last executing test programs:

14m48.078005382s ago: executing program 32 (id=211):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000"], 0x48)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0\x00', 0x18001, &(0x7f00000012c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYRES32, @ANYRES64], 0x8, 0x2f0, &(0x7f0000000880)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = socket$kcm(0x29, 0x2, 0x0)
sendmmsg(r3, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001740)='d', 0x1}], 0x1}}], 0x1, 0x4000050)
r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00')
preadv(r4, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xfffffffffffffccc, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
fgetxattr(r5, &(0x7f0000000000)=ANY=[], 0x0, 0x0)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x18)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x1600)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x3b0, 0xffffffff, 0x3b0, 0xffffffff, 0xffffffff, 0x3b0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0xffff0000, 0x24, 0x0, 'syz1\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'erspan0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x2c, 0x10, 0x1}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000004c0)='mm_page_alloc\x00'}, 0x18)
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/mem_sleep', 0x141a82, 0x4)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f00000002c0)={0x3, 0x7, 0x0, 'queue0\x00', 0x10000})
sendfile(r9, r9, 0x0, 0x6)

14m44.683006165s ago: executing program 33 (id=241):
setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xff, 0x55c, &(0x7f0000000440)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000f40)={0x2, &(0x7f0000000f80)=[{0x3, 0x1, 0x6, 0x7f}, {0x8, 0x1, 0x81, 0x8}]})
mkdirat(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e0000000000", @ANYBLOB='\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000300))
r3 = inotify_init()
readv(r3, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300), 0x3, 0x42f, &(0x7f0000000940)="$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")
ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @loopback}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e22, @loopback}, 0x40, 0x0, 0x0, 0x0, 0xfb, &(0x7f0000000200)='gre0\x00', 0x5bc2, 0x8, 0x2})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=ANY=[@ANYBLOB="7c0000001000ffff25bd7000fddbdf2500000000", @ANYRESDEC, @ANYBLOB="0000000021280000540012800c0001006d6163766c616e00440002801000b182dbf3c1ab07c7245dcef8d03197cb8f3182ea16095d4d3649c01cb3c4ce77a53ff46b6c26c13f307d82945568dee505800a000400aaaaaa2aaaaa0000080001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000002)
lsetxattr$security_capability(0x0, 0x0, &(0x7f0000000140)=@v2={0x2000000, [{0xe6f, 0x5}, {0x7, 0x1}]}, 0x14, 0x2)
pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="49ad350c9dfd74c754bd02000000040000000800000001000000800000009b792101b3e9ff245c9aaf4b811f397a37f076f181c5ead2b2a21138bcd39eb81b17ab352e307c12af75bbb5ab12c7bd135dfb9f4340235c9447dbe402ea30fdee5901e10eca8450411674fbeb5cafae623532572c7d757b883dfb069f8c4ecb36dffbca5b97d4de0bda1d0403b797e258be38799fcbd28e7c903fca85dd0a63be86b9f383851f6d57d0fcc3ae75d996180b92b4b1bbc6a7cfed7cd75ed4bf910c8f", @ANYRES32, @ANYBLOB="a800"/20, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r1], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5}, 0x10)
r6 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x41, 0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000010}, 0x804c)
setuid(0xee00)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x89fc, &(0x7f00000006c0)={'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
socket$l2tp6(0xa, 0x2, 0x73)
epoll_create(0x159d)
socket(0x28, 0x801, 0x0)

11m1.601767533s ago: executing program 4 (id=3341):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_sctp(0x2, 0x1, 0x84)
syz_open_dev$rtc(&(0x7f0000000040), 0x1, 0x151283)
r0 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = timerfd_create(0x0, 0x0)
readv(r1, &(0x7f00000003c0), 0x0)

11m1.54238117s ago: executing program 4 (id=3342):
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x145542, 0x0)
r1 = openat$selinux_access(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$selinux_access(r1, &(0x7f0000001c00)=ANY=[@ANYBLOB="73797374656d5f753a7b626a6563745f723a7379ea44e85a7374656d645f6c6f67696e645f73657373696f6e735f743a733020207573722f7362696e2f63757073642030"], 0x54)
r2 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000000), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0b00000005000000020000000200000005000000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000edd837fa427e50e0834a854cc65e9e2e08711bd34b9b31d1a9b19e7f14f427be81625a23122fe61b715669f93e67c2758b1a8a275a69618ace34b42dc477b29379ca791e2b195dd4c5d7366e00bb7632a8978761c0bf225991a79e993f235df25afee24d7c1026455845b3f9d3edd4150308b165fc1dd17cfdf03009b10d57b00718fab980bd2fbcf9149edb824d3bfba253bfcfb56c"], 0x50)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
io_uring_setup(0x7268, &(0x7f0000000200)={0x0, 0xca6a, 0x40, 0x3, 0x11b})
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESDEC=r5, @ANYBLOB="0000000000000000b7030000001f000085"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@obj_user={'obj_user', 0x3d, 'uid>'}}, {@uid_gt}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$eJzs3d9rW1UcAPDvTZP96rQdjKE+yGAPTsbStfXHBGHzUXQ40PcZ2qyMpsto0rHWgduDe/FFhiDiQPwDfN/j8B/wrxi4wZBR9EGFyk1vuq7Nj7bLTF0+H8h2Ts5Nzv3m3u/NOfcmTQAD62j6Ty7i1Yj4JokYWdeWj6zx6Opyy4+vT6W3JFZWPv09iTMbnivJ/h/OKq9ExC9fRZzIbe63trg0W6pUyvNZfaw+d2Wstrh08tJcaaY8U748MTl5+u3Jiffefadnsb55/s/vP7n34emvjy1/9/PDQ7eTOBsHs7Y0rh50cWN95Wjpn6xUiLMbFhzvQWe7SdLvFWBHhrI8L0R6DBiJoSzrgRfflxGxAgyoRP7DgGqOA5pz+x7Ng/83Hn2wOgHaHH9+9dxI7GvMjQ4sJ0/NjNL57mgP+k/7GH1w5/bdB3duR+fzEPu71AG25cbNiDiVz28+/iXZ8W/nTjVOHne2sY9Be/+BfrqXjn+SGxGb8j+3Nv6JFuOf4Ra5uxPd8z/3sAfdtJWO/95vOf5dO3SNDmW1lxpjvkJy8VKlfCoiXo6I41HYm9Y7Xc85vXx/pV1bGv/dbPyX3tL+m2PBbD0e5vc+/ZjpUr30LDGv9+hmxGstx7/J2vZPWmz/9PU4v8U+jpTvvN6urXv8z9fKTxFvtNz+T65oJZ2vT4419oex5l6x2R+3jvzarv9+x59u/wOd4x9N1l+vrW2/jx/3/VVu17bT/X9P8lmjvCe771qpXp8fj9iTfJwf3nj/xJPHNuvN5dP4jx9rnf+d9v908vX5FuO/dfhW20W7xv/3ukn6U25usffO0vint7X9t1+4/9EXP+w4/sb2f6tROp7ds5Xj31ZX8FleOwAAAAAAANhtchFxMJJcca2cyxWLhUbb4TiQq1Rr9RMXqwuXp6PxXdnRKOSaV7pH1n0eYjz7PGyzPrGhPhkRhyLi26H9jXpxqlqZ7nfwAAAAAAAAAAAAAAAAAAAAsEsMt/z+/2rbb0P9XjvguWv8sMHefq8F0A9df/K/F7/0BOxKXfMfeGFtP/+dGYAXhfd/GFzyHwaX/IfBtdX8L4w85xUB/nPe/2FwyX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqfPnzqW3leXH16fS+vTVxYXZ6tWT0+XabHFuYao4VZ2/UpypVmcq5eJUda7b81Wq1SvjE7FwbaxertXHaotLF+aqC5frFy7NlWbKF8oFf2wYAAAAAAAAAAAAAAAAAAAANqktLs2WKpXyvELbwpno5RMmu++VP5Ot0o4ent8tUSj0tNDHgxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbPBvAAAA///YBDOu")
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000001e80)={0x8, &(0x7f00000005c0)=[{0x3, 0x6, 0x96, 0xffffffff}, {0x40, 0x2, 0x2, 0x4}, {0xfff8, 0xb, 0x1, 0x400}, {0x9, 0xd, 0x9}, {0x5, 0x4, 0x7, 0x5dc}, {0x4, 0x0, 0x2, 0x2}, {0x3, 0x9, 0x4, 0xfffffff7}, {0x7ff, 0x7, 0x68, 0xd3c}]})
r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
open_by_handle_at(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="08000000020000000b00000000000000"], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0)
sendmsg$kcm(r2, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0)
fgetxattr(r0, &(0x7f00000001c0)=@known='security.selinux\x00', 0x0, 0x2)
lsetxattr$system_posix_acl(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000a00)=ANY=[@ANYBLOB="0200030001000100009eb43b5dddd035cbd8f6102b970000000400060000000000100001"], 0x24, 0x3)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5f}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r8}, 0x18)

11m1.244980734s ago: executing program 4 (id=3343):
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x145542, 0x0)
r1 = openat$selinux_access(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$selinux_access(r1, &(0x7f0000001c00)=ANY=[@ANYBLOB="73797374656d5f753a7b626a6563745f723a7379ea44e85a7374656d645f6c6f67696e645f73657373696f6e735f743a733020207573722f7362696e2f63757073642030"], 0x54)
r2 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000000), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0b00000005000000020000000200000005000000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000edd837fa427e50e0834a854cc65e9e2e08711bd34b9b31d1a9b19e7f14f427be81625a23122fe61b715669f93e67c2758b1a8a275a69618ace34b42dc477b29379ca791e2b195dd4c5d7366e00bb7632a8978761c0bf225991a79e993f235df25afee24d7c1026455845b3f9d3edd4150308b165fc1dd17cfdf03009b10d57b00718fab980bd2fbcf9149edb824d3bfba253bfcfb56c"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
io_uring_setup(0x7268, &(0x7f0000000200)={0x0, 0xca6a, 0x40, 0x3, 0x11b})
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESDEC=r4, @ANYBLOB="0000000000000000b7030000001f000085"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@obj_user={'obj_user', 0x3d, 'uid>'}}, {@uid_gt}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$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")
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000001e80)={0x8, &(0x7f00000005c0)=[{0x3, 0x6, 0x96, 0xffffffff}, {0x40, 0x2, 0x2, 0x4}, {0xfff8, 0xb, 0x1, 0x400}, {0x9, 0xd, 0x9}, {0x5, 0x4, 0x7, 0x5dc}, {0x4, 0x0, 0x2, 0x2}, {0x3, 0x9, 0x4, 0xfffffff7}, {0x7ff, 0x7, 0x68, 0xd3c}]})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
open_by_handle_at(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="08000000020000000b00000000000000"], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0)
sendmsg$kcm(r2, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0)
fgetxattr(r0, &(0x7f00000001c0)=@known='security.selinux\x00', 0x0, 0x2)
lsetxattr$system_posix_acl(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000a00)=ANY=[@ANYBLOB="0200030001000100009eb43b5dddd035cbd8f6102b970000000400060000000000100001"], 0x24, 0x3)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5f}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r7}, 0x18)

11m1.081862003s ago: executing program 4 (id=3349):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f00000005c0)=ANY=[], 0xa, 0x2d1, &(0x7f0000000c80)="$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")
openat$sndseq(0xffffffffffffff9c, 0x0, 0x400000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x810)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
pipe(&(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r0, 0x0, r4, 0x0, 0xa85, 0xf)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x74)
r6 = inotify_init1(0x800)
inotify_add_watch(r6, &(0x7f0000000c00)='./file2\x00', 0x20000536)
r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
writev(r7, &(0x7f0000000300)=[{&(0x7f0000000140)='\n\x00\x00\x00', 0x4}, {0x0}], 0x2)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0)
ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000000f80)={0x1, 0x7f, @status={[0x5, 0x1, 0x8, 0x3, 0x8, 0x2]}, [0x7, 0xa, 0x4, 0x4, 0x9, 0x4, 0x8000000000000001, 0x4, 0x4, 0x8, 0x1, 0x8e4, 0x4, 0xffffffffffffffff, 0x5885, 0x3ff, 0x0, 0x5, 0x97a2, 0x5, 0x401, 0x1e, 0xfffffffffffffff8, 0x81, 0x80000000, 0x8000000000000001, 0x5, 0xe9a, 0x2, 0x9, 0x6, 0x9, 0x0, 0x9, 0x3, 0x6, 0x1ff, 0x100, 0x8, 0x0, 0x7, 0x8920, 0x7, 0xde0c, 0x2, 0x8, 0x0, 0x45, 0x429, 0x401, 0x1, 0x0, 0x8, 0x35fa, 0x7, 0x9, 0x3, 0x8, 0x9, 0x5, 0x1, 0x4a, 0x0, 0x7fff]})
r8 = syz_io_uring_setup(0x54a9, &(0x7f0000000980)={0x0, 0x0, 0x10100, 0x2, 0x29}, &(0x7f0000000180)=<r9=>0x0, &(0x7f00000000c0)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r8, 0x2def, 0x0, 0x0, 0x0, 0x0)
r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101601, 0x7f)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r12 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f051b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x1, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r12, 0x0)
syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r11, 0x40047211, &(0x7f00000000c0))

11m0.582905949s ago: executing program 4 (id=3362):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x21002, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0xfb, 0x1203, &(0x7f0000000a40)="$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")
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x145542, 0x0)
r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_access(r1, &(0x7f0000001c00)=ANY=[@ANYBLOB="73797374656d5f753a7b626a6563745f723a7379ea44e85a7374656d645f6c6f67696e645f73657373696f6e735f743a733020207573722f7362696e2f63757073642030"], 0x54)
r2 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000000), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0b00000005000000020000000200000005000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000edd837fa427e50e0834a854cc65e9e2e08711bd34b9b31d1a9b19e7f14f427be81625a23122fe61b715669f93e67c2758b1a8a275a69618ace34b42dc477b29379ca791e2b195dd4c5d7366e00bb7632a8978761c0bf225991a79e993f235df25afee24d7c1026455845b3f9d3edd4150308b165fc1dd17cfdf03009b10d57b00718fab980bd2fbcf9149edb824d3bfba253bfcfb56cec04fbb6c7f24856735a99e97f008107f5072f911a6c42793e"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
io_uring_setup(0x7268, &(0x7f0000000200)={0x0, 0xca6a, 0x40, 0x3, 0x11b})
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESDEC=r5, @ANYBLOB="0000000000000000b7030000001f000085"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@obj_user={'obj_user', 0x3d, 'uid>'}}, {@uid_gt}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$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")
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000001e80)={0x8, &(0x7f00000005c0)=[{0x3, 0x6, 0x96, 0xffffffff}, {0x40, 0x2, 0x2, 0x4}, {0xfff8, 0xb, 0x1, 0x400}, {0x9, 0xd, 0x9}, {0x5, 0x4, 0x7, 0x5dc}, {0x4, 0x0, 0x2, 0x2}, {0x3, 0x9, 0x4, 0xfffffff7}, {0x7ff, 0x7, 0x68, 0xd3c}]})
r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
open_by_handle_at(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="08000000020000000b00000000000000"], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0)
sendmsg$kcm(r2, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0)
fgetxattr(r0, &(0x7f00000001c0)=@known='security.selinux\x00', 0x0, 0x2)
lsetxattr$system_posix_acl(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000a00)=ANY=[@ANYBLOB="0200030001000100009eb43b5dddd035cbd8f6102b970000000400060000000000100001"], 0x24, 0x3)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5f}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r8}, 0x18)

11m0.010459525s ago: executing program 4 (id=3366):
getgroups(0x3, &(0x7f0000000400)=[<r0=>0xee00, 0x0, 0x0])
chown(&(0x7f0000000140)='./file0\x00', 0xee00, r0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0xee01, 0x0)
setresgid(r3, 0xffffffffffffffff, 0x0)
sendmmsg$unix(r1, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000380)="9a", 0x1}], 0x1, &(0x7f0000002cc0)=[@cred={{0x1c}}], 0x20, 0x4005}}], 0x1, 0x4000050)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58)
syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCVHANGUP(r6, 0x5437, 0x2)

11m0.010258555s ago: executing program 34 (id=3366):
getgroups(0x3, &(0x7f0000000400)=[<r0=>0xee00, 0x0, 0x0])
chown(&(0x7f0000000140)='./file0\x00', 0xee00, r0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0xee01, 0x0)
setresgid(r3, 0xffffffffffffffff, 0x0)
sendmmsg$unix(r1, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000380)="9a", 0x1}], 0x1, &(0x7f0000002cc0)=[@cred={{0x1c}}], 0x20, 0x4005}}], 0x1, 0x4000050)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58)
syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCVHANGUP(r6, 0x5437, 0x2)

10m22.233142813s ago: executing program 7 (id=3891):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, r1, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x8001}]}}]}, 0x9c}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000274531c74a4e501895631fab12a507010100000000003079c6692481ca60d2a18cf0b1539ef0157c45e06e0c1413262dfc609270dd4cebbef0eee672ef718cd462f2deebc82e86611827226a0a9439d4250e5806e3a42db099e70bd1dbc0768f387c61a164a8b08a02078d2a07b2743c7420cca8282f7b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000ad00000000000000bf91200000000000b7020000020000008500000008000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x89b0, &(0x7f0000000000)={'veth1_to_batadv\x00', @ifru_addrs=@vsock={0x28, 0x0, 0x2711, @local}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f00000004c0), &(0x7f0000001c40)=r6}, 0x20)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r8 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
r9 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r9, &(0x7f0000000a40)={0xa, 0x4e02, 0x7ffe, @remote, 0x9}, 0x1c)
sendmsg(r9, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

10m22.00407811s ago: executing program 7 (id=3898):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="2b68756765603ac4"], 0x9)
syz_io_uring_setup(0x49e, &(0x7f00000004c0)={0x0, 0x79af, 0x80, 0x7fff, 0x2b6, 0x0, r0}, &(0x7f0000000340)=<r1=>0x0, &(0x7f00000000c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket(0x840000000002, 0x3, 0xff)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0xc804)
sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10)
sendmmsg$inet(r4, &(0x7f0000000240)=[{{&(0x7f00000007c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e1504511602000000", 0x13}, {&(0x7f0000000a00)="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", 0x12c}], 0x2}}], 0x1, 0x4004040)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r7 = openat(0xffffffffffffffff, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
sendfile(r7, r6, 0x0, 0x3ffff)
sendfile(r7, r6, 0x0, 0x7ffff000)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
r10 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0xffffff01, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYRES16=r3, @ANYRES16=r9, @ANYBLOB="796100000000000000ab13bb853fa8ae312e9a0e15df42180c4b1c7b5a3b204496e179e100c61681dafa0400000043a6cdaed9bec20783e97b7f865ce203d314b0f82b4f67309f99d904d9e22fb65ad35cb19d7be585b6050d69b8d0f91e192fe2f0a3982eb45b65340d0fd20241d08634f17d26f47a651eff109cdb69905d8a2fe0ebaea40b4b"], 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000000)

10m21.894101254s ago: executing program 7 (id=3902):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0xfffffffc, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00'], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@nombcache}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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")
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x47, &(0x7f0000000840)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x800000}, 0x18)
r3 = socket(0x1d, 0x2, 0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1e0}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000006c0004002bbd7000fcdb23b65b4e465c5e4dbf", @ANYRES32, @ANYBLOB="c000020080010000"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x4000004)
prlimit64(0x0, 0x3, &(0x7f00000001c0)={0x6, 0x6400}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x62, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0)
ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000000280)={'bridge0\x00', @ifru_settings={0x43, 0x0, @sync=0x0}})
pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000380)={0x3fffffffbfb, 0x5, 0x5, 0x7f})

10m21.593389719s ago: executing program 7 (id=3910):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5f}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ///+864GIw8IlpAdcIJ0Yrq6u+//pzLASAS5d6/5/vwN5nCzASCn2NQIQGGX/9/3/c6XpQyUEAAAM3HRrSgql7Ou96SgUSqWIm62fBSgmaxvVynxEPBERv50pXmvWF1pbJn2MEQAAAAAAAAAAAAAAAAAAAAAAAAAAovVU7iRSAAAAYKRFFP6U/LL9LP+5meenu78fmEj+1fpJ4ImIeOuHb3z/7nKjsbvQXP63o+WNH2TLXxzGNxgAAABAt851emv+z2FnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCoee/B2yudqY+XTw0q7l++EBGzefHHY7I1n4xiRFz/exLjJ7ZLImJsAPEP70XER/PiJ820jkLmxR/Em3BO/JjN3oW8+DcGEB+usvvN489ref2vEM+25vn9bzzif+ofVO/jXxwd/8Z69P+bfcZ46p2flXvGvxfx1Hj+8acTP+kR/7k+43/9awcHvdalP4qY63z+tI54JyMcl8qNrZ1yff/g9sbW8nplvbK9uLjw8tIrSy8tzZfXNqqV7N/cGN95+ufvn9X+67mff0mWTe/2P5+zv7zPpP+8c/fBhzuVw9Pxbz2XE/9XP85ecTp+IYvzqazcXD/XKR+2yyc989PfPHNW+1eP2198mP//W7122u1UR3m63z8dAOAC1PcPNper1cruyBaaV+mPQBoKj2DhWwPdYZqmabNP5ay6HxH97CeJAbe0kJ/PcaHnEWDYRyYAAGDQjk/6h50JAAAAAAAAAAAAAAAAAAAAXF2X8ZS17pjHj0BOBvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgfhvAAAA//89e9P5")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x1, 0x4}, 0x0, 0x0, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
r4 = syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2cb, &(0x7f0000000ac0)="$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")
mkdirat(r4, &(0x7f0000000080)='./bus\x00', 0x1c0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)

10m21.228373163s ago: executing program 7 (id=3916):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r0}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)={0x30, r2, 0xc4fc9e906872338b, 0x70bd2e, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x37}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x30}}, 0x40000)

10m20.884069033s ago: executing program 7 (id=3924):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)

10m20.837625439s ago: executing program 35 (id=3924):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)

4m2.889078104s ago: executing program 6 (id=10058):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003700)=[{{&(0x7f0000000000)={0xa, 0x4e1d, 0xdd9b, @mcast1, 0x6}, 0x1c, &(0x7f00000014c0)=[{&(0x7f00000000c0)="ec830da0e4f60e19cce05609b8167f59dc3b5451e48dcb49c5dccc4075f045028ca51c7cb8f790dc370314b187d52572912e4f2b893c9bf9dd9ff39476cffbff8a3ff3decbebd474956d78978ac76b908c0cf4dd6718ac3a55c7087b8f7d", 0x5e}, {&(0x7f0000000040)="623f9f8f7e69573d03292d9f016570e17e007ef32b85c4bb9ba2ca8863102237507c2b1f4d21e856cbb106afbf8a81f62f5f35076dee21edb9af3e1f", 0x3c}, {&(0x7f0000000140)="d7f623d9dababcb0f96d8a00fae62fe06efe8a3adf1790d3169e0a207879a6b079ee8d534c22ecc479044af5212d593b18f583e27907670cd4e4e744e6c83969819b9a3b44e8f56b79be04fd2ee6afc8065c6ed687bd1b50ec98341bbdb39c043b9a91f2a38dc154b89c7feb7e38e79f6fd85058bbfe6bea6a3f83df85ca41bc9ef1a29dfeeebed0d7e5743636bcb8c2a07a1e474b0d", 0x96}, {&(0x7f0000000200)="eef7010ff05b086371bd2e531ac79c2e019a4fba32905e0fa37db53a6debc4b65db3b7f24aaf23a3e2710bd08d5b154ff2f158aa2a0b5a5bfa10847864094b8222e025b1632bb6c6e3d4eb648973846295e1f765f708cf1bdae20fea519c7ba45ed18762fb25d292e49bd83f8f3d0c6420a283afcd38afb5fcc5da704f87e758e3811db7e70bc8da52d477545f9a7961558b39755b6d3ada34b8dfb13724bf0c5212f27042e0362b3ba6e9bf81335c251dc89b773d", 0xb5}, {&(0x7f00000002c0)="6678e765972978430381c6535a55f5bd79fde5fa4d0d7de784d4caa717ccc8103ea2fbae08d29020b3033cd530d467de152fff6234f6091d756a82894747f7d5737dc518696202db1a9131b8105e10fd8491d3f74089e981a1cfd9fb34e38ca22e470f1f3ab4f219945955aea6b59dfef39a8cce074e41", 0x77}, {&(0x7f0000000340)="3211ce85047488703d5595692756c4e2375b36d028d714f2a161af671dfd0af8059743917ae14f2070e442286718d965ddf6f036fcaee7c50900000014122f253d17ee0719affafd471395574687f49dd402ec30784f457a2e32ad53b015f8e5e78d98cd7e593b0ffa3c44eab89c5badab0000", 0x73}, {&(0x7f00000003c0)="82dac70803d5c5bb119c7467713f6b33a9950bad3ae29b45c150334f3358dc512134985f04b3793eeab1a7c258e02f9c918db910eb189d5ffe7b7b20065a1b5d608ebf280c1c8542e15d78ed255749571c960c3718dd4e033da4eb0ae3e133195b7330912867ff090140fabf6ccce68442ad23e3d8bd053f546cde37ce757e46bc0863d7d633dd98cc41f41e7f05f6baf205763947d1205438b6efafbf28a273762f0d2c7bde5e8c809afafbb1ef70222148849e6b1d0cf40b07f5f34bf5ec9f7d738bacdf5669b2291f0f864e459f2b9d00236e447572c6e71887c712abfc2105cdd46eaba638794d47ff0e468b735fcaf2933bf9d6d3f5", 0xf8}, {&(0x7f00000004c0)="4f2cef1cb9e3e2af945dd226e11e93647dc6c447086c2c6483a7349642739899390424070ce92549b99f023ec8711e6cfee954a12b91841f465d97fa5ba198b28b33330314e5ec548a4d6d299974d6e95ae08ed43c12c6e3e7196f9834519f58245192f041dc183f943efb169eb5e1200c5a48ab01c10a5a0a6b6a81d0549b4fb42a45e36a3cfa3161c042d909fb83aaffdfb321416a103668f7e7e1d5a272c8855e1b26b954396c4364468bd6c1fe36a6949b1f388e98702f56f8efbe39ab580cae7401f619880e87ecbedbcd073cd980ee2434ae9cae3f9ff9eac208d7c6c5244c393ab86b0771af12e3e7f9f8e60dcb87336d5e5a623e96016b1bb0a97ecf361da066002ba2fa59f6e0cbfbb5dadc34317b0f8c9e260b16ac363703d80eca602bae8afe8cebeb7996d75ad35a629fb3e9fe214e1f7e7c904194a012cb5d4fe54e2eced05d3fd7d05c557de2e93afebdd201b25c4ff5e790cf3726c5f52181d2c0d911ae041ac9b9acd48035a9b8119890843c864d8a52222f83bd67d2041578e8ac6ae09a200f0e83a955327716f430e4c7d671244de54aff1f4154851c89051b3c14af00921d53ee39c83e4d909720cfb638bdc58b524a9167842fc2cbe118daaef7936920c0", 0x1c8}], 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000000029000000360000002b000000000000001400000000000000290000003e00000001"], 0x30}}], 0x1, 0x60040000)

4m2.815221141s ago: executing program 6 (id=10059):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000"], 0x50)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x5, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000700)={'#! ', './file0', [], 0xa, "f68f8b23fd"}, 0x10)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080), 0xd}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000008000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18)

4m2.255386969s ago: executing program 6 (id=10061):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
getpgrp(0x0)
r1 = syz_pidfd_open(0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000018c0), 0x0, 0x0, 0x1)
fremovexattr(r1, &(0x7f0000000280)=@known='trusted.overlay.nlink\x00')
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg(r3, &(0x7f0000002c40)={&(0x7f0000000140)=@in={0x2, 0x4e24, @empty}, 0x80, 0x0}, 0x2000c804)
write(r3, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x40, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000007d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a1100f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_expedited', 0xa82, 0x160)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan0\x00'})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='kmem_cache_free\x00', r7}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
ftruncate(0xffffffffffffffff, 0x5)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

4m2.142248249s ago: executing program 6 (id=10073):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x80080)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000002c0)={{0x6, 0x7}, 0x0, 0x7fff, 0xa, {0x0, 0xfa}, 0x5, 0xd0aa})
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x45, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$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")
r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000c80)={{0x32, 0x8}, 'port1\x00', 0x10, 0x20434, 0x4, 0x6, 0x400, 0x8, 0x7, 0x0, 0x1, 0x6})
r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
write$binfmt_register(r3, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x4, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000002000080000000000000000061104f000000000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c40))
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x138, 0x0, 0x368, 0x1d0, 0x138, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x11, 0x0, 0x28}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x10, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xffffff00, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0xff, 0xffffff00, 'ip6gre0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x2e, 0x0, 0x1}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {0xe6d959333babc205}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500)
io_pgetevents(0x0, 0x9, 0x8, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000000c00)={&(0x7f0000000380)={[0xc]}, 0x8})
r6 = syz_io_uring_setup(0x10c, &(0x7f00000003c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=<r7=>0x0, &(0x7f0000000280)=<r8=>0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r9, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r11}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0)
io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x80000001, 0x0, 0x0, 0x3f})
io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000d40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600004ba0014060000000000000000000000ffff7f000001fe0bfa53a8ea5ca43c152f348edefea5aa800000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0)
epoll_pwait(r1, &(0x7f0000000080)=[{}, {}, {}, {}, {}], 0x5, 0x7f, &(0x7f00000000c0)={[0x8]}, 0x8)
finit_module(r1, 0x0, 0x3)

4m1.491464494s ago: executing program 6 (id=10069):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003700)=[{{&(0x7f0000000000)={0xa, 0x4e1d, 0xdd9b, @mcast1, 0x6}, 0x1c, &(0x7f00000014c0)=[{&(0x7f00000000c0)="ec830da0e4f60e19cce05609b8167f59dc3b5451e48dcb49c5dccc4075f045028ca51c7cb8f790dc370314b187d52572912e4f2b893c9bf9dd9ff39476cffbff8a3ff3decbebd474956d78978ac76b908c0cf4dd6718ac3a55c7087b8f7d", 0x5e}, {&(0x7f0000000040)="623f9f8f7e69573d03292d9f016570e17e007ef32b85c4bb9ba2ca8863102237507c2b1f4d21e856cbb106afbf8a81f62f5f35076dee21edb9af3e1f", 0x3c}, {&(0x7f0000000140)="d7f623d9dababcb0f96d8a00fae62fe06efe8a3adf1790d3169e0a207879a6b079ee8d534c22ecc479044af5212d593b18f583e27907670cd4e4e744e6c83969819b9a3b44e8f56b79be04fd2ee6afc8065c6ed687bd1b50ec98341bbdb39c043b9a91f2a38dc154b89c7feb7e38e79f6fd85058bbfe6bea6a3f83df85ca41bc9ef1a29dfeeebed0d7e5743636bcb8c2a07a1e474b0d", 0x96}, {&(0x7f0000000200)="eef7010ff05b086371bd2e531ac79c2e019a4fba32905e0fa37db53a6debc4b65db3b7f24aaf23a3e2710bd08d5b154ff2f158aa2a0b5a5bfa10847864094b8222e025b1632bb6c6e3d4eb648973846295e1f765f708cf1bdae20fea519c7ba45ed18762fb25d292e49bd83f8f3d0c6420a283afcd38afb5fcc5da704f87e758e3811db7e70bc8da52d477545f9a7961558b39755b6d3ada34b8dfb13724bf0c5212f27042e0362b3ba6e9bf81335c251dc89b773d", 0xb5}, {&(0x7f00000002c0)="6678e765972978430381c6535a55f5bd79fde5fa4d0d7de784d4caa717ccc8103ea2fbae08d29020b3033cd530d467de152fff6234f6091d756a82894747f7d5737dc518696202db1a9131b8105e10fd8491d3f74089e981a1cfd9fb34e38ca22e470f1f3ab4f219945955aea6b59dfef39a8cce074e41", 0x77}, {&(0x7f0000000340)="3211ce85047488703d5595692756c4e2375b36d028d714f2a161af671dfd0af8059743917ae14f2070e442286718d965ddf6f036fcaee7c50900000014122f253d17ee0719affafd471395574687f49dd402ec30784f457a2e32ad53b015f8e5e78d98cd7e593b0ffa3c44eab89c5badab0000", 0x73}, {&(0x7f00000003c0)="82dac70803d5c5bb119c7467713f6b33a9950bad3ae29b45c150334f3358dc512134985f04b3793eeab1a7c258e02f9c918db910eb189d5ffe7b7b20065a1b5d608ebf280c1c8542e15d78ed255749571c960c3718dd4e033da4eb0ae3e133195b7330912867ff090140fabf6ccce68442ad23e3d8bd053f546cde37ce757e46bc0863d7d633dd98cc41f41e7f05f6baf205763947d1205438b6efafbf28a273762f0d2c7bde5e8c809afafbb1ef70222148849e6b1d0cf40b07f5f34bf5ec9f7d738bacdf5669b2291f0f864e459f2b9d00236e447572c6e71887c712abfc2105cdd46eaba638794d47ff0e468b735fcaf2933bf9d6d3f5", 0xf8}, {&(0x7f00000004c0)="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", 0x1c8}], 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000000029000000360000002b000000000000001400000000000000290000003e00000001"], 0x30}}], 0x1, 0x60040000)

4m1.366365515s ago: executing program 6 (id=10071):
r0 = socket(0x10, 0x803, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x100, 0x43, 0xa0, 0x100, 0x98, 0x1d0, 0x178, 0x178, 0x1d0, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0xe0, 0x100, 0x0, {0x0, 0x7a010000}, [@common=@inet=@ecn={{0x28}, {0x20, 0x30, 0x6, 0x7}}, @common=@unspec=@helper={{0x48}, {0x0, 'Q.931\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0xff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c8)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000200), 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x5, 0x603, 0x0, {}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{0x4}, 0x17, 0x0, 0x0, 0x0, "41a17e919880fe37279cdecc9b405030fd55cd3e7a037f6c1b1430f07adfe30f7f4c56f4146061b24ae619bb7c07e7b9ccf9e34e90c3aafea567e6025b305e1a"}}, 0x80}}, 0x44005)
ioctl$TIOCMIWAIT(r2, 0x545c, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r8, 0x0, 0x400000000}, 0x18)
write$binfmt_format(r7, &(0x7f00000001c0)='-1\x00', 0x3)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="5913fcfffffffddbdf256b"], 0x2c}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x20004000)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r10, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0xfff}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008001}, 0x80)
socket$netlink(0x10, 0x3, 0x0)
r11 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'bond0\x00'})
writev(r0, &(0x7f0000000940)=[{&(0x7f0000000440)="8f14c7a7489413478a650edb6096518e3118756039bed722330776399be13466c59004cfbee063e5b2cf0e6541505f90d247acf130c8b5cfa59d3a1249f1ee6894ac45a1183877152725232255016cb10c47ad0f7be4ee0fc65cefd8646d6a4256901f92bcbe951f100cea1259166d6bf7", 0x71}, {&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000000880)="7e7df6c83c14fe9872feb479fd137918a77cb86308288edf1d26484443ec48aad50ce2c0ac669a", 0x27}], 0x3)
ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f00000002c0)=0x4)
socket$netlink(0x10, 0x3, 0x0)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x8000000)

4m1.343333478s ago: executing program 36 (id=10071):
r0 = socket(0x10, 0x803, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x100, 0x43, 0xa0, 0x100, 0x98, 0x1d0, 0x178, 0x178, 0x1d0, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0xe0, 0x100, 0x0, {0x0, 0x7a010000}, [@common=@inet=@ecn={{0x28}, {0x20, 0x30, 0x6, 0x7}}, @common=@unspec=@helper={{0x48}, {0x0, 'Q.931\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0xff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c8)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000200), 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x5, 0x603, 0x0, {}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{0x4}, 0x17, 0x0, 0x0, 0x0, "41a17e919880fe37279cdecc9b405030fd55cd3e7a037f6c1b1430f07adfe30f7f4c56f4146061b24ae619bb7c07e7b9ccf9e34e90c3aafea567e6025b305e1a"}}, 0x80}}, 0x44005)
ioctl$TIOCMIWAIT(r2, 0x545c, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r8, 0x0, 0x400000000}, 0x18)
write$binfmt_format(r7, &(0x7f00000001c0)='-1\x00', 0x3)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="5913fcfffffffddbdf256b"], 0x2c}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x20004000)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r10, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0xfff}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008001}, 0x80)
socket$netlink(0x10, 0x3, 0x0)
r11 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'bond0\x00'})
writev(r0, &(0x7f0000000940)=[{&(0x7f0000000440)="8f14c7a7489413478a650edb6096518e3118756039bed722330776399be13466c59004cfbee063e5b2cf0e6541505f90d247acf130c8b5cfa59d3a1249f1ee6894ac45a1183877152725232255016cb10c47ad0f7be4ee0fc65cefd8646d6a4256901f92bcbe951f100cea1259166d6bf7", 0x71}, {&(0x7f0000000b40)="21a4dd73421c64f73d3af84c8e1ebace76e1a244a87a0c5373eccda54298b61c90129c5a76eca44c9fbc490c5f1fa38a7fac3c9080974285963ce56b5c077336f371f52c7d416b407511c3616088913c86da5e202227eb6546d200bfe376f360a06cde924faa8472dcad503f4cc92dd7bee8b2d59c8e9b1f706f7f55503de45c401f371448981065c9fb56965922c8f8d80ecd8b4d4d35835cbdaeb5bbfaf07a2068e07fafbc544c292431ae84309dd88e4314745a77e72f22493aa5c701edaac5310d14b2f96ad69aef088f81b881ebce5662a8c75586f7cf0c8ca5ba07dd0f6117a7475ef5b329d6e73f8bcbfeabbb55078ce6973f3d7e01566e0a78aff15aced086f5b73dee8c0ab2b419f82e9a1a013cb78f46b7a09c6f3747cad1d8f3489b4ee4382fda22472f15a5754a5b755ce698b32c14e7b1b7d6d384f33f0ff5ab301f059a75e11bf77a4d1d7bb25b83efef476affe97bd0bf7df18b4e88e3f99c5d2d2563900fc5105197571d9f168981173727e0684dc62706a2fee9e1bbd5bbb8d02b4d75827eb264057f92a80bd37695dec5b9855b620b4be3c73957b3741656d0fbb8e7fcae5c0c41eb6c5cd345382ccd3a58a358d8a26fdf86da8d8ac2dd9c5c14cca620d955d9ced4ea470bb715d04fbd817eca40fce45d15d4016d72085b1a2701bb2a011b59dd7e1cb982ae26a4745e31ad6cd114c0287570a3415fe5792d29c0ed0e78d95f35bd349b7c7eaf3a32b539c4c6a330dc69428661a41fcbe3b70c5c2d80caea8e5e9fdc7716790b8013630b5d52fc77489bc6b2bcf86af141d4a87a8803c015254016da835fa2b26ac63f16a75ff4740ee7b9153bcaf2a493ccbaac1c4e720dfa753e196c43b2707dff71cddd9d6239fc1f3c99b655331994b3919ecd0d9a66e34fae5e0985465468f461ace4b70715ef4971db9a1c42c7e88b0b43fbf09cd71d0e4427c2e9f0fbf0b5f01ee0d262f42f0d00cee35034e6a40b5f8a0228cab44fc01fd2a3bb6281c64f32b15a424049c5592425282c67f834086405198e300af83bf46ef7c9664a1728a6754ef0ad5ed908923a16a9fccf8e84f40eee02b8fa38f1d7f9a14019ee288ea18437d43d9b239ada8435892743e0484767322f9d3d1fe4f9c43ee28fee214560d3b2b37799f61b035ae45426db22275ac201117cd35f882691b168b3c0f8ceba3fb9c682c16c934a8e8975b97082f1bbf65395ebfe26c201b144d6e4f4e04b5b0063bdeae245423f0ff2608b4dbe6137a0a700e5914ea29487f42bb119b148dfa6867ec570396743ed6eff3076736e8fd68effaf81620dc524371d0b310e528bf5becbb019c9a85dcd0bbc854d281618812da5e3b38c862aa0e56cd24b1dccebc8d7c84fd1574ea9008e78771a52f19da733d9f5a54f45eccd31fba3fdd6fac1e9617b9a7bedbf754c226ce0bc1b12e08e72fc4dba9fc474ef0d5ce2299cc9dc9766c6a428dabecb6484631db64b3c5a48a5102a176af7842290ed9ef8939ec9c532732c819b34b9fa32b1ebeb0949461bfdb3cfd1767437bddc927aca508159082ed2263cfcd4f9cad2114d2ded218ea84e32a0e2f729c8e60a0824f3a2372a80bdf7c6c8686948625663a1c7abeca788802da77840e51eb6266c6b0c60226d95f3a4782d2d1454517f5e1cf3ee59c268aa4694eab05042c74c10b19b3db28437368274bd691c2201ee29c29ffec8ffa74330d8aa8e07c2c911bd2c024c9ae3f61f8fdfdfd3c91fe1f5188566feae6ab9d6722e322105adb285d5cddf0fb39e825f3beee4eec02086e973c28c88e23ebcd9fd53b78a32e737361267d1720b30c061d4f17cc7a093573f41428634fc53debf317bf4e8f9916f20e6e5e3067dedb48ae559f0708e1dad4ff8e5d300f7a4e353627d24bd8fa3b0c498fc0213b0bf950cab11a8d909ae4d66d962084e448f470ae7cd5e2dd3ce9a0aecff75bb8ea6c57d8bcec37cd2aefd6f324b053be99f5cb05b35e6ac612d8745e652c30c0bc05a3cf8c79e934440020a4d478d33bbe46ea76f77d7b553a606b9331f15c1a9997c2e2c08007efbdecc3c0681348cf8a9d8cc22819a806bcd66d7d21ea2ea59c963642d131eecce17b42a9d0beb64843a8bf604202d816750140ca73237afde55f1379be2689a64f31bb1b64c414e9f8a2c810fbd50f2b4e458a4f5a5d1de13d7fc8789171c5fe7fff2f3bb5f90e78a8d5d6644887d02f24078c3118d5f5320c52ba70f02d24392fa20e8970137d5a325218d7f8aa8355c5c4ea9f3f6bbcec1e1055fedde6ae432dcc61da4551714f43f31915966b16d4ef8bcaa4802fed22bdcf60eaf0fa81df93853fe28a34ab215d74bd6a8a238bb01f53feb0e2adea305afd1d0ddddd01b665b5f3931d15b0d5327be0d0cca3e13cb011c958417970f8dc41341cdac73acae1e791707600c375051e7afcf0eff2a46e1e9d461f9236bb67967cf93eae903c9ce23ca789ac98f92e24a900ca653030a843e2095a96c0ed11a2d2f6f324e42d6b9d073299a20917147ff37cc8692b8dd2c402b635189f4d3d6c1aff5cd266d14b5d3826695a399debb1a2d6034a52421b111b020beac2bca81aced45245b4622d3369049788c0ebdd99b9dd64123d8f04580f5b57711ea7325845c7b64796956e346c16c7f7f9e0c7eba03b2a4689dcb6a12d88475c72345b5a00583d52d5200a538feedcf36fa260a9b2789a4f8a2ae695839e30ba9c8a0ca6230309812c7d8af4437d0e12ad647e802344d029a60be1620f73533e50ccce833691fb5a448c21967f5f78d66dc9ed4cffa0f2cda477b492865167d1b9add16ce737d928bd1d944511c2066350d0b132ac20579974a3050140a1d3ca7d54fec1f4258aa3a97430d8f8b6722dd27f240c29da646e7a2e8dc7304923f5cc92bee762c3fcd048e97aa6946ac97de829eaca3e330904d923a7b8ca6a00980fd63411f48417f20743bd6dbaebb0b2331655577b10e73a5c39736e0ddc381276b64af1137803edc88cb0bf73642f7c5b075a0a79419cc562e4eae883b673d5e92750906441acf04509cbe5ece38155c52b1a31ce58e01d81f937869498b4d2256bf51b1ab295be78b9ccf51ef3b1ae04cedc258e2bbd8cd6f232758382d8cb0ecb74d47f012b8e6cc3c8433c44d4d48da4bfe7a8dcfd122f2417ec3b0f7f55f92b894e27f0ab749d37fce475009612f317228ec7715b54d8dc6182f5f46ff0a3bbddce3089fd594fda6908945db7949fafd0efa2c0d97bd059960a214a3ff316aec06828f491af396c062f37a649e76ac1b139d453b3ff74a70817fca40d00394fc057c36ce199416605e4605406a9912e0add12cef94822bf97af670582719f44c9385e7e35cb67b7c68aa0a78e31398b263e6ddbd13f6bab40b375a88cbeb9987364f9d6140396be32130eed10ad73c4e8f376678c0f32601ae6e7e8ce44027d35e906209e947fbf3c909b3c1175ce02f5bef87ec4d33d8d01cc507664c055472721ed4473541235369e9c4b7ac2abd6a7250fa957a55b2364f5db83a14708e8fec04fe63fd232298797cb1802ef0859c54bc6c230359f83cd7082b5cb229d0fcd4591c0f287c263c0b50ff4170d55223c010300a3a355314c688bf79c08515e3317819e1b1df801f01569aa20adbd03fbb0091bb23616ee0e8c80af7803954c3ea861ad7c610d18fc19d9f3176de0ea826c881b06664c46775686341e740e9ff00f02ad6292cc63988055e93354f0c350e302b2dcbfe9e57f06c3c49d5ad3e87288f26aac1a18e641d52e4f2664d89452b1a7f2dafd374e770c8d1f851073a7d6ed878e599352ffcdd5c2a8ab016a67d4a0f9fd6afacdf31d4a7cc34e982c08f41926fc6c9d5ffe4c75307fe2cfd7af5190638a09e6390d2dba55002163f9fc670b66bc99acaf270941d95ce97662131acd192ff3c1db69b01c208fea284b0d74dffe6c80b8ef6c88ec643463dff179254b715f5dc98a04d94437e8bf25d8d9f6bb022e9f00672d8488bd50cc19ad0135ebe48ea04a420fee2b14e90029c9465223a0b4805f7e13c2839d16b27b2ab7daf619cd02553d7e9be21e39f3bb19ceb8b2e685644640a55f0ba44dc8ae23df7f92cfdc1942fc627dc9da85dc5a03b12b79d7a462162be014b6ad1dac082c852246ecb65a20c110fe3e892b5f5fb498ec162e999c1c534d32d75093b9263e8e84f9ac70d68c52ea9f24db452a3a462390231f2fb8c2a2947dcde1fb047823523761e4f82bd838a0b1b22dbd2e9c585b145b66879da0946b102ca765bd9528e2ffed72f2cbdc0cca0df13aa7a0fbf397fc20edb7b47371180a5b5841f5a83b40bc7d5ec33fbe35f128d962d8f4b927189b128fe4a3700eb0a3659fb2ab6afc7fff066469d3ea33dc23500c6e97c4f2abd175c22450e263c997b93327c808838e8218e5e0ea2fd34b84453968395f7ae80d7cc70c54d4b8fe239be6354748ed55cfbbc39a28c9878d1ddaf330461a0c56e6f130eafa0144ec77d763fb33996dff71348599ea88f42a7c9566252141545b2d93f459176739cd3ac8319099404a4705742124ffd862da93c91b7f17b7b63e8d87a70f13a2ffeb6af51e1eaa1b0d9706a2e5fbdfa2b8219b41828f45d86095eb39dc911244be8a75dff144220730ab0cbc5e4174c4ff1b77ad3c2c76214d0fc0777bdc861edbda9fd099d5a90b53c848f61e48a272669e52771e96da21a13f59d379bb508fbc7276594955a8dc6878a8feac99cadc7d2c6af875b116a557638b65c2fe0673113d2e0cbcf5d509e81d68ea95c5e63c4c23e5c8492d401315f86e70856699d98c6c37f8899d383ac8a0337ecc14d5ded992426b74955b1022e410d1ea62aa8ff70c05cb2bcf59f32b3242db7fe1253c1133179cc06414fcdfb01311e915f9689cc6ae19ac28905c092f51475106be54d5c5af4902255ba30ef309fbf9857b307db1e64806d42d3b9725d15d53b05210056da5458afa78addc3910ee575811fb92cce8485f3e97626d82ecc7e036b1d365acc8ff0b50a3e6a01cc12b45ea5dd80221f2c830f542b4bfc2096cf84268e8f97b0f7b15b41fff2ef3eb6815d70b5516e45c4462231efd83e8a14ecba58399306e34941677e201277cd41f763a4a6f479d59026e23564f885740fe589eda133d1f2e58a45de1c891e43e56a25a395744567f3e1a4ec58b63c275cd33b524dfcab5359ad18e565f4363c2b3637f94e49f8d07d21e2000479021fa753bbe5cde6c1a6c1229c3845caefcb804ffd0c388f5a8fc5ab4987c988b51d8f8f2d345dca4211bd771e5781b34069c1843b5db77530961858e597e3908ceaecd86125ef2cd9b9cd9785cfe29928e2702385dc1a70c7d450930be93d69d4d6d968831d106260f524e6d807febbd8b16e12107adfb909074fa9f9490ee3da590e25045c2c0a2a5fb0e4748bd08f33d49a07c1bf558c464601d89cfdf1d9625a6c163f579b386a225dec3b7fb7f936f227defedfa3223a63e35d8488f22bc34392250faff497abf3a953ee454934f58debcdaeeadb5eddcffc83e5d694580eada5caf54cc9fe596cd9dd4f46076babda5ff789444d152311e8ee07a5abed7fc526f5d2e4c02010a857d9324d557ab1b87bd7342316e0b8a2729180ecd7c6a17e75dcad60d0fbceb713577f4ab9290f9d25e6f9cacd238dc299574ba1040cb6785583d2994b5099564e62ad969911d1990992020a2560ed356b898d240296bd55996e35d89d2da240a157d55bb6396b06f56bc719a7ddcc428fe66fddc790", 0x1000}, {&(0x7f0000000880)="7e7df6c83c14fe9872feb479fd137918a77cb86308288edf1d26484443ec48aad50ce2c0ac669a", 0x27}], 0x3)
ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f00000002c0)=0x4)
socket$netlink(0x10, 0x3, 0x0)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x8000000)

2m12.613419827s ago: executing program 5 (id=12226):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0)

2m12.58341352s ago: executing program 5 (id=12228):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xa7, 0x1, 0x0, 0x0, 0x0, 0x4, 0x512, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x219, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0xd9a, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x89, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd6)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="0213f80303"], 0x18}}, 0x2000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x32)
process_vm_readv(0x0, &(0x7f0000000a80)=[{&(0x7f0000000340)=""/22, 0x16}], 0x1, &(0x7f0000000f80)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0)
syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000a80), 0x1, 0x5a3, &(0x7f00000002c0)="$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")
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000043c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r7, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = gettid()
process_vm_writev(r8, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
execve(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)

2m11.928524256s ago: executing program 5 (id=12241):
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0b00000005000000020000000200000005000000", @ANYRES32, @ANYBLOB="000000f0000000000000b27b878d88b5eb512df684591f87f7b45b0a3a6721289687506640b642977a60737f4b4596d1846e6e064d4d04bae86cbf853f413b9a58337a20e8aeb95f08dd53e43eb0d2b22ed82e6e9f428c4142d551546f23a907633785caa85ce2e44d33a81c9d8c9270bc8dab92b0b7534ed1173eb3695142b9e827e5", @ANYRES32=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="06d19c1f26b9125205ffff48a82301bb30d70ae8c0ca83116201b49c94cdc3119e019694a5242d042272558695a8fcf636bc0e783033c75614f50b800027a2cabfd6f92da025a27f8d9997f2d37c97800ca17e86e529f5114b16966230b5cc06497fb2d326fe9d1e59124dbc802b86a08d5dd1afd2c491718cdc45604e6e11bd04e76958ee1e806194e72188038d6f8e59a6633b4c64a6bb7b07ca7523900f06dfdbc4272606372b4929d4aafb299dadca15e5611311691434b7fb207deb04a75b3e6b80f987a4cc4ffa2abe1656d6dabe324c2aad913de652617f", @ANYRES32, @ANYRESHEX=0x0, @ANYRESOCT=r1, @ANYRES64=r0, @ANYBLOB="e1f3bdffc00e018ab00d940b78dc0858de18aff2b90971cc6059e262df7db726c9c599"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r3, 0x0, 0xf7}, 0x18)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002", 0x8a)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r5, 0x0, 0x2b, &(0x7f0000000d00)="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"/275, 0x113)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="02130000020000000000000020000000"], 0x10}}, 0x0)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x20000081)
fcntl$getownex(r6, 0x10, &(0x7f0000000340)={0x0, <r7=>0x0})
pipe2$9p(&(0x7f0000001900)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
r10 = dup(r9)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x4, 0x7ffc0002}]})
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYRESOCT=r9], &(0x7f0000000380)='syzkaller\x00', 0x2000, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaebe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r11}, 0x10)
arch_prctl$ARCH_SHSTK_ENABLE(0x1003, 0xf0ff1f00000000)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB="6b00aa68302dacedfe0a7f95c664d885c106381837e96260701afc545f3906ffd69ea8d91ff5c6b323f4c673c2bdb64f3e144565c4d718a6b9f9098bc639bc1e4b56abfa4a264e7635440adebd2f417426f7b0e1f04287688a4a971b1cfbf7953a0ef1866e5f5ccf5220ef4122fc74fd1688901d6219e67e855df4f819c5139dcead981eb50661002e6e68d888ed53f0572b4a9cbc8b742418de1d1eda7a6ad8b7a8a4af9ab9311d345cf29bb937a91b3967159df6a79090fab104e6c46b48f9c2c68832ca442efb7284642c4a6b7d6d1a8dff9c14"])
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x8, 0x3, 0x1, 0xf0, 0x0, 0x7, 0x5000, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f00000000c0), 0x8}, 0x11010c, 0x400, 0xfffffff9, 0x4, 0x7, 0x6, 0x7, 0x0, 0x423, 0x0, 0x2}, r7, 0xf, r10, 0x1)
close_range(r5, 0xffffffffffffffff, 0x0)
r12 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r12, 0x6, 0x0, 0x0, 0x0)
fsmount(r12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0x4, 0x4, 0x4c8, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x3f8, 0x3f8, 0x3f8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x198, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x6, 0x7}, {0x1, 0x1, 0x4}, {0x4, 0x5, 0x5}, 0xfffffffc, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x528)
setitimer(0x0, 0xfffffffffffffffc, 0x0)

2m11.872023071s ago: executing program 5 (id=12244):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x10003, &(0x7f0000000380)={[{@nodiscard}, {@jqfmt_vfsv1}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@errors_remount}, {@mblk_io_submit, 0x0}, {@noauto_da_alloc}, {@noload}, {@journal_checksum}, {@mblk_io_submit}, {@i_version}, {@usrjquota}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@norecovery}, {@nobarrier}, {@data_writeback}, {@resgid}], [{@fsname={'fsname', 0x3d, '\\$'}}, {@context={'context', 0x3d, 'root'}}], 0x2c}, 0x2, 0x4f8, &(0x7f0000000700)="$eJzs3EtvVGUfAPD/mbaUvtC3fXm9cVFG0dhopLRcFy6AaMLGxERjcFnbQpAChtYESCPFGEhcaPgEXnYmfgJXujFqXGjcStwaE2K6AV2YY87MmTrt6fTGtGPp75fM8JzbPM//nPMwz2VOA9iwytlbErE1In6OiJ7q4uwdytV/7k5PDv8xPTmcRJq+8ntS2e/O9ORwbdfacVvyhb5SROm9JHYWs+0cv3zl7NDY2OjFfEX/RClPnRs6PXp69PzgkSMH9ncdPjR4sClxZmW6s+OdC7u2n3j95kvDJ2++8e3nWXnTfHt9HFW9lfdNS86hrbCmHOXZ57LOU0sv+rrQXZdO2rP3UusKw5Jld212uToq9b8n2ipLVT3x4rstLRywqtI0TTsLa2e+y6bSeklSPSBNr6XAfSCJVpcAaI3aF/2d6aynOjlc7Aff324fi0oPKIv7bv6qbmmv9GDLvdW+Uccq5f9ARJyc+vOj7BXzjkMAADTXl8cibhyvtjtqr+qWUjxUt99/87mh3oj4X0Rsi4j/5+2XByMq+z4cEY/UHdO9hFmA8pzlYvvnx648Ud9cbZqs/fd8Prc1u/03U/LetnypuxJ/R3LqzNjovvyc9EVHZ7Y8UPzomWG1r1746cNG+Zfr2n/ZK8u/1hbMy/Fb+5wBupGhiaF7jbvm9rXKib1ajD+J9qSWitgeETtW8PnZOTvzzGe7Gm2fFX8WZyH+Dxp/ePsKCjRH+knE09XrPxVz4o98/i+pzE+ee6t//PKV587Uz08OHD40eLB/c4yN7uuv3RVF3/1w/eU8WehGLHD9a1VjVSfSsuv/n3nv/5mZy94sNTNfO778PK7futGwT7PS+39T8molXZufvTQ0MXFxIGJTMlVcP/jPsZeGumbtn8Xft2f++r8t4q+P8+N2RkR2Ez8aEY9FxO687I9HxBMRsWeB+L85/uSbjbqQi8e/urL4R5Z1/Rsljn4fMf+mtrNff1HI+P1yIf6OaHT9D1RSffmakaGJzYvFtVBJ6xP3fAIBAABgHdgdEVsjKe3NB5q2Rqm0d2/ElpkRlPGJZ09dePv8SPUZgd7oKNVGunrqxkMH8rHhbDk7arBuOdu+vzJunKZp2pUtZ/33se7Whg4b3pYG9T/za/GRFuB+s6x5tEZPtAHr0tz6f2vJRzb/BxnA2mrC72iAdUr9h41ryfV/tZ6CA1pmvvp/NeJuC4oCrLH56v9rhTVH16QswNrS/4eNa+X1348BYL3z/Q8b0pIekl9BYtuJBfZJ2lcn08aJUiz8VwB6I2pram2ahT/wl1JEc0rY1tRIu2Zd09K8+2yOZuQVpUX3aV/GH2JY20Tp31GMaqIzIha5e2dutqu1xJXVLlilEnza2v+dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7t3fAQAA///tUdPr")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x114, 0x29, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x17}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc358", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})
pread64(0xffffffffffffffff, 0x0, 0x0, 0xd37)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r3=>0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
mknodat$loop(r4, &(0x7f0000000080)='./file0\x00', 0x40, 0x1)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)

2m11.035202323s ago: executing program 5 (id=12264):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10)
r2 = socket(0x2, 0x805, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10)

2m8.868975539s ago: executing program 5 (id=12300):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48)
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x602400, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file1\x00', 0x2204206, &(0x7f0000003240)=ANY=[], 0x2, 0x334, &(0x7f0000000880)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r1, 0x0)
fsync(r1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x11, 0x8, &(0x7f0000000bc0)=ANY=[@ANYRES8, @ANYRESOCT, @ANYBLOB="0000000000000000b703a1754bee5049fea4046257aa1afc00000003b560ec8300001b000000b70000000000cd2c3a"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x7, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4, 0x0, 0x5}, 0xfffffffffffffdcc)
r5 = socket$xdp(0x2c, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x400000000000004)
setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4)
writev(r6, &(0x7f0000000100)=[{&(0x7f0000000180)="480000001400190d7ebdeb75fd0d9c562c84d8c033aae421962ea6ff3cd3c461ebe430a2ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6", 0x48}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xc)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x2800008, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f00000018c0)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r7, 0x0, 0x8000000000000000}, 0x18)
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000580)='kmem_cache_free\x00', r8}, 0x18)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000003c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})

2m8.674646986s ago: executing program 37 (id=12300):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48)
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x602400, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file1\x00', 0x2204206, &(0x7f0000003240)=ANY=[], 0x2, 0x334, &(0x7f0000000880)="$eJzs3M9rI2UYwPEnP5uktMlBFAXpi170MrTRsxikBTFgaRuxFYRpO9GQMSmZUImIbU9exbsnwUPpsbeC+g/04k0vXvbWy8IetofdnWV+NckkadNsuum23w+UefO87zOZH2/KM0MmZ1/+8l21bGllvSnRlJKIiMi5SE6iEoj4y6jbTkqnfXl/+tG/b6+ub3xWKBYXV5RaKqx9kFdKzc79+f2PaX/YyZSc5r4+e5h/cPr66Ztnz9a+rViqYqlaval0tVn/v6lvmobarlhVTall09AtQ1VqltHw+utef9ms7+y0lF7bnsnsNAzLUnqtpapGSzXrqtloKf0bvVJTmqapmYzgKqXDlRW9MGLy1pg3BmMw1SfWaBT0mIike3pKhy9lowAAwK0Srv+jTkk/Uv0vs2797wxu1/9H7/zdnP7ieNav/0+S/er/D//z1tVV/6dEZJT6/ze5Rv3fWxHdLy9U/+N2mEv2hCJdr5z6P+N/fl0HXx3Nuw3qfwAAAAAAAAAAAAAAAAAAAAAAXgXntp21bTsbLIO/9iME/mvcSYPO/5SIpJyzb3P+77LV9Q1JuQ/uOefY/Hm3tFvylk7vU9sjhsxLVp648yGIiW0HTx4pR07+Mvf8/L3dUsztKZSlIqYYsiBZyYXzbXvp0+LigvL4+RePKWU68/OSldf65+e78/33T8p773bka5KVf7akLqZsu/O6nf/TglKffF4M5afdcQAAAAAA3AWautD3+l3TBvV7vzJSKLu3iQbcH/Cur+f7Xp/Hs2/FJ733AAAAAADcD1brh6pumkbjkkZarh4zeiM+3OBkKJK4bHCsYw+H3Z6keyNDZNCYWOiIJQas+fchj2pXI/giRVdXyg+OdniD/R/b+drvjERliKx4eOPnnIC65rsf+DtyEQluGyUHHGdZ7l1P9JKZkBjbfH7j1z8ej+8D8tFxMAOuHnzQERk0M/s2UuFZ5zYSN/k/BwAAAMBktIv+IPJxZ3dkIhsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMA9cyM/6RdqTHofAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNvieQAAAP//lI75aw==")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r1, 0x0)
fsync(r1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x11, 0x8, &(0x7f0000000bc0)=ANY=[@ANYRES8, @ANYRESOCT, @ANYBLOB="0000000000000000b703a1754bee5049fea4046257aa1afc00000003b560ec8300001b000000b70000000000cd2c3a"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x7, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4, 0x0, 0x5}, 0xfffffffffffffdcc)
r5 = socket$xdp(0x2c, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x400000000000004)
setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4)
writev(r6, &(0x7f0000000100)=[{&(0x7f0000000180)="480000001400190d7ebdeb75fd0d9c562c84d8c033aae421962ea6ff3cd3c461ebe430a2ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6", 0x48}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xc)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x2800008, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f00000018c0)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r7, 0x0, 0x8000000000000000}, 0x18)
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000580)='kmem_cache_free\x00', r8}, 0x18)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000003c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})

33.529498307s ago: executing program 3 (id=14337):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x18)
r1 = socket$tipc(0x1e, 0x2, 0x0)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x8)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4)
syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000ee43f6642531e0800450000170000e0"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x20000000000000ba, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd03, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x766}, 0x50)
ioctl$TCSETAW(r2, 0x5407, &(0x7f00000000c0)={0xd3b, 0x81, 0x5, 0x3ff, 0x3, "5f656fe690a5fe89"})
ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0x2)
bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000480)={0x44, 0x104, 0x1, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x43}}, 0x10, 0x0}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0)

32.515210664s ago: executing program 3 (id=14342):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$nci(0xffffffffffffffff, 0x0, 0x16)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

32.491979316s ago: executing program 3 (id=14343):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, r1, 0x0, {0x1, 0xf0, 0x4}, 0x1}, 0x18)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r1, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050)

32.404165394s ago: executing program 3 (id=14344):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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")
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x2}}, './file1\x00'})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000ac0)=@ccm_128={{0x304}, "6bad9c0f03002a04", "ccaa54dbfef3216ec09b63757e98ed63", "cde21de0", "bcad0b2f6d5df9b2"}, 0x28)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300001c000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x2}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x2210000, &(0x7f0000000180)={[{@dioread_lock}, {@resgid}, {@abort}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@nobarrier}, {@grpid}, {@jqfmt_vfsv0}]}, 0xfc, 0x58f, &(0x7f0000002d00)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a)
truncate(&(0x7f00000000c0)='./file1\x00', 0x8008)
fallocate(r6, 0x10, 0x800, 0x8000)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x4, &(0x7f0000000280)=@gcm_128={{0x304}, "41c000", "0cfcb67ecace717eb34a87013860510f", "15f4807f", "d4c27feb98ae71cc"}, 0x28)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
ptrace$getregset(0x4205, r7, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})
r8 = fcntl$getown(r2, 0x9)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r9=>r3, {0x2, 0x8760}}, './file1\x00'})
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={0xffffffffffffffff, r1, 0x2b, 0x0, @val=@iter={&(0x7f0000000140)=@task={r7, r8, r9}, 0xffffffffffffff2b}}, 0x20)

31.652623448s ago: executing program 3 (id=14347):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x3}, {0x9, 0x5}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xe0)

31.196252958s ago: executing program 3 (id=14351):
r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000780)=ANY=[@ANYRESOCT=r1, @ANYRESOCT, @ANYRESOCT, @ANYRESHEX=r0, @ANYRESOCT=0x0], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x9, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94)
brk(0x400000ffc020)

31.17182563s ago: executing program 38 (id=14351):
r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000780)=ANY=[@ANYRESOCT=r1, @ANYRESOCT, @ANYRESOCT, @ANYRESHEX=r0, @ANYRESOCT=0x0], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x9, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94)
brk(0x400000ffc020)

2.756819183s ago: executing program 1 (id=14898):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7e, 0x9e, 0xb4, 0x10, 0x54c, 0x38, 0x16f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xc5, 0x38}}]}}]}}, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1c03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x800, 0x4, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x4, 0x0, 0x1}}}}}]}}]}}, 0x0)
syz_usb_connect(0x3, 0x24, &(0x7f0000000480)={{0x12, 0x1, 0x201, 0x49, 0x4, 0xa8, 0x8, 0x2c7c, 0x900, 0x30cb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0xc3, 0xb0, 0x9, [{{0x9, 0x4, 0xa0, 0x7, 0x0, 0xff, 0x0, 0x0, 0x6}}]}}]}}, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4b, 0xe6, 0x82, 0x10, 0xbfd, 0x104, 0xf104, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x8, [{{0x9, 0x4, 0xa7, 0x0, 0x0, 0x76, 0x2d, 0xbc}}]}}]}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0)
epoll_create1(0x0)
epoll_create(0x7)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x4)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4040940}, 0x0)

2.130367337s ago: executing program 1 (id=14907):
sync()
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000058110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)
recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100)

1.763062339s ago: executing program 1 (id=14912):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c)
r1 = dup(r0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x40, 0x8, 0x5, 0x3, {{0x17, 0x4, 0x1, 0x1, 0x5c, 0x67, 0x0, 0x6, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x7, 0xb5, [@multicast2]}, @timestamp_addr={0x44, 0xc, 0xe0, 0x1, 0x6, [{@multicast2, 0x21}]}, @timestamp_addr={0x44, 0x14, 0x65, 0x1, 0x8, [{@loopback, 0xfffffffc}, {@rand_addr=0x64010100, 0x1}]}, @lsrr={0x83, 0x1b, 0x13, [@empty, @empty, @broadcast, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @ra={0x94, 0x4}]}}}}})
getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000002c0)={@multicast1, @initdev}, &(0x7f00000014c0)=0xc)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001500)={'wg1\x00'})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x2}, 0xfffffffffffffe78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x18)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000002c0)='kmem_cache_free\x00', r4}, 0x18)
r5 = socket$kcm(0x29, 0x5, 0x0)
sendmmsg$inet(r5, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}], 0x1, 0x0)
close(r5)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x28, 0x1, 0x0)
getsockname$packet(r8, &(0x7f0000000240)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route_sched(r7, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@delchain={0x34, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xe, 0x3}, {0xfff2, 0xffff}, {0xc, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x884}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001540)={'geneve0\x00'})
r10 = socket(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r11=>0x0})
setsockopt$MRT6_ADD_MIF(r10, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r11}, 0xc)
r12 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'hsr0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r14, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0xc, 0xd}, {0xfff3, 0x8}, {0xb}}}, 0x24}}, 0x20040000)

1.333946796s ago: executing program 2 (id=14921):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000030000108500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
socket$vsock_stream(0x28, 0x1, 0x0)
r2 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0xffffffff, {{0xa, 0x4e20, 0x2, @mcast2, 0x7}}, {{0xa, 0x4e09, 0x4a3, @dev={0xfe, 0x80, '\x00', 0x15}, 0x2}}}, 0x108)

1.258613302s ago: executing program 2 (id=14924):
r0 = socket(0x10, 0x803, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff000000"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x100, 0x43, 0xa0, 0x100, 0x98, 0x1d0, 0x178, 0x178, 0x1d0, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0x98, 0xb8, 0x0, {0x0, 0x7a010000}, [@common=@inet=@ecn={{0x28}, {0x20, 0x30, 0x6, 0x7}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0xff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000200), 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x5, 0x603, 0x0, {}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{0x4}, 0x17, 0x0, 0x0, 0x0, "41a17e919880fe37279cdecc9b405030fd55cd3e7a037f6c1b1430f07adfe30f7f4c56f4146061b24ae619bb7c07e7b9ccf9e34e90c3aafea567e6025b305e1a"}}, 0x80}}, 0x44005)
ioctl$TIOCMIWAIT(r2, 0x545c, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r7, 0x0, 0x400000000}, 0x18)
write$binfmt_format(r6, &(0x7f00000001c0)='-1\x00', 0x3)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, 0x0, 0x4000000)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0xfff}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008001}, 0x80)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bond0\x00'})
writev(r0, &(0x7f0000000940)=[{&(0x7f0000000440)="8f14c7a7489413478a650edb6096518e3118756039bed722330776399be13466c59004cfbee063e5b2cf0e6541505f90d247acf130c8b5cfa59d3a1249f1ee6894ac45a1183877152725232255016cb10c47ad0f7be4ee0fc65cefd8646d6a4256901f92bcbe951f100cea1259166d6bf7", 0x71}, {&(0x7f0000000b40)="21a4dd73421c64f73d3af84c8e1ebace76e1a244a87a0c5373eccda54298b61c90129c5a76eca44c9fbc490c5f1fa38a7fac3c9080974285963ce56b5c077336f371f52c7d416b407511c3616088913c86da5e202227eb6546d200bfe376f360a06cde924faa8472dcad503f4cc92dd7bee8b2d59c8e9b1f706f7f55503de45c401f371448981065c9fb56965922c8f8d80ecd8b4d4d35835cbdaeb5bbfaf07a2068e07fafbc544c292431ae84309dd88e4314745a77e72f22493aa5c701edaac5310d14b2f96ad69aef088f81b881ebce5662a8c75586f7cf0c8ca5ba07dd0f6117a7475ef5b329d6e73f8bcbfeabbb55078ce6973f3d7e01566e0a78aff15aced086f5b73dee8c0ab2b419f82e9a1a013cb78f46b7a09c6f3747cad1d8f3489b4ee4382fda22472f15a5754a5b755ce698b32c14e7b1b7d6d384f33f0ff5ab301f059a75e11bf77a4d1d7bb25b83efef476affe97bd0bf7df18b4e88e3f99c5d2d2563900fc5105197571d9f168981173727e0684dc62706a2fee9e1bbd5bbb8d02b4d75827eb264057f92a80bd37695dec5b9855b620b4be3c73957b3741656d0fbb8e7fcae5c0c41eb6c5cd345382ccd3a58a358d8a26fdf86da8d8ac2dd9c5c14cca620d955d9ced4ea470bb715d04fbd817eca40fce45d15d4016d72085b1a2701bb2a011b59dd7e1cb982ae26a4745e31ad6cd114c0287570a3415fe5792d29c0ed0e78d95f35bd349b7c7eaf3a32b539c4c6a330dc69428661a41fcbe3b70c5c2d80caea8e5e9fdc7716790b8013630b5d52fc77489bc6b2bcf86af141d4a87a8803c015254016da835fa2b26ac63f16a75ff4740ee7b9153bcaf2a493ccbaac1c4e720dfa753e196c43b2707dff71cddd9d6239fc1f3c99b655331994b3919ecd0d9a66e34fae5e0985465468f461ace4b70715ef4971db9a1c42c7e88b0b43fbf09cd71d0e4427c2e9f0fbf0b5f01ee0d262f42f0d00cee35034e6a40b5f8a0228cab44fc01fd2a3bb6281c64f32b15a424049c5592425282c67f834086405198e300af83bf46ef7c9664a1728a6754ef0ad5ed908923a16a9fccf8e84f40eee02b8fa38f1d7f9a14019ee288ea18437d43d9b239ada8435892743e0484767322f9d3d1fe4f9c43ee28fee214560d3b2b37799f61b035ae45426db22275ac201117cd35f882691b168b3c0f8ceba3fb9c682c16c934a8e8975b97082f1bbf65395ebfe26c201b144d6e4f4e04b5b0063bdeae245423f0ff2608b4dbe6137a0a700e5914ea29487f42bb119b148dfa6867ec570396743ed6eff3076736e8fd68effaf81620dc524371d0b310e528bf5becbb019c9a85dcd0bbc854d281618812da5e3b38c862aa0e56cd24b1dccebc8d7c84fd1574ea9008e78771a52f19da733d9f5a54f45eccd31fba3fdd6fac1e9617b9a7bedbf754c226ce0bc1b12e08e72fc4dba9fc474ef0d5ce2299cc9dc9766c6a428dabecb6484631db64b3c5a48a5102a176af7842290ed9ef8939ec9c532732c819b34b9fa32b1ebeb0949461bfdb3cfd1767437bddc927aca508159082ed2263cfcd4f9cad2114d2ded218ea84e32a0e2f729c8e60a0824f3a2372a80bdf7c6c8686948625663a1c7abeca788802da77840e51eb6266c6b0c60226d95f3a4782d2d1454517f5e1cf3ee59c268aa4694eab05042c74c10b19b3db28437368274bd691c2201ee29c29ffec8ffa74330d8aa8e07c2c911bd2c024c9ae3f61f8fdfdfd3c91fe1f5188566feae6ab9d6722e322105adb285d5cddf0fb39e825f3beee4eec02086e973c28c88e23ebcd9fd53b78a32e737361267d1720b30c061d4f17cc7a093573f41428634fc53debf317bf4e8f9916f20e6e5e3067dedb48ae559f0708e1dad4ff8e5d300f7a4e353627d24bd8fa3b0c498fc0213b0bf950cab11a8d909ae4d66d962084e448f470ae7cd5e2dd3ce9a0aecff75bb8ea6c57d8bcec37cd2aefd6f324b053be99f5cb05b35e6ac612d8745e652c30c0bc05a3cf8c79e934440020a4d478d33bbe46ea76f77d7b553a606b9331f15c1a9997c2e2c08007efbdecc3c0681348cf8a9d8cc22819a806bcd66d7d21ea2ea59c963642d131eecce17b42a9d0beb64843a8bf604202d816750140ca73237afde55f1379be2689a64f31bb1b64c414e9f8a2c810fbd50f2b4e458a4f5a5d1de13d7fc8789171c5fe7fff2f3bb5f90e78a8d5d6644887d02f24078c3118d5f5320c52ba70f02d24392fa20e8970137d5a325218d7f8aa8355c5c4ea9f3f6bbcec1e1055fedde6ae432dcc61da4551714f43f31915966b16d4ef8bcaa4802fed22bdcf60eaf0fa81df93853fe28a34ab215d74bd6a8a238bb01f53feb0e2adea305afd1d0ddddd01b665b5f3931d15b0d5327be0d0cca3e13cb011c958417970f8dc41341cdac73acae1e791707600c375051e7afcf0eff2a46e1e9d461f9236bb67967cf93eae903c9ce23ca789ac98f92e24a900ca653030a843e2095a96c0ed11a2d2f6f324e42d6b9d073299a20917147ff37cc8692b8dd2c402b635189f4d3d6c1aff5cd266d14b5d3826695a399debb1a2d6034a52421b111b020beac2bca81aced45245b4622d3369049788c0ebdd99b9dd64123d8f04580f5b57711ea7325845c7b64796956e346c16c7f7f9e0c7eba03b2a4689dcb6a12d88475c72345b5a00583d52d5200a538feedcf36fa260a9b2789a4f8a2ae695839e30ba9c8a0ca6230309812c7d8af4437d0e12ad647e802344d029a60be1620f73533e50ccce833691fb5a448c21967f5f78d66dc9ed4cffa0f2cda477b492865167d1b9add16ce737d928bd1d944511c2066350d0b132ac20579974a3050140a1d3ca7d54fec1f4258aa3a97430d8f8b6722dd27f240c29da646e7a2e8dc7304923f5cc92bee762c3fcd048e97aa6946ac97de829eaca3e330904d923a7b8ca6a00980fd63411f48417f20743bd6dbaebb0b2331655577b10e73a5c39736e0ddc381276b64af1137803edc88cb0bf73642f7c5b075a0a79419cc562e4eae883b673d5e92750906441acf04509cbe5ece38155c52b1a31ce58e01d81f937869498b4d2256bf51b1ab295be78b9ccf51ef3b1ae04cedc258e2bbd8cd6f232758382d8cb0ecb74d47f012b8e6cc3c8433c44d4d48da4bfe7a8dcfd122f2417ec3b0f7f55f92b894e27f0ab749d37fce475009612f317228ec7715b54d8dc6182f5f46ff0a3bbddce3089fd594fda6908945db7949fafd0efa2c0d97bd059960a214a3ff316aec06828f491af396c062f37a649e76ac1b139d453b3ff74a70817fca40d00394fc057c36ce199416605e4605406a9912e0add12cef94822bf97af670582719f44c9385e7e35cb67b7c68aa0a78e31398b263e6ddbd13f6bab40b375a88cbeb9987364f9d6140396be32130eed10ad73c4e8f376678c0f32601ae6e7e8ce44027d35e906209e947fbf3c909b3c1175ce02f5bef87ec4d33d8d01cc507664c055472721ed4473541235369e9c4b7ac2abd6a7250fa957a55b2364f5db83a14708e8fec04fe63fd232298797cb1802ef0859c54bc6c230359f83cd7082b5cb229d0fcd4591c0f287c263c0b50ff4170d55223c010300a3a355314c688bf79c08515e3317819e1b1df801f01569aa20adbd03fbb0091bb23616ee0e8c80af7803954c3ea861ad7c610d18fc19d9f3176de0ea826c881b06664c46775686341e740e9ff00f02ad6292cc63988055e93354f0c350e302b2dcbfe9e57f06c3c49d5ad3e87288f26aac1a18e641d52e4f2664d89452b1a7f2dafd374e770c8d1f851073a7d6ed878e599352ffcdd5c2a8ab016a67d4a0f9fd6afacdf31d4a7cc34e982c08f41926fc6c9d5ffe4c75307fe2cfd7af5190638a09e6390d2dba55002163f9fc670b66bc99acaf270941d95ce97662131acd192ff3c1db69b01c208fea284b0d74dffe6c80b8ef6c88ec643463dff179254b715f5dc98a04d94437e8bf25d8d9f6bb022e9f00672d8488bd50cc19ad0135ebe48ea04a420fee2b14e90029c9465223a0b4805f7e13c2839d16b27b2ab7daf619cd02553d7e9be21e39f3bb19ceb8b2e685644640a55f0ba44dc8ae23df7f92cfdc1942fc627dc9da85dc5a03b12b79d7a462162be014b6ad1dac082c852246ecb65a20c110fe3e892b5f5fb498ec162e999c1c534d32d75093b9263e8e84f9ac70d68c52ea9f24db452a3a462390231f2fb8c2a2947dcde1fb047823523761e4f82bd838a0b1b22dbd2e9c585b145b66879da0946b102ca765bd9528e2ffed72f2cbdc0cca0df13aa7a0fbf397fc20edb7b47371180a5b5841f5a83b40bc7d5ec33fbe35f128d962d8f4b927189b128fe4a3700eb0a3659fb2ab6afc7fff066469d3ea33dc23500c6e97c4f2abd175c22450e263c997b93327c808838e8218e5e0ea2fd34b84453968395f7ae80d7cc70c54d4b8fe239be6354748ed55cfbbc39a28c9878d1ddaf330461a0c56e6f130eafa0144ec77d763fb33996dff71348599ea88f42a7c9566252141545b2d93f459176739cd3ac8319099404a4705742124ffd862da93c91b7f17b7b63e8d87a70f13a2ffeb6af51e1eaa1b0d9706a2e5fbdfa2b8219b41828f45d86095eb39dc911244be8a75dff144220730ab0cbc5e4174c4ff1b77ad3c2c76214d0fc0777bdc861edbda9fd099d5a90b53c848f61e48a272669e52771e96da21a13f59d379bb508fbc7276594955a8dc6878a8feac99cadc7d2c6af875b116a557638b65c2fe0673113d2e0cbcf5d509e81d68ea95c5e63c4c23e5c8492d401315f86e70856699d98c6c37f8899d383ac8a0337ecc14d5ded992426b74955b1022e410d1ea62aa8ff70c05cb2bcf59f32b3242db7fe1253c1133179cc06414fcdfb01311e915f9689cc6ae19ac28905c092f51475106be54d5c5af4902255ba30ef309fbf9857b307db1e64806d42d3b9725d15d53b05210056da5458afa78addc3910ee575811fb92cce8485f3e97626d82ecc7e036b1d365acc8ff0b50a3e6a01cc12b45ea5dd80221f2c830f542b4bfc2096cf84268e8f97b0f7b15b41fff2ef3eb6815d70b5516e45c4462231efd83e8a14ecba58399306e34941677e201277cd41f763a4a6f479d59026e23564f885740fe589eda133d1f2e58a45de1c891e43e56a25a395744567f3e1a4ec58b63c275cd33b524dfcab5359ad18e565f4363c2b3637f94e49f8d07d21e2000479021fa753bbe5cde6c1a6c1229c3845caefcb804ffd0c388f5a8fc5ab4987c988b51d8f8f2d345dca4211bd771e5781b34069c1843b5db77530961858e597e3908ceaecd86125ef2cd9b9cd9785cfe29928e2702385dc1a70c7d450930be93d69d4d6d968831d106260f524e6d807febbd8b16e12107adfb909074fa9f9490ee3da590e25045c2c0a2a5fb0e4748bd08f33d49a07c1bf558c464601d89cfdf1d9625a6c163f579b386a225dec3b7fb7f936f227defedfa3223a63e35d8488f22bc34392250faff497abf3a953ee454934f58debcdaeeadb5eddcffc83e5d694580eada5caf54cc9fe596cd9dd4f46076babda5ff789444d152311e8ee07a5abed7fc526f5d2e4c02010a857d9324d557ab1b87bd7342316e0b8a2729180ecd7c6a17e75dcad60d0fbceb713577f4ab9290f9d25e6f9cacd238dc299574ba1040cb6785583d2994b5099564e62ad969911d1990992020a2560ed356b898d240296bd55996e35d89d2da240a157d55bb6396b06f56bc719a7ddcc428fe66fddc790", 0x1000}, {&(0x7f0000000880)="7e7df6c83c14fe9872feb479fd137918a77cb86308288edf1d26484443ec48aad50ce2c0ac669a", 0x27}], 0x3)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fbdbdf252100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000006e007a86331ec70e081a00000500f6008f0000000400ec00"], 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x810)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x8000000)

1.072567829s ago: executing program 0 (id=14927):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0xb)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800002d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0x1}, 0x48)

1.006140054s ago: executing program 0 (id=14929):
fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x3c8, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50)

919.946112ms ago: executing program 1 (id=14932):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x4040070}, 0x4)

906.108153ms ago: executing program 8 (id=14933):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x2200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file2\x00', &(0x7f00000000c0), &(0x7f0000000340)=ANY=[], 0xfe37, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = openat(0xffffffffffffff9c, 0x0, 0x125042, 0x60)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(0x0, r1)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
sync()

866.330706ms ago: executing program 1 (id=14935):
fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x3c8, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50)

827.72288ms ago: executing program 0 (id=14936):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000600)='kfree\x00', r0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0xfffffde8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50)

761.567075ms ago: executing program 1 (id=14938):
pipe2$9p(0x0, 0x800)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0xc010)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)

722.958479ms ago: executing program 8 (id=14941):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x60)
close(r0)
pipe(&(0x7f00000007c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)="7784", 0x2}], 0x1, 0x1)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ppoll(&(0x7f0000000740)=[{r2, 0x104}], 0x1, 0x0, 0x0, 0x0)
pread64(r2, &(0x7f0000000480), 0x1, 0x2)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x8002, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

662.548964ms ago: executing program 0 (id=14942):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r2, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2}}}, @dontfrag={{0x11, 0x29, 0x3e, 0x5}}, @dstopts={{0x28, 0x29, 0x37, {0x29, 0x200d, '\x00', [@generic={0x0, 0x7, "02d0c8883e797e"}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}], 0x58}, 0x4040) (async)
sendmsg$inet6(r2, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2}}}, @dontfrag={{0x11, 0x29, 0x3e, 0x5}}, @dstopts={{0x28, 0x29, 0x37, {0x29, 0x200d, '\x00', [@generic={0x0, 0x7, "02d0c8883e797e"}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}], 0x58}, 0x4040)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)
r3 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000cab000))
rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'bind', '=relative', @val={0x3a, [0xa]}}}}]})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01063d00000000000000280000002800000002000000000000000000000300000200000002000000000000000100000000000001"], 0x0, 0x42, 0x0, 0x0, 0xfffffff8}, 0x28) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01063d00000000000000280000002800000002000000000000000000000300000200000002000000000000000100000000000001"], 0x0, 0x42, 0x0, 0x0, 0xfffffff8}, 0x28)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000d00000000000000000000000a01000000000000000000000a02000000000000000000000b000000000000000000000005"], 0x0, 0x56}, 0x20)
personality(0x500006) (async)
personality(0x500006)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB='nonumtail=0,shortname=lower,shortname=mixed,utf8=1,iocharset=cp1251,nonumtail=0,rodir,shortname=win95,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,errors=remount-ro,shortname=winnt,shortname=win95,uni_xlate=0,nonumtail=0,discard,nnonumtail=1,codepage=865,nonumtail=0,shortname=winnt,shortname=win95,Cscontext=unconfined_u,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$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")
signalfd4(r1, &(0x7f0000000080)={[0xfffffffffffffe01]}, 0x8, 0x0) (async)
signalfd4(r1, &(0x7f0000000080)={[0xfffffffffffffe01]}, 0x8, 0x0)
r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r4, 0x2007ffc)
sendfile(r4, r4, 0x0, 0x800000009) (async)
sendfile(r4, r4, 0x0, 0x800000009)

605.878659ms ago: executing program 8 (id=14943):
sync()
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000058110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)
recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100)

599.695589ms ago: executing program 9 (id=14944):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50)
r1 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0xb, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x100004, 0x7f, 0x2000005, 0x8, 0x0, 0x5}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x9)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu>=0||6')
accept4(r0, &(0x7f00000000c0)=@un=@abs, &(0x7f00000001c0)=0x80, 0x800)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TIOCL_BLANKSCREEN(r3, 0x4b67, &(0x7f0000000400))

531.088315ms ago: executing program 0 (id=14945):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
stat(&(0x7f0000000300)='./bus\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f00000002c0)=@nbd={'/dev/nbd', 0x0}, r2, &(0x7f00000003c0))
mount$9p_rdma(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80, &(0x7f0000000580)=ANY=[@ANYBLOB='tran3=rdma,port=0x0000000000004e23,access=', @ANYRESDEC=r2, @ANYBLOB=',rq=0x0000000000000009,timeout=0x0000000000000007,func=FIRMWARE_CHECK,\x00'])
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xa2)
r4 = dup2(r3, r3)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa9a, 0x76c4, 0x7, 0x7})
ioctl$BLKTRACESTART(r4, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r4, 0x1275, 0x0)
symlinkat(&(0x7f0000000400)='./bus\x00', r4, &(0x7f0000000640)='./file0\x00')
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$eJzs281rHOUfAPDvTF7a/vqS/Gp9aa0aLUJQTJq0ag9eFAWRioIe6jEm2xK6baSJYmuxqYgnQQp6Fo+if4E3EUQ9CV49eZJC0V7aeorM7Ey62WYTazaZ2P18YLPPM/PszvebeXv2eXYD6FpD2Z8kYkdE/BoRA43q0gZDjafrV89P3rh6fjKJhYXX/kjydteunp8sm5av215UhtOI9MOk2MhSs2fPnZyo12tnivro3Km3RmfPnnvinVMTJ2onaqfHjxw5fGjs6afGn+xInlle1/a9P7N/74tvXHp58tilN3/8Oot3R7G+OY9OGcoS/3Mh17ru0U5vrGI7m8pJb4WBcFt6IiLbXX35+T8QPXFz5w3ECx9UGhywrrJ705b2q+cXgDtYElVHAFSjvNFnn3/LxwZ1PTaFK882PgBleV8vHo01vZEWbfpaPt920lBEHJv/6/PsEes0DgEA0Ozjyc+O9kfEeze+einrewwsrknjnvz5t/zvrmIOZTAi/h8RuyPirojYExF3R+Rt742I+9YYz639n/TyGt9yRVn/75libmtp/6/s/cVgT1HbmefflxyfrtcOFv+T4ejbktXHVtjGt8//8km7dc39v+yRbb/sCxZxXO5tGaCbmpibyDulHXDlYsS+3uXyTxZnApKI2BsR+27vrXeVhenHvtzfrtHq+a+gA/NMC19k6c1n+c9HS/6lpHl+cvqW+cnRrVGvHRwtj4pb/fTzR6+22/6a8u+AK7XGc9P+b20ymDTP1852dvv/8vhP+5PX83nm/mLZuxNzc2fGIvqTo3l9yfLxm68t62X77PgfPrD8+b+7eE2W//0RkR3ED0TEgxHxUBH7wxHxSEQcWCHHH55bPf9IK9r/FyOmlr3+LR7/Lfv/9gs9J7//pt32/9n+P5yXhosl+fVvFcuFk10uWgNcy/8OAAAA/ivS/DvwSTqyWE7TkZHGd/j3xP/S+szs3OPHZ94+PdX4rvxg9KXlSNdAMR5an67XxpL54h0b46PjxVhxOV56qBg3/rRnW14fmZypT1WcO3S77W3O/8zvPVVHB6yzbcsuHe/f8ECACrTOo6dLqxdeCRcDuFP5vTZ0r1XO/3Sj4gA2nvs/dK/lzv8LLXVzAXBncv+H7uX8hy6Vfld1BECF3P+hK63ld/3rWNi6OcKoprBZd0peiCgL6aaIR2GdClVfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrj7wAAAP//KFzmgQ==")
r5 = socket(0x10, 0x3, 0x0)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000400)={0x8, 0xffffffff, 0x4, 0x60df, 0xa, "0012197ce1d400001e20000080c90a008000"})
ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000000c0)=0xa)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0x8, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0xbc, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x20}}, {0x14, 0x4, @empty}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x24000801}, 0x4)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_opts(r8, 0x0, 0x4, 0x0, 0x0)

530.768845ms ago: executing program 9 (id=14946):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x60)
close(r0)
pipe(&(0x7f00000007c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)="7784", 0x2}], 0x1, 0x1)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ppoll(&(0x7f0000000740)=[{r2, 0x104}], 0x1, 0x0, 0x0, 0x0)
pread64(r2, &(0x7f0000000480), 0x1, 0x2)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x8002, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

481.199789ms ago: executing program 9 (id=14947):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe82)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0)
ioctl$FS_IOC_GETFLAGS(r3, 0x5437, 0x0)
socket(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4081}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xea, &(0x7f0000000200)=[{}], 0x8, 0x0, 0x0, &(0x7f00000003c0), 0x8, 0xef, 0x8, 0x8, &(0x7f0000000500)}}, 0x10)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x10ee, 0x2, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400))
socket$inet6_udplite(0xa, 0x2, 0x88)

456.371121ms ago: executing program 2 (id=14948):
fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x3c8, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50)

411.644895ms ago: executing program 9 (id=14949):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000600)}], 0x1, 0x0, 0x480}, 0x0, 0x50, 0x1})
r0 = syz_io_uring_setup(0x221d, &(0x7f0000000100)={0x0, 0x6e7f, 0x10000, 0x1, 0x5cc}, &(0x7f0000000280)=<r1=>0x0, &(0x7f00000005c0)=<r2=>0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, 0x0, r0})
io_uring_enter(r0, 0x66ab, 0x4, 0x2, 0x0, 0x0)

347.625981ms ago: executing program 9 (id=14950):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077d8f3b423cdac8d8000000000000020e16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d10bfe150a7487535f7866907dc6751dfb261a0e3ccae669e173a649c1cfd6587d452d46b7c57d77578f4c35235138d5521f9453559c3421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983c044c03bf3ff03fe3e26e7a23129d6606fd28a7f9105f82317874b33d96b39fa4e045469989d552af6200000003a00000000000000abecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f1623ed38ae89d24e14b40234756ddcebfba2f87925bfacba83109753f543ad027edd68149ee99eebc6f7d6dd4aed4afe1f44ccb19e810879b70a70900000000000000000000d7900a820b6327944e9a217b9800e02a92895614cd50cbf83a1ed25268816b004519c9c5cff097d8000000000009d27d753a30a147b24a48435bd8a568669596e9e08679b3ce48e90defb6670c3d6209000000c773713a66b223fa8b148871c8d31d24000025449f106b99893ed20fa7a050fbbef90327e827e513e9606800000000e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e69ee52b59d13182e1f24ed208ada12f7a1525320e71666f472a972d5eb1affb87ba55b2d72078e9f40b4ae7dc3b2aeb0d11cd22c35d32940f19dff00ffffffff080000ff003853e59de7621e348955735264f34b1046a1813668297a7edad187ef106ae7fcbb25090f17d0baadeb8ae190a1fb5a315f8347fb0379659500000000000000000000000000000000000000002fdf0193ec79c90ed210ebc2fbed6d4216770c1b0dec886b388d138c2b69c6aacb714e7264093061c660a5100b7cc165889eb94c8d7c77b6fa06f1a4d8e4a6b6cb37e319c5c22f276b03cae853f42b07ca0b03b1eb32a6b1a81cd511fd0b59d57a11c6a3ebf9731464ad21f07f618efc31023ac60007426162b57e803519954d7c952197b0a508c0e16fda392fa84be38e937d36af1c35138e05a9e8d6dc0272de72c41500000000304402e22af23437126f330f8eb4075daaeae3134ece35cd86d95bd9836bd186c4b6565e967a4e3e86f299b7400994ba136b4eccf3b0f001a266c0d160b3ce1182001d64b52a5ce7f506295d59eea6903b84ffbabf5a5b91c1d6ecce8728a224aec66c610e3becd60a35e848c224f8251947eed20e2b612cb099bfe8924d33ba7f0691fed04a43e9c64b7a1e3165e86cdb9871c678a6bbb14821f441c6c14d1bd78d8ffdfea12c19ea04264335d60b6b7a7da6fb83f33101db32f6ab137d943dd3c1e8db9f3e1263573dc721ae82fe0bc63598751a5092c9f7dbfc39d564834e3703492c2a651643d8ce5c36d97a4812cf73fc8ea0d6"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0xb)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="09000000040000000800000010"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800002d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7012fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a030200020000000000000200000009000200"], 0x80}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0)

328.385802ms ago: executing program 2 (id=14951):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10)
close(r3)

290.041546ms ago: executing program 2 (id=14952):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r0, @ANYBLOB="00fb000000010000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000001c80)={0x16, 0x98, 0xfa00, {&(0x7f0000001bc0), 0x2, 0xffffffffffffffff, 0x20, 0x1, @ib={0x1b, 0x72, 0x2, {"38ce7a492d80482313680595eaca3bea"}, 0x89, 0x40, 0x1}}}, 0xa0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
recvmsg(r1, &(0x7f0000000340)={&(0x7f0000000180)=@xdp, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000040)=""/25, 0x19}, {&(0x7f0000000200)=""/8, 0x8}, {0x0}, {&(0x7f0000000880)=""/199, 0xc7}, {&(0x7f0000000980)=""/193, 0xc1}, {&(0x7f0000000a80)=""/4096, 0x1000}], 0x6, &(0x7f0000001b00)=""/120, 0x78}, 0x0)
recvmsg$can_raw(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/28, 0x1c}], 0x1}, 0x40000101)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
fadvise64(0xffffffffffffffff, 0x1, 0x6, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000001d40)=ANY=[@ANYBLOB="18e6ff00000000fff7000000000000001811000039adda5b57e94078de5967b6184380c9d74a37703dc7e90fdedf2da674e710b7306795ea0c25ebbde4c8", @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
statfs(&(0x7f0000001b80)='./file1\x00', &(0x7f0000001c00)=""/125)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x0)
copy_file_range(r4, 0x0, r4, &(0x7f00000000c0)=0xc, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1800018, &(0x7f00000000c0)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000ec0)="$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")

278.552416ms ago: executing program 9 (id=14953):
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001600), 0x109344, 0x0)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e916447dd0000000500000006"], 0x48)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'tunl0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r5, @ANYBLOB="8608f5a076ba029bce0837fb40532c0cc94a96949898d459aa1b569543ee330d319ab12ece15aa51041bcc4b7342dbdbc95f65a6f3f13ea0df3c53176f195ef48e5f1d1899f900075ad17fc60d800000000000000000b9cacf"], 0x40}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000240)={'syztnl0\x00', <r7=>0x0, 0x20, 0x1, 0x0, 0x8, {{0xe, 0x4, 0x1, 0x5, 0x38, 0x67, 0x0, 0x8, 0x4, 0x0, @multicast2, @multicast1, {[@generic={0x94, 0xf, "c4e5cd0255458895c2a045254b"}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0xaf, 0x0, 0x4, [0x9, 0x1, 0xfffffff7]}]}}}}})
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r9=>0x0})
sendto$packet(r8, &(0x7f0000000240)="f2f64405eeca36ed9c5e40488000", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @local}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000340)={'wg2\x00', <r10=>0x0})
r11 = socket(0xa, 0x3, 0x87)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'caif0\x00', <r12=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r11, 0x8916, &(0x7f0000000000)={@local, 0x78, r12})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f00000008c0)={0x36c, r2, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x304, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x60, 0x5, "a46b2bd56a0e248b11ea87f04926271e0ea88bd55f77762cec2ec546515228d094c234fdd5411ddbec8184d94e2096837a87610e3b5ae2049e60479bff99e3617b9a8f751f4fa317ad6ccd54f8bd5bfb344913d2bf20ae3327379df8"}, @ETHTOOL_A_BITSET_BITS={0x1c4, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x547}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/autofs\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/autofs\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '{%^-\xbc\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '[,/,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '#&*$\":(]\\\\%[#\x92%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'kmem_cache_free\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/autofs\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '/++\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'kmem_cache_free\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '&[\xf8/#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f\\:]\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2110}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'kmem_cache_free\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xd7, 0x4, "a34608fb15651ac9c3969d9275f08b639177fa201184f9671849f3fa6e9eb80cf25bb2d79accff93beb8eb75255eb71a8a8aff6f730f1e3848ae87d33b99e256e6e278ad9a37ba0a8282bf804001a4c9b509438f02984540f4ddf5bd6fc3689736d3ba310bdec4c569bab7c3077bd7fb2854bbed6209fe9e9dd082b6d7feedd8fba5e6f0fdef79b325993f061d45261cf50d10c112a48402ef4affb5d8245e152445bc9f863dbb1d333f18318138aeef4c3e26b4b561b54413180139439666ab8ef1fd20702406ee67fa06ea8a8dedabc60570"}]}, @ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x36c}, 0x1, 0x0, 0x0, 0xa890}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000100))

203.395563ms ago: executing program 0 (id=14954):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000d00)={[{@noauto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x4c4, &(0x7f0000000d40)="$eJzs3c9vHFcdAPDvjO3Ydd3ahUr8ENBQCgFF3bU3rVX1VC4gVFVCVJw4pMbeWJZ3vZZ3HWKTg/M/IBGJE/wJHJA4IOXEnRvcEFI4IAWIQDESh0UzO3YcZ9exiL2Tej8faTTz5u3u9721573x1/a+AEbW5YjYi4hLEfFJRMwW55Niiw96W/a4Rw9vL+8/vL2cRLf78T+SvD47F0eek3m5eM2piPjBdyN+nDwdt72zu77UaNS3inK109ystnd2/7LWXFqtr9Y3arXFhcX59669Wzuzvr7R/PWD76x9+MPf/fbL9/+w962fZs2aKeqO9uMs9bo+cRgnMx4RH55HsBKMFf25VHZD+L+kEfGZiHgzu/67ZbcGABiGbnc2urNHywDARZfmObAkrRS5gJlI00qll8N7PabTRqvduXqjtb2x0suVzcVEemOtUZ8vcoVzMZFk5YX8+HG5dqx8LSJei4ifTb6UlyvLrcZKmTc+ADDCXj42//97sjf/AwAX3FTZDQAAhs78DwCjx/wPAKPH/A8Ao8f8DwCjx/wPAKPH/A8AI+X7H32Ubd394vOvV27ubK+3br69Um+vV5rby5Xl1tZmZbXVWs0/s6f5rNdrtFqbC+/E9q1qp97uVNs7u9ebre2NzvX8c72v1yeG0isA4CSvvXHvT0lE7L3/Ur7FkbUczNVwsaVlNwAozVjZDQBKM152A4DS+Bkf6LNE7xMG/onQ3YFPMbTAC+7KF+T/YVTJ/8Pokv+H0SX/D6Or202s+Q8AI0aOHziH3/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAhTeTb0laKdYCn4k0rVQiXomIuZhIbqw16vMR8WpE/HFyYjIrL5TdaADgOaV/S4r1v67MvjVzvPZS8p/JfB8RP/nFxz+/tdTpbC1k5/95eL5ztzhfOzGQpQYBoCQH8/TBPH7g0cPbywfbMNvz4Nu9xUWzuPvF1qsZj/F8P5XfOEz/KynKPdn9ytgZxN+7ExGf79f/JM+NzBUrnx6Pn8V+Zajx0yfip3ldb5+9F589g7bAqLmXjT8f9Lv+0ric7/tf/1P5CPX8Dsa//afGv/Rw/BsbMP5dPm2Md37/vYF1dyK+ON4vfnIYPxkQ/61Txv/zl77y5qC67i8jrkT/+EdjVTvNzWp7Z/fttebSan21vlGrLS4szr937d1aNc9RVw8y1U/7+/tXXz2p/9MD4k89o/9fP2X/f/XfT3701RPif/Nr/b/+r58QP5sTv3HK+EvTvxm4fHcWf6V//4vnDO7/1VPGv//X3ZVTPhQAGIL2zu76UqNR33IwtIPs3u0FaMaFO7jzqXlXs++As3idz51jU8semYDz9viiL7slAAAAAAAAAAAAAADAIMP4h6ey+wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDF9b8AAAD//3Sb1xQ=")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18)
setreuid(0xee01, 0x0)
ioprio_get$uid(0x3, 0xee01)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
write$P9_RREADLINK(r2, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x4, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000002000080000000000000000061104f000000000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)

198.263314ms ago: executing program 8 (id=14955):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x4040070}, 0x4)

112.224251ms ago: executing program 8 (id=14956):
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0xffffffff, {{0xa, 0x4e20, 0x2, @mcast2, 0x7}}, {{0xa, 0x4e09, 0x4a3, @dev={0xfe, 0x80, '\x00', 0x15}, 0x2}}}, 0x108)

22.027719ms ago: executing program 8 (id=14957):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x60)
close(r0)
pipe(&(0x7f00000007c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)="7784", 0x2}], 0x1, 0x1)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ppoll(&(0x7f0000000740)=[{r2, 0x104}], 0x1, 0x0, 0x0, 0x0)
pread64(r2, &(0x7f0000000480), 0x1, 0x2)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x8002, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

0s ago: executing program 2 (id=14958):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000600)='kfree\x00', r0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0xfffffde8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50)

kernel console output (not intermixed with test programs):

00000000 r/w without journal. Quota mode: writeback.
[  911.384610][T14051] ext4 filesystem being mounted at /295/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  911.480276][ T9395] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /295/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  911.531309][ T9395] EXT4-fs error (device loop3): ext4_empty_dir:3084: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  911.582070][ T9395] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.'
[  911.597925][ T9395] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /295/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  911.619622][ T9395] EXT4-fs error (device loop3): ext4_empty_dir:3084: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  911.638818][ T9395] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.'
[  911.650491][ T9395] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /295/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  911.674260][ T9395] EXT4-fs error (device loop3): ext4_empty_dir:3084: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  911.693873][ T9395] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.'
[  911.705667][ T9395] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /295/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  911.726877][ T9395] EXT4-fs error (device loop3): ext4_empty_dir:3084: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  911.746393][ T9395] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.'
[  911.758321][ T9395] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /295/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  911.781594][ T9395] EXT4-fs error (device loop3): ext4_empty_dir:3084: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  911.801061][ T9395] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.'
[  911.813252][ T9395] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.'
[  911.825431][ T9395] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.'
[  911.838313][ T9395] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.'
[  911.850446][ T9395] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.'
[  911.862641][ T9395] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.'
[  911.962509][T14058] loop9: detected capacity change from 0 to 1024
[  911.997340][T14058] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none.
[  912.031262][T14063] usb usb7: usbfs: process 14063 (syz.2.14346) did not claim interface 0 before use
[  912.051543][ T9207] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  912.128438][T14058] FAULT_INJECTION: forcing a failure.
[  912.128438][T14058] name failslab, interval 1, probability 0, space 0, times 0
[  912.140744][T14056] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  912.141473][T14058] CPU: 0 UID: 0 PID: 14058 Comm: syz.9.14345 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  912.141613][T14058] Tainted: [W]=WARN
[  912.141645][T14058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  912.141680][T14058] Call Trace:
[  912.141700][T14058]  <TASK>
[  912.141722][T14058]  __dump_stack+0x1d/0x30
[  912.141797][T14058]  dump_stack_lvl+0x95/0xd0
[  912.141917][T14058]  dump_stack+0x15/0x1b
[  912.142054][T14058]  should_fail_ex+0x265/0x280
[  912.142137][T14058]  should_failslab+0x8c/0xb0
[  912.142210][T14058]  kmem_cache_alloc_noprof+0x69/0x4b0
[  912.142283][T14058]  ? __es_insert_extent+0x508/0xee0
[  912.142381][T14058]  __es_insert_extent+0x508/0xee0
[  912.142504][T14058]  ? find_get_block_common+0x6de/0x8e0
[  912.142599][T14058]  ext4_es_insert_extent+0x436/0x1c30
[  912.142753][T14058]  ext4_ext_map_blocks+0x172b/0x38a0
[  912.142947][T14058]  ? mt7663u_stop+0x20/0x80
[  912.143052][T14058]  ? folio_mark_accessed+0x240/0x3a0
[  912.143136][T14058]  ? folio_mark_accessed+0x240/0x3a0
[  912.143243][T14058]  ext4_map_query_blocks+0xa2/0x4c0
[  912.143380][T14058]  ext4_map_blocks+0x368/0xd20
[  912.143486][T14058]  ? __ext4_journal_start_sb+0x131/0x300
[  912.143597][T14058]  ext4_iomap_begin+0x89b/0xe40
[  912.143707][T14058]  ? obj_cgroup_charge_account+0xba/0x1a0
[  912.143815][T14058]  ? __pfx_ext4_iomap_begin+0x10/0x10
[  912.144006][T14058]  iomap_iter+0x3f7/0x810
[  912.144080][T14058]  __iomap_dio_rw+0x78a/0x1290
[  912.144219][T14058]  iomap_dio_rw+0x40/0x90
[  912.144339][T14058]  ext4_file_write_iter+0xb3a/0xf60
[  912.144554][T14058]  ? __pfx_ext4_file_write_iter+0x10/0x10
[  912.144661][T14058]  vfs_write+0x52a/0x960
[  912.144709][T14058]  __x64_sys_pwrite64+0xfd/0x150
[  912.144782][T14058]  x64_sys_call+0x9f7/0x3000
[  912.144863][T14058]  do_syscall_64+0xca/0x2b0
[  912.145048][T14058]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  912.145120][T14058] RIP: 0033:0x7f762c03f749
[  912.145165][T14058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  912.145267][T14058] RSP: 002b:00007f762aa9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[  912.145371][T14058] RAX: ffffffffffffffda RBX: 00007f762c295fa0 RCX: 00007f762c03f749
[  912.145533][T14058] RDX: 00000000200000c1 RSI: 00002000000000c0 RDI: 0000000000000006
[  912.145583][T14058] RBP: 00007f762aa9f090 R08: 0000000000000000 R09: 0000000000000000
[  912.145638][T14058] R10: 0000000000009000 R11: 0000000000000246 R12: 0000000000000001
[  912.145682][T14058] R13: 00007f762c296038 R14: 00007f762c295fa0 R15: 00007ffcbc3090c8
[  912.145760][T14058]  </TASK>
[  912.419491][T14068] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  912.439106][T10592] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  912.464309][T22829] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  912.474699][T22829] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  912.514826][T14075] loop1: detected capacity change from 0 to 1024
[  912.545894][T22829] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  912.550328][T14075] EXT4-fs: Ignoring removed orlov option
[  912.557284][T22829] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  912.581473][ T3423] kernel write not supported for file /vcs (pid: 3423 comm: kworker/0:5)
[  912.588128][T22812] Bluetooth: hci0: Frame reassembly failed (-84)
[  912.616745][T14075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  912.640033][T22829] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  912.650629][T22829] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  912.711598][T22829] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  912.722061][T22829] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  912.741260][   T29] kauditd_printk_skb: 420 callbacks suppressed
[  912.741277][   T29] audit: type=1326 audit(1768015976.246:156445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14093 comm="syz.2.14358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ec9ef749 code=0x7ffc0000
[  912.793714][   T29] audit: type=1326 audit(1768015976.288:156446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14093 comm="syz.2.14358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f92ec9ef749 code=0x7ffc0000
[  912.817788][   T29] audit: type=1326 audit(1768015976.288:156447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14093 comm="syz.2.14358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ec9ef749 code=0x7ffc0000
[  912.866967][   T29] audit: type=1400 audit(1768015976.383:156448): avc:  denied  { name_bind } for  pid=14099 comm="syz.2.14360" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  912.889289][   T29] audit: type=1400 audit(1768015976.383:156449): avc:  denied  { node_bind } for  pid=14099 comm="syz.2.14360" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  912.993590][T22829] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface
[  913.002965][T22829] bond_slave_0: left promiscuous mode
[  913.010190][T22829] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface
[  913.027911][T22829] bond_slave_1: left promiscuous mode
[  913.035682][T22829] $Hÿ (unregistering): (slave dummy0): Releasing backup interface
[  913.039372][T13452] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  913.053192][T22829] dummy0: left promiscuous mode
[  913.059775][T22829] $Hÿ (unregistering): Released all slaves
[  913.070966][T14104] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  913.202764][T14112] 9p: Bad value for 'wfdno'
[  913.232938][T22829] hsr_slave_0: left promiscuous mode
[  913.239060][T22829] hsr_slave_1: left promiscuous mode
[  913.244798][T22829] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  913.252387][T22829] batman_adv: batadv0: Removing interface: batadv_slave_0
[  913.260304][T22829] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  913.267761][T22829] batman_adv: batadv0: Removing interface: batadv_slave_1
[  913.277812][T22829] veth1_macvtap: left promiscuous mode
[  913.283494][T22829] veth0_macvtap: left promiscuous mode
[  913.289114][T22829] veth1_vlan: left promiscuous mode
[  913.294495][T22829] veth0_vlan: left promiscuous mode
[  913.399366][T22829] team0 (unregistering): Port device team_slave_1 removed
[  913.411977][T22829] team0 (unregistering): Port device team_slave_0 removed
[  913.457580][T14114] __nla_validate_parse: 3 callbacks suppressed
[  913.457598][T14114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14364'.
[  913.473188][T14114] netlink: 'syz.1.14364': attribute type 30 has an invalid length.
[  913.517999][ T8512] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  913.554753][ T8512] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  913.584072][   T29] audit: type=1400 audit(1768015977.128:156450): avc:  denied  { tracepoint } for  pid=14120 comm="syz.1.14367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  913.589704][ T8512] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  913.616950][T14123] loop9: detected capacity change from 0 to 736
[  913.623869][T14123] iso9660: Unknown parameter '0000000000000000000001777777777777777777777'
[  913.633382][   T29] audit: type=1400 audit(1768015977.170:156451): avc:  denied  { create } for  pid=14120 comm="syz.1.14367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  913.675108][ T8512] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  913.751580][   T29] audit: type=1326 audit(1768015977.307:156452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14126 comm="syz.2.14369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ec9ef749 code=0x7ffc0000
[  913.823927][T14082] chnl_net:caif_netlink_parms(): no params data found
[  913.839012][T14132] loop2: detected capacity change from 0 to 1024
[  913.847785][T14131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14371'.
[  913.857452][   T29] audit: type=1326 audit(1768015977.338:156453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14126 comm="syz.2.14369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ec9ef749 code=0x7ffc0000
[  913.881520][   T29] audit: type=1326 audit(1768015977.338:156454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14126 comm="syz.2.14369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ec9ef749 code=0x7ffc0000
[  913.912411][T14132] EXT4-fs: Ignoring removed orlov option
[  913.974343][T14132] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  913.988112][T14134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14372'.
[  914.240292][T14143] 9p: Bad value for 'wfdno'
[  914.270670][T14145] loop1: detected capacity change from 0 to 1024
[  914.277970][T14145] EXT4-fs: Ignoring removed orlov option
[  914.292847][T14145] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  914.356070][T14123] Set syz1 is full, maxelem 65536 reached
[  914.392647][T14082] bridge0: port 1(bridge_slave_0) entered blocking state
[  914.399830][T14082] bridge0: port 1(bridge_slave_0) entered disabled state
[  914.409175][ T8237] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  914.424310][T14082] bridge_slave_0: entered allmulticast mode
[  914.431711][T14082] bridge_slave_0: entered promiscuous mode
[  914.439011][T14082] bridge0: port 2(bridge_slave_1) entered blocking state
[  914.446179][T14082] bridge0: port 2(bridge_slave_1) entered disabled state
[  914.454074][T14082] bridge_slave_1: entered allmulticast mode
[  914.460731][T14082] bridge_slave_1: entered promiscuous mode
[  914.531825][T14082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  914.548435][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[  914.554676][T10086] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  914.588159][T14082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  914.616361][ T3423] kernel write not supported for file /vcs (pid: 3423 comm: kworker/0:5)
[  914.661132][T13452] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  914.671945][T14082] team0: Port device team_slave_0 added
[  914.722160][T14082] team0: Port device team_slave_1 added
[  914.758436][T14172] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14382'.
[  914.815475][T14176] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  914.840592][T14178] tipc: Failed to obtain node identity
[  914.846670][T14178] tipc: Enabling of bearer <ib:caif0> rejected, failed to enable media
[  914.871861][ T2382] kernel write not supported for file /vcs (pid: 2382 comm: kworker/1:8)
[  914.882743][T14082] batman_adv: batadv0: Adding interface: batadv_slave_0
[  914.889750][T14082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  914.915928][T14082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  914.926438][T14172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14172 comm=syz.2.14382
[  914.941456][T14082] batman_adv: batadv0: Adding interface: batadv_slave_1
[  914.948443][T14082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  914.974636][T14082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  915.019424][T14082] hsr_slave_0: entered promiscuous mode
[  915.021260][T14190] loop8: detected capacity change from 0 to 1024
[  915.032241][T14190] EXT4-fs: Ignoring removed orlov option
[  915.037411][T14082] hsr_slave_1: entered promiscuous mode
[  915.061288][T14194] loop1: detected capacity change from 0 to 1024
[  915.068657][T14190] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  915.081298][T14194] EXT4-fs: Ignoring removed orlov option
[  915.098265][T14194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  915.322796][ T9207] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  915.369388][T13452] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  915.401264][T14205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14394'.
[  915.427884][T14082] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  915.442893][T14207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  915.452969][T14082] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  915.461154][T14207] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  915.473332][T14082] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  915.481223][T14207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  915.490138][T14207] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  915.498579][T14082] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  915.506736][T14207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  915.517197][T14207] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  915.527068][T14207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  915.537084][T14207] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  915.560535][T14207] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14395'.
[  915.596663][T14207] macvtap3: entered promiscuous mode
[  915.602249][T14207] macvtap3: entered allmulticast mode
[  915.607828][T14207] $Hÿ: entered allmulticast mode
[  915.622388][T14207] 8021q: adding VLAN 0 to HW filter on device macvtap3
[  915.633927][T14224] $Hÿ: left allmulticast mode
[  915.668277][T14228] loop1: detected capacity change from 0 to 1024
[  915.675984][T14228] EXT4-fs: Ignoring removed orlov option
[  915.697355][T14082] 8021q: adding VLAN 0 to HW filter on device bond0
[  915.708563][T14226] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14398'.
[  915.724480][T14082] 8021q: adding VLAN 0 to HW filter on device team0
[  915.724858][T14228] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  915.747399][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  915.754544][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  915.771184][ T8528] bridge0: port 2(bridge_slave_1) entered blocking state
[  915.778325][ T8528] bridge0: port 2(bridge_slave_1) entered forwarding state
[  915.806354][T14226] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14226 comm=syz.2.14398
[  915.854763][T14236] usb usb7: usbfs: process 14236 (syz.9.14403) did not claim interface 0 before use
[  915.960692][T14082] 8021q: adding VLAN 0 to HW filter on device batadv0
[  916.102132][T14082] veth0_vlan: entered promiscuous mode
[  916.115254][T14082] veth1_vlan: entered promiscuous mode
[  916.129740][T14259] tipc: Failed to obtain node identity
[  916.135428][T14259] tipc: Enabling of bearer <ib:caif0> rejected, failed to enable media
[  916.142544][T13452] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  916.170383][T14082] veth0_macvtap: entered promiscuous mode
[  916.193776][T14082] veth1_macvtap: entered promiscuous mode
[  916.213553][T14259] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14259 comm=syz.9.14407
[  916.227511][T14263] netlink: 'syz.8.14409': attribute type 30 has an invalid length.
[  916.243034][T14082] batman_adv: batadv0: Interface activated: batadv_slave_0
[  916.283076][T14082] batman_adv: batadv0: Interface activated: batadv_slave_1
[  916.307940][T22829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  916.328065][T22829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  916.351778][T22829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  916.366264][T22829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  916.443951][T14274] usb usb7: usbfs: process 14274 (syz.8.14413) did not claim interface 0 before use
[  916.534278][T14286] loop8: detected capacity change from 0 to 1024
[  916.554496][T14286] EXT4-fs: Ignoring removed orlov option
[  916.567225][T14284] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14414'.
[  916.610957][T14286] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  916.642771][T14296] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14296 comm=syz.2.14414
[  916.848458][ T9207] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  916.908757][T14313] usb usb7: usbfs: process 14313 (syz.9.14426) did not claim interface 0 before use
[  916.921873][T14311] loop1: detected capacity change from 0 to 512
[  916.940499][T14311] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  916.948959][T14311] EXT4-fs (loop1): orphan cleanup on readonly fs
[  916.957296][T14311] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.14425: corrupted inode contents
[  916.970744][T14311] EXT4-fs (loop1): Remounting filesystem read-only
[  916.998276][T14311] EXT4-fs (loop1): 1 truncate cleaned up
[  917.004408][T22829] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  917.015039][T22829] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  917.038725][T22829] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started
[  917.052072][T14311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  917.108320][T13452] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  917.174048][T14336] $Hÿ: renamed from bond0 (while UP)
[  917.182629][T14336] $Hÿ: entered promiscuous mode
[  917.187899][T14336] bond_slave_0: entered promiscuous mode
[  917.193722][T14336] bond_slave_1: entered promiscuous mode
[  917.267595][T14337] tipc: Failed to obtain node identity
[  917.273232][T14337] tipc: Enabling of bearer <ib:caif0> rejected, failed to enable media
[  917.360554][T14348] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14348 comm=syz.1.14434
[  917.387085][T14353] usb usb7: usbfs: process 14353 (syz.9.14439) did not claim interface 0 before use
[  917.490286][T14359] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14438'.
[  917.515391][   T29] kauditd_printk_skb: 488 callbacks suppressed
[  917.515406][   T29] audit: type=1400 audit(1768015981.254:156937): avc:  denied  { create } for  pid=14347 comm="syz.0.14438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  917.543144][   T29] audit: type=1400 audit(1768015981.265:156938): avc:  denied  { read } for  pid=14347 comm="syz.0.14438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  917.568968][T14364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14364 comm=syz.0.14438
[  917.667301][   T29] audit: type=1400 audit(1768015981.265:156939): avc:  denied  { module_request } for  pid=14347 comm="syz.0.14438" kmod="netdev-bond0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  917.690075][   T29] audit: type=1400 audit(1768015981.275:156940): avc:  denied  { map_create } for  pid=14360 comm="syz.9.14443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  917.710111][   T29] audit: type=1400 audit(1768015981.275:156941): avc:  denied  { bpf } for  pid=14360 comm="syz.9.14443" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  917.732056][   T29] audit: type=1400 audit(1768015981.275:156942): avc:  denied  { map_read map_write } for  pid=14360 comm="syz.9.14443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  917.753133][   T29] audit: type=1400 audit(1768015981.275:156943): avc:  denied  { prog_load } for  pid=14360 comm="syz.9.14443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  917.773054][   T29] audit: type=1400 audit(1768015981.275:156944): avc:  denied  { perfmon } for  pid=14360 comm="syz.9.14443" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  917.794612][   T29] audit: type=1400 audit(1768015981.275:156945): avc:  denied  { prog_run } for  pid=14360 comm="syz.9.14443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  917.814616][   T29] audit: type=1400 audit(1768015981.296:156946): avc:  denied  { allowed } for  pid=14360 comm="syz.9.14443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  917.999215][T14383] usb usb7: usbfs: process 14383 (syz.2.14451) did not claim interface 0 before use
[  918.075087][T14393] loop2: detected capacity change from 0 to 1024
[  918.084808][T14393] EXT4-fs: Ignoring removed orlov option
[  918.095500][T14393] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  918.143019][T14401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14458'.
[  918.152226][T14401] netlink: 'syz.1.14458': attribute type 30 has an invalid length.
[  918.264972][T14413] netlink: 'syz.0.14463': attribute type 30 has an invalid length.
[  918.301296][T14409] tipc: Failed to obtain node identity
[  918.307084][T14409] tipc: Enabling of bearer <ib:caif0> rejected, failed to enable media
[  918.355351][T14409] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14409 comm=syz.1.14460
[  918.416793][ T8237] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  918.470594][T14430] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14470'.
[  918.479749][T14430] netlink: 'syz.8.14470': attribute type 30 has an invalid length.
[  918.493096][ T8520] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  918.510057][ T8520] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  918.531708][T14432] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14469'.
[  918.542933][ T8520] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  918.566119][ T8520] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  918.603933][T14443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14443 comm=syz.0.14469
[  918.713664][T14455] loop2: detected capacity change from 0 to 1024
[  918.723190][T14455] EXT4-fs: Ignoring removed orlov option
[  918.734275][T14455] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  918.780392][T14463] usb usb7: usbfs: process 14463 (syz.8.14482) did not claim interface 0 before use
[  918.807668][T14465] usb usb7: usbfs: process 14465 (syz.9.14483) did not claim interface 0 before use
[  918.940025][T14477] netlink: 'syz.8.14487': attribute type 4 has an invalid length.
[  919.000833][T14484] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14489'.
[  919.040535][ T8237] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  919.087121][T14492] usb usb7: usbfs: process 14492 (syz.8.14494) did not claim interface 0 before use
[  919.111107][T14494] netlink: 'syz.2.14491': attribute type 30 has an invalid length.
[  919.132973][T14497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14496'.
[  919.142058][T14497] netlink: 'syz.1.14496': attribute type 30 has an invalid length.
[  919.144119][T14498] loop9: detected capacity change from 0 to 1024
[  919.157031][T14498] EXT4-fs: Ignoring removed orlov option
[  919.178535][T14498] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  919.372301][T14521] tipc: Failed to obtain node identity
[  919.377829][T14521] tipc: Enabling of bearer <ib:caif0> rejected, failed to enable media
[  919.392712][T14523] usb usb7: usbfs: process 14523 (syz.1.14507) did not claim interface 0 before use
[  919.474428][T14532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14532 comm=syz.2.14500
[  919.493690][T14530] loop1: detected capacity change from 0 to 164
[  919.588883][T14538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14509'.
[  919.671494][T10592] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  919.672554][T14542] netlink: 24 bytes leftover after parsing attributes in process `syz.8.14512'.
[  919.710199][T14545] netlink: 32 bytes leftover after parsing attributes in process `syz.9.14514'.
[  919.710618][ T3423] IPVS: starting estimator thread 0...
[  919.726735][T14542] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14542 comm=syz.8.14512
[  919.796961][T14546] IPVS: using max 2112 ests per chain, 105600 per kthread
[  919.892993][T14562] usb usb7: usbfs: process 14562 (syz.9.14519) did not claim interface 0 before use
[  920.011020][T14574] loop1: detected capacity change from 0 to 1024
[  920.018255][T14574] EXT4-fs: Ignoring removed orlov option
[  920.028105][T14574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  920.151522][T14583] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14528'.
[  920.165834][T14584] FAULT_INJECTION: forcing a failure.
[  920.165834][T14584] name failslab, interval 1, probability 0, space 0, times 0
[  920.178787][T14584] CPU: 0 UID: 0 PID: 14584 Comm: syz.2.14527 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  920.178827][T14584] Tainted: [W]=WARN
[  920.178907][T14584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  920.178920][T14584] Call Trace:
[  920.178927][T14584]  <TASK>
[  920.178937][T14584]  __dump_stack+0x1d/0x30
[  920.178962][T14584]  dump_stack_lvl+0x95/0xd0
[  920.178983][T14584]  dump_stack+0x15/0x1b
[  920.179003][T14584]  should_fail_ex+0x265/0x280
[  920.179093][T14584]  should_failslab+0x8c/0xb0
[  920.179122][T14584]  __kmalloc_cache_noprof+0x65/0x4c0
[  920.179155][T14584]  ? io_ring_ctx_alloc+0x38/0x660
[  920.179196][T14584]  io_ring_ctx_alloc+0x38/0x660
[  920.179295][T14584]  ? io_prepare_config+0x57b/0x5a0
[  920.179341][T14584]  io_uring_create+0x50/0x4e0
[  920.179403][T14584]  ? memchr_inv+0x30/0x2e0
[  920.179424][T14584]  __se_sys_io_uring_setup+0x1be/0x1d0
[  920.179491][T14584]  __x64_sys_io_uring_setup+0x31/0x40
[  920.179551][T14584]  x64_sys_call+0x244c/0x3000
[  920.179575][T14584]  do_syscall_64+0xca/0x2b0
[  920.179765][T14584]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  920.179787][T14584] RIP: 0033:0x7f92ec9ef749
[  920.179803][T14584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  920.179902][T14584] RSP: 002b:00007f92eb456fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[  920.179921][T14584] RAX: ffffffffffffffda RBX: 00007f92ecc45fa0 RCX: 00007f92ec9ef749
[  920.179934][T14584] RDX: 0000200000000080 RSI: 0000200000010400 RDI: 0000000000002f8d
[  920.180002][T14584] RBP: 0000200000010400 R08: 0000000000000000 R09: 0000200000000080
[  920.180019][T14584] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001
[  920.180036][T14584] R13: 0000200000010080 R14: 0000000000002f8d R15: 0000200000000080
[  920.180063][T14584]  </TASK>
[  920.183182][T14583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14528'.
[  920.254523][T14586] netlink: 'syz.0.14528': attribute type 3 has an invalid length.
[  920.262840][T14583] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  920.263949][T14586] netlink: 'syz.0.14528': attribute type 1 has an invalid length.
[  920.263966][T14586] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.14528'.
[  920.414545][T14583] batman_adv: batadv0: Removing interface: batadv_slave_0
[  920.423354][T14583] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  920.430923][T14583] batman_adv: batadv0: Removing interface: batadv_slave_1
[  920.497547][T13452] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  920.655128][ T2382] hid-generic 0000:3000000:0000.00B5: unknown main item tag 0x4
[  920.662947][ T2382] hid-generic 0000:3000000:0000.00B5: unknown main item tag 0x2
[  920.671959][ T2382] hid-generic 0000:3000000:0000.00B5: unknown main item tag 0x3
[  920.680871][ T2382] hid-generic 0000:3000000:0000.00B5: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  920.899689][T14603] tipc: Failed to obtain node identity
[  920.905300][T14603] tipc: Enabling of bearer <ib:caif0> rejected, failed to enable media
[  921.056312][T14603] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14603 comm=syz.8.14536
[  921.382126][T14626] loop8: detected capacity change from 0 to 1024
[  921.389452][T14626] EXT4-fs: Ignoring removed orlov option
[  921.439499][T14626] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  921.474731][T14636] netlink: 'syz.2.14546': attribute type 30 has an invalid length.
[  921.484019][T14638] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14638 comm=syz.9.14541
[  921.496157][T14635] loop1: detected capacity change from 0 to 512
[  921.522253][T14635] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  921.530981][T14635] EXT4-fs (loop1): orphan cleanup on readonly fs
[  921.539601][T14635] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.14545: corrupted inode contents
[  921.553526][T14635] EXT4-fs (loop1): Remounting filesystem read-only
[  921.560729][T14635] EXT4-fs (loop1): 1 truncate cleaned up
[  921.566781][ T8499] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  921.577359][ T8499] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  921.588356][ T8499] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started
[  921.599506][T14635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  921.636231][T13452] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  921.734002][T14646] usb usb7: usbfs: process 14646 (syz.2.14548) did not claim interface 0 before use
[  921.810299][T14649] netlink: 'syz.1.14549': attribute type 1 has an invalid length.
[  921.939077][ T9207] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  921.970855][T14656] loop1: detected capacity change from 0 to 512
[  921.989881][T14656] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  921.999678][T14661] usb usb7: usbfs: process 14661 (syz.0.14553) did not claim interface 0 before use
[  922.009501][T14656] EXT4-fs (loop1): orphan cleanup on readonly fs
[  922.019600][T14656] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.14552: corrupted inode contents
[  922.032448][T14656] EXT4-fs (loop1): Remounting filesystem read-only
[  922.041932][T14656] EXT4-fs (loop1): 1 truncate cleaned up
[  922.048036][ T8512] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  922.058630][ T8512] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  922.069453][ T8512] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started
[  922.103198][T14656] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  922.196483][T13452] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  922.239781][T14675] netlink: 'syz.8.14560': attribute type 30 has an invalid length.
[  922.267528][T14679] usb usb7: usbfs: process 14679 (syz.1.14559) did not claim interface 0 before use
[  922.317663][   T29] kauditd_printk_skb: 732 callbacks suppressed
[  922.317679][   T29] audit: type=1400 audit(1768015986.304:157667): avc:  denied  { create } for  pid=14682 comm="syz.0.14563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  922.377722][   T29] audit: type=1400 audit(1768015986.356:157668): avc:  denied  { allowed } for  pid=14682 comm="syz.0.14563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  922.420647][   T29] audit: type=1400 audit(1768015986.388:157669): avc:  denied  { create } for  pid=14682 comm="syz.0.14563" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  922.442615][   T29] audit: type=1400 audit(1768015986.388:157670): avc:  denied  { getopt } for  pid=14682 comm="syz.0.14563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  922.481094][   T29] audit: type=1400 audit(1768015986.472:157671): avc:  denied  { create } for  pid=14693 comm="syz.9.14567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  922.490403][T14692] loop1: detected capacity change from 0 to 1024
[  922.511965][T14692] EXT4-fs: Ignoring removed orlov option
[  922.518932][   T29] audit: type=1400 audit(1768015986.472:157672): avc:  denied  { connect } for  pid=14693 comm="syz.9.14567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  922.539123][   T29] audit: type=1400 audit(1768015986.472:157673): avc:  denied  { write } for  pid=14693 comm="syz.9.14567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  922.559047][   T29] audit: type=1326 audit(1768015986.503:157674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14695 comm="syz.0.14569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2476aaf749 code=0x7ffc0000
[  922.582957][   T29] audit: type=1326 audit(1768015986.503:157675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14695 comm="syz.0.14569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2476aaf749 code=0x7ffc0000
[  922.606862][   T29] audit: type=1326 audit(1768015986.503:157676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14695 comm="syz.0.14569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2476aaf749 code=0x7ffc0000
[  922.672056][T14692] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  922.699923][T14706] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14706 comm=syz.9.14567
[  922.851356][ T8500] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  922.860591][ T8500] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  922.872368][ T8500] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  922.882815][ T8500] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  922.961870][T14714] usb usb7: usbfs: process 14714 (syz.0.14573) did not claim interface 0 before use
[  923.005706][T13452] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  923.055764][T14720] loop0: detected capacity change from 0 to 136
[  923.094709][T14725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  923.116001][T14725] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  923.125614][T14725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  923.135879][T14725] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  923.144787][T14725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  923.153547][T14725] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  923.189141][T14725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  923.204231][T14729] loop2: detected capacity change from 0 to 512
[  923.205651][T14725] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  923.228696][T14725] macvtap1: entered promiscuous mode
[  923.232240][T14729] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  923.234473][T14725] macvtap1: entered allmulticast mode
[  923.244728][T14729] EXT4-fs (loop2): orphan cleanup on readonly fs
[  923.247699][T14725] $Hÿ: entered allmulticast mode
[  923.259074][T14725] bond_slave_0: entered allmulticast mode
[  923.260298][T14729] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.14579: corrupted inode contents
[  923.265200][T14725] bond_slave_1: entered allmulticast mode
[  923.286667][T14725] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  923.289374][T14729] EXT4-fs (loop2): Remounting filesystem read-only
[  923.303151][T14729] EXT4-fs (loop2): 1 truncate cleaned up
[  923.309545][T14732] $Hÿ: left allmulticast mode
[  923.314640][T14732] bond_slave_0: left allmulticast mode
[  923.314755][ T8500] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  923.320393][T14732] bond_slave_1: left allmulticast mode
[  923.330965][ T8500] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  923.342458][ T8500] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[  923.381955][T14729] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  923.413289][ T8237] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  923.438171][T14734] loop9: detected capacity change from 0 to 2048
[  923.485117][T14734] Alternate GPT is invalid, using primary GPT.
[  923.491464][T14734]  loop9: p1 p2 p3
[  923.495444][T14734] loop9: partition table partially beyond EOD, truncated
[  923.571424][T14747] x_tables: ip_tables: osf match: only valid for protocol 6
[  923.601556][T14748] usb usb7: usbfs: process 14748 (syz.2.14584) did not claim interface 0 before use
[  923.701316][T14758] __nla_validate_parse: 6 callbacks suppressed
[  923.701332][T14758] netlink: 24 bytes leftover after parsing attributes in process `syz.9.14589'.
[  923.733382][T14758] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14589'.
[  923.742616][T14758] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  923.750195][T14758] batman_adv: batadv0: Removing interface: batadv_slave_0
[  923.758641][T14758] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  923.766097][T14758] batman_adv: batadv0: Removing interface: batadv_slave_1
[  923.790583][T14759] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14590'.
[  923.818479][T14760] validate_nla: 2 callbacks suppressed
[  923.818561][T14760] netlink: 'syz.9.14589': attribute type 3 has an invalid length.
[  923.832312][T14760] netlink: 'syz.9.14589': attribute type 1 has an invalid length.
[  923.840361][T14760] netlink: 181400 bytes leftover after parsing attributes in process `syz.9.14589'.
[  923.853495][T14763] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14763 comm=syz.2.14590
[  923.906132][T14766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14591'.
[  923.917574][T14766] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2581 sclass=netlink_route_socket pid=14766 comm=syz.0.14591
[  923.938727][T14767] loop1: detected capacity change from 0 to 512
[  923.951629][T14767] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  923.960254][T14767] EXT4-fs (loop1): orphan cleanup on readonly fs
[  923.969282][T14767] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.14592: corrupted inode contents
[  923.982266][T14767] EXT4-fs (loop1): Remounting filesystem read-only
[  923.989257][T14767] EXT4-fs (loop1): 1 truncate cleaned up
[  923.995073][ T8500] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  924.005668][ T8500] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  924.017407][ T8500] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started
[  924.028653][T14767] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  924.075159][T13452] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  924.112391][T14774] FAULT_INJECTION: forcing a failure.
[  924.112391][T14774] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  924.125790][T14774] CPU: 0 UID: 0 PID: 14774 Comm: syz.1.14594 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  924.125862][T14774] Tainted: [W]=WARN
[  924.125872][T14774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  924.125980][T14774] Call Trace:
[  924.125990][T14774]  <TASK>
[  924.126001][T14774]  __dump_stack+0x1d/0x30
[  924.126026][T14774]  dump_stack_lvl+0x95/0xd0
[  924.126052][T14774]  dump_stack+0x15/0x1b
[  924.126079][T14774]  should_fail_ex+0x265/0x280
[  924.126190][T14774]  should_fail+0xb/0x20
[  924.126216][T14774]  should_fail_usercopy+0x1a/0x20
[  924.126248][T14774]  _copy_from_user+0x1c/0xb0
[  924.126285][T14774]  __sys_bpf+0x183/0x7c0
[  924.126355][T14774]  __x64_sys_bpf+0x41/0x50
[  924.126446][T14774]  x64_sys_call+0x28e1/0x3000
[  924.126473][T14774]  do_syscall_64+0xca/0x2b0
[  924.126557][T14774]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  924.126602][T14774] RIP: 0033:0x7f0317a5f749
[  924.126623][T14774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  924.126643][T14774] RSP: 002b:00007f03164c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  924.126662][T14774] RAX: ffffffffffffffda RBX: 00007f0317cb5fa0 RCX: 00007f0317a5f749
[  924.126684][T14774] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005
[  924.126696][T14774] RBP: 00007f03164c7090 R08: 0000000000000000 R09: 0000000000000000
[  924.126780][T14774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  924.126792][T14774] R13: 00007f0317cb6038 R14: 00007f0317cb5fa0 R15: 00007fff77f631e8
[  924.126812][T14774]  </TASK>
[  924.133263][T14775] netlink: 44 bytes leftover after parsing attributes in process `syz.9.14595'.
[  924.451665][T14788] usb usb7: usbfs: process 14788 (syz.0.14598) did not claim interface 0 before use
[  925.049030][T14801] loop2: detected capacity change from 0 to 512
[  925.084134][T14806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  925.092932][T14806] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  925.101827][T14806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  925.112988][T14806] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  925.121534][T14806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  925.130271][T14806] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  925.138871][T14806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  925.148147][T14806] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  925.159472][T14806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14606'.
[  925.173369][T14806] team_slave_0: entered promiscuous mode
[  925.179151][T14806] team_slave_1: entered promiscuous mode
[  925.185227][T14806] macvtap1: entered promiscuous mode
[  925.190562][T14806] team0: entered promiscuous mode
[  925.196153][T14806] macvtap1: entered allmulticast mode
[  925.201593][T14806] team0: entered allmulticast mode
[  925.206779][T14806] team_slave_0: entered allmulticast mode
[  925.212554][T14806] team_slave_1: entered allmulticast mode
[  925.236828][T14801] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  925.249729][T14811] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14607'.
[  925.259214][T14801] EXT4-fs (loop2): orphan cleanup on readonly fs
[  925.267690][T14806] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  925.279046][T14808] team0: left allmulticast mode
[  925.283979][T14808] team_slave_0: left allmulticast mode
[  925.289554][T14808] team_slave_1: left allmulticast mode
[  925.295181][T14808] team0: left promiscuous mode
[  925.300291][T14808] team_slave_0: left promiscuous mode
[  925.305778][T14808] team_slave_1: left promiscuous mode
[  925.315388][T14801] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.14604: corrupted inode contents
[  925.329025][T14801] EXT4-fs (loop2): Remounting filesystem read-only
[  925.337702][T14801] EXT4-fs (loop2): 1 truncate cleaned up
[  925.343565][   T12] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  925.354169][   T12] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  925.387230][T14817] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  925.394876][   T12] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[  925.406066][T14801] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  925.447920][ T8237] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  925.544782][T14823] Cannot find add_set index 0 as target
[  925.559241][T14824] netlink: 24 bytes leftover after parsing attributes in process `syz.9.14611'.
[  925.641989][T14824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14824 comm=syz.9.14611
[  925.723982][T14835] 9p: Bad value for 'wfdno'
[  925.755878][T14838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14618'.
[  925.760422][T14839] netlink: 'syz.1.14619': attribute type 30 has an invalid length.
[  925.886750][T14848] loop0: detected capacity change from 0 to 512
[  925.914581][T14848] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  925.924840][T14848] EXT4-fs (loop0): orphan cleanup on readonly fs
[  925.933026][T14848] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.14624: corrupted inode contents
[  925.946777][T14848] EXT4-fs (loop0): Remounting filesystem read-only
[  925.953634][T14848] EXT4-fs (loop0): 1 truncate cleaned up
[  925.959595][ T8500] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  925.970196][ T8500] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  925.981149][ T8500] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[  925.992199][T14848] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  926.022689][T14859] FAULT_INJECTION: forcing a failure.
[  926.022689][T14859] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  926.035817][T14859] CPU: 0 UID: 0 PID: 14859 Comm: syz.8.14628 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  926.035856][T14859] Tainted: [W]=WARN
[  926.035863][T14859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  926.035876][T14859] Call Trace:
[  926.035883][T14859]  <TASK>
[  926.035891][T14859]  __dump_stack+0x1d/0x30
[  926.035960][T14859]  dump_stack_lvl+0x95/0xd0
[  926.035989][T14859]  dump_stack+0x15/0x1b
[  926.036013][T14859]  should_fail_ex+0x265/0x280
[  926.036037][T14859]  should_fail+0xb/0x20
[  926.036227][T14859]  should_fail_usercopy+0x1a/0x20
[  926.036331][T14859]  strncpy_from_user+0x27/0x260
[  926.036384][T14859]  __se_sys_memfd_create+0x206/0x6b0
[  926.036449][T14859]  __x64_sys_memfd_create+0x31/0x40
[  926.036483][T14859]  x64_sys_call+0x28cb/0x3000
[  926.036516][T14859]  do_syscall_64+0xca/0x2b0
[  926.036603][T14859]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  926.036627][T14859] RIP: 0033:0x7f62d152f749
[  926.036643][T14859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  926.036725][T14859] RSP: 002b:00007f62cff96d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  926.036745][T14859] RAX: ffffffffffffffda RBX: 000000000000105c RCX: 00007f62d152f749
[  926.036758][T14859] RDX: 00007f62cff96dec RSI: 0000000000000000 RDI: 00007f62d15b4960
[  926.036772][T14859] RBP: 0000200000000000 R08: 00007f62cff96b07 R09: 0000000000000000
[  926.036788][T14859] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001
[  926.036805][T14859] R13: 00007f62cff96dec R14: 00007f62cff96df0 R15: 00007ffd5b2fc0b8
[  926.036832][T14859]  </TASK>
[  926.202771][T14861] 9p: Bad value for 'wfdno'
[  926.242833][T14082] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  926.322758][T14874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  926.334262][T14869] tipc: Started in network mode
[  926.339250][T14869] tipc: Node identity 3aef4c5bab71, cluster identity 64
[  926.346281][T14869] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  926.360452][T14874] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  926.386637][T14874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  926.405548][T14867] tipc: Resetting bearer <eth:syzkaller0>
[  926.414618][T14874] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  926.446187][T14867] tipc: Disabling bearer <eth:syzkaller0>
[  926.452844][T14874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  926.474269][T14874] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  926.492446][T14874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  926.521159][T14874] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  926.558924][T14884] loop9: detected capacity change from 0 to 1024
[  926.574792][T14874] macvtap4: entered promiscuous mode
[  926.580453][T14874] team0: entered promiscuous mode
[  926.581754][T14884] EXT4-fs: Ignoring removed orlov option
[  926.586101][T14874] macvtap4: entered allmulticast mode
[  926.596705][T14874] team0: entered allmulticast mode
[  926.606778][T14886] 9p: Unknown Cache mode or invalid value f0xffffffffffffffff
[  926.609499][T14874] 8021q: adding VLAN 0 to HW filter on device macvtap4
[  926.627403][T14889] team0: left allmulticast mode
[  926.632404][T14889] team0: left promiscuous mode
[  926.653889][T14884] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  926.696537][T14895] loop1: detected capacity change from 0 to 512
[  926.723803][T14895] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  926.733085][T14895] EXT4-fs (loop1): orphan cleanup on readonly fs
[  926.752735][T14895] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.14641: corrupted inode contents
[  926.777877][T14895] EXT4-fs (loop1): Remounting filesystem read-only
[  926.792410][T14895] EXT4-fs (loop1): 1 truncate cleaned up
[  926.798539][   T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  926.809098][   T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  926.832623][   T12] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started
[  926.855267][T14895] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  926.913020][T13452] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  926.974680][T14899] loop1: detected capacity change from 0 to 1024
[  926.984709][T14899] EXT4-fs: Ignoring removed orlov option
[  927.013771][T14899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  927.124750][   T29] kauditd_printk_skb: 1168 callbacks suppressed
[  927.124769][   T29] audit: type=1400 audit(1768015991.353:158815): avc:  denied  { write } for  pid=14905 comm="syz.2.14644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  927.189183][T14909] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14909 comm=syz.2.14644
[  927.226152][T10592] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  927.235801][   T29] audit: type=1400 audit(1768015991.353:158816): avc:  denied  { create } for  pid=14905 comm="syz.2.14644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  927.256662][   T29] audit: type=1400 audit(1768015991.353:158817): avc:  denied  { read } for  pid=14905 comm="syz.2.14644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  927.277461][   T29] audit: type=1400 audit(1768015991.364:158818): avc:  denied  { module_request } for  pid=14905 comm="syz.2.14644" kmod="netdev-bond0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  927.299961][   T29] audit: type=1400 audit(1768015991.416:158819): avc:  denied  { read write } for  pid=9207 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  927.324597][   T29] audit: type=1400 audit(1768015991.416:158820): avc:  denied  { open } for  pid=9207 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  927.349533][   T29] audit: type=1400 audit(1768015991.416:158821): avc:  denied  { ioctl } for  pid=9207 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  927.375711][   T29] audit: type=1400 audit(1768015991.437:158822): avc:  denied  { sys_module } for  pid=14905 comm="syz.2.14644" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  927.397163][   T29] audit: type=1400 audit(1768015991.448:158823): avc:  denied  { unmount } for  pid=10592 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  927.432778][   T29] audit: type=1326 audit(1768015991.532:158824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14898 comm="syz.1.14642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0317a5f749 code=0x7ffc0000
[  927.525837][T14922] netlink: 'syz.0.14649': attribute type 30 has an invalid length.
[  927.556643][T13452] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  927.590926][T14920] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  927.601751][T14925] loop1: detected capacity change from 0 to 1024
[  927.610348][T14925] EXT4-fs: Ignoring removed orlov option
[  927.620274][T14925] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  927.628951][T14920] block device autoloading is deprecated and will be removed.
[  927.683146][T14930] 9p: Unknown Cache mode or invalid value f0xffffffffffffffff
[  927.802668][T14935] loop9: detected capacity change from 0 to 512
[  927.830767][T14935] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  927.849058][T14935] EXT4-fs (loop9): orphan cleanup on readonly fs
[  927.878100][T14935] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.14652: corrupted inode contents
[  927.900748][T14943] netlink: 'syz.8.14654': attribute type 30 has an invalid length.
[  927.909992][T14935] EXT4-fs (loop9): Remounting filesystem read-only
[  927.923546][T14935] EXT4-fs (loop9): 1 truncate cleaned up
[  927.929550][ T8499] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  927.940319][ T8499] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  927.956456][ T8499] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started
[  927.967681][T14935] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  928.025413][T10592] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  928.113375][T14956] FAULT_INJECTION: forcing a failure.
[  928.113375][T14956] name failslab, interval 1, probability 0, space 0, times 0
[  928.126077][T14956] CPU: 1 UID: 0 PID: 14956 Comm: syz.0.14660 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  928.126118][T14956] Tainted: [W]=WARN
[  928.126127][T14956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  928.126143][T14956] Call Trace:
[  928.126153][T14956]  <TASK>
[  928.126163][T14956]  __dump_stack+0x1d/0x30
[  928.126301][T14956]  dump_stack_lvl+0x95/0xd0
[  928.126354][T14956]  dump_stack+0x15/0x1b
[  928.126401][T14956]  should_fail_ex+0x265/0x280
[  928.126429][T14956]  should_failslab+0x8c/0xb0
[  928.126464][T14956]  kmem_cache_alloc_noprof+0x69/0x4b0
[  928.126491][T14956]  ? security_file_alloc+0x32/0x100
[  928.126537][T14956]  security_file_alloc+0x32/0x100
[  928.126601][T14956]  init_file+0x5c/0x1c0
[  928.126627][T14956]  alloc_empty_file+0x8b/0x200
[  928.126729][T14956]  path_openat+0x63/0x23b0
[  928.126769][T14956]  ? spurious_kernel_fault+0xf7/0x490
[  928.126807][T14956]  ? kernelmode_fixup_or_oops+0x59/0xb0
[  928.126905][T14956]  ? kernelmode_fixup_or_oops+0x59/0xb0
[  928.126932][T14956]  ? _parse_integer_limit+0x170/0x190
[  928.126955][T14956]  do_filp_open+0x109/0x230
[  928.127023][T14956]  do_open_execat+0xd8/0x260
[  928.127063][T14956]  alloc_bprm+0x25/0x350
[  928.127103][T14956]  do_execveat_common+0x12e/0x750
[  928.127171][T14956]  ? getname_flags+0x154/0x3b0
[  928.127195][T14956]  __x64_sys_execveat+0x73/0x90
[  928.127250][T14956]  x64_sys_call+0x1c0e/0x3000
[  928.127360][T14956]  do_syscall_64+0xca/0x2b0
[  928.127404][T14956]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  928.127432][T14956] RIP: 0033:0x7f2476aaf749
[  928.127451][T14956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  928.127520][T14956] RSP: 002b:00007f2475517038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[  928.127606][T14956] RAX: ffffffffffffffda RBX: 00007f2476d05fa0 RCX: 00007f2476aaf749
[  928.127623][T14956] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[  928.127639][T14956] RBP: 00007f2475517090 R08: 0000000000001000 R09: 0000000000000000
[  928.127655][T14956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  928.127706][T14956] R13: 00007f2476d06038 R14: 00007f2476d05fa0 R15: 00007fff27db8138
[  928.127726][T14956]  </TASK>
[  928.360978][T14954] netlink: 'syz.9.14657': attribute type 30 has an invalid length.
[  928.402656][T14962] 9p: Unknown Cache mode or invalid value f0xffffffffffffffff
[  928.415310][T14963] loop0: detected capacity change from 0 to 1024
[  928.423258][T13452] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  928.446620][T14963] EXT4-fs: Ignoring removed orlov option
[  928.489597][T14963] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  928.549665][T14975] __nla_validate_parse: 14 callbacks suppressed
[  928.549684][T14975] netlink: 24 bytes leftover after parsing attributes in process `syz.8.14665'.
[  928.592390][T14980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  928.613381][T14977] loop9: detected capacity change from 0 to 512
[  928.627440][T14980] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  928.647013][T14980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  928.652164][T14975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14975 comm=syz.8.14665
[  928.666220][T14980] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  928.676947][T14977] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  928.694082][T14977] EXT4-fs (loop9): orphan cleanup on readonly fs
[  928.701580][T14980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  928.713721][T14977] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.14668: corrupted inode contents
[  928.727605][T14980] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  928.739732][T14977] EXT4-fs (loop9): Remounting filesystem read-only
[  928.751530][T14980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  928.764750][T14977] EXT4-fs (loop9): 1 truncate cleaned up
[  928.771476][ T8497] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  928.782098][ T8497] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  928.791414][T14980] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  928.801491][ T8497] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started
[  928.816104][T14977] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  928.834223][T14980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14669'.
[  928.870932][T14980] macvtap14: entered promiscuous mode
[  928.876642][T14980] macvtap14: entered allmulticast mode
[  928.882142][T14980] $Hÿ: entered allmulticast mode
[  928.887357][T14980] bond_slave_0: entered allmulticast mode
[  928.893234][T14980] bond_slave_1: entered allmulticast mode
[  928.899714][T10592] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  928.901706][T14980] 8021q: adding VLAN 0 to HW filter on device macvtap14
[  928.921676][T14987] $Hÿ: left allmulticast mode
[  928.926632][T14987] bond_slave_0: left allmulticast mode
[  928.932207][T14987] bond_slave_1: left allmulticast mode
[  928.944437][T14989] netlink: 24 bytes leftover after parsing attributes in process `syz.9.14670'.
[  928.953703][T14989] netlink: 24 bytes leftover after parsing attributes in process `syz.9.14670'.
[  929.087361][T14996] tipc: Failed to obtain node identity
[  929.092959][T14996] tipc: Enabling of bearer <ib:caif0> rejected, failed to enable media
[  929.102828][T14082] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  929.140535][T14996] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14996 comm=syz.9.14672
[  929.242763][T15005] netlink: 25 bytes leftover after parsing attributes in process `syz.0.14675'.
[  929.279126][T15009] 9p: Unknown Cache mode or invalid value fscac0xffffffffffffffff
[  929.392452][T15020] netlink: 24 bytes leftover after parsing attributes in process `syz.8.14682'.
[  929.401780][T15020] netlink: 24 bytes leftover after parsing attributes in process `syz.8.14682'.
[  929.449932][T15024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  929.460102][T15026] FAULT_INJECTION: forcing a failure.
[  929.460102][T15026] name failslab, interval 1, probability 0, space 0, times 0
[  929.463719][T15024] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  929.474183][T15026] CPU: 0 UID: 0 PID: 15026 Comm: syz.0.14685 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  929.474287][T15026] Tainted: [W]=WARN
[  929.474309][T15026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  929.474350][T15026] Call Trace:
[  929.474373][T15026]  <TASK>
[  929.474396][T15026]  __dump_stack+0x1d/0x30
[  929.474501][T15026]  dump_stack_lvl+0x95/0xd0
[  929.474568][T15026]  dump_stack+0x15/0x1b
[  929.474711][T15026]  should_fail_ex+0x265/0x280
[  929.474790][T15026]  should_failslab+0x8c/0xb0
[  929.474868][T15026]  __kmalloc_cache_noprof+0x65/0x4c0
[  929.475025][T15026]  ? inet6_rtm_newroute+0x5af/0x1020
[  929.475156][T15026]  inet6_rtm_newroute+0x5af/0x1020
[  929.475242][T15026]  ? __kfree_skb+0x109/0x150
[  929.475491][T15026]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[  929.475575][T15026]  rtnetlink_rcv_msg+0x5fe/0x6d0
[  929.475656][T15026]  netlink_rcv_skb+0x123/0x220
[  929.475749][T15026]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  929.475850][T15026]  rtnetlink_rcv+0x1c/0x30
[  929.475945][T15026]  netlink_unicast+0x5c0/0x690
[  929.476076][T15026]  netlink_sendmsg+0x58b/0x6b0
[  929.476201][T15026]  ? __pfx_netlink_sendmsg+0x10/0x10
[  929.476376][T15026]  __sock_sendmsg+0x145/0x180
[  929.476434][T15026]  ____sys_sendmsg+0x345/0x4a0
[  929.476537][T15026]  ___sys_sendmsg+0x17b/0x1d0
[  929.476730][T15026]  __sys_sendmmsg+0x178/0x300
[  929.476862][T15026]  __x64_sys_sendmmsg+0x57/0x70
[  929.476894][T15026]  x64_sys_call+0x1e28/0x3000
[  929.476942][T15026]  do_syscall_64+0xca/0x2b0
[  929.477105][T15026]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  929.477223][T15026] RIP: 0033:0x7f2476aaf749
[  929.477316][T15026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  929.477452][T15026] RSP: 002b:00007f2475517038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  929.477514][T15026] RAX: ffffffffffffffda RBX: 00007f2476d05fa0 RCX: 00007f2476aaf749
[  929.477583][T15026] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005
[  929.477629][T15026] RBP: 00007f2475517090 R08: 0000000000000000 R09: 0000000000000000
[  929.477670][T15026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  929.477720][T15026] R13: 00007f2476d06038 R14: 00007f2476d05fa0 R15: 00007fff27db8138
[  929.477783][T15026]  </TASK>
[  929.724893][T15024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  929.733738][T15024] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  929.742670][T15024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  929.751242][T15024] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  929.761193][T15024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  929.769892][T15024] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  929.783829][T15024] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14684'.
[  929.799708][T15024] macvtap5: entered promiscuous mode
[  929.805272][T15024] macvtap5: entered allmulticast mode
[  929.811289][T15024] $Hÿ: entered allmulticast mode
[  929.828860][T15028] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14686'.
[  929.836003][T15024] 8021q: adding VLAN 0 to HW filter on device macvtap5
[  929.853705][T15031] netlink: 25 bytes leftover after parsing attributes in process `syz.0.14687'.
[  929.863522][T15030] $Hÿ: left allmulticast mode
[  929.875264][T15033] 9p: Unknown Cache mode or invalid value fscac0xffffffffffffffff
[  929.948635][T15041] loop9: detected capacity change from 0 to 512
[  929.964111][T15041] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  929.972719][T15041] EXT4-fs (loop9): orphan cleanup on readonly fs
[  929.982121][T15041] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.14692: corrupted inode contents
[  929.994578][T15041] EXT4-fs (loop9): Remounting filesystem read-only
[  930.001342][T15041] EXT4-fs (loop9): 1 truncate cleaned up
[  930.007197][ T8497] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  930.018459][ T8497] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  930.046220][ T8497] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started
[  930.061962][T15041] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  930.084752][T15049] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15049 comm=syz.1.14688
[  930.099597][T10592] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  930.145547][ T8497] Bluetooth: hci0: Frame reassembly failed (-84)
[  930.198179][T15058] netlink: 'syz.0.14696': attribute type 3 has an invalid length.
[  930.206200][T15058] netlink: 'syz.0.14696': attribute type 1 has an invalid length.
[  930.517234][T15071] loop0: detected capacity change from 0 to 1024
[  930.525170][T15071] ext4: Unknown parameter 'uid>00000000004294967295'
[  930.533388][T15073] 9p: Unknown Cache mode or invalid value fscac0xffffffffffffffff
[  930.637031][T15082] loop8: detected capacity change from 0 to 512
[  930.644405][T15083] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  930.657442][T15082] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  930.666679][T15082] EXT4-fs (loop8): orphan cleanup on readonly fs
[  930.675814][T15082] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.14705: corrupted inode contents
[  930.688744][T15082] EXT4-fs (loop8): Remounting filesystem read-only
[  930.695895][T15082] EXT4-fs (loop8): 1 truncate cleaned up
[  930.701992][   T12] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  930.712653][   T12] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  930.723576][   T12] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started
[  930.734979][T15082] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  930.773566][T15089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  930.782841][T15089] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  930.788095][ T9207] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  930.793759][T15089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  930.808968][T15089] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  930.818119][T15089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  930.826951][T15089] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  930.835806][T15089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  930.844579][T15089] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  930.852989][T15091] openvswitch: netlink: Missing key (keys=40, expected=100)
[  930.866647][T15089] macvtap15: entered promiscuous mode
[  930.872382][T15089] macvtap15: entered allmulticast mode
[  930.880241][T15089] 8021q: adding VLAN 0 to HW filter on device macvtap15
[  931.082496][T15098] gretap0: left allmulticast mode
[  931.087703][T15098] gretap0: left promiscuous mode
[  931.092941][T15098] bridge0: port 3(gretap0) entered disabled state
[  931.117846][T15098] bridge_slave_0: left allmulticast mode
[  931.123596][T15098] bridge_slave_0: left promiscuous mode
[  931.129384][T15098] bridge0: port 1(bridge_slave_0) entered disabled state
[  931.140891][T15098] bridge_slave_1: left allmulticast mode
[  931.146643][T15098] bridge_slave_1: left promiscuous mode
[  931.152490][T15098] bridge0: port 2(bridge_slave_1) entered disabled state
[  931.169175][T15098] $Hÿ: (slave bond_slave_0): Releasing backup interface
[  931.177962][T15098] bond_slave_0: left promiscuous mode
[  931.187213][T15098] $Hÿ: (slave bond_slave_1): Releasing backup interface
[  931.203716][T15098] bond_slave_1: left promiscuous mode
[  931.216256][T15098] team0: Port device team_slave_0 removed
[  931.227109][T15098] team0: Port device team_slave_1 removed
[  931.234611][T15098] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  931.242470][T15098] batman_adv: batadv0: Removing interface: batadv_slave_0
[  931.252489][T15098] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  931.260346][T15098] batman_adv: batadv0: Removing interface: batadv_slave_1
[  931.273077][T15098] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  931.293144][T15104] 9p: Unknown Cache mode or invalid value fscache0xffffffffffffffff
[  931.324263][T15106] FAULT_INJECTION: forcing a failure.
[  931.324263][T15106] name failslab, interval 1, probability 0, space 0, times 0
[  931.337039][T15106] CPU: 0 UID: 0 PID: 15106 Comm: syz.8.14714 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  931.337077][T15106] Tainted: [W]=WARN
[  931.337085][T15106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  931.337148][T15106] Call Trace:
[  931.337155][T15106]  <TASK>
[  931.337163][T15106]  __dump_stack+0x1d/0x30
[  931.337194][T15106]  dump_stack_lvl+0x95/0xd0
[  931.337221][T15106]  dump_stack+0x15/0x1b
[  931.337247][T15106]  should_fail_ex+0x265/0x280
[  931.337345][T15106]  should_failslab+0x8c/0xb0
[  931.337366][T15106]  __kmalloc_node_track_caller_noprof+0xb9/0x5b0
[  931.337398][T15106]  ? sidtab_sid2str_get+0xa0/0x130
[  931.337441][T15106]  kmemdup_noprof+0x2b/0x70
[  931.337527][T15106]  sidtab_sid2str_get+0xa0/0x130
[  931.337567][T15106]  security_sid_to_context_core+0x1eb/0x2e0
[  931.337610][T15106]  security_sid_to_context+0x27/0x40
[  931.337707][T15106]  avc_audit_post_callback+0x9d/0x520
[  931.337749][T15106]  ? __pfx_avc_audit_post_callback+0x10/0x10
[  931.337793][T15106]  common_lsm_audit+0x1bb/0x230
[  931.337868][T15106]  ? __pfx_avc_audit_post_callback+0x10/0x10
[  931.337907][T15106]  slow_avc_audit+0x104/0x140
[  931.337944][T15106]  avc_has_perm+0x13a/0x180
[  931.338067][T15106]  may_create+0x218/0x2b0
[  931.338109][T15106]  selinux_inode_mknod+0xb3/0xc0
[  931.338302][T15106]  security_inode_mknod+0x82/0xd0
[  931.338326][T15106]  vfs_mknod+0x2bc/0x430
[  931.338363][T15106]  do_mknodat+0x271/0x500
[  931.338402][T15106]  __x64_sys_mknod+0x51/0x60
[  931.338506][T15106]  x64_sys_call+0x2755/0x3000
[  931.338570][T15106]  do_syscall_64+0xca/0x2b0
[  931.338673][T15106]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  931.338759][T15106] RIP: 0033:0x7f62d152f749
[  931.338779][T15106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  931.338803][T15106] RSP: 002b:00007f62cff97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085
[  931.338824][T15106] RAX: ffffffffffffffda RBX: 00007f62d1785fa0 RCX: 00007f62d152f749
[  931.338869][T15106] RDX: 0000000000000710 RSI: 0000000000006000 RDI: 0000200000000180
[  931.338881][T15106] RBP: 00007f62cff97090 R08: 0000000000000000 R09: 0000000000000000
[  931.338893][T15106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  931.338905][T15106] R13: 00007f62d1786038 R14: 00007f62d1785fa0 R15: 00007ffd5b2fc0b8
[  931.338924][T15106]  </TASK>
[  931.632234][T15116] Cannot find add_set index 0 as target
[  931.733998][T15119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15119 comm=syz.0.14716
[  931.924333][   T29] kauditd_printk_skb: 1178 callbacks suppressed
[  931.924353][   T29] audit: type=1400 audit(1768015996.392:159979): avc:  denied  { create } for  pid=15126 comm="syz.8.14721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  931.952257][   T29] audit: type=1400 audit(1768015996.392:159980): avc:  denied  { connect } for  pid=15126 comm="syz.8.14721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  931.972531][   T29] audit: type=1400 audit(1768015996.424:159981): avc:  denied  { read write } for  pid=13452 comm="syz-executor" name="loop1" dev="devtmpfs" ino=1121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  931.996389][   T29] audit: type=1400 audit(1768015996.424:159982): avc:  denied  { open } for  pid=13452 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=1121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  932.020283][   T29] audit: type=1400 audit(1768015996.424:159983): avc:  denied  { ioctl } for  pid=13452 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=1121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  932.050996][   T29] audit: type=1400 audit(1768015996.445:159984): avc:  denied  { prog_run } for  pid=15128 comm="syz.1.14722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  932.076293][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[  932.081310][T10086] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  932.095542][   T29] audit: type=1400 audit(1768015996.571:159985): avc:  denied  { write } for  pid=15126 comm="syz.8.14721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  932.119554][T15130] tipc: Failed to obtain node identity
[  932.125165][T15130] tipc: Enabling of bearer <ib:caif0> rejected, failed to enable media
[  932.138007][   T29] audit: type=1400 audit(1768015996.592:159986): avc:  denied  { create } for  pid=15126 comm="syz.8.14721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  932.159121][   T29] audit: type=1400 audit(1768015996.592:159987): avc:  denied  { read } for  pid=15126 comm="syz.8.14721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  932.180086][   T29] audit: type=1400 audit(1768015996.602:159988): avc:  denied  { read write } for  pid=13452 comm="syz-executor" name="loop1" dev="devtmpfs" ino=1121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  932.219860][T15135] 9p: Unknown Cache mode or invalid value fscache0xffffffffffffffff
[  932.235691][T15137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15137 comm=syz.8.14721
[  932.370564][T15144] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  932.410372][T15146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  932.419813][T15146] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  932.428698][T15146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  932.437372][T15146] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  932.446052][T15146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  932.454822][T15146] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  932.468306][T15146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  932.477074][T15146] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  932.495978][T15146] team_slave_0: entered promiscuous mode
[  932.501993][T15146] macvtap3: entered promiscuous mode
[  932.507566][T15146] team0: entered promiscuous mode
[  932.512848][T15146] macvtap3: entered allmulticast mode
[  932.518447][T15146] team0: entered allmulticast mode
[  932.523649][T15146] team_slave_0: entered allmulticast mode
[  932.525704][T15146] 8021q: adding VLAN 0 to HW filter on device macvtap3
[  932.545206][T15152] team0: left allmulticast mode
[  932.550139][T15152] team_slave_0: left allmulticast mode
[  932.555675][T15152] team0: left promiscuous mode
[  932.560863][T15152] team_slave_0: left promiscuous mode
[  932.566686][T15151] usb usb7: usbfs: process 15151 (syz.2.14729) did not claim interface 0 before use
[  932.712335][T15158] Cannot find add_set index 0 as target
[  932.769457][T15163] 9p: Unknown Cache mode or invalid value fscache0xffffffffffffffff
[  932.811246][T15159] tipc: Failed to obtain node identity
[  932.816902][T15159] tipc: Enabling of bearer <ib:caif0> rejected, failed to enable media
[  932.866833][T15159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15159 comm=syz.0.14732
[  933.050668][T15179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15179 comm=syz.8.14740
[  933.094105][T15184] set_capacity_and_notify: 1 callbacks suppressed
[  933.094147][T15184] loop9: detected capacity change from 0 to 1024
[  933.107943][T15184] EXT4-fs: Ignoring removed orlov option
[  933.129122][T15184] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  933.153418][T15191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  933.164146][T15191] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  933.174382][T15191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  933.183347][T15191] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  933.192466][T15191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  933.201227][T15191] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  933.210267][T15191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  933.219071][T15191] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  933.244104][T15191] macvtap2: entered promiscuous mode
[  933.249507][T15191] team0: entered promiscuous mode
[  933.254776][T15191] macvtap2: entered allmulticast mode
[  933.260308][T15191] team0: entered allmulticast mode
[  933.266534][T15191] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  933.282291][T15191] team0: left allmulticast mode
[  933.287255][T15191] team0: left promiscuous mode
[  933.471422][T15197] 9p: Bad value for 'wfdno'
[  933.501062][T15200] __nla_validate_parse: 15 callbacks suppressed
[  933.501078][T15200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14748'.
[  933.551242][T15203] loop9: detected capacity change from 0 to 512
[  933.562956][T15203] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  933.571513][T15203] EXT4-fs (loop9): orphan cleanup on readonly fs
[  933.581270][T15203] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.14749: corrupted inode contents
[  933.593882][T15203] EXT4-fs (loop9): Remounting filesystem read-only
[  933.601340][T15203] EXT4-fs (loop9): 1 truncate cleaned up
[  933.607361][ T8520] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  933.617998][ T8520] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  933.629652][ T8520] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started
[  933.675050][T15211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  933.684805][T15211] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  933.694614][T15211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  933.695921][T15213] loop9: detected capacity change from 0 to 512
[  933.708957][T15211] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  933.715879][T15213] EXT4-fs: Ignoring removed bh option
[  933.720491][T15211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  933.731301][T15213] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  933.731464][T15211] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  933.749202][T15211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  933.758179][T15211] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  933.766912][T15213] ext4 filesystem being mounted at /320/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  933.770410][T15211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14753'.
[  933.798526][T15211] team_slave_0: entered promiscuous mode
[  933.804304][T15211] team_slave_1: entered promiscuous mode
[  933.827679][T15211] macvtap2: entered promiscuous mode
[  933.833103][T15211] team0: entered promiscuous mode
[  933.839099][T15211] macvtap2: entered allmulticast mode
[  933.844543][T15211] team0: entered allmulticast mode
[  933.849767][T15211] team_slave_0: entered allmulticast mode
[  933.855610][T15211] team_slave_1: entered allmulticast mode
[  933.863194][T15211] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  933.886555][T15219] team0: left allmulticast mode
[  933.891457][T15219] team_slave_0: left allmulticast mode
[  933.897091][T15219] team_slave_1: left allmulticast mode
[  933.902768][T15219] team0: left promiscuous mode
[  933.907935][T15219] team_slave_0: left promiscuous mode
[  933.913513][T15219] team_slave_1: left promiscuous mode
[  933.922670][T15223] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  933.943277][T15228] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  934.048884][T15230] 9p: Bad value for 'wfdno'
[  934.079419][T15232] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14759'.
[  934.104218][T15232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14759'.
[  934.114103][T15232] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  934.121383][T15234] sd 0:0:1:0: device reset
[  934.121651][T15232] batman_adv: batadv0: Removing interface: batadv_slave_0
[  934.127265][T15234] sd 0:0:1:0: device reset
[  934.139690][T15232] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  934.147183][T15232] batman_adv: batadv0: Removing interface: batadv_slave_1
[  934.172373][T15235] netlink: 'syz.2.14759': attribute type 3 has an invalid length.
[  934.180282][T15235] netlink: 'syz.2.14759': attribute type 1 has an invalid length.
[  934.188214][T15235] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.14759'.
[  934.205915][T15237] netlink: 12 bytes leftover after parsing attributes in process `syz.9.14760'.
[  934.281980][T15241] FAULT_INJECTION: forcing a failure.
[  934.281980][T15241] name failslab, interval 1, probability 0, space 0, times 0
[  934.307987][T15241] CPU: 1 UID: 0 PID: 15241 Comm: syz.2.14762 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  934.308016][T15241] Tainted: [W]=WARN
[  934.308022][T15241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  934.308036][T15241] Call Trace:
[  934.308041][T15241]  <TASK>
[  934.308047][T15241]  __dump_stack+0x1d/0x30
[  934.308069][T15241]  dump_stack_lvl+0x95/0xd0
[  934.308089][T15241]  dump_stack+0x15/0x1b
[  934.308107][T15241]  should_fail_ex+0x265/0x280
[  934.308127][T15241]  should_failslab+0x8c/0xb0
[  934.308146][T15241]  kmem_cache_alloc_noprof+0x69/0x4b0
[  934.308165][T15241]  ? vm_area_alloc+0x2c/0xb0
[  934.308186][T15241]  vm_area_alloc+0x2c/0xb0
[  934.308205][T15241]  mmap_region+0xadf/0x1410
[  934.308265][T15241]  do_mmap+0x9b3/0xbe0
[  934.308292][T15241]  vm_mmap_pgoff+0x17a/0x2e0
[  934.308317][T15241]  ksys_mmap_pgoff+0xc2/0x310
[  934.308339][T15241]  ? __x64_sys_mmap+0x49/0x70
[  934.308365][T15241]  x64_sys_call+0x16bb/0x3000
[  934.308387][T15241]  do_syscall_64+0xca/0x2b0
[  934.308454][T15241]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  934.308481][T15241] RIP: 0033:0x7f92ec9ef783
[  934.308503][T15241] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7
[  934.308519][T15241] RSP: 002b:00007f92eb456e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  934.308537][T15241] RAX: ffffffffffffffda RBX: 0000000000000481 RCX: 00007f92ec9ef783
[  934.308548][T15241] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000
[  934.308559][T15241] RBP: 0000200000001042 R08: 00000000ffffffff R09: 0000000000000000
[  934.308571][T15241] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000007
[  934.308581][T15241] R13: 00007f92eb456ef0 R14: 00007f92eb456eb0 R15: 00002000000002c0
[  934.308600][T15241]  </TASK>
[  934.599220][T15249] usb usb7: usbfs: process 15249 (syz.2.14764) did not claim interface 0 before use
[  934.723218][T15259] 9p: Bad value for 'wfdno'
[  934.760322][T15265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14771'.
[  934.767170][T15263] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14770'.
[  934.839321][T15263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14770'.
[  934.899492][T15272] sctp: [Deprecated]: syz.8.14774 (pid 15272) Use of struct sctp_assoc_value in delayed_ack socket option.
[  934.899492][T15272] Use struct sctp_sack_info instead
[  934.901728][T15266] netlink: 'syz.1.14770': attribute type 3 has an invalid length.
[  934.923985][T15266] netlink: 'syz.1.14770': attribute type 1 has an invalid length.
[  934.931822][T15266] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.14770'.
[  934.942227][T15272] loop8: detected capacity change from 0 to 1024
[  934.953721][T15272] EXT4-fs: Ignoring removed orlov option
[  934.959572][T15272] EXT4-fs: Ignoring removed orlov option
[  934.999193][T15279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  935.011918][T15279] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  935.021846][T15279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  935.030865][T15279] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  935.041666][T15279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  935.062335][T15279] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  935.071174][T15279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  935.095095][T15279] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  935.108694][T15279] macvtap16: entered promiscuous mode
[  935.114411][T15279] macvtap16: entered allmulticast mode
[  935.121293][T15279] 8021q: adding VLAN 0 to HW filter on device macvtap16
[  935.214428][T15292] 9p: Bad value for 'rfdno'
[  935.330685][T15299] netlink: 'syz.8.14785': attribute type 30 has an invalid length.
[  935.596341][T15316] loop1: detected capacity change from 0 to 512
[  935.624387][T15316] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  935.634777][T15316] EXT4-fs (loop1): orphan cleanup on readonly fs
[  935.645766][T15316] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.14791: corrupted inode contents
[  935.661975][T15321] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  935.676711][T15316] EXT4-fs (loop1): Remounting filesystem read-only
[  935.699160][T15316] EXT4-fs (loop1): 1 truncate cleaned up
[  935.707531][T15323] 9p: Bad value for 'rfdno'
[  935.714426][   T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  935.725067][   T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  935.760916][   T12] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started
[  935.774697][T15326] loop2: detected capacity change from 0 to 1024
[  935.784295][T15326] EXT4-fs: Ignoring removed orlov option
[  935.892753][T15335] loop0: detected capacity change from 0 to 512
[  935.909146][T15335] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  935.928524][T15337] loop1: detected capacity change from 0 to 1024
[  935.936529][T15337] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  935.954603][T15337] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.14797: Invalid block bitmap block 0 in block_group 0
[  935.970412][T15335] EXT4-fs (loop0): 1 truncate cleaned up
[  935.981543][T15337] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.14797: Failed to acquire dquot type 0
[  936.033112][T15337] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.14797: Freeing blocks not in datazone - block = 0, count = 4096
[  936.051300][T15347] netlink: zone id is out of range
[  936.056737][T15347] netlink: zone id is out of range
[  936.062232][T15337] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.14797: Invalid inode bitmap blk 0 in block_group 0
[  936.083923][T15347] netlink: zone id is out of range
[  936.090019][T15337] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem
[  936.090229][ T8528] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:19: Failed to release dquot type 0
[  936.112292][T15337] EXT4-fs (loop1): 1 orphan inode deleted
[  936.123663][T15347] netlink: zone id is out of range
[  936.141515][T15347] netlink: zone id is out of range
[  936.167050][T15347] netlink: zone id is out of range
[  936.172883][T15347] netlink: del zone limit has 8 unknown bytes
[  936.188379][T15358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15358 comm=syz.8.14803
[  936.232536][T15360] xt_hashlimit: max too large, truncated to 1048576
[  936.274956][T15362] 9p: Bad value for 'rfdno'
[  936.336795][T15366] loop9: detected capacity change from 0 to 512
[  936.345911][T15368] loop2: detected capacity change from 0 to 512
[  936.374021][T15368] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  936.383828][T15368] EXT4-fs (loop2): orphan cleanup on readonly fs
[  936.391048][T15366] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  936.401187][T15368] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.14808: corrupted inode contents
[  936.414256][T15366] EXT4-fs (loop9): orphan cleanup on readonly fs
[  936.418042][T15374] FAULT_INJECTION: forcing a failure.
[  936.418042][T15374] name failslab, interval 1, probability 0, space 0, times 0
[  936.422893][T15368] EXT4-fs (loop2): Remounting filesystem read-only
[  936.434240][T15374] CPU: 0 UID: 0 PID: 15374 Comm: syz.1.14809 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  936.434377][T15374] Tainted: [W]=WARN
[  936.434459][T15374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  936.434562][T15374] Call Trace:
[  936.434585][T15374]  <TASK>
[  936.434615][T15374]  __dump_stack+0x1d/0x30
[  936.434827][T15374]  dump_stack_lvl+0x95/0xd0
[  936.434900][T15374]  dump_stack+0x15/0x1b
[  936.434985][T15374]  should_fail_ex+0x265/0x280
[  936.435065][T15374]  should_failslab+0x8c/0xb0
[  936.435158][T15374]  kmem_cache_alloc_lru_noprof+0x6d/0x4c0
[  936.435219][T15374]  ? __d_alloc+0x37/0x340
[  936.435302][T15374]  ? should_fail_ex+0x30/0x280
[  936.435433][T15374]  __d_alloc+0x37/0x340
[  936.435507][T15374]  ? selinux_inode_permission+0x6be/0x7c0
[  936.435609][T15374]  d_alloc_parallel+0x54/0xcd0
[  936.435706][T15374]  ? security_inode_permission+0x4a/0xb0
[  936.435858][T15374]  ? lockref_get_not_dead+0x120/0x1c0
[  936.435910][T15374]  ? __rcu_read_unlock+0x4f/0x70
[  936.436066][T15374]  __lookup_slow+0x8c/0x250
[  936.436182][T15374]  lookup_slow+0x3c/0x60
[  936.436315][T15374]  path_lookupat+0x2f7/0x500
[  936.436414][T15374]  filename_lookup+0x147/0x340
[  936.436537][T15374]  kern_path+0x3b/0x130
[  936.436661][T15374]  autofs_dev_ioctl_ismountpoint+0x12d/0x4c0
[  936.436752][T15374]  ? __pfx_autofs_dev_ioctl_ismountpoint+0x10/0x10
[  936.436828][T15374]  autofs_dev_ioctl+0x354/0x6a0
[  936.436892][T15374]  ? __pfx_autofs_dev_ioctl+0x10/0x10
[  936.436956][T15374]  __se_sys_ioctl+0xce/0x140
[  936.437128][T15374]  __x64_sys_ioctl+0x43/0x50
[  936.437253][T15374]  x64_sys_call+0x14b0/0x3000
[  936.437383][T15374]  do_syscall_64+0xca/0x2b0
[  936.437489][T15374]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  936.437561][T15374] RIP: 0033:0x7f0317a5f749
[  936.437601][T15374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  936.437656][T15374] RSP: 002b:00007f03164c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  936.437777][T15374] RAX: ffffffffffffffda RBX: 00007f0317cb5fa0 RCX: 00007f0317a5f749
[  936.437813][T15374] RDX: 0000200000000200 RSI: 00000000c018937e RDI: 0000000000000003
[  936.437855][T15374] RBP: 00007f03164c7090 R08: 0000000000000000 R09: 0000000000000000
[  936.437897][T15374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  936.437938][T15374] R13: 00007f0317cb6038 R14: 00007f0317cb5fa0 R15: 00007fff77f631e8
[  936.438008][T15374]  </TASK>
[  936.514910][T15366] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.14807: corrupted inode contents
[  936.522329][T15368] EXT4-fs (loop2): 1 truncate cleaned up
[  936.539390][ T8512] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  936.546061][T15366] EXT4-fs (loop9): Remounting filesystem read-only
[  936.546273][T15366] EXT4-fs (loop9): 1 truncate cleaned up
[  936.550382][ T8512] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  936.572915][ T8512] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[  936.744514][   T29] kauditd_printk_skb: 1089 callbacks suppressed
[  936.744597][   T29] audit: type=1400 audit(1768016001.442:161059): avc:  denied  { create } for  pid=15379 comm="syz.1.14812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  936.744926][ T8512] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  936.790327][ T8512] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  936.800333][ T8512] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  936.811392][ T8512] Quota error (device loop9): write_blk: dquota write failed
[  936.819162][ T8512] Quota error (device loop9): remove_free_dqentry: Can't write block (5) with free entries
[  936.829609][ T8512] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  936.840395][ T8512] Quota error (device loop9): write_blk: dquota write failed
[  936.847833][ T8512] Quota error (device loop9): free_dqentry: Can't move quota data block (5) to free list
[  936.859702][ T8512] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started
[  936.870102][ T8512] Quota error (device loop9): v2_write_file_info: Can't write info structure
[  936.879156][ T8512] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  936.890710][   T29] audit: type=1326 audit(1768016001.610:161060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15367 comm="syz.2.14808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f92ec9edf90 code=0x7ffc0000
[  936.959744][T15388] xt_hashlimit: max too large, truncated to 1048576
[  937.014312][T15392] 9p: Bad value for 'rfdno'
[  937.073030][T15404] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  937.192945][T15415] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  937.203040][T15415] EXT4-fs (loop0): orphan cleanup on readonly fs
[  937.211667][T15415] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.14827: corrupted inode contents
[  937.224915][T15415] EXT4-fs (loop0): Remounting filesystem read-only
[  937.234317][T15415] EXT4-fs (loop0): 1 truncate cleaned up
[  937.240375][T22834] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  937.251093][T22834] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  937.252107][T15423] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15423 comm=syz.2.14826
[  937.262581][T22834] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[  937.341990][T15429] xt_hashlimit: max too large, truncated to 1048576
[  937.372389][T15431] 9p: Bad value for 'rfdno'
[  937.449140][T15434] usb usb7: usbfs: process 15434 (syz.0.14832) did not claim interface 0 before use
[  937.516483][T15436] EXT4-fs: Ignoring removed orlov option
[  937.827873][T15445] EXT4-fs: Ignoring removed orlov option
[  937.974333][T15455] netlink: 'syz.2.14840': attribute type 30 has an invalid length.
[  938.002948][ T8528] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  938.031942][ T8528] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  938.062500][ T8528] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  938.080568][ T8528] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  938.093055][ T8497] Bluetooth: hci0: Frame reassembly failed (-84)
[  938.103657][T15458] 9p: Bad value for 'rfdno'
[  938.282755][T15471] bridge0: port 1(macsec1) entered blocking state
[  938.290352][T15471] bridge0: port 1(macsec1) entered disabled state
[  938.297314][T15471] macsec1: entered allmulticast mode
[  938.303404][T15471] macsec1: left allmulticast mode
[  938.328746][T15474] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  938.340878][T15475] usb usb7: usbfs: process 15475 (syz.1.14846) did not claim interface 0 before use
[  938.442625][T15482] FAULT_INJECTION: forcing a failure.
[  938.442625][T15482] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  938.455829][T15482] CPU: 0 UID: 0 PID: 15482 Comm: syz.1.14851 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  938.455871][T15482] Tainted: [W]=WARN
[  938.455879][T15482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  938.455892][T15482] Call Trace:
[  938.455898][T15482]  <TASK>
[  938.455928][T15482]  __dump_stack+0x1d/0x30
[  938.455961][T15482]  dump_stack_lvl+0x95/0xd0
[  938.456055][T15482]  dump_stack+0x15/0x1b
[  938.456076][T15482]  should_fail_ex+0x265/0x280
[  938.456106][T15482]  should_fail+0xb/0x20
[  938.456191][T15482]  should_fail_usercopy+0x1a/0x20
[  938.456222][T15482]  _copy_from_iter+0xcf/0xe70
[  938.456251][T15482]  ? __alloc_skb+0x396/0x4b0
[  938.456325][T15482]  ? __alloc_skb+0x228/0x4b0
[  938.456351][T15482]  netlink_sendmsg+0x471/0x6b0
[  938.456395][T15482]  ? __pfx_netlink_sendmsg+0x10/0x10
[  938.456515][T15482]  __sock_sendmsg+0x145/0x180
[  938.456542][T15482]  ____sys_sendmsg+0x31e/0x4a0
[  938.456623][T15482]  ___sys_sendmsg+0x17b/0x1d0
[  938.456672][T15482]  __x64_sys_sendmsg+0xd4/0x160
[  938.456709][T15482]  x64_sys_call+0x17ba/0x3000
[  938.456813][T15482]  do_syscall_64+0xca/0x2b0
[  938.456831][T15483] __nla_validate_parse: 19 callbacks suppressed
[  938.456844][T15483] netlink: 24 bytes leftover after parsing attributes in process `syz.8.14850'.
[  938.456966][T15482]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  938.457092][T15482] RIP: 0033:0x7f0317a5f749
[  938.457137][T15482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  938.457199][T15482] RSP: 002b:00007f03164c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  938.457269][T15482] RAX: ffffffffffffffda RBX: 00007f0317cb5fa0 RCX: 00007f0317a5f749
[  938.457305][T15482] RDX: 00000000000400d4 RSI: 0000200000000240 RDI: 0000000000000005
[  938.457400][T15482] RBP: 00007f03164c7090 R08: 0000000000000000 R09: 0000000000000000
[  938.457442][T15482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  938.457484][T15482] R13: 00007f0317cb6038 R14: 00007f0317cb5fa0 R15: 00007fff77f631e8
[  938.457564][T15482]  </TASK>
[  938.548715][T15485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14852'.
[  938.626840][T15483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15483 comm=syz.8.14850
[  938.635057][T15485] netlink: 'syz.1.14852': attribute type 30 has an invalid length.
[  938.720759][T15491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  938.731307][T15491] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  938.739636][T15493] 9pnet_fd: Insufficient options for proto=fd
[  938.759793][T15491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  938.768725][T15491] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  938.779329][T15491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  938.798478][T15491] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  938.821830][T15491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14853'.
[  938.836162][T15491] macvtap3: entered promiscuous mode
[  938.841560][T15491] team0: entered promiscuous mode
[  938.846772][T15491] macvtap3: entered allmulticast mode
[  938.852279][T15491] team0: entered allmulticast mode
[  938.859252][T15491] 8021q: adding VLAN 0 to HW filter on device macvtap3
[  938.879147][T15491] team0: left allmulticast mode
[  938.884182][T15491] team0: left promiscuous mode
[  938.922673][T15497] macvtap4: entered promiscuous mode
[  938.928062][T15497] macvtap4: entered allmulticast mode
[  938.934273][T15497] dummy0: entered promiscuous mode
[  938.939416][T15497] dummy0: entered allmulticast mode
[  938.945768][T15497] team0: Device macvtap4 failed to register rx_handler
[  938.953487][T15497] dummy0: left allmulticast mode
[  938.958718][T15497] dummy0: left promiscuous mode
[  939.073210][T15501] netlink: 8 bytes leftover after parsing attributes in process `syz.9.14858'.
[  939.137304][T15507] netlink: 131740 bytes leftover after parsing attributes in process `syz.9.14861'.
[  939.147310][T15507] netlink: zone id is out of range
[  939.152466][T15507] netlink: zone id is out of range
[  939.230172][T15517] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14863'.
[  939.239674][T15517] netlink: 'syz.8.14863': attribute type 30 has an invalid length.
[  939.332651][T15522] set_capacity_and_notify: 3 callbacks suppressed
[  939.332669][T15522] loop8: detected capacity change from 0 to 128
[  939.367507][T15527] netlink: 25 bytes leftover after parsing attributes in process `syz.9.14866'.
[  939.425168][T15529] loop8: detected capacity change from 0 to 764
[  939.436639][T15529] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  939.451864][T15533] loop9: detected capacity change from 0 to 1024
[  939.463949][T15529] Symlink component flag not implemented
[  939.471516][T15533] EXT4-fs: Ignoring removed orlov option
[  939.477403][T15529] Symlink component flag not implemented (7)
[  939.667975][T15545] netlink: 24 bytes leftover after parsing attributes in process `syz.8.14872'.
[  939.695601][T15545] netlink: 'syz.8.14872': attribute type 3 has an invalid length.
[  939.703510][T15545] netlink: 'syz.8.14872': attribute type 1 has an invalid length.
[  939.711465][T15545] netlink: 181400 bytes leftover after parsing attributes in process `syz.8.14872'.
[  939.734901][T15547] loop1: detected capacity change from 0 to 512
[  939.764003][T15547] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.14871: EA inode hash validation failed
[  939.786693][T15547] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.14871: corrupted inode contents
[  939.799275][T15547] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.14871: mark_inode_dirty error
[  939.811295][T15547] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.14871: corrupted inode contents
[  939.824959][T15547] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.14871: mark_inode_dirty error
[  939.838472][T15547] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.14871: mark inode dirty (error -117)
[  939.852277][T15547] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117)
[  939.861811][T15547] EXT4-fs (loop1): 1 orphan inode deleted
[  939.941513][T15553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15553 comm=syz.8.14873
[  939.979178][T13452] EXT4-fs unmount: 27 callbacks suppressed
[  939.979197][T13452] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  940.001866][T10086] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  940.002159][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[  940.040187][T10592] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  940.066231][T15562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14875'.
[  940.075630][T15562] netlink: 'syz.1.14875': attribute type 30 has an invalid length.
[  940.111967][T15567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  940.121950][T15567] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  940.131143][T15567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  940.140986][T15567] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  940.150787][T15567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  940.159766][T15567] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  940.181416][T15567] macvtap4: entered promiscuous mode
[  940.187071][T15567] team0: entered promiscuous mode
[  940.192410][T15567] macvtap4: entered allmulticast mode
[  940.197819][T15567] team0: entered allmulticast mode
[  940.203666][T15567] 8021q: adding VLAN 0 to HW filter on device macvtap4
[  940.216474][T15567] team0: left allmulticast mode
[  940.221483][T15567] team0: left promiscuous mode
[  940.324422][T15584] loop9: detected capacity change from 0 to 512
[  940.331812][T15584] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  940.347367][T15584] EXT4-fs (loop9): 1 truncate cleaned up
[  940.354369][T15584] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  940.378379][T15584] EXT4-fs error (device loop9): ext4_xattr_block_find:1878: inode #15: comm syz.9.14886: corrupted xattr block 33: invalid header
[  940.393164][ T8512] Bluetooth: hci0: Frame reassembly failed (-84)
[  940.394317][T15584] EXT4-fs (loop9): Remounting filesystem read-only
[  940.560324][T10592] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  940.600138][T15592] netlink: 'syz.8.14889': attribute type 30 has an invalid length.
[  940.748425][T15607] wireguard0: entered promiscuous mode
[  940.754576][T15607] wireguard0: entered allmulticast mode
[  940.873610][T15618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  940.882500][T15618] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  940.892556][T15618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  940.902349][T15618] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  940.912712][T15618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  940.922204][T15618] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  940.932291][T15618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  940.941097][T15618] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  940.957451][T15618] macvtap5: entered promiscuous mode
[  940.963119][T15618] macvtap5: entered allmulticast mode
[  940.968523][T15618] $Hÿ: entered allmulticast mode
[  940.975747][T15618] 8021q: adding VLAN 0 to HW filter on device macvtap5
[  940.991688][T15618] $Hÿ: left allmulticast mode
[  941.200210][T15624] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15624 comm=syz.8.14899
[  941.290378][T15638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  941.299753][T15638] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  941.308830][T15638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  941.317762][T15638] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  941.326469][T15638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  941.334974][T15638] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  941.351042][T15638] macvtap17: entered promiscuous mode
[  941.356761][T15638] macvtap17: entered allmulticast mode
[  941.363416][T15638] 8021q: adding VLAN 0 to HW filter on device macvtap17
[  941.511147][   T29] kauditd_printk_skb: 1191 callbacks suppressed
[  941.511164][   T29] audit: type=1400 audit(1768016006.449:162246): avc:  denied  { create } for  pid=15639 comm="syz.1.14907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  941.538177][   T29] audit: type=1400 audit(1768016006.460:162247): avc:  denied  { create } for  pid=15639 comm="syz.1.14907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  941.558237][   T29] audit: type=1400 audit(1768016006.460:162248): avc:  denied  { write } for  pid=15639 comm="syz.1.14907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  941.578314][   T29] audit: type=1400 audit(1768016006.502:162249): avc:  denied  { read } for  pid=15639 comm="syz.1.14907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  941.678065][   T29] audit: type=1400 audit(1768016006.628:162250): avc:  denied  { create } for  pid=15645 comm="syz.9.14909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  941.699823][   T29] audit: type=1400 audit(1768016006.628:162251): avc:  denied  { write } for  pid=15645 comm="syz.9.14909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  941.738652][   T29] audit: type=1400 audit(1768016006.691:162252): avc:  denied  { mounton } for  pid=15647 comm="syz.9.14910" path="/354/file0" dev="tmpfs" ino=1885 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  941.738890][T15648] 9p: Bad value for 'rfdno'
[  941.837784][T15651] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  941.864224][   T29] audit: type=1400 audit(1768016006.817:162253): avc:  denied  { name_bind } for  pid=15652 comm="syz.1.14912" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  941.886654][   T29] audit: type=1400 audit(1768016006.817:162254): avc:  denied  { node_bind } for  pid=15652 comm="syz.1.14912" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  941.928832][T15655] netlink: 'syz.2.14913': attribute type 30 has an invalid length.
[  941.960811][   T29] audit: type=1326 audit(1768016006.922:162255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15659 comm="syz.2.14915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ec9ef749 code=0x7ffc0000
[  941.997944][T15665] FAULT_INJECTION: forcing a failure.
[  941.997944][T15665] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  942.011316][T15665] CPU: 0 UID: 0 PID: 15665 Comm: syz.2.14917 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  942.011353][T15665] Tainted: [W]=WARN
[  942.011361][T15665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  942.011373][T15665] Call Trace:
[  942.011379][T15665]  <TASK>
[  942.011387][T15665]  __dump_stack+0x1d/0x30
[  942.011432][T15665]  dump_stack_lvl+0x95/0xd0
[  942.011490][T15665]  dump_stack+0x15/0x1b
[  942.011523][T15665]  should_fail_ex+0x265/0x280
[  942.011562][T15665]  should_fail+0xb/0x20
[  942.011586][T15665]  should_fail_usercopy+0x1a/0x20
[  942.011625][T15665]  _copy_from_user+0x1c/0xb0
[  942.011661][T15665]  __sys_connect+0xd0/0x2b0
[  942.011737][T15665]  __x64_sys_connect+0x3f/0x50
[  942.011769][T15665]  x64_sys_call+0x2e09/0x3000
[  942.011802][T15665]  do_syscall_64+0xca/0x2b0
[  942.011937][T15665]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  942.011997][T15665] RIP: 0033:0x7f92ec9ef749
[  942.012018][T15665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  942.012042][T15665] RSP: 002b:00007f92eb457038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  942.012067][T15665] RAX: ffffffffffffffda RBX: 00007f92ecc45fa0 RCX: 00007f92ec9ef749
[  942.012150][T15665] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003
[  942.012229][T15665] RBP: 00007f92eb457090 R08: 0000000000000000 R09: 0000000000000000
[  942.012241][T15665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  942.012253][T15665] R13: 00007f92ecc46038 R14: 00007f92ecc45fa0 R15: 00007ffd1c137ce8
[  942.012274][T15665]  </TASK>
[  942.017850][T15666] netlink: 'syz.1.14912': attribute type 1 has an invalid length.
[  942.075985][T15668] loop8: detected capacity change from 0 to 1024
[  942.088550][T15669] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  942.100336][T15668] EXT4-fs: Ignoring removed orlov option
[  942.213273][T15669] hsr_slave_0: left promiscuous mode
[  942.221040][T15669] hsr_slave_1: left promiscuous mode
[  942.229681][T15668] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  942.286893][T10086] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  942.306301][ T9207] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  942.430327][T15691] wireguard0: entered promiscuous mode
[  942.435881][T15691] wireguard0: entered allmulticast mode
[  942.466874][T15689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15689 comm=syz.2.14924
[  942.642515][T22826] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  942.665495][T22826] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  942.681474][T22826] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  942.714561][T22826] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  942.757467][T15713] loop8: detected capacity change from 0 to 1024
[  942.787999][T15713] EXT4-fs: Ignoring removed orlov option
[  942.804417][T15713] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  942.899678][ T9207] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  942.939206][T15728] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  942.979645][T15732] tmpfs: Bad value for 'mpol'
[  942.993678][T15732] loop0: detected capacity change from 0 to 512
[  943.001633][T15732] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  943.033327][T15732] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  943.042177][T15732] FAT-fs (loop0): Filesystem has been set read-only
[  943.051961][T15732] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548)
[  943.063576][T15732] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548)
[  943.107198][T15742] 9p: Unknown access argument 18446744073709551615: -34
[  943.119856][T15741] 9p: Could not find request transport: fd0x0000000000000003
[  943.280532][T15755] loop0: detected capacity change from 0 to 512
[  943.295105][T15755] /dev/loop0: Can't open blockdev
[  943.316688][T15742] netlink: 'syz.0.14945': attribute type 1 has an invalid length.
[  943.359523][T15763] wireguard0: entered promiscuous mode
[  943.365154][T15763] wireguard0: entered allmulticast mode
[  943.376699][T15761] loop2: detected capacity change from 0 to 512
[  943.392807][T15761] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  943.401429][T15761] EXT4-fs (loop2): orphan cleanup on readonly fs
[  943.409766][T15761] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.14952: corrupted inode contents
[  943.424403][T15761] EXT4-fs (loop2): Remounting filesystem read-only
[  943.431836][T15761] EXT4-fs (loop2): 1 truncate cleaned up
[  943.438499][ T8497] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  943.442049][T15766] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  943.449550][ T8497] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  943.468665][T15766] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  943.515114][ T8497] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[  943.534341][T15761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  943.572762][T15766] ==================================================================
[  943.580929][T15766] BUG: KCSAN: data-race in mem_cgroup_track_foreign_dirty_slowpath / mem_cgroup_track_foreign_dirty_slowpath
[  943.592539][T15766] 
[  943.594899][T15766] write to 0xffff88811b370568 of 8 bytes by task 15762 on cpu 0:
[  943.602651][T15766]  mem_cgroup_track_foreign_dirty_slowpath+0x321/0x440
[  943.609548][T15766]  __folio_mark_dirty+0x3c2/0x4a0
[  943.614728][T15766]  mark_buffer_dirty+0x11e/0x210
[  943.619803][T15766]  block_page_mkwrite+0x287/0x3d0
[  943.624962][T15766]  ext4_page_mkwrite+0x859/0xb90
[  943.629947][T15766]  handle_mm_fault+0x1601/0x2c60
[  943.634936][T15766]  do_user_addr_fault+0x630/0x1080
[  943.637694][T15781] 9p: Could not find request transport: fd0x0000000000000003
[  943.640222][T15766]  exc_page_fault+0x62/0xa0
[  943.640260][T15766]  asm_exc_page_fault+0x26/0x30
[  943.657423][T15766] 
[  943.659754][T15766] read to 0xffff88811b370568 of 8 bytes by task 15766 on cpu 1:
[  943.667388][T15766]  mem_cgroup_track_foreign_dirty_slowpath+0xd5/0x440
[  943.674199][T15766]  __folio_mark_dirty+0x3c2/0x4a0
[  943.679253][T15766]  mark_buffer_dirty+0x11e/0x210
[  943.684214][T15766]  folio_zero_new_buffers+0x28c/0x2e0
[  943.689606][T15766]  block_write_end+0x200/0x210
[  943.694395][T15766]  ext4_da_write_end+0x1d3/0x800
[  943.699361][T15766]  generic_perform_write+0x312/0x490
[  943.704711][T15766]  ext4_buffered_write_iter+0x1ee/0x3c0
[  943.710290][T15766]  ext4_file_write_iter+0x387/0xf60
[  943.715518][T15766]  vfs_write+0x52a/0x960
[  943.719779][T15766]  ksys_write+0xda/0x1a0
[  943.724039][T15766]  __x64_sys_write+0x40/0x50
[  943.728652][T15766]  x64_sys_call+0x2847/0x3000
[  943.733378][T15766]  do_syscall_64+0xca/0x2b0
[  943.737920][T15766]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  943.743831][T15766] 
[  943.746161][T15766] value changed: 0x0000000100010166 -> 0x00000001000101ce
[  943.753283][T15766] 
[  943.755618][T15766] Reported by Kernel Concurrency Sanitizer on:
[  943.761873][T15766] CPU: 1 UID: 0 PID: 15766 Comm: syz.0.14954 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  943.773354][T15766] Tainted: [W]=WARN
[  943.777164][T15766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  943.787240][T15766] ==================================================================
[  943.808858][ T8237] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  944.023784][T15779] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  944.038440][T15779] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2048 with error 28
[  944.051653][T15779] EXT4-fs (loop0): This should not happen!! Data will be lost
[  944.051653][T15779] 
[  944.061596][T15779] EXT4-fs (loop0): Total free blocks count 0
[  944.067617][T15779] EXT4-fs (loop0): Free/Dirty block details
[  944.073636][T15779] EXT4-fs (loop0): free_blocks=65280
[  944.078939][T15779] EXT4-fs (loop0): dirty_blocks=8193
[  944.084227][T15779] EXT4-fs (loop0): Block reservation details
[  944.090251][T15779] EXT4-fs (loop0): i_reserved_data_blocks=8193
[  944.155546][ T8497] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28