last executing test programs:

3m51.814737405s ago: executing program 0 (id=762):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f00000006c0)={[{@grpjquota}, {@commit={'commit', 0x3d, 0x100}}, {@grpquota}, {@errors_remount}]}, 0x1, 0x7a4, &(0x7f0000000f00)="$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")
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000005}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0xd0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x3, 0x800000000001}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r1, &(0x7f0000002300)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x0, 0x200000}, 0x4}}, 0x10, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000027c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x18)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100)
r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x8, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x6, 0x1ff}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_msfilter(r6, 0x0, 0x29, 0x0, 0x5000)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="4800000010000104000000000400000000000000", @ANYRES32=r8, @ANYBLOB="000000070000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=r8], 0x48}}, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x232442, 0x41)

3m51.619081348s ago: executing program 0 (id=766):
r0 = socket$inet(0x2, 0x3, 0x8)
setsockopt$inet_int(r0, 0x0, 0x5, 0x0, 0x0)
r1 = socket$inet(0x2, 0x3, 0x6)
r2 = dup3(r0, r1, 0x0)
setsockopt$inet_int(r2, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4)

3m51.593007808s ago: executing program 0 (id=767):
r0 = socket(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x0)

3m51.580688628s ago: executing program 0 (id=769):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x29}, 0x28)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000540)={[{@i_version}, {@data_err_abort}, {@mblk_io_submit}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000400)=ANY=[])
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='io_uring_file_get\x00', r1, 0x0, 0x9}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x2}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf32(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c46040700030700000000000000020003"], 0x58)
close(r6)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_sync_file_enter\x00', r5, 0x0, 0x9}, 0x11)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r5, 0xe0, &(0x7f0000000d00)={0x0, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), <r8=>0x0, 0x37, &(0x7f0000000540)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x29, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="07de65d7", @ANYRES16=r9, @ANYBLOB="6d9312000000f8dbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x48891}, 0x880)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r10)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0xd, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000a3cd97100000000000085000000fbfb8f0531c158d8ed67fd9e6d00000018110000", @ANYRESDEC=r7, @ANYBLOB="21900c22c1dc5f728ccf53962741a6a3b66a395be82bc738ce73b7ddf5e37667a03ba585018bcdbec148fa517469cf08c5fafa4720438633cf93e3475a5eaf7a69068b8bef96016495f4a05afe02921a3eb3bdb98ba87b3325a60882c35292b82224a2ac61f408370ba483947857c06917cc81615d33efc20ebb98a77a4ca7c60267b6b18d03df119fba894b5fd37323d16d70ffc8ce97c62cb63f36cbe03e7581bbfc15f7dfc3b4ca631fb5cb113deed69085edd6c2302c144f276c324966a75dcde51dc24d9df7493fee6a8133ccdfff649737cf9f72330e154abe4d0baf03291c627fe364a6960a74f038d2270d"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48}, 0x94)

3m51.436235961s ago: executing program 0 (id=771):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
kexec_load(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0)
sendto$inet6(r1, &(0x7f0000000780)="d2", 0xffe0, 0xc0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe)

3m51.134717466s ago: executing program 0 (id=776):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r0, 0x0, 0x4}, 0x18)
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x800000, &(0x7f0000000500)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES32, @ANYBLOB="b7ad7cd65c46a5be7840094fc88ed3944440d445ac89758d3aa4a6c77ea3e1e50196a99f88ba68f3377383de4de11c07aa5d22d9f4f3c58344d6011b6ea5ee82cf40e4ca5976370cb73c872e576f936791a0ffa5639ac237214be5926acea5405e00f1a144cf7a5240bc1e56ed617e19d6a5a268505f0012b4baf36d3a71eb34c8b67281dbba4b20c3d724ef150deff6f7d908bc72575a1f43b608e0d118", @ANYBLOB="a1fffd2e4c38a7b17fef1a78ad1943012e7b7711a1517cd8b4288a2fbb7d202d8c4a1809add074e6dde0703158125f2f114c49f5ee5f249d63ac0d851c212ccd8d82b7c694ead23c417021e8bc78d646d07e3513568bb81d2179a012dcdcb845b0a58b6d5e46a177de56e3e77ed573967e4eea299078019693ca486edbaa44e947802c7f46f1de18cf7f0e1af02964d04cc84d979855e8d3a3fda262f6a7d2b4b4849fd880c9b9af9be818ba05386754a3505e833ca0b9770f63e91f3a9a04e9fca51d88273d5491ed", @ANYRES8=0x0], 0x3, 0x7ec, &(0x7f0000001580)="$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")
lsetxattr$system_posix_acl(&(0x7f0000000280)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[], 0x1c, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000002e40)='./file1\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240), 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2000c0, &(0x7f00000005c0), 0x1, 0x54e, &(0x7f0000000600)="$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")
setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000100)={{0xa, 0x4e24, 0x2, @loopback, 0x9}, {0xa, 0x4e21, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x0, {[0xffff, 0x3, 0x5, 0x3, 0x3, 0x2, 0x7, 0x10001]}}, 0x5c)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000b80)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYRES16], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x885)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r2, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}}], 0x3ffffffffffff1b, 0x0, 0x0)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18)

3m51.094001706s ago: executing program 32 (id=776):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r0, 0x0, 0x4}, 0x18)
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x800000, &(0x7f0000000500)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES32, @ANYBLOB="b7ad7cd65c46a5be7840094fc88ed3944440d445ac89758d3aa4a6c77ea3e1e50196a99f88ba68f3377383de4de11c07aa5d22d9f4f3c58344d6011b6ea5ee82cf40e4ca5976370cb73c872e576f936791a0ffa5639ac237214be5926acea5405e00f1a144cf7a5240bc1e56ed617e19d6a5a268505f0012b4baf36d3a71eb34c8b67281dbba4b20c3d724ef150deff6f7d908bc72575a1f43b608e0d118", @ANYBLOB="a1fffd2e4c38a7b17fef1a78ad1943012e7b7711a1517cd8b4288a2fbb7d202d8c4a1809add074e6dde0703158125f2f114c49f5ee5f249d63ac0d851c212ccd8d82b7c694ead23c417021e8bc78d646d07e3513568bb81d2179a012dcdcb845b0a58b6d5e46a177de56e3e77ed573967e4eea299078019693ca486edbaa44e947802c7f46f1de18cf7f0e1af02964d04cc84d979855e8d3a3fda262f6a7d2b4b4849fd880c9b9af9be818ba05386754a3505e833ca0b9770f63e91f3a9a04e9fca51d88273d5491ed", @ANYRES8=0x0], 0x3, 0x7ec, &(0x7f0000001580)="$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")
lsetxattr$system_posix_acl(&(0x7f0000000280)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[], 0x1c, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000002e40)='./file1\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240), 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2000c0, &(0x7f00000005c0), 0x1, 0x54e, &(0x7f0000000600)="$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")
setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000100)={{0xa, 0x4e24, 0x2, @loopback, 0x9}, {0xa, 0x4e21, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x0, {[0xffff, 0x3, 0x5, 0x3, 0x3, 0x2, 0x7, 0x10001]}}, 0x5c)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000b80)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYRES16], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x885)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r2, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}}], 0x3ffffffffffff1b, 0x0, 0x0)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18)

3m42.829711924s ago: executing program 1 (id=870):
r0 = socket$nl_route(0x10, 0x3, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r0], 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="0fec010018000000000000000cf4f1ff0b0000000700000000005f3001000000"], 0x0, 0x2b, 0x0, 0x1, 0x7}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x633e4e69e757599d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0xc8101339d8526c63, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES16=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000400)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x5}, 0x18)
lsm_set_self_attr(0x69, 0x0, 0x42, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40082, 0x2, @perf_bp={0x0, 0x1}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000080)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000006500000008000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0xa, 0x300)
socket$packet(0x11, 0xa, 0x300)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xa, 0xffff}, {0xe, 0xfff8}}}, 0x24}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffec7, &(0x7f0000000040)={&(0x7f0000000940)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0)

3m42.561831698s ago: executing program 1 (id=873):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x101}, 0x18)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0], 0x4c}}, 0x0)

3m42.493993819s ago: executing program 1 (id=874):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x4, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0xe}, 0xd59, 0x5, 0x0, 0x1, 0x8, 0x20001, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='map_files\x00')
getdents64(r1, &(0x7f0000000080)=""/95, 0x5f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='mm_page_alloc\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB="91101e000000000095", @ANYRES16=0x0], &(0x7f0000000000)='GPL\x00'}, 0x94)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x3)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff6c)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="2000000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000ffffffff00000000000000000000000000000000000000003407daa80a6996bc973d55ea8c27c449fa7cef1bdab343884c7cec43df065abcff88fc5a064770640b68979c6001146d816a32be01dd60806f266ae7887aa83cff25ad2c49427f542248e6d3280b1cff36eee4252d79750e619b86e234e3745de6"], 0x48)

3m42.321301452s ago: executing program 1 (id=876):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x29}, 0x28)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000540)={[{@i_version}, {@data_err_abort}, {@mblk_io_submit}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000400)=ANY=[])
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)

3m42.227136273s ago: executing program 1 (id=879):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$binfmt_register(r1, 0x0, 0x0)

3m42.079463176s ago: executing program 1 (id=881):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c0700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r1}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x30, r3, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0xc7, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x30}}, 0x0)
r4 = socket$inet(0x2, 0x3, 0x8)
setsockopt$inet_int(r4, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4)
r5 = socket$inet(0x2, 0x3, 0x6)
r6 = dup3(r4, r5, 0x0)
setsockopt$inet_int(r6, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x4000, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="796100000000000000007e00000033000300", @ANYRES32=0x0, @ANYBLOB="504e47df0ab8850932e4b4853dac61b091c84efa72a836fb892ec3777bc97481c902486de02e7a06f5b38015fa"], 0x1c}}, 0x4000054)
sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc010000", @ANYRES16=r8, @ANYBLOB="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"], 0x1bc}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@dellinkprop={0x38, 0x6d, 0x2ec9b2c728e3c67, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41001, 0x2e804}, [@IFLA_PROP_LIST={0x4}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r12 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0xa1c1, 0x100, 0x8000, 0x40024e}, &(0x7f0000000340)=<r13=>0x0, &(0x7f0000000040)=<r14=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r13, r14, &(0x7f0000002c00)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x7, &(0x7f0000000100), 0x1, 0x40, 0x1})
io_uring_enter(r12, 0x627, 0xc1040000, 0x20, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10)
openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)

3m42.063350276s ago: executing program 33 (id=881):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c0700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r1}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x30, r3, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0xc7, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x30}}, 0x0)
r4 = socket$inet(0x2, 0x3, 0x8)
setsockopt$inet_int(r4, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4)
r5 = socket$inet(0x2, 0x3, 0x6)
r6 = dup3(r4, r5, 0x0)
setsockopt$inet_int(r6, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x4000, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="796100000000000000007e00000033000300", @ANYRES32=0x0, @ANYBLOB="504e47df0ab8850932e4b4853dac61b091c84efa72a836fb892ec3777bc97481c902486de02e7a06f5b38015fa"], 0x1c}}, 0x4000054)
sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc010000", @ANYRES16=r8, @ANYBLOB="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"], 0x1bc}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@dellinkprop={0x38, 0x6d, 0x2ec9b2c728e3c67, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41001, 0x2e804}, [@IFLA_PROP_LIST={0x4}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r12 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0xa1c1, 0x100, 0x8000, 0x40024e}, &(0x7f0000000340)=<r13=>0x0, &(0x7f0000000040)=<r14=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r13, r14, &(0x7f0000002c00)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x7, &(0x7f0000000100), 0x1, 0x40, 0x1})
io_uring_enter(r12, 0x627, 0xc1040000, 0x20, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10)
openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)

3m4.417162818s ago: executing program 6 (id=1330):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000000880)="$eJzs3c9vI1cdAPDvOL+cNG3S0gMgoEspLGi1TuJto6oHWE4IoUqIHkHahsQbRbHjKHZKE/aQ/g9IVOIER/4Azj1x54LgxmU5IPEjAm1W4mA040nWm7U3ZpPYUfz5SKN5b2bs73trzXv21xu/AEbWjYg4iIjJiPgwIuby40m+xd32ll736PDB6tHhg9UkWq0P/plk59Nj0fGY1Ev5cxYj4kffi/hp8mzcxt7+5kq1WtlpV6cXmrXthcbe/u2N2sp6Zb2yVS4vLy0vvnvnnfKF9fWN2mRe+vLDPxx86+dps2bzI539uEjtrk+cxEmNR8QPLiPYEIzl/ZkcdkN4IYWIeC0i3szu/7kYy15NAOA6a7XmojXXWQcArrtClgNLCqU8FzAbhUKp1M7hvR4zhWq90bx1v767tdbOlc3HROH+RrWymOcK52MiSetLWflJvXyqficiXo2IX0xNZ/XSar26Nsw3PgAwwl46Nf//Z6o9/wMA11xx2A0AAAbO/A8Ao8f8DwCjx/wPAKPnyfx/d6jtAAAGx+d/ABg95n8AGCk/fP/9dGsd5b9/vfbR3u5m/aPba5XGZqm2u1pare9sl9br9fXsN3tqZz1ftV7fXno7dj+e//Z2o7nQ2Nu/V6vvbjXvZb/rfa8yMZBeAQDP8+obn/05iYiD96azLTrWcjBXw/VWGHYDgKEZG3YDgKGx2heMrnN8xpcegGuiyxK9TylGxPTpg61Wq3V5TQIu2c0vyP/DqOrI//tfwDBi5P9hdMn/w+hqtZJ+1/yPfi8EAK42OX6gx/f/r+X73+ZfDvxk7fQVn15mqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBqO17/t5SvBT4bhUKpFPFyRMzHRHJ/o1pZjIhXIuJPUxNTaX1pyG0GAM6r8LckX//r5txbs6fPTiaPp7J9RPzsVx/88uOVZnPnj+nxf50cb36aHy8Po/0AwFmO5+ls3/FB/tHhg9XjbZDt+ft3I6LYjn90OBlHJ/HHYzzbF2MiImb+neT1tqQjd3EeB59ExOe79T+J2SwH0l759HT8NPbLA41feCp+ITvX3qf/Fp+7gLbAqPksHX/udrv/CnEj23e//4vZCHV++fiXPtXqUTYGPol/PP6N9Rj/bvQb4+3ff79dmn723CcRXxyPOI591DH+HMdPesR/q8/4f/nSV97sda7164ib0T1+Z6yFZm17obG3f3ujtrJeWa9slcvLS8uL7955p7yQ5agXes8G/3jv1itZocslaf9nesQvntH/r/fZ/9/898Mff7XHuTT+N7/WLX4hXn9O/HRO/Eaf8VdmflfsdS6Nv9aj/2e9/rf6jP/wr/vPLBsOAAxPY29/c6VarewMsnD8RmKgQRX6K0zlL85Vac9ThSvbsM2V6ncGFWsy/q9HtVovFKvXiHERWTfgKji56SPi8bAbAwAAAAAAAAAAAAAAdHWpf6iUtAvD7iMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADX1/8CAAD//8jOyzo=")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
syz_genetlink_get_family_id$batadv(0x0, r0)
write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
getsockopt(0xffffffffffffffff, 0x6, 0x2001000a, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0)
fstat(0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2)

3m3.564696341s ago: executing program 6 (id=1340):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan1\x00'})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88372091cd397b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca00000000000000000000007925d0f1256330b9e2aa9a18cea8e009116f63c6c7d8f7f95bf0f6731e5eb1dcdc534f357b9f08e7a9a3aebeca145d695053b5bef004ca24e6c57ed10f01488d38b8b0b68d93e3cf630837915d518fde2115e66615786fe7b9216de958119cf762cac77ac829a02f48e72c0d2841880b2c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000000c0))
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x75, r2}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
socket$packet(0x11, 0x3, 0x300)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x5b76c000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xffffffdfffffffff, 0x0, 0x0, 0x0, 0xfffffffffffff4f7, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x3}, {{@in=@multicast1, 0x4d6, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
unshare(0x24040000)
unshare(0x2c020400)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000280)={<r5=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000200)={r5})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000003c0))

3m2.303362441s ago: executing program 6 (id=1356):
arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10)
close(r2)
recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0)
pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
lseek(r4, 0x5, 0x4)

3m1.816539848s ago: executing program 6 (id=1364):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
mkdir(&(0x7f0000000000)='./file0\x00', 0x15a)
mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000080), 0x0, 0x0)
connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14)
socket$nl_route(0x10, 0x3, 0x0)
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000480))
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
sendto$unix(r0, &(0x7f00000001c0)="5fd561c39fe8bc998a5f30fe0f6a554cc45635ecd408e41c7524d514b65f72a60263a72805527fd8e702904428c1becae980b2e416a589b2bfb0dba2ccee553d2d1c5e3fc77ad34e2a4042226efd768804c3337fb8384c814f15cbfeb31044e28bb8f5306f6cbb5399c6f16e348ac07fcbffb20fc0da3f1c088c7083cb16d897341766cfa22fa6ba6a04e28633f38501ab203b462e914ead18fb2b139b423db17a20981c26c3e6dd60e1d9827bd1e1545af7aeda10b8d169d0e36c70fdc9aac81b0fd21693b8eec8d9bce7db4727b29dfa171731a96743b0228a0b", 0xdb, 0x4000091, 0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
tkill(0x0, 0x13)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0xfcffffff})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00'}, 0x10)
r2 = socket(0x1e, 0x4, 0x0)
recvmmsg$unix(r2, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4085, 0xff5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000ac0)=""/62, 0x3e}], 0x1}}], 0x2, 0x400122a0, 0x0)
tkill(0x0, 0x12)

3m0.920118122s ago: executing program 6 (id=1381):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
pwritev(r0, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9})
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0)
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="b4020000", @ANYRES16, @ANYBLOB="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"], 0x2b4}, 0x1, 0x0, 0x0, 0x8800}, 0x4000840)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000400000000000000", @ANYRES32=r2, @ANYBLOB="0100"/20, @ANYRES32, @ANYRES32=r0, @ANYBLOB="050000000500000003000000000000000000ff000000000000000000"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x29, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000800000000000000fdffffff18110000", @ANYRES8=0x0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018140000", @ANYRES32, @ANYBLOB="000000000000000085000000c8000000186300000d00000000000000ff000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060000008500000006000000186a0000010000000000000002000000181100009b9fd8d79672bba56c1b0391539db937d4922288c0f46dd71a250e2d50e3bafcdd1f5d5f", @ANYRESDEC=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000086000000182b0000", @ANYRES32=r0, @ANYRES64], &(0x7f00000001c0)='GPL\x00', 0x101, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000580)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x0, 0x1, 0x4b}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000080)=[r0, r3], &(0x7f0000000800)=[{0x5, 0x1, 0x800b, 0x3}, {0x4, 0x1, 0x5}, {0x1, 0x3, 0xf, 0x3}], 0x10, 0x4}, 0x94)

3m0.879743913s ago: executing program 6 (id=1382):
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$binfmt_elf64(r2, 0x0, 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

2m45.844388265s ago: executing program 34 (id=1382):
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$binfmt_elf64(r2, 0x0, 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

2m14.587529529s ago: executing program 2 (id=2209):
r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x2000001, 0x55, 0x3})
madvise(&(0x7f00001e5000/0x3000)=nil, 0x3000, 0x14)
bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff3b)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sync()
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0xfffffffffffffda0, 0x0, 0x0, 0x46, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]})
setgroups(0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x78)
close(0xffffffffffffffff)
close_range(r0, 0xffffffffffffffff, 0x0)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, 0x0)
getdents64(r1, &(0x7f0000000300)=""/81, 0x51)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], &(0x7f0000000040)='GPL\x00', 0xef9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000001200), 0xffffffffffffffff)
r3 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f00000007c0)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800", 0x1}, 0x48, 0xfffffffffffffffb)
keyctl$KEYCTL_MOVE(0x4, r3, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)

2m14.261164214s ago: executing program 2 (id=2220):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r1}, 0x18)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1bc}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@dellinkprop={0x38, 0x6d, 0x2ec9b2c728e3c67, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41001, 0x2e804}, [@IFLA_PROP_LIST={0x4}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0xa1c1, 0x100, 0x8000, 0x40024e}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000002c00)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x7, &(0x7f0000000100), 0x1, 0x40, 0x1})
io_uring_enter(r4, 0x627, 0xc1040000, 0x20, 0x0, 0x0)

2m14.078610977s ago: executing program 2 (id=2226):
arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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")
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10)
close(r1)
recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0)
pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
lseek(r2, 0x5, 0x4)

2m13.782220471s ago: executing program 2 (id=2233):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = semget$private(0x0, 0x6, 0x0)
semtimedop(r0, &(0x7f0000000000)=[{0x3, 0xfffd}], 0x1, 0x0)
socket$inet6(0xa, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2800128014000180090001006c617374000000000400028010000180060001006c6173740000000008000340000001"], 0xb4}}, 0x20050800)
unshare(0x40020000)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x8401)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x7ff, 0x9, 0xe, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff})
semtimedop(r0, &(0x7f0000000000)=[{0x1, 0xfffa, 0x1000}, {0x8, 0x9, 0x800}], 0x2, &(0x7f0000000140)={0x77359400})
semop(r0, &(0x7f0000000280)=[{0x1, 0x173, 0x1000}, {0x0, 0x6, 0x1000}, {0x0, 0x4}, {0x0, 0x7, 0x1800}, {0x0, 0x6}, {0x1, 0xf52e, 0x800}, {0x1, 0x8, 0x1000}, {0x6, 0x1}, {0x4, 0x3, 0x1800}], 0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000), 0x20000328)
setsockopt$sock_timeval(r5, 0x1, 0x43, &(0x7f0000000100), 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)

2m12.808435906s ago: executing program 2 (id=2255):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x573, &(0x7f0000000ec0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10)
socket(0x10, 0x803, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue0\x00', 0x200000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x1})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x2, 0x2, 0x44, 0x0, 0xd})

2m12.740683607s ago: executing program 2 (id=2256):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001500)=ANY=[@ANYBLOB="180000000040000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000019850000007100"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18)
mq_open(0x0, 0x6e93ebbbcc0884f2, 0x2, 0x0)
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102032900fe08000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0)

2m8.633228111s ago: executing program 5 (id=2316):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='map_files\x00')
getdents64(r1, &(0x7f0000000080)=""/95, 0x5f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='mm_page_alloc\x00', r0}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r2}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="2000000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @private=0xa010100}, 0x1, 0x0, 0x2}}, 0x2e)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x75}], 0x1}, 0x0)

2m8.504669882s ago: executing program 5 (id=2317):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r1}, 0x10)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x30, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0x3, 0xfff3}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x200400d4)

2m8.400079314s ago: executing program 5 (id=2318):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x2, 0x81, 0x7, 0x9, 0x0, 0x70bd28, 0x25dfdbff, [@sadb_sa={0x2, 0x1, 0x4d6, 0x8e, 0x0, 0xa4, 0x4}, @sadb_address={0x5, 0x5, 0x33, 0x90, 0x0, @in6={0xa, 0x4e24, 0x87b, @empty, 0xfffffffd}}]}, 0x48}}, 0x90)

2m8.315080456s ago: executing program 5 (id=2319):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast})

2m8.311573806s ago: executing program 5 (id=2320):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10)
socket(0x10, 0x803, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue0\x00', 0x200000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x1})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x2, 0x2, 0x44, 0x0, 0xd})

2m8.290135666s ago: executing program 5 (id=2321):
arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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")
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10)
close(r1)
recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0)
pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
lseek(r2, 0x5, 0x4)

1m57.67309947s ago: executing program 35 (id=2256):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001500)=ANY=[@ANYBLOB="180000000040000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000019850000007100"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18)
mq_open(0x0, 0x6e93ebbbcc0884f2, 0x2, 0x0)
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102032900fe08000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0)

1m53.096978731s ago: executing program 36 (id=2321):
arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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")
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10)
close(r1)
recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0)
pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
lseek(r2, 0x5, 0x4)

1.26708585s ago: executing program 8 (id=4385):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x2, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x24, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x2000000000000000}, 0x18)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x1c71c1, 0x170)

1.099496573s ago: executing program 3 (id=4389):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4)
sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
recvfrom(r3, 0x0, 0x0, 0x170, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r5}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f00000000c0), 0x4)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0xfffffffe, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)

1.030129154s ago: executing program 3 (id=4391):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20004800)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000480)=ANY=[])
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f80700ffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @loopback={0x0, 0xffff888101827518}, 0x0, 0x20, 0x10000, 0x10000}})
socket$inet6_udp(0xa, 0x2, 0x0)

1.017590434s ago: executing program 8 (id=4392):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) (async)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x0, @perf_config_ext={0x2, 0x3}, 0xe2c9, 0xa88, 0x8409, 0x5, 0x0, 0x3c, 0xfffe}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0xb) (async)
io_cancel(0x0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x3, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (rerun: 64)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x30}, 0x28) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2}, 0x18) (async, rerun: 64)
r3 = socket(0x10, 0x803, 0x0) (rerun: 64)
sendto(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$sock_int(r3, 0x1, 0x22, 0x0, 0x0) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0}, 0x18) (async)
read$snapshot(0xffffffffffffffff, 0x0, 0xffffffbf) (async, rerun: 64)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x1d8, 0x12, 0x60d, 0x0, 0x202, 0x2c0, 0x2e8, 0x2e8, 0x2c0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @mcast1, [0x0, 0x0, 0xc0], [], 'geneve1\x00', 'macsec0\x00', {}, {}, 0x0, 0x0, 0x0, 0x29}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x47, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@broadcast, 'veth1_to_bridge\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x8, 0x4, 0xa5a, 0x160a, 0x800, 0x81, 0x3, 0x2]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) (async, rerun: 64)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000002060108000000000000007a31000000000500010007000000050005000200000011000300686173683a6e65742c6e65740000000005000400"/76], 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

995.865095ms ago: executing program 3 (id=4393):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c)
connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1)

967.358095ms ago: executing program 3 (id=4394):
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f00000000c0)={'ip6gre0\x00', <r2=>0x0, 0x2f, 0xe, 0x3, 0x4, 0x10, @mcast2, @empty, 0x7800, 0x8, 0x5, 0x67e}})
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00')
pread64(r4, &(0x7f000001a240)=""/102385, 0x18ff1, 0x100008)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
rseq(&(0x7f0000000740), 0x1b, 0x40000000000, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0)
pwrite64(r6, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r5, 0x6609)

870.995056ms ago: executing program 8 (id=4395):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="30b62a0c62969abc000000030c0000000c0000004700000003000000000000930100000000612e5f614f00"], &(0x7f0000000c40)=""/3, 0x2b, 0x3, 0x1, 0x1}, 0x28)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x202000, 0x0)
syz_open_dev$vcsa(&(0x7f0000000140), 0xd, 0x400)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r4, 0xffffffffffffffff, 0x0)

870.052806ms ago: executing program 8 (id=4396):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r0, 0x0, 0x5b0)
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)

853.399157ms ago: executing program 8 (id=4397):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r3}, 0x18)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10)
r5 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5])

815.666617ms ago: executing program 8 (id=4399):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff4, 0x0, @perf_bp={0x0}, 0x4008, 0x1000, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
sendmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x10000, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000003e000701fcf7fffffedbdf25017c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [<r6=>0x0]}, &(0x7f0000000240)=0x8)
symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00')
link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00')
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2000e8018383a70000000000007251aa13e5438400000002000000060004002800", @ANYRES32=r6], 0x20, 0x6044}, 0x6)
readahead(r4, 0x8001, 0xd73b)

717.644999ms ago: executing program 3 (id=4404):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20004800)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000480)=ANY=[])
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f80700ffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @loopback={0x0, 0xffff888101827518}, 0x0, 0x20, 0x10000, 0x10000}})
socket$inet6_udp(0xa, 0x2, 0x0)

682.496669ms ago: executing program 3 (id=4405):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff4, 0x0, @perf_bp={0x0}, 0x4008, 0x1000, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a274269bcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe0996ea7832ed08b94e12707b7ffac9b1740da0abbc34f814a77cebbc2b43727fc35c4a790777388d213f83d0ebb3cbd8c2b23ab30779670316bc61e5ed3e44f80b18776d98783229db77ddedf234e5a6e4a62a808ec7e2743c2917869eaa400982e899c34ec5025f58f2737ca5c561c9345c487d3c869118560eccbceed1d26ff4"], 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
sendmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x10000, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000003e000701fcf7fffffedbdf25017c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [<r6=>0x0]}, &(0x7f0000000240)=0x8)
symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00')
link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00')
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2000e8018383a70000000000007251aa13e5438400000002000000060004002800", @ANYRES32=r6], 0x20, 0x6044}, 0x6)
readahead(r4, 0x8001, 0xd73b)

644.11284ms ago: executing program 7 (id=4407):
syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18)
close(r0)

629.62441ms ago: executing program 7 (id=4408):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r0, 0x0, 0x5b0)
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)

615.32472ms ago: executing program 7 (id=4409):
r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x2000001, 0x55, 0x3})
madvise(&(0x7f00001e5000/0x3000)=nil, 0x3000, 0x14)
bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff3b)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sync()
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0xfffffffffffffda0, 0x0, 0x0, 0x46, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]})
setgroups(0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x78)
close(0xffffffffffffffff)
close_range(r0, 0xffffffffffffffff, 0x0)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, 0x0)
getdents64(r1, &(0x7f0000000300)=""/81, 0x51)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000001200), 0xffffffffffffffff)
r2 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f00000007c0)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800", 0x1}, 0x48, 0xfffffffffffffffb)
keyctl$KEYCTL_MOVE(0x4, r2, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x0, 0x502, &(0x7f0000000fc0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

475.158473ms ago: executing program 7 (id=4411):
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x104)

429.519413ms ago: executing program 7 (id=4412):
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000340)="d43d10c3cac76261ece023bb1a9230651dcebc770e2868da", 0x18}], 0x1, 0x4)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0)

405.101463ms ago: executing program 7 (id=4413):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x84041, 0x0)
r0 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
tgkill(r0, r0, 0x21)
wait4(r0, 0x0, 0x40000000, 0x0)
capget(&(0x7f0000000040)={0x20080522, r0}, &(0x7f0000000080)={0x6, 0x2, 0xc, 0x6f, 0xba6b})
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r2, 0x29, 0x21, 0x0, &(0x7f00000000c0))
getsockopt(r2, 0x6, 0x40, &(0x7f0000000140)=""/23, &(0x7f0000000180)=0x17)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
gettid()
ppoll(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x6a855000)
timerfd_create(0x3, 0x800)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendto$packet(r1, &(0x7f0000000000)='1', 0x1, 0x40, &(0x7f0000000200)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @local}, 0x14)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)

379.175724ms ago: executing program 4 (id=4414):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0, 0x0, 0x8000000000}, 0x18)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x70)

351.130504ms ago: executing program 4 (id=4416):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20004800)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000480)=ANY=[])
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f80700ffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @loopback={0x0, 0xffff888101827518}, 0x0, 0x20, 0x10000, 0x10000}})
socket$inet6_udp(0xa, 0x2, 0x0)

306.580265ms ago: executing program 9 (id=4417):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x4, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0xe}, 0xd59, 0x5, 0x0, 0x1, 0x8, 0x20001, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='map_files\x00')
getdents64(r1, &(0x7f0000000080)=""/95, 0x5f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='mm_page_alloc\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB="91101e000000000095", @ANYRES16=0x0], &(0x7f0000000000)='GPL\x00'}, 0x94)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x3)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff6c)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00'}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="2000000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000ffffffff00000000000000000000000000000000000000003407daa80a6996bc973d55ea8c27c449fa7cef1bdab343884c7cec43df065abcff88fc5a064770640b68979c6001146d816a32be01dd60806f266ae7887aa83cff25ad2c49427f542248e6d3280b1cff36eee4252d79750e619b86e234e3745de6"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe511195418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4929330142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da8c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000dd11e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15f2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f000010000000000000905ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400bee3dfc8fb24f67c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341b74abaa7c95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb232bbdb9dc33cbd7643866fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595270fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f76dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d2e959efc71f665c4d75cf2458e3322c9062ece84c99a061997a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99f0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d164118e4cbe02400000000ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a4867217373934bbd42dcb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcd62981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba495aea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000001700d6d5210d7560eb92d6a97a27602b81f76386f1535b1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294059323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946932d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1fc8df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1785eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be2f5656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fd78f9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933c2e24c7e800003c9e8095e02985f28de0bbc76d58dd92606b1ef6486c85fa3e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6968d12418a4d2a0d086d8438d415d713acebc5b014e61a543a5a391f03daca80f08f0e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e112645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c000000000000000000000000000000a1c3da144589dcaddb71cf9374843e23f992a237a9040747e0434a8a643990b4059a98411ce867d1af7e8ea89f49e6f564d4dce8a7d6939a9214a7f39e83bd247e03a09dba000000000000000000000000aaf033d47249c8444bc13844cbf1be617d82b269e5ea0c0d525603c0ec543ea581f63893ae414a6683e941fdbdff03cfc5f8744583c0aa766a65321f907927a59d75b47f06895e8471ebc2840ce5bd054df223fb09b9c739ad64cfcfd2d498b0f11056f6c40874cb977c99b6bc1a8732198a17e610082b7ce0365f271b11d4b4a3d4c7d0bb273f406ecd4b26c93151c30f5a269991402d109becb1b9bafcb2b47e940000000000e540d8b0db3774effb7469a21f96e2594b2973ebf7a1bd9ace2ed4d6eb1735f85885be5be74dc2ea5d7d499bd28271b98f187f5879b16b409a04d78175cc8d0f707c822805d7011ed4b22419186dd2b22aadf15828db2ca19d79e1bf2f7989237ee5cb2e1eb7b2bfc92d3aa95a26f060935c4fee8b2d7d0bf3c6d82d04329164bd4ee0b8060183f36762b0440d9082d7c8b06e4c2024f77e1018758d28e7ee290f32a48bfc2aa10b3dba9bff00d2410f3477a8e0df689c880dc9a677cfaa16603527c06625a3363744cea5f2d350224cc0fea76c72ca08507235c67346722f20690fde0790f040f5fd3eff75f9b291cc5e9c686ebaadbe756c6fa039ff441e427ed12578d5cb041ebf729cfaa575cc852fbdb54e60435e6d62b9d270433b220ed9ff1ff042b8d3d8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x75}], 0x1}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f000000e0c0), 0x10010)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303}, "0000090800000003", "73b59657269ef929ee540a8a0a86c5d0", "6362dfd5", "21be0dd9f7f3c312"}, 0x28)
sendfile(r2, r5, &(0x7f0000000100)=0x10, 0x10001)

306.050145ms ago: executing program 4 (id=4418):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800007b8af8ff00000000bfa200000000000007020000d811d14d68f8ffffffb703000008000000b7040000f468ab35b39a2da1430000009500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='cachefiles_mkdir\x00', r0, 0x0, 0x2}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x104)

215.419926ms ago: executing program 4 (id=4419):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'ip_vti0\x00', 0x0})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0)
rseq(&(0x7f0000000300), 0x20, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv6_delrule={0x30, 0x21, 0x121, 0xffffffff, 0xfffffffe, {0xa, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10015}, [@FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, 0x30}}, 0x4044000)
r2 = syz_open_pts(r0, 0x0)
r3 = dup(r2)
ioctl$TIOCGICOUNT(r3, 0x545d, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000440)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}], [{@uid_lt}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@measure}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}]}, 0x1, 0x610, &(0x7f0000000a40)="$eJzs3c9rFGcfAPDvTH6avO+bKC+8rz3UQCkKrYmJWqQUau5F7I9/IDVRxGgkSaFRwQjtsfTSQ6GnHmr/i1borfTQaw+9F0FK8VCL1C2zOxs3m93Nz/3h7ucDa+aZmczznTXfPM88eWY2gJ41kf2TRhyNiJtJxFjFtv7IN06U9nv8x51L2SuJQuH935O4czdZrzxWkn8dzb/577FIfk4jjvRtrXdl7da1ucXFheW8PLV6/ebUytqtk1evz11ZuLJwY+aNmXNnz5w9N31qX+c3UGPdN189Taa//fVCEufjWR5bdl7V+w3tq+bsPZuIQsmTyvXZ+3pun8fuFH+OlX9OnkuqV9CxLud5m+XJ/2Is+ir+N8fi03fbGhzQVIUkym0U0HOSOvn/42yj3wzDTYsHaJVyP6B8bV/rOnirtMm9EqAVHs2WBqRKuT8QEeX87y+NDcZwcWxg5HGyaZwniYj9jcyVZHX89MOFT7JX1BmHA5pj/V55lLu6/U+KuTkew8XSyON0c/6vFwpp3hPI1r+3x/onqsryH1pn/V5E/D9v/wdjx/mf5rlbzv8P91i//AcAAAAAAICD82A2Il6vNf8v3Zj/M1hj/s9oRJw/gPq3//tf+jBfSKp2HTyA6qGnPZqNeKvm/N+NOb7jfXnp38X5ALeTy1cXF05FxH8i4kQMDGXl6arjVs4QPvnZkS/r1V85/y97ZfWX5wLmR3rYX3Uj7vzc6tx+zxuIeHQv4qXi/N9j+ZrN83+y9j+p0f5n+X1zh3UcefX+xXrbts9/oFkKX0ccr9n+P+9uJ42fzzFV7A9MlXsFW718+/Pv6tVfnf9NOEWgjqz9H2mc/0NJ5fN6VnZ3/Owi/fRaf6He9r32/weTD/qiYhDg47nV1eXpiMHkna3rZ3YXM3SrPB+ORZ4vWf6feKXx+N9G/78iDw9FxPoO6hveZrv+P7RPlv/zjdv/8c3t/+4XZu6Pf1+v/os7av/PFNv0E/ka439QaevzOHaaoG0JFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABecGlE/CuSdHJjOU0nJyNGI+K/MZIuLq2svnZ56aMb89m2iPEYSMuf9DtWKiflz/8fryjPVJVPR8ThiPii71CxPHlpaXG+3ScPAAAAAAAAAAAAAAAAAAAAHWK0eM9/Yaj6/v/Mb33tjg5ouv78q3yH3tO/5+8sDB1oIEDL7T3/gRdYds2/i/wfaGYsQBvUz/8nTwtFLQ0HaCH9f+hde8x/fy6ALqD9h161wzG94WbHAbSD9h8AAAAAALrK4WMPfkkiYv3NQ8VXZjDfZrI/dLe03QEAbWMOL/Su/qV2RwC0i2t8INlY+qvmzf71Z/8nzQkIAAAAAAAAAAAAANji+FH3/0Ovanz/v7n90M0a3P9fK/k9LgC6SP2P/tD2Q7dzjQ9s19q7/x8AAAAAAAAAAAAAOsDwrWtzi4sLyytrL97C250Rxu4W1uc6IoxdLBTuRjTe51lzah+IiE55E5ZXsmhaVVf5ERxtPOU2/14CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2/BMAAP//cdEbCg==")
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'caif0\x00', 0x2})
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000004900), 0x4)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000002c0), 0x0)
lstat(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80))

197.204397ms ago: executing program 9 (id=4420):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r3}, 0x18)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10)
r5 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5])

181.959397ms ago: executing program 9 (id=4421):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r3}, 0x18)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10)
r5 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5])

163.355297ms ago: executing program 4 (id=4422):
r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x2000001, 0x55, 0x3})
madvise(&(0x7f00001e5000/0x3000)=nil, 0x3000, 0x14)
bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff3b)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sync()
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0xfffffffffffffda0, 0x0, 0x0, 0x46, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]})
setgroups(0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x78)
close(0xffffffffffffffff)
close_range(r0, 0xffffffffffffffff, 0x0)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, 0x0)
getdents64(r1, &(0x7f0000000300)=""/81, 0x51)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000001200), 0xffffffffffffffff)
r2 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f00000007c0)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800", 0x1}, 0x48, 0xfffffffffffffffb)
keyctl$KEYCTL_MOVE(0x4, r2, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x0, 0x502, &(0x7f0000000fc0)="$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")

154.790067ms ago: executing program 9 (id=4423):
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000800)={@empty}, &(0x7f0000000840)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000900)={'ip6_vti0\x00', &(0x7f0000000880)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x80, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback, 0x40, 0x40, 0x5, 0x1}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000002840)={'ip6_vti0\x00', &(0x7f0000000940)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x2, 0x9, 0x8, @private0, @dev={0xfe, 0x80, '\x00', 0x35}, 0x8, 0x700, 0x4, 0x8}})
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', <r5=>0x0})
bind$packet(r4, &(0x7f0000000280)={0x11, 0x0, r5, 0x1, 0x1, 0x6, @local}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000002980)={'tunl0\x00', &(0x7f0000002880)={'gretap0\x00', 0x0, 0x8000, 0x7, 0x800, 0x6, {{0x29, 0x4, 0x2, 0x1, 0xa4, 0x67, 0x0, 0xea, 0x29, 0x0, @local, @multicast1, {[@generic={0x82, 0xe, "ba06f243b2611cc45a422497"}, @lsrr={0x83, 0x17, 0x4a, [@dev={0xac, 0x14, 0x14, 0x42}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @rand_addr=0x64010101, @broadcast]}, @timestamp={0x44, 0xc, 0xd4, 0x0, 0xc, [0x1, 0x2]}, @timestamp={0x44, 0x8, 0x8f, 0x0, 0xb, [0x0]}, @ssrr={0x89, 0x1f, 0xdd, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @private=0xa010101, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @generic={0x89, 0x2}, @lsrr={0x83, 0x27, 0x69, [@dev={0xac, 0x14, 0x14, 0x22}, @loopback, @multicast2, @remote, @local, @rand_addr=0x64010100, @rand_addr=0x64010100, @local, @remote]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0x90, 0x0, 0x5, [0x0]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000029c0))
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000002a00)={'wg2\x00'})
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000002b00)={0x0, @remote}, &(0x7f0000002b40)=0xc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r6)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r8=>0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x24, r7, 0x1, 0x0, 0x2000004, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)

128.252218ms ago: executing program 9 (id=4424):
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000340)="d43d10c3cac76261ece023bb1a9230651dcebc770e2868da", 0x18}], 0x1, 0x4)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0)

98.367348ms ago: executing program 9 (id=4425):
r0 = socket$kcm(0xa, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x890c, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1')
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r1) (async)
r2 = dup(r1)
ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"})
r3 = gettid()
process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/246, 0xf6}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xfffffec0}], 0x1, 0x0) (async)
process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/246, 0xf6}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xfffffec0}], 0x1, 0x0)
syz_open_procfs(r3, &(0x7f0000000040)='net/xfrm_stat\x00') (async)
syz_open_procfs(r3, &(0x7f0000000040)='net/xfrm_stat\x00')
write$UHID_INPUT(r2, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7)

0s ago: executing program 4 (id=4426):
rseq(&(0x7f0000000300), 0x20, 0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x11)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0)
io_setup(0x206, &(0x7f0000000200)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000240)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80, 0x0, 0x0, 0x0, r4}])
mmap$IORING_OFF_SQES(&(0x7f00000bd000/0x4000)=nil, 0x4000, 0x2000000, 0x4010, r4, 0x10000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
execve(0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #2: comm syz.8.3650: corrupted inode contents
[  269.542288][T15810] EXT4-fs error (device loop8): ext4_dirty_inode:6459: inode #2: comm syz.8.3650: mark_inode_dirty error
[  269.543417][T15812] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  269.564710][T15810] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #2: comm syz.8.3650: corrupted inode contents
[  269.590544][T15810] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #2: comm syz.8.3650: corrupted inode contents
[  269.603710][T15810] EXT4-fs error (device loop8): ext4_dirty_inode:6459: inode #2: comm syz.8.3650: mark_inode_dirty error
[  269.626197][T15810] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #2: comm syz.8.3650: corrupted inode contents
[  269.627186][T15812] tipc: Disabling bearer <eth:syzkaller0>
[  269.647291][T15823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  269.648329][T15810] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #2: comm syz.8.3650: mark_inode_dirty error
[  269.657057][T15823] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  269.667709][T15810] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #2: comm syz.8.3650: corrupted inode contents
[  269.688733][T15810] EXT4-fs error (device loop8): ext4_dirty_inode:6459: inode #2: comm syz.8.3650: mark_inode_dirty error
[  269.757754][T15831] loop8: detected capacity change from 0 to 512
[  269.769416][T15827] loop3: detected capacity change from 0 to 1024
[  269.776980][T15831] ext4 filesystem being mounted at /240/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  269.791968][T15827] EXT4-fs: Ignoring removed orlov option
[  269.799164][T15831] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #2: comm syz.8.3659: corrupted inode contents
[  269.811560][T15831] EXT4-fs error (device loop8): ext4_dirty_inode:6459: inode #2: comm syz.8.3659: mark_inode_dirty error
[  269.831601][T15834] loop7: detected capacity change from 0 to 512
[  269.837021][T15831] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #2: comm syz.8.3659: corrupted inode contents
[  269.890363][T15834] EXT4-fs error (device loop7): __ext4_iget:5379: inode #4: block 193290: comm syz.7.3656: invalid block
[  269.919671][T15846] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  269.936809][T15834] EXT4-fs error (device loop7): ext4_quota_enable:7127: comm syz.7.3656: Bad quota inode: 4, type: 1
[  269.971354][T15834] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  270.003712][T15834] EXT4-fs (loop7): mount failed
[  270.064330][T15853] tipc: Started in network mode
[  270.069339][T15853] tipc: Node identity 165eb09977f8, cluster identity 4711
[  270.076526][T15853] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  270.090563][T15853] tipc: Disabling bearer <eth:syzkaller0>
[  270.098134][T15855] loop7: detected capacity change from 0 to 2048
[  270.128048][ T8813] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[  270.128195][ T8813] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  270.141773][T15853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  270.161743][T15853] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  270.215245][T15864] loop7: detected capacity change from 0 to 2048
[  270.246421][ T8813] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[  270.261368][ T8813] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  270.298109][T15875] loop7: detected capacity change from 0 to 512
[  270.306936][T15871] netlink: 'syz.9.3672': attribute type 8 has an invalid length.
[  270.338943][T15875] ext4 filesystem being mounted at /492/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  270.351370][T15875] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #2: comm syz.7.3671: corrupted inode contents
[  270.363396][T15875] EXT4-fs error (device loop7): ext4_dirty_inode:6459: inode #2: comm syz.7.3671: mark_inode_dirty error
[  270.383346][T15875] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #2: comm syz.7.3671: corrupted inode contents
[  270.399129][T15872] blktrace: Concurrent blktraces are not allowed on sg0
[  270.401442][T15881] loop4: detected capacity change from 0 to 512
[  270.437485][T15881] ext4 filesystem being mounted at /174/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  270.452678][T15881] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.3673: corrupted inode contents
[  270.464782][T15885] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  270.478201][T15881] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.3673: mark_inode_dirty error
[  270.506889][T15881] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.3673: corrupted inode contents
[  270.511963][T15887] loop9: detected capacity change from 0 to 1024
[  270.532718][T15881] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.3673: corrupted inode contents
[  270.534363][T15887] EXT4-fs: Ignoring removed orlov option
[  270.556955][T15881] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.3673: mark_inode_dirty error
[  270.570091][T15881] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.3673: corrupted inode contents
[  270.582612][T15881] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.3673: mark_inode_dirty error
[  270.617592][T15881] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.3673: corrupted inode contents
[  270.626018][T15896] loop9: detected capacity change from 0 to 256
[  270.635862][T15881] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.3673: mark_inode_dirty error
[  270.798246][T15910] loop3: detected capacity change from 0 to 512
[  270.810340][T15900] loop9: detected capacity change from 0 to 512
[  270.816863][T15900] EXT4-fs: Ignoring removed mblk_io_submit option
[  270.823400][T15900] EXT4-fs: Ignoring removed bh option
[  270.829251][T15900] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  270.840533][T15900] EXT4-fs (loop9): 1 truncate cleaned up
[  270.840965][T15910] ext4 filesystem being mounted at /151/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  270.856766][T15914] loop7: detected capacity change from 0 to 512
[  270.866003][T15916] loop4: detected capacity change from 0 to 512
[  270.875181][T15916] EXT4-fs (loop4): orphan cleanup on readonly fs
[  270.881645][T15910] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.3684: corrupted inode contents
[  270.895191][T15910] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.3684: mark_inode_dirty error
[  270.907252][T15916] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3680: bg 0: block 248: padding at end of block bitmap is not set
[  270.913213][T15910] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.3684: corrupted inode contents
[  270.929688][T15916] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3680: Failed to acquire dquot type 1
[  270.935848][T15919] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.3684: corrupted inode contents
[  270.946258][T15916] EXT4-fs (loop4): 1 truncate cleaned up
[  270.956667][T15914] EXT4-fs error (device loop7): __ext4_iget:5379: inode #4: block 193290: comm syz.7.3683: invalid block
[  270.973396][T15919] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.3684: mark_inode_dirty error
[  270.973466][T15916] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.3680: deleted inode referenced: 12
[  270.985603][T15919] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.3684: corrupted inode contents
[  271.007948][T15914] EXT4-fs error (device loop7): ext4_quota_enable:7127: comm syz.7.3683: Bad quota inode: 4, type: 1
[  271.020008][T15914] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  271.024966][T15916] __nla_validate_parse: 10 callbacks suppressed
[  271.025015][T15916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3680'.
[  271.037802][T15914] EXT4-fs (loop7): mount failed
[  271.047784][T15919] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.3684: mark_inode_dirty error
[  271.069547][T15919] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.3684: corrupted inode contents
[  271.088922][T15916] hsr_slave_1 (unregistering): left promiscuous mode
[  271.096792][T15919] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.3684: mark_inode_dirty error
[  271.169633][T15923] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  271.189785][T15923] tipc: Disabling bearer <eth:syzkaller0>
[  271.233539][T15931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  271.248095][T15929] loop4: detected capacity change from 0 to 1024
[  271.259680][T15931] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  271.268531][T15929] EXT4-fs: Ignoring removed orlov option
[  271.328754][T15933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3686'.
[  271.337810][T15933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3686'.
[  271.543937][T15947] loop3: detected capacity change from 0 to 1024
[  271.550998][T15947] EXT4-fs: Ignoring removed orlov option
[  271.595528][T15951] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  271.631290][T15956] loop9: detected capacity change from 0 to 512
[  271.637890][T15956] EXT4-fs: Ignoring removed mblk_io_submit option
[  271.646269][T15956] EXT4-fs (loop9): bad geometry: block count 184549440 exceeds size of device (64 blocks)
[  271.665369][T15956] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3695'.
[  271.726450][T15957] program syz.9.3695 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.212921][T15968] loop7: detected capacity change from 0 to 512
[  272.219678][T15968] EXT4-fs: Ignoring removed mblk_io_submit option
[  272.226929][T15968] EXT4-fs (loop7): bad geometry: block count 184549440 exceeds size of device (64 blocks)
[  272.257246][T15970] netlink: 'syz.7.3699': attribute type 3 has an invalid length.
[  272.371656][T15978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3702'.
[  272.380668][T15978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3702'.
[  272.395620][T15978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3702'.
[  272.404647][T15978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3702'.
[  272.427539][T15978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3702'.
[  272.438919][T15978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3702'.
[  272.452111][T15978] blktrace: Concurrent blktraces are not allowed on sg0
[  272.524277][T15988] 9pnet_fd: Insufficient options for proto=fd
[  272.680114][T15992] loop9: detected capacity change from 0 to 2048
[  272.869148][T16003] 9pnet_fd: Insufficient options for proto=fd
[  272.887019][T16002] loop3: detected capacity change from 0 to 1024
[  272.900364][T16002] EXT4-fs: Ignoring removed orlov option
[  272.936771][T16007] loop3: detected capacity change from 0 to 512
[  272.945725][T16007] EXT4-fs: Ignoring removed mblk_io_submit option
[  272.953743][T16007] EXT4-fs (loop3): bad geometry: block count 184549440 exceeds size of device (64 blocks)
[  273.006200][T16013] loop3: detected capacity change from 0 to 256
[  273.084757][T16017] loop3: detected capacity change from 0 to 512
[  273.094813][T16017] EXT4-fs (loop3): orphan cleanup on readonly fs
[  273.102051][T16017] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3713: bg 0: block 248: padding at end of block bitmap is not set
[  273.116577][T16017] __quota_error: 264 callbacks suppressed
[  273.116590][T16017] Quota error (device loop3): write_blk: dquota write failed
[  273.127490][   T29] audit: type=1326 audit(1751254372.887:27329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15973 comm="syz.7.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefcc70e929 code=0x7fc00000
[  273.129791][T16017] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  273.129810][T16017] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3713: Failed to acquire dquot type 1
[  273.175119][T16017] EXT4-fs (loop3): 1 truncate cleaned up
[  273.194245][T16017] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.3713: deleted inode referenced: 12
[  273.224644][T16020] loop7: detected capacity change from 0 to 2048
[  273.327414][   T29] audit: type=1326 audit(1751254373.087:27330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16033 comm="syz.4.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e1c1e929 code=0x7ffc0000
[  273.354829][   T29] audit: type=1326 audit(1751254373.087:27331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16031 comm="syz.7.3718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefcc70e929 code=0x7ffc0000
[  273.378559][   T29] audit: type=1326 audit(1751254373.087:27332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16031 comm="syz.7.3718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefcc70e929 code=0x7ffc0000
[  273.402199][   T29] audit: type=1326 audit(1751254373.117:27333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16031 comm="syz.7.3718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fefcc70e929 code=0x7ffc0000
[  273.425806][   T29] audit: type=1326 audit(1751254373.117:27334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16031 comm="syz.7.3718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefcc70e929 code=0x7ffc0000
[  273.449361][   T29] audit: type=1326 audit(1751254373.117:27335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16033 comm="syz.4.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f55e1c1e929 code=0x7ffc0000
[  273.473017][   T29] audit: type=1326 audit(1751254373.117:27337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16031 comm="syz.7.3718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fefcc70e929 code=0x7ffc0000
[  273.499937][T16034] loop4: detected capacity change from 0 to 512
[  273.554487][T16034] EXT4-fs error (device loop4): __ext4_iget:5379: inode #4: block 193290: comm syz.4.3719: invalid block
[  273.573748][T16042] loop3: detected capacity change from 0 to 512
[  273.581360][T16034] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.3719: Bad quota inode: 4, type: 1
[  273.605513][T16034] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  273.624449][T16034] EXT4-fs (loop4): mount failed
[  273.664515][T16042] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  273.691149][T16042] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.3722: corrupted inode contents
[  273.703818][T16042] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.3722: mark_inode_dirty error
[  273.718489][T16042] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.3722: corrupted inode contents
[  273.783174][T16063] 9pnet_fd: Insufficient options for proto=fd
[  273.844535][T16074] SET target dimension over the limit!
[  273.929596][T16085] loop9: detected capacity change from 0 to 512
[  273.942344][T16083] loop4: detected capacity change from 0 to 512
[  273.950459][T16083] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  273.976464][T16085] ext4 filesystem being mounted at /229/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  273.988983][T16083] EXT4-fs (loop4): 1 truncate cleaned up
[  273.997177][T16085] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #2: comm syz.9.3740: corrupted inode contents
[  274.010215][T16085] EXT4-fs error (device loop9): ext4_dirty_inode:6459: inode #2: comm syz.9.3740: mark_inode_dirty error
[  274.038633][T16085] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #2: comm syz.9.3740: corrupted inode contents
[  274.132278][T16099] 9pnet_fd: Insufficient options for proto=fd
[  274.301007][T16109] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  274.309915][T16109] tipc: Disabling bearer <eth:syzkaller0>
[  274.360182][T16109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  274.368725][T16109] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  274.443337][T16112] loop3: detected capacity change from 0 to 512
[  274.453022][T16112] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  274.469568][T16112] EXT4-fs (loop3): 1 truncate cleaned up
[  274.594076][T16082] syz.4.3739 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  274.605065][T16082] CPU: 0 UID: 0 PID: 16082 Comm: syz.4.3739 Tainted: G        W           6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) 
[  274.605095][T16082] Tainted: [W]=WARN
[  274.605102][T16082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  274.605133][T16082] Call Trace:
[  274.605195][T16082]  <TASK>
[  274.605202][T16082]  __dump_stack+0x1d/0x30
[  274.605237][T16082]  dump_stack_lvl+0xe8/0x140
[  274.605261][T16082]  dump_stack+0x15/0x1b
[  274.605276][T16082]  dump_header+0x81/0x220
[  274.605355][T16082]  oom_kill_process+0x334/0x3f0
[  274.605384][T16082]  out_of_memory+0x979/0xb80
[  274.605469][T16082]  try_charge_memcg+0x5e6/0x9e0
[  274.605492][T16082]  charge_memcg+0x51/0xc0
[  274.605518][T16082]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  274.605549][T16082]  __read_swap_cache_async+0x1df/0x350
[  274.605580][T16082]  swap_cluster_readahead+0x277/0x3e0
[  274.605613][T16082]  swapin_readahead+0xde/0x6f0
[  274.605693][T16082]  ? __filemap_get_folio+0x4f7/0x6b0
[  274.605734][T16082]  ? __rcu_read_unlock+0x34/0x70
[  274.605756][T16082]  ? swap_cache_get_folio+0x77/0x200
[  274.605784][T16082]  do_swap_page+0x301/0x2430
[  274.605805][T16082]  ? css_rstat_updated+0xcd/0x5b0
[  274.605867][T16082]  ? __pfx_default_wake_function+0x10/0x10
[  274.605890][T16082]  handle_mm_fault+0x9a5/0x2be0
[  274.605984][T16082]  ? mas_walk+0xf2/0x120
[  274.606011][T16082]  do_user_addr_fault+0x636/0x1090
[  274.606072][T16082]  ? fpregs_assert_state_consistent+0xb4/0xe0
[  274.606136][T16082]  exc_page_fault+0x62/0xa0
[  274.606159][T16082]  asm_exc_page_fault+0x26/0x30
[  274.606175][T16082] RIP: 0033:0x7f55e1af5368
[  274.606188][T16082] Code: 48 f7 f1 48 01 d8 49 39 c4 4c 0f 42 e0 83 3d 5a 28 35 00 00 0f 8e 09 fe ff ff e8 13 a0 fe ff 49 39 c4 72 66 66 0f 1f 44 00 00 <69> 3d 26 03 e8 00 e8 03 00 00 48 8d 1d 27 0c 35 00 e8 02 95 12 00
[  274.606280][T16082] RSP: 002b:00007ffcfcbc6700 EFLAGS: 00010212
[  274.606296][T16082] RAX: 000000000004307f RBX: 00007f55e1e47ba0 RCX: 0000000000042e50
[  274.606307][T16082] RDX: 000000000000022f RSI: 00007ffcfcbc66e0 RDI: 0000000000000001
[  274.606318][T16082] RBP: 00007f55e1e47ba0 R08: 000000002153f5a9 R09: 7fffffffffffffff
[  274.606328][T16082] R10: 3fffffffffffffff R11: 0000000000000293 R12: 0000000000043116
[  274.606340][T16082] R13: 00007ffcfcbc67f0 R14: ffffffffffffffff R15: 00007ffcfcbc6810
[  274.606359][T16082]  </TASK>
[  274.606366][T16082] memory: usage 307200kB, limit 307200kB, failcnt 183
[  274.837703][T16082] memory+swap: usage 307636kB, limit 9007199254740988kB, failcnt 0
[  274.845582][T16082] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0
[  274.852947][T16082] Memory cgroup stats for /syz4:
[  274.853155][T16082] cache 4096
[  274.861488][T16082] rss 0
[  274.864239][T16082] shmem 0
[  274.867235][T16082] mapped_file 0
[  274.870744][T16082] dirty 0
[  274.873698][T16082] writeback 4096
[  274.877233][T16082] workingset_refault_anon 15
[  274.881836][T16082] workingset_refault_file 128
[  274.886504][T16082] swap 446464
[  274.889821][T16082] swapcached 8192
[  274.893986][T16082] pgpgin 384655
[  274.897446][T16082] pgpgout 384652
[  274.901039][T16082] pgfault 396762
[  274.904655][T16082] pgmajfault 20
[  274.908118][T16082] inactive_anon 8192
[  274.912149][T16082] active_anon 0
[  274.915588][T16082] inactive_file 0
[  274.919267][T16082] active_file 4096
[  274.922975][T16082] unevictable 0
[  274.926474][T16082] hierarchical_memory_limit 314572800
[  274.931869][T16082] hierarchical_memsw_limit 9223372036854771712
[  274.938055][T16082] total_cache 4096
[  274.941756][T16082] total_rss 0
[  274.945097][T16082] total_shmem 0
[  274.948596][T16082] total_mapped_file 0
[  274.952593][T16082] total_dirty 0
[  274.956026][T16082] total_writeback 4096
[  274.960116][T16082] total_workingset_refault_anon 15
[  274.965239][T16082] total_workingset_refault_file 128
[  274.970532][T16082] total_swap 446464
[  274.974317][T16082] total_swapcached 8192
[  274.978470][T16082] total_pgpgin 384655
[  274.982441][T16082] total_pgpgout 384652
[  274.986484][T16082] total_pgfault 396762
[  274.990637][T16082] total_pgmajfault 20
[  274.994601][T16082] total_inactive_anon 8192
[  274.999028][T16082] total_active_anon 0
[  275.003085][T16082] total_inactive_file 0
[  275.007268][T16082] total_active_file 4096
[  275.011507][T16082] total_unevictable 0
[  275.015481][T16082] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3739,pid=16082,uid=0
[  275.030346][T16082] Memory cgroup out of memory: Killed process 16082 (syz.4.3739) total-vm:93620kB, anon-rss:1016kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  275.091208][T16136] loop9: detected capacity change from 0 to 256
[  275.107399][T16130] loop8: detected capacity change from 0 to 2048
[  275.192917][T16137] loop7: detected capacity change from 0 to 512
[  275.199539][T16137] EXT4-fs: Ignoring removed mblk_io_submit option
[  275.206050][T16137] EXT4-fs: Ignoring removed bh option
[  275.211714][T16137] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  275.223427][T16137] EXT4-fs (loop7): 1 truncate cleaned up
[  275.440623][T16164] loop4: detected capacity change from 0 to 256
[  275.499158][T16175] netlink: 'syz.3.3770': attribute type 8 has an invalid length.
[  275.504033][T16172] loop4: detected capacity change from 0 to 512
[  275.526316][T16172] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  275.539474][T16172] EXT4-fs (loop4): 1 truncate cleaned up
[  275.850243][T16184] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  276.194704][T16200] loop7: detected capacity change from 0 to 256
[  276.254329][T16206] __nla_validate_parse: 11 callbacks suppressed
[  276.254342][T16206] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3787'.
[  276.284560][T16202] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  276.293571][T16202] tipc: Disabling bearer <eth:syzkaller0>
[  276.348230][T16208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  276.371060][T16208] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  276.406630][T16204] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3786'.
[  276.415569][T16204] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3786'.
[  276.515869][T16211] 9pnet_fd: Insufficient options for proto=fd
[  276.546786][T16213] netlink: 'syz.3.3789': attribute type 7 has an invalid length.
[  276.565209][T16219] loop9: detected capacity change from 0 to 512
[  276.587979][T16219] EXT4-fs: Ignoring removed mblk_io_submit option
[  276.604758][T16219] EXT4-fs (loop9): bad geometry: block count 184549440 exceeds size of device (64 blocks)
[  276.631356][T16219] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3791'.
[  276.705226][T16234] program syz.9.3791 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  276.722630][T16233] loop7: detected capacity change from 0 to 256
[  276.736297][T16236] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3798'.
[  276.765693][T16242] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3801'.
[  276.805364][T16244] loop7: detected capacity change from 0 to 1024
[  276.812142][T16244] EXT4-fs: Ignoring removed orlov option
[  276.824149][T16242] loop4: detected capacity change from 0 to 512
[  276.836340][T16242] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  276.875235][T16242] EXT4-fs (loop4): 1 truncate cleaned up
[  276.893042][T16242] EXT4-fs mount: 110 callbacks suppressed
[  276.893062][T16242] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  277.061825][T16260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3806'.
[  277.371667][T16271] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3808'.
[  277.380697][T16271] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3808'.
[  277.834230][T16282] netlink: 'syz.7.3814': attribute type 3 has an invalid length.
[  277.845222][T16281] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  277.941885][T16284] loop7: detected capacity change from 0 to 512
[  277.956300][T12657] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.980641][T16284] EXT4-fs: Ignoring removed mblk_io_submit option
[  278.017283][T16284] EXT4-fs (loop7): bad geometry: block count 184549440 exceeds size of device (64 blocks)
[  278.118952][T16291] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3819'.
[  278.183267][T16291] blktrace: Concurrent blktraces are not allowed on sg0
[  278.231979][   T29] kauditd_printk_skb: 744 callbacks suppressed
[  278.231990][   T29] audit: type=1326 audit(1751254377.997:28081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16283 comm="syz.7.3815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefcc70e929 code=0x7ffc0000
[  278.261740][   T29] audit: type=1326 audit(1751254377.997:28082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16283 comm="syz.7.3815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefcc70e929 code=0x7ffc0000
[  278.285410][   T29] audit: type=1326 audit(1751254377.997:28083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16283 comm="syz.7.3815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefcc70e929 code=0x7ffc0000
[  278.433309][T16301] loop4: detected capacity change from 0 to 512
[  278.468564][   T29] audit: type=1326 audit(1751254378.077:28084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16283 comm="syz.7.3815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefcc70e929 code=0x7ffc0000
[  278.492165][   T29] audit: type=1326 audit(1751254378.077:28085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16283 comm="syz.7.3815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefcc70e929 code=0x7ffc0000
[  278.515793][   T29] audit: type=1326 audit(1751254378.077:28086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16283 comm="syz.7.3815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefcc70e929 code=0x7ffc0000
[  278.570241][T16301] EXT4-fs: Ignoring removed mblk_io_submit option
[  278.580964][T16301] EXT4-fs (loop4): bad geometry: block count 184549440 exceeds size of device (64 blocks)
[  278.655078][T16310] program syz.4.3821 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  278.677239][T16311] loop7: detected capacity change from 0 to 512
[  278.684042][T16311] EXT4-fs: Ignoring removed mblk_io_submit option
[  278.690485][T16311] EXT4-fs: Ignoring removed bh option
[  278.696377][T16311] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  278.716982][   T29] audit: type=1326 audit(1751254378.437:28087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16300 comm="syz.4.3821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e1c1e929 code=0x7ffc0000
[  278.781256][   T29] audit: type=1326 audit(1751254378.507:28088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16300 comm="syz.4.3821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e1c1e929 code=0x7ffc0000
[  278.805049][   T29] audit: type=1326 audit(1751254378.507:28089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16300 comm="syz.4.3821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55e1c1e929 code=0x7ffc0000
[  278.828628][   T29] audit: type=1326 audit(1751254378.507:28090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16300 comm="syz.4.3821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e1c1e929 code=0x7ffc0000
[  278.872662][T16311] EXT4-fs (loop7): 1 truncate cleaned up
[  278.879024][T16311] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  279.084121][T16329] netlink: 'syz.8.3831': attribute type 7 has an invalid length.
[  279.340244][T16337] loop9: detected capacity change from 0 to 512
[  279.346796][T16337] EXT4-fs: Ignoring removed mblk_io_submit option
[  279.353314][T16337] EXT4-fs: Ignoring removed bh option
[  279.387566][T16337] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  279.404299][ T8813] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  279.432310][T16337] EXT4-fs (loop9): 1 truncate cleaned up
[  279.438572][T16337] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  279.457056][T16339] loop4: detected capacity change from 0 to 256
[  279.671448][T16349] loop7: detected capacity change from 0 to 512
[  279.700304][T16355] loop3: detected capacity change from 0 to 1024
[  279.715580][T16353] loop4: detected capacity change from 0 to 1024
[  279.721122][T16355] EXT4-fs: Ignoring removed orlov option
[  279.723907][T16349] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  279.754912][T16349] ext4 filesystem being mounted at /527/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  279.768165][T16353] EXT4-fs: Ignoring removed orlov option
[  279.777457][T16349] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #2: comm syz.7.3835: corrupted inode contents
[  279.789486][T16349] EXT4-fs error (device loop7): ext4_dirty_inode:6459: inode #2: comm syz.7.3835: mark_inode_dirty error
[  279.807953][T16355] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  279.813740][T16349] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #2: comm syz.7.3835: corrupted inode contents
[  279.842992][T16353] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  279.853342][T16364] loop8: detected capacity change from 0 to 1024
[  279.860399][T16367] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #2: comm syz.7.3835: corrupted inode contents
[  279.863159][T16364] EXT4-fs: Ignoring removed orlov option
[  279.881142][T16367] EXT4-fs error (device loop7): ext4_dirty_inode:6459: inode #2: comm syz.7.3835: mark_inode_dirty error
[  279.893649][T13400] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  279.895693][T16367] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #2: comm syz.7.3835: corrupted inode contents
[  279.916122][T16364] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  279.929324][T16367] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.3835: mark_inode_dirty error
[  279.946791][T16367] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #2: comm syz.7.3835: corrupted inode contents
[  279.962001][T16371] 9pnet_fd: Insufficient options for proto=fd
[  279.996963][T16367] EXT4-fs error (device loop7): ext4_dirty_inode:6459: inode #2: comm syz.7.3835: mark_inode_dirty error
[  280.011688][T12657] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.021374][T11578] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.056186][T11313] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.087671][ T8813] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.189384][T16395] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  280.224490][T16402] loop7: detected capacity change from 0 to 512
[  280.250458][T16402] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  280.263675][T16402] ext4 filesystem being mounted at /531/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  280.275203][T16402] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #2: comm syz.7.3858: corrupted inode contents
[  280.288961][T16402] EXT4-fs error (device loop7): ext4_dirty_inode:6459: inode #2: comm syz.7.3858: mark_inode_dirty error
[  280.305012][T16402] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #2: comm syz.7.3858: corrupted inode contents
[  280.345960][T16410] loop9: detected capacity change from 0 to 512
[  280.353294][ T8813] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.380786][T16413] loop7: detected capacity change from 0 to 1024
[  280.392355][T16413] EXT4-fs: Ignoring removed orlov option
[  280.402985][T16410] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  280.416184][T16410] ext4 filesystem being mounted at /259/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  280.419955][T16413] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  280.429025][T16410] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #2: comm syz.9.3860: corrupted inode contents
[  280.450367][T16410] EXT4-fs error (device loop9): ext4_dirty_inode:6459: inode #2: comm syz.9.3860: mark_inode_dirty error
[  280.462065][T16410] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #2: comm syz.9.3860: corrupted inode contents
[  280.479963][T16410] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #2: comm syz.9.3860: corrupted inode contents
[  280.496008][T16410] EXT4-fs error (device loop9): ext4_dirty_inode:6459: inode #2: comm syz.9.3860: mark_inode_dirty error
[  280.507577][T16410] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #2: comm syz.9.3860: corrupted inode contents
[  280.520446][ T8813] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.534544][T16410] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #2: comm syz.9.3860: mark_inode_dirty error
[  280.563673][T16410] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #2: comm syz.9.3860: corrupted inode contents
[  280.576770][T16410] EXT4-fs error (device loop9): ext4_dirty_inode:6459: inode #2: comm syz.9.3860: mark_inode_dirty error
[  280.612651][T11578] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.726946][T16442] loop9: detected capacity change from 0 to 1024
[  280.743631][T16442] EXT4-fs: Ignoring removed orlov option
[  280.761181][T16442] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  280.797074][T16448] loop7: detected capacity change from 0 to 1024
[  280.820979][T11578] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.838007][T16448] EXT4-fs: Ignoring removed orlov option
[  280.939664][T16448] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  280.945482][T16455] loop4: detected capacity change from 0 to 512
[  280.995204][ T8813] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.001778][T16455] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  281.016815][T16455] ext4 filesystem being mounted at /209/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  281.038286][T16455] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.3876: corrupted inode contents
[  281.065608][T16455] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.3876: mark_inode_dirty error
[  281.080001][T16455] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.3876: corrupted inode contents
[  281.135564][T12657] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.182712][T16478] loop7: detected capacity change from 0 to 512
[  281.210581][T16478] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  281.238511][T16478] ext4 filesystem being mounted at /540/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  281.251211][T16474] blktrace: Concurrent blktraces are not allowed on sg0
[  281.258924][T16478] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #2: comm syz.7.3884: corrupted inode contents
[  281.311459][T16478] EXT4-fs error (device loop7): ext4_dirty_inode:6459: inode #2: comm syz.7.3884: mark_inode_dirty error
[  281.322993][T16478] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #2: comm syz.7.3884: corrupted inode contents
[  281.499144][T16478] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.3884: mark_inode_dirty error
[  281.591115][T16490] loop3: detected capacity change from 0 to 1024
[  281.606499][T16490] EXT4-fs: Ignoring removed orlov option
[  281.628690][T16490] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  281.643038][ T8813] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.762854][T13400] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.920802][T16503] __nla_validate_parse: 17 callbacks suppressed
[  281.920812][T16503] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3889'.
[  281.970707][T16509] loop8: detected capacity change from 0 to 1024
[  281.977375][T16509] EXT4-fs: Ignoring removed orlov option
[  281.991669][T16509] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  282.030066][T11313] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.086661][T16520] loop8: detected capacity change from 0 to 512
[  282.119699][T16520] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  282.132670][T16520] ext4 filesystem being mounted at /280/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  282.143126][T16522] loop4: detected capacity change from 0 to 512
[  282.144562][T16520] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #2: comm syz.8.3893: corrupted inode contents
[  282.161801][T16520] EXT4-fs error (device loop8): ext4_dirty_inode:6459: inode #2: comm syz.8.3893: mark_inode_dirty error
[  282.163230][T16522] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.3894: casefold flag without casefold feature
[  282.173742][T16520] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #2: comm syz.8.3893: corrupted inode contents
[  282.192122][T16522] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.3894: couldn't read orphan inode 15 (err -117)
[  282.212429][T16522] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  282.225970][T11313] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.250122][T12657] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.855176][T16553] netlink: 'syz.7.3900': attribute type 10 has an invalid length.
[  282.899306][T16555] loop3: detected capacity change from 0 to 512
[  282.905853][T16555] EXT4-fs: Ignoring removed mblk_io_submit option
[  282.912294][T16555] EXT4-fs: Ignoring removed bh option
[  282.953353][T16555] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  282.965497][T16555] EXT4-fs (loop3): 1 truncate cleaned up
[  282.971906][T16555] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  283.073601][T16557] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  283.086648][T16557] tipc: Disabling bearer <eth:syzkaller0>
[  283.142880][T16558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  283.212085][T16558] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  283.220260][T16560] loop8: detected capacity change from 0 to 512
[  283.244244][T16560] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  283.257263][T16560] ext4 filesystem being mounted at /282/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  283.282672][T16560] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #2: comm syz.8.3907: corrupted inode contents
[  283.298299][T16560] EXT4-fs error (device loop8): ext4_dirty_inode:6459: inode #2: comm syz.8.3907: mark_inode_dirty error
[  283.310089][T16560] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #2: comm syz.8.3907: corrupted inode contents
[  283.341265][T11313] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.353657][T16572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3909'.
[  283.433548][   T29] kauditd_printk_skb: 171 callbacks suppressed
[  283.433561][   T29] audit: type=1326 audit(1751254383.197:28262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16579 comm="syz.7.3914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefcc70e929 code=0x7ffc0000
[  283.463607][   T29] audit: type=1326 audit(1751254383.197:28263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16579 comm="syz.7.3914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefcc70e929 code=0x7ffc0000
[  283.487218][   T29] audit: type=1326 audit(1751254383.197:28264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16579 comm="syz.7.3914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fefcc70e929 code=0x7ffc0000
[  283.510809][   T29] audit: type=1326 audit(1751254383.197:28265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16579 comm="syz.7.3914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefcc70e929 code=0x7ffc0000
[  283.534418][   T29] audit: type=1326 audit(1751254383.197:28266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16579 comm="syz.7.3914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fefcc70e929 code=0x7ffc0000
[  283.557801][   T29] audit: type=1326 audit(1751254383.197:28267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16579 comm="syz.7.3914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefcc70e929 code=0x7ffc0000
[  283.581467][   T29] audit: type=1326 audit(1751254383.197:28268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16579 comm="syz.7.3914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefcc70e929 code=0x7ffc0000
[  283.605041][   T29] audit: type=1326 audit(1751254383.197:28269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16579 comm="syz.7.3914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefcc70e929 code=0x7ffc0000
[  283.628723][   T29] audit: type=1326 audit(1751254383.197:28270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16579 comm="syz.7.3914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fefcc70d290 code=0x7ffc0000
[  283.653413][   T29] audit: type=1326 audit(1751254383.227:28271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16579 comm="syz.7.3914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefcc70e929 code=0x7ffc0000
[  283.717777][T13400] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.748439][T16586] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3915'.
[  283.800170][T16589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3917'.
[  283.814072][T16582] loop8: detected capacity change from 0 to 512
[  283.817442][T16582] EXT4-fs: Ignoring removed mblk_io_submit option
[  283.827136][T16582] EXT4-fs: Ignoring removed bh option
[  283.883169][T16582] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  283.923545][T16598] loop7: detected capacity change from 0 to 1024
[  283.969239][T16598] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  283.973801][T16606] 9pnet_fd: Insufficient options for proto=fd
[  284.002622][T16608] loop4: detected capacity change from 0 to 1024
[  284.009363][T16598] FAULT_INJECTION: forcing a failure.
[  284.009363][T16598] name failslab, interval 1, probability 0, space 0, times 0
[  284.009982][T16582] EXT4-fs (loop8): 1 truncate cleaned up
[  284.021986][T16598] CPU: 1 UID: 0 PID: 16598 Comm: syz.7.3920 Tainted: G        W           6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) 
[  284.022067][T16598] Tainted: [W]=WARN
[  284.022074][T16598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  284.022086][T16598] Call Trace:
[  284.022092][T16598]  <TASK>
[  284.022100][T16598]  __dump_stack+0x1d/0x30
[  284.022121][T16598]  dump_stack_lvl+0xe8/0x140
[  284.022140][T16598]  dump_stack+0x15/0x1b
[  284.022156][T16598]  should_fail_ex+0x265/0x280
[  284.022199][T16598]  should_failslab+0x8c/0xb0
[  284.022222][T16598]  __kmalloc_noprof+0xa5/0x3e0
[  284.022246][T16598]  ? alloc_pipe_info+0x1c9/0x350
[  284.022310][T16598]  alloc_pipe_info+0x1c9/0x350
[  284.022355][T16598]  splice_direct_to_actor+0x592/0x680
[  284.022382][T16598]  ? kstrtouint_from_user+0x9f/0xf0
[  284.022409][T16598]  ? __pfx_direct_splice_actor+0x10/0x10
[  284.022477][T16598]  ? __rcu_read_unlock+0x4f/0x70
[  284.022499][T16598]  ? get_pid_task+0x96/0xd0
[  284.022517][T16598]  ? avc_policy_seqno+0x15/0x30
[  284.022548][T16598]  ? selinux_file_permission+0x1e4/0x320
[  284.022571][T16598]  do_splice_direct+0xda/0x150
[  284.022598][T16598]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  284.022630][T16598]  do_sendfile+0x380/0x650
[  284.022659][T16598]  __x64_sys_sendfile64+0x105/0x150
[  284.022683][T16598]  x64_sys_call+0xb39/0x2fb0
[  284.022703][T16598]  do_syscall_64+0xd2/0x200
[  284.022756][T16598]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  284.022845][T16598]  ? clear_bhb_loop+0x40/0x90
[  284.022866][T16598]  ? clear_bhb_loop+0x40/0x90
[  284.022917][T16598]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.022992][T16598] RIP: 0033:0x7fefcc70e929
[  284.023006][T16598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  284.023023][T16598] RSP: 002b:00007fefcad77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  284.023097][T16598] RAX: ffffffffffffffda RBX: 00007fefcc935fa0 RCX: 00007fefcc70e929
[  284.023108][T16598] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006
[  284.023121][T16598] RBP: 00007fefcad77090 R08: 0000000000000000 R09: 0000000000000000
[  284.023133][T16598] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001
[  284.023146][T16598] R13: 0000000000000000 R14: 00007fefcc935fa0 R15: 00007ffdecf1e2f8
[  284.023164][T16598]  </TASK>
[  284.026969][T16608] EXT4-fs: Ignoring removed orlov option
[  284.134425][T16582] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  284.282765][T16613] loop9: detected capacity change from 0 to 512
[  284.295864][T16613] EXT4-fs: Ignoring removed nobh option
[  284.304850][T16616] netlink: 'syz.3.3929': attribute type 8 has an invalid length.
[  284.313934][ T8813] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.325515][T16608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  284.365020][T16620] loop7: detected capacity change from 0 to 512
[  284.389396][T16613] EXT4-fs error (device loop9): ext4_orphan_get:1393: inode #15: comm syz.9.3927: iget: bad i_size value: 38620345925642
[  284.412877][T16613] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.3927: couldn't read orphan inode 15 (err -117)
[  284.440172][T16613] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  284.453418][T16613] EXT4-fs error (device loop9): empty_inline_dir:1786: inode #12: block 7: comm syz.9.3927: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0
[  284.472986][T16613] EXT4-fs warning (device loop9): empty_inline_dir:1793: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60
[  284.491055][T16620] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  284.503655][T16620] ext4 filesystem being mounted at /550/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  284.535396][T16620] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #2: comm syz.7.3928: corrupted inode contents
[  284.576954][T16620] EXT4-fs error (device loop7): ext4_dirty_inode:6459: inode #2: comm syz.7.3928: mark_inode_dirty error
[  284.582096][T12657] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.595284][T16620] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #2: comm syz.7.3928: corrupted inode contents
[  284.598959][T11313] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.610043][T16620] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.3928: mark_inode_dirty error
[  284.632591][T16629] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  284.676902][T11578] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.700119][T16631] netlink: 'syz.4.3931': attribute type 10 has an invalid length.
[  284.713683][ T8813] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.723962][T16636] loop8: detected capacity change from 0 to 256
[  284.725008][T16631] batman_adv: batadv0: Adding interface: team0
[  284.736555][T16631] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  284.761735][T16631] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  284.816993][T16645] loop8: detected capacity change from 0 to 512
[  284.874931][T16637] loop3: detected capacity change from 0 to 1024
[  284.885885][T16637] EXT4-fs: Ignoring removed orlov option
[  284.903076][T16645] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  284.934889][T16637] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  284.967055][T16647] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3939'.
[  284.976371][T16647] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3939'.
[  284.977203][T16645] ext4 filesystem being mounted at /286/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  285.025718][T16659] loop4: detected capacity change from 0 to 1024
[  285.033945][T16659] EXT4-fs: Ignoring removed orlov option
[  285.040012][T16645] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #2: comm syz.8.3938: corrupted inode contents
[  285.054918][T16645] EXT4-fs error (device loop8): ext4_dirty_inode:6459: inode #2: comm syz.8.3938: mark_inode_dirty error
[  285.070364][T16645] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #2: comm syz.8.3938: corrupted inode contents
[  285.083319][T16659] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  285.085504][T16663] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3943'.
[  285.120116][T12657] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.133109][T13400] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.172214][T11313] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.215816][T16671] loop7: detected capacity change from 0 to 256
[  285.300107][T16682] loop8: detected capacity change from 0 to 512
[  285.311564][T16683] FAULT_INJECTION: forcing a failure.
[  285.311564][T16683] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  285.324822][T16683] CPU: 1 UID: 0 PID: 16683 Comm: syz.3.3945 Tainted: G        W           6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) 
[  285.324879][T16683] Tainted: [W]=WARN
[  285.324887][T16683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  285.324898][T16683] Call Trace:
[  285.324904][T16683]  <TASK>
[  285.324911][T16683]  __dump_stack+0x1d/0x30
[  285.324953][T16683]  dump_stack_lvl+0xe8/0x140
[  285.324972][T16683]  dump_stack+0x15/0x1b
[  285.324990][T16683]  should_fail_ex+0x265/0x280
[  285.325020][T16683]  should_fail+0xb/0x20
[  285.325169][T16683]  should_fail_usercopy+0x1a/0x20
[  285.325199][T16683]  _copy_from_iter+0xcf/0xe40
[  285.325298][T16683]  ? __build_skb_around+0x1a0/0x200
[  285.325323][T16683]  ? __alloc_skb+0x223/0x320
[  285.325424][T16683]  netlink_sendmsg+0x471/0x6b0
[  285.325443][T16683]  ? __pfx_netlink_sendmsg+0x10/0x10
[  285.325468][T16683]  __sock_sendmsg+0x145/0x180
[  285.325488][T16683]  ____sys_sendmsg+0x31e/0x4e0
[  285.325518][T16683]  ___sys_sendmsg+0x17b/0x1d0
[  285.325557][T16683]  __x64_sys_sendmsg+0xd4/0x160
[  285.325628][T16683]  x64_sys_call+0x2999/0x2fb0
[  285.325645][T16683]  do_syscall_64+0xd2/0x200
[  285.325661][T16683]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  285.325686][T16683]  ? clear_bhb_loop+0x40/0x90
[  285.325707][T16683]  ? clear_bhb_loop+0x40/0x90
[  285.325806][T16683]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.325831][T16683] RIP: 0033:0x7eff4146e929
[  285.325847][T16683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  285.325862][T16683] RSP: 002b:00007eff3fad7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  285.325879][T16683] RAX: ffffffffffffffda RBX: 00007eff41695fa0 RCX: 00007eff4146e929
[  285.325890][T16683] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[  285.325900][T16683] RBP: 00007eff3fad7090 R08: 0000000000000000 R09: 0000000000000000
[  285.325911][T16683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  285.325997][T16683] R13: 0000000000000000 R14: 00007eff41695fa0 R15: 00007ffe9e49d048
[  285.326015][T16683]  </TASK>
[  285.542200][T16688] loop9: detected capacity change from 0 to 512
[  285.548871][T16688] EXT4-fs: Ignoring removed mblk_io_submit option
[  285.555344][T16688] EXT4-fs: Ignoring removed bh option
[  285.561073][T16688] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  285.573992][T16688] EXT4-fs (loop9): 1 truncate cleaned up
[  285.586988][T16688] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  285.623214][T16682] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  285.658937][T16682] ext4 filesystem being mounted at /287/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  285.685884][T16682] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #2: comm syz.8.3947: corrupted inode contents
[  285.713856][T16699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3956'.
[  285.729138][T16682] EXT4-fs error (device loop8): ext4_dirty_inode:6459: inode #2: comm syz.8.3947: mark_inode_dirty error
[  285.761265][T16682] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #2: comm syz.8.3947: corrupted inode contents
[  285.790538][T16706] loop4: detected capacity change from 0 to 512
[  285.804210][T16682] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #2: comm syz.8.3947: mark_inode_dirty error
[  285.828357][T16706] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  285.841918][T16706] ext4 filesystem being mounted at /226/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  285.848153][T11313] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.853547][T16706] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.3958: corrupted inode contents
[  285.877066][T16712] loop3: detected capacity change from 0 to 512
[  285.883827][T16706] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.3958: mark_inode_dirty error
[  285.896761][T16715] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3963'.
[  285.906782][T16706] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.3958: corrupted inode contents
[  285.914488][T16712] EXT4-fs (loop3): orphan cleanup on readonly fs
[  285.938789][T12657] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.949187][T16712] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3962: bg 0: block 248: padding at end of block bitmap is not set
[  285.963885][T16712] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3962: Failed to acquire dquot type 1
[  285.977205][T16712] EXT4-fs (loop3): 1 truncate cleaned up
[  285.986954][T16718] loop8: detected capacity change from 0 to 256
[  285.994772][T16712] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  286.048021][T16712] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.3962: deleted inode referenced: 12
[  286.062183][T11578] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.096009][T16712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3962'.
[  286.108324][T16723] 9pnet_fd: Insufficient options for proto=fd
[  286.166298][T16730] loop8: detected capacity change from 0 to 164
[  286.175804][T13400] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.223125][T16744] loop8: detected capacity change from 0 to 512
[  286.224800][T16743] SET target dimension over the limit!
[  286.242396][T16729] loop7: detected capacity change from 0 to 512
[  286.275155][T16748] loop4: detected capacity change from 0 to 512
[  286.301683][T16748] EXT4-fs: Ignoring removed mblk_io_submit option
[  286.309420][T16748] EXT4-fs (loop4): bad geometry: block count 184549440 exceeds size of device (64 blocks)
[  286.341603][T16729] EXT4-fs error (device loop7): __ext4_iget:5379: inode #4: block 193290: comm syz.7.3967: invalid block
[  286.366744][T16729] EXT4-fs error (device loop7): ext4_quota_enable:7127: comm syz.7.3967: Bad quota inode: 4, type: 1
[  286.387737][T16744] ext4 filesystem being mounted at /290/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  286.400445][T16729] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  286.415753][T16744] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #2: comm syz.8.3972: corrupted inode contents
[  286.429315][T16729] EXT4-fs (loop7): mount failed
[  286.434264][T16744] EXT4-fs error (device loop8): ext4_dirty_inode:6459: inode #2: comm syz.8.3972: mark_inode_dirty error
[  286.455804][T16757] loop9: detected capacity change from 0 to 512
[  286.460736][T16744] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #2: comm syz.8.3972: corrupted inode contents
[  286.462311][T16757] EXT4-fs: Ignoring removed mblk_io_submit option
[  286.479346][T16744] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #2: comm syz.8.3972: mark_inode_dirty error
[  286.480188][T16757] EXT4-fs: Ignoring removed bh option
[  286.496875][T16757] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  286.518731][T16757] EXT4-fs (loop9): 1 truncate cleaned up
[  286.637893][T16773] loop8: detected capacity change from 0 to 1024
[  286.653480][T16773] EXT4-fs: Ignoring removed orlov option
[  286.674945][T16781] loop3: detected capacity change from 0 to 512
[  286.718733][T16781] ext4 filesystem being mounted at /215/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  286.734624][T16781] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.3986: corrupted inode contents
[  286.747592][T16789] loop8: detected capacity change from 0 to 512
[  286.754058][T16790] loop4: detected capacity change from 0 to 256
[  286.757903][T16789] EXT4-fs: Ignoring removed mblk_io_submit option
[  286.766926][T16781] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.3986: mark_inode_dirty error
[  286.780826][T16789] EXT4-fs (loop8): bad geometry: block count 184549440 exceeds size of device (64 blocks)
[  286.791359][T16781] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.3986: corrupted inode contents
[  286.811597][T16782] blktrace: Concurrent blktraces are not allowed on sg0
[  286.854583][T16789] program syz.8.3987 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  286.900405][T16796] loop3: detected capacity change from 0 to 512
[  287.001628][T16804] __nla_validate_parse: 11 callbacks suppressed
[  287.001642][T16804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3993'.
[  287.074000][T16796] ext4 filesystem being mounted at /216/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  287.106913][T16796] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.3990: corrupted inode contents
[  287.124429][T16796] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.3990: mark_inode_dirty error
[  287.151488][T16812] loop4: detected capacity change from 0 to 512
[  287.168689][T16796] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.3990: corrupted inode contents
[  287.247073][T16812] EXT4-fs (loop4): orphan cleanup on readonly fs
[  287.256474][T16796] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.3990: mark_inode_dirty error
[  287.273909][T16812] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3996: bg 0: block 248: padding at end of block bitmap is not set
[  287.310274][T16812] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3996: Failed to acquire dquot type 1
[  287.342497][T16812] EXT4-fs (loop4): 1 truncate cleaned up
[  287.391456][T16812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3996'.
[  287.513972][T16826] loop4: detected capacity change from 0 to 256
[  287.550038][T16823] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3997'.
[  287.558959][T16823] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3997'.
[  287.616196][T16828] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  287.733096][T16841] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4006'.
[  287.872827][T16856] loop3: detected capacity change from 0 to 512
[  287.879730][T16856] EXT4-fs: Ignoring removed mblk_io_submit option
[  287.888473][T16856] EXT4-fs (loop3): bad geometry: block count 184549440 exceeds size of device (64 blocks)
[  287.905500][T16854] loop9: detected capacity change from 0 to 512
[  287.912087][T16854] EXT4-fs: Ignoring removed mblk_io_submit option
[  287.918584][T16854] EXT4-fs: Ignoring removed bh option
[  287.926706][T16854] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  287.941426][T16856] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4011'.
[  287.941859][T16854] EXT4-fs (loop9): 1 truncate cleaned up
[  288.065145][T16870] loop7: detected capacity change from 0 to 512
[  288.078867][T16870] EXT4-fs (loop7): orphan cleanup on readonly fs
[  288.085909][T16870] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4016: bg 0: block 248: padding at end of block bitmap is not set
[  288.101910][T16870] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.4016: Failed to acquire dquot type 1
[  288.114127][T16870] EXT4-fs (loop7): 1 truncate cleaned up
[  288.122386][T16870] EXT4-fs error (device loop7): ext4_lookup:1791: inode #2: comm syz.7.4016: deleted inode referenced: 12
[  288.151387][T16870] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4016'.
[  288.204549][T16881] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4020'.
[  288.214904][T16882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4018'.
[  288.223832][T16882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4018'.
[  288.405680][T16901] loop7: detected capacity change from 0 to 512
[  288.414292][T16901] EXT4-fs: Ignoring removed mblk_io_submit option
[  288.424145][T16901] EXT4-fs (loop7): bad geometry: block count 184549440 exceeds size of device (64 blocks)
[  288.442979][T16901] program syz.7.4027 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  288.455081][   T29] kauditd_printk_skb: 498 callbacks suppressed
[  288.455093][   T29] audit: type=1326 audit(1751254388.217:28764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16899 comm="syz.7.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefcc70e929 code=0x7ffc0000
[  288.484886][   T29] audit: type=1326 audit(1751254388.217:28765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16899 comm="syz.7.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefcc70e929 code=0x7ffc0000
[  288.508444][   T29] audit: type=1326 audit(1751254388.217:28766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16899 comm="syz.7.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefcc70e929 code=0x7ffc0000
[  288.532083][   T29] audit: type=1326 audit(1751254388.217:28767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16899 comm="syz.7.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefcc70e929 code=0x7ffc0000
[  288.555680][   T29] audit: type=1326 audit(1751254388.217:28768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16899 comm="syz.7.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefcc70e929 code=0x7ffc0000
[  288.580690][   T29] audit: type=1326 audit(1751254388.217:28769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16899 comm="syz.7.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefcc70e929 code=0x7ffc0000
[  288.604280][   T29] audit: type=1326 audit(1751254388.217:28770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16899 comm="syz.7.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefcc70e929 code=0x7ffc0000
[  288.627905][   T29] audit: type=1326 audit(1751254388.217:28771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16899 comm="syz.7.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fefcc70e929 code=0x7ffc0000
[  288.651432][   T29] audit: type=1326 audit(1751254388.217:28772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16899 comm="syz.7.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefcc70e929 code=0x7ffc0000
[  288.670639][T16896] blktrace: Concurrent blktraces are not allowed on sg0
[  288.675010][   T29] audit: type=1326 audit(1751254388.217:28773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16899 comm="syz.7.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fefcc70e929 code=0x7ffc0000
[  288.733213][T16903] loop7: detected capacity change from 0 to 1024
[  288.740013][T16903] EXT4-fs: Ignoring removed orlov option
[  288.778869][T16914] loop4: detected capacity change from 0 to 1024
[  288.785639][T16914] EXT4-fs: Ignoring removed orlov option
[  288.790127][T16910] loop9: detected capacity change from 0 to 512
[  288.840014][T16910] EXT4-fs (loop9): orphan cleanup on readonly fs
[  288.848068][T16917] 9pnet_fd: Insufficient options for proto=fd
[  288.854590][T16910] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4029: bg 0: block 248: padding at end of block bitmap is not set
[  288.887670][T16910] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.4029: Failed to acquire dquot type 1
[  288.916931][T16910] EXT4-fs (loop9): 1 truncate cleaned up
[  288.935686][T16910] EXT4-fs error (device loop9): ext4_lookup:1791: inode #2: comm syz.9.4029: deleted inode referenced: 12
[  289.064330][T16951] netlink: 'syz.8.4044': attribute type 10 has an invalid length.
[  289.200398][T16970] loop3: detected capacity change from 0 to 1024
[  289.207130][T16970] EXT4-fs: Ignoring removed orlov option
[  289.324876][T16984] loop8: detected capacity change from 0 to 2048
[  289.333225][T16986] loop3: detected capacity change from 0 to 512
[  289.355650][T16986] ext4 filesystem being mounted at /230/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  289.371873][ T5050]  loop8: p1 < > p4
[  289.375625][T16986] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.4059: corrupted inode contents
[  289.388891][ T5050] loop8: p4 size 8388608 extends beyond EOD, truncated
[  289.398372][T16986] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.4059: mark_inode_dirty error
[  289.399362][T16984]  loop8: p1 < > p4
[  289.414201][T16984] loop8: p4 size 8388608 extends beyond EOD, truncated
[  289.421201][T16986] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.4059: corrupted inode contents
[  289.440065][T16986] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.4059: mark_inode_dirty error
[  289.506658][ T5050] udevd[5050]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[  289.516978][ T6236] udevd[6236]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory
[  289.545751][T17000] loop3: detected capacity change from 0 to 512
[  289.589426][T17000] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  289.603190][T17001] blktrace: Concurrent blktraces are not allowed on sg0
[  289.681437][T17010] loop3: detected capacity change from 0 to 256
[  290.029877][T17024] SET target dimension over the limit!
[  290.223085][T17028] loop4: detected capacity change from 0 to 512
[  290.237506][T17028] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  290.249804][T17028] EXT4-fs (loop4): 1 truncate cleaned up
[  290.471839][T17045] loop8: detected capacity change from 0 to 512
[  290.498238][T17045] ext4 filesystem being mounted at /313/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  290.523777][T17045] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #2: comm syz.8.4080: corrupted inode contents
[  290.557022][T17045] EXT4-fs error (device loop8): ext4_dirty_inode:6459: inode #2: comm syz.8.4080: mark_inode_dirty error
[  290.594166][T17045] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #2: comm syz.8.4080: corrupted inode contents
[  290.622286][T17045] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #2: comm syz.8.4080: mark_inode_dirty error
[  290.811414][T17066] loop7: detected capacity change from 0 to 1024
[  290.865756][T17066] EXT4-fs: Ignoring removed orlov option
[  290.931590][T17078] loop7: detected capacity change from 0 to 512
[  290.986765][T17085] loop3: detected capacity change from 0 to 512
[  290.997146][T17078] EXT4-fs (loop7): orphan cleanup on readonly fs
[  291.005511][T17078] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4092: bg 0: block 248: padding at end of block bitmap is not set
[  291.021507][T17078] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.4092: Failed to acquire dquot type 1
[  291.035754][T17078] EXT4-fs (loop7): 1 truncate cleaned up
[  291.043937][T17085] ext4 filesystem being mounted at /242/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  291.065805][T17085] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.4095: corrupted inode contents
[  291.077912][T17085] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.4095: mark_inode_dirty error
[  291.089973][T17078] EXT4-fs error (device loop7): ext4_lookup:1791: inode #2: comm syz.7.4092: deleted inode referenced: 12
[  291.104683][T17085] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.4095: corrupted inode contents
[  291.163230][T17092] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  291.184198][T17092] tipc: Disabling bearer <eth:syzkaller0>
[  291.200817][T17095] loop7: detected capacity change from 0 to 2048
[  291.234245][T17096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  291.252573][ T5050]  loop7: p1 < > p4
[  291.257035][T17096] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  291.267015][ T5050] loop7: p4 size 8388608 extends beyond EOD, truncated
[  291.276235][T17095]  loop7: p1 < > p4
[  291.278752][T17095] loop7: p4 size 8388608 extends beyond EOD, truncated
[  291.344863][ T6236] udevd[6236]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory
[  291.345146][ T5050] udevd[5050]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[  291.372755][ T6236] udevd[6236]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory
[  291.383754][ T5050] udevd[5050]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[  291.535006][T17123] loop8: detected capacity change from 0 to 1024
[  291.551002][T17123] EXT4-fs: Ignoring removed orlov option
[  291.673505][T17129] loop8: detected capacity change from 0 to 512
[  291.681467][T17129] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  291.692926][T17129] EXT4-fs (loop8): 1 truncate cleaned up
[  292.019160][T17137] loop3: detected capacity change from 0 to 512
[  292.025804][T17137] EXT4-fs: Ignoring removed mblk_io_submit option
[  292.032262][T17137] EXT4-fs: Ignoring removed bh option
[  292.038370][T17137] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  292.049205][T17137] EXT4-fs (loop3): 1 truncate cleaned up
[  292.156364][ T2149] kworker/u8:8 invoked oom-killer: gfp_mask=0x100c0a(GFP_NOIO|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_HARDWALL), order=0, oom_score_adj=0
[  292.170019][ T2149] CPU: 0 UID: 0 PID: 2149 Comm: kworker/u8:8 Tainted: G        W           6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) 
[  292.170048][ T2149] Tainted: [W]=WARN
[  292.170054][ T2149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  292.170064][ T2149] Workqueue: loop8 loop_rootcg_workfn
[  292.170092][ T2149] Call Trace:
[  292.170097][ T2149]  <TASK>
[  292.170152][ T2149]  __dump_stack+0x1d/0x30
[  292.170168][ T2149]  dump_stack_lvl+0xe8/0x140
[  292.170184][ T2149]  dump_stack+0x15/0x1b
[  292.170198][ T2149]  dump_header+0x81/0x220
[  292.170228][ T2149]  oom_kill_process+0x334/0x3f0
[  292.170263][ T2149]  out_of_memory+0x979/0xb80
[  292.170293][ T2149]  try_charge_memcg+0x5e6/0x9e0
[  292.170374][ T2149]  charge_memcg+0x51/0xc0
[  292.170452][ T2149]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  292.170486][ T2149]  __read_swap_cache_async+0x1df/0x350
[  292.170598][ T2149]  swap_cluster_readahead+0x277/0x3e0
[  292.170650][ T2149]  shmem_swapin_folio+0x821/0xf50
[  292.170737][ T2149]  ? filemap_get_entry+0x34b/0x390
[  292.170764][ T2149]  shmem_get_folio_gfp+0x26c/0xd60
[  292.170823][ T2149]  ? update_curr+0x16e/0x320
[  292.170855][ T2149]  shmem_write_begin+0xa8/0x190
[  292.170923][ T2149]  generic_perform_write+0x184/0x490
[  292.170949][ T2149]  shmem_file_write_iter+0xc5/0xf0
[  292.170972][ T2149]  lo_rw_aio+0x6ea/0x7a0
[  292.171009][ T2149]  ? _raw_spin_unlock_irqrestore+0x2b/0x60
[  292.171029][ T2149]  ? __mod_timer+0x62f/0x840
[  292.171057][ T2149]  loop_process_work+0x52d/0xa60
[  292.171125][ T2149]  ? update_load_avg+0x1da/0x820
[  292.171146][ T2149]  ? __list_add_valid_or_report+0x38/0xe0
[  292.171166][ T2149]  loop_rootcg_workfn+0x22/0x30
[  292.171191][ T2149]  process_scheduled_works+0x4cb/0x9d0
[  292.171226][ T2149]  worker_thread+0x582/0x770
[  292.171314][ T2149]  ? _raw_spin_unlock_irqrestore+0x2b/0x60
[  292.171333][ T2149]  ? schedule+0x5f/0xd0
[  292.171353][ T2149]  kthread+0x489/0x510
[  292.171368][ T2149]  ? finish_task_switch+0xad/0x2b0
[  292.171386][ T2149]  ? __pfx_worker_thread+0x10/0x10
[  292.171431][ T2149]  ? __pfx_kthread+0x10/0x10
[  292.171447][ T2149]  ret_from_fork+0xda/0x150
[  292.171464][ T2149]  ? __pfx_kthread+0x10/0x10
[  292.171483][ T2149]  ret_from_fork_asm+0x1a/0x30
[  292.171564][ T2149]  </TASK>
[  292.171570][ T2149] memory: usage 307200kB, limit 307200kB, failcnt 490
[  292.394706][ T2149] memory+swap: usage 307660kB, limit 9007199254740988kB, failcnt 0
[  292.394721][ T2149] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0
[  292.394733][ T2149] Memory cgroup stats for /syz8:
[  292.410262][ T2149] cache 8192
[  292.418577][ T2149] rss 0
[  292.421363][ T2149] shmem 0
[  292.424300][ T2149] mapped_file 0
[  292.427786][ T2149] dirty 0
[  292.430723][ T2149] writeback 8192
[  292.434414][ T2149] workingset_refault_anon 88
[  292.439217][ T2149] workingset_refault_file 0
[  292.440309][T17140] __nla_validate_parse: 28 callbacks suppressed
[  292.440322][T17140] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4111'.
[  292.443712][ T2149] swap 471040
[  292.443721][ T2149] swapcached 4096
[  292.465916][ T2149] pgpgin 86043
[  292.469388][ T2149] pgpgout 86038
[  292.472858][ T2149] pgfault 126609
[  292.476471][ T2149] pgmajfault 42
[  292.480008][ T2149] inactive_anon 4096
[  292.483890][ T2149] active_anon 0
[  292.487327][ T2149] inactive_file 16384
[  292.491312][ T2149] active_file 0
[  292.494759][ T2149] unevictable 0
[  292.498217][ T2149] hierarchical_memory_limit 314572800
[  292.503571][ T2149] hierarchical_memsw_limit 9223372036854771712
[  292.509791][ T2149] total_cache 8192
[  292.513495][ T2149] total_rss 0
[  292.516751][ T2149] total_shmem 0
[  292.520214][ T2149] total_mapped_file 0
[  292.524185][ T2149] total_dirty 0
[  292.527655][ T2149] total_writeback 8192
[  292.531706][ T2149] total_workingset_refault_anon 88
[  292.536807][ T2149] total_workingset_refault_file 0
[  292.541875][ T2149] total_swap 471040
[  292.545747][ T2149] total_swapcached 4096
[  292.549925][ T2149] total_pgpgin 86043
[  292.553821][ T2149] total_pgpgout 86038
[  292.557802][ T2149] total_pgfault 126609
[  292.561857][ T2149] total_pgmajfault 42
[  292.565811][ T2149] total_inactive_anon 4096
[  292.570262][ T2149] total_active_anon 0
[  292.574237][ T2149] total_inactive_file 16384
[  292.578777][ T2149] total_active_file 0
[  292.582796][ T2149] total_unevictable 0
[  292.586759][ T2149] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.4109,pid=17128,uid=0
[  292.601462][ T2149] Memory cgroup out of memory: Killed process 17128 (syz.8.4109) total-vm:93620kB, anon-rss:940kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000
[  292.699680][T17146] loop7: detected capacity change from 0 to 2048
[  292.780569][ T5050]  loop7: p1 < > p4
[  292.797819][ T5050] loop7: p4 size 8388608 extends beyond EOD, truncated
[  292.830494][T17158] loop4: detected capacity change from 0 to 1024
[  292.841706][T17146]  loop7: p1 < > p4
[  292.852230][T17146] loop7: p4 size 8388608 extends beyond EOD, truncated
[  292.865662][T17157] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  292.876080][T17158] EXT4-fs: Ignoring removed orlov option
[  292.885569][T17157] tipc: Disabling bearer <eth:syzkaller0>
[  292.887874][ T2997]  loop7: p1 < > p4
[  292.910514][ T2997] loop7: p4 size 8388608 extends beyond EOD, truncated
[  292.915420][T17164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4122'.
[  292.938229][T17165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  292.956565][T17165] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  293.058714][ T5050] udevd[5050]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[  293.089684][ T6236] udevd[6236]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory
[  293.131733][ T6236] udevd[6236]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory
[  293.145978][ T5050] udevd[5050]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[  293.153598][T17180] loop3: detected capacity change from 0 to 512
[  293.164054][T17185] program syz.8.4131 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  293.199942][T17180] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  293.290916][T17200] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4134'.
[  293.303222][   T51] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.362987][T17207] loop3: detected capacity change from 0 to 512
[  293.379128][   T51] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.391833][T17207] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  293.415063][T17207] EXT4-fs (loop3): 1 truncate cleaned up
[  293.444779][   T51] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.482486][T17182] chnl_net:caif_netlink_parms(): no params data found
[  293.510970][   T51] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.542220][T17182] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.549418][T17182] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.557286][T17182] bridge_slave_0: entered allmulticast mode
[  293.564025][T17182] bridge_slave_0: entered promiscuous mode
[  293.587301][T17182] bridge0: port 2(bridge_slave_1) entered blocking state
[  293.594410][T17182] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.602022][T17182] bridge_slave_1: entered allmulticast mode
[  293.608582][T17182] bridge_slave_1: entered promiscuous mode
[  293.672097][T17222] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4140'.
[  293.730203][   T29] kauditd_printk_skb: 234 callbacks suppressed
[  293.730221][   T29] audit: type=1326 audit(1751254393.407:29004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17217 comm="syz.9.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6362cde929 code=0x7ffc0000
[  293.760114][   T29] audit: type=1326 audit(1751254393.407:29005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17217 comm="syz.9.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f6362cde929 code=0x7ffc0000
[  293.783685][   T29] audit: type=1326 audit(1751254393.407:29006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17217 comm="syz.9.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6362cde929 code=0x7ffc0000
[  293.807427][   T29] audit: type=1326 audit(1751254393.407:29007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17217 comm="syz.9.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6362cde929 code=0x7ffc0000
[  293.830857][   T29] audit: type=1326 audit(1751254393.407:29008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17217 comm="syz.9.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6362cde929 code=0x7ffc0000
[  293.854422][   T29] audit: type=1326 audit(1751254393.407:29009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17217 comm="syz.9.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6362cde929 code=0x7ffc0000
[  293.878073][   T29] audit: type=1326 audit(1751254393.407:29010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17217 comm="syz.9.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6362cde929 code=0x7ffc0000
[  293.901686][   T29] audit: type=1326 audit(1751254393.407:29011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17217 comm="syz.9.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6362cde929 code=0x7ffc0000
[  293.925359][   T29] audit: type=1326 audit(1751254393.407:29012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17217 comm="syz.9.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6362cdd290 code=0x7ffc0000
[  293.949010][   T29] audit: type=1326 audit(1751254393.407:29013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17217 comm="syz.9.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6362cde929 code=0x7ffc0000
[  293.979643][T17182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  294.188760][   T51] bond0 (unregistering): Released all slaves
[  294.199178][T17230] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4143'.
[  294.219626][T17182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  294.246659][T17182] team0: Port device team_slave_0 added
[  294.253212][T17182] team0: Port device team_slave_1 added
[  294.279357][   T51] tipc: Left network mode
[  294.284357][T17182] batman_adv: batadv0: Adding interface: batadv_slave_0
[  294.291364][T17182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  294.317462][T17182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  294.348392][T17232] netlink: 'syz.8.4144': attribute type 10 has an invalid length.
[  294.371742][   T51] hsr_slave_0: left promiscuous mode
[  294.392666][   T51] batman_adv: batadv0: Removing interface: team0
[  294.419390][   T51] veth0_macvtap: left promiscuous mode
[  294.435252][   T51] veth1_vlan: left promiscuous mode
[  294.453536][   T51] veth0_vlan: left promiscuous mode
[  294.586317][T17182] batman_adv: batadv0: Adding interface: batadv_slave_1
[  294.593379][T17182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  294.619327][T17182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  294.663194][T17261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4151'.
[  294.683535][T17182] hsr_slave_0: entered promiscuous mode
[  294.689851][T17182] hsr_slave_1: entered promiscuous mode
[  294.695629][T17182] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  294.703424][T17182] Cannot create hsr debugfs directory
[  294.783201][T17270] loop8: detected capacity change from 0 to 1024
[  294.813580][T17270] EXT4-fs: Ignoring removed orlov option
[  294.892446][T17286] program syz.8.4156 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  294.916909][T17262] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4150'.
[  294.925860][T17262] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4150'.
[  295.059724][T17299] netlink: 'syz.3.4160': attribute type 10 has an invalid length.
[  295.137640][T17182] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  295.153981][T17182] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  295.163019][T17182] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  295.172825][T17182] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  295.236095][T17182] 8021q: adding VLAN 0 to HW filter on device bond0
[  295.272685][T17328] netlink: 'syz.3.4163': attribute type 10 has an invalid length.
[  295.274116][T17182] 8021q: adding VLAN 0 to HW filter on device team0
[  295.281310][T17339] netlink: 'syz.8.4164': attribute type 8 has an invalid length.
[  295.298882][  T378] bridge0: port 1(bridge_slave_0) entered blocking state
[  295.306000][  T378] bridge0: port 1(bridge_slave_0) entered forwarding state
[  295.352779][T17182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  295.363196][T17182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  295.384349][T17351] program syz.4.4167 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  295.408193][  T378] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.415247][  T378] bridge0: port 2(bridge_slave_1) entered forwarding state
[  295.561388][T17371] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4168'.
[  295.570426][T17371] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4168'.
[  295.587518][T17376] loop4: detected capacity change from 0 to 512
[  295.592667][T17182] 8021q: adding VLAN 0 to HW filter on device batadv0
[  295.612503][T17379] loop3: detected capacity change from 0 to 1024
[  295.626486][T17379] EXT4-fs: Ignoring removed orlov option
[  295.653595][T17376] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  295.756394][T17401] loop3: detected capacity change from 0 to 1024
[  295.766291][T17401] EXT4-fs: Ignoring removed orlov option
[  295.856953][T17418] SET target dimension over the limit!
[  295.972277][T17182] veth0_vlan: entered promiscuous mode
[  296.001114][T17182] veth1_vlan: entered promiscuous mode
[  296.031690][T17182] veth0_macvtap: entered promiscuous mode
[  296.056821][T17182] veth1_macvtap: entered promiscuous mode
[  296.090324][T17182] batman_adv: batadv0: Interface activated: batadv_slave_0
[  296.125843][T17182] batman_adv: batadv0: Interface activated: batadv_slave_1
[  296.138238][T17182] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  296.146966][T17182] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  296.155833][T17182] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  296.164553][T17182] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  296.403162][T17488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17488 comm=syz.3.4192
[  296.512499][T17488] loop3: detected capacity change from 0 to 2048
[  296.580579][T17499] SET target dimension over the limit!
[  296.587845][T17501] loop8: detected capacity change from 0 to 512
[  296.604927][T17501] ext4 filesystem being mounted at /334/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  296.622273][T17501] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #2: comm syz.8.4199: corrupted inode contents
[  296.634129][T17505] loop4: detected capacity change from 0 to 1024
[  296.637793][T17501] EXT4-fs error (device loop8): ext4_dirty_inode:6459: inode #2: comm syz.8.4199: mark_inode_dirty error
[  296.642014][T17505] EXT4-fs: Ignoring removed orlov option
[  296.666288][T17501] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #2: comm syz.8.4199: corrupted inode contents
[  296.679918][T17501] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #2: comm syz.8.4199: mark_inode_dirty error
[  296.800413][T17520] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  296.846211][T17527] loop4: detected capacity change from 0 to 512
[  296.860165][T17527] EXT4-fs error (device loop4): __ext4_iget:5379: inode #4: block 193290: comm syz.4.4208: invalid block
[  296.873616][T17527] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.4208: Bad quota inode: 4, type: 1
[  296.886901][T17527] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  296.902874][T17527] EXT4-fs (loop4): mount failed
[  297.008231][T17539] loop4: detected capacity change from 0 to 512
[  297.029251][T17539] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  297.072796][T17545] loop9: detected capacity change from 0 to 1024
[  297.083496][T17545] EXT4-fs: Ignoring removed orlov option
[  297.090446][T17547] program syz.4.4214 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  297.205605][T17557] loop4: detected capacity change from 0 to 512
[  297.214518][T17557] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  297.243682][T17557] EXT4-fs (loop4): 1 truncate cleaned up
[  297.294291][T17563] loop3: detected capacity change from 0 to 512
[  297.345600][T17563] EXT4-fs error (device loop3): __ext4_iget:5379: inode #4: block 193290: comm syz.3.4220: invalid block
[  297.373157][T17563] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.4220: Bad quota inode: 4, type: 1
[  297.395662][T17567] netlink: 'syz.9.4221': attribute type 8 has an invalid length.
[  297.403158][T17563] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  297.428178][T17563] EXT4-fs (loop3): mount failed
[  297.458890][T17569] netlink: 'syz.7.4222': attribute type 10 has an invalid length.
[  297.471002][T17569] batman_adv: batadv0: Adding interface: team0
[  297.477196][T17569] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  297.502491][T17569] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  297.558886][T17571] __nla_validate_parse: 5 callbacks suppressed
[  297.558900][T17571] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4223'.
[  297.642746][T17577] program syz.8.4226 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  297.699353][T17581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4228'.
[  297.711992][T17580] loop7: detected capacity change from 0 to 1024
[  297.723441][T17583] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4229'.
[  297.746015][T17580] EXT4-fs: Ignoring removed orlov option
[  297.772785][T17588] loop3: detected capacity change from 0 to 2048
[  297.813571][ T6236]  loop3: p1 < > p4
[  297.821835][ T6236] loop3: p4 size 8388608 extends beyond EOD, truncated
[  297.876835][T17588]  loop3: p1 < > p4
[  297.893944][T17588] loop3: p4 size 8388608 extends beyond EOD, truncated
[  297.939562][T17600] loop9: detected capacity change from 0 to 512
[  297.946164][T17600] EXT4-fs: Ignoring removed mblk_io_submit option
[  297.957365][ T2997]  loop3: p1 < > p4
[  297.962615][ T2997] loop3: p4 size 8388608 extends beyond EOD, truncated
[  297.974712][T17601] loop7: detected capacity change from 0 to 512
[  297.983209][T17600] EXT4-fs (loop9): bad geometry: block count 184549440 exceeds size of device (64 blocks)
[  298.008521][T17601] EXT4-fs error (device loop7): __ext4_iget:5379: inode #4: block 193290: comm syz.7.4233: invalid block
[  298.031801][T17601] EXT4-fs error (device loop7): ext4_quota_enable:7127: comm syz.7.4233: Bad quota inode: 4, type: 1
[  298.034803][ T5050] udevd[5050]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  298.054442][ T6236] udevd[6236]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  298.065851][T17600] netlink: 132 bytes leftover after parsing attributes in process `syz.9.4234'.
[  298.099669][T17601] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  298.136521][ T5050] udevd[5050]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  298.149951][T17601] EXT4-fs (loop7): mount failed
[  298.156521][ T6236] udevd[6236]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  298.171733][ T6236] udevd[6236]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  298.171909][ T5050] udevd[5050]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  298.237434][T17612] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4237'.
[  298.246505][T17612] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4237'.
[  298.282254][T17619] program syz.4.4240 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  298.348204][T17625] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  298.383248][T17628] loop4: detected capacity change from 0 to 1024
[  298.393246][T17628] EXT4-fs: Ignoring removed orlov option
[  298.426198][T17631] netlink: 'syz.9.4244': attribute type 8 has an invalid length.
[  298.453997][T17636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4245'.
[  298.613333][T17641] loop4: detected capacity change from 0 to 512
[  298.626771][T17641] EXT4-fs: Ignoring removed mblk_io_submit option
[  298.634141][T17641] EXT4-fs (loop4): bad geometry: block count 184549440 exceeds size of device (64 blocks)
[  298.652402][T17641] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4247'.
[  298.694024][T17650] program syz.4.4251 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  298.751011][T17655] loop4: detected capacity change from 0 to 1024
[  298.758321][T17655] EXT4-fs: Ignoring removed orlov option
[  298.796335][   T29] kauditd_printk_skb: 759 callbacks suppressed
[  298.796346][   T29] audit: type=1326 audit(1751254398.557:29773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17659 comm="syz.4.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e1c1e929 code=0x7ffc0000
[  298.826099][   T29] audit: type=1326 audit(1751254398.557:29774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17659 comm="syz.4.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e1c1e929 code=0x7ffc0000
[  298.857331][   T29] audit: type=1326 audit(1751254398.587:29775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17659 comm="syz.4.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f55e1c1e929 code=0x7ffc0000
[  298.880998][   T29] audit: type=1326 audit(1751254398.587:29776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17659 comm="syz.4.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e1c1e929 code=0x7ffc0000
[  298.905095][   T29] audit: type=1326 audit(1751254398.587:29777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17659 comm="syz.4.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f55e1c1e929 code=0x7ffc0000
[  298.928674][   T29] audit: type=1326 audit(1751254398.607:29778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17659 comm="syz.4.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e1c1e929 code=0x7ffc0000
[  298.953044][   T29] audit: type=1326 audit(1751254398.717:29779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17663 comm="syz.4.4255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e1c1e929 code=0x7ffc0000
[  298.953652][   T29] audit: type=1326 audit(1751254398.717:29780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17663 comm="syz.4.4255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e1c1e929 code=0x7ffc0000
[  299.002683][   T29] audit: type=1326 audit(1751254398.767:29781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17663 comm="syz.4.4255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f55e1c1e929 code=0x7ffc0000
[  299.026398][   T29] audit: type=1326 audit(1751254398.767:29782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17663 comm="syz.4.4255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e1c1e929 code=0x7ffc0000
[  299.030527][T17665] loop4: detected capacity change from 0 to 512
[  299.078914][T17665] EXT4-fs error (device loop4): __ext4_iget:5379: inode #4: block 193290: comm syz.4.4255: invalid block
[  299.090337][T17665] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.4255: Bad quota inode: 4, type: 1
[  299.101320][T17665] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  299.116652][T17665] EXT4-fs (loop4): mount failed
[  299.142273][T17674] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4257'.
[  299.152506][T17668] loop3: detected capacity change from 0 to 512
[  299.172110][T17668] EXT4-fs error (device loop3): __ext4_iget:5379: inode #4: block 193290: comm syz.3.4256: invalid block
[  299.186254][T17668] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.4256: Bad quota inode: 4, type: 1
[  299.198660][T17668] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  299.230068][T17668] EXT4-fs (loop3): mount failed
[  299.371321][T17691] loop3: detected capacity change from 0 to 256
[  299.428684][T17694] loop3: detected capacity change from 0 to 256
[  299.466922][T17698] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  299.522900][T17703] loop9: detected capacity change from 0 to 1024
[  299.535072][T17703] EXT4-fs: Ignoring removed orlov option
[  299.655455][T17714] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  299.676386][T17714] tipc: Disabling bearer <eth:syzkaller0>
[  299.721894][T17714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  299.732332][T17714] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  299.804050][T17719] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4272'.
[  300.016895][T17724] blktrace: Concurrent blktraces are not allowed on sg0
[  300.262128][T17732] loop4: detected capacity change from 0 to 1024
[  300.269486][T17732] EXT4-fs: Ignoring removed orlov option
[  300.325998][T17730] loop7: detected capacity change from 0 to 512
[  300.332653][T17730] EXT4-fs: Ignoring removed mblk_io_submit option
[  300.339231][T17730] EXT4-fs: Ignoring removed bh option
[  300.345121][T17730] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  300.359731][T17730] EXT4-fs (loop7): 1 truncate cleaned up
[  300.414891][T17747] loop9: detected capacity change from 0 to 512
[  300.421673][T17747] EXT4-fs: Ignoring removed mblk_io_submit option
[  300.434154][T17747] EXT4-fs (loop9): bad geometry: block count 184549440 exceeds size of device (64 blocks)
[  300.501454][T17758] loop9: detected capacity change from 0 to 512
[  300.517500][T17758] EXT4-fs (loop9): orphan cleanup on readonly fs
[  300.530799][T17762] loop3: detected capacity change from 0 to 1024
[  300.537561][T17758] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4285: bg 0: block 248: padding at end of block bitmap is not set
[  300.549220][T17762] EXT4-fs: Ignoring removed orlov option
[  300.560074][T17758] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.4285: Failed to acquire dquot type 1
[  300.573200][T17758] EXT4-fs (loop9): 1 truncate cleaned up
[  300.582213][T17758] EXT4-fs error (device loop9): ext4_lookup:1791: inode #2: comm syz.9.4285: deleted inode referenced: 12
[  300.835864][T17798] loop8: detected capacity change from 0 to 1024
[  300.836247][T17800] program syz.9.4299 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  300.852770][T17798] EXT4-fs: Ignoring removed orlov option
[  300.908058][T17808] loop8: detected capacity change from 0 to 1024
[  300.914953][T17808] EXT4-fs: Ignoring removed orlov option
[  300.937983][T17810] netlink: 'syz.9.4303': attribute type 10 has an invalid length.
[  301.232873][T17836] loop9: detected capacity change from 0 to 1024
[  301.248031][T17836] EXT4-fs: Ignoring removed orlov option
[  301.353175][T17852] netlink: 'syz.8.4320': attribute type 10 has an invalid length.
[  301.462949][T17861] loop8: detected capacity change from 0 to 256
[  301.595461][T17873] loop4: detected capacity change from 0 to 512
[  301.614298][T17875] loop8: detected capacity change from 0 to 1024
[  301.622724][T17875] ext4: Unknown parameter 'uid<00000000000000000000'
[  301.647311][T17875] FAULT_INJECTION: forcing a failure.
[  301.647311][T17875] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  301.660621][T17875] CPU: 1 UID: 0 PID: 17875 Comm: syz.8.4329 Tainted: G        W           6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) 
[  301.660705][T17875] Tainted: [W]=WARN
[  301.660713][T17875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  301.660726][T17875] Call Trace:
[  301.660731][T17875]  <TASK>
[  301.660737][T17875]  __dump_stack+0x1d/0x30
[  301.660800][T17875]  dump_stack_lvl+0xe8/0x140
[  301.660821][T17875]  dump_stack+0x15/0x1b
[  301.660887][T17875]  should_fail_ex+0x265/0x280
[  301.660919][T17875]  should_fail+0xb/0x20
[  301.660945][T17875]  should_fail_usercopy+0x1a/0x20
[  301.660980][T17875]  strncpy_from_user+0x25/0x230
[  301.661021][T17875]  ? kmem_cache_alloc_noprof+0x186/0x310
[  301.661048][T17875]  ? getname_flags+0x80/0x3b0
[  301.661071][T17875]  getname_flags+0xae/0x3b0
[  301.661090][T17875]  __se_sys_newlstat+0x4b/0x280
[  301.661120][T17875]  ? fput+0x8f/0xc0
[  301.661182][T17875]  ? ksys_write+0x192/0x1a0
[  301.661208][T17875]  __x64_sys_newlstat+0x31/0x40
[  301.661231][T17875]  x64_sys_call+0x1c47/0x2fb0
[  301.661269][T17875]  do_syscall_64+0xd2/0x200
[  301.661285][T17875]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  301.661306][T17875]  ? clear_bhb_loop+0x40/0x90
[  301.661324][T17875]  ? clear_bhb_loop+0x40/0x90
[  301.661342][T17875]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.661415][T17875] RIP: 0033:0x7ffa911ce929
[  301.661428][T17875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  301.661443][T17875] RSP: 002b:00007ffa8f837038 EFLAGS: 00000246 ORIG_RAX: 0000000000000006
[  301.661505][T17875] RAX: ffffffffffffffda RBX: 00007ffa913f5fa0 RCX: 00007ffa911ce929
[  301.661516][T17875] RDX: 0000000000000000 RSI: 0000200000000c80 RDI: 0000200000000c40
[  301.661527][T17875] RBP: 00007ffa8f837090 R08: 0000000000000000 R09: 0000000000000000
[  301.661540][T17875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  301.661571][T17875] R13: 0000000000000000 R14: 00007ffa913f5fa0 R15: 00007ffe5c5c1d18
[  301.661591][T17875]  </TASK>
[  301.662926][T17873] ext4 filesystem being mounted at /307/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  301.740013][T17885] netlink: 'syz.8.4331': attribute type 8 has an invalid length.
[  301.925744][T17890] loop4: detected capacity change from 0 to 1024
[  301.935829][T17890] EXT4-fs: Ignoring removed orlov option
[  302.006208][T17896] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  302.254436][T17917] loop7: detected capacity change from 0 to 512
[  302.291009][T17917] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  302.365765][T17929] loop4: detected capacity change from 0 to 512
[  302.404404][T17929] ext4 filesystem being mounted at /313/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  302.446844][T17943] FAULT_INJECTION: forcing a failure.
[  302.446844][T17943] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  302.460003][T17943] CPU: 0 UID: 0 PID: 17943 Comm: syz.7.4352 Tainted: G        W           6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) 
[  302.460034][T17943] Tainted: [W]=WARN
[  302.460041][T17943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  302.460053][T17943] Call Trace:
[  302.460059][T17943]  <TASK>
[  302.460067][T17943]  __dump_stack+0x1d/0x30
[  302.460132][T17943]  dump_stack_lvl+0xe8/0x140
[  302.460148][T17943]  dump_stack+0x15/0x1b
[  302.460163][T17943]  should_fail_ex+0x265/0x280
[  302.460266][T17943]  should_fail+0xb/0x20
[  302.460289][T17943]  should_fail_usercopy+0x1a/0x20
[  302.460320][T17943]  _copy_from_iter+0xcf/0xe40
[  302.460423][T17943]  ? __build_skb_around+0x1a0/0x200
[  302.460448][T17943]  ? __alloc_skb+0x223/0x320
[  302.460482][T17943]  netlink_sendmsg+0x471/0x6b0
[  302.460502][T17943]  ? __pfx_netlink_sendmsg+0x10/0x10
[  302.460522][T17943]  __sock_sendmsg+0x145/0x180
[  302.460581][T17943]  ____sys_sendmsg+0x31e/0x4e0
[  302.460678][T17943]  ___sys_sendmsg+0x17b/0x1d0
[  302.460719][T17943]  __x64_sys_sendmsg+0xd4/0x160
[  302.460748][T17943]  x64_sys_call+0x2999/0x2fb0
[  302.460847][T17943]  do_syscall_64+0xd2/0x200
[  302.460865][T17943]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  302.460891][T17943]  ? clear_bhb_loop+0x40/0x90
[  302.460912][T17943]  ? clear_bhb_loop+0x40/0x90
[  302.460979][T17943]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.460998][T17943] RIP: 0033:0x7f85aaf5e929
[  302.461013][T17943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  302.461092][T17943] RSP: 002b:00007f85a95c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  302.461111][T17943] RAX: ffffffffffffffda RBX: 00007f85ab185fa0 RCX: 00007f85aaf5e929
[  302.461148][T17943] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[  302.461158][T17943] RBP: 00007f85a95c7090 R08: 0000000000000000 R09: 0000000000000000
[  302.461171][T17943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  302.461184][T17943] R13: 0000000000000000 R14: 00007f85ab185fa0 R15: 00007ffe883492c8
[  302.461202][T17943]  </TASK>
[  302.812986][T17956] loop9: detected capacity change from 0 to 512
[  302.824727][T17956] EXT4-fs: Ignoring removed mblk_io_submit option
[  302.831332][T17952] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10)
[  302.837944][T17952] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  302.845686][T17952] vhci_hcd vhci_hcd.0: Device attached
[  302.860387][T17958] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13)
[  302.867063][T17958] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  302.874621][T17958] vhci_hcd vhci_hcd.0: Device attached
[  302.877368][T17956] EXT4-fs (loop9): bad geometry: block count 184549440 exceeds size of device (64 blocks)
[  302.890396][T17952] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(12)
[  302.896995][T17952] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  302.904654][T17952] vhci_hcd vhci_hcd.0: Device attached
[  302.924757][T17956] __nla_validate_parse: 18 callbacks suppressed
[  302.924772][T17956] netlink: 132 bytes leftover after parsing attributes in process `syz.9.4357'.
[  302.971932][T17952] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(15)
[  302.978543][T17952] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  302.985955][T17952] vhci_hcd vhci_hcd.0: Device attached
[  303.085546][T17973] loop7: detected capacity change from 0 to 512
[  303.140475][T17958] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(19)
[  303.147083][T17958] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  303.154700][T17958] vhci_hcd vhci_hcd.0: Device attached
[  303.185350][T17973] EXT4-fs error (device loop7): __ext4_iget:5379: inode #4: block 193290: comm syz.7.4359: invalid block
[  303.245571][T17986] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4363'.
[  303.255060][T17973] EXT4-fs error (device loop7): ext4_quota_enable:7127: comm syz.7.4359: Bad quota inode: 4, type: 1
[  303.276845][T17952] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  303.298203][T17952] capability: warning: `syz.3.4356' uses deprecated v2 capabilities in a way that may be insecure
[  303.311925][T17973] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  303.337283][T17973] EXT4-fs (loop7): mount failed
[  303.345138][T17952] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(23)
[  303.351738][T17952] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  303.359466][T17952] vhci_hcd vhci_hcd.0: Device attached
[  303.384975][T17999] loop9: detected capacity change from 0 to 512
[  303.387943][T17952] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  303.407735][T17952] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(27)
[  303.414345][T17952] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  303.421806][T17952] vhci_hcd vhci_hcd.0: Device attached
[  303.427647][   T23] usb 7-1: new low-speed USB device number 2 using vhci_hcd
[  303.436097][T18001] vhci_hcd: connection closed
[  303.436337][T17977] vhci_hcd: connection closed
[  303.437677][T17995] vhci_hcd: connection closed
[  303.441342][T17970] vhci_hcd: connection closed
[  303.452767][   T57] vhci_hcd: stop threads
[  303.461730][   T57] vhci_hcd: release socket
[  303.466190][   T57] vhci_hcd: disconnect device
[  303.471586][T17964] vhci_hcd: connection closed
[  303.471703][T17960] vhci_hcd: connection reset by peer
[  303.472193][T17953] vhci_hcd: connection closed
[  303.490131][   T57] vhci_hcd: stop threads
[  303.499216][   T57] vhci_hcd: release socket
[  303.503712][   T57] vhci_hcd: disconnect device
[  303.510766][T17999] ext4 filesystem being mounted at /372/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  303.523420][   T57] vhci_hcd: stop threads
[  303.527717][   T57] vhci_hcd: release socket
[  303.532133][   T57] vhci_hcd: disconnect device
[  303.538712][   T57] vhci_hcd: stop threads
[  303.542980][   T57] vhci_hcd: release socket
[  303.547452][   T57] vhci_hcd: disconnect device
[  303.553406][   T57] vhci_hcd: stop threads
[  303.557785][   T57] vhci_hcd: release socket
[  303.562254][   T57] vhci_hcd: disconnect device
[  303.612029][   T57] vhci_hcd: stop threads
[  303.615903][T18010] tipc: Started in network mode
[  303.616270][   T57] vhci_hcd: release socket
[  303.621220][T18010] tipc: Node identity d241af3cef92, cluster identity 4711
[  303.625533][   T57] vhci_hcd: disconnect device
[  303.637452][T18010] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  303.669315][T18010] tipc: Disabling bearer <eth:syzkaller0>
[  303.670997][   T57] vhci_hcd: stop threads
[  303.679393][   T57] vhci_hcd: release socket
[  303.683925][   T57] vhci_hcd: disconnect device
[  303.721879][T18016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  303.732855][T18016] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  303.826880][T18017] loop9: detected capacity change from 0 to 512
[  303.833691][T18017] EXT4-fs: Ignoring removed mblk_io_submit option
[  303.841275][T18017] EXT4-fs: Ignoring removed bh option
[  303.847012][T18017] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  303.858172][T18017] EXT4-fs (loop9): 1 truncate cleaned up
[  304.009941][T18021] loop3: detected capacity change from 0 to 1024
[  304.016693][T18021] EXT4-fs: Ignoring removed orlov option
[  304.149234][   T29] kauditd_printk_skb: 375 callbacks suppressed
[  304.149249][   T29] audit: type=1400 audit(1751254403.917:30156): avc:  denied  { ioctl } for  pid=18024 comm="syz.3.4373" path="/dev/input/event3" dev="devtmpfs" ino=258 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  304.182552][   T29] audit: type=1400 audit(1751254403.947:30157): avc:  denied  { read write } for  pid=18024 comm="syz.3.4373" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  304.184168][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  304.207107][   T29] audit: type=1400 audit(1751254403.947:30158): avc:  denied  { open } for  pid=18024 comm="syz.3.4373" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  304.213497][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  304.213522][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  304.254022][T18026] loop3: detected capacity change from 0 to 512
[  304.260403][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  304.267932][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  304.275414][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  304.282922][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  304.284477][T18026] EXT4-fs: Ignoring removed nomblk_io_submit option
[  304.290313][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  304.290338][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  304.310819][T18026] ext4 filesystem being mounted at /290/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  304.311727][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  304.329415][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  304.336866][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  304.344316][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  304.352033][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  304.359434][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  304.366818][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  304.374286][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  304.381732][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  304.389145][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  304.396686][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  304.404103][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  304.411685][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  304.419088][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  304.426524][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  304.433985][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  304.441383][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  304.448838][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  304.456219][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  304.466741][ T3395] hid-generic 0000:0000:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  304.549468][T18033] fido_id[18033]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  304.565366][T18035] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4376'.
[  304.607697][T18038] loop4: detected capacity change from 0 to 512
[  304.629317][T18041] program syz.9.4377 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  304.653333][T18038] ext4 filesystem being mounted at /318/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  304.664494][   T29] audit: type=1326 audit(1751254404.417:30159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18040 comm="syz.9.4377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6362cde929 code=0x7ffc0000
[  304.688093][   T29] audit: type=1326 audit(1751254404.417:30160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18040 comm="syz.9.4377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6362cde929 code=0x7ffc0000
[  304.711723][   T29] audit: type=1326 audit(1751254404.417:30161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18040 comm="syz.9.4377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6362cde929 code=0x7ffc0000
[  304.711828][   T29] audit: type=1326 audit(1751254404.417:30162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18040 comm="syz.9.4377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6362cde929 code=0x7ffc0000
[  304.711850][   T29] audit: type=1326 audit(1751254404.417:30163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18040 comm="syz.9.4377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6362cde929 code=0x7ffc0000
[  304.711871][   T29] audit: type=1326 audit(1751254404.417:30164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18040 comm="syz.9.4377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6362cde929 code=0x7ffc0000
[  304.711908][   T29] audit: type=1326 audit(1751254404.417:30165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18040 comm="syz.9.4377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6362cde929 code=0x7ffc0000
[  304.863036][T18057] loop8: detected capacity change from 0 to 512
[  304.905160][T18057] ext4 filesystem being mounted at /365/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  304.932261][T18063] loop4: detected capacity change from 0 to 1024
[  304.943099][T18063] EXT4-fs: Ignoring removed orlov option
[  304.969852][T18057] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #2: comm syz.8.4385: corrupted inode contents
[  305.018484][T18057] EXT4-fs error (device loop8): ext4_dirty_inode:6459: inode #2: comm syz.8.4385: mark_inode_dirty error
[  305.033271][T18072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4389'.
[  305.048991][T18057] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #2: comm syz.8.4385: corrupted inode contents
[  305.060856][T18057] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #2: comm syz.8.4385: mark_inode_dirty error
[  305.100856][T18077] program syz.3.4391 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  305.144273][T18075] loop4: detected capacity change from 0 to 512
[  305.170168][T18084] loop3: detected capacity change from 0 to 512
[  305.177119][T18075] EXT4-fs error (device loop4): __ext4_iget:5379: inode #4: block 193290: comm syz.4.4390: invalid block
[  305.190962][T18075] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.4390: Bad quota inode: 4, type: 1
[  305.202979][T18075] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  305.220256][T18084] ext4 filesystem being mounted at /297/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  305.231218][T18075] EXT4-fs (loop4): mount failed
[  305.333297][T18105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4400'.
[  305.411636][T18114] program syz.3.4404 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  305.449140][T18116] SELinux:  policydb string  does not match my string SE Linux
[  305.462179][T18116] SELinux: failed to load policy
[  305.535962][T18127] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4410'.
[  305.554025][T18124] loop7: detected capacity change from 0 to 512
[  305.572288][T18124] EXT4-fs error (device loop7): __ext4_iget:5379: inode #4: block 193290: comm syz.7.4409: invalid block
[  305.586219][T18124] EXT4-fs error (device loop7): ext4_quota_enable:7127: comm syz.7.4409: Bad quota inode: 4, type: 1
[  305.598705][T18124] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  305.613813][T18124] EXT4-fs (loop7): mount failed
[  305.696496][T18134] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4412'.
[  305.776261][T18143] program syz.4.4416 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  305.821327][T18146] netlink: 'syz.9.4417': attribute type 10 has an invalid length.
[  305.875746][T18150] loop4: detected capacity change from 0 to 1024
[  305.884519][T18150] ext4: Unknown parameter 'uid<00000000000000000000'
[  305.999575][T18164] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4424'.
[  306.012808][T18158] loop4: detected capacity change from 0 to 512
[  306.040729][T18158] EXT4-fs error (device loop4): __ext4_iget:5379: inode #4: block 193290: comm syz.4.4422: invalid block
[  306.052121][T18158] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.4422: Bad quota inode: 4, type: 1
[  306.052237][T18158] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  306.079574][T18158] EXT4-fs (loop4): mount failed
[  306.079648][T18166] ==================================================================
[  306.079677][T18166] BUG: KCSAN: data-race in _prb_read_valid / data_alloc
[  306.079714][T18166] 
[  306.079720][T18166] write to 0xffffffff86872fd8 of 8 bytes by task 18158 on cpu 1:
[  306.079736][T18166]  data_alloc+0x271/0x2b0
[  306.079762][T18166]  prb_reserve+0x808/0xaf0
[  306.079787][T18166]  vprintk_store+0x56d/0x860
[  306.079801][T18166]  vprintk_emit+0x178/0x650
[  306.079817][T18166]  vprintk_default+0x26/0x30
[  306.079835][T18166]  vprintk+0x1d/0x30
[  306.079858][T18166]  _printk+0x79/0xa0
[  306.079881][T18166]  __ext4_msg+0x18f/0x1a0
[  306.079897][T18166]  ext4_fill_super+0x2894/0x34e0
[  306.079913][T18166]  get_tree_bdev_flags+0x291/0x300
[  306.079935][T18166]  get_tree_bdev+0x1f/0x30
[  306.079956][T18166]  ext4_get_tree+0x1c/0x30
[  306.079971][T18166]  vfs_get_tree+0x54/0x1d0
[  306.079992][T18166]  do_new_mount+0x207/0x680
[  306.080014][T18166]  path_mount+0x4a4/0xb20
[  306.080034][T18166]  __se_sys_mount+0x28f/0x2e0
[  306.080048][T18166]  __x64_sys_mount+0x67/0x80
[  306.080060][T18166]  x64_sys_call+0xd36/0x2fb0
[  306.080076][T18166]  do_syscall_64+0xd2/0x200
[  306.080090][T18166]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.080105][T18166] 
[  306.080110][T18166] read to 0xffffffff86872fd8 of 16 bytes by task 18166 on cpu 0:
[  306.080122][T18166]  _prb_read_valid+0x1bc/0x920
[  306.080143][T18166]  prb_read_valid+0x3c/0x60
[  306.080164][T18166]  printk_get_next_message+0xc8/0x510
[  306.080180][T18166]  console_flush_all+0x290/0x730
[  306.080195][T18166]  console_unlock+0xa1/0x330
[  306.080208][T18166]  do_con_write+0x28d7/0x2940
[  306.080222][T18166]  con_write+0x24/0x40
[  306.080234][T18166]  n_tty_write+0x7d8/0xb10
[  306.080248][T18166]  file_tty_write+0x38c/0x670
[  306.080267][T18166]  tty_write+0x25/0x30
[  306.080285][T18166]  vfs_write+0x4a0/0x8e0
[  306.080312][T18166]  ksys_write+0xda/0x1a0
[  306.080333][T18166]  __x64_sys_write+0x40/0x50
[  306.080355][T18166]  x64_sys_call+0x2cdd/0x2fb0
[  306.080370][T18166]  do_syscall_64+0xd2/0x200
[  306.080383][T18166]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.080398][T18166] 
[  306.080401][T18166] Reported by Kernel Concurrency Sanitizer on:
[  306.080413][T18166] CPU: 0 UID: 0 PID: 18166 Comm: syz.9.4425 Tainted: G        W           6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) 
[  306.080437][T18166] Tainted: [W]=WARN
[  306.080442][T18166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  306.080451][T18166] ==================================================================
[  308.457662][   T23] usb 7-1: enqueue for inactive port 0
[  308.463196][   T23] usb 7-1: enqueue for inactive port 0
[  308.540139][   T23] vhci_hcd: vhci_device speed not set