: executing program 0 (id=72):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH")
setxattr$security_ima(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=ANY=[], 0x700, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')

2m36.880832583s ago: executing program 0 (id=77):
openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00'})
open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e)
pipe2$9p(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000480))
r4 = dup(r3)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}})

2m35.907614189s ago: executing program 0 (id=92):
rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8)
tkill(r0, 0x16)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r4, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x40}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r4, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}]}}}]}, 0x40}}, 0x4040000)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0x1, 0x12, 0x1, 0x20, 0x5}, 0x20)
sendto$packet(r1, &(0x7f0000000200)="26fb80a2b41b3b9889047c52702f", 0xe, 0x4000040, &(0x7f0000000240)={0x11, 0x4, r4, 0x1, 0x81, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x14)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18010000bc0000010000000000030000850000007b00000095b81adcf23e70db7627db11b92ac7c6da39714c049467ab1162657e16e1978c6b204bfe12eb870de71ce328d3ef3b8e8382bb4561cc51679e46fa8f7208f1e722657a1f36d18cd1baea383780c61ddd94bf674fd8f90ba0ae2c4b4dea677689a53ad2fe746a8229200a7248fd6b7cca864ae02a4dceb0e7c7369d2aba3389831e86dda7f2be0cf0c381e1c2e174febf27e8d878fb4b16bc6191cc39855b40f530f53918ccf74413969bb6554b0b59175cea6adf57516d1e515966690e3eb0796b59bf2536fc8227e7a53b7ae72f7fa8902b4dafe3f1f848"], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x6, '\x00', r4, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffde}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r7, 0x0, 0x3}, 0x18)
r8 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r8, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r9, 0x0}, 0x20)
close(r8)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x77359400})

2m35.788349581s ago: executing program 0 (id=93):
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB], 0xfe33)
recvmsg(0xffffffffffffffff, 0x0, 0x102)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
bind$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x2, 0x0, @local}, 0x10)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000000000013030000ddffffff850000002d00000095687b8adc9604c2019dd10c5ea8e292b7e39606d74efd7dd0d13293c8a8027b062d96120d2dced92d0a0120e4c36e44a967238af66619e9063adce9a3ca41e75d781a7a4c8abab3f753e070"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)
r3 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r3, &(0x7f0000000040), 0x10)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000})
listen(r3, 0x5)
r4 = socket(0x28, 0x5, 0x0)
setrlimit(0x40000000000008, &(0x7f0000000000))
connect$vsock_stream(r4, &(0x7f0000000080), 0x10)
sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002480)=@deltfilter={0x24, 0x2d, 0x4, 0x70bd2f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x1, 0x2}, {0x4, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004885}, 0x40004)
setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8)
sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) (fail_nth: 3)

2m35.787970031s ago: executing program 0 (id=94):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x21}, @TCA_FQ_CODEL_FLOWS={0xfe5d, 0x5, 0x6}, @TCA_FQ_CODEL_INTERVAL={0x8}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x4}]}}]}, 0x58}}, 0x44080)
r5 = inotify_init1(0x80000)
inotify_add_watch(r5, &(0x7f0000000200)='.\x00', 0x400000a0)
r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000001c0)=0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xd, 0xc, &(0x7f0000000800)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000001}, 0x94)
epoll_create1(0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x1641, @private2, 0xfffffff9}}, 0xfff, 0x9}, &(0x7f0000000200)=0x90)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a30000000004800048020000180070001007274000014000280080001400000000d080002400000000124000180090001006d65746100000000140002800800014000000010080002400000000514000000110001"], 0xf8}}, 0x0)
close(r8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r7, 0x0, 0xf}, 0x18)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0x9}, 0x18)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r11, 0x0, 0x401}, 0x18)
add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff)
ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002)
r12 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r12, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)

2m35.725845377s ago: executing program 0 (id=95):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x18)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x3}]}}]}, 0x40}}, 0x4048000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000000706010100000000000000000200000205000100070000000900020073797a3100"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r4)

2m20.682398909s ago: executing program 32 (id=95):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x18)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x3}]}}]}, 0x40}}, 0x4048000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000000706010100000000000000000200000205000100070000000900020073797a3100"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r4)

1m12.211026488s ago: executing program 1 (id=900):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@noblock_validity}]}, 0x1, 0xbb6, &(0x7f0000000c00)="$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")
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x8a, &(0x7f00000001c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa3}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@block_validity}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

1m11.817910343s ago: executing program 1 (id=904):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r1, 0x0, 0x5}, 0x18)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000002000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00'}, 0x18)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00', 0x800005})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x80000}, 0x100})

1m11.558072143s ago: executing program 1 (id=910):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000340)={'syzkaller0\x00', <r2=>0x0})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000005c40), 0x403f, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0xc, &(0x7f0000000700)=ANY=[@ANYRES8=r2, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095", @ANYRESOCT=r2, @ANYRESHEX, @ANYRES16=r2, @ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', r2, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x2}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f00000002c0)="0503162ed3fc140820004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)

1m11.267359574s ago: executing program 1 (id=913):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000100)={[{@barrier_val={'barrier', 0x3d, 0x6e06}}, {@resgid}, {@mblk_io_submit}, {@norecovery}, {@minixdf}, {@quota}, {@nobarrier}, {@stripe={'stripe', 0x3d, 0xfff}}, {@jqfmt_vfsv0}]}, 0xfc, 0x5aa, &(0x7f0000001100)="$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")
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setitimer(0x1, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$pokeuser(0x6, r0, 0x90, 0x41d9fda5)
r1 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffc2}], 0x1, 0x7800, 0x0, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f00000010c0)=0x8)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x4)
dup(r5)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000001080)={r4}, 0xc)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000000c0)=ANY=[@ANYRES32=r4, @ANYBLOB="188b"], 0xb)
lsetxattr$trusted_overlay_origin(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x0, 0x0, 0x0)

1m10.347530129s ago: executing program 1 (id=919):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r1=>0x0}, &(0x7f0000001080)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000280)={r1, 0xc, "ed2a88be36c06dcd131cf4d7"}, &(0x7f0000000140)=0x14)

1m9.80323287s ago: executing program 1 (id=926):
openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00'})
open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e)
pipe2$9p(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000480))
r3 = dup(r2)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}})

1m9.672400465s ago: executing program 33 (id=926):
openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00'})
open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e)
pipe2$9p(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000480))
r3 = dup(r2)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}})

24.67015494s ago: executing program 6 (id=1525):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000f9ffffff850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x2}, 0x18)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[], 0x310)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
close_range(r2, 0xffffffffffffffff, 0x0)

24.603903033s ago: executing program 6 (id=1526):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000039000900000000000000000001000000040000000c0001800600000005470000080002"], 0x38}}, 0x0)

24.556188514s ago: executing program 6 (id=1527):
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00', <r0=>0x0})
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000000c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0xb, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', r0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x2040400)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)
quotactl_fd$Q_GETFMT(r3, 0xffffffff80000401, 0x0, 0x0)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r7=>r4, {0x8}}, './file0\x00'})
sendmsg$inet_sctp(r7, &(0x7f00000003c0)={&(0x7f0000000240)=@in={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000280)="e6f844260d166e43a5282f2d85694499ed81aa8d5f5828923e01d3b19588", 0x1e}, {&(0x7f00000004c0)="21a20b00516cfefcd5773889561f2548bcaeb6c2c34bfb53aa50fade2f77f34a9cbf942c96844f82b4c1b014920de9260c8e0655644d23f0ddd3983f29a19745fb2d8caed05363d31269cc5f6f6b87d59fe57dcd0b3646395cd480b7c1d11b8a6d683ca7648d40c35137b18b897956ca0b5534bd4ccd546bde80b3cfd6e43ac908f82f5c5760e74dc93702a80f4b97e4b41d47fd3ef5f6bbfeb046dcea2efb5680", 0xa1}, {&(0x7f0000000580)="4831597d3660daf9f9cdc0604576e9a9b72e9adbe63ad66561cbb1a9074f65b67c4cd0b99bd104f92e940f5311b07ba768af5a5a044683ae97197b9ef9c64a9a99f56ab9c5b55783a2dc5b1890fef09a84a9596019c306eded95e514d78da3a6e6c783649fbffcb83d1172f3c31a8316074e0704f2b225632ea5895ab0afae79a179e7829ecc9c050ac1f43255994512848d8095046310bb19e713d458d69e1f7a8c76a8d94468b8406c6b0bb52427c710a8aa9222ba0503df6a5a7b16fa846f4a663e4c21c18c8f688f0fba228b521732a4beb1987ae29cbfc6f085e7735a7617d5b20fc026f8b4d249e4c874ed", 0xee}], 0x3, 0x0, 0x0, 0x811}, 0x44091)
r8 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioprio_set$pid(0x1, r8, 0x2000)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
r10 = dup(r9)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x21}, 0x9c)
sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000ffdcdf25010000000000000008410000004c00180000000d62726f6164636173742d6c696e6b00"/98], 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)

24.264168905s ago: executing program 6 (id=1534):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x1010, 0x18000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
readv(r2, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/81, 0x51}, {&(0x7f0000000340)=""/83, 0x53}, {&(0x7f00000005c0)=""/174, 0xae}, {&(0x7f0000000100)=""/36, 0x24}, {&(0x7f0000000680)=""/144, 0x90}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000000740)=""/197, 0xc5}], 0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x18)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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")
r4 = syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x0, 0x81, 0xffffffff})
move_pages(r4, 0x0, 0x0, 0x0, 0x0, 0x6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff})
r6 = socket(0x10, 0x803, 0x0)
ioctl$SIOCGIFMTU(r6, 0x8942, &(0x7f0000000140)={'bond_slave_1\x00'})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
sendmsg$unix(r5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=[@rights={{0x10}}], 0x10, 0x68048844}, 0x4000080)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c9002005b01000003000c0000000000000000000000890000000000000000000000000000000000000000000010000000000000000000000000000000000000050000000000000000000000ffffffffffffffff0000000000000000010000000000008000000000000000000000000000000000000000000009000000000000000a0000000000000000000000000000000000000000000000000000000000a3534fd09f83b0e91c5d00000400"/191])

23.912536769s ago: executing program 6 (id=1538):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000039000900000000000000000001000000040000000c0001800600000005470000080002"], 0x38}}, 0x0)

23.291723393s ago: executing program 6 (id=1540):
r0 = socket$inet6_sctp(0xa, 0x0, 0x84)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00'}, 0x10)
r1 = dup(0xffffffffffffffff)
bind$inet6(r1, &(0x7f0000000080)={0x27, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10000}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000002c00000000000000000000181100", @ANYRESHEX=r0, @ANYRESDEC=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
gettid()
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r2, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804)

23.213319206s ago: executing program 34 (id=1540):
r0 = socket$inet6_sctp(0xa, 0x0, 0x84)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00'}, 0x10)
r1 = dup(0xffffffffffffffff)
bind$inet6(r1, &(0x7f0000000080)={0x27, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10000}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000002c00000000000000000000181100", @ANYRESHEX=r0, @ANYRESDEC=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
gettid()
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a034e200000040100000000000000000000ffffac14142a06000000240001000000000000000000000000000000000000000000000000000000000000000000d4000980"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804)

4.801509047s ago: executing program 4 (id=1854):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = io_uring_setup(0xf07, &(0x7f0000000580)={0x0, 0x400826e, 0x1, 0x3, 0xf0})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f00000007c0)=0x42000401, 0x4)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c)
listen(r2, 0xb5d6)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c)
io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r1], 0x1)
syz_open_dev$vcsn(&(0x7f0000000140), 0x9, 0x40)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x6083, 0x3)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r7, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "db748d6b120426ad", "4fe429faa1e90c473725b5e429ac42fa", "917e060b", "92816af8b4efb2ad"}, 0x28)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x8001, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x61a280, 0x0)

4.71862627s ago: executing program 4 (id=1857):
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x3, 0x51183cb4, 0x8, 0x100000000, 0x7, <r0=>0x0})
getpgrp(r0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r1}, 0x18)
r2 = creat(&(0x7f0000000440)='./file0\x00', 0x120)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r3, 0x0)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
open$dir(0x0, 0x804000, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf)
socket$unix(0x1, 0x2, 0x0)
ioctl$TCFLSH(r4, 0x400455c8, 0x0)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x1b)

2.88844167s ago: executing program 2 (id=1893):
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

2.830674512s ago: executing program 2 (id=1894):
openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000240)='sched_switch\x00', r4, 0x0, 0x85c}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00'})
open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e)
pipe2$9p(&(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000480))
r7 = dup(r6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}})
r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)="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", &(0x7f0000000740), 0x1, r9, 0x4}, 0x38)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000016c0)={0x0, <r10=>0x0}, 0xffffffffffffff18)
r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001700)={0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="0400000005000000"], &(0x7f0000001540)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001680)={0x0, 0x2, 0x3, 0x2}, 0x10, r10, r11, 0x5, 0x0, &(0x7f0000001740)=[{0x1, 0x1, 0x2, 0x2}, {0x2, 0x5, 0x7, 0x2}, {0x1, 0x2, 0xf, 0x1}, {0x4, 0x4, 0x8}, {0x3, 0x1, 0x80, 0x9}], 0x10, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0xd, &(0x7f0000000340)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, r11, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r12, 0x0, 0x10000}, 0x18)
ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200))

2.128746989s ago: executing program 3 (id=1896):
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x88182, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000003c0)='kfree\x00', r2}, 0x18)
writev(r0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000080)='0', 0x1}], 0x2)

2.044823592s ago: executing program 3 (id=1898):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000800)=[{&(0x7f0000000880)="580000001400192340834b80040d8c560a067f0200ff000080000000000058000b4824ca8779915b2831d1cb25010ebc000000000000008000f0fffeffe809005300fff5dd000000100002000400fbff0700014004000000", 0x58}], 0x1)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x2c, r3, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x2c}}, 0x40084)

1.988556224s ago: executing program 3 (id=1900):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844)
bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r3, &(0x7f0000004200)='t', 0x1)
sendfile(r3, r2, 0x0, 0x3ffff)
sendfile(r3, r2, 0x0, 0x7ffff000)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xdb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0)
write(0xffffffffffffffff, &(0x7f0000004200), 0x0)
shmget(0x0, 0x2000, 0x2c000400, &(0x7f0000fae000/0x2000)=nil)
r8 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$setlease(r8, 0x400, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x0, 0x3938700}, 0x0, 0xfffffffd)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)

1.898051628s ago: executing program 2 (id=1903):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)

1.883238309s ago: executing program 4 (id=1904):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x29, &(0x7f0000000280)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x24bc, 0x0, 0x0, 0x0, 0xfffffffe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xb}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_fd={0x18, 0x9, 0x1, 0x0, r0}], &(0x7f0000000080)='syzkaller\x00', 0x624, 0xae, &(0x7f0000000780)=""/174, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x4, 0xb, 0x0, 0x800}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000001c0)=[{0x5, 0x3, 0xc, 0x7}, {0x5, 0x3, 0x0, 0x7}, {0x4, 0x3, 0x2, 0x2}], 0x10, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002c80)='/proc/sysvipc/shm\x00', 0x0, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x6b396000)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000046, &(0x7f00000134c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@sysvgroups}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7f}}, {@data_err_ignore}, {@grpquota}, {@dioread_nolock}, {@nobarrier}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305828, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x100, 0x100000002, 0xfffffffffffffffe})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183042, 0x8)
pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a0109"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
socket(0x10, 0x2, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$setstatus(r1, 0x4, 0x8000)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffdfe}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, '\x00', "e123c5876ff425b1ebe2060000000f586058ff85b07ce696322bff00", "7e25837b", "5ce55765f1ae136f"}, 0x38)
write$binfmt_script(r6, &(0x7f0000000500)={'#! ', './file0'}, 0xb)
writev(r6, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1)

1.83039845s ago: executing program 2 (id=1907):
socket$inet(0x2, 0x4000000000000001, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c000000"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_emit_ethernet(0x4a, 0x0, 0x0)
migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, &(0x7f0000000240)=0x1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00')
pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x2000000000000000)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000700)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@dev={0xac, 0x14, 0x14, 0x18}, 0x4e24, 0x4, 0x4e21, 0x4, 0xa, 0x0, 0x20, 0x2c, 0x0, 0xee01}, {0x5, 0x4, 0x8, 0x2c, 0xffff, 0x1, 0x9, 0xac5}, {0x1, 0x450, 0x7, 0x8}, 0x1, 0x6e6bb7, 0x0, 0x1, 0x1, 0x3}, {{@in6=@remote, 0x4d3, 0xff}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x3, 0x3, 0xd, 0x0, 0x5, 0x5}}, 0xe8)
readahead(r1, 0x7300, 0x8)
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000500)=0xc, 0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000580)='xen_mc_entry\x00', r4}, 0x18)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
socket$caif_seqpacket(0x25, 0x5, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff000000000000000000000000000000000000000000000000000000000000000000000b000000000000000000fcffffff00000000"]}, 0x108)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3, 0x0, 0x80000}, 0x18)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)

1.762948263s ago: executing program 5 (id=1908):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$packet(0x11, 0xa, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x1fffffe, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES64, @ANYRES64=r1, @ANYRESOCT=r1, @ANYRES8=r0, @ANYRESDEC=r2], 0x0, 0x1000, 0x0, 0x0, 0x40ffb, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf1}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="81536ddc8067609c88db53acd8d15f3306652b1b9d965248fe489a1d82e82803dc26e7ad5afb5bb486a7f31078d6d04dde917d217402deeae3cc7896d019e0a10e61cb1a30630b37619a8c27f4496f7783f1cffa51c8053d660a18b3e77c2d17c27f"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r4, 0x0, 0x80000}, 0x18)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r6 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp(r6, r6, 0x2, r5, r5)
munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2be, &(0x7f00000014c0)="$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")
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x185000, 0x0)
ioctl$PPPIOCBRIDGECHAN(r7, 0x40047435, &(0x7f0000000080)=0x1)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYRES32=<r10=>r9], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYRES8=r10, @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=r9, @ANYRES32, @ANYBLOB="fffc00000580040005000000000000000000000079dd40089f3e7db4f205ca687ed81ceb1c9e8f3ec415db4572ba421f71954b4ed90eb069a0d1742e9e075513f0b1"], 0x50)
r11 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000380)=0x60, 0x800)
setsockopt$nfc_llcp_NFC_LLCP_RW(r11, 0x118, 0x0, &(0x7f00000003c0)=0xc, 0x4)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x800c4, 0x0)
r13 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r13, &(0x7f0000004200)='t', 0x1)
sendfile(r13, r12, 0x0, 0x3ffff)
sendfile(r13, r12, 0x0, 0x7ffff000)
socket$key(0xf, 0x3, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
fsmount(0xffffffffffffffff, 0x0, 0x0)

1.521719672s ago: executing program 4 (id=1910):
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
socket(0x2a, 0x2, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000500)="05", 0x1)
getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000100), &(0x7f0000000140)=0x30)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x122500, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2)
io_setup(0x7, &(0x7f0000000280))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18)
r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$selinux_context(r5, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000080), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48)
syz_usb_connect$uac1(0x3, 0x71, &(0x7f0000000ac0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x81, 0x80, 0xd, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x3, 0x4, 0x6, {0x7, 0x25, 0x1, 0x4, 0x6, 0xb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0x8, 0x6, {0x7, 0x25, 0x1, 0x0, 0x81, 0x8}}}}}}}]}}, 0x0)
sync()
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440)=[@sack_perm, @mss={0x2, 0x1}, @window={0x3, 0xf300, 0x8001}, @sack_perm, @timestamp, @mss={0x2, 0x203}, @sack_perm], 0x7)
socket$netlink(0x10, 0x3, 0x0)

1.374970888s ago: executing program 7 (id=1911):
timer_create(0x3, 0x0, &(0x7f0000000300)=<r0=>0x0)
timer_getoverrun(r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
writev(r1, 0x0, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0)
write$vga_arbiter(r2, &(0x7f00000002c0)=@other={'unlock', ' ', 'mem'}, 0xb)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0x7, 0x98142, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x4190, 0xaea}, 0x4105, 0x1, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40000000000a9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r3=>0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x810, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r5}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xb, 0xc, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1, @ANYRES32=r1, @ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002380)=ANY=[@ANYBLOB="b0060000", @ANYRES16, @ANYBLOB="a183000000000000000005000000080003"], 0x6b0}}, 0x0)

1.31041885s ago: executing program 3 (id=1912):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000400), &(0x7f00000005c0)=r1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@noblock_validity}]}, 0x1, 0xbb6, &(0x7f0000000c00)="$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")
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x8a, &(0x7f00000001c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa3}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@block_validity}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

994.107882ms ago: executing program 3 (id=1913):
r0 = io_uring_setup(0x65b8, &(0x7f0000000000)={0x0, 0xbe41, 0x40, 0x0, 0x282})
io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000005540)=[{0x2, 0x1, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/8, 0x8}, {&(0x7f00000000c0)=""/64, 0x40}], &(0x7f0000000140)=[0x10000, 0x3, 0x0, 0x2]}, {0x2, 0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/231, 0xe7}, {&(0x7f0000000280)=""/160, 0xa0}], &(0x7f0000000380)=[0x1, 0x8, 0x8]}, {0xa, 0x1, 0x0, &(0x7f0000003800)=[{&(0x7f00000003c0)=""/84, 0x54}, {&(0x7f0000000440)=""/64, 0x40}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/129, 0x81}, {&(0x7f0000002540)=""/185, 0xb9}, {&(0x7f0000002600)=""/11, 0xb}, {&(0x7f0000002640)=""/212, 0xd4}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/164, 0xa4}], &(0x7f00000038c0)=[0x400, 0x80, 0x1]}, {0x3, 0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003900)=""/158, 0x9e}, {&(0x7f00000039c0)=""/207, 0xcf}, {&(0x7f0000003ac0)=""/120, 0x78}], &(0x7f0000003b80)=[0x80000000, 0x5, 0x4, 0x7, 0x5, 0x36, 0x8]}, {0x1, 0x0, 0x0, &(0x7f0000003cc0)=[{&(0x7f0000003bc0)=""/215, 0xd7}], &(0x7f0000003d00)=[0xffffffffffffffff]}, {0x5, 0x1, 0x0, &(0x7f0000005000)=[{&(0x7f0000003d40)=""/4096, 0x1000}, {&(0x7f0000004d40)=""/201, 0xc9}, {&(0x7f0000004e40)=""/111, 0x6f}, {&(0x7f0000004ec0)=""/18, 0x12}, {&(0x7f0000004f00)=""/242, 0xf2}], &(0x7f0000005080)=[0x6, 0x8000000000000000]}, {0x7, 0x0, 0x0, &(0x7f0000005480)=[{&(0x7f00000050c0)=""/78, 0x4e}, {&(0x7f0000005140)=""/229, 0xe5}, {&(0x7f0000005240)=""/129, 0x81}, {&(0x7f0000005300)=""/12, 0xc}, {&(0x7f0000005340)=""/22, 0x16}, {&(0x7f0000005380)=""/45, 0x2d}, {&(0x7f00000053c0)=""/161, 0xa1}], &(0x7f0000005500)=[0x6]}], 0x7) (async)
clock_gettime(0x0, &(0x7f0000005640)={<r1=>0x0, <r2=>0x0}) (async, rerun: 64)
clock_gettime(0x0, &(0x7f0000005680)={<r3=>0x0, <r4=>0x0}) (rerun: 64)
setitimer(0x1, &(0x7f00000056c0)={{r1, r2/1000+10000}, {r3, r4/1000+10000}}, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000005700)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x24) (async)
munlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) (async, rerun: 32)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000005740)={@multicast2, @local, <r5=>0x0}, &(0x7f0000005780)=0xc) (async, rerun: 32)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005900)={&(0x7f00000057c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x8, [@typedef={0xc, 0x0, 0x0, 0x8, 0x5}, @restrict={0x9, 0x0, 0x0, 0xb, 0x3}, @fwd={0x5}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x3}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xc}, {0xa, 0x2}, {0xb, 0x3}, {0x8, 0x2}]}, @enum={0xb, 0x2, 0x0, 0x6, 0x4, [{0x6, 0x7fff}, {0xc, 0xfffffffb}]}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x63, 0x0, 0x76, 0x7}, @const={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x30, 0x0, 0x61, 0x5f, 0x61, 0x61]}}, &(0x7f0000005880)=""/123, 0xb4, 0x7b, 0x0, 0x10000}, 0x28)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000005940)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1ffc, '\x00', r5, r6, 0x1, 0x3, 0x3}, 0x50) (async)
r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000059c0), 0x100, 0x0)
r9 = accept4$x25(0xffffffffffffffff, &(0x7f0000005a00), &(0x7f0000005a40)=0x12, 0x80000)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000005a80)={'team_slave_1\x00'}) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
pipe(&(0x7f0000005ac0)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
syz_genetlink_get_family_id$ethtool(&(0x7f0000005b00), r10) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000005d40)={0x12, 0x17, &(0x7f0000005b40)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @map_fd={0x18, 0x4, 0x1, 0x0, r10}, @map_fd={0x18, 0x9, 0x1, 0x0, r11}, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}], &(0x7f0000005c00)='GPL\x00', 0x3, 0x1d, &(0x7f0000005c40)=""/29, 0x41000, 0x3c, '\x00', r5, @fallback=0x35, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000005c80)={0x3, 0x1, 0x5, 0x612}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000005cc0)=[r11, r10, r10], &(0x7f0000005d00)=[{0x5, 0x1, 0x1, 0x8}, {0x3, 0x4, 0x10, 0x1}], 0x10, 0x8}, 0x94) (rerun: 64)
setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000005e80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0xf0, 0x318, 0xf0, 0x318, 0x410, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, &(0x7f0000005e00), {[{{@uncond, 0x0, 0xc0, 0xf0, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xc, 0x0, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x8001, 0xf, @remote, 0x4e20}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xffffffff, 'macsec0\x00', 'rose0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x48}, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x2, 0x0, 0x7, 0x7, 0x2, 0x1], 0x4}}}, @common=@icmp={{0x28}, {0x10, '\t>'}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xffff0001, 0x9, @local, 0x4e20}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0xe}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x6, 0x3, 0x2, 0x2, 0x5, 0x1], 0x3}, {0x1, [0x6, 0x2, 0x0, 0x2, 0x4, 0x1], 0x5, 0x7}}}}, {{@ip={@rand_addr=0x64010100, @private=0xa010101, 0xff000000, 0xffffff00, 'ip6erspan0\x00', 'netpci0\x00', {0xff}, {}, 0x67}, 0x0, 0xb8, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@socket0={{0x20}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x6, 0x1, "ecafef38ece1707ab2bd4b690cc43b0989cfd4d60f83cf07a92d186ff74a"}}}, {{@ip={@empty, @remote, 0xffffff00, 0xff000000, 'ip6gre0\x00', 'hsr0\x00', {}, {}, 0x5e, 0x2, 0x17}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r10, 0xc018937d, &(0x7f0000006440)={{0x1, 0x1, 0x18, <r12=>r7, {0x5}}, './file0\x00'}) (async)
r13 = getegid()
ioctl$TUNSETGROUP(r12, 0x400454ce, r13) (async, rerun: 64)
quotactl_fd$Q_QUOTAOFF(r7, 0xffffffff80000302, 0x0, 0x0) (rerun: 64)
ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000006480)=0x6) (async)
pselect6(0x40, &(0x7f00000064c0)={0x7fffffffffffffff, 0xdc, 0x3, 0x2, 0x1, 0x401, 0xfffffffffffffffb, 0x8}, &(0x7f0000006500)={0x6, 0xffffffffffff26e4, 0x5, 0x9, 0x7fff, 0x4, 0x8, 0x7}, &(0x7f0000006540)={0x4, 0x3, 0x5, 0x6, 0x5, 0xe3f7, 0x2, 0x7}, &(0x7f0000006580), &(0x7f0000006600)={&(0x7f00000065c0)={[0x6]}, 0x8}) (async, rerun: 32)
syz_genetlink_get_family_id$smc(&(0x7f0000006640), r9) (rerun: 32)
pidfd_send_signal(r10, 0x25, &(0x7f0000006680)={0x1c, 0x5, 0x8b}, 0x0) (async)
openat$cgroup_procs(r10, &(0x7f0000006700)='tasks\x00', 0x2, 0x0) (async)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
io_setup(0x5, &(0x7f0000006740)=<r14=>0x0)
io_pgetevents(r14, 0x101, 0x2, &(0x7f0000006780)=[{}, {}], &(0x7f00000067c0)={0x0, 0x989680}, 0x0)

978.062613ms ago: executing program 2 (id=1914):
openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000240)='sched_switch\x00', r4, 0x0, 0x85c}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00'})
open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e)
pipe2$9p(&(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000480))
r7 = dup(r6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}})
r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)="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", &(0x7f0000000740), 0x1, r9, 0x4}, 0x38)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000016c0)={0x0, <r10=>0x0}, 0xffffffffffffff18)
r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001700)={0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="0400000005000000"], &(0x7f0000001540)='syzkaller\x00', 0x1, 0x44, &(0x7f0000001600)=""/68, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10, r11, 0x5, 0x0, &(0x7f0000001740)=[{0x1, 0x1, 0x2, 0x2}, {0x2, 0x5, 0x7, 0x2}, {0x1, 0x2, 0xf, 0x1}, {0x4, 0x4, 0x8}, {0x3, 0x1, 0x80, 0x9}], 0x10, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0xd, &(0x7f0000000340)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, r11, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r12, 0x0, 0x10000}, 0x18)
ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200))

880.704157ms ago: executing program 3 (id=1915):
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x3, 0x51183cb4, 0x8, 0x100000000, 0x7, <r0=>0x0})
getpgrp(r0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000400000000000000008500000023000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r1}, 0x18)
r2 = creat(&(0x7f0000000440)='./file0\x00', 0x120)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r3, 0x0)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
open$dir(0x0, 0x804000, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf)
socket$unix(0x1, 0x2, 0x0)
ioctl$TCFLSH(r4, 0x400455c8, 0x0)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x1b)

658.751635ms ago: executing program 5 (id=1916):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x103480)
close_range(r1, 0xffffffffffffffff, 0x400000000000000)
dup3(r0, r0, 0x80000)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
r4 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r6, 0x2)
syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x96, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x60, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0xc2, 0x0, 0x0, 0x1, {[@sack={0x5, 0x1e, [0x8, 0x64, 0x5a78, 0x3, 0x5, 0x795, 0x0]}, @exp_smc={0xfe, 0x6}, @mptcp=@synack={0x1e, 0xfffffffffffffdc5, 0xe, 0x2, 0x6, 0x0, 0x4}, @fastopen={0x22, 0xb, "78171296722d2c3d10"}, @generic={0x8, 0xb, "3ba3a0997eaa56028b"}]}}}}}}}}, 0x0)
r7 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}, {&(0x7f0000007000)={0x276c, 0x34, 0x100, 0x70bd28, 0x25dfdbfd, "", [@typed={0x14, 0x112, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @nested={0xed, 0x12f, 0x0, 0x1, [@generic="5e2555447901c5413eee56f3b0965c025c3868bb482222591dc33639eda4b3fc22ada7a7d446bf34a1b8f489456923178245a416daca7d0af201a28d60fdac4a68d2ef81a24dd583b836dd4b4e151d8f3e514bbb03d5390b98677c2558d07bc68251bc91c7c3c76f4372d69fb893805b2aeca486547844f0087bb1c792e996196fba2c47a053cfe91321ae1e7339473c636cd049a9d3f84f29021a985760608c721f2580fdb294ec8354b0f29975b48ff0f2403d0765c7da64d7dc6c57bf1e403a4c8456df2c9c5713ccc0f0d43e0e968fc96567badcfc4c93e37c5530", @typed={0x4, 0x13a}, @typed={0x8, 0x142, 0x0, 0x0, @u32=0x4}]}, @nested={0x1401, 0x44, 0x0, 0x1, [@generic="15ef", @generic="faa16380630cf945381d021df81a7e0d7851a99ef1c4d0ec6ce889f84ac90362f82b58643b09885b3473b0a5b0a37f0583a73e954602086b62503c02f06108f4699832dd3d1fbbc950e7", @nested={0x4, 0x3f}, @nested={0x2ae, 0x9d, 0x0, 0x1, [@typed={0x8, 0xb3, 0x0, 0x0, @uid}, @nested={0x21d, 0x8e, 0x0, 0x1, [@generic="5a14aa07b992efe358609a485fd8afda41c30eb0a10fb0f84e55682dc5", @generic="1d43856f30cd407d2aaec00a94b89e7deb2557c6e21fd58d6f67adc7bbfb50f294cb830d47d6b676dc0562fe6bbf8ca1faa0ebb71c2f502f64934be6a4912769f41838afaf0a05f5c2b295f6f5eb67dd9d684f9370b7e573a8e429960c9d8dc49b47692bafcc10aa82ee504e47e5c257d82fe28b7a45b4fddcc979f3841b918955544e3f5d6a485ea4d2462772dd96f97848935fc491b2443ac5f4de55fe3b6434225be3e1b4704966f90007a23048aba09e368d6592bd41b94099cb2a65bc0cd678211a3f1d372ff66ee62f8a45d5fa36674c855045e67975e4d521391fdf857036631f3a95b69b9726db62b0800bf4d2a47b48", @generic="5dfaff877222712fec9f198635acefe764396836037829dab5c9c76aeea4ac04b4a8a0d24437e2784167a4cbfbf32a5a890c50def965bbced477b75fcdedafd0d4b898af4421e420f99e28eeac931878649ba4c5620e3e1ceedd41b3ca9b498508d0ac2954e21c609cfe43ce7078eaa3af8e50cdc00aeb7207b3ee08", @typed={0x14, 0x11e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x76, 0xae, 0x0, 0x0, @binary="f4e05dfc13f370d5673f5d1f9d3a6f17754093413c10c9338f686afdacbe86fd44cf106718a4ce04d5e5a9549368d15b997a2fadc075cbdba2c1c0538e219ad9f3619b3d9e55e5402f590d66d2a3797ebf47d3067d0f7616207d72a7efc5fe56d88f1eeea793f1bbaf9e97fee0779d0408d4"}]}, @generic="5f0409a3536978c599d7a4a4aac02847ea050e36cdea01959a41af54036e721ffc0325373878a563955e541f13ba4eab2b048302bee277d828e921be1860dd93293553e00f1cd0bf62bdadd890bb4411c6ba03d18aea46333a3163b0e498dbc7afb690b6be0c80994bc1550ab18f4e7813173b1888bb5bde07d336fb4f0ff89a7412"]}, @nested={0x4, 0x38}, @nested={0x4, 0x13b}, @generic="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", @generic="5cfc094bceb1fbcd4b1f708e311b285197dc994f0966dea635c864e581b9679bf98a3e7fff3871ada50b47b9580fa0e568a414329b83707322b4641fe05a0f697ceb76c4ad39bacd9f4410f2ee93547d145c57d8b9fd3fa9add126d71565db7ad2044879e220b367d9efd551a530ef287a0a539e0d830d944bd5c2442935d027da801954c6e8b6adde8d14b876757f1951a48dd548800521e0db9c64881cdc13444800562337c725b6786d048a4fcf3c5636bf6883fc51630906c593d6daa0177bdaf700f192e5b207e39681ea6be6979677988b287f5ed9521b6ca9d13601fc3aff7fb3f2ea877157c5f04dda33ca8e49", @nested={0x4, 0xf9}]}, @typed={0x14, 0x13d, 0x0, 0x0, @ipv6=@mcast2}, @generic="8b422a1dc5bdf4d1ef1525d69bfb41589fa81c2b2f7d802e80d3e7d1f0827dd6c95f24d02dcd706f84baa1e2a6073b11c019e1dbb7bdd702efd5dc1db101631f70c82736bd2f20fa7903fdb4067aed619b66645cd801af827cf1808ca91a8818c7ad8eeead50152cf1ced503cdc4eb10b4bea66fbfd603d97c8892c1319319", @nested={0x11bf, 0x8e, 0x0, 0x1, [@typed={0x8, 0xc0, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="e29e57f2afb5253f3c8ca5592fde7f2966ba35cbae2cecef0d6c1239a499cbfa9b12a6eee55a9a598af4d324f7bf8be35c7ab89a96f0c962eaa2573680c510322ef253b8f2cea38f484b25f2c3d9b858a3fc349b123a85f348da8d424ea3b5882725f5fc43907144ce84ad2205b9294610ae03596ed6f21e791fc45f95993307cffebc2a1d91590579282d682b96c0a44b0f9b367cdaa7f9cdf67221c57238a742e8876c53b53d2ae2", @generic="42a2670156fb753efc33ba6cd8e90dbd294d25dbe34d0a3bb5fafc", @nested={0x4, 0x97}, @typed={0x8, 0x84, 0x0, 0x0, @fd}, @nested={0x4, 0x124}, @nested={0x4, 0xcf}, @typed={0x8, 0x137, 0x0, 0x0, @pid}, @generic="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", @generic="8384229349e068f91e42bba9e22379606dfd2e4dc1dbfb49136c403116289a8bc6744d9a91eb9a7a03dae976bfeb26753521a56620e47aebc91ba7e89673dfd47aee53c0cf1674cbfcdae36091e0da2e36d2cf6065f7b5b3b8836039f9015c426b8a9e1c8628e2f3d63e959cd04dceb5ab4298819f30a3d94b6783c009667a112bb46faba9f203f5e44901d75b91d8ff6515d52da4155c2d964d68593f28363681917f6d1f151aef2fa3ad0b9790bc8d3083d80ec99b2c2dc0764f1980b756ff0e2222ba578f64024744df7728a624d4604859"]}]}, 0x276c}], 0x2}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'})
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=<r12=>0x0)
sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r12], 0x1c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x6, 0x6}, {0xa, 0xfff3}, {0xc}}, ["", ""]}, 0x24}}, 0x44080)

458.554153ms ago: executing program 4 (id=1917):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)

247.924111ms ago: executing program 5 (id=1918):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x1b\x00'}]}, 0x1c}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)

246.850401ms ago: executing program 4 (id=1919):
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f00000000c0)={{&(0x7f0000000000)=""/67, 0x43}, &(0x7f0000000080), 0x58}, 0x20)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000100)={0x80})
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x18080, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_udp_int(r2, 0x11, 0x148131e7206b54c5, &(0x7f0000000200), &(0x7f0000000240)=0x4)
fchmod(r1, 0x4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000280)=0x7fff, 0x4)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r4=>r2, {0x6}}, './file0\x00'})
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x8000000)
timer_create(0x6, &(0x7f00000005c0)={0x0, 0x0, 0x2, @thr={&(0x7f0000000400)="3f7c120a16e7b150b530149cdf22a20cbe60bf47ec1d33863a01dbcbaf050380d851c2b77867add050b6772985ea4eca95764fa109cfb5746047454df5c6894fcccff9de54417fe8ef2d4c1f7d98e6e55cd9daf7346846d2e1e2a8c9b24658f7fbfbd2ad8e9a8c662dcdb2e1cd550f9c1f0382077cf22d59123f266f2a067a2a92", &(0x7f00000004c0)="9b0b68a5ab536b92f40c838a228e1b4273edbfd7faebf4d3c55ba68723f95b0fc33fe3f3752bdf97f342194ae6875999fe6fe724fd5d2be08bed15a8f672d4a1d61381a477a32b647da1fc580cb2ddba70befa942979e698ee95bc8862b794a79196140ab1ba656715b9e9dc720dba5a10ebe5d4bc73ef54d66171d7cf245406885a2bb745bdef5a817d7080ab1742909f0c0b53046ad51be22615a0f2c7d202e5b1856ce71619a5f246a309880b1f867fc3bc"}}, &(0x7f0000000600)=<r5=>0x0)
ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000640)={0x80, 0x4, 0x0, 0x0, 0x6, "963686127f98d9ca8d5534022429b362eceee8", 0x1, 0xff})
r6 = open(&(0x7f0000000680)='./file0\x00', 0x0, 0x60)
ioctl$KDGETKEYCODE(r6, 0x4b4c, &(0x7f00000006c0)={0x7, 0x30})
ioctl$EVIOCRMFF(r6, 0x40044581, &(0x7f0000000700)=0x4)
timer_gettime(r5, &(0x7f0000000780))
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000007c0)={<r7=>0x0, 0x8001, 0x3, 0xb, 0xfffffffc, 0xffffffff}, &(0x7f0000000800)=0x14)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000840)={r7, 0x5d, "3ace411e7fd2a27a18cd8d691529619c7eebefb879aab5cbb694a50a0bbb849db4079629176d6325e6e6329412ea085968f7dd2b999e7a23d2755f72fcf0e964fb6e8ef2436c9f51cd49f53d761a2a950f43112dc791c0bc70614a2d50"}, &(0x7f00000008c0)=0x65)
sendmsg$key(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x2, 0x12, 0x67, 0x6, 0xf, 0x0, 0x70bd29, 0x25dfdbfe, [@sadb_spirange={0x2, 0x10, 0x4d2, 0x4d2}, @sadb_x_policy={0x8, 0x12, 0x3, 0x3, 0x0, 0x6e6bb7, 0x5, {0x6, 0x2b, 0x9, 0x2, 0x0, 0x6, 0x0, @in=@remote, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}}, @sadb_x_sa2={0x2, 0x13, 0x0, 0x0, 0x0, 0x70bd2c, 0x3505}, @sadb_x_nat_t_type={0x1, 0x14, 0x7}]}, 0x78}}, 0x10)
syz_usb_connect(0x5, 0x18b, &(0x7f0000000a00)={{0x12, 0x1, 0x200, 0xaa, 0x26, 0xa1, 0x40, 0x19d2, 0x1566, 0x1d27, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x179, 0x1, 0x2f, 0x1, 0xc0, 0x8f, [{{0x9, 0x4, 0x52, 0xaa, 0x5, 0xff, 0xff, 0xff, 0xf, [], [{{0x9, 0x5, 0x6, 0x0, 0x40, 0xfb, 0x0, 0x7}}, {{0x9, 0x5, 0x3, 0x3, 0x20, 0x5, 0x3, 0x81}}, {{0x9, 0x5, 0x9ff2ca392a87b5bc, 0x3, 0x40, 0x6, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0xfff}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x55, 0xc0, 0x1, [@generic={0xb2, 0xf, "f8ab867c4624c8b1e3a0ded5bf13a407c1016c8af379929c9f7ca9f56fa5d40fefab1bcb5db6c8dede7b9fd6106f4897e51df20418cf65ba1ee39b242da0c5cacb414a538e34f2f95a004409e5c1b809167bec2ff4282e2f5f3ad539a0a232a04dff9f0e5cf82a80df35300b1b35cd8ca2143d9014fc41cae5f8a72c2d9d579f5a48abd72b5f26da68a7ab331e954884d23b59efe00315304acf01f9564b704ba4a77445774dc69749de1cf0aae8e7ea"}, @generic={0x7a, 0x2d, "29bd40e65e2b01962808e87911eb696c70640cbb77c69940f3fcd7bd987201ad35d00afb7a7195e1e67c3bffbab1c4b3d497ce3dc479c73d24bcbbc74af87102b51e82d2783ca651638a7a30df06d70df2337db681fff783a4ba9311b4b3053544fe99b1d103718acd752fe17266121136c7e9b6c20bbb6d"}]}}, {{0x9, 0x5, 0xd, 0x26, 0x40, 0xa, 0x8, 0x80}}]}}]}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000bc0)={0xa, 0x6, 0x201, 0xc, 0x3c, 0x4, 0xff, 0x2}, 0x5, &(0x7f0000000c00)={0x5, 0xf, 0x5}, 0x4, [{0x53, &(0x7f0000000c40)=@string={0x53, 0x3, "56f4af3b3ae51b086f8a5faa910ff0360a4c33ab6f59e8cfb4a5439e59c4561d33c97f064e67f2830e8e01b513b59660f1157d5402bb55b139dc749737d261b4d1a18e8d97dfd432f98b43f5e337d7f94a"}}, {0x0, 0x0}, {0xb1, &(0x7f0000000dc0)=@string={0xb1, 0x3, "a4dde87c77e2ea62435b45ee39834845ee79f766b6e92ba57d4ca21ccebe6de497434df21850b0ec0c145c6201e26db172beac9ab739e69b5e8c632113129b233c2727e3b607d8dc99e8b7912e6754ee1966e4c19c9bd76489d226ecb7357dde2ac05db80c645180a137e82a1ac17a7ee61b28c919bfe31503015eaf84495c172d3baa2a972455cda663db12cc6bd80a3c2b2d78bdd1847a0c9771c94bf16a6122ddc8e9bc9d4e8986b0ded3502755"}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0xc07}}]})
r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000f40), 0x400, 0x0)
r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000f80), 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000fc0)={0x2, 0x4, 0x8, 0x1, 0x80, r8, 0x9, '\x00', 0x0, r9, 0x1, 0x3, 0x1}, 0x50)
socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$MRT6_TABLE(r8, 0x29, 0xcf, &(0x7f0000001040)=0xfc, 0x4)
r10 = semget(0x2, 0x0, 0xc)
semop(r10, &(0x7f0000001080)=[{0x3, 0x7f, 0x1000}, {0x0, 0x4, 0x800}, {0x0, 0x81, 0x800}], 0x3)
ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f00000010c0))

244.750051ms ago: executing program 7 (id=1920):
r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0)
fdatasync(r0)

210.550182ms ago: executing program 5 (id=1921):
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x88182, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000003c0)='kfree\x00', r2}, 0x18)
writev(r0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000080)='0', 0x1}], 0x2)

159.980904ms ago: executing program 7 (id=1922):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0)
io_setup(0x4, &(0x7f0000000600)=<r1=>0x0)
r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000000)="ff", 0x1}])

159.728164ms ago: executing program 5 (id=1923):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000400), &(0x7f00000005c0)=r1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@noblock_validity}]}, 0x1, 0xbb6, &(0x7f0000000c00)="$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")
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x8a, &(0x7f00000001c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa3}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@block_validity}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

110.729556ms ago: executing program 5 (id=1924):
socket$inet(0x2, 0x4000000000000001, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c000000"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_emit_ethernet(0x4a, 0x0, 0x0)
migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, &(0x7f0000000240)=0x1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00')
pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x2000000000000000)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000700)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@dev={0xac, 0x14, 0x14, 0x18}, 0x4e24, 0x4, 0x4e21, 0x4, 0xa, 0x0, 0x20, 0x2c, 0x0, 0xee01}, {0x5, 0x4, 0x8, 0x2c, 0xffff, 0x1, 0x9, 0xac5}, {0x1, 0x450, 0x7, 0x8}, 0x1, 0x6e6bb7, 0x0, 0x1, 0x1, 0x3}, {{@in6=@remote, 0x4d3, 0xff}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x3, 0x3, 0xd, 0x0, 0x5, 0x5}}, 0xe8)
readahead(r1, 0x7300, 0x8)
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000500)=0xc, 0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000580)='xen_mc_entry\x00', r4}, 0x18)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
socket$caif_seqpacket(0x25, 0x5, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff000000000000000000000000000000000000000000000000000000000000000000000b000000000000000000fcffffff00000000"]}, 0x108)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3, 0x0, 0x80000}, 0x18)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)

110.488056ms ago: executing program 7 (id=1925):
syz_io_uring_setup(0x5f4b, 0x0, &(0x7f0000000040), &(0x7f00000000c0))
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

79.375867ms ago: executing program 2 (id=1926):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$packet(0x11, 0xa, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x1fffffe, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES64, @ANYRES64=r1, @ANYRESOCT=r1, @ANYRES8=r0, @ANYRESDEC=r2], 0x0, 0x1000, 0x0, 0x0, 0x40ffb, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf1}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="81536ddc8067609c88db53acd8d15f3306652b1b9d965248fe489a1d82e82803dc26e7ad5afb5bb486a7f31078d6d04dde917d217402deeae3cc7896d019e0a10e61cb1a30630b37619a8c27f4496f7783f1cffa51c8053d660a18b3e77c2d17c27f"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r4, 0x0, 0x80000}, 0x18)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r6 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp(r6, r6, 0x2, r5, r5)
munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2be, &(0x7f00000014c0)="$eJzs3MFrE1sUx/HzmrRJU9rkweOBgnrQjW6GNv4BGqQFMaDUpqgLYWonGjImZSZEImKzEbf+HcWlO0H9B7oRN+7dFUFw04U40plMm8S0pm3SxPb7gTJ3eu+vc9qm5dxC78adV4+LedfImxUZiauMiNRlUyS1NWr4p3Ed8cdj0qwulya+fz5z++69G5lsdnZedS6zcDmtqlPn3j159vr8h8rE4puptzFZT93f+Jb+sv7/+qmNnwuPCq4WXC2VK2rqUrlcMZdsS5cLbtFQvWVbpmtpoeRaTst83i6vrNTULC1PJlYcy3XVLNW0aNW0UtaKU1PzoVkoqWEYOpmQky3axZrc2vy8mdl12ov0tCL0Xqz1drzTGsfJ1DtP5tb6VRcAABhee/f/Qa+/e/+fXQyuPe7/Rej/+6TecveH/h/HguNkzETj57cV/T8AAAAAAAAAAAAAAAAAAAAAAH+DTc9Lep6XDK/hW0xE4iIS3g+6TvTHAb//VwZULnqs6R/34iL2y2qumguuwXwmLwWxxZJpScoP//XgRf3XRTCeu56dnVbfaONDbuVXq7mIfzaBnw+lgkwgzJ/9dybIq7zfylUb+VFJND8/LUn5r1M+O5veyYfHIaxWc2Ny8UJT3pCkfHwgZbFlua3+5zOq125m254/7q8DAAAAAOA4MHRbqnX/G5z9aPgL4uJv71vmg3ynvw+078+nO+7vo3K6myMqAQAAAADAobm1p0XTti3nAIOYiBwiflwHERmKMtoGV0VkCMo4qkFcRIL36EHiX7fjXaW8LtZERWTgX5Z9DAb9mwkAAABAr+00/fsIfXrRx4oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADh5uj0PLFz/21Q4sUe86XGRI/8EAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCHyKwAA//9OCxaA")
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x185000, 0x0)
ioctl$PPPIOCBRIDGECHAN(r7, 0x40047435, &(0x7f0000000080)=0x1)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYRES32=<r10=>r9], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYRES8=r10, @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=r9, @ANYRES32, @ANYBLOB="fffc00000580040005000000000000000000000079dd40089f3e7db4f205ca687ed81ceb1c9e8f3ec415db4572ba421f71954b4ed90eb069a0d1742e9e075513f0b1"], 0x50)
r11 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000380)=0x60, 0x800)
setsockopt$nfc_llcp_NFC_LLCP_RW(r11, 0x118, 0x0, &(0x7f00000003c0)=0xc, 0x4)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x800c4, 0x0)
r13 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r13, &(0x7f0000004200)='t', 0x1)
sendfile(r13, r12, 0x0, 0x3ffff)
sendfile(r13, r12, 0x0, 0x7ffff000)
socket$key(0xf, 0x3, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
fsmount(0xffffffffffffffff, 0x0, 0x0)

68.235178ms ago: executing program 7 (id=1927):
r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x101000)
ioctl$BLKDISCARDZEROES(r0, 0x127c, &(0x7f00000000c0))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0700000004000000080000000300000020"], 0x48)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00', 0x1000})
socket(0x400000000010, 0x3, 0x0)
write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0xffa8)

0s ago: executing program 7 (id=1928):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x103480)
close_range(r1, 0xffffffffffffffff, 0x400000000000000)
dup3(r0, r0, 0x80000)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
r4 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r6, 0x2)
syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x96, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x60, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0xc2, 0x0, 0x0, 0x1, {[@sack={0x5, 0x1e, [0x8, 0x64, 0x5a78, 0x3, 0x5, 0x795, 0x0]}, @exp_smc={0xfe, 0x6}, @mptcp=@synack={0x1e, 0xfffffffffffffdc5, 0xe, 0x2, 0x6, 0x0, 0x4}, @fastopen={0x22, 0xb, "78171296722d2c3d10"}, @generic={0x8, 0xb, "3ba3a0997eaa56028b"}]}}}}}}}}, 0x0)
r7 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}, {&(0x7f0000007000)={0x276c, 0x34, 0x100, 0x70bd28, 0x25dfdbfd, "", [@typed={0x14, 0x112, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @nested={0xed, 0x12f, 0x0, 0x1, [@generic="5e2555447901c5413eee56f3b0965c025c3868bb482222591dc33639eda4b3fc22ada7a7d446bf34a1b8f489456923178245a416daca7d0af201a28d60fdac4a68d2ef81a24dd583b836dd4b4e151d8f3e514bbb03d5390b98677c2558d07bc68251bc91c7c3c76f4372d69fb893805b2aeca486547844f0087bb1c792e996196fba2c47a053cfe91321ae1e7339473c636cd049a9d3f84f29021a985760608c721f2580fdb294ec8354b0f29975b48ff0f2403d0765c7da64d7dc6c57bf1e403a4c8456df2c9c5713ccc0f0d43e0e968fc96567badcfc4c93e37c5530", @typed={0x4, 0x13a}, @typed={0x8, 0x142, 0x0, 0x0, @u32=0x4}]}, @nested={0x1401, 0x44, 0x0, 0x1, [@generic="15ef", @generic="faa16380630cf945381d021df81a7e0d7851a99ef1c4d0ec6ce889f84ac90362f82b58643b09885b3473b0a5b0a37f0583a73e954602086b62503c02f06108f4699832dd3d1fbbc950e7", @nested={0x4, 0x3f}, @nested={0x2ae, 0x9d, 0x0, 0x1, [@typed={0x8, 0xb3, 0x0, 0x0, @uid}, @nested={0x21d, 0x8e, 0x0, 0x1, [@generic="5a14aa07b992efe358609a485fd8afda41c30eb0a10fb0f84e55682dc5", @generic="1d43856f30cd407d2aaec00a94b89e7deb2557c6e21fd58d6f67adc7bbfb50f294cb830d47d6b676dc0562fe6bbf8ca1faa0ebb71c2f502f64934be6a4912769f41838afaf0a05f5c2b295f6f5eb67dd9d684f9370b7e573a8e429960c9d8dc49b47692bafcc10aa82ee504e47e5c257d82fe28b7a45b4fddcc979f3841b918955544e3f5d6a485ea4d2462772dd96f97848935fc491b2443ac5f4de55fe3b6434225be3e1b4704966f90007a23048aba09e368d6592bd41b94099cb2a65bc0cd678211a3f1d372ff66ee62f8a45d5fa36674c855045e67975e4d521391fdf857036631f3a95b69b9726db62b0800bf4d2a47b48", @generic="5dfaff877222712fec9f198635acefe764396836037829dab5c9c76aeea4ac04b4a8a0d24437e2784167a4cbfbf32a5a890c50def965bbced477b75fcdedafd0d4b898af4421e420f99e28eeac931878649ba4c5620e3e1ceedd41b3ca9b498508d0ac2954e21c609cfe43ce7078eaa3af8e50cdc00aeb7207b3ee08", @typed={0x14, 0x11e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x76, 0xae, 0x0, 0x0, @binary="f4e05dfc13f370d5673f5d1f9d3a6f17754093413c10c9338f686afdacbe86fd44cf106718a4ce04d5e5a9549368d15b997a2fadc075cbdba2c1c0538e219ad9f3619b3d9e55e5402f590d66d2a3797ebf47d3067d0f7616207d72a7efc5fe56d88f1eeea793f1bbaf9e97fee0779d0408d4"}]}, @generic="5f0409a3536978c599d7a4a4aac02847ea050e36cdea01959a41af54036e721ffc0325373878a563955e541f13ba4eab2b048302bee277d828e921be1860dd93293553e00f1cd0bf62bdadd890bb4411c6ba03d18aea46333a3163b0e498dbc7afb690b6be0c80994bc1550ab18f4e7813173b1888bb5bde07d336fb4f0ff89a7412"]}, @nested={0x4, 0x38}, @nested={0x4, 0x13b}, @generic="4931c7a4f90ed59847f5f58abad5dae99fc7b3f056bedab04cb0bd5664c10d88291c3f058cec62bba6f718ac4a156afd717404e79d01c4007d393cc120eea3c64223a58d86a2288bb1701ecc8bede083bb69a8f81681f023f760fa0b486898c393dee4ac33ba3d713eeb0e7ce1119f016b63649d3eb206b7d8c99e708ea5f79ef912e3f5965d7215752f17c558c41fc7b8a2e434caf40200b693df35b90fad0347f758338199bc8f92259676847db7bbad0c4ff06241645edefb9d91b4ff26d90b7a164a7c8de1218f5c20e7a0bf43705b9606c1796587ec90f5269f480c94550db26b6fd77b9d088e26cf636df15f0e7ffc674499b09baf64de13c8f7bfc72a4feb211f0695db2ca10407a2102e42f6a7741e6b2b4d8619894f71a7524dbe70030e82df38f611aa9a5fd16c74d8fa54c48c89104e35c05a0acff93245a275cb8ae3932a689bb359ec008dedb4b96357553215e6cb8e08f0661548fb38e3acfec3f5b62d4ff6ad8c7b0a2dbafb1ca6a75a23a84913ee973abed2ce8bd2113bdb39a76dd4fd82ad3a5cdb6ce28d3a2df1ae876070b00913d97be2a82ac2cb95c96f0c16c3c1f4a8fc02cc82e88304094e67c75a652cc7d1da91af1eb1f591f508644cfe14c04eae4ce7d645669516f852326fb520d3d7c255d1340dc367a643eaaff1dd09c9e4c8d82992e588a83d762d88ebef8a2aa1cc85b0aeb79c84cc9c0f2607a26086d5347889bf59254b1dce1e94f2bfdaba68f09694941b817d5d7256b7c5d7a9299ad3893d850b1d3efb10080983645b306b017f43208174b565c7b86bbe6b35d6c48d050656a16029f42bde9bee586142cdcd73edb972029b2a06ad891dd70ef4a0264fe55c9f03d012cd4bc677e60ceb2aa7fa3d3961917c08a5d0c39928343675a93d31d67f19a03c0fac503d8e0bd5c2832b73989d8dd0300070145415e613d895c44a9aae3318a24f513317052c45b218a05dfcd7cb511bc79d2d4b738d1f6a380fc5a02bffc29493616cc9e93cc6c70686158647d40c8cb5f26516644b7d45ec3784e9fa6688866efb8d9326a7fecce47e6c09c89f975540be24e11e7024e7305eab47253b1a3c87491c76f704a2ea33127327510d2572f7da98ab3d3b689b897ff3b57bbb40c0cdceecbe86500fb186647f6425542ad2511dba74f33cd6ce748fa61284ef66157447b4d20304e57174f2e41a1e991ff01e7ac9bc0e5ef71ef96f77f45c8231de21ae22a789025c7bb9af9f5603f2508f83d05a48571e03fcd4415a0ea5d66a775d6a5d4daa7669f6d0b40d2b09c4bc16089a90e468f6a6891b702b00855146348856a3293ae0751cc8fbda9396e617c4a11346e9445523f33f93ab8bb7d3e7f7c221c0d595877cb7a5f6e1942bfd11fd70cc08d99de7bf740162628268d40f3a7e6379c5871554911f681a2c14bd321d4fdd08a357e89ba7c9e64aeff14ba3a1a3a7867e474b37f5c1c20dc9f81acc1045eb961a8ab75350361be9b98ee6231dc52a494ecb10122af15bb30079e26284aa7dc0cac85034d789b0f665eccd91a100da08a9ff1ddda254253e5daf09bb02259b4e563389d91ae9feb13d3f6ab7ee0fb36c8896c8c7e7b48e039375d9e0a434d973f951b29d3005f735aa7441ed60978d54bfa3878a057c1761dc835b3c312fc828c882803bf7fcd70aae8c32b9e7f4a388e845aac473fc08299d03217c4de112737b382f809b6bae577a9766f9e410678a2df6307fcaee7ccc0c1d34dc8dc886bbe80accfc25f4d7cd60aecc3a20aac00997e573a9429f75fb000f38050faa92b88eac9aede9566a02c8602c5f816e82f40ed09c9ab44826e322ba43666a3ed1f3fa0c67b57005876238c8bbaf5f71b1b58056517e59d74ca1308e9a73d80f2a40ae9a4955ff627545ae660169d0803810e671c71c1955f6b9be048322d25f24bc271a23050e00ff6c6399c945434c4111455bd5740d2c5d25024b65dcaec8a85eaac4ff645066a8437f4eb699ae722098f94a60632494845b5aff9f143f7d510247fb7956ff94232ae6cce970b078e49b2ccd68f1b0e9e1f12947ac23d861bd5f96473dc9bde274fd852034ff9dfc04bafd7d94aa394b0b055a6ce7f67db56bafe14cfa2c530b498b72e287ab3af725d3655f74c3ccda0102d6256ae242bb3aa4728e8bfdc4b2cb768151566c8d664dbbf36e21b7b5e530fd98af78f10194b56c3963f390d947f3b29bf6a23a288bfea68981881e5a67e71c8e36dab9202c7a8b536716c680bc39cf09049dd4f13c89efc7c3eeda75677ca2596c981fb8ad89dc67ce0d6ee500a0e6ab09a724c679e6a203725219c6d00dc9657e65d98a2fe25b9cfdae26ab281617b3e96f83a1d812f629bad72a55ac1aa8bd62b03b442b33ea604a7f37edd48ae948279040141a86fb0164d91baa24d381daef88eb954cc73bcfb6a682dbae9b1f3193ff9a338bce46f65f0e247e4ce607735e00d833776ffd0baf1bc4b03181b67a9c5a478d0a092a5369d7ffa96b6d250ecd1eb9db031fed56e59b6bc0a3e4b08f08de52d6e54323ea1c52fffacddc697aa2cea34ea0dac9f422eebd22643dab94ffa95c02681fe36369e3be7e561400cfcfd32f02ae46e7b1567eae13313447cb5a71fa64e0351170c7105866f6b739de4109ad7f83f5179c62b1d831df69450385cb1a8e3ba297ac0469c1b70ce4c3a1ee701163976de0af6a27c31e4e334692212ec54b3be462b2ee7c08fdf8c946a54e5c4792cb18c0907310d68ccbf1c90fbfcb81bc7c3b195c2866988de38d49edcb4a62a038d6ad16256ae71caa91361aa334cb38d75e0c96a42ab4af39d49e6a966fad63dbe9780af5c35f8b269065562af7ae4b540f69486b123f59358cdbb519b099c5de0c5025ccbfd694cd9553f2f73ecf32bf9f4cbabed74b55a1950ef83b2cb6b39444da6a27e610e26eca618aafa26ca0525ad74788cd28092e6997177cf526116d1800305d9637c9c7e186e3567b0e262882ac4725194a8814340a6d353db4b59e85a89ffbc4d50b316d388b35ae9713cd3fe886be1967be62dd02f47b77cdaf44a8dcfba0944309aabe7fba4428989d613df7623788812b056ac17d6cdb4ef1c5c737cac8b4fdc437c7d24b42224d841cbae0847f4d853e086d4a35a7de842f4558a3e869974c992dca385395f010dc87dbd91f683f31b72a73f7b5807dbffa1a33fa0a45cbd5dcc5508887da19108675d21333e11f190ba5ce4dc807653bd97e3f6fb3c7a20013e31fd403465ac5b34cda0db5ffe869fb674e6f437ae3d41cf9fb6e026141b3f9f1c1c6a2f7d65f4282da3b39794c645cc8763ec08a88d6e30f506686624d7e598ae4e33471c482301b976b6a075c40a237edef54020f56114615d892e290d9ee6dc5c3134c881499f9c16fc5f2fabea3e79be7db5ad9fc37ed96330b757b3bcbfb0d72019ed87935ce270b46de5e13991daa8d4f8e732b47e349ef4de0e69bb35f4d361cef673f2e27d737fedb211af37b70a61455efa2d17934574235587f65a84e71d001c26dc0d1dc05a8512b4e587df16b27c3a653a74a688a43472c5d7feb710619e345c9fbde7de5e8864dc8cda60cf6d6e421acdc9f36628643b8ace4fd6fdd0c938821b815989b971a602fe4a12d0ca04da8fbfd89f9f0331fe605138d9e681378451bab7a0691132c16f1edcd902b5d11a5393a2bfae430fdd8d88aec2ecd68b739d32af27998d199a1a6b3e66699fde40b89613c6bbd3829def10d388bdfe793d14116b093d0966a2de67b837cbeff40023ba8ded42c97ab02dc2d6e4925967dc6794f92c5ddbcd99d856a349324eef6c4eae64ecf5768dd1628da7aa48ee4ca9c9a53c9909014672b6eb0e76abb6c5aa31ddeb3cf7732c3b02d4c60b4fcdbc3ed036f1062ba155b9c17e142aa43ec47ce71b168aed8a53c9434f817fcacaf505c43b5e542cac2cbc95763eaacee72f531378fc21647ae9d8411ff94795738f931a6c8977fbae2d4c9f7b55248a485eb17b76710b880052e66fa5daeda80a1915e8582d963195972509e2f868453e891374036de7410d6de02f3b73d56170577222bae0c3f2dc65017e47e5939f6d4cef3135269622c607499b58ad2bb6adf57a9bfd53b4a21bc2092d9595ca8ce5aca67ed3a111f9532d81d27d73c4a1eb6d59f45be83190ea5e40f5ea5a3ac09b01e53aa889ff84b3f0a58f7104e18c796b278f4057eb9395fc51eb95fc76af990f320aee169a12272a44019dc76ab7d07f46e3d169f2395692d815315e8488f56b4c024f105446e2f91976812eeb5abe1c4c1033fd973f4b704502e52a3a54b3a237ba427fed48faba8677cb7b120c9ddd934605f66f91522cfb8778d703b8ead289b0220fceec1f03a532e9f03c319a64758d789431661d2307dbf774f19014448e505d0ea64a66085d0d089a08c9e362e5a331fb3c45d9724a7cf99c3342cfb2724ffcbe46fc6717ffcfbe2ed36468a5df0ab29eb05fa46c1a47d57b8df5cb78853a749cf2c7e40a225a566f7c4bc479fe6136740a232c248ca0af56868a8305b0eda70b8674a0b7ebc994ad47114c1eaf27e9d0138cae5e1b10bde76e715aca13cda31713bf1623db72bf2eba7528c6135365f743a388ca08bbb9d5934aabe0a30171cebcbbb406b0aafc15e0dde0d1d2d0fb7b6e20148cd16019da613a3a2a5afa7510f31dbd2cd2d2aa9f7318916d7becf6db78ee8f6d6171764216c8c2381f712132fdd2cd8d3fc04d8416d16519a2c0a1383b7031c8d5235714a46b06174b90a40381cbc9d676475d674fbc951a08b9aeb12b5267229dc34ba368fff936866eaf536fb72fa1b35a664131b6d252dceed964a9f529b3a76b24e2a92bc31a21557bce26b0a29adbb012b313981ed150ed581ace885f09141552ceb4bad4e7fe01cf1dc517911c43c81484b7f6e205387bde7b0e62e9a23623af284ca45e3b4fe45e8ff2e993e7f973cde9ae1c76d566012167c92f712f51710889aba011cf34f70477e0a6c11a9c863f8e877ea7f5d4fee9a36f970a04fcab0536e68befd61c7b5afb002220ba0c5274fb56eaa561b9ab4250b4890a1f0878cf214f0c27d36869f390fd9018d37f0f48d0f9f748092be0eb237c447595a2712ed21d1c4ca11bf1d0f58f2e794b3f5642426f627752278f9e3b32cd3c0ee95b7197cc036eccd45b399bfa260cedaa593e5dbff6dd9c8c8c550ee4b1e42b293c3179fa1c896c030eeea840b908def6916b5124338048a7a9f9bd3433e3ba66c335045327dcad21bdec0e553480bc161caf5b98982dca9b2ffd0b639e89db893d6447c787b95445252a2577758ad971e442829cb55a3d3602730eefa745ae2fceef4bdf69850c0feaae142fad39a389b7e084c5701a10306b7b1eab1ccb5dbb4bdcb6091a7468e38c0a7028005ef5de91584c48329a8f0df64b7e87ae803bdaca49e37cb1a4c93f5cb2661fdabcd581c797899667c24b26de514734866a119f38e4dc2ba5d7eb0a9daf97df304b36409e970fbffdee1f72176d4f2593ab4abb5930b37c998cc24c9ca08148fffa0ed183fae4b05d60eab9cb26a28a89836e6f209b5526823eed0dbdcf42e1b24f13fb76c0484b5f362c2cb4372a187281ddf24da60fbc2a5acbd95bad7b78fe1a69f1c43a74c0f841e556d06f0760bc571e7f51c0084b91dea4293a735cc283404d35ff8e960e99da96431e89d41a9129324496d6fbae6fcf7b82a1d099cf8232216e4281f2d3fe4ae5e967f56c9c7eb64db8dc76953faa5808120f8940264", @generic="5cfc094bceb1fbcd4b1f708e311b285197dc994f0966dea635c864e581b9679bf98a3e7fff3871ada50b47b9580fa0e568a414329b83707322b4641fe05a0f697ceb76c4ad39bacd9f4410f2ee93547d145c57d8b9fd3fa9add126d71565db7ad2044879e220b367d9efd551a530ef287a0a539e0d830d944bd5c2442935d027da801954c6e8b6adde8d14b876757f1951a48dd548800521e0db9c64881cdc13444800562337c725b6786d048a4fcf3c5636bf6883fc51630906c593d6daa0177bdaf700f192e5b207e39681ea6be6979677988b287f5ed9521b6ca9d13601fc3aff7fb3f2ea877157c5f04dda33ca8e49", @nested={0x4, 0xf9}]}, @typed={0x14, 0x13d, 0x0, 0x0, @ipv6=@mcast2}, @generic="8b422a1dc5bdf4d1ef1525d69bfb41589fa81c2b2f7d802e80d3e7d1f0827dd6c95f24d02dcd706f84baa1e2a6073b11c019e1dbb7bdd702efd5dc1db101631f70c82736bd2f20fa7903fdb4067aed619b66645cd801af827cf1808ca91a8818c7ad8eeead50152cf1ced503cdc4eb10b4bea66fbfd603d97c8892c1319319", @nested={0x11bf, 0x8e, 0x0, 0x1, [@typed={0x8, 0xc0, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="e29e57f2afb5253f3c8ca5592fde7f2966ba35cbae2cecef0d6c1239a499cbfa9b12a6eee55a9a598af4d324f7bf8be35c7ab89a96f0c962eaa2573680c510322ef253b8f2cea38f484b25f2c3d9b858a3fc349b123a85f348da8d424ea3b5882725f5fc43907144ce84ad2205b9294610ae03596ed6f21e791fc45f95993307cffebc2a1d91590579282d682b96c0a44b0f9b367cdaa7f9cdf67221c57238a742e8876c53b53d2ae2", @generic="42a2670156fb753efc33ba6cd8e90dbd294d25dbe34d0a3bb5fafc", @nested={0x4, 0x97}, @typed={0x8, 0x84, 0x0, 0x0, @fd}, @nested={0x4, 0x124}, @nested={0x4, 0xcf}, @typed={0x8, 0x137, 0x0, 0x0, @pid}, @generic="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", @generic="8384229349e068f91e42bba9e22379606dfd2e4dc1dbfb49136c403116289a8bc6744d9a91eb9a7a03dae976bfeb26753521a56620e47aebc91ba7e89673dfd47aee53c0cf1674cbfcdae36091e0da2e36d2cf6065f7b5b3b8836039f9015c426b8a9e1c8628e2f3d63e959cd04dceb5ab4298819f30a3d94b6783c009667a112bb46faba9f203f5e44901d75b91d8ff6515d52da4155c2d964d68593f28363681917f6d1f151aef2fa3ad0b9790bc8d3083d80ec99b2c2dc0764f1980b756ff0e2222ba578f64024744df7728a624d4604859"]}]}, 0x276c}], 0x2}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'})
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=<r12=>0x0)
sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r12], 0x1c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x6, 0x6}, {0xa, 0xfff3}, {0xc}}, ["", ""]}, 0x24}}, 0x44080)

kernel console output (not intermixed with test programs):

 recommended
[  161.717890][ T7582] netlink: 'syz.4.1228': attribute type 27 has an invalid length.
[  161.756750][ T7582] $Hÿ: left promiscuous mode
[  161.761663][ T7582] bond_slave_0: left promiscuous mode
[  161.767287][ T7582] bond_slave_1: left promiscuous mode
[  161.773781][ T7578] EXT4-fs (loop2): orphan cleanup on readonly fs
[  161.804337][ T7578] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.1226: Allocating blocks 41-42 which overlap fs metadata
[  161.856875][ T7578] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.1226: Allocating blocks 41-42 which overlap fs metadata
[  161.917160][ T7578] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1226: Failed to acquire dquot type 1
[  161.958602][ T7586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.967284][ T7586] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  162.004567][ T7578] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  162.054244][ T7578] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.1226: corrupted inode contents
[  162.095334][ T7578] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.1226: mark_inode_dirty error
[  162.131728][ T7578] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.1226: corrupted inode contents
[  162.174067][ T7578] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.1226: mark_inode_dirty error
[  162.213034][ T7578] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.1226: corrupted inode contents
[  162.238863][ T7578] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  162.256602][ T7578] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.1226: corrupted inode contents
[  162.283626][ T7578] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.1226: mark_inode_dirty error
[  162.306784][ T7578] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[  162.326152][ T7578] EXT4-fs (loop2): 1 truncate cleaned up
[  162.337947][ T7578] EXT4-fs mount: 66 callbacks suppressed
[  162.337965][ T7578] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  162.427690][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.497725][ T7594] netlink: 'syz.2.1230': attribute type 20 has an invalid length.
[  162.535813][ T7594] loop2: detected capacity change from 0 to 1024
[  162.540822][ T7598] loop3: detected capacity change from 0 to 1024
[  162.551660][ T7598] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  162.555394][ T7594] EXT4-fs: Ignoring removed orlov option
[  162.576597][ T7598] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1234: Invalid block bitmap block 0 in block_group 0
[  162.590761][ T7598] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1234: Failed to acquire dquot type 0
[  162.603348][ T7598] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.1234: Freeing blocks not in datazone - block = 0, count = 4096
[  162.619944][ T7594] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.632947][ T7598] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.1234: Invalid inode bitmap blk 0 in block_group 0
[  162.645849][  T402] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:8: Failed to release dquot type 0
[  162.666652][ T7598] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[  162.688952][ T7598] EXT4-fs (loop3): 1 orphan inode deleted
[  162.703780][ T7598] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.780212][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.809389][ T7611] xt_CT: You must specify a L4 protocol and not use inversions on it
[  162.839407][ T7617] loop3: detected capacity change from 0 to 512
[  162.858697][ T7617] EXT4-fs (loop3): orphan cleanup on readonly fs
[  162.865127][ T7617] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  162.873678][ T7611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1230'.
[  162.902444][ T7617] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  162.940302][ T7617] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.1236: attempt to clear invalid blocks 2 len 1
[  162.966190][ T7617] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1236: invalid indirect mapped block 1819239214 (level 0)
[  163.000787][ T7617] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1236: invalid indirect mapped block 1819239214 (level 1)
[  163.015665][ T7617] EXT4-fs (loop3): 1 truncate cleaned up
[  163.021892][ T7617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  163.043206][ T7627] netlink: 'syz.4.1239': attribute type 27 has an invalid length.
[  163.056225][ T7625] loop6: detected capacity change from 0 to 1024
[  163.064307][ T7625] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  163.089409][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.121044][ T7630] loop3: detected capacity change from 0 to 128
[  163.138222][ T7625] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.1238: Invalid block bitmap block 0 in block_group 0
[  163.157318][ T7630] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  163.158934][ T7627] 8021q: adding VLAN 0 to HW filter on device $Hÿ
[  163.183626][ T7625] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.1238: Failed to acquire dquot type 0
[  163.185951][ T7630] ext4 filesystem being mounted at /247/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  163.199217][ T7627] 8021q: adding VLAN 0 to HW filter on device team0
[  163.208546][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.221895][ T7627] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  163.221999][ T7625] EXT4-fs error (device loop6): ext4_free_blocks:6728: comm syz.6.1238: Freeing blocks not in datazone - block = 0, count = 4096
[  163.274474][ T7625] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.1238: Invalid inode bitmap blk 0 in block_group 0
[  163.287559][ T2034] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 0
[  163.300156][ T7625] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem
[  163.311365][ T3322] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  163.324256][ T7625] EXT4-fs (loop6): 1 orphan inode deleted
[  163.330428][ T7625] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.360522][ T7634] loop2: detected capacity change from 0 to 4096
[  163.381982][ T7640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  163.403208][ T7634] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.406754][ T7640] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  163.424807][ T6628] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.440102][ T7634] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  163.449223][ T7634] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  163.472310][ T7644] loop3: detected capacity change from 0 to 128
[  163.479087][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.494459][ T7644] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  163.507054][ T7644] ext4 filesystem being mounted at /249/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  163.520009][ T7644] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.3.1246: bad entry in directory: directory entry overrun - offset=1012, inode=128, rec_len=65544, size=1024 fake=0
[  163.557570][ T7644] EXT4-fs (loop3): Remounting filesystem read-only
[  163.578326][ T3322] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  163.620998][ T7655] loop3: detected capacity change from 0 to 512
[  163.633773][ T7655] EXT4-fs (loop3): orphan cleanup on readonly fs
[  163.640417][ T7655] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  163.649960][ T7655] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  163.665105][ T7655] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.1250: attempt to clear invalid blocks 2 len 1
[  163.678571][ T7655] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1250: invalid indirect mapped block 1819239214 (level 0)
[  163.692860][ T7655] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1250: invalid indirect mapped block 1819239214 (level 1)
[  163.714833][ T7655] EXT4-fs (loop3): 1 truncate cleaned up
[  163.722044][ T7655] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  163.734610][ T7658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  163.743480][ T7658] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  163.766356][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.791156][ T7661] netlink: 'syz.3.1252': attribute type 27 has an invalid length.
[  163.837601][ T7661] 8021q: adding VLAN 0 to HW filter on device bond0
[  163.846293][ T7661] 8021q: adding VLAN 0 to HW filter on device team0
[  163.857101][ T7661] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  163.973322][ T7665] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  164.012923][ T7669] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  164.184776][ T7669] ext4 filesystem being mounted at /254/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  164.234815][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  164.291030][ T7674] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  164.312409][ T7674] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1256: Invalid block bitmap block 0 in block_group 0
[  164.326970][ T7674] __quota_error: 54 callbacks suppressed
[  164.326990][ T7674] Quota error (device loop4): write_blk: dquota write failed
[  164.340170][ T7674] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  164.350981][ T7674] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1256: Failed to acquire dquot type 0
[  164.363064][ T7674] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.1256: Freeing blocks not in datazone - block = 0, count = 4096
[  164.378415][ T7674] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.1256: Invalid inode bitmap blk 0 in block_group 0
[  164.394236][  T402] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-7
[  164.403228][  T402] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:8: Failed to release dquot type 0
[  164.415652][ T7674] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[  164.424418][ T7674] EXT4-fs (loop4): 1 orphan inode deleted
[  164.430891][ T7674] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.456546][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.464643][ T7683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  164.474579][ T7683] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  164.501136][   T29] audit: type=1326 audit(1768200839.280:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7680 comm="syz.5.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa955f749 code=0x7ffc0000
[  164.549991][   T29] audit: type=1326 audit(1768200839.320:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7680 comm="syz.5.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2aa955f749 code=0x7ffc0000
[  164.573847][   T29] audit: type=1326 audit(1768200839.320:3229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7680 comm="syz.5.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa955f749 code=0x7ffc0000
[  164.597492][   T29] audit: type=1326 audit(1768200839.320:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7680 comm="syz.5.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2aa955f749 code=0x7ffc0000
[  164.621171][   T29] audit: type=1326 audit(1768200839.320:3231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7680 comm="syz.5.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa955f749 code=0x7ffc0000
[  164.644811][   T29] audit: type=1326 audit(1768200839.320:3232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7680 comm="syz.5.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2aa955f749 code=0x7ffc0000
[  164.668267][   T29] audit: type=1326 audit(1768200839.320:3233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7680 comm="syz.5.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa955f749 code=0x7ffc0000
[  164.734871][ T7699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1266'.
[  164.806886][ T7705] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.1269: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  164.837705][ T7705] EXT4-fs error (device loop2): ext4_quota_enable:7180: comm syz.2.1269: Bad quota inode: 3, type: 0
[  164.853952][ T7705] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  164.907895][ T7705] EXT4-fs (loop2): mount failed
[  165.003261][ T7714] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  165.050830][ T7716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  165.060475][ T7714] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.1272: Invalid block bitmap block 0 in block_group 0
[  165.087247][ T7716] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  165.104053][ T7714] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.1272: Failed to acquire dquot type 0
[  165.142249][ T7714] EXT4-fs error (device loop6): ext4_free_blocks:6728: comm syz.6.1272: Freeing blocks not in datazone - block = 0, count = 4096
[  165.159905][ T7714] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.1272: Invalid inode bitmap blk 0 in block_group 0
[  165.174327][ T2034] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 0
[  165.180532][ T7714] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem
[  165.195432][ T7714] EXT4-fs (loop6): 1 orphan inode deleted
[  165.201766][ T7714] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.242242][ T6628] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.328705][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1280'.
[  165.347309][ T7738] ALSA: seq fatal error: cannot create timer (-19)
[  165.420891][ T7750] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  165.459204][ T7754] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  165.523649][ T7753] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.1287: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  165.544464][ T7753] EXT4-fs error (device loop4): ext4_quota_enable:7180: comm syz.4.1287: Bad quota inode: 3, type: 0
[  165.562226][ T7753] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  165.644456][ T7753] EXT4-fs (loop4): mount failed
[  165.915443][ T7776] netlink: 'syz.2.1294': attribute type 27 has an invalid length.
[  165.942867][ T7776] 8021q: adding VLAN 0 to HW filter on device .`
[  165.951467][ T7776] 8021q: adding VLAN 0 to HW filter on device team0
[  165.969569][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1296'.
[  165.983258][ T7776] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  166.053044][ T7788] SELinux:  Context system_u:object_r:public_content_rw_t:s0 is not valid (left unmapped).
[  166.087125][ T7792] netlink: 'syz.4.1301': attribute type 1 has an invalid length.
[  166.136475][ T7792] set_capacity_and_notify: 5 callbacks suppressed
[  166.136492][ T7792] loop4: detected capacity change from 0 to 1764
[  166.165616][ T7794] loop3: detected capacity change from 0 to 4096
[  166.221630][ T7801] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1305'.
[  166.222833][ T7799] loop2: detected capacity change from 0 to 1024
[  166.223811][ T7799] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  166.225637][ T7794] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.230143][ T7799] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1304: Invalid block bitmap block 0 in block_group 0
[  166.230335][ T7799] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1304: Failed to acquire dquot type 0
[  166.230683][ T7799] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.1304: Freeing blocks not in datazone - block = 0, count = 4096
[  166.230917][ T7799] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.1304: Invalid inode bitmap blk 0 in block_group 0
[  166.232051][ T7799] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[  166.232566][ T7799] EXT4-fs (loop2): 1 orphan inode deleted
[  166.233773][ T7799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.235464][ T7794] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  166.235703][ T7794] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  166.238416][ T7805] macvlan2: entered promiscuous mode
[  166.238463][ T7805] macvlan2: entered allmulticast mode
[  166.239117][ T7805] bond0: entered promiscuous mode
[  166.239323][ T7805] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  166.244753][   T37] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 0
[  166.414991][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.419965][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.420826][ T7805] bond0: left promiscuous mode
[  166.469571][ T7811] netlink: 'syz.5.1309': attribute type 27 has an invalid length.
[  166.537686][ T7811] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.539311][ T7811] 8021q: adding VLAN 0 to HW filter on device team0
[  166.549478][ T7811] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  166.579726][ T7826] loop3: detected capacity change from 0 to 128
[  166.580096][ T7826] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  166.584319][ T7826] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  166.611647][ T7824] loop6: detected capacity change from 0 to 4096
[  166.657535][ T7824] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.751833][ T7835] loop5: detected capacity change from 0 to 4096
[  166.753321][ T7824] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  166.776426][ T7835] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.784928][ T7824] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000.
[  166.806130][ T7835] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  166.815121][ T7835] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000.
[  166.831259][ T4270] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.859304][ T6628] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.865697][ T7844] loop3: detected capacity change from 0 to 128
[  166.866222][ T7844] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  166.866454][ T7844] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  167.002656][ T7853] loop5: detected capacity change from 0 to 512
[  167.015432][ T7853] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #3: comm syz.5.1325: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  167.015684][ T7853] EXT4-fs error (device loop5): ext4_quota_enable:7180: comm syz.5.1325: Bad quota inode: 3, type: 0
[  167.015814][ T7853] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  167.015971][ T7853] EXT4-fs (loop5): mount failed
[  167.320275][ T7870] loop5: detected capacity change from 0 to 4096
[  167.337382][ T7870] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.342442][ T7870] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  167.342887][ T7870] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000.
[  167.397511][ T4270] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.543761][ T7879] netlink: 'syz.6.1335': attribute type 1 has an invalid length.
[  167.573897][ T7884] netlink: 'syz.2.1337': attribute type 20 has an invalid length.
[  167.591023][ T7884] loop2: detected capacity change from 0 to 1024
[  167.591660][ T7884] EXT4-fs: Ignoring removed orlov option
[  167.599664][ T7879] Invalid argument reading file caps for ./file0
[  167.638599][ T7884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.828060][ T7893] xt_CT: You must specify a L4 protocol and not use inversions on it
[  167.838482][ T7893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1337'.
[  167.913432][ T2034] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  167.932877][ T7898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  167.932952][ T7898] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  167.987173][ T7900] vfat: Unknown parameter ''
[  168.135611][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.221378][ T7909] EXT4-fs: Ignoring removed orlov option
[  168.245929][ T7909] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.416494][ T7925] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  168.428763][ T7925] ext4 filesystem being mounted at /284/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  168.442692][ T7925] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.2.1350: bad entry in directory: directory entry overrun - offset=1012, inode=128, rec_len=65544, size=1024 fake=0
[  168.462888][ T7925] EXT4-fs (loop2): Remounting filesystem read-only
[  168.481064][ T3317] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  168.535963][ T7930] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  168.536260][ T7930] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  168.555349][ T7930] EXT4-fs error (device loop6): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.6.1352: bad entry in directory: directory entry overrun - offset=1012, inode=128, rec_len=65544, size=1024 fake=0
[  168.624683][ T7937] netlink: 'syz.2.1355': attribute type 27 has an invalid length.
[  168.636399][ T7930] EXT4-fs (loop6): Remounting filesystem read-only
[  168.700683][ T6628] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  168.843361][ T7946] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  168.954598][ T4270] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.970786][ T7951] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.004559][ T7951] ext4 filesystem being mounted at /275/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  169.157840][ T7954] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.179697][ T7954] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.049403][ T7973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.066732][ T7973] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  170.084451][ T7973] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  170.117812][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.163707][ T6628] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.219155][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.240257][ T7980] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  170.277006][ T7980] ext4 filesystem being mounted at /292/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  170.288340][ T7989] EXT4-fs (loop4): orphan cleanup on readonly fs
[  170.294792][ T7989] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  170.303351][ T7989] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  170.318878][ T7980] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.2.1368: bad entry in directory: directory entry overrun - offset=1012, inode=128, rec_len=65544, size=1024 fake=0
[  170.339493][ T7989] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.1373: attempt to clear invalid blocks 2 len 1
[  170.339856][ T7989] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1373: invalid indirect mapped block 1819239214 (level 0)
[  170.354318][ T7980] EXT4-fs (loop2): Remounting filesystem read-only
[  170.401162][ T7989] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1373: invalid indirect mapped block 1819239214 (level 1)
[  170.422594][ T7989] EXT4-fs (loop4): 1 truncate cleaned up
[  170.428875][ T7989] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  170.436604][ T7996] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  170.463297][ T3317] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  170.502275][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.514343][ T7996] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  170.558804][ T7994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  170.594512][ T7994] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  170.656629][ T8006] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.711262][ T8006] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  170.720323][ T8006] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000.
[  170.761509][ T6628] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.816439][ T8016] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.829385][ T8007] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  170.829385][ T8007] The task syz.4.1377 (8007) triggered the difference, watch for misbehavior.
[  170.839021][ T8016] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.971136][ T8027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  170.980430][ T8027] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  170.983467][ T6628] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.082814][ T8032] netlink: 'syz.6.1387': attribute type 27 has an invalid length.
[  171.114852][ T8032] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.122584][ T8032] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.173643][ T8032] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  171.185188][ T8032] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  171.200118][ T8037] set_capacity_and_notify: 13 callbacks suppressed
[  171.200136][ T8037] loop2: detected capacity change from 0 to 128
[  171.216472][ T8037] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  171.229276][ T8037] ext4 filesystem being mounted at /296/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  171.245307][ T8037] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.2.1389: bad entry in directory: directory entry overrun - offset=1012, inode=128, rec_len=65544, size=1024 fake=0
[  171.266613][ T8037] EXT4-fs (loop2): Remounting filesystem read-only
[  171.285532][ T3317] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  171.303208][ T2882] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  171.319347][ T2882] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  171.330263][ T8041] loop2: detected capacity change from 0 to 128
[  171.337530][ T8041] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  171.349887][ T2882] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  171.359183][ T2882] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  171.368958][ T8041] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  171.395519][ T8045] loop5: detected capacity change from 0 to 128
[  171.423003][ T8045] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  171.435749][ T8045] ext4 filesystem being mounted at /211/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  171.503680][ T4270] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  171.692112][ T8062] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  171.705332][ T8061] netlink: 'syz.3.1398': attribute type 27 has an invalid length.
[  171.765324][ T8061] 8021q: adding VLAN 0 to HW filter on device bond0
[  171.773637][ T8061] 8021q: adding VLAN 0 to HW filter on device team0
[  171.783802][ T8061] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  171.859431][ T8064] loop5: detected capacity change from 0 to 1764
[  171.925462][ T8071] loop3: detected capacity change from 0 to 128
[  171.932341][ T8071] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  171.956354][ T8071] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  172.172875][ T8079] loop4: detected capacity change from 0 to 1024
[  172.184360][  T312] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  172.216511][ T8079] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  172.232511][ T8081] loop6: detected capacity change from 0 to 4096
[  172.234809][ T8079] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.254054][ T8081] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.271244][ T8079] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1401: bg 0: block 112: padding at end of block bitmap is not set
[  172.296367][ T8081] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  172.305643][ T8081] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000.
[  172.460354][ T6628] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.084531][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  173.100910][ T8101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.116513][ T8101] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  173.150971][ T8109] loop4: detected capacity change from 0 to 128
[  173.158377][ T8109] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  173.174215][   T29] kauditd_printk_skb: 162 callbacks suppressed
[  173.174236][   T29] audit: type=1400 audit(1768200847.910:3390): avc:  denied  { associate } for  pid=8106 comm="syz.4.1410" name="file0" dev="tmpfs" ino=1513 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:public_content_rw_t:s0"
[  173.208700][   T29] audit: type=1400 audit(1768200847.920:3391): avc:  denied  { rmdir } for  pid=3321 comm="syz-executor" name="file0" dev="tmpfs" ino=1513 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:public_content_rw_t:s0"
[  173.214571][  T402] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  173.255477][ T8109] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  173.271010][ T8111] loop2: detected capacity change from 0 to 512
[  173.281402][ T8111] EXT4-fs (loop2): orphan cleanup on readonly fs
[  173.288210][ T8111] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  173.297163][ T8111] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  173.312392][ T8111] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.1413: attempt to clear invalid blocks 2 len 1
[  173.328314][ T8111] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1413: invalid indirect mapped block 1819239214 (level 0)
[  173.342801][ T8111] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1413: invalid indirect mapped block 1819239214 (level 1)
[  173.361242][ T8111] EXT4-fs (loop2): 1 truncate cleaned up
[  173.366984][  T334] Bluetooth: hci0: Frame reassembly failed (-84)
[  173.548746][ T8124] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  174.014101][  T334] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  174.034984][ T8139] loop4: detected capacity change from 0 to 128
[  174.042128][ T8139] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  174.056331][ T8139] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  174.172738][   T29] audit: type=1400 audit(1768200848.950:3392): avc:  denied  { append } for  pid=8149 comm="syz.5.1426" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  174.579373][ T8167] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  174.602315][ T8167] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.1431: Invalid block bitmap block 0 in block_group 0
[  174.620441][ T8167] Quota error (device loop6): write_blk: dquota write failed
[  174.628215][ T8167] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  174.638595][ T8167] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.1431: Failed to acquire dquot type 0
[  174.650707][ T8167] EXT4-fs error (device loop6): ext4_free_blocks:6728: comm syz.6.1431: Freeing blocks not in datazone - block = 0, count = 4096
[  174.666125][ T8167] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.1431: Invalid inode bitmap blk 0 in block_group 0
[  174.680533][ T8167] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem
[  174.690396][ T8167] EXT4-fs (loop6): 1 orphan inode deleted
[  174.694524][ T2034] Quota error (device loop6): do_check_range: Getting block 0 out of range 1-7
[  174.705378][ T2034] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 0
[  175.042553][ T8178] netlink: 'syz.2.1435': attribute type 27 has an invalid length.
[  175.055086][ T8173] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  175.065332][ T8173] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000.
[  175.134621][ T8178] 8021q: adding VLAN 0 to HW filter on device .`
[  175.142406][ T8178] 8021q: adding VLAN 0 to HW filter on device team0
[  175.153247][ T8178] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  175.187126][  T312] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  175.237067][ T8185] ext4 filesystem being mounted at /277/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.321962][ T8199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1438'.
[  175.374458][ T8199] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  175.405003][ T3533] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  175.458023][ T8205] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  175.471158][ T8205] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  175.512171][   T29] audit: type=1400 audit(1768200850.290:3393): avc:  denied  { read } for  pid=8210 comm="syz.2.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  175.533121][ T8207] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.1444: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  175.605732][   T29] audit: type=1326 audit(1768200850.350:3394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8210 comm="syz.2.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac598ef749 code=0x7ffc0000
[  175.629444][   T29] audit: type=1326 audit(1768200850.350:3395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8210 comm="syz.2.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac598ef749 code=0x7ffc0000
[  175.653439][   T29] audit: type=1326 audit(1768200850.350:3396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8210 comm="syz.2.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac598ef749 code=0x7ffc0000
[  175.662262][ T8205] EXT4-fs (loop5): 1 truncate cleaned up
[  175.686844][ T8216] syz.2.1446: attempt to access beyond end of device
[  175.686844][ T8216] loop2: rw=2049, sector=145, nr_sectors = 80 limit=128
[  175.702090][ T8216] syz.2.1446: attempt to access beyond end of device
[  175.702090][ T8216] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128
[  175.704751][ T8207] EXT4-fs error (device loop4): ext4_quota_enable:7180: comm syz.4.1444: Bad quota inode: 3, type: 0
[  175.715749][ T8216] syz.2.1446: attempt to access beyond end of device
[  175.715749][ T8216] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128
[  175.741016][ T8216] syz.2.1446: attempt to access beyond end of device
[  175.741016][ T8216] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128
[  175.765419][ T8216] syz.2.1446: attempt to access beyond end of device
[  175.765419][ T8216] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128
[  175.779024][ T8216] syz.2.1446: attempt to access beyond end of device
[  175.779024][ T8216] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128
[  175.794260][ T8207] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  175.804414][ T8216] syz.2.1446: attempt to access beyond end of device
[  175.804414][ T8216] loop2: rw=2049, sector=313, nr_sectors = 8 limit=128
[  175.832118][ T8207] EXT4-fs (loop4): mount failed
[  175.931553][ T8216] syz.2.1446: attempt to access beyond end of device
[  175.931553][ T8216] loop2: rw=2049, sector=329, nr_sectors = 8 limit=128
[  176.015072][ T8216] syz.2.1446: attempt to access beyond end of device
[  176.015072][ T8216] loop2: rw=2049, sector=345, nr_sectors = 8 limit=128
[  176.034714][ T8224] FAULT_INJECTION: forcing a failure.
[  176.034714][ T8224] name failslab, interval 1, probability 0, space 0, times 0
[  176.047953][ T8224] CPU: 1 UID: 0 PID: 8224 Comm: syz.4.1447 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  176.047990][ T8224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  176.048007][ T8224] Call Trace:
[  176.048016][ T8224]  <TASK>
[  176.048026][ T8224]  __dump_stack+0x1d/0x30
[  176.048058][ T8224]  dump_stack_lvl+0x95/0xd0
[  176.048172][ T8224]  dump_stack+0x15/0x1b
[  176.048207][ T8224]  should_fail_ex+0x265/0x280
[  176.048262][ T8224]  should_failslab+0x8c/0xb0
[  176.048291][ T8224]  kmem_cache_alloc_noprof+0x69/0x4b0
[  176.048319][ T8224]  ? audit_log_start+0x342/0x720
[  176.048346][ T8224]  audit_log_start+0x342/0x720
[  176.048424][ T8224]  ? kstrtouint+0x76/0xc0
[  176.048449][ T8224]  audit_seccomp+0x48/0x100
[  176.048488][ T8224]  ? __seccomp_filter+0x832/0x1260
[  176.048523][ T8224]  __seccomp_filter+0x843/0x1260
[  176.048623][ T8224]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  176.048661][ T8224]  ? vfs_write+0x7e8/0x960
[  176.048713][ T8224]  ? __rcu_read_unlock+0x4f/0x70
[  176.048738][ T8224]  ? __fget_files+0x184/0x1c0
[  176.048772][ T8224]  __secure_computing+0x82/0x150
[  176.048866][ T8224]  syscall_trace_enter+0xcf/0x1e0
[  176.048897][ T8224]  do_syscall_64+0xa4/0x2b0
[  176.048942][ T8224]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.049027][ T8224] RIP: 0033:0x7ff06a3af749
[  176.049048][ T8224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  176.049071][ T8224] RSP: 002b:00007ff068dee038 EFLAGS: 00000246 ORIG_RAX: 000000000000004b
[  176.049103][ T8224] RAX: ffffffffffffffda RBX: 00007ff06a606090 RCX: 00007ff06a3af749
[  176.049119][ T8224] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007
[  176.049135][ T8224] RBP: 00007ff068dee090 R08: 0000000000000000 R09: 0000000000000000
[  176.049165][ T8224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  176.049180][ T8224] R13: 00007ff06a606128 R14: 00007ff06a606090 R15: 00007ffc2a3cf948
[  176.049205][ T8224]  </TASK>
[  176.055276][ T8216] syz.2.1446: attempt to access beyond end of device
[  176.055276][ T8216] loop2: rw=2049, sector=361, nr_sectors = 8 limit=128
[  176.219917][ T8226] set_capacity_and_notify: 7 callbacks suppressed
[  176.219993][ T8226] loop3: detected capacity change from 0 to 4096
[  176.398802][ T8226] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  176.407788][ T8226] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  176.611470][ T8246] loop3: detected capacity change from 0 to 512
[  176.636795][ T8246] ext4 filesystem being mounted at /287/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  176.656033][ T8252] loop2: detected capacity change from 0 to 512
[  176.666397][ T8254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  176.675315][ T8254] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  176.690807][ T8252] ext4 filesystem being mounted at /316/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  177.507714][ T8275] loop2: detected capacity change from 0 to 4096
[  177.522320][ T8275] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  177.531389][ T8275] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  177.630336][ T8282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  177.639269][ T8282] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  177.693556][ T8286] netlink: 'syz.5.1471': attribute type 1 has an invalid length.
[  177.769233][ T8286] loop5: detected capacity change from 0 to 1764
[  177.809932][ T8298] loop4: detected capacity change from 0 to 128
[  177.822045][ T8298] ext4 filesystem being mounted at /282/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  177.866301][ T8298] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.4.1475: bad entry in directory: directory entry overrun - offset=1012, inode=128, rec_len=65544, size=1024 fake=0
[  177.866535][ T8298] EXT4-fs (loop4): Remounting filesystem read-only
[  177.912303][ T8300] macvlan2: entered promiscuous mode
[  177.912321][ T8300] macvlan2: entered allmulticast mode
[  177.912947][ T8300] bond6: entered promiscuous mode
[  178.089976][ T8300] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  178.099864][ T8300] bond6: left promiscuous mode
[  178.410920][ T8319] loop6: detected capacity change from 0 to 128
[  178.427491][ T8319] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  178.440204][ T8319] EXT4-fs error (device loop6): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.6.1482: bad entry in directory: directory entry overrun - offset=1012, inode=128, rec_len=65544, size=1024 fake=0
[  178.440477][ T8319] EXT4-fs (loop6): Remounting filesystem read-only
[  178.695674][ T8315] loop4: detected capacity change from 0 to 4096
[  178.755351][ T8314] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  178.762118][ T8314] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  178.903779][   T29] kauditd_printk_skb: 488 callbacks suppressed
[  178.903797][   T29] audit: type=1326 audit(1768200853.680:3883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8338 comm="syz.3.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c942ef749 code=0x7ffc0000
[  178.903994][   T29] audit: type=1326 audit(1768200853.680:3884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8338 comm="syz.3.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c942ef749 code=0x7ffc0000
[  178.906143][ T8337] netlink: 'syz.6.1490': attribute type 27 has an invalid length.
[  178.919923][   T29] audit: type=1326 audit(1768200853.700:3885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8338 comm="syz.3.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c942ef749 code=0x7ffc0000
[  179.003143][   T29] audit: type=1326 audit(1768200853.780:3886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8338 comm="syz.3.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c942ef749 code=0x7ffc0000
[  179.003189][   T29] audit: type=1326 audit(1768200853.780:3887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8338 comm="syz.3.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c942ef749 code=0x7ffc0000
[  179.003254][   T29] audit: type=1326 audit(1768200853.780:3888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8338 comm="syz.3.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c942ef749 code=0x7ffc0000
[  179.003289][   T29] audit: type=1326 audit(1768200853.780:3889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8338 comm="syz.3.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c942ef749 code=0x7ffc0000
[  179.003350][   T29] audit: type=1326 audit(1768200853.780:3891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8338 comm="syz.3.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c942ef749 code=0x7ffc0000
[  179.003380][   T29] audit: type=1326 audit(1768200853.780:3890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8338 comm="syz.3.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c942ef749 code=0x7ffc0000
[  179.003421][   T29] audit: type=1326 audit(1768200853.780:3892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8338 comm="syz.3.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c942ef749 code=0x7ffc0000
[  179.006213][ T8337] 8021q: adding VLAN 0 to HW filter on device bond0
[  179.008047][ T8337] 8021q: adding VLAN 0 to HW filter on device team0
[  179.012843][ T8337] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  179.052858][ T8341] loop3: detected capacity change from 0 to 512
[  179.184340][ T8341] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.1491: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  179.264250][ T8341] EXT4-fs error (device loop3): ext4_quota_enable:7180: comm syz.3.1491: Bad quota inode: 3, type: 0
[  179.282814][ T8341] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  179.283039][ T8341] EXT4-fs (loop3): mount failed
[  179.415345][ T8355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  179.415523][ T8355] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  179.425626][ T8352] loop4: detected capacity change from 0 to 512
[  179.480459][ T8358] ext4 filesystem being mounted at /297/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  179.496515][ T8352] ext4 filesystem being mounted at /287/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  179.683905][ T8378] EXT4-fs (loop6): orphan cleanup on readonly fs
[  179.690390][ T8378] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13
[  179.717524][ T8378] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  179.717880][ T8378] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.1503: attempt to clear invalid blocks 2 len 1
[  179.718078][ T8378] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.1503: invalid indirect mapped block 1819239214 (level 0)
[  179.718921][ T8378] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.1503: invalid indirect mapped block 1819239214 (level 1)
[  179.719322][ T8378] EXT4-fs (loop6): 1 truncate cleaned up
[  179.750392][ T8381] IPv6: addrconf: prefix option has invalid lifetime
[  180.054728][ T8389] ext4 filesystem being mounted at /298/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  180.180729][ T8394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  180.180871][ T8394] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  180.520544][ T8400] ext4 filesystem being mounted at /300/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  180.845523][ T8420] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #3: comm syz.5.1516: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  180.925988][ T8420] EXT4-fs error (device loop5): ext4_quota_enable:7180: comm syz.5.1516: Bad quota inode: 3, type: 0
[  180.942283][ T8434] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  180.957787][ T8422] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  180.972002][ T8420] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  180.994587][ T8422] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000.
[  181.006343][ T8420] EXT4-fs (loop5): mount failed
[  181.056535][ T8440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  181.065257][ T8440] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  181.074832][ T8438] netlink: 'syz.4.1523': attribute type 1 has an invalid length.
[  181.202788][ T8452] macvlan2: entered promiscuous mode
[  181.208293][ T8452] macvlan2: entered allmulticast mode
[  181.222238][ T8452] bond4: entered promiscuous mode
[  181.222556][ T8452] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  181.229661][ T8452] bond4: left promiscuous mode
[  181.438167][ T8469] netlink: 'syz.6.1534': attribute type 21 has an invalid length.
[  181.438228][ T8469] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1534'.
[  181.494045][ T8469] set_capacity_and_notify: 7 callbacks suppressed
[  181.494063][ T8469] loop6: detected capacity change from 0 to 4096
[  181.739796][ T8483] loop5: detected capacity change from 0 to 128
[  181.740165][ T8483] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  181.740420][ T8483] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  181.788313][ T6628] EXT4-fs error (device loop6): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /139/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0
[  181.810477][ T6628] EXT4-fs error (device loop6): ext4_empty_dir:3094: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0
[  181.810709][ T6628] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..'
[  181.810833][ T6628] EXT4-fs error (device loop6): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /139/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0
[  181.811341][ T6628] EXT4-fs error (device loop6): ext4_empty_dir:3094: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0
[  181.811811][ T6628] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..'
[  181.811926][ T6628] EXT4-fs error (device loop6): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /139/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0
[  181.812144][ T6628] EXT4-fs error (device loop6): ext4_empty_dir:3094: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0
[  181.812332][ T6628] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..'
[  181.812505][ T6628] EXT4-fs error (device loop6): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /139/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0
[  181.812782][ T6628] EXT4-fs error (device loop6): ext4_empty_dir:3094: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0
[  181.813036][ T6628] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..'
[  181.813152][ T6628] EXT4-fs error (device loop6): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /139/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0
[  181.813436][ T6628] EXT4-fs error (device loop6): ext4_empty_dir:3094: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0
[  181.813598][ T6628] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..'
[  181.814060][ T6628] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..'
[  181.814568][ T6628] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..'
[  181.815015][ T6628] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..'
[  181.815449][ T6628] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..'
[  181.815893][ T6628] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..'
[  181.825216][ T8467] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  181.839163][ T8473] loop2: detected capacity change from 0 to 4096
[  182.208540][ T8473] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  182.219158][ T8473] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  182.329301][ T8489] loop2: detected capacity change from 0 to 512
[  182.338518][ T8489] EXT4-fs (loop2): orphan cleanup on readonly fs
[  182.345057][ T8489] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  182.346829][ T8489] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  182.348500][ T8489] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.1539: attempt to clear invalid blocks 2 len 1
[  182.348819][ T8489] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1539: invalid indirect mapped block 1819239214 (level 0)
[  182.374909][ T8489] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1539: invalid indirect mapped block 1819239214 (level 1)
[  182.439811][ T8489] EXT4-fs (loop2): 1 truncate cleaned up
[  182.623991][ T8501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  182.624234][ T8501] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  182.625642][ T8499] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1545'.
[  182.625750][ T8499] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1545'.
[  182.634946][ T8499] veth0_to_team: entered promiscuous mode
[  182.670396][ T2882] bridge_slave_1: left allmulticast mode
[  182.670501][ T2882] bridge_slave_1: left promiscuous mode
[  182.670653][ T2882] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.680385][ T2882] bridge_slave_0: left allmulticast mode
[  182.680405][ T2882] bridge_slave_0: left promiscuous mode
[  182.680562][ T2882] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.697435][ T2916] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  182.747038][ T2882] bond1 (unregistering): (slave gretap1): Releasing active interface
[  182.867253][ T2882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  182.877409][ T2882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  182.886686][ T2882] bond0 (unregistering): Released all slaves
[  182.892296][ T2882] bond1 (unregistering): Released all slaves
[  182.902634][ T2882] bond2 (unregistering): Released all slaves
[  182.963078][ T8513] loop3: detected capacity change from 0 to 512
[  182.972610][ T8513] ext4 filesystem being mounted at /310/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  182.992303][ T8514] loop5: detected capacity change from 0 to 4096
[  183.054672][ T2882] hsr_slave_0: left promiscuous mode
[  183.055202][ T2882] hsr_slave_1: left promiscuous mode
[  183.055640][ T2882] batman_adv: batadv0: Removing interface: batadv_slave_0
[  183.056101][ T2882] batman_adv: batadv0: Removing interface: batadv_slave_1
[  183.063701][ T8514] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  183.064057][ T8514] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000.
[  183.204240][ T2882] team0 (unregistering): Port device team_slave_1 removed
[  183.216849][ T2882] team0 (unregistering): Port device team_slave_0 removed
[  183.237184][ T8527] loop5: detected capacity change from 0 to 128
[  183.248347][ T8527] ext4 filesystem being mounted at /236/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  183.267575][ T8529] netlink: 'syz.2.1552': attribute type 20 has an invalid length.
[  183.282757][ T8529] loop2: detected capacity change from 0 to 1024
[  183.284306][ T8529] EXT4-fs: Ignoring removed orlov option
[  183.304780][ T8527] EXT4-fs error (device loop5): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.5.1553: bad entry in directory: directory entry overrun - offset=1012, inode=128, rec_len=65544, size=1024 fake=0
[  183.355225][ T8527] EXT4-fs (loop5): Remounting filesystem read-only
[  183.474927][ T8536] loop5: detected capacity change from 0 to 512
[  183.515318][ T8537] xt_CT: You must specify a L4 protocol and not use inversions on it
[  183.569461][ T8536] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  183.800152][ T8502] chnl_net:caif_netlink_parms(): no params data found
[  183.852042][ T8545] loop3: detected capacity change from 0 to 128
[  183.852607][ T8545] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  183.853040][ T8545] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  183.974752][ T8502] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.974857][ T8502] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.979720][ T8502] bridge_slave_0: entered allmulticast mode
[  184.024248][ T8502] bridge_slave_0: entered promiscuous mode
[  184.031373][ T8502] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.039038][ T8502] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.049117][ T8502] bridge_slave_1: entered allmulticast mode
[  184.056021][ T8502] bridge_slave_1: entered promiscuous mode
[  184.099229][ T8502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  184.116683][ T8502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  184.134672][ T8557] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  184.149089][ T8559] qrtr: Invalid version 255
[  184.171530][ T8502] team0: Port device team_slave_0 added
[  184.180392][ T8502] team0: Port device team_slave_1 added
[  184.234339][ T8502] batman_adv: batadv0: Adding interface: batadv_slave_0
[  184.241347][ T8502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  184.267570][ T8502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  184.280400][ T8502] batman_adv: batadv0: Adding interface: batadv_slave_1
[  184.287610][ T8502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  184.313735][ T8502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  184.365734][   T29] kauditd_printk_skb: 95 callbacks suppressed
[  184.365754][   T29] audit: type=1400 audit(1768200859.140:3988): avc:  denied  { bind } for  pid=8567 comm="syz.2.1563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  184.401098][ T8570] ext4 filesystem being mounted at /299/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  184.423630][ T8502] hsr_slave_0: entered promiscuous mode
[  184.441182][ T8502] hsr_slave_1: entered promiscuous mode
[  184.454210][ T8502] debugfs: 'hsr0' already exists in 'hsr'
[  184.460094][ T8502] Cannot create hsr debugfs directory
[  184.676087][ T8502] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  184.707762][   T55] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  184.757232][ T8502] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  184.787050][ T8502] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  184.804649][ T8502] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  184.875875][ T8502] 8021q: adding VLAN 0 to HW filter on device bond0
[  184.889769][ T8502] 8021q: adding VLAN 0 to HW filter on device team0
[  184.899546][ T2034] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.906779][ T2034] bridge0: port 1(bridge_slave_0) entered forwarding state
[  184.946302][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.953632][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  185.031918][ T8602] ext4 filesystem being mounted at /316/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  185.081241][ T8605] ISOFS: unable to read i-node block
[  185.092960][ T8612] qrtr: Invalid version 255
[  185.145157][ T8605] IPv6: sit1: Disabled Multicast RS
[  185.155115][ T8605] iso9660: Corrupted directory entry in block 2 of inode 1920
[  185.165574][ T8502] 8021q: adding VLAN 0 to HW filter on device batadv0
[  185.219153][ T8620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.227899][ T8620] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  185.317918][ T8624] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  185.458211][ T8502] veth0_vlan: entered promiscuous mode
[  185.478737][ T8502] veth1_vlan: entered promiscuous mode
[  185.497866][ T8502] veth0_macvtap: entered promiscuous mode
[  185.506333][ T8502] veth1_macvtap: entered promiscuous mode
[  185.529557][ T8502] batman_adv: batadv0: Interface activated: batadv_slave_0
[  185.542401][ T8502] batman_adv: batadv0: Interface activated: batadv_slave_1
[  185.554696][   T55] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  185.563759][   T55] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  185.573133][   T55] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  185.587414][   T55] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  185.628197][   T29] audit: type=1400 audit(1768200860.410:3989): avc:  denied  { add_name } for  pid=8502 comm="syz-executor" name="syz7" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:public_content_rw_t:s0"
[  185.654159][   T29] audit: type=1400 audit(1768200860.410:3990): avc:  denied  { create } for  pid=8502 comm="syz-executor" name="syz7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  185.674606][   T29] audit: type=1400 audit(1768200860.410:3991): avc:  denied  { associate } for  pid=8502 comm="syz-executor" name="syz7" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  185.815035][ T8655] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  185.840704][ T8658] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  185.851414][ T8655] EXT4-fs error (device loop7): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.7.1585: bad entry in directory: directory entry overrun - offset=1012, inode=128, rec_len=65544, size=1024 fake=0
[  185.877904][ T8655] EXT4-fs (loop7): Remounting filesystem read-only
[  185.878347][ T8661] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #3: comm syz.5.1588: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  185.906687][ T8661] EXT4-fs error (device loop5): ext4_quota_enable:7180: comm syz.5.1588: Bad quota inode: 3, type: 0
[  185.909665][ T8659] ext4 filesystem being mounted at /305/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  185.970375][ T8661] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  185.998251][ T8661] EXT4-fs (loop5): mount failed
[  186.667054][ T8687] set_capacity_and_notify: 8 callbacks suppressed
[  186.667077][ T8687] loop5: detected capacity change from 0 to 1024
[  186.681840][ T8687] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  186.703245][ T8687] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1596: Invalid block bitmap block 0 in block_group 0
[  186.768408][ T8687] Quota error (device loop5): write_blk: dquota write failed
[  186.776895][ T8687] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  186.830476][ T8687] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.1596: Failed to acquire dquot type 0
[  186.855609][ T8694] loop3: detected capacity change from 0 to 128
[  186.862527][ T8687] EXT4-fs error (device loop5): ext4_free_blocks:6728: comm syz.5.1596: Freeing blocks not in datazone - block = 0, count = 4096
[  186.894446][ T8687] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.1596: Invalid inode bitmap blk 0 in block_group 0
[  186.911230][ T8687] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem
[  186.920721][   T55] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-7
[  186.929743][   T55] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 0
[  186.945963][ T8694] ext4 filesystem being mounted at /321/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  186.960166][ T8694] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.3.1599: bad entry in directory: directory entry overrun - offset=1012, inode=128, rec_len=65544, size=1024 fake=0
[  186.980365][ T8687] EXT4-fs (loop5): 1 orphan inode deleted
[  187.004657][ T3533] Bluetooth: hci0: command 0x1003 tx timeout
[  187.010720][ T3522] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  187.010880][ T8694] EXT4-fs (loop3): Remounting filesystem read-only
[  187.035562][ T8700] loop4: detected capacity change from 0 to 128
[  187.100936][ T2034] Bluetooth: hci0: Frame reassembly failed (-84)
[  187.243323][ T8716] qrtr: Invalid version 255
[  187.330009][ T8722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.338893][ T8722] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  187.546302][ T8731] loop2: detected capacity change from 0 to 128
[  187.547631][ T8729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.558696][ T8731] ext4 filesystem being mounted at /338/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  187.562154][ T8729] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  187.580028][ T8731] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.2.1614: bad entry in directory: directory entry overrun - offset=1012, inode=128, rec_len=65544, size=1024 fake=0
[  187.601280][ T8731] EXT4-fs (loop2): Remounting filesystem read-only
[  187.650230][ T8736] loop2: detected capacity change from 0 to 512
[  187.666840][ T8736] ext4 filesystem being mounted at /340/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  187.819290][ T8741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.828051][ T8741] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  188.045348][ T8747] loop3: detected capacity change from 0 to 512
[  188.057018][ T8747] ext4 filesystem being mounted at /326/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  188.428003][ T8761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  188.440071][ T8761] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  188.459606][ T8768] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1627'.
[  188.475940][ T8768] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1627'.
[  188.609952][ T8786] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  188.645256][ T8780] netlink: 25 bytes leftover after parsing attributes in process `syz.7.1632'.
[  188.659157][   T29] audit: type=1326 audit(1768200863.440:3992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8779 comm="syz.7.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3bbef749 code=0x7ffc0000
[  188.699205][   T29] audit: type=1326 audit(1768200863.460:3993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8779 comm="syz.7.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b3bbef749 code=0x7ffc0000
[  188.723164][   T29] audit: type=1326 audit(1768200863.460:3994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8779 comm="syz.7.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3bbef749 code=0x7ffc0000
[  188.885285][ T8800] loop7: detected capacity change from 0 to 512
[  188.896583][ T8800] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  189.184308][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[  189.191055][ T3522] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  189.625372][ T8833] FAULT_INJECTION: forcing a failure.
[  189.625372][ T8833] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  189.638712][ T8833] CPU: 0 UID: 0 PID: 8833 Comm: syz.7.1648 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  189.638740][ T8833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  189.638759][ T8833] Call Trace:
[  189.638770][ T8833]  <TASK>
[  189.638778][ T8833]  __dump_stack+0x1d/0x30
[  189.638848][ T8833]  dump_stack_lvl+0x95/0xd0
[  189.638877][ T8833]  dump_stack+0x15/0x1b
[  189.638966][ T8833]  should_fail_ex+0x265/0x280
[  189.638996][ T8833]  should_fail+0xb/0x20
[  189.639032][ T8833]  should_fail_usercopy+0x1a/0x20
[  189.639063][ T8833]  _copy_from_user+0x1c/0xb0
[  189.639097][ T8833]  ___sys_sendmsg+0xc1/0x1d0
[  189.639168][ T8833]  __x64_sys_sendmsg+0xd4/0x160
[  189.639203][ T8833]  x64_sys_call+0x17ba/0x3000
[  189.639277][ T8833]  do_syscall_64+0xca/0x2b0
[  189.639324][ T8833]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.639349][ T8833] RIP: 0033:0x7f6b3bbef749
[  189.639365][ T8833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  189.639388][ T8833] RSP: 002b:00007f6b3a657038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  189.639513][ T8833] RAX: ffffffffffffffda RBX: 00007f6b3be45fa0 RCX: 00007f6b3bbef749
[  189.639528][ T8833] RDX: 0000000000000040 RSI: 00002000000000c0 RDI: 0000000000000003
[  189.639579][ T8833] RBP: 00007f6b3a657090 R08: 0000000000000000 R09: 0000000000000000
[  189.639593][ T8833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  189.639610][ T8833] R13: 00007f6b3be46038 R14: 00007f6b3be45fa0 R15: 00007ffc653be7f8
[  189.639635][ T8833]  </TASK>
[  189.867487][ T8835] loop3: detected capacity change from 0 to 512
[  189.904543][ T8841] loop5: detected capacity change from 0 to 4096
[  189.989271][ T8841] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  190.022800][ T8841] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000.
[  190.032932][ T8835] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  190.067914][ T8848] loop2: detected capacity change from 0 to 512
[  190.089466][ T8853] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1656'.
[  190.103743][ T8848] EXT4-fs: Ignoring removed bh option
[  190.110797][ T8853] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1656'.
[  190.121214][   T29] kauditd_printk_skb: 18 callbacks suppressed
[  190.121232][   T29] audit: type=1326 audit(1768200864.910:4013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8854 comm="syz.5.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa955f749 code=0x7ffc0000
[  190.128050][ T8848] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  190.152935][   T29] audit: type=1326 audit(1768200864.910:4014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8854 comm="syz.5.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa955f749 code=0x7ffc0000
[  190.184698][   T29] audit: type=1326 audit(1768200864.910:4015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8854 comm="syz.5.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa955f749 code=0x7ffc0000
[  190.222884][   T29] audit: type=1326 audit(1768200864.990:4016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8854 comm="syz.5.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2aa955f749 code=0x7ffc0000
[  190.246657][   T29] audit: type=1326 audit(1768200864.990:4017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8854 comm="syz.5.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa955f749 code=0x7ffc0000
[  190.255181][ T8848] ext4 filesystem being mounted at /351/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  190.270671][   T29] audit: type=1326 audit(1768200864.990:4018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8854 comm="syz.5.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa955f749 code=0x7ffc0000
[  190.304390][   T29] audit: type=1326 audit(1768200864.990:4019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8854 comm="syz.5.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa955f749 code=0x7ffc0000
[  190.327945][   T29] audit: type=1326 audit(1768200864.990:4020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8854 comm="syz.5.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2aa955f749 code=0x7ffc0000
[  190.351772][   T29] audit: type=1326 audit(1768200864.990:4021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8854 comm="syz.5.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa955f749 code=0x7ffc0000
[  190.376280][   T29] audit: type=1326 audit(1768200864.990:4022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8854 comm="syz.5.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa955f749 code=0x7ffc0000
[  190.403737][ T3522] Bluetooth: hci1: command 0x1003 tx timeout
[  190.409892][ T3533] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  190.455665][ T8862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  190.464310][ T8862] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  190.507741][ T8870] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1663'.
[  190.556918][ T8872]  loop2: p1 < > p4
[  190.561593][ T8872] loop2: p4 size 8388608 extends beyond EOD, truncated
[  190.734998][ T8888] EXT4-fs: inline encryption not supported
[  190.748386][ T8888] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.1670: Allocating blocks 385-513 which overlap fs metadata
[  190.764669][ T8888] EXT4-fs (loop2): pa ffff8881079ffd20: logic 16, phys. 129, len 24
[  190.772748][ T8888] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8
[  190.783931][ T8888] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 15: block 337:freeing already freed block (bit 21); block bitmap corrupt.
[  190.802132][ T8888] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1670'.
[  190.868387][ T8898] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  190.880494][ T8898] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  191.215778][ T8920] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #3: comm syz.5.1683: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  191.223005][ T8918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  191.239535][ T8920] EXT4-fs error (device loop5): ext4_quota_enable:7180: comm syz.5.1683: Bad quota inode: 3, type: 0
[  191.255626][ T8918] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  191.264271][ T8920] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  191.301114][  T334] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  191.313291][ T8920] EXT4-fs (loop5): mount failed
[  191.405934][ T8926] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  191.415254][ T8926] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  191.557790][ T2034] Bluetooth: hci0: Frame reassembly failed (-84)
[  191.596797][ T8935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  191.605656][ T8935] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  191.765397][ T8942] set_capacity_and_notify: 7 callbacks suppressed
[  191.765426][ T8942] loop3: detected capacity change from 0 to 128
[  191.780775][ T8942] ext4 filesystem being mounted at /338/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  191.792951][ T8940] FAULT_INJECTION: forcing a failure.
[  191.792951][ T8940] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  191.806152][ T8940] CPU: 1 UID: 0 PID: 8940 Comm: syz.2.1690 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  191.806259][ T8940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  191.806272][ T8940] Call Trace:
[  191.806279][ T8940]  <TASK>
[  191.806287][ T8940]  __dump_stack+0x1d/0x30
[  191.806317][ T8940]  dump_stack_lvl+0x95/0xd0
[  191.806341][ T8940]  dump_stack+0x15/0x1b
[  191.806367][ T8940]  should_fail_ex+0x265/0x280
[  191.806505][ T8940]  should_fail+0xb/0x20
[  191.806529][ T8940]  should_fail_usercopy+0x1a/0x20
[  191.806554][ T8940]  copy_fpstate_to_sigframe+0x628/0x7d0
[  191.806582][ T8940]  ? copy_fpstate_to_sigframe+0xe6/0x7d0
[  191.806617][ T8940]  ? x86_task_fpu+0x36/0x60
[  191.806712][ T8940]  get_sigframe+0x34d/0x490
[  191.806737][ T8940]  ? get_signal+0xdc7/0xf70
[  191.806786][ T8940]  x64_setup_rt_frame+0xa8/0x580
[  191.806876][ T8940]  arch_do_signal_or_restart+0x24c/0x450
[  191.807037][ T8940]  exit_to_user_mode_loop+0x6a/0x740
[  191.807065][ T8940]  ? __x64_sys_preadv2+0x67/0x80
[  191.807096][ T8940]  do_syscall_64+0x1dd/0x2b0
[  191.807200][ T8940]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.807229][ T8940] RIP: 0033:0x7fac598ef747
[  191.807249][ T8940] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89
[  191.807273][ T8940] RSP: 002b:00007fac5834f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000147
[  191.807333][ T8940] RAX: 0000000000000147 RBX: 00007fac59b45fa0 RCX: 00007fac598ef749
[  191.807350][ T8940] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000007
[  191.807367][ T8940] RBP: 00007fac5834f090 R08: 0000000000008000 R09: 0000000000000000
[  191.807383][ T8940] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001
[  191.807400][ T8940] R13: 00007fac59b46038 R14: 00007fac59b45fa0 R15: 00007ffd2a404bf8
[  191.807423][ T8940]  </TASK>
[  192.016475][ T8948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1693'.
[  192.045495][ T8948] loop2: detected capacity change from 0 to 1764
[  192.081114][ T8955] netlink: 'syz.3.1696': attribute type 20 has an invalid length.
[  192.096293][ T8955] loop3: detected capacity change from 0 to 1024
[  192.103616][ T8955] EXT4-fs: Ignoring removed orlov option
[  192.124371][ T8957] loop7: detected capacity change from 0 to 4096
[  192.137727][ T8957] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  192.146849][ T8957] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000.
[  192.233451][ T8962] xt_CT: You must specify a L4 protocol and not use inversions on it
[  192.252379][ T8962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1696'.
[  192.376703][ T3322] EXT4-fs unmount: 87 callbacks suppressed
[  192.376718][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.406110][ T8969] loop3: detected capacity change from 0 to 128
[  192.413090][ T8969] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  192.425436][ T8969] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  192.701443][ T8978] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  193.022531][ T8983] loop2: detected capacity change from 0 to 512
[  193.031882][ T8983] EXT4-fs (loop2): orphan cleanup on readonly fs
[  193.038557][ T8983] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  193.047125][ T8983] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  193.063321][ T8983] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.1703: attempt to clear invalid blocks 2 len 1
[  193.077058][ T8983] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1703: invalid indirect mapped block 1819239214 (level 0)
[  193.093260][ T8983] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1703: invalid indirect mapped block 1819239214 (level 1)
[  193.108969][ T8983] EXT4-fs (loop2): 1 truncate cleaned up
[  193.175153][ T8983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  193.198685][ T8988] loop7: detected capacity change from 0 to 1024
[  193.207387][ T8988] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  193.225799][ T8988] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.1705: Invalid block bitmap block 0 in block_group 0
[  193.262741][ T8988] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.1705: Failed to acquire dquot type 0
[  193.274805][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.284774][ T8988] EXT4-fs error (device loop7): ext4_free_blocks:6728: comm syz.7.1705: Freeing blocks not in datazone - block = 0, count = 4096
[  193.317627][ T8988] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.1705: Invalid inode bitmap blk 0 in block_group 0
[  193.331227][ T8988] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem
[  193.340941][ T8988] EXT4-fs (loop7): 1 orphan inode deleted
[  193.346828][   T55] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 0
[  193.358873][ T8988] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  193.383668][  T334] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  193.408391][ T8502] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.448836][ T9002] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1712'.
[  193.462121][ T9000] loop3: detected capacity change from 0 to 4096
[  193.477203][ T9007] netlink: 'syz.2.1713': attribute type 20 has an invalid length.
[  193.491401][ T9002] loop5: detected capacity change from 0 to 1764
[  193.501616][ T9004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  193.510245][ T9004] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  193.521354][ T9007] loop2: detected capacity change from 0 to 1024
[  193.528985][ T9007] EXT4-fs: Ignoring removed orlov option
[  193.531533][ T9000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  193.542919][ T9007] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  193.559866][ T9000] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  193.560371][ T9000] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  193.598190][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.644246][ T3533] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  193.703574][ T9018] xt_CT: You must specify a L4 protocol and not use inversions on it
[  193.712841][ T9020] netlink: 'syz.3.1717': attribute type 27 has an invalid length.
[  193.728788][ T9018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1713'.
[  193.744968][ T9020] veth0_to_team: left promiscuous mode
[  193.768916][ T9020] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.777669][ T9020] 8021q: adding VLAN 0 to HW filter on device team0
[  193.793919][ T9020] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  193.841737][ T9024] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  193.854342][ T9024] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  193.933212][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.086990][ T9041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.104693][ T9041] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  194.113520][ T9041] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  194.146210][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.198626][ T9045] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  194.215207][ T9048] EXT4-fs (loop7): orphan cleanup on readonly fs
[  194.221629][ T9048] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13
[  194.236139][ T9048] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  194.248589][ T9045] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1728: Invalid block bitmap block 0 in block_group 0
[  194.265358][ T9048] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.1729: attempt to clear invalid blocks 2 len 1
[  194.282815][ T9045] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1728: Failed to acquire dquot type 0
[  194.314441][ T9045] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.1728: Freeing blocks not in datazone - block = 0, count = 4096
[  194.328146][ T9048] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1729: invalid indirect mapped block 1819239214 (level 0)
[  194.342797][ T9048] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1729: invalid indirect mapped block 1819239214 (level 1)
[  194.364583][ T9048] EXT4-fs (loop7): 1 truncate cleaned up
[  194.371063][ T9048] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  194.371567][ T9060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  194.386536][ T9045] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.1728: Invalid inode bitmap blk 0 in block_group 0
[  194.395883][ T9060] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  194.405796][ T9045] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[  194.421086][ T2034] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 0
[  194.429742][ T9045] EXT4-fs (loop4): 1 orphan inode deleted
[  194.455861][ T8502] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.455862][ T9045] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.576889][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.740831][   T12] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  194.747734][ T9068] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  194.769612][ T9068] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  194.993776][ T9075] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  195.011658][ T9074] geneve2: entered promiscuous mode
[  195.017022][ T9074] geneve2: entered allmulticast mode
[  195.273713][ T9084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  195.324308][   T29] kauditd_printk_skb: 272 callbacks suppressed
[  195.324326][   T29] audit: type=1326 audit(1768200870.050:4289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9088 comm="syz.3.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c942ef749 code=0x7ffc0000
[  195.354494][   T29] audit: type=1326 audit(1768200870.050:4290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9088 comm="syz.3.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c942ef749 code=0x7ffc0000
[  195.378547][   T29] audit: type=1326 audit(1768200870.070:4291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9088 comm="syz.3.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c942ef749 code=0x7ffc0000
[  195.402858][   T29] audit: type=1326 audit(1768200870.070:4293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9088 comm="syz.3.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c942ef749 code=0x7ffc0000
[  195.427126][   T29] audit: type=1326 audit(1768200870.070:4292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9088 comm="syz.3.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c942ef749 code=0x7ffc0000
[  195.436140][ T9084] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  195.450883][   T29] audit: type=1326 audit(1768200870.070:4294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9088 comm="syz.3.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c942ef749 code=0x7ffc0000
[  195.482541][   T29] audit: type=1326 audit(1768200870.070:4295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9088 comm="syz.3.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c942ef749 code=0x7ffc0000
[  195.482581][   T29] audit: type=1326 audit(1768200870.070:4296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9088 comm="syz.3.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c942ef749 code=0x7ffc0000
[  195.482674][   T29] audit: type=1326 audit(1768200870.070:4298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9088 comm="syz.3.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c942ef749 code=0x7ffc0000
[  195.482715][   T29] audit: type=1326 audit(1768200870.070:4297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9088 comm="syz.3.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c942ef749 code=0x7ffc0000
[  195.683963][ T9104] netlink: 'syz.4.1748': attribute type 1 has an invalid length.
[  195.700998][ T9108] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  195.714555][ T9108] ext4 filesystem being mounted at /381/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  195.749315][ T3317] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  195.769646][ T9115] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1747'.
[  195.786693][ T9117] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1748'.
[  195.799781][ T9117] macvlan2: entered promiscuous mode
[  195.799807][ T9117] macvlan2: entered allmulticast mode
[  195.800699][ T9117] bond5: entered promiscuous mode
[  195.801019][ T9117] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  195.821798][ T9117] bond5: left promiscuous mode
[  195.900837][ T9119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  195.908256][ T9119] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  195.908633][ T9119] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  195.933805][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.025400][ T9124] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1752'.
[  196.025425][ T9124] openvswitch: netlink: Flow key attr not present in new flow.
[  196.087463][ T9128] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.1754: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  196.088953][ T9128] EXT4-fs error (device loop2): ext4_quota_enable:7180: comm syz.2.1754: Bad quota inode: 3, type: 0
[  196.119599][ T9128] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  196.119893][ T9128] EXT4-fs (loop2): mount failed
[  196.306386][ T9141] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  196.307049][ T9141] ext4 filesystem being mounted at /387/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  196.476363][ T3317] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  196.567733][ T9148] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.567830][ T9148] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  196.809031][ T9158] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1763'.
[  196.809052][ T9158] openvswitch: netlink: Flow key attr not present in new flow.
[  196.920649][ T9162] set_capacity_and_notify: 11 callbacks suppressed
[  196.920665][ T9162] loop2: detected capacity change from 0 to 512
[  196.929007][ T9162] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.1765: inode has both inline data and extents flags
[  196.948796][ T9162] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1765: couldn't read orphan inode 15 (err -117)
[  196.949981][ T9162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.982381][ T4270] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.121529][ T9165] loop5: detected capacity change from 0 to 1764
[  197.151004][ T9165] bond7: (slave vxcan7): The slave device specified does not support setting the MAC address
[  197.151588][ T9165] bond7: (slave vxcan7): Error -95 calling set_mac_address
[  197.199347][ T9173] macvlan2: entered promiscuous mode
[  197.199398][ T9173] macvlan2: entered allmulticast mode
[  197.199867][ T9173] bond7: entered promiscuous mode
[  197.200131][ T9173] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  197.223362][ T9173] bond7: left promiscuous mode
[  197.246988][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.302718][ T9182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  197.302912][ T9182] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  197.349430][ T9174] netlink: 25 bytes leftover after parsing attributes in process `syz.7.1769'.
[  197.354355][ T9191] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  197.427236][ T9196] netlink: 'syz.7.1774': attribute type 20 has an invalid length.
[  197.435387][ T9196] IPv6: NLM_F_CREATE should be specified when creating new route
[  197.467011][ T9196] loop7: detected capacity change from 0 to 1024
[  197.467879][ T9196] EXT4-fs: Ignoring removed orlov option
[  197.487006][ T9196] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.633448][ T9201] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1774'.
[  197.919203][ T9211] loop5: detected capacity change from 0 to 512
[  197.936510][ T9211] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.936762][ T9211] ext4 filesystem being mounted at /275/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  197.966355][ T8502] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.021353][   T37] Bluetooth: hci0: Frame reassembly failed (-84)
[  198.114947][ T9223] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  198.293574][ T4270] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.309653][ T9238] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1784'.
[  198.369521][ T9240] loop5: detected capacity change from 0 to 512
[  198.380001][ T9240] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.380105][ T9240] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.527305][ T9249] loop2: detected capacity change from 0 to 1764
[  198.561435][ T9249] bond8: (slave vxcan7): The slave device specified does not support setting the MAC address
[  198.562103][ T9249] bond8: (slave vxcan7): Error -95 calling set_mac_address
[  198.591676][ T9256] loop7: detected capacity change from 0 to 512
[  198.599296][ T9256] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.600632][ T9256] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.628136][ T9259] macvlan2: entered promiscuous mode
[  198.628208][ T9259] macvlan2: entered allmulticast mode
[  198.628504][ T9259] bond8: entered promiscuous mode
[  198.628725][ T9259] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  198.645984][ T9259] bond8: left promiscuous mode
[  198.717719][ T4270] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.740315][ T9264] netlink: 'syz.5.1792': attribute type 27 has an invalid length.
[  198.757859][ T8502] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.793245][ T9263] loop4: detected capacity change from 0 to 4096
[  198.802689][ T9263] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.815478][ T9266] loop7: detected capacity change from 0 to 512
[  198.821950][ T9264] 8021q: adding VLAN 0 to HW filter on device bond0
[  198.830560][ T9264] 8021q: adding VLAN 0 to HW filter on device team0
[  198.841095][ T9266] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.855851][ T9263] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  198.863852][ T9266] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.875572][ T9264] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  198.893089][ T9263] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  198.919831][ T9272] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1795'.
[  198.929294][ T9272] openvswitch: netlink: Flow actions attr not present in new flow.
[  198.938079][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.100454][ T9292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  199.109718][ T9292] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  199.119232][ T8502] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.164816][ T9297] loop4: detected capacity change from 0 to 4096
[  199.174429][ T9297] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.192101][ T9297] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  199.201051][ T9297] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  199.231297][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.268251][ T9306] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.289211][ T9306] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  199.298341][ T9306] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  199.318422][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.386505][ T9327] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.399305][ T9327] ext4 filesystem being mounted at /338/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  199.420482][ T9333] netlink: 'syz.2.1821': attribute type 27 has an invalid length.
[  199.476865][ T9333] 8021q: adding VLAN 0 to HW filter on device .`
[  199.485149][ T9333] 8021q: adding VLAN 0 to HW filter on device team0
[  199.495258][ T9333] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  199.562736][ T9337] bond9: (slave vxcan7): The slave device specified does not support setting the MAC address
[  199.574440][ T9337] bond9: (slave vxcan7): Error -95 calling set_mac_address
[  199.603011][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.616790][ T9339] macvlan2: entered promiscuous mode
[  199.622188][ T9339] macvlan2: entered allmulticast mode
[  199.628605][ T9339] bond9: entered promiscuous mode
[  199.634870][ T9339] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  199.652555][ T9339] bond9: left promiscuous mode
[  199.670372][ T9341] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.689329][ T9341] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  199.698178][ T9341] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  199.717785][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.766989][ T9352] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.779762][ T9352] ext4 filesystem being mounted at /288/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  199.908315][ T4270] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.945869][ T9360] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #3: comm syz.5.1830: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  199.964915][ T9360] EXT4-fs error (device loop5): ext4_quota_enable:7180: comm syz.5.1830: Bad quota inode: 3, type: 0
[  199.976708][ T9360] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  199.992400][ T9360] EXT4-fs (loop5): mount failed
[  200.044963][ T3533] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  200.559739][ T9385] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.575946][   T29] kauditd_printk_skb: 105 callbacks suppressed
[  200.575963][   T29] audit: type=1326 audit(1768200875.360:4404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9394 comm="syz.7.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3bbef749 code=0x7ffc0000
[  200.609930][   T29] audit: type=1326 audit(1768200875.360:4405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9394 comm="syz.7.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3bbef749 code=0x7ffc0000
[  200.633452][   T29] audit: type=1326 audit(1768200875.360:4406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9394 comm="syz.7.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f6b3bbef749 code=0x7ffc0000
[  200.656866][   T29] audit: type=1326 audit(1768200875.360:4407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9394 comm="syz.7.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3bbef749 code=0x7ffc0000
[  200.680478][   T29] audit: type=1326 audit(1768200875.360:4408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9394 comm="syz.7.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3bbef749 code=0x7ffc0000
[  200.734423][ T9400] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[  200.744302][ T9391] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  200.757633][ T9400] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  200.774467][ T9385] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  200.780748][ T9400] EXT4-fs error (device loop3): ext4_get_journal_inode:5849: inode #32: comm syz.3.1847: iget: special inode unallocated
[  200.799199][ T9400] EXT4-fs (loop3): Remounting filesystem read-only
[  200.806950][ T9400] EXT4-fs (loop3): no journal found
[  200.812364][ T9400] EXT4-fs (loop3): can't get journal size
[  200.819486][ T9385] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  200.822324][ T9391] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  200.840586][ T9391] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  200.860609][ T9391] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1844'.
[  200.870381][ T9400] EXT4-fs (loop3): filesystem is read-only
[  200.889418][ T4270] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  200.915244][ T9400] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  200.946533][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.981842][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.026863][ T9424] netlink: 'syz.3.1858': attribute type 27 has an invalid length.
[  201.028780][   T29] audit: type=1326 audit(1768200875.810:4409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9427 comm="syz.5.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa955f749 code=0x7ffc0000
[  201.058438][   T29] audit: type=1326 audit(1768200875.810:4410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9427 comm="syz.5.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa955f749 code=0x7ffc0000
[  201.082346][   T29] audit: type=1326 audit(1768200875.810:4411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9427 comm="syz.5.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa955f749 code=0x7ffc0000
[  201.097041][   T52] Bluetooth: hci0: Frame reassembly failed (-84)
[  201.119410][ T9435] netlink: 'syz.5.1861': attribute type 20 has an invalid length.
[  201.127507][ T9435] IPv6: NLM_F_CREATE should be specified when creating new route
[  201.151586][ T9435] EXT4-fs: Ignoring removed orlov option
[  201.171756][   T29] audit: type=1326 audit(1768200875.830:4412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9427 comm="syz.5.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2aa955f749 code=0x7ffc0000
[  201.195248][   T29] audit: type=1326 audit(1768200875.830:4413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9427 comm="syz.5.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa955f749 code=0x7ffc0000
[  201.223461][ T9435] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.270363][ T9440] syzkaller0: entered allmulticast mode
[  201.309407][ T9440] syzkaller0 (unregistering): left allmulticast mode
[  201.365655][ T9449] xt_CT: You must specify a L4 protocol and not use inversions on it
[  201.377225][ T9448] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.392223][ T9449] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1861'.
[  201.414537][ T9448] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  201.437050][ T9448] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  201.476202][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.554008][ T4270] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.643130][ T9462] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  201.661277][ T9461] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.675308][ T9461] ext4 filesystem being mounted at /297/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  201.805024][ T9474] EXT4-fs: inline encryption not supported
[  201.856567][ T9474] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.910439][ T4270] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.922538][ T9474] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.1875: Allocating blocks 385-513 which overlap fs metadata
[  201.957614][ T9474] EXT4-fs (loop7): pa ffff888100572c40: logic 16, phys. 129, len 24
[  201.965912][ T9474] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8
[  201.992714][ T9487] set_capacity_and_notify: 14 callbacks suppressed
[  201.992732][ T9487] loop5: detected capacity change from 0 to 4096
[  202.006350][ T9489] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1875'.
[  202.016422][ T9474] EXT4-fs error (device loop7): mb_free_blocks:2037: group 0, inode 15: block 337:freeing already freed block (bit 21); block bitmap corrupt.
[  202.057665][ T9487] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.091128][ T8502] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.103476][ T9494] netlink: 'syz.2.1881': attribute type 20 has an invalid length.
[  202.105941][ T9487] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  202.121143][ T9487] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000.
[  202.129534][ T9494] loop2: detected capacity change from 0 to 1024
[  202.136837][ T9494] EXT4-fs: Ignoring removed orlov option
[  202.146990][ T9494] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.178932][ T4270] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.206376][ T9497] loop7: detected capacity change from 0 to 4096
[  202.238717][ T9500] netlink: 'syz.5.1883': attribute type 1 has an invalid length.
[  202.248470][ T9497] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  202.258040][ T9497] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000.
[  202.304011][ T9503] xt_CT: You must specify a L4 protocol and not use inversions on it
[  202.328068][ T9500] 8021q: adding VLAN 0 to HW filter on device bond8
[  202.337288][ T9500] FAULT_INJECTION: forcing a failure.
[  202.337288][ T9500] name failslab, interval 1, probability 0, space 0, times 0
[  202.350068][ T9500] CPU: 0 UID: 0 PID: 9500 Comm: syz.5.1883 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  202.350104][ T9500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  202.350120][ T9500] Call Trace:
[  202.350129][ T9500]  <TASK>
[  202.350138][ T9500]  __dump_stack+0x1d/0x30
[  202.350204][ T9500]  dump_stack_lvl+0x95/0xd0
[  202.350232][ T9500]  dump_stack+0x15/0x1b
[  202.350259][ T9500]  should_fail_ex+0x265/0x280
[  202.350283][ T9500]  should_failslab+0x8c/0xb0
[  202.350383][ T9500]  __kmalloc_cache_noprof+0x65/0x4c0
[  202.350415][ T9500]  ? rtnl_newlink+0x5c/0x1360
[  202.350437][ T9500]  ? __pfx_rtnl_newlink+0x10/0x10
[  202.350457][ T9500]  rtnl_newlink+0x5c/0x1360
[  202.350475][ T9500]  ? nlmon_xmit+0x4f/0x60
[  202.350576][ T9500]  ? dev_hard_start_xmit+0x3b0/0x3e0
[  202.350614][ T9500]  ? queue_stack_map_push_elem+0x6e/0x470
[  202.350661][ T9500]  ? bpf_perf_event_read+0x129/0x150
[  202.350690][ T9500]  ? __rcu_read_unlock+0x34/0x70
[  202.350770][ T9500]  ? bpf_trace_run3+0x12c/0x1e0
[  202.350818][ T9500]  ? __kfree_skb+0x109/0x150
[  202.350860][ T9500]  ? __memcg_slab_free_hook+0x135/0x230
[  202.350899][ T9500]  ? __rcu_read_unlock+0x4f/0x70
[  202.350946][ T9500]  ? avc_has_perm_noaudit+0xab/0x130
[  202.351036][ T9500]  ? cred_has_capability+0x210/0x280
[  202.351081][ T9500]  ? selinux_capable+0x31/0x40
[  202.351134][ T9500]  ? security_capable+0x83/0x90
[  202.351171][ T9500]  ? ns_capable+0x7d/0xb0
[  202.351200][ T9500]  ? __pfx_rtnl_newlink+0x10/0x10
[  202.351223][ T9500]  rtnetlink_rcv_msg+0x5fe/0x6d0
[  202.351316][ T9500]  netlink_rcv_skb+0x123/0x220
[  202.351373][ T9500]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  202.351400][ T9500]  rtnetlink_rcv+0x1c/0x30
[  202.351416][ T9500]  netlink_unicast+0x5c0/0x690
[  202.351449][ T9500]  netlink_sendmsg+0x58b/0x6b0
[  202.351519][ T9500]  ? __pfx_netlink_sendmsg+0x10/0x10
[  202.351560][ T9500]  __sock_sendmsg+0x145/0x180
[  202.351587][ T9500]  ____sys_sendmsg+0x31e/0x4a0
[  202.351662][ T9500]  ___sys_sendmsg+0x17b/0x1d0
[  202.351780][ T9500]  __x64_sys_sendmsg+0xd4/0x160
[  202.351833][ T9500]  x64_sys_call+0x17ba/0x3000
[  202.351867][ T9500]  do_syscall_64+0xca/0x2b0
[  202.351983][ T9500]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.352010][ T9500] RIP: 0033:0x7f2aa955f749
[  202.352065][ T9500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  202.352091][ T9500] RSP: 002b:00007f2aa7fbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  202.352116][ T9500] RAX: ffffffffffffffda RBX: 00007f2aa97b5fa0 RCX: 00007f2aa955f749
[  202.352140][ T9500] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000007
[  202.352154][ T9500] RBP: 00007f2aa7fbf090 R08: 0000000000000000 R09: 0000000000000000
[  202.352169][ T9500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  202.352211][ T9500] R13: 00007f2aa97b6038 R14: 00007f2aa97b5fa0 R15: 00007ffdbd412118
[  202.352237][ T9500]  </TASK>
[  202.388595][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1881'.
[  202.598987][ T9508] netlink: 'syz.5.1885': attribute type 27 has an invalid length.
[  202.757162][ T9518] loop3: detected capacity change from 0 to 512
[  202.788056][ T9518] ext4 filesystem being mounted at /375/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  202.829614][ T9528] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  203.182089][ T3533] Bluetooth: hci0: command 0x1003 tx timeout
[  203.259523][ T3522] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  203.659770][ T9548] netlink: 'syz.3.1898': attribute type 3 has an invalid length.
[  203.676328][ T9550] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  203.693135][ T9550] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1899'.
[  203.702680][ T9552] netlink: 'syz.3.1900': attribute type 20 has an invalid length.
[  203.728809][ T9552] loop3: detected capacity change from 0 to 1024
[  203.736019][ T9552] EXT4-fs: Ignoring removed orlov option
[  203.750491][ T9554] netlink: 'syz.5.1901': attribute type 27 has an invalid length.
[  203.772322][ T9554] 8021q: adding VLAN 0 to HW filter on device bond0
[  203.780656][ T9554] 8021q: adding VLAN 0 to HW filter on device team0
[  203.793347][ T9554] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  203.862404][ T9565] loop4: detected capacity change from 0 to 1024
[  203.882443][ T9567] loop7: detected capacity change from 0 to 512
[  203.890395][ T9565] EXT4-fs: inline encryption not supported
[  203.902865][ T9567] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  203.926310][ T9565] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.1904: Allocating blocks 385-513 which overlap fs metadata
[  203.952781][ T9577] xt_CT: You must specify a L4 protocol and not use inversions on it
[  203.972867][ T9577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1900'.
[  203.985806][ T9565] EXT4-fs (loop4): pa ffff888100572bd0: logic 16, phys. 129, len 24
[  203.994030][ T9565] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8
[  204.018192][ T9580] loop5: detected capacity change from 0 to 128
[  204.065149][ T9580] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  204.088939][ T9579] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1904'.
[  204.104233][ T9584] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  204.115093][ T9580] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  204.132753][ T9565] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 15: block 337:freeing already freed block (bit 21); block bitmap corrupt.
[  204.362148][ T9590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  204.371016][ T9590] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  204.404054][  T334] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  204.515458][ T9601] loop3: detected capacity change from 0 to 4096
[  204.566601][ T9601] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  204.599579][ T9601] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  204.866094][   T52] Bluetooth: hci0: Frame reassembly failed (-84)
[  205.210070][ T9620] netlink: 'syz.5.1916': attribute type 27 has an invalid length.
[  205.483818][ T9629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  205.495183][ T9629] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  205.546381][ T9635] loop5: detected capacity change from 0 to 4096
[  205.560493][ T9635] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  205.569638][ T9635] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000.
[  205.662935][ T9642] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  205.679133][ T9642] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  205.690687][ T9641] SELinux:  unknown common r
[  205.696554][ T9641] SELinux: failed to load policy
[  205.721481][ T9647] netlink: 'syz.7.1928': attribute type 27 has an invalid length.
[  205.755614][ T9648] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  205.769815][ T9647] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.777095][ T9647] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.797847][ T9642] ==================================================================
[  205.805994][ T9642] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark
[  205.814036][ T9642] 
[  205.816386][ T9642] write to 0xffff888119542914 of 4 bytes by task 9649 on cpu 1:
[  205.824053][ T9642]  xas_set_mark+0x12b/0x140
[  205.828607][ T9642]  __folio_start_writeback+0x155/0x340
[  205.834133][ T9642]  mpage_writepages+0xd18/0x1250
[  205.839128][ T9642]  fat_writepages+0x24/0x30
[  205.843725][ T9642]  do_writepages+0x1c6/0x310
[  205.848378][ T9642]  file_write_and_wait_range+0x156/0x2c0
[  205.854156][ T9642]  __generic_file_fsync+0x46/0x160
[  205.859306][ T9642]  fat_file_fsync+0x49/0x100
[  205.863956][ T9642]  vfs_fsync_range+0x10d/0x130
[  205.868759][ T9642]  generic_file_write_iter+0x1b8/0x2f0
[  205.874266][ T9642]  iter_file_splice_write+0x66b/0xa20
[  205.879682][ T9642]  direct_splice_actor+0x156/0x2a0
[  205.884842][ T9642]  splice_direct_to_actor+0x312/0x680
[  205.890259][ T9642]  do_splice_direct+0xda/0x150
[  205.895064][ T9642]  do_sendfile+0x380/0x650
[  205.899531][ T9642]  __x64_sys_sendfile64+0x105/0x150
[  205.904781][ T9642]  x64_sys_call+0x2db1/0x3000
[  205.909645][ T9642]  do_syscall_64+0xca/0x2b0
[  205.914208][ T9642]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.920158][ T9642] 
[  205.922541][ T9642] read to 0xffff888119542914 of 4 bytes by task 9642 on cpu 0:
[  205.930111][ T9642]  __writeback_single_inode+0x201/0x7c0
[  205.935713][ T9642]  writeback_single_inode+0x16d/0x3f0
[  205.941148][ T9642]  sync_inode_metadata+0x5b/0x90
[  205.946201][ T9642]  __generic_file_fsync+0x109/0x160
[  205.951440][ T9642]  fat_file_fsync+0x49/0x100
[  205.956150][ T9642]  vfs_fsync_range+0x10d/0x130
[  205.961043][ T9642]  generic_file_write_iter+0x1b8/0x2f0
[  205.966552][ T9642]  iter_file_splice_write+0x66b/0xa20
[  205.971965][ T9642]  direct_splice_actor+0x156/0x2a0
[  205.977206][ T9642]  splice_direct_to_actor+0x312/0x680
[  205.982631][ T9642]  do_splice_direct+0xda/0x150
[  205.987430][ T9642]  do_sendfile+0x380/0x650
[  205.991893][ T9642]  __x64_sys_sendfile64+0x105/0x150
[  205.997130][ T9642]  x64_sys_call+0x2db1/0x3000
[  206.001941][ T9642]  do_syscall_64+0xca/0x2b0
[  206.006546][ T9642]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.012473][ T9642] 
[  206.014828][ T9642] value changed: 0x0a000021 -> 0x04000021
[  206.020566][ T9642] 
[  206.022906][ T9642] Reported by Kernel Concurrency Sanitizer on:
[  206.029083][ T9642] CPU: 0 UID: 0 PID: 9642 Comm: syz.2.1926 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  206.038933][ T9642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  206.049109][ T9642] ==================================================================
[  206.111954][ T9647] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  206.123753][ T9647] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  206.183349][   T52] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  206.202826][   T52] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  206.214798][   T52] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  206.223881][   T52] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  206.511842][   T52] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  206.924338][ T3522] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  206.925254][ T3533] Bluetooth: hci0: command 0x1003 tx timeout