last executing test programs:

2m14.737355463s ago: executing program 32 (id=2917):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x4, 0x80, 0x2000000, 0x3a2}, &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_OPENAT2={0x1c, 0x40, 0x0, 0xffffffffffffff9c, &(0x7f00000002c0)={0x200200, 0x10, 0x1}, &(0x7f0000000300)='./file0\x00', 0x18, 0x0, 0x12345})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r0, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)
r3 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x80001021, 0x80, 0x6, 0x110}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000240)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1})
io_uring_enter(r3, 0x6e2, 0xc49, 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5, 0x1}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5, 0x0, 0x0, 0x5}, {0x5}, {}, {0x20000, 0x10}, {0x0, 0x470a, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x8000, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2b25}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800, 0x10001}, {0x3, 0x0, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x800}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x62572899, 0x1ff, 0x8, 0x0, 0x3}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x200000}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x200}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x1, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000}, {0x20000000, 0x8000, 0x0, 0xe}, {0x3, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{0x5}, {}, {}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5, 0x1}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x2}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {0x1}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r9 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
open_by_handle_at(r9, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
socket(0x10, 0x3, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x2, 0x3800)
msgsnd(0x0, &(0x7f0000003800)=ANY=[@ANYBLOB="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"], 0xfee, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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")
r10 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45)
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./file0\x00')
ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000140)=0x2000000)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59)
pwrite64(r11, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61)

1m6.48066183s ago: executing program 33 (id=3802):
r0 = socket(0x10, 0x3, 0x0)
r1 = semget$private(0x0, 0x6, 0x0)
semtimedop(r1, &(0x7f00000003c0)=[{0x2, 0x4, 0x800}], 0x1, 0x0)
semop(r1, &(0x7f00000000c0)=[{0x3, 0x0, 0x1000}, {0x2}], 0x2)
semtimedop(r1, &(0x7f0000000080)=[{0x1, 0x8000}], 0x1, 0x0)
semop(r1, &(0x7f0000001240)=[{0x0, 0xffff, 0x1000}], 0x1)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
sigaltstack(0x0, 0x0)
semop(r1, &(0x7f0000000000)=[{0x3, 0x3, 0x1800}, {0x2, 0x101, 0x800}, {0x2, 0x8000, 0x1000}, {0x1, 0x1}, {0x1, 0x3ff, 0x800}, {0x5, 0x0, 0x1800}, {0x2, 0x4, 0x1800}, {0x3, 0xe544, 0x1400}], 0x8)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
socket$vsock_stream(0x28, 0x1, 0x0)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'})
r4 = socket(0x2c, 0x3, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r4}, 0x20)
setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000001c0)={0x5, 0x800, 0x6, 0xc}, 0x8)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x48c0)
readv(r3, &(0x7f0000000600)=[{&(0x7f0000000200)=""/41, 0x29}], 0x1)

52.580373593s ago: executing program 34 (id=4028):
capset(&(0x7f0000000380)={0x20071026}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7, 0xb})
setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6})
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7f, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804)

50.507869519s ago: executing program 3 (id=4057):
socket$packet(0x11, 0x3, 0x300)
syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2)
r3 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r3, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x4}, 0x3}}, 0x24)
r4 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x80, 0x14, 0x150}, 0x0, &(0x7f0000000200)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd_index=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}})
io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0)
r6 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000780)='netlink_extack\x00', r9, 0x0, 0xb0}, 0x18)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x88, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xde3}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1f}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3a, 0x18}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000090}, 0x10)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r10, 0x0, 0xfffffffffffffffd}, 0x18)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})

50.366659352s ago: executing program 3 (id=4058):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r2}, 0x18)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x1a, 0x1b, 0x100, &(0x7f00000000c0)="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"})

50.325008106s ago: executing program 5 (id=4059):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x7, 0x4, 0x208, 0xd9, 0x0, 0xffffffffffffffff, 0x8000}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000009eb3d6cc0000000000000010521dfa", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc}, {}, {0x0, 0x8}, {0x81}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x0, 0x1, 0x0, 0x1}, {0x7}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x4, 0x4000000, 0x0, 0x8000}, {}, {0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10000000}, {}, {}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x5}], [{0x2}, {}, {0x4, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xe6c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x25)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r6, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}]}]}, @TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'bond0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'macsec0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3df}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000810}, 0x44)
r7 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f0000000500))
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
socket$unix(0x1, 0x1, 0x0)
close_range(r9, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="101300002d00090036bd70000100000004"], 0x1310}, 0x1, 0x0, 0x0, 0x20000004}, 0x8000)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r12 = fsmount(r7, 0x0, 0x6)
symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r12, &(0x7f0000000080)='./file0\x00')
readlinkat(r12, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6)

50.261782032s ago: executing program 3 (id=4062):
syz_io_uring_setup(0x5c6, 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
msgsnd(0x0, &(0x7f0000003800)=ANY=[@ANYBLOB="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"], 0xfee, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59)
pwrite64(r2, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61)

50.167376271s ago: executing program 5 (id=4064):
arch_prctl$ARCH_SET_CPUID(0x1012, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000080)=0x1)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d42ffffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a)
perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x154444, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0xeffffffffffff6ee, 0x7}, 0x100410, 0x1fc, 0x2, 0x4, 0x9, 0xa, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
ioctl$TUNSETOWNER(r0, 0x400454cc, r2)
r3 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x800)
ioctl$SIOCX25SDTEFACILITIES(r3, 0x89eb, &(0x7f0000000080)={0x3, 0x1, 0x6, 0x1, 0xfd, 0x13, 0xa, "bfdcdb45957c1e878088d13bf8785ccfa8d26c75", "afde4f130413328e1afabc948f7194a141792fa2"})
syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0xf5ea, 0x3180, 0x8000, 0x400252}, 0x0, 0x0)

50.015096455s ago: executing program 3 (id=4067):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00010000000000000000001c04"], 0x1c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="182b092bf4efaef06c0000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
chroot(&(0x7f00000000c0)='./file0/file0\x00')
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x228940, 0x27)
mkdirat(r5, &(0x7f0000000140)='./file0/../file0\x00', 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
setreuid(0x0, 0xee00)
socket$caif_stream(0x25, 0x1, 0x0)
r7 = syz_io_uring_setup(0x332f, &(0x7f0000000400)={0x0, 0x6854, 0x800, 0x5, 0x39}, &(0x7f0000000080), &(0x7f00000001c0))
io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000900)={&(0x7f0000003000), 0x1, 0x3}, 0x1)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r7, 0x17, &(0x7f0000000f40)={0x0, 0x0, 0x3}, 0x1)

49.991482467s ago: executing program 1 (id=4068):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0x2}, 0x18)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c01000021000900000000000000000000000000000000000000ffffe0000001fe8000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="faef520b097600000c0111"], 0x15c}}, 0x20008080)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"})
syz_open_pts(r0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280))
syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd144, 0x0, 0xffffffff, 0x289}, &(0x7f00000001c0)=<r3=>0x0, &(0x7f0000000140))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400"], 0x48)
r5 = socket$key(0xf, 0x3, 0x2)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0x100000000000000}, 0x18)
sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'S'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1000, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000003000200850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r9}, 0x10)
r10 = socket(0x10, 0x3, 0x9)
r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendfile(r10, r11, 0x0, 0x7fffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r12}, 0x18)
modify_ldt$write2(0x11, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10)
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0)

49.96886437s ago: executing program 5 (id=4069):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32, @ANYBLOB="140012800c0001006d616376746170"], 0x44}, 0x1, 0x0, 0x0, 0x240448d5}, 0x8000002)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00))
set_mempolicy(0x6005, &(0x7f00000001c0)=0x1003, 0x4)
r3 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x0, 0x8000021e}, &(0x7f00000001c0)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff})
io_uring_enter(r3, 0x47fa, 0x0, 0x0, 0x0, 0x0)

49.695559966s ago: executing program 5 (id=4070):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00010000000000000000001c04"], 0x1c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="182b092bf4efaef06c0000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
chroot(&(0x7f00000000c0)='./file0/file0\x00')
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x228940, 0x27)
mkdirat(r5, &(0x7f0000000140)='./file0/../file0\x00', 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
r7 = syz_io_uring_setup(0x332f, &(0x7f0000000400)={0x0, 0x6854, 0x800, 0x5, 0x39}, &(0x7f0000000080), &(0x7f00000001c0))
io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000900)={&(0x7f0000003000), 0x1, 0x3}, 0x1)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r7, 0x17, &(0x7f0000000f40)={0x0, 0x0, 0x3}, 0x1)

49.640054001s ago: executing program 3 (id=4071):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r2}, 0x18)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x1a, 0x1b, 0x100, &(0x7f00000000c0)="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"})

49.512716993s ago: executing program 5 (id=4072):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x4, 0x80, 0x2000000, 0x3a2}, &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_OPENAT2={0x1c, 0x40, 0x0, 0xffffffffffffff9c, &(0x7f00000002c0)={0x200200, 0x10, 0x1}, &(0x7f0000000300)='./file0\x00', 0x18, 0x0, 0x12345})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r0, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)
r3 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x80001021, 0x80, 0x6, 0x110}, &(0x7f0000000340)=<r4=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r4, 0x0, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1})
io_uring_enter(r3, 0x6e2, 0xc49, 0x1, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5, 0x1}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5, 0x0, 0x0, 0x5}, {0x5}, {}, {0x20000, 0x10}, {0x0, 0x470a, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x8000, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2b25}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800, 0x10001}, {0x3, 0x0, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x800}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x62572899, 0x1ff, 0x8, 0x0, 0x3}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x200000}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x200}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x1, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000}, {0x20000000, 0x8000, 0x0, 0xe}, {0x3, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{0x5}, {}, {}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5, 0x1}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x2}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {0x1}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r9 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
open_by_handle_at(r9, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
socket(0x10, 0x3, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x2, 0x3800)
msgsnd(0x0, &(0x7f0000003800)=ANY=[@ANYBLOB="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"], 0xfee, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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")
r10 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45)
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./file0\x00')
ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000140)=0x2000000)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59)
pwrite64(r11, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61)

49.389166964s ago: executing program 3 (id=4073):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000400000000000000f202a58510f7dda20000000000"], 0x50)
socket$netlink(0x10, 0x3, 0x0)
shmget$private(0x0, 0x2000, 0x54003f00, &(0x7f0000ffc000/0x2000)=nil)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x64049}, 0x40000)

49.381747215s ago: executing program 35 (id=4073):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000400000000000000f202a58510f7dda20000000000"], 0x50)
socket$netlink(0x10, 0x3, 0x0)
shmget$private(0x0, 0x2000, 0x54003f00, &(0x7f0000ffc000/0x2000)=nil)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x64049}, 0x40000)

48.931618668s ago: executing program 1 (id=4077):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0x764b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
io_submit(0x0, 0x2, &(0x7f0000000380)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x9, r2, &(0x7f0000000040)="e6045a32bf6b8027c9e06b5a42a1e3a03fe7d9b5e557993e56c65fc05e3be48d82b8a7b19ca2a6676a38bbca", 0x2c, 0xc194, 0x0, 0x4}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x94b8, 0xffffffffffffffff, &(0x7f00000002c0)="f4ceacde47647b69d18190cce0090fd121e6b176e53bd08439bafa8ff50f04e58aab6e8d7cf518c5e097e293bb33978d3a098c4c7dd1b475e643", 0x3a, 0x9}])
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f00000002c0)={[{@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$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")

48.79888191s ago: executing program 5 (id=4078):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00010000000000000000001c04"], 0x1c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="182b092bf4efaef06c0000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
chroot(&(0x7f00000000c0)='./file0/file0\x00')
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x228940, 0x27)
mkdirat(r5, &(0x7f0000000140)='./file0/../file0\x00', 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
setreuid(0x0, 0xee00)
r7 = syz_io_uring_setup(0x332f, &(0x7f0000000400)={0x0, 0x6854, 0x800, 0x5, 0x39}, &(0x7f0000000080), &(0x7f00000001c0))
io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000900)={&(0x7f0000003000), 0x1, 0x3}, 0x1)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r7, 0x17, &(0x7f0000000f40)={0x0, 0x0, 0x3}, 0x1)

48.796806521s ago: executing program 36 (id=4078):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00010000000000000000001c04"], 0x1c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="182b092bf4efaef06c0000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
chroot(&(0x7f00000000c0)='./file0/file0\x00')
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x228940, 0x27)
mkdirat(r5, &(0x7f0000000140)='./file0/../file0\x00', 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
setreuid(0x0, 0xee00)
r7 = syz_io_uring_setup(0x332f, &(0x7f0000000400)={0x0, 0x6854, 0x800, 0x5, 0x39}, &(0x7f0000000080), &(0x7f00000001c0))
io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000900)={&(0x7f0000003000), 0x1, 0x3}, 0x1)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r7, 0x17, &(0x7f0000000f40)={0x0, 0x0, 0x3}, 0x1)

48.722475037s ago: executing program 1 (id=4080):
socket$packet(0x11, 0x3, 0x300)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
socket$rxrpc(0x21, 0x2, 0xa)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd_index=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}})
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x8000)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x68, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xde3}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3a, 0x18}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000090}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})

48.523683086s ago: executing program 1 (id=4081):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00010000000000000000001c04"], 0x1c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="182b092bf4efaef06c0000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
chroot(&(0x7f00000000c0)='./file0/file0\x00')
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x228940, 0x27)
mkdirat(r5, &(0x7f0000000140)='./file0/../file0\x00', 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r7 = syz_io_uring_setup(0x332f, &(0x7f0000000400)={0x0, 0x6854, 0x800, 0x5, 0x39}, &(0x7f0000000080), &(0x7f00000001c0))
io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000900)={&(0x7f0000003000), 0x1, 0x3}, 0x1)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r7, 0x17, &(0x7f0000000f40)={0x0, 0x0, 0x3}, 0x1)

48.124922034s ago: executing program 1 (id=4082):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r2}, 0x18)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x1a, 0x1b, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f189afae3530db6dd493f28fd988721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef495689092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9b647ba812f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2043db5bd77fd60ba0f012139929ccfec965c1f769785a4d23332d71f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fdc1bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fd4e71929f918b98c4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d63904c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00000000ddffffff00"})

47.810695493s ago: executing program 7 (id=4084):
socket$packet(0x11, 0x3, 0x300)
syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2)
syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x80, 0x14, 0x150}, 0x0, &(0x7f0000000200)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, r3, 0x0)
socket$kcm(0x21, 0x2, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r6, 0x0, 0xb0}, 0x18)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, 0x0)
socket(0x10, 0x803, 0x0)

47.766910668s ago: executing program 7 (id=4085):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x200000000}, 0x18)
r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_access(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="7379730f74656d5f753a6f626a6563745f723a6367726f75705f743a7330202f7573722f6c6962b5c9656c6570617468792f6d697373696f6e2d636f6e74726f6c2d352030"], 0x58)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000002480)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, 0x0, 0x4)
socket$nl_audit(0x10, 0x3, 0x9)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000003480)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', 0x0, &(0x7f0000004d40)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')

47.701030714s ago: executing program 1 (id=4086):
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, 0x0, &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = msgget$private(0x0, 0x0)
msgsnd(r1, 0x0, 0x2000, 0x0)
msgrcv(r1, &(0x7f0000001080)={0x0, ""/1}, 0x9, 0x2, 0x3000)
msgctl$IPC_SET(r1, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3})

47.693189285s ago: executing program 37 (id=4086):
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, 0x0, &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = msgget$private(0x0, 0x0)
msgsnd(r1, 0x0, 0x2000, 0x0)
msgrcv(r1, &(0x7f0000001080)={0x0, ""/1}, 0x9, 0x2, 0x3000)
msgctl$IPC_SET(r1, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3})

47.690307475s ago: executing program 7 (id=4088):
arch_prctl$ARCH_SET_CPUID(0x1012, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000080)=0x1)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d42ffffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a)

47.468084406s ago: executing program 7 (id=4089):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00010000000000000000001c04"], 0x1c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="182b092bf4efaef06c0000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
chroot(&(0x7f00000000c0)='./file0/file0\x00')
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x228940, 0x27)
mkdirat(r5, &(0x7f0000000140)='./file0/../file0\x00', 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r7 = syz_io_uring_setup(0x332f, &(0x7f0000000400)={0x0, 0x6854, 0x800, 0x5, 0x39}, &(0x7f0000000080), &(0x7f00000001c0))
io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000900)={&(0x7f0000003000), 0x1, 0x3}, 0x1)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r7, 0x17, &(0x7f0000000f40)={0x0, 0x0, 0x3}, 0x1)

47.21696286s ago: executing program 7 (id=4090):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
pipe(0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffa}]})
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
unshare(0x42000000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000180)=ANY=[@ANYBLOB="1d00000004000000932300000000000001020000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0100000005"], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES32=r0], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000140)='kfree\x00', r7, 0x0, 0x1}, 0x18)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="9d69ae8218e4140100000000afd63a5a0000000018110000", @ANYRES32=r8, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r8}, &(0x7f00000005c0), &(0x7f0000000600)=r9}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r6, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0], 0x0, 0xa5, &(0x7f0000000740), 0x0, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x8c, 0x8, 0x8, &(0x7f0000000840)}}, 0x10)
r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
sendfile(r10, r10, 0x0, 0x8)
ioctl$FS_IOC_GETFSLABEL(r7, 0x81009431, &(0x7f0000000180))
mlockall(0x2)

45.592681413s ago: executing program 7 (id=4098):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x1d, 0x7ffc0001}]})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r2}, 0x10)
personality(0x500006)
mount_setattr(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f0000000180)={0x80, 0x8}, 0x20)
openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
syz_open_dev$tty1(0xc, 0x4, 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)

45.561283696s ago: executing program 38 (id=4098):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x1d, 0x7ffc0001}]})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r2}, 0x10)
personality(0x500006)
mount_setattr(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f0000000180)={0x80, 0x8}, 0x20)
openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
syz_open_dev$tty1(0xc, 0x4, 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)

42.944292343s ago: executing program 6 (id=4111):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x4, @perf_config_ext={0x2, 0x3}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x1d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000580)={r2, 0x4, 0x0, 0xffffffffffffff6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd1c, 0x0, 0x0}, 0xfffffe16)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x59d, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x18, 0x1, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f0000000080), 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}}, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000280)="f4000900062b3325fe80000000000000dc8b850f2323fcb11ea3548466cc00007a000000ad6e911b", 0x28}], 0x1}, 0x0)

42.065247696s ago: executing program 6 (id=4112):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x348}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='sched_switch\x00', r1}, 0x18)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x158, 0x11, 0x148, 0x158, 0x0, 0x230, 0x2a8, 0x2a8, 0x230, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x40, 0x0, 0x3, 0x0, 0x88000000, 0x3, 0x4, 0x18}}}, @common=@unspec=@limit={{0x48}, {0x5, 0x5, 0x4, 0x3, 0x9, 0x3, 0xfffffffffffffff8}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @multicast1, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x9, 0x5, 0x1, 'netbios-ns\x00', 'syz0\x00', {0x4a7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) (fail_nth: 1)

41.701129391s ago: executing program 6 (id=4114):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18)
r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401)
ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522)
ioctl$USBDEVFS_BULK(r2, 0x5523, 0x0)
ioctl$USBDEVFS_FORBID_SUSPEND(r2, 0x5521)

41.633819587s ago: executing program 6 (id=4115):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00010000000000000000001c04"], 0x1c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="182b092bf4efaef06c0000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
chroot(&(0x7f00000000c0)='./file0/file0\x00')
r5 = syz_io_uring_setup(0x332f, &(0x7f0000000400)={0x0, 0x6854, 0x800, 0x5, 0x39}, &(0x7f0000000080), &(0x7f00000001c0))
io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000900)={&(0x7f0000003000), 0x1, 0x3}, 0x1)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000f40)={0x0, 0x0, 0x3}, 0x1)

41.557863064s ago: executing program 6 (id=4116):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000600)='sys_enter\x00', r3, 0x0, 0xffffffffffffffff}, 0x18)
syz_read_part_table(0x1059, &(0x7f0000000000)="$eJzsz8FNw0AUBNDxYmRbogNa4Ewn7scHCuFMT0hUwDmX6EdeR0oHSQ7v3Uazs9IPD/WRlpxqfG+ZkyXJuWpK8nb0VdVakr+ehtuwP+q2ek3ycoRx2f/JsF3LVv+fa9/VsC++l6/5aH4zZf25150AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MwuAQAA//9ZkRMF")

41.269134052s ago: executing program 6 (id=4117):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
getpgrp(0x0)
fchdir(0xffffffffffffffff)
r2 = gettid()
timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
readv(r3, &(0x7f0000001140)=[{&(0x7f0000000700)=""/206, 0xce}], 0x1)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000240)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='objagg_obj_get\x00', r4, 0x0, 0x7f}, 0x18)
lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x20)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket(0x27, 0xa, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x7}, 0x0, 0x10000, 0x7, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r1, 0x3)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)

41.268858812s ago: executing program 39 (id=4117):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
getpgrp(0x0)
fchdir(0xffffffffffffffff)
r2 = gettid()
timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
readv(r3, &(0x7f0000001140)=[{&(0x7f0000000700)=""/206, 0xce}], 0x1)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000240)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='objagg_obj_get\x00', r4, 0x0, 0x7f}, 0x18)
lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x20)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket(0x27, 0xa, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x7}, 0x0, 0x10000, 0x7, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r1, 0x3)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)

1.923499028s ago: executing program 0 (id=4766):
socket$packet(0x11, 0x3, 0x300)
syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x4}, 0x3}}, 0x24)
r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x80, 0x14, 0x150}, &(0x7f0000000140)=<r4=>0x0, &(0x7f0000000200)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd_index=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}})
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000780)='netlink_extack\x00', 0xffffffffffffffff, 0x0, 0xb0}, 0x18)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x14, 0x0, 0x10, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})

1.877214152s ago: executing program 9 (id=4767):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0x764b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_submit(0x0, 0x2, &(0x7f0000000380)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x9, r2, &(0x7f0000000040)="e6045a32bf6b8027c9e06b5a42a1e3a03fe7d9b5e557993e56c65fc05e3be48d82b8a7b19ca2a6676a38bbca", 0x2c, 0xc194, 0x0, 0x4}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x94b8, 0xffffffffffffffff, &(0x7f00000002c0)="f4ceacde47647b69d18190cce0090fd121e6b176e53bd08439bafa8ff50f04e58aab6e8d7cf518c5e097e293bb33978d3a098c4c7dd1b475e643", 0x3a, 0x9}])
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f00000002c0)={[{@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$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")

1.814656468s ago: executing program 0 (id=4768):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1.648951974s ago: executing program 8 (id=4772):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00')
open_by_handle_at(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="20000000f1000200"], 0x0)

1.615502787s ago: executing program 9 (id=4773):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0})
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0)
writev(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)="28f67d87", 0x4}, {0x0}], 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000081115c000000000085000000d100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000000)={[{@abort}]}, 0x0, 0x5d7, &(0x7f0000001200)="$eJzs3c9vVEUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aAAleTIwXY0w8eRD/CyVy5aQnD148GRKihqOJa952H3Tbty0tbV/lfT7JdufN7MvMY/l2ZqczbwOorMHsRy1id0RMp4j+dGXpCwbnn+7+/cnJ7JGiXn/jzxSpmZe/NDWf+7IfnRE9EfHzTyl2dSytd2bu0tnxqanJi83j4dlz08Mzc5f2nzk3fnry9OT50ZdGjxw+dPjIyIE1Xdflgrzj197/sP+zsbe/++afNPL9b2MpjsarzRcuvI71MhiDjX+TtLSo78h6V1aSjvm3Oha+xamzxAaxKvn71xURT0V/dMT9N68/Pn2t1MYBG6qeIupARSXxDxWVjwPyz/aLPwfXShmVAJvhzrH5CYCl8d85PzcYPY25ge13Uyyc1kkRsbaZuVY7IuLWzbFrp26OXYsNmocDil25GhFPF8V/asT/QPTEQCP+ay3xn40LTjSfs/zX11j/4qli8Q+bZz7+e5aN/2gT/+8siP9311j/4P3ke70t8d+71ksCAAAAAACAyrpxLCJeLPr7f+3e+p8oWP/TFxFH16H+wUXHS//+X7u9DtUABe4ci3ilcP1vLV/9O9DRTD3WWA/QlU6dmZo8EBGPR8S+6NqWHY8sU8f+z3d93a5ssLn+L39k9d9qrgVstuN257bWcybGZ8cf9rqBiDtXI54pXP+b7vX/qaD/z34fTD9gHbuev36iXdnK8Q9slPq3EXsL+//7d61Iy9+fY7gxHhjORwVLPfvxFz+0q3+t8e8WE/Dwsv5/+/LxP5AW3q9nZvV1HJzrrLcrW+v4vzu92bjlTHcz76Px2dmLIxHd6XhHltuSP7r6NsOjKI+HPF6y+N/33PLzf0Xj/96IWHSnsEh/te4pzj35b9/v7dpj/A/lyeJ/YlX9/+oTo9cHfmxX/4P1/4caff2+Zo75P5j3VR6m3a35BeHYWVS02e0FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEdBLSJ2RKoN3UvXakNDEX0R8URsr01dmJl94dSFD85PZGWN7/+v5d/02z9/nPLv/x9YcDy66PhgROyMiC87ehvHQycvTE2UffEAAAAAAAAAAAAAAAAAAACwRfS12f+f+aOj7NYBG66z7AYApSmI/1/KaAew+fT/UF3iH6pL/EN1iX+oLvEP1SX+obrEP1SX+AcAAAAAgEfKzj03fk0RceXl3sYj090s6yq1ZcBGq5XdAKA0bvED1WXpD1SXz/hAWqG8p+1JK525nOmTD3EyAAAAAAAAAAAAAFTO3t32/0NV2f8P1WX/P1RXvv9/T8ntADafz/hArLCTv3D//4pnAQAAAAAAAAAAAADraWbu0tnxqanJixJvbY1mbGaiXq9fzv4XbJX2/M8T+VL4rdKeRYl8r9+DnVXe7yQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDVfwEAAP//tsck3w==")
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x7}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x4}}, './file0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000008c7e869500", @ANYRES32, @ANYRES16=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r5}, 0x10)
unshare(0x20040600)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
unshare(0x20000600)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r6, &(0x7f0000000000), 0x0}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r7}, 0x10)
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r8, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001080)={0x24, 0xf, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008880}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x20, r11, 0x9c3fa077fa966179, 0x0, 0x8000000, {{0x7e}, {@void, @val={0xc, 0x99, {0x100, 0x5e}}}}}, 0x20}}, 0x4000054)
sendmsg$NL80211_CMD_JOIN_OCB(r9, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r11, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x64}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x44)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x30, r11, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x9, 0x5f}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x100}, 0x20040005)
unshare(0x8000600)

1.561308592s ago: executing program 8 (id=4774):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
flistxattr(r1, &(0x7f0000000200)=""/232, 0xe8)

1.554663253s ago: executing program 8 (id=4775):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1.528960885s ago: executing program 0 (id=4776):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf2501000000000000000b000000000600147379"], 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x800)

1.464728491s ago: executing program 0 (id=4777):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0xf0, 0x30, 0xffff, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x6c, 0x2, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1b1, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x26e6}}, @TCA_GACT_PROB={0xfffffffffffffe74, 0x3, {0x1, 0x18a8, 0x6}}]}, {0xffffff50}, {0xc, 0x3}, {0xc}}}]}]}, 0xf0}}, 0x0)
symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00')
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r6, 0x0, 0x5}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000004000000001c000000000800"/28], 0x50)
newfstatat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x100)
syz_open_dev$loop(&(0x7f0000000080), 0x401, 0x980)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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")
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18)
r9 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10)

1.398997298s ago: executing program 4 (id=4779):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x4, 0x80, 0x2000000, 0x3a2}, &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_OPENAT2={0x1c, 0x40, 0x0, 0xffffffffffffff9c, &(0x7f00000002c0)={0x200200, 0x10, 0x1}, &(0x7f0000000300)='./file0\x00', 0x18, 0x0, 0x12345})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r0, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)
r3 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x80001021, 0x80, 0x6, 0x110}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000240))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
io_uring_enter(r3, 0x6e2, 0xc49, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
open_by_handle_at(r6, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0)

1.394769088s ago: executing program 8 (id=4780):
syz_io_uring_setup(0x5c6, 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
msgsnd(0x0, &(0x7f0000003800)=ANY=[@ANYBLOB="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"], 0xfee, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$eJzs3U1IHGcYB/BnZndr1aXY9lIo/YBSSiuIvRV6sZcWhCJSSqEtWErppUULVulNe8olh+QYkuApFwm5xeQYvEguCYGcTOLBXAKJ5BDJIQnZsDsr+JVo3HUnZH4/WOfDd97nHWb+74g4GEBh9UXEUESUIqI/IioRkWxu8HH26WtuznUvjUXUaj/cTxrtsu3MxnG9ETEbEV9FxGKaxF/liOmFX1YfLn/32dGpyqdnFn7u7uhJNq2trny/fnrkyPnhL6evXr87ksRQVLecV/slu+wrJxHvHEaxV0RSznsE7Mfof+du1HP/bkR80sh/JdLILt6xyTcWK/HFqecde/zetfc7OVag/Wq1Sv0ZOFsDCieNiGok6UBEZOtpOjCQ/Qx/s9ST/j0x+W//nxNT43/kPVMB7VKNWPn2YteF3m35v1PK8g+8prJfSq38ODp/q76yXsp7QEBHfJAt6s///t9mPg/5h8KRfygu+Yfikn8oLvmH4pJ/KC75h4J42vxjv0275B+KS/6huA6c/xNPDm9QQEdszj8AUCy1rgO9Ndzel5CBXOQ9/wAAAAAAAAAAAAAAAAAAADvNdS+NbXza02N5zxaXT0asfZM13Vm/1Ph/xBFvNr72PEi29Jjsq8KL/fpRix206GzOb1+/dTvf+lc+zLf+zHjE7P8RMVgu77z/kub9d3Bv7/H9yu8tFnhJybbtr3/qbP3tHs/nW394OeJSff4Z3G3+SeO9xnL3+adav34t1v/nUYsdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0DHPAgAA///B2nXP")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59)
pwrite64(r2, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61)

1.075617128s ago: executing program 2 (id=4781):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000)

984.353577ms ago: executing program 2 (id=4782):
r0 = socket$inet6(0xa, 0x3, 0x5)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev, 0x400, 0x0, 0xff, 0x1}, 0x20)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x3f0, 0xc8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x320, 0xffffffff, 0xffffffff, 0x320, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x33}, 0x0, 0x238, 0x258, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x7, {0x4}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x7, 0x69, 0x4, 0x0, 0x1000, 0x6, 0x3}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x450)
unshare(0x28000600)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYRES8=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)

967.414968ms ago: executing program 9 (id=4783):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000)

783.804736ms ago: executing program 9 (id=4784):
r0 = socket$inet6(0xa, 0x3, 0x5)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev, 0x400, 0x0, 0xff, 0x1}, 0x20)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x3f0, 0xc8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x320, 0xffffffff, 0xffffffff, 0x320, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x33}, 0x0, 0x238, 0x258, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x7, {0x4}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x7, 0x69, 0x4, 0x0, 0x1000, 0x6, 0x3}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x450)
unshare(0x28000600)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYRES8=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)

481.974214ms ago: executing program 4 (id=4785):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
flistxattr(r1, &(0x7f0000000200)=""/232, 0xe8)

384.314153ms ago: executing program 0 (id=4786):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

379.298214ms ago: executing program 4 (id=4787):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf2501000000000000000b000000000600147379"], 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x800)

303.512561ms ago: executing program 4 (id=4788):
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
pipe2$9p(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10)
acct(0x0)
acct(0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'dummy0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0)

299.056392ms ago: executing program 2 (id=4789):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4H8ggoJPPvki+AcIwzz4B8jAgL6ID6KiiM7og6DOlSQ3TidN2rrTNp3m84HTnHPvzf2ec0NO7o/TewMYWy9FxFsRMRERr0ZEMZ+e5in2uqm93IP77y21UxJZ9s5fk0jyab11tdcxGRFX87dNRcTXvhzxzeRg3ObO7vpirVbdysuVVn2z0tzZvb5WX1ytrlY35ufn3lh4c+H1hdks90TtLPUyP/nS529/+lu/u/Hna99uV+tzH4lC9LXjJHWbXuhsi572Nto6jWAj0PvMC6OuCAAAx9Lex/9gRHyis/9fjInO3lyfiVHUDAAAADgp2Rem499JRAYAAABcWGlETEeSlvOxANORppfycwMfjitprdFsfWqlsb2x3J4XUYpCurJWq87mY4VLUUja5bl8jG2v/FpfeT4inouI7xcvd8rlpUZtecTnPgAAAGBcXO07/v9HMe3kjzbg/wQAAACA86s0tAAAAABcFA75AQAA4OLrP/6/PaJ6AAAAAKfiK2+/3U5Z7/nXy+/ubK833r2+XG2ul+vbS+WlxtZmebXRWO3cs69+1PpqjcbmZ2Jj+2alVW22Ks2d3Rv1xvZG68baY4/ABgAAAM7Qcx+/8+skIvY+e7mTIr8PIMBj/jDqCgAnaWLUFQBGxl28YXwVRl0BYOSSI+YbvAMAAE+/mY8evP7fe/6/cwNwsRnrAwDjx/V/GF8FIwBhrKUR8YFu9plhywy9/v/L40bJsoi7xf1TnF8EAICzNd1JSVrOjwOmI03L5YhnI9JSFJKVtVp1Nj8++FWx8Ey7PNd5Z3LkmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCvLksgAAACACy0i/VPSuZt/xEzxlen+8wOXkn8W44954Ufv/ODmYqu1Ndee/rfOs7wuRUTrh/n014Y+PgwAAAA4acne0Fnd4/T8de5MawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGHhw/72lXjrLuH/5YkSUBsWfjKnO61QUIuLK35OY3Pe+JCImTiD+3q2IeH5Q/CQeZllWymvRHz+NiMunHL/U2TTD4189gfgwzu60+5+3Bn3/0nip8zr4+zeZpyc1vP9L88jPd/q5Qf3fswfWVh8Y44V7P6sMjX8r4oXJwf1Pr/9NhsR/+cDa/pVl2cEY3/j67u6w+NmPI2YG/v4kj8WqtOqblebO7vW1+uJqdbW6MT8/98bCmwuvL8xWVtZq1fzvwBjf+9jPHx7W/isD4v/2N93+97D2vzJspX3+c+/m/Q91s4VB8a+9PPD3dyqGxE/z375P5vn2/Jlefq+b3+/Fn9598bD2Lw/Z/kd9/teO2f5Xv/rd3x9zUQDgDDR3dtcXa7Xq1iGZqWMs8zRmfjF1Lqrxf2ay73Q/ufNSn/ebae+tPprSa9U5qNi+THZmsSbinDT5f5mRdksAAMApeLTTP+qaAAAAAAAAAAAAAAAAAAAAwPg6i9uJ9cfcG01TAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO9d8AAAD//yLg4A8=")

291.913532ms ago: executing program 9 (id=4790):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

167.870174ms ago: executing program 8 (id=4791):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0)

87.676712ms ago: executing program 4 (id=4792):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000)

82.637272ms ago: executing program 0 (id=4793):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x7, 0x4, 0x208, 0xd9, 0x0, 0xffffffffffffffff, 0x8000}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000009eb3d6cc0000000000000010521dfa", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc}, {}, {0x0, 0x8}, {0x81}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x0, 0x1, 0x0, 0x1}, {0x7}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x4, 0x4000000, 0x0, 0x8000}, {}, {0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10000000}, {}, {}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x5}], [{0x2}, {}, {0x4, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xe6c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x25)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r6, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}]}]}, @TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'bond0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'macsec0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3df}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000810}, 0x44)
r7 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f0000000500))
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
socket$unix(0x1, 0x1, 0x0)
close_range(r9, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="101300002d00090036bd70000100000004"], 0x1310}, 0x1, 0x0, 0x0, 0x20000004}, 0x8000)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r12 = fsmount(r7, 0x0, 0x6)
symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r12, &(0x7f0000000080)='./file0\x00')
readlinkat(r12, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6)

68.132423ms ago: executing program 2 (id=4794):
r0 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10)
connect$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10)

52.628955ms ago: executing program 9 (id=4795):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x4, 0x80, 0x2000000, 0x3a2}, &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_OPENAT2={0x1c, 0x40, 0x0, 0xffffffffffffff9c, &(0x7f00000002c0)={0x200200, 0x10, 0x1}, &(0x7f0000000300)='./file0\x00', 0x18, 0x0, 0x12345})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r0, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)
r3 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x80001021, 0x80, 0x6, 0x110}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000240))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
io_uring_enter(r3, 0x6e2, 0xc49, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
open_by_handle_at(r6, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0)

32.241567ms ago: executing program 4 (id=4796):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0xf0, 0x30, 0xffff, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x6c, 0x2, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1b1, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x26e6}}, @TCA_GACT_PROB={0xfffffffffffffe74, 0x3, {0x1, 0x18a8, 0x6}}]}, {0xffffff50}, {0xc, 0x3}, {0xc}}}]}]}, 0xf0}}, 0x0)
symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00')
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r6, 0x0, 0x5}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000004000000001c000000000800"/28], 0x50)
newfstatat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x100)
syz_open_dev$loop(&(0x7f0000000080), 0x401, 0x980)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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")
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18)
r9 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10)

24.817127ms ago: executing program 8 (id=4797):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000100)=0xf8, 0x4)
r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x19, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x1074}})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095", @ANYRES64=r4, @ANYBLOB="1e2aa26c16ff7951316d377bdc0c36614c92f408f54f130f900af7defbc4a8dd80ff909ce0c79164443a47c9"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r5, 0x0, 0x7}, 0x18)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x120c042, &(0x7f0000000d80)={[{@nodiscard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@nodioread_nolock}, {@debug}, {@minixdf}, {}, {@noauto_da_alloc}, {@noauto_da_alloc}], [{@seclabel}]}, 0x1, 0x5e7, &(0x7f0000001400)="$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")
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4050)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0x3fffffffc}, 0x10b202, 0x0, 0x0, 0x3, 0xfff, 0xf8, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TTY_GET(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x3f8, 0x1, 0x70bd29, 0x25dfdbfb, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x91)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000024c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a300000000054000000060a01040000000000000000010000000900010073797a310000000008000b40000000030c000640000000000000000314000480100001800b0001007470726f787900000900010073797a30"], 0x7904}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
sync()
io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
pipe(&(0x7f00000000c0))
write$P9_RLERRORu(r8, 0x0, 0xe)

24.563397ms ago: executing program 2 (id=4798):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf2501000000000000000b000000000600147379"], 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x800)

0s ago: executing program 2 (id=4799):
r0 = socket(0x10, 0x803, 0x2)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x1}}) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000400000001"], 0x50) (async, rerun: 64)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19"], 0x48) (rerun: 64)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xb) (async, rerun: 32)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (rerun: 32)
r2 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0423, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb4d, 0x4, @perf_config_ext={0x8, 0x7f}, 0x2012, 0x0, 0x80002, 0x5, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000380)='cpu\t&0&&\t') (async)
syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2b9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000240), &(0x7f0000000380)=r4}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x4, 0x8}) (async)
readv(r1, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x20}], 0x1) (async)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x4e) (async, rerun: 64)
r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r5, 0x0, 0x0) (async)
socket(0x10, 0x3, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 64)
r7 = socket$netlink(0x10, 0x3, 0xc) (rerun: 64)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x8}, 0xfd89) (async)
poll(0x0, 0x0, 0x4) (async)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f00000001c0)) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@gettaction={0x2c, 0x32, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0x2c}, 0x1, 0x2b1e}, 0x4894)

kernel console output (not intermixed with test programs):

it(1768203612.712:50820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16284 comm="syz.6.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5676f749 code=0x7ffc0000
[  296.783757][   T29] audit: type=1326 audit(1768203612.712:50821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16284 comm="syz.6.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f3a5676f749 code=0x7ffc0000
[  296.807505][   T29] audit: type=1326 audit(1768203612.712:50822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16284 comm="syz.6.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5676f749 code=0x7ffc0000
[  296.831397][   T29] audit: type=1326 audit(1768203612.712:50823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16284 comm="syz.6.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5676f749 code=0x7ffc0000
[  296.855261][   T29] audit: type=1326 audit(1768203612.712:50824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16284 comm="syz.6.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5676f749 code=0x7ffc0000
[  296.878974][   T29] audit: type=1326 audit(1768203612.712:50825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16284 comm="syz.6.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5676f749 code=0x7ffc0000
[  296.902614][   T29] audit: type=1326 audit(1768203612.712:50826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16284 comm="syz.6.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3a5676f749 code=0x7ffc0000
[  296.926225][   T29] audit: type=1326 audit(1768203612.712:50827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16284 comm="syz.6.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5676f749 code=0x7ffc0000
[  296.975578][T16057] 8021q: adding VLAN 0 to HW filter on device team0
[  297.005603][T15998] veth1_vlan: entered promiscuous mode
[  297.021226][ T8340] bridge_slave_1: left allmulticast mode
[  297.026980][ T8340] bridge_slave_1: left promiscuous mode
[  297.032703][ T8340] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.041127][ T8340] bridge_slave_0: left allmulticast mode
[  297.047906][ T8340] bridge_slave_0: left promiscuous mode
[  297.053817][ T8340] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.136561][ T8340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  297.147404][ T8340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  297.158671][ T8340] bond0 (unregistering): Released all slaves
[  297.179962][ T8269] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.187093][ T8269] bridge0: port 1(bridge_slave_0) entered forwarding state
[  297.197797][T15977] veth0_macvtap: entered promiscuous mode
[  297.227455][ T8269] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.234600][ T8269] bridge0: port 2(bridge_slave_1) entered forwarding state
[  297.267651][T15998] veth0_macvtap: entered promiscuous mode
[  297.276247][T15977] veth1_macvtap: entered promiscuous mode
[  297.314858][ T8340] hsr_slave_0: left promiscuous mode
[  297.328289][ T8340] hsr_slave_1: left promiscuous mode
[  297.340246][ T8340] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  297.347802][ T8340] batman_adv: batadv0: Removing interface: batadv_slave_0
[  297.362728][ T8340] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  297.370273][ T8340] batman_adv: batadv0: Removing interface: batadv_slave_1
[  297.383585][ T8340] veth1_macvtap: left promiscuous mode
[  297.389097][ T8340] veth0_macvtap: left promiscuous mode
[  297.395359][ T8340] veth1_vlan: left promiscuous mode
[  297.400627][ T8340] veth0_vlan: left promiscuous mode
[  297.497340][ T8340] team0 (unregistering): Port device team_slave_1 removed
[  297.510500][ T8340] team0 (unregistering): Port device team_slave_0 removed
[  297.556088][T15998] veth1_macvtap: entered promiscuous mode
[  297.578467][T15977] batman_adv: batadv0: Interface activated: batadv_slave_0
[  297.607723][T15998] batman_adv: batadv0: Interface activated: batadv_slave_0
[  297.618375][T15977] batman_adv: batadv0: Interface activated: batadv_slave_1
[  297.641844][T15998] batman_adv: batadv0: Interface activated: batadv_slave_1
[  297.660183][ T8285] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  297.675634][ T8285] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  297.687135][T16057] 8021q: adding VLAN 0 to HW filter on device batadv0
[  297.702148][ T8285] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  297.724967][ T8285] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  297.762310][ T8285] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  297.835535][ T8285] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  297.898329][ T8269] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  297.916746][T16159] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  297.925677][T16329] loop8: detected capacity change from 0 to 128
[  297.945924][ T8269] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  297.954909][T16159] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  297.964293][T16329] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  297.980575][T16159] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  297.989595][T16159] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  297.997019][T16329] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  298.058324][T16159] 8021q: adding VLAN 0 to HW filter on device bond0
[  298.073406][T16159] 8021q: adding VLAN 0 to HW filter on device team0
[  298.090386][T16342] netlink: 'syz.9.4079': attribute type 33 has an invalid length.
[  298.098489][T16342] netlink: 152 bytes leftover after parsing attributes in process `syz.9.4079'.
[  298.130396][T16349] xt_hashlimit: max too large, truncated to 1048576
[  298.141308][ T8269] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.148508][ T8269] bridge0: port 1(bridge_slave_0) entered forwarding state
[  298.159281][T15977] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  298.164699][T16349] xt_CT: You must specify a L4 protocol and not use inversions on it
[  298.186163][T16351] FAULT_INJECTION: forcing a failure.
[  298.186163][T16351] name failslab, interval 1, probability 0, space 0, times 0
[  298.198948][T16351] CPU: 1 UID: 0 PID: 16351 Comm: syz.6.4112 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  298.198981][T16351] Tainted: [W]=WARN
[  298.198990][T16351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  298.199006][T16351] Call Trace:
[  298.199021][T16351]  <TASK>
[  298.199030][T16351]  __dump_stack+0x1d/0x30
[  298.199062][T16351]  dump_stack_lvl+0x95/0xd0
[  298.199089][T16351]  dump_stack+0x15/0x1b
[  298.199109][T16351]  should_fail_ex+0x265/0x280
[  298.199132][T16351]  should_failslab+0x8c/0xb0
[  298.199154][T16351]  kmem_cache_alloc_noprof+0x69/0x4b0
[  298.199179][T16351]  ? vm_area_dup+0x33/0x2c0
[  298.199210][T16351]  vm_area_dup+0x33/0x2c0
[  298.199239][T16351]  __split_vma+0xe9/0x660
[  298.199262][T16351]  ? xas_load+0x413/0x430
[  298.199298][T16351]  ? __rcu_read_unlock+0x4f/0x70
[  298.199322][T16351]  vms_gather_munmap_vmas+0x17a/0x7b0
[  298.199356][T16351]  ? mas_find+0x608/0x700
[  298.199392][T16351]  ? obj_cgroup_charge_account+0x122/0x1a0
[  298.199432][T16351]  mmap_region+0x573/0x1410
[  298.199476][T16351]  ? avc_has_perm+0xf7/0x180
[  298.199518][T16351]  do_mmap+0x9b3/0xbe0
[  298.199546][T16351]  __se_sys_remap_file_pages+0x537/0x5e0
[  298.199587][T16351]  ? mutex_unlock+0x4f/0x90
[  298.199622][T16351]  ? fput+0x8f/0xc0
[  298.199656][T16351]  __x64_sys_remap_file_pages+0x67/0x80
[  298.199695][T16351]  x64_sys_call+0x248c/0x3000
[  298.199722][T16351]  do_syscall_64+0xca/0x2b0
[  298.199757][T16351]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.199784][T16351] RIP: 0033:0x7f3a5676f749
[  298.199804][T16351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  298.199828][T16351] RSP: 002b:00007f3a551b6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8
[  298.199853][T16351] RAX: ffffffffffffffda RBX: 00007f3a569c6090 RCX: 00007f3a5676f749
[  298.199866][T16351] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000800000
[  298.199878][T16351] RBP: 00007f3a551b6090 R08: 0000000000010000 R09: 0000000000000000
[  298.199891][T16351] R10: 0000000000000600 R11: 0000000000000246 R12: 0000000000000001
[  298.199903][T16351] R13: 00007f3a569c6128 R14: 00007f3a569c6090 R15: 00007ffe2b0cb0c8
[  298.199927][T16351]  </TASK>
[  298.463519][ T8269] bridge0: port 2(bridge_slave_1) entered blocking state
[  298.470767][ T8269] bridge0: port 2(bridge_slave_1) entered forwarding state
[  298.517209][T14445] Process accounting resumed
[  298.602832][T16368] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4079'.
[  298.632725][T16159] 8021q: adding VLAN 0 to HW filter on device batadv0
[  298.750500][T16057] veth0_vlan: entered promiscuous mode
[  298.777718][T16057] veth1_vlan: entered promiscuous mode
[  298.823866][T16057] veth0_macvtap: entered promiscuous mode
[  298.851026][T16057] veth1_macvtap: entered promiscuous mode
[  298.895394][T16159] veth0_vlan: entered promiscuous mode
[  298.905157][ T8269] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.949277][T16057] batman_adv: batadv0: Interface activated: batadv_slave_0
[  298.979312][T16057] batman_adv: batadv0: Interface activated: batadv_slave_1
[  299.008225][ T8269] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.033552][T16159] veth1_vlan: entered promiscuous mode
[  299.052560][ T2549] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  299.065870][ T2549] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  299.114065][ T2549] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  299.134411][ T8269] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.168337][ T2549] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  299.179014][T16159] veth0_macvtap: entered promiscuous mode
[  299.213074][ T8269] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.266220][T16159] veth1_macvtap: entered promiscuous mode
[  299.284263][T16415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4087'.
[  299.298461][T16159] batman_adv: batadv0: Interface activated: batadv_slave_0
[  299.310855][T16159] batman_adv: batadv0: Interface activated: batadv_slave_1
[  299.395658][ T8310] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  299.411367][T16421] loop8: detected capacity change from 0 to 512
[  299.428288][ T8269] bridge_slave_1: left allmulticast mode
[  299.434122][ T8269] bridge_slave_1: left promiscuous mode
[  299.439877][ T8269] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.462467][T16421] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4122: bg 0: block 167: padding at end of block bitmap is not set
[  299.491762][ T8269] bridge_slave_0: left allmulticast mode
[  299.497629][ T8269] bridge_slave_0: left promiscuous mode
[  299.503436][ T8269] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.511080][T16421] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.4122: corrupted inode contents
[  299.534299][T16421] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem
[  299.553935][T16421] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.4122: corrupted inode contents
[  299.572717][T16421] EXT4-fs error (device loop8): ext4_evict_inode:301: inode #15: comm syz.8.4122: mark_inode_dirty error
[  299.585869][T16421] EXT4-fs (loop8): 1 orphan inode deleted
[  299.592080][T16421] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  299.647411][T15977] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  299.780326][ T8269] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  299.791625][ T8269] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  299.806099][ T8269] bond0 (unregistering): Released all slaves
[  299.825636][ T8310] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  299.850012][ T8310] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  299.850101][ T8310] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  300.008004][ T8269] hsr_slave_0: left promiscuous mode
[  300.020985][ T8269] hsr_slave_1: left promiscuous mode
[  300.034828][ T8269] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  300.042295][ T8269] batman_adv: batadv0: Removing interface: batadv_slave_0
[  300.064648][ T8269] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  300.072104][ T8269] batman_adv: batadv0: Removing interface: batadv_slave_1
[  300.098683][ T8269] veth1_macvtap: left promiscuous mode
[  300.133560][ T8269] veth0_macvtap: left promiscuous mode
[  300.156328][ T8269] veth1_vlan: left promiscuous mode
[  300.169806][ T8269] veth0_vlan: left promiscuous mode
[  300.249998][T16460] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4126'.
[  300.372770][ T8269] team0 (unregistering): Port device team_slave_0 removed
[  300.409145][T16482] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4126'.
[  300.452914][T16482] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  300.460374][T16482] batman_adv: batadv0: Removing interface: batadv_slave_0
[  300.483166][T16482] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  300.490773][T16482] batman_adv: batadv0: Removing interface: batadv_slave_1
[  300.622957][T16502] loop9: detected capacity change from 0 to 1024
[  300.640024][T16396] chnl_net:caif_netlink_parms(): no params data found
[  300.669707][T16502] EXT4-fs (loop9): bad geometry: first data block is 0 with a 1k block and cluster size
[  300.771377][T16515] FAULT_INJECTION: forcing a failure.
[  300.771377][T16515] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  300.785659][T16515] CPU: 1 UID: 0 PID: 16515 Comm: syz.2.4136 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  300.785704][T16515] Tainted: [W]=WARN
[  300.785775][T16515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  300.785793][T16515] Call Trace:
[  300.785801][T16515]  <TASK>
[  300.785868][T16515]  __dump_stack+0x1d/0x30
[  300.785895][T16515]  dump_stack_lvl+0x95/0xd0
[  300.785917][T16515]  dump_stack+0x15/0x1b
[  300.785967][T16515]  should_fail_ex+0x265/0x280
[  300.786002][T16515]  should_fail+0xb/0x20
[  300.786046][T16515]  should_fail_usercopy+0x1a/0x20
[  300.786102][T16515]  _copy_from_iter+0xcf/0xe70
[  300.786208][T16515]  ? __alloc_skb+0x396/0x4b0
[  300.786241][T16515]  ? __alloc_skb+0x228/0x4b0
[  300.786278][T16515]  netlink_sendmsg+0x471/0x6b0
[  300.786326][T16515]  ? __pfx_netlink_sendmsg+0x10/0x10
[  300.786406][T16515]  __sock_sendmsg+0x145/0x180
[  300.786499][T16515]  ____sys_sendmsg+0x345/0x4a0
[  300.786542][T16515]  ___sys_sendmsg+0x17b/0x1d0
[  300.786589][T16515]  __sys_sendmmsg+0x178/0x300
[  300.786642][T16515]  __x64_sys_sendmmsg+0x57/0x70
[  300.786714][T16515]  x64_sys_call+0x1e28/0x3000
[  300.786745][T16515]  do_syscall_64+0xca/0x2b0
[  300.786829][T16515]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.786867][T16515] RIP: 0033:0x7f3fc15df749
[  300.786964][T16515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  300.786998][T16515] RSP: 002b:00007f3fc003f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  300.787024][T16515] RAX: ffffffffffffffda RBX: 00007f3fc1835fa0 RCX: 00007f3fc15df749
[  300.787040][T16515] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003
[  300.787055][T16515] RBP: 00007f3fc003f090 R08: 0000000000000000 R09: 0000000000000000
[  300.787147][T16515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  300.787164][T16515] R13: 00007f3fc1836038 R14: 00007f3fc1835fa0 R15: 00007fff0d62e798
[  300.787190][T16515]  </TASK>
[  300.989180][T16396] bridge0: port 1(bridge_slave_0) entered blocking state
[  300.996303][T16396] bridge0: port 1(bridge_slave_0) entered disabled state
[  301.009764][T16396] bridge_slave_0: entered allmulticast mode
[  301.016819][T16396] bridge_slave_0: entered promiscuous mode
[  301.024806][T16396] bridge0: port 2(bridge_slave_1) entered blocking state
[  301.031905][T16396] bridge0: port 2(bridge_slave_1) entered disabled state
[  301.040828][T16396] bridge_slave_1: entered allmulticast mode
[  301.049904][T16396] bridge_slave_1: entered promiscuous mode
[  301.178506][T16396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  301.217648][T16396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  301.306323][T16396] team0: Port device team_slave_0 added
[  301.329906][T16396] team0: Port device team_slave_1 added
[  301.392598][T16396] batman_adv: batadv0: Adding interface: batadv_slave_0
[  301.399677][T16396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  301.425678][T16396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  301.518458][T16572] program syz.9.4144 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  301.546336][T16396] batman_adv: batadv0: Adding interface: batadv_slave_1
[  301.553434][T16396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  301.579471][T16396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  301.597669][T16576] loop9: detected capacity change from 0 to 512
[  301.625472][T16576] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  301.638013][T16576] EXT4-fs (loop9): orphan cleanup on readonly fs
[  301.651698][T16576] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.4144: corrupted inode contents
[  301.678308][T16576] EXT4-fs (loop9): Remounting filesystem read-only
[  301.691363][T16576] EXT4-fs (loop9): 1 truncate cleaned up
[  301.700159][ T8297] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  301.710827][ T8297] __quota_error: 474 callbacks suppressed
[  301.710842][ T8297] Quota error (device loop9): write_blk: dquota write failed
[  301.724256][ T8297] Quota error (device loop9): remove_free_dqentry: Can't write block (5) with free entries
[  301.734349][ T8297] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  301.744915][ T8297] Quota error (device loop9): write_blk: dquota write failed
[  301.752340][ T8297] Quota error (device loop9): free_dqentry: Can't move quota data block (5) to free list
[  301.871215][T16396] hsr_slave_0: entered promiscuous mode
[  301.883116][T16396] hsr_slave_1: entered promiscuous mode
[  301.891254][ T8297] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started
[  301.901566][ T8297] Quota error (device loop9): v2_write_file_info: Can't write info structure
[  301.950139][ T8297] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  302.040213][T16576] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  302.118088][T15998] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  302.274825][T16612] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4150'.
[  302.289196][   T29] audit: type=1326 audit(1768203618.272:51302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16609 comm="syz.8.4149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0b4af749 code=0x7ffc0000
[  302.302724][T16612] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4150'.
[  302.321782][T16612] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4150'.
[  302.344477][T16564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4143'.
[  302.354532][T16564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4143'.
[  302.413631][   T29] audit: type=1326 audit(1768203618.302:51303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16609 comm="syz.8.4149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9c0b4af749 code=0x7ffc0000
[  302.437390][   T29] audit: type=1326 audit(1768203618.302:51304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16609 comm="syz.8.4149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0b4af749 code=0x7ffc0000
[  302.461987][   T29] audit: type=1326 audit(1768203618.302:51305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16609 comm="syz.8.4149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f9c0b4af749 code=0x7ffc0000
[  302.528734][T16396] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  302.583861][T16396] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  302.595397][T16396] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  302.605011][T16396] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  302.675658][T16632] loop9: detected capacity change from 0 to 1024
[  302.697119][T16632] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  302.764705][T16636] loop2: detected capacity change from 0 to 1024
[  302.772136][T16636] EXT4-fs: Ignoring removed oldalloc option
[  302.783041][T16636] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  302.865195][T16636] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  302.998140][T16396] 8021q: adding VLAN 0 to HW filter on device bond0
[  303.059828][T16396] 8021q: adding VLAN 0 to HW filter on device team0
[  303.084292][ T8297] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.091475][ T8297] bridge0: port 1(bridge_slave_0) entered forwarding state
[  303.140666][T16396] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  303.151134][T16396] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  303.174253][ T8297] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.181383][ T8297] bridge0: port 2(bridge_slave_1) entered forwarding state
[  303.394109][T16396] 8021q: adding VLAN 0 to HW filter on device batadv0
[  303.636384][T16396] veth0_vlan: entered promiscuous mode
[  303.662350][T16396] veth1_vlan: entered promiscuous mode
[  303.717808][T16396] veth0_macvtap: entered promiscuous mode
[  303.746142][T16396] veth1_macvtap: entered promiscuous mode
[  303.786311][T16396] batman_adv: batadv0: Interface activated: batadv_slave_0
[  303.819720][T16396] batman_adv: batadv0: Interface activated: batadv_slave_1
[  303.830404][T16159] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  303.864684][ T8297] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  303.912055][ T8297] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  303.952592][ T8297] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  303.997367][ T8297] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  304.029675][T16702] xt_hashlimit: max too large, truncated to 1048576
[  304.071183][T16702] xt_CT: You must specify a L4 protocol and not use inversions on it
[  304.219477][T16711] loop9: detected capacity change from 0 to 1024
[  304.249750][T16711] EXT4-fs (loop9): bad geometry: first data block is 0 with a 1k block and cluster size
[  304.377613][T16719] loop0: detected capacity change from 0 to 512
[  304.388022][T16720] __nla_validate_parse: 5 callbacks suppressed
[  304.388037][T16720] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4168'.
[  304.418327][T16719] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4170: bg 0: block 167: padding at end of block bitmap is not set
[  304.436972][T16719] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.4170: corrupted inode contents
[  304.481051][T16719] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  304.496114][T16719] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.4170: corrupted inode contents
[  304.509891][T16719] EXT4-fs error (device loop0): ext4_evict_inode:301: inode #15: comm syz.0.4170: mark_inode_dirty error
[  304.521875][T16719] EXT4-fs (loop0): 1 orphan inode deleted
[  304.528336][T16719] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  304.569978][T16396] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  304.603182][T16734] loop0: detected capacity change from 0 to 512
[  304.628320][T16734] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  304.642758][T16734] EXT4-fs (loop0): orphan cleanup on readonly fs
[  304.659145][T16734] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.4175: corrupted inode contents
[  304.684895][T16734] EXT4-fs (loop0): Remounting filesystem read-only
[  304.691661][T16734] EXT4-fs (loop0): 1 truncate cleaned up
[  304.697698][ T8321] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  304.709204][ T8321] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  304.723792][ T8321] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[  304.735033][T16734] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  304.782156][T16396] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  304.860502][T16745] loop9: detected capacity change from 0 to 128
[  304.881292][T16745] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  304.902039][T16745] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  304.957969][T15998] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  305.047983][T16751] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4179'.
[  305.186008][T16763] loop9: detected capacity change from 0 to 1024
[  305.209233][T16763] EXT4-fs (loop9): bad geometry: first data block is 0 with a 1k block and cluster size
[  305.334784][T16774] loop8: detected capacity change from 0 to 256
[  305.348461][T16772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4187'.
[  305.428897][T16778] FAULT_INJECTION: forcing a failure.
[  305.428897][T16778] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  305.442123][T16778] CPU: 0 UID: 0 PID: 16778 Comm: syz.8.4190 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  305.442179][T16778] Tainted: [W]=WARN
[  305.442188][T16778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  305.442204][T16778] Call Trace:
[  305.442213][T16778]  <TASK>
[  305.442223][T16778]  __dump_stack+0x1d/0x30
[  305.442254][T16778]  dump_stack_lvl+0x95/0xd0
[  305.442328][T16778]  dump_stack+0x15/0x1b
[  305.442349][T16778]  should_fail_ex+0x265/0x280
[  305.442376][T16778]  should_fail+0xb/0x20
[  305.442399][T16778]  should_fail_usercopy+0x1a/0x20
[  305.442435][T16778]  _copy_from_user+0x1c/0xb0
[  305.442564][T16778]  ___sys_sendmsg+0xc1/0x1d0
[  305.442610][T16778]  __x64_sys_sendmsg+0xd4/0x160
[  305.442650][T16778]  x64_sys_call+0x17ba/0x3000
[  305.442681][T16778]  do_syscall_64+0xca/0x2b0
[  305.442771][T16778]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.442793][T16778] RIP: 0033:0x7f9c0b4af749
[  305.442809][T16778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  305.442840][T16778] RSP: 002b:00007f9c09f0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  305.442920][T16778] RAX: ffffffffffffffda RBX: 00007f9c0b705fa0 RCX: 00007f9c0b4af749
[  305.442937][T16778] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  305.442954][T16778] RBP: 00007f9c09f0f090 R08: 0000000000000000 R09: 0000000000000000
[  305.442968][T16778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  305.442981][T16778] R13: 00007f9c0b706038 R14: 00007f9c0b705fa0 R15: 00007ffff2577d58
[  305.443015][T16778]  </TASK>
[  305.648333][T16776] bridge_slave_0: left allmulticast mode
[  305.654075][T16776] bridge_slave_0: left promiscuous mode
[  305.659878][T16776] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.681892][T16776] bridge_slave_1: left allmulticast mode
[  305.688791][T16776] bridge_slave_1: left promiscuous mode
[  305.695340][T16776] bridge0: port 2(bridge_slave_1) entered disabled state
[  305.737319][T16776] bond0: (slave bond_slave_0): Releasing backup interface
[  305.765155][T16776] bond0: (slave bond_slave_1): Releasing backup interface
[  305.794867][T16776] team0: Port device team_slave_0 removed
[  305.826421][T16776] team0: Port device team_slave_1 removed
[  305.846309][T16776] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  305.854281][T16776] batman_adv: batadv0: Removing interface: batadv_slave_0
[  305.865331][T16776] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  305.872844][T16776] batman_adv: batadv0: Removing interface: batadv_slave_1
[  305.885486][T16797] xt_CT: You must specify a L4 protocol and not use inversions on it
[  305.887219][T16776] net_ratelimit: 30 callbacks suppressed
[  305.887258][T16776] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  305.993846][T16800] loop8: detected capacity change from 0 to 512
[  306.025188][T16800] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4197: bg 0: block 167: padding at end of block bitmap is not set
[  306.093470][T16810] FAULT_INJECTION: forcing a failure.
[  306.093470][T16810] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  306.101444][T16800] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.4197: corrupted inode contents
[  306.106965][T16810] CPU: 0 UID: 0 PID: 16810 Comm: syz.9.4200 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  306.107077][T16810] Tainted: [W]=WARN
[  306.107110][T16810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  306.107153][T16810] Call Trace:
[  306.107175][T16810]  <TASK>
[  306.107210][T16810]  __dump_stack+0x1d/0x30
[  306.107295][T16810]  dump_stack_lvl+0x95/0xd0
[  306.107417][T16810]  dump_stack+0x15/0x1b
[  306.107490][T16810]  should_fail_ex+0x265/0x280
[  306.107616][T16810]  should_fail+0xb/0x20
[  306.107681][T16810]  should_fail_usercopy+0x1a/0x20
[  306.107784][T16810]  _copy_from_user+0x1c/0xb0
[  306.107867][T16810]  ___sys_sendmsg+0xc1/0x1d0
[  306.108032][T16810]  __x64_sys_sendmsg+0xd4/0x160
[  306.108066][T16810]  x64_sys_call+0x17ba/0x3000
[  306.108121][T16810]  do_syscall_64+0xca/0x2b0
[  306.108368][T16810]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.108461][T16810] RIP: 0033:0x7f9336faf749
[  306.108548][T16810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  306.108620][T16810] RSP: 002b:00007f9335a0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  306.108694][T16810] RAX: ffffffffffffffda RBX: 00007f9337205fa0 RCX: 00007f9336faf749
[  306.108745][T16810] RDX: 0000000000004014 RSI: 0000200000000000 RDI: 0000000000000003
[  306.108848][T16810] RBP: 00007f9335a0f090 R08: 0000000000000000 R09: 0000000000000000
[  306.108892][T16810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  306.108935][T16810] R13: 00007f9337206038 R14: 00007f9337205fa0 R15: 00007fff4c9b3138
[  306.109008][T16810]  </TASK>
[  306.289676][T16800] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem
[  306.298669][T16800] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.4197: corrupted inode contents
[  306.312724][T16800] EXT4-fs error (device loop8): ext4_evict_inode:301: inode #15: comm syz.8.4197: mark_inode_dirty error
[  306.324389][T16800] EXT4-fs (loop8): 1 orphan inode deleted
[  306.330744][T16800] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  306.380143][T15977] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.407943][T16819] FAULT_INJECTION: forcing a failure.
[  306.407943][T16819] name failslab, interval 1, probability 0, space 0, times 0
[  306.420715][T16819] CPU: 1 UID: 0 PID: 16819 Comm: syz.8.4203 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  306.420751][T16819] Tainted: [W]=WARN
[  306.420759][T16819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  306.420833][T16819] Call Trace:
[  306.420841][T16819]  <TASK>
[  306.420849][T16819]  __dump_stack+0x1d/0x30
[  306.420878][T16819]  dump_stack_lvl+0x95/0xd0
[  306.420904][T16819]  dump_stack+0x15/0x1b
[  306.420952][T16819]  should_fail_ex+0x265/0x280
[  306.420974][T16819]  should_failslab+0x8c/0xb0
[  306.420995][T16819]  kmem_cache_alloc_noprof+0x69/0x4b0
[  306.421018][T16819]  ? skb_clone+0x151/0x1f0
[  306.421054][T16819]  skb_clone+0x151/0x1f0
[  306.421159][T16819]  __netlink_deliver_tap+0x2c9/0x500
[  306.421193][T16819]  netlink_unicast+0x66b/0x690
[  306.421228][T16819]  netlink_sendmsg+0x58b/0x6b0
[  306.421270][T16819]  ? __pfx_netlink_sendmsg+0x10/0x10
[  306.421310][T16819]  __sock_sendmsg+0x145/0x180
[  306.421335][T16819]  ____sys_sendmsg+0x345/0x4a0
[  306.421433][T16819]  ___sys_sendmsg+0x17b/0x1d0
[  306.421561][T16819]  __sys_sendmmsg+0x178/0x300
[  306.421610][T16819]  __x64_sys_sendmmsg+0x57/0x70
[  306.421667][T16819]  x64_sys_call+0x1e28/0x3000
[  306.421690][T16819]  do_syscall_64+0xca/0x2b0
[  306.421724][T16819]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.421819][T16819] RIP: 0033:0x7f9c0b4af749
[  306.421834][T16819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  306.421852][T16819] RSP: 002b:00007f9c09f0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  306.421890][T16819] RAX: ffffffffffffffda RBX: 00007f9c0b705fa0 RCX: 00007f9c0b4af749
[  306.421907][T16819] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003
[  306.421924][T16819] RBP: 00007f9c09f0f090 R08: 0000000000000000 R09: 0000000000000000
[  306.421940][T16819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  306.422027][T16819] R13: 00007f9c0b706038 R14: 00007f9c0b705fa0 R15: 00007ffff2577d58
[  306.422049][T16819]  </TASK>
[  306.665035][T16826] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4206'.
[  306.689473][T16826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4206'.
[  306.724520][T16826] team0: Port device team_slave_0 removed
[  306.728635][T16830] netlink: 'syz.4.4207': attribute type 13 has an invalid length.
[  306.732115][   T29] kauditd_printk_skb: 1649 callbacks suppressed
[  306.732156][   T29] audit: type=1326 audit(1768203622.712:52949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16807 comm="syz.0.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f90c0702005 code=0x7ffc0000
[  306.773487][   T29] audit: type=1326 audit(1768203622.762:52950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16807 comm="syz.0.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f90c0702005 code=0x7ffc0000
[  306.797553][   T29] audit: type=1326 audit(1768203622.782:52951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16807 comm="syz.0.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f90c0702005 code=0x7ffc0000
[  306.822944][   T29] audit: type=1326 audit(1768203622.812:52952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16807 comm="syz.0.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f90c0702005 code=0x7ffc0000
[  306.846922][   T29] audit: type=1326 audit(1768203622.832:52953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16807 comm="syz.0.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f90c0702005 code=0x7ffc0000
[  306.872332][   T29] audit: type=1326 audit(1768203622.862:52954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16807 comm="syz.0.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f90c0702005 code=0x7ffc0000
[  306.951701][   T29] audit: type=1326 audit(1768203622.882:52955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16807 comm="syz.0.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f90c0702005 code=0x7ffc0000
[  306.976799][   T29] audit: type=1326 audit(1768203622.882:52956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16807 comm="syz.0.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f90c06cf749 code=0x7ffc0000
[  307.000558][   T29] audit: type=1326 audit(1768203622.882:52957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16807 comm="syz.0.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f90c06cf749 code=0x7ffc0000
[  307.100438][T16844] xt_hashlimit: invalid interval
[  307.120047][   T29] audit: type=1400 audit(1768203623.102:52958): avc:  denied  { bind } for  pid=16843 comm="syz.2.4213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  307.416781][T16856] loop2: detected capacity change from 0 to 1024
[  307.471695][T16856] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  307.486738][T16856] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  307.507127][T16851] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: comm syz.2.4213: lblock 0 mapped to illegal pblock 0 (length 6)
[  307.520972][T16851] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  307.534305][T16851] EXT4-fs (loop2): This should not happen!! Data will be lost
[  307.534305][T16851] 
[  307.821473][ T8286] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  307.839301][ T8286] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  307.851987][ T8286] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  307.861598][ T8286] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  307.894733][T16644] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  308.117366][T16879] FAULT_INJECTION: forcing a failure.
[  308.117366][T16879] name failslab, interval 1, probability 0, space 0, times 0
[  308.130190][T16879] CPU: 1 UID: 0 PID: 16879 Comm: syz.9.4221 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  308.130232][T16879] Tainted: [W]=WARN
[  308.130241][T16879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  308.130309][T16879] Call Trace:
[  308.130316][T16879]  <TASK>
[  308.130326][T16879]  __dump_stack+0x1d/0x30
[  308.130360][T16879]  dump_stack_lvl+0x95/0xd0
[  308.130388][T16879]  dump_stack+0x15/0x1b
[  308.130413][T16879]  should_fail_ex+0x265/0x280
[  308.130508][T16879]  should_failslab+0x8c/0xb0
[  308.130531][T16879]  kmem_cache_alloc_noprof+0x69/0x4b0
[  308.130553][T16879]  ? skb_clone+0x151/0x1f0
[  308.130592][T16879]  skb_clone+0x151/0x1f0
[  308.130692][T16879]  __netlink_deliver_tap+0x2c9/0x500
[  308.130796][T16879]  netlink_unicast+0x66b/0x690
[  308.130891][T16879]  netlink_sendmsg+0x58b/0x6b0
[  308.130969][T16879]  ? __pfx_netlink_sendmsg+0x10/0x10
[  308.131010][T16879]  __sock_sendmsg+0x145/0x180
[  308.131037][T16879]  ____sys_sendmsg+0x31e/0x4a0
[  308.131117][T16879]  ___sys_sendmsg+0x17b/0x1d0
[  308.131173][T16879]  __x64_sys_sendmsg+0xd4/0x160
[  308.131234][T16879]  x64_sys_call+0x17ba/0x3000
[  308.131318][T16879]  do_syscall_64+0xca/0x2b0
[  308.131408][T16879]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.131437][T16879] RIP: 0033:0x7f9336faf749
[  308.131455][T16879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  308.131479][T16879] RSP: 002b:00007f9335a0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  308.131501][T16879] RAX: ffffffffffffffda RBX: 00007f9337205fa0 RCX: 00007f9336faf749
[  308.131546][T16879] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003
[  308.131559][T16879] RBP: 00007f9335a0f090 R08: 0000000000000000 R09: 0000000000000000
[  308.131571][T16879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  308.131646][T16879] R13: 00007f9337206038 R14: 00007f9337205fa0 R15: 00007fff4c9b3138
[  308.131667][T16879]  </TASK>
[  308.348323][ T2347] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:12: lblock 8 mapped to illegal pblock 8 (length 8)
[  308.395818][T16884] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4224'.
[  308.405768][ T2347] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  308.418198][ T2347] EXT4-fs (loop2): This should not happen!! Data will be lost
[  308.418198][ T2347] 
[  308.451103][T16884] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4224'.
[  308.511448][T16159] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  308.565868][T16889] loop9: detected capacity change from 0 to 1024
[  308.574165][T16889] EXT4-fs (loop9): bad geometry: first data block is 0 with a 1k block and cluster size
[  308.916696][T16910] netlink: 56 bytes leftover after parsing attributes in process `syz.8.4232'.
[  308.944845][T16910] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4232'.
[  309.039520][ T2347] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  309.057070][ T2347] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  309.126698][ T2347] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  309.177923][ T2347] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  309.355918][T16933] loop0: detected capacity change from 0 to 512
[  309.370961][T16933] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4240: bg 0: block 167: padding at end of block bitmap is not set
[  309.423612][T16933] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.4240: corrupted inode contents
[  309.442814][T16933] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  309.463706][T16933] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.4240: corrupted inode contents
[  309.475859][T16933] EXT4-fs error (device loop0): ext4_evict_inode:301: inode #15: comm syz.0.4240: mark_inode_dirty error
[  309.487598][T16933] EXT4-fs (loop0): 1 orphan inode deleted
[  309.493872][T16933] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  309.520309][T16396] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  309.537655][T16937] loop8: detected capacity change from 0 to 128
[  309.550188][T16937] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  309.595998][T16937] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  309.694324][ T2347] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  309.706029][T16943] loop0: detected capacity change from 0 to 1024
[  309.724309][T16943] EXT4-fs (loop0): bad geometry: first data block is 0 with a 1k block and cluster size
[  309.906227][T16955] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4248'.
[  309.979929][T16949] loop8: detected capacity change from 0 to 1024
[  309.984944][T16959] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4250'.
[  310.030709][T16959] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4250'.
[  310.048024][T16949] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  310.156413][T15977] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.312606][T16978] netlink: 'syz.4.4251': attribute type 39 has an invalid length.
[  310.509532][T16987] loop8: detected capacity change from 0 to 512
[  310.525707][T16987] EXT4-fs: dax option not supported
[  311.164706][T17027] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  311.172166][T17027] batman_adv: batadv0: Removing interface: batadv_slave_0
[  311.213658][T17027] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  311.221125][T17027] batman_adv: batadv0: Removing interface: batadv_slave_1
[  311.254924][T17030] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4275'.
[  311.263991][T17030] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4275'.
[  311.273070][T17030] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4275'.
[  311.282161][T17030] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4275'.
[  311.296116][T17037] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  311.359009][T17041] loop2: detected capacity change from 0 to 512
[  311.372801][T17041] EXT4-fs: dax option not supported
[  311.733351][   T29] kauditd_printk_skb: 1208 callbacks suppressed
[  311.733367][   T29] audit: type=1326 audit(1768203627.722:54167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17033 comm="syz.9.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9336fe2005 code=0x7ffc0000
[  311.770396][   T29] audit: type=1326 audit(1768203627.722:54168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17033 comm="syz.9.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9336fe2005 code=0x7ffc0000
[  311.795087][   T29] audit: type=1326 audit(1768203627.722:54169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17033 comm="syz.9.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9336fe2005 code=0x7ffc0000
[  311.818702][   T29] audit: type=1326 audit(1768203627.722:54170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17033 comm="syz.9.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9336fe2005 code=0x7ffc0000
[  311.843333][   T29] audit: type=1326 audit(1768203627.722:54171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17033 comm="syz.9.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9336fe2005 code=0x7ffc0000
[  311.870480][   T29] audit: type=1326 audit(1768203627.722:54172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17033 comm="syz.9.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9336fe2005 code=0x7ffc0000
[  311.896104][   T29] audit: type=1326 audit(1768203627.722:54173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17033 comm="syz.9.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9336fe2005 code=0x7ffc0000
[  311.919714][   T29] audit: type=1326 audit(1768203627.722:54174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17033 comm="syz.9.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9336fe2005 code=0x7ffc0000
[  311.944354][   T29] audit: type=1326 audit(1768203627.732:54175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17033 comm="syz.9.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9336fe2005 code=0x7ffc0000
[  311.967976][   T29] audit: type=1326 audit(1768203627.732:54176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17033 comm="syz.9.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9336fe2005 code=0x7ffc0000
[  312.117311][T17066] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  312.235153][T17075] loop2: detected capacity change from 0 to 512
[  312.275057][T17075] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  312.317006][T17075] EXT4-fs (loop2): orphan cleanup on readonly fs
[  312.336985][T17075] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.4290: corrupted inode contents
[  312.358697][T17075] EXT4-fs (loop2): Remounting filesystem read-only
[  312.368486][T17081] netlink: 4860 bytes leftover after parsing attributes in process `syz.9.4292'.
[  312.385844][T17075] EXT4-fs (loop2): 1 truncate cleaned up
[  312.391688][ T8297] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  312.402353][ T8297] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  312.468789][ T8297] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[  312.494979][T17075] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  312.579910][T16159] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.027111][T17119] FAULT_INJECTION: forcing a failure.
[  313.027111][T17119] name failslab, interval 1, probability 0, space 0, times 0
[  313.040625][T17119] CPU: 1 UID: 0 PID: 17119 Comm: syz.8.4306 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  313.040662][T17119] Tainted: [W]=WARN
[  313.040668][T17119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  313.040760][T17119] Call Trace:
[  313.040773][T17119]  <TASK>
[  313.040782][T17119]  __dump_stack+0x1d/0x30
[  313.040811][T17119]  dump_stack_lvl+0x95/0xd0
[  313.040837][T17119]  dump_stack+0x15/0x1b
[  313.040856][T17119]  should_fail_ex+0x265/0x280
[  313.040887][T17119]  should_failslab+0x8c/0xb0
[  313.040913][T17119]  __kmalloc_cache_noprof+0x65/0x4c0
[  313.040942][T17119]  ? rtnl_newlink+0x5c/0x1360
[  313.040978][T17119]  ? __pfx_rtnl_newlink+0x10/0x10
[  313.041051][T17119]  rtnl_newlink+0x5c/0x1360
[  313.041068][T17119]  ? css_rstat_updated+0xbb/0x280
[  313.041242][T17119]  ? css_rstat_updated+0xbb/0x280
[  313.041281][T17119]  ? refill_stock+0x32f/0x390
[  313.041452][T17119]  ? page_counter_cancel+0xb3/0x1b0
[  313.041487][T17119]  ? __rcu_read_unlock+0x4f/0x70
[  313.041510][T17119]  ? perf_event_read_local+0x47d/0x4b0
[  313.041538][T17119]  ? xas_load+0x413/0x430
[  313.041575][T17119]  ? xas_load+0x413/0x430
[  313.041731][T17119]  ? skb_network_protocol+0x329/0x420
[  313.041838][T17119]  ? __rcu_read_unlock+0x4f/0x70
[  313.041862][T17119]  ? __rcu_read_unlock+0x4f/0x70
[  313.041929][T17119]  ? avc_has_perm_noaudit+0xab/0x130
[  313.041971][T17119]  ? cred_has_capability+0x210/0x280
[  313.042067][T17119]  ? selinux_capable+0x31/0x40
[  313.042105][T17119]  ? security_capable+0x83/0x90
[  313.042143][T17119]  ? ns_capable+0x7d/0xb0
[  313.042220][T17119]  ? __pfx_rtnl_newlink+0x10/0x10
[  313.042241][T17119]  rtnetlink_rcv_msg+0x5fe/0x6d0
[  313.042302][T17119]  netlink_rcv_skb+0x123/0x220
[  313.042393][T17119]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  313.042423][T17119]  rtnetlink_rcv+0x1c/0x30
[  313.042438][T17119]  netlink_unicast+0x5c0/0x690
[  313.042470][T17119]  netlink_sendmsg+0x58b/0x6b0
[  313.042508][T17119]  ? __pfx_netlink_sendmsg+0x10/0x10
[  313.042546][T17119]  __sock_sendmsg+0x145/0x180
[  313.042569][T17119]  ____sys_sendmsg+0x31e/0x4a0
[  313.042679][T17119]  ___sys_sendmsg+0x17b/0x1d0
[  313.042723][T17119]  __x64_sys_sendmsg+0xd4/0x160
[  313.042752][T17119]  x64_sys_call+0x17ba/0x3000
[  313.042798][T17119]  do_syscall_64+0xca/0x2b0
[  313.042840][T17119]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.042866][T17119] RIP: 0033:0x7f9c0b4af749
[  313.042881][T17119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  313.042987][T17119] RSP: 002b:00007f9c09f0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  313.043012][T17119] RAX: ffffffffffffffda RBX: 00007f9c0b705fa0 RCX: 00007f9c0b4af749
[  313.043028][T17119] RDX: 0000000008000002 RSI: 0000200000000080 RDI: 0000000000000005
[  313.043043][T17119] RBP: 00007f9c09f0f090 R08: 0000000000000000 R09: 0000000000000000
[  313.043055][T17119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  313.043066][T17119] R13: 00007f9c0b706038 R14: 00007f9c0b705fa0 R15: 00007ffff2577d58
[  313.043132][T17119]  </TASK>
[  313.370956][T17123] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4305'.
[  313.444491][T17129] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  313.513398][T17129] loop9: detected capacity change from 0 to 7
[  313.518113][T17132] gtp0: entered promiscuous mode
[  313.542117][T17134] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4311'.
[  313.631758][T17136] Invalid logical block size (1)
[  313.633654][T17129] syzkaller1: entered promiscuous mode
[  313.642262][T17129] syzkaller1: entered allmulticast mode
[  313.666449][T17129] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.739186][T17129] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.787162][T17129] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.845932][T17129] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.952009][ T8297] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  313.983013][ T8297] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  314.017255][ T8297] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  314.029346][ T8297] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  314.188085][T17179] loop2: detected capacity change from 0 to 512
[  314.204849][T17179] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  314.228851][T17179] EXT4-fs (loop2): orphan cleanup on readonly fs
[  314.239214][T17179] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.4325: corrupted inode contents
[  314.252089][T17179] EXT4-fs (loop2): Remounting filesystem read-only
[  314.260666][T17179] EXT4-fs (loop2): 1 truncate cleaned up
[  314.267045][ T8297] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  314.277703][ T8297] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  314.288755][ T8297] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[  314.299644][T17179] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  314.325943][T16159] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.371994][T17193] loop9: detected capacity change from 0 to 512
[  314.386703][T17195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  314.395482][T17193] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4333: bg 0: block 167: padding at end of block bitmap is not set
[  314.415895][T17195] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  314.425781][T17193] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.4333: corrupted inode contents
[  314.445670][T17193] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem
[  314.454741][T17193] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.4333: corrupted inode contents
[  314.467355][T17193] EXT4-fs error (device loop9): ext4_evict_inode:301: inode #15: comm syz.9.4333: mark_inode_dirty error
[  314.480326][T17193] EXT4-fs (loop9): 1 orphan inode deleted
[  314.487824][T17193] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  314.520808][T15998] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.776765][T17230] loop9: detected capacity change from 0 to 512
[  314.788927][T17230] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4346: bg 0: block 167: padding at end of block bitmap is not set
[  314.804634][T17230] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.4346: corrupted inode contents
[  314.816893][T17230] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem
[  314.827472][T17230] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.4346: corrupted inode contents
[  314.839870][T17230] EXT4-fs error (device loop9): ext4_evict_inode:301: inode #15: comm syz.9.4346: mark_inode_dirty error
[  314.851562][T17230] EXT4-fs (loop9): 1 orphan inode deleted
[  314.858159][T17230] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  314.890610][T15998] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  315.159552][T17254] __nla_validate_parse: 8 callbacks suppressed
[  315.159630][T17254] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4357'.
[  315.216423][T17254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4357'.
[  315.233742][T17258] loop9: detected capacity change from 0 to 512
[  315.243175][T17258] EXT4-fs: dax option not supported
[  315.450375][T17273] bridge_slave_0: left allmulticast mode
[  315.456261][T17273] bridge_slave_0: left promiscuous mode
[  315.461974][T17273] bridge0: port 1(bridge_slave_0) entered disabled state
[  315.492249][T17273] bridge_slave_1: left allmulticast mode
[  315.498154][T17273] bridge_slave_1: left promiscuous mode
[  315.504862][T17273] bridge0: port 2(bridge_slave_1) entered disabled state
[  315.520047][T17273] bond0: (slave bond_slave_0): Releasing backup interface
[  315.549440][T17273] bond0: (slave bond_slave_1): Releasing backup interface
[  315.568097][T17282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  315.578428][T17282] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  315.598323][T17273] team0: Port device team_slave_0 removed
[  315.611112][T17273] team0: Port device team_slave_1 removed
[  315.624173][T17273] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  315.631734][T17273] batman_adv: batadv0: Removing interface: batadv_slave_0
[  315.643583][T17273] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  315.651061][T17273] batman_adv: batadv0: Removing interface: batadv_slave_1
[  315.662044][T17273] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  315.807206][T17287] bridge_slave_0: left allmulticast mode
[  315.812955][T17287] bridge_slave_0: left promiscuous mode
[  315.818675][T17287] bridge0: port 1(bridge_slave_0) entered disabled state
[  315.831236][T17287] bridge_slave_1: left allmulticast mode
[  315.837014][T17287] bridge_slave_1: left promiscuous mode
[  315.842751][T17287] bridge0: port 2(bridge_slave_1) entered disabled state
[  315.854449][T17287] bond0: (slave bond_slave_0): Releasing backup interface
[  315.864482][T17296] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4371'.
[  315.874007][T17287] bond0: (slave bond_slave_1): Releasing backup interface
[  315.897017][T17287] team0: Port device team_slave_1 removed
[  315.907356][T17287] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  315.963773][T17302] loop2: detected capacity change from 0 to 128
[  315.976789][T17302] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  315.993540][T17302] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  316.057122][T16159] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  316.262763][T17307] netlink: 'syz.4.4375': attribute type 39 has an invalid length.
[  316.294793][T17317] loop0: detected capacity change from 0 to 1024
[  316.314837][T17319] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4379'.
[  316.327797][T17317] EXT4-fs (loop0): bad geometry: first data block is 0 with a 1k block and cluster size
[  316.718691][T17343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  316.739797][T17343] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  316.777717][   T29] kauditd_printk_skb: 1214 callbacks suppressed
[  316.777762][   T29] audit: type=1400 audit(1768203632.762:55379): avc:  denied  { mounton } for  pid=17344 comm="syz.4.4389" path="/60/file0" dev="tmpfs" ino=323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  316.831207][T17346] netlink: 'syz.4.4389': attribute type 33 has an invalid length.
[  316.839194][T17346] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4389'.
[  316.922274][ T3486] Process accounting resumed
[  316.980790][T17354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4389'.
[  317.088521][T17356] loop9: detected capacity change from 0 to 764
[  317.193138][T17356] rock: directory entry would overflow storage
[  317.199354][T17356] rock: sig=0x4654, size=5, remaining=4
[  317.213322][   T29] audit: type=1400 audit(1768203633.192:55380): avc:  denied  { mount } for  pid=17355 comm="syz.9.4392" name="/" dev="loop9" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[  317.256013][   T29] audit: type=1400 audit(1768203633.202:55381): avc:  denied  { unmount } for  pid=15998 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[  317.306652][T17361] loop9: detected capacity change from 0 to 512
[  317.336716][T17361] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4394: bg 0: block 167: padding at end of block bitmap is not set
[  317.371582][T17361] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.4394: corrupted inode contents
[  317.384955][T17361] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem
[  317.395436][T17361] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.4394: corrupted inode contents
[  317.407661][T17361] EXT4-fs error (device loop9): ext4_evict_inode:301: inode #15: comm syz.9.4394: mark_inode_dirty error
[  317.438184][T17361] EXT4-fs (loop9): 1 orphan inode deleted
[  317.453331][T17361] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  317.481864][T15998] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.504192][   T29] audit: type=1326 audit(1768203633.492:55382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17366 comm="syz.0.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c06cf749 code=0x7ffc0000
[  317.545977][T17370] loop2: detected capacity change from 0 to 128
[  317.563151][T17370] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  317.580449][   T29] audit: type=1326 audit(1768203633.512:55383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17366 comm="syz.0.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c06cf749 code=0x7ffc0000
[  317.591247][T17370] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  317.606789][   T29] audit: type=1326 audit(1768203633.512:55384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17366 comm="syz.0.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c06cf749 code=0x7ffc0000
[  317.638943][   T29] audit: type=1326 audit(1768203633.512:55385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17366 comm="syz.0.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f90c06cf749 code=0x7ffc0000
[  317.663543][   T29] audit: type=1326 audit(1768203633.512:55386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17366 comm="syz.0.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c06cf749 code=0x7ffc0000
[  317.687153][   T29] audit: type=1326 audit(1768203633.512:55387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17366 comm="syz.0.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c06cf749 code=0x7ffc0000
[  317.711752][   T29] audit: type=1326 audit(1768203633.512:55388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17366 comm="syz.0.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c06cf749 code=0x7ffc0000
[  317.748900][T16159] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  317.814168][T17382] netlink: 'syz.8.4402': attribute type 39 has an invalid length.
[  317.829977][T17379] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4401: bg 0: block 167: padding at end of block bitmap is not set
[  317.856095][T17379] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.4401: corrupted inode contents
[  317.869549][T17379] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  317.879785][T17379] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.4401: corrupted inode contents
[  317.892187][T17379] EXT4-fs error (device loop0): ext4_evict_inode:301: inode #15: comm syz.0.4401: mark_inode_dirty error
[  317.904982][T17379] EXT4-fs (loop0): 1 orphan inode deleted
[  317.911660][T17379] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  318.000888][T16396] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  318.020975][T17388] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17388 comm=syz.8.4404
[  318.097344][T17397] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4407: bg 0: block 167: padding at end of block bitmap is not set
[  318.135062][T17397] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.4407: corrupted inode contents
[  318.232229][T17397] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem
[  318.258725][T17397] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.4407: corrupted inode contents
[  318.315629][T17397] EXT4-fs error (device loop9): ext4_evict_inode:301: inode #15: comm syz.9.4407: mark_inode_dirty error
[  318.345945][T17397] EXT4-fs (loop9): 1 orphan inode deleted
[  318.357990][T17397] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  318.428155][T15998] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  318.460947][T17409] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  318.487407][T17409] EXT4-fs (loop0): orphan cleanup on readonly fs
[  318.501539][T17409] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.4411: corrupted inode contents
[  318.515167][T17409] EXT4-fs (loop0): Remounting filesystem read-only
[  318.522256][T17409] EXT4-fs (loop0): 1 truncate cleaned up
[  318.528300][ T2549] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  318.538933][ T2549] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  318.589525][ T2549] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[  318.600499][T17409] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  318.646650][T16396] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  318.842049][T17440] SELinux:  policydb version 1287861793 does not match my version range 15-35
[  318.854575][T17440] SELinux: failed to load policy
[  319.044179][T17450] set_capacity_and_notify: 3 callbacks suppressed
[  319.044198][T17450] loop8: detected capacity change from 0 to 8192
[  319.089076][T17456] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  319.274002][T17465] loop9: detected capacity change from 0 to 512
[  319.290516][T17465] EXT4-fs: dax option not supported
[  319.407587][T17474] netlink: 'syz.2.4435': attribute type 28 has an invalid length.
[  319.785519][T17512] loop0: detected capacity change from 0 to 512
[  319.800818][T17512] EXT4-fs: Ignoring removed i_version option
[  319.816599][T17512] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  320.442362][T17533] loop2: detected capacity change from 0 to 512
[  320.464718][T17533] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4452: bg 0: block 167: padding at end of block bitmap is not set
[  320.488899][T17533] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.4452: corrupted inode contents
[  320.514418][T17533] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  320.532893][T17533] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.4452: corrupted inode contents
[  320.545778][T17538] netlink: 'syz.9.4453': attribute type 39 has an invalid length.
[  320.554185][T17533] EXT4-fs error (device loop2): ext4_evict_inode:301: inode #15: comm syz.2.4452: mark_inode_dirty error
[  320.569512][T17533] EXT4-fs (loop2): 1 orphan inode deleted
[  320.576230][T17533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  320.600691][T16159] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.755623][T17544] loop8: detected capacity change from 0 to 1024
[  320.776183][T17544] EXT4-fs: Ignoring removed mblk_io_submit option
[  320.802582][T17544] ext4: Bad value for 'debug_want_extra_isize'
[  320.948618][T17551] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4459'.
[  320.986988][T17551] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4459'.
[  321.241942][T17576] loop9: detected capacity change from 0 to 1024
[  321.253331][T17576] EXT4-fs (loop9): bad geometry: first data block is 0 with a 1k block and cluster size
[  321.452051][T17594] bridge_slave_0: left allmulticast mode
[  321.457897][T17594] bridge_slave_0: left promiscuous mode
[  321.463639][T17594] bridge0: port 1(bridge_slave_0) entered disabled state
[  321.476481][T17594] bridge_slave_1: left allmulticast mode
[  321.482175][T17594] bridge_slave_1: left promiscuous mode
[  321.487896][T17594] bridge0: port 2(bridge_slave_1) entered disabled state
[  321.501420][T17594] bond0: (slave bond_slave_0): Releasing backup interface
[  321.513755][T17594] bond0: (slave bond_slave_1): Releasing backup interface
[  321.528706][T17594] team0: Port device team_slave_0 removed
[  321.538112][T17594] team0: Port device team_slave_1 removed
[  321.549635][T17594] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  321.785909][T17608] loop0: detected capacity change from 0 to 512
[  321.847599][T17608] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  321.856162][T17608] EXT4-fs (loop0): orphan cleanup on readonly fs
[  321.867848][T17608] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.4475: corrupted inode contents
[  321.880961][T17608] EXT4-fs (loop0): Remounting filesystem read-only
[  321.888912][T17608] EXT4-fs (loop0): 1 truncate cleaned up
[  321.900027][ T8285] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  321.911616][ T8285] __quota_error: 1450 callbacks suppressed
[  321.911634][ T8285] Quota error (device loop0): write_blk: dquota write failed
[  321.924930][ T8285] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries
[  321.935936][ T8285] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  321.946540][ T8285] Quota error (device loop0): write_blk: dquota write failed
[  321.953996][ T8285] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list
[  321.971788][ T8285] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[  321.982050][ T8285] Quota error (device loop0): v2_write_file_info: Can't write info structure
[  322.024544][ T8285] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  322.051566][T17608] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  322.080235][T16396] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  322.099525][T17616] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  322.139472][   T29] audit: type=1326 audit(1768203638.122:56833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17614 comm="syz.4.4477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede765f749 code=0x7ffc0000
[  322.189283][   T29] audit: type=1326 audit(1768203638.152:56834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17614 comm="syz.4.4477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede765f749 code=0x7ffc0000
[  322.213037][   T29] audit: type=1326 audit(1768203638.152:56835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17614 comm="syz.4.4477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fede765f749 code=0x7ffc0000
[  322.236694][   T29] audit: type=1326 audit(1768203638.152:56836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17614 comm="syz.4.4477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede765f749 code=0x7ffc0000
[  322.368945][T17642] loop2: detected capacity change from 0 to 512
[  322.444293][T17642] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  322.482459][T17642] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  322.521014][T17634] netlink: 'syz.9.4482': attribute type 39 has an invalid length.
[  322.572206][T17654] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.4485: iget: bad i_size value: 2533274857506816
[  322.640389][T17656] loop0: detected capacity change from 0 to 512
[  322.680412][T17656] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  322.697681][T17656] EXT4-fs (loop0): orphan cleanup on readonly fs
[  322.722162][T17656] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.4489: corrupted inode contents
[  322.736164][T16159] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  322.769527][T17656] EXT4-fs (loop0): Remounting filesystem read-only
[  322.783866][T17656] EXT4-fs (loop0): 1 truncate cleaned up
[  322.789738][ T2549] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  322.800379][ T2549] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  322.862482][ T2549] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[  322.894665][T17656] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  322.915195][T17665] loop9: detected capacity change from 0 to 512
[  322.990208][T17665] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  323.015440][T17665] EXT4-fs (loop9): orphan cleanup on readonly fs
[  323.023424][T16396] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  323.061225][T17665] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.4492: corrupted inode contents
[  323.119292][T17665] EXT4-fs (loop9): Remounting filesystem read-only
[  323.172887][T17665] EXT4-fs (loop9): 1 truncate cleaned up
[  323.178712][ T8310] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  323.189421][ T8310] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  323.237515][ T8310] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started
[  323.264609][T17665] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  323.300243][T15998] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  323.532375][T17700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  323.554247][T17700] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  323.563685][T17702] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4508'.
[  324.443519][T17724] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  324.495594][T17718] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  324.624015][T17731] FAULT_INJECTION: forcing a failure.
[  324.624015][T17731] name failslab, interval 1, probability 0, space 0, times 0
[  324.636753][T17731] CPU: 0 UID: 0 PID: 17731 Comm: syz.8.4519 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  324.636789][T17731] Tainted: [W]=WARN
[  324.636797][T17731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  324.636812][T17731] Call Trace:
[  324.636820][T17731]  <TASK>
[  324.636829][T17731]  __dump_stack+0x1d/0x30
[  324.636852][T17731]  dump_stack_lvl+0x95/0xd0
[  324.636878][T17731]  dump_stack+0x15/0x1b
[  324.636899][T17731]  should_fail_ex+0x265/0x280
[  324.636921][T17731]  should_failslab+0x8c/0xb0
[  324.636944][T17731]  kmem_cache_alloc_noprof+0x69/0x4b0
[  324.636971][T17731]  ? vm_area_dup+0x33/0x2c0
[  324.636998][T17731]  vm_area_dup+0x33/0x2c0
[  324.637028][T17731]  __split_vma+0xe9/0x660
[  324.637046][T17731]  ? __mpol_equal+0x2e/0x1e0
[  324.637093][T17731]  ? can_vma_merge_right+0xe7/0x310
[  324.637133][T17731]  vma_modify+0xb53/0xd50
[  324.637178][T17731]  vma_modify_policy+0x101/0x130
[  324.637222][T17731]  mbind_range+0x1b8/0x440
[  324.637253][T17731]  ? mas_find+0x5d5/0x700
[  324.637295][T17731]  __se_sys_mbind+0x648/0xac0
[  324.637341][T17731]  __x64_sys_mbind+0x78/0x90
[  324.637374][T17731]  x64_sys_call+0x2a2b/0x3000
[  324.637400][T17731]  do_syscall_64+0xca/0x2b0
[  324.637437][T17731]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.637460][T17731] RIP: 0033:0x7f9c0b4af749
[  324.637476][T17731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  324.637495][T17731] RSP: 002b:00007f9c09f0f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[  324.637519][T17731] RAX: ffffffffffffffda RBX: 00007f9c0b705fa0 RCX: 00007f9c0b4af749
[  324.637536][T17731] RDX: 0000000000000001 RSI: 0000000000800000 RDI: 0000200000001000
[  324.637559][T17731] RBP: 00007f9c09f0f090 R08: 000000000000000a R09: 0000000000000002
[  324.637574][T17731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  324.637586][T17731] R13: 00007f9c0b706038 R14: 00007f9c0b705fa0 R15: 00007ffff2577d58
[  324.637606][T17731]  </TASK>
[  324.872469][T17735] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4520'.
[  325.022286][T17747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  325.033240][T17747] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  325.302249][T17768] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4532'.
[  325.439297][T17756] netlink: 'syz.9.4528': attribute type 39 has an invalid length.
[  325.553706][T17784] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  325.653073][T17792] FAULT_INJECTION: forcing a failure.
[  325.653073][T17792] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  325.666235][T17792] CPU: 0 UID: 0 PID: 17792 Comm: syz.4.4542 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  325.666313][T17792] Tainted: [W]=WARN
[  325.666321][T17792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  325.666336][T17792] Call Trace:
[  325.666343][T17792]  <TASK>
[  325.666353][T17792]  __dump_stack+0x1d/0x30
[  325.666427][T17792]  dump_stack_lvl+0x95/0xd0
[  325.666453][T17792]  dump_stack+0x15/0x1b
[  325.666553][T17792]  should_fail_ex+0x265/0x280
[  325.666580][T17792]  should_fail+0xb/0x20
[  325.666602][T17792]  should_fail_usercopy+0x1a/0x20
[  325.666832][T17792]  _copy_from_user+0x1c/0xb0
[  325.666870][T17792]  ___sys_sendmsg+0xc1/0x1d0
[  325.666921][T17792]  __x64_sys_sendmsg+0xd4/0x160
[  325.666960][T17792]  x64_sys_call+0x17ba/0x3000
[  325.667055][T17792]  do_syscall_64+0xca/0x2b0
[  325.667094][T17792]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.667118][T17792] RIP: 0033:0x7fede765f749
[  325.667136][T17792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  325.667236][T17792] RSP: 002b:00007fede60bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  325.667260][T17792] RAX: ffffffffffffffda RBX: 00007fede78b5fa0 RCX: 00007fede765f749
[  325.667274][T17792] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004
[  325.667289][T17792] RBP: 00007fede60bf090 R08: 0000000000000000 R09: 0000000000000000
[  325.667303][T17792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  325.667317][T17792] R13: 00007fede78b6038 R14: 00007fede78b5fa0 R15: 00007fff6ed9c908
[  325.667338][T17792]  </TASK>
[  325.884648][T17799] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4545'.
[  326.097518][T17812] loop8: detected capacity change from 0 to 1024
[  326.104983][T17814] netlink: 'syz.0.4550': attribute type 33 has an invalid length.
[  326.112877][T17814] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4550'.
[  326.124938][T17814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4550'.
[  326.284056][T17812] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  326.311491][T17830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  326.321376][T15977] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.361397][T17830] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  326.380809][T17837] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4558'.
[  326.455111][T17839] bridge_slave_0: left allmulticast mode
[  326.460817][T17839] bridge_slave_0: left promiscuous mode
[  326.466563][T17839] bridge0: port 1(bridge_slave_0) entered disabled state
[  326.482318][T17839] bridge_slave_1: left allmulticast mode
[  326.489020][T17839] bridge_slave_1: left promiscuous mode
[  326.495083][T17839] bridge0: port 2(bridge_slave_1) entered disabled state
[  326.523805][T17839] bond0: (slave bond_slave_0): Releasing backup interface
[  326.636634][T17859] loop9: detected capacity change from 0 to 128
[  326.647640][T17839] bond0: (slave bond_slave_1): Releasing backup interface
[  326.655531][T17859] msdos: Unknown parameter ''
[  326.690884][T17839] team0: Port device team_slave_0 removed
[  326.731754][T17839] team0: Port device team_slave_1 removed
[  326.747190][T17839] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  326.754960][T17839] batman_adv: batadv0: Removing interface: batadv_slave_0
[  326.766118][T17839] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  326.773899][T17839] batman_adv: batadv0: Removing interface: batadv_slave_1
[  326.785492][T17854] netlink: 'syz.4.4565': attribute type 39 has an invalid length.
[  326.786342][T17839] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  326.810252][T17858] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4566'.
[  327.013536][   T29] kauditd_printk_skb: 658 callbacks suppressed
[  327.013549][   T29] audit: type=1326 audit(1768203643.002:57483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17868 comm="syz.8.4568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0b4af749 code=0x7ffc0000
[  327.126562][   T29] audit: type=1326 audit(1768203643.032:57484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17868 comm="syz.8.4568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0b4af749 code=0x7ffc0000
[  327.150721][T17879] netlink: 'syz.9.4569': attribute type 33 has an invalid length.
[  327.150745][T17879] netlink: 152 bytes leftover after parsing attributes in process `syz.9.4569'.
[  327.168341][   T29] audit: type=1326 audit(1768203643.032:57485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17868 comm="syz.8.4568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0b4af749 code=0x7ffc0000
[  327.193003][   T29] audit: type=1326 audit(1768203643.032:57486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17868 comm="syz.8.4568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f9c0b4af749 code=0x7ffc0000
[  327.209510][T17882] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4569'.
[  327.216596][   T29] audit: type=1326 audit(1768203643.032:57487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17868 comm="syz.8.4568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0b4af749 code=0x7ffc0000
[  327.250181][   T29] audit: type=1326 audit(1768203643.032:57488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17868 comm="syz.8.4568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0b4af749 code=0x7ffc0000
[  327.275209][   T29] audit: type=1326 audit(1768203643.032:57489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17868 comm="syz.8.4568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0b4af749 code=0x7ffc0000
[  327.298879][   T29] audit: type=1326 audit(1768203643.032:57490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17868 comm="syz.8.4568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9c0b4af749 code=0x7ffc0000
[  327.323498][   T29] audit: type=1326 audit(1768203643.032:57491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17868 comm="syz.8.4568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0b4af749 code=0x7ffc0000
[  327.347147][   T29] audit: type=1326 audit(1768203643.032:57492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17868 comm="syz.8.4568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0b4af749 code=0x7ffc0000
[  327.495862][T17900] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4577'.
[  327.572050][T17904] loop9: detected capacity change from 0 to 1024
[  327.582160][T17904] EXT4-fs (loop9): bad geometry: first data block is 0 with a 1k block and cluster size
[  327.607626][T17886] SELinux: failed to load policy
[  327.696992][T17907] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  328.101315][T17927] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4585'.
[  328.126591][T17927] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4585'.
[  328.213829][T17936] loop2: detected capacity change from 0 to 1024
[  328.250246][T17936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  328.312253][T17936] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  328.325145][T17919] netlink: 'syz.4.4582': attribute type 39 has an invalid length.
[  328.418281][T17951] netlink: 'syz.8.4588': attribute type 33 has an invalid length.
[  328.426317][T17951] netlink: 152 bytes leftover after parsing attributes in process `syz.8.4588'.
[  328.438486][T17936] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: comm syz.2.4584: lblock 0 mapped to illegal pblock 0 (length 6)
[  328.482588][T17936] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  328.495121][T17936] EXT4-fs (loop2): This should not happen!! Data will be lost
[  328.495121][T17936] 
[  328.534637][T17953] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: comm syz.2.4584: lblock 0 mapped to illegal pblock 0 (length 1)
[  328.635726][T17953] EXT4-fs error (device loop2): ext4_ext_remove_space:2955: inode #15: comm syz.2.4584: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  328.841750][T17953] EXT4-fs error (device loop2) in ext4_setattr:6035: Corrupt filesystem
[  329.051055][T17968] loop0: detected capacity change from 0 to 1024
[  329.128574][T17968] EXT4-fs (loop0): bad geometry: first data block is 0 with a 1k block and cluster size
[  329.287226][T16159] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  329.618085][T17979] loop2: detected capacity change from 0 to 512
[  329.631903][T17979] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4596: bg 0: block 167: padding at end of block bitmap is not set
[  329.642891][T17976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  329.656792][T17976] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  329.672892][T17979] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.4596: corrupted inode contents
[  329.685353][T17979] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  329.705553][T17979] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.4596: corrupted inode contents
[  329.728214][T17979] EXT4-fs error (device loop2): ext4_evict_inode:301: inode #15: comm syz.2.4596: mark_inode_dirty error
[  329.739991][T17979] EXT4-fs (loop2): 1 orphan inode deleted
[  329.811450][T17979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  329.929652][T16159] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  330.039621][T18003] loop8: detected capacity change from 0 to 2048
[  330.107334][ T3309]  loop8: p1 < > p4
[  330.127484][ T3309] loop8: p4 size 8388608 extends beyond EOD, truncated
[  330.146838][T18003]  loop8: p1 < > p4
[  330.154356][T18003] loop8: p4 size 8388608 extends beyond EOD, truncated
[  330.164416][T18009] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18009 comm=syz.2.4607
[  330.218547][T18003] FAULT_INJECTION: forcing a failure.
[  330.218547][T18003] name failslab, interval 1, probability 0, space 0, times 0
[  330.231399][T18003] CPU: 1 UID: 0 PID: 18003 Comm: syz.8.4606 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  330.231500][T18003] Tainted: [W]=WARN
[  330.231509][T18003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  330.231526][T18003] Call Trace:
[  330.231534][T18003]  <TASK>
[  330.231543][T18003]  __dump_stack+0x1d/0x30
[  330.231575][T18003]  dump_stack_lvl+0x95/0xd0
[  330.231604][T18003]  dump_stack+0x15/0x1b
[  330.231647][T18003]  should_fail_ex+0x265/0x280
[  330.231677][T18003]  should_failslab+0x8c/0xb0
[  330.231753][T18003]  __kmalloc_noprof+0xb9/0x5a0
[  330.231843][T18003]  ? io_cache_alloc_new+0x2a/0xb0
[  330.231881][T18003]  io_cache_alloc_new+0x2a/0xb0
[  330.231911][T18003]  __io_prep_rw+0xcf/0x6c0
[  330.232028][T18003]  ? __rcu_read_unlock+0x4f/0x70
[  330.232053][T18003]  io_prep_rwv+0x33/0x250
[  330.232094][T18003]  io_prep_writev+0x22/0x30
[  330.232134][T18003]  io_submit_sqes+0x70f/0x11b0
[  330.232245][T18003]  __se_sys_io_uring_enter+0x1bd/0x1a30
[  330.232289][T18003]  ? 0xffffffff81000000
[  330.232306][T18003]  ? __rcu_read_unlock+0x4f/0x70
[  330.232340][T18003]  ? proc_fail_nth_write+0x13b/0x160
[  330.232377][T18003]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  330.232476][T18003]  ? vfs_write+0x7e8/0x960
[  330.232564][T18003]  ? __rcu_read_unlock+0x4f/0x70
[  330.232590][T18003]  ? __fget_files+0x184/0x1c0
[  330.232621][T18003]  ? mutex_unlock+0x4f/0x90
[  330.232735][T18003]  ? fput+0x8f/0xc0
[  330.232849][T18003]  __x64_sys_io_uring_enter+0x78/0x90
[  330.232895][T18003]  x64_sys_call+0x27e4/0x3000
[  330.232928][T18003]  do_syscall_64+0xca/0x2b0
[  330.232985][T18003]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  330.233013][T18003] RIP: 0033:0x7f9c0b4af749
[  330.233032][T18003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  330.233063][T18003] RSP: 002b:00007f9c09f0f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  330.233131][T18003] RAX: ffffffffffffffda RBX: 00007f9c0b705fa0 RCX: 00007f9c0b4af749
[  330.233147][T18003] RDX: 0000000000000969 RSI: 0000000000003498 RDI: 0000000000000007
[  330.233164][T18003] RBP: 00007f9c09f0f090 R08: 0000000000000000 R09: 0000000000000000
[  330.233180][T18003] R10: ffff0000000000a1 R11: 0000000000000246 R12: 0000000000000001
[  330.233196][T18003] R13: 00007f9c0b706038 R14: 00007f9c0b705fa0 R15: 00007ffff2577d58
[  330.233300][T18003]  </TASK>
[  330.640458][T18040] FAULT_INJECTION: forcing a failure.
[  330.640458][T18040] name failslab, interval 1, probability 0, space 0, times 0
[  330.653409][T18040] CPU: 0 UID: 0 PID: 18040 Comm: syz.4.4618 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  330.653522][T18040] Tainted: [W]=WARN
[  330.653530][T18040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  330.653547][T18040] Call Trace:
[  330.653555][T18040]  <TASK>
[  330.653566][T18040]  __dump_stack+0x1d/0x30
[  330.653599][T18040]  dump_stack_lvl+0x95/0xd0
[  330.653627][T18040]  dump_stack+0x15/0x1b
[  330.653706][T18040]  should_fail_ex+0x265/0x280
[  330.653732][T18040]  should_failslab+0x8c/0xb0
[  330.653784][T18040]  kmem_cache_alloc_node_noprof+0x6b/0x4c0
[  330.653870][T18040]  ? __alloc_skb+0x2ff/0x4b0
[  330.653902][T18040]  __alloc_skb+0x2ff/0x4b0
[  330.653939][T18040]  ? __alloc_skb+0x228/0x4b0
[  330.653964][T18040]  netlink_alloc_large_skb+0xbf/0xf0
[  330.654001][T18040]  netlink_sendmsg+0x3cf/0x6b0
[  330.654037][T18040]  ? __pfx_netlink_sendmsg+0x10/0x10
[  330.654127][T18040]  __sock_sendmsg+0x145/0x180
[  330.654193][T18040]  ____sys_sendmsg+0x31e/0x4a0
[  330.654274][T18040]  ___sys_sendmsg+0x17b/0x1d0
[  330.654328][T18040]  __x64_sys_sendmsg+0xd4/0x160
[  330.654367][T18040]  x64_sys_call+0x17ba/0x3000
[  330.654461][T18040]  do_syscall_64+0xca/0x2b0
[  330.654497][T18040]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  330.654519][T18040] RIP: 0033:0x7fede765f749
[  330.654593][T18040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  330.654612][T18040] RSP: 002b:00007fede60bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  330.654632][T18040] RAX: ffffffffffffffda RBX: 00007fede78b5fa0 RCX: 00007fede765f749
[  330.654644][T18040] RDX: 0000000020004000 RSI: 0000200000000000 RDI: 0000000000000003
[  330.654660][T18040] RBP: 00007fede60bf090 R08: 0000000000000000 R09: 0000000000000000
[  330.654809][T18040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  330.654821][T18040] R13: 00007fede78b6038 R14: 00007fede78b5fa0 R15: 00007fff6ed9c908
[  330.654841][T18040]  </TASK>
[  330.941750][T18043] program syz.2.4619 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  331.064664][T18069] FAULT_INJECTION: forcing a failure.
[  331.064664][T18069] name failslab, interval 1, probability 0, space 0, times 0
[  331.077481][T18069] CPU: 1 UID: 0 PID: 18069 Comm: syz.4.4625 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  331.077518][T18069] Tainted: [W]=WARN
[  331.077526][T18069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  331.077541][T18069] Call Trace:
[  331.077549][T18069]  <TASK>
[  331.077558][T18069]  __dump_stack+0x1d/0x30
[  331.077588][T18069]  dump_stack_lvl+0x95/0xd0
[  331.077634][T18069]  dump_stack+0x15/0x1b
[  331.077657][T18069]  should_fail_ex+0x265/0x280
[  331.077714][T18069]  should_failslab+0x8c/0xb0
[  331.077741][T18069]  kmem_cache_alloc_node_noprof+0x6b/0x4c0
[  331.077771][T18069]  ? __alloc_skb+0x2ff/0x4b0
[  331.077796][T18069]  __alloc_skb+0x2ff/0x4b0
[  331.077823][T18069]  ? __alloc_skb+0x228/0x4b0
[  331.077857][T18069]  netlink_alloc_large_skb+0xbf/0xf0
[  331.077888][T18069]  netlink_sendmsg+0x3cf/0x6b0
[  331.077981][T18069]  ? __pfx_netlink_sendmsg+0x10/0x10
[  331.078040][T18069]  __sock_sendmsg+0x145/0x180
[  331.078103][T18069]  ____sys_sendmsg+0x31e/0x4a0
[  331.078136][T18069]  ___sys_sendmsg+0x17b/0x1d0
[  331.078175][T18069]  __x64_sys_sendmsg+0xd4/0x160
[  331.078231][T18069]  x64_sys_call+0x17ba/0x3000
[  331.078261][T18069]  do_syscall_64+0xca/0x2b0
[  331.078368][T18069]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.078532][T18069] RIP: 0033:0x7fede765f749
[  331.078549][T18069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  331.078572][T18069] RSP: 002b:00007fede609e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  331.078596][T18069] RAX: ffffffffffffffda RBX: 00007fede78b6090 RCX: 00007fede765f749
[  331.078611][T18069] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000008
[  331.078626][T18069] RBP: 00007fede609e090 R08: 0000000000000000 R09: 0000000000000000
[  331.078714][T18069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  331.078729][T18069] R13: 00007fede78b6128 R14: 00007fede78b6090 R15: 00007fff6ed9c908
[  331.078837][T18069]  </TASK>
[  331.289128][T18070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  331.301372][T18070] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  331.369609][T18072] loop9: detected capacity change from 0 to 512
[  331.379019][T18072] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4629: bg 0: block 167: padding at end of block bitmap is not set
[  331.408564][T18072] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.4629: corrupted inode contents
[  331.471431][T18072] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem
[  331.518804][T18072] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.4629: corrupted inode contents
[  331.550352][T18072] EXT4-fs error (device loop9): ext4_evict_inode:301: inode #15: comm syz.9.4629: mark_inode_dirty error
[  331.574404][T18072] EXT4-fs (loop9): 1 orphan inode deleted
[  331.594557][T18072] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  331.621518][T18082] SELinux:  policydb magic number 0x69662faa does not match expected magic number 0xf97cff8c
[  331.646114][T18082] SELinux: failed to load policy
[  331.659988][T15998] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.745471][T18092] __nla_validate_parse: 8 callbacks suppressed
[  331.745487][T18092] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4635'.
[  331.878448][T18107] loop9: detected capacity change from 0 to 512
[  331.893493][T18107] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4642: bg 0: block 167: padding at end of block bitmap is not set
[  331.909379][T18107] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.4642: corrupted inode contents
[  331.922100][T18107] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem
[  331.930842][T18107] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.4642: corrupted inode contents
[  331.948778][T18107] EXT4-fs error (device loop9): ext4_evict_inode:301: inode #15: comm syz.9.4642: mark_inode_dirty error
[  331.964055][T18107] EXT4-fs (loop9): 1 orphan inode deleted
[  331.980343][T18107] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  332.006414][T15998] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.069438][   T29] kauditd_printk_skb: 1454 callbacks suppressed
[  332.069455][   T29] audit: type=1326 audit(1768203648.052:58947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18100 comm="syz.8.4639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0b4af749 code=0x7ffc0000
[  332.100477][   T29] audit: type=1326 audit(1768203648.052:58948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18100 comm="syz.8.4639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0b4af749 code=0x7ffc0000
[  332.125497][   T29] audit: type=1326 audit(1768203648.052:58949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18100 comm="syz.8.4639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0b4af749 code=0x7ffc0000
[  332.194875][   T29] audit: type=1326 audit(1768203648.052:58950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18100 comm="syz.8.4639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0b4af749 code=0x7ffc0000
[  332.218632][   T29] audit: type=1326 audit(1768203648.052:58951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18100 comm="syz.8.4639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0b4af749 code=0x7ffc0000
[  332.242439][   T29] audit: type=1326 audit(1768203648.102:58952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18100 comm="syz.8.4639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0b4af749 code=0x7ffc0000
[  332.266211][   T29] audit: type=1326 audit(1768203648.102:58953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18100 comm="syz.8.4639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0b4af749 code=0x7ffc0000
[  332.289875][   T29] audit: type=1326 audit(1768203648.102:58954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18100 comm="syz.8.4639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9c0b4af783 code=0x7ffc0000
[  332.313371][   T29] audit: type=1326 audit(1768203648.102:58955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18100 comm="syz.8.4639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9c0b4af783 code=0x7ffc0000
[  332.336835][   T29] audit: type=1326 audit(1768203648.112:58956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18100 comm="syz.8.4639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9c0b4af749 code=0x7ffc0000
[  332.774926][T18159] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  333.173540][T18192] netlink: 'syz.0.4666': attribute type 33 has an invalid length.
[  333.181438][T18192] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4666'.
[  333.235969][T18196] loop9: detected capacity change from 0 to 1024
[  333.253657][T18186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4666'.
[  333.276042][T18196] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  333.303692][T18196] netlink: 65047 bytes leftover after parsing attributes in process `syz.9.4667'.
[  333.413314][T18217] infiniband syz0: set down
[  333.417963][T18217] infiniband syz0: added bond_slave_0
[  333.426429][T15998] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  333.458781][T18217] RDS/IB: syz0: added
[  333.461678][T18214] SELinux: failed to load policy
[  333.471253][T18217] smc: adding ib device syz0 with port count 1
[  333.477936][T18217] smc:    ib device syz0 port 1 has no pnetid
[  333.676871][T18221] netlink: 'syz.9.4674': attribute type 39 has an invalid length.
[  333.805750][T18222] loop9: detected capacity change from 0 to 512
[  333.833711][T18222] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  333.874124][T18222] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  334.033604][T15998] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  334.209682][T18262] netlink: 'syz.4.4683': attribute type 33 has an invalid length.
[  334.217733][T18262] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4683'.
[  334.279939][T18254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4683'.
[  334.353943][T18271] loop8: detected capacity change from 0 to 512
[  334.374143][T18271] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  334.392518][T18271] EXT4-fs (loop8): orphan cleanup on readonly fs
[  334.404430][T18271] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.4687: corrupted inode contents
[  334.435675][T18271] EXT4-fs (loop8): Remounting filesystem read-only
[  334.449926][T18271] EXT4-fs (loop8): 1 truncate cleaned up
[  334.466034][ T2347] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  334.476665][ T2347] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  334.529323][ T2347] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started
[  334.567702][T18271] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  334.613201][T15977] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  334.624480][T18286] netlink: 'syz.0.4691': attribute type 33 has an invalid length.
[  334.632503][T18286] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4691'.
[  334.663156][T18289] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4693'.
[  334.709164][T18289] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4693'.
[  334.731910][T18285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4691'.
[  334.952859][T18298] SELinux: failed to load policy
[  335.162089][T18325] loop2: detected capacity change from 0 to 512
[  335.185390][T18325] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4707: bg 0: block 167: padding at end of block bitmap is not set
[  335.265500][T18325] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.4707: corrupted inode contents
[  335.286399][T18325] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  335.298150][T18325] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.4707: corrupted inode contents
[  335.310670][T18325] EXT4-fs error (device loop2): ext4_evict_inode:301: inode #15: comm syz.2.4707: mark_inode_dirty error
[  335.344483][T18325] EXT4-fs (loop2): 1 orphan inode deleted
[  335.358387][T18325] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  335.438099][T16159] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  335.489612][T18355] loop8: detected capacity change from 0 to 512
[  335.506110][T18355] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  335.514479][T18355] EXT4-fs (loop8): orphan cleanup on readonly fs
[  335.522346][T18355] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.4716: corrupted inode contents
[  335.535607][T18355] EXT4-fs (loop8): Remounting filesystem read-only
[  335.545056][T18355] EXT4-fs (loop8): 1 truncate cleaned up
[  335.550904][ T8269] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  335.561603][ T8269] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  335.576273][ T8269] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started
[  335.589747][T18355] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  335.626100][T15977] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  335.669318][T18364] loop8: detected capacity change from 0 to 512
[  335.690529][T18364] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4717: bg 0: block 167: padding at end of block bitmap is not set
[  335.706512][T18364] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.4717: corrupted inode contents
[  335.718786][T18364] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem
[  335.738916][T18364] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.4717: corrupted inode contents
[  335.778005][T18364] EXT4-fs error (device loop8): ext4_evict_inode:301: inode #15: comm syz.8.4717: mark_inode_dirty error
[  335.831753][T18364] EXT4-fs (loop8): 1 orphan inode deleted
[  335.851434][T18364] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  335.913321][T15977] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  336.557640][T18417] loop0: detected capacity change from 0 to 512
[  336.683858][T18417] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  336.701333][T18417] EXT4-fs (loop0): orphan cleanup on readonly fs
[  336.730804][T18426] netlink: 'syz.9.4740': attribute type 39 has an invalid length.
[  336.747864][T18426] loop9: detected capacity change from 0 to 512
[  336.765122][T18426] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  336.785804][T18417] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.4738: corrupted inode contents
[  336.799479][T18426] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  336.811339][T18417] EXT4-fs (loop0): Remounting filesystem read-only
[  336.818471][T18417] EXT4-fs (loop0): 1 truncate cleaned up
[  336.824524][ T8269] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  336.835171][ T8269] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  336.846127][ T8269] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[  336.856883][T18417] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  336.893855][T15998] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  336.903397][T18431] FAULT_INJECTION: forcing a failure.
[  336.903397][T18431] name failslab, interval 1, probability 0, space 0, times 0
[  336.916140][T18431] CPU: 1 UID: 0 PID: 18431 Comm: syz.2.4741 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  336.916193][T18431] Tainted: [W]=WARN
[  336.916202][T18431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  336.916215][T18431] Call Trace:
[  336.916223][T18431]  <TASK>
[  336.916233][T18431]  __dump_stack+0x1d/0x30
[  336.916258][T18431]  dump_stack_lvl+0x95/0xd0
[  336.916284][T18431]  dump_stack+0x15/0x1b
[  336.916324][T18431]  should_fail_ex+0x265/0x280
[  336.916368][T18431]  should_failslab+0x8c/0xb0
[  336.916391][T18431]  ? __pfx_free_ioctx_users+0x10/0x10
[  336.916426][T18431]  __kmalloc_cache_noprof+0x65/0x4c0
[  336.916481][T18431]  ? percpu_ref_init+0x9c/0x250
[  336.916568][T18431]  ? __pfx_free_ioctx_users+0x10/0x10
[  336.916601][T18431]  percpu_ref_init+0x9c/0x250
[  336.916683][T18431]  ioctx_alloc+0x1a2/0x4c0
[  336.916713][T18431]  __se_sys_io_setup+0x6b/0x1b0
[  336.916742][T18431]  __x64_sys_io_setup+0x31/0x40
[  336.916815][T18431]  x64_sys_call+0x2a8e/0x3000
[  336.916847][T18431]  do_syscall_64+0xca/0x2b0
[  336.916957][T18431]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.916980][T18431] RIP: 0033:0x7f3fc15df749
[  336.916996][T18431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  336.917016][T18431] RSP: 002b:00007f3fc003f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[  336.917045][T18431] RAX: ffffffffffffffda RBX: 00007f3fc1835fa0 RCX: 00007f3fc15df749
[  336.917060][T18431] RDX: 0000000000000000 RSI: 0000200000002400 RDI: 00000000000008f0
[  336.917073][T18431] RBP: 00007f3fc003f090 R08: 0000000000000000 R09: 0000000000000000
[  336.917128][T18431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  336.917144][T18431] R13: 00007f3fc1836038 R14: 00007f3fc1835fa0 R15: 00007fff0d62e798
[  336.917174][T18431]  </TASK>
[  337.152970][T18441] loop9: detected capacity change from 0 to 128
[  337.165593][T18441] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  337.219154][   T29] kauditd_printk_skb: 421 callbacks suppressed
[  337.219186][   T29] audit: type=1326 audit(1768203653.192:59360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18442 comm="syz.4.4745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede765f749 code=0x7ffc0000
[  337.250025][   T29] audit: type=1326 audit(1768203653.192:59361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18442 comm="syz.4.4745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fede765f749 code=0x7ffc0000
[  337.274518][   T29] audit: type=1326 audit(1768203653.192:59362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18442 comm="syz.4.4745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede765f749 code=0x7ffc0000
[  337.298285][   T29] audit: type=1326 audit(1768203653.192:59363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18442 comm="syz.4.4745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7fede765f749 code=0x7ffc0000
[  337.322849][   T29] audit: type=1326 audit(1768203653.192:59364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18442 comm="syz.4.4745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede765f749 code=0x7ffc0000
[  337.346523][   T29] audit: type=1326 audit(1768203653.192:59365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18442 comm="syz.4.4745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fede76615dc code=0x7ffc0000
[  337.348464][T18441] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  337.372358][   T29] audit: type=1326 audit(1768203653.192:59366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18442 comm="syz.4.4745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fede7661514 code=0x7ffc0000
[  337.405056][   T29] audit: type=1326 audit(1768203653.192:59367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18442 comm="syz.4.4745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fede7661514 code=0x7ffc0000
[  337.428693][   T29] audit: type=1326 audit(1768203653.192:59368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18442 comm="syz.4.4745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede765f749 code=0x7ffc0000
[  337.452288][   T29] audit: type=1326 audit(1768203653.192:59369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18442 comm="syz.4.4745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fede765f749 code=0x7ffc0000
[  337.483745][T16396] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  337.563507][T15998] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  337.597752][T18455] loop9: detected capacity change from 0 to 512
[  337.637197][T18455] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4751: bg 0: block 167: padding at end of block bitmap is not set
[  337.663424][T18455] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.4751: corrupted inode contents
[  337.675946][T18455] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem
[  337.693392][T18455] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.4751: corrupted inode contents
[  337.707236][T18455] EXT4-fs error (device loop9): ext4_evict_inode:301: inode #15: comm syz.9.4751: mark_inode_dirty error
[  337.719697][T18455] EXT4-fs (loop9): 1 orphan inode deleted
[  337.726078][T18455] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  337.759606][T15998] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  337.803636][T18470] FAULT_INJECTION: forcing a failure.
[  337.803636][T18470] name failslab, interval 1, probability 0, space 0, times 0
[  337.816406][T18470] CPU: 0 UID: 0 PID: 18470 Comm: syz.9.4754 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  337.816440][T18470] Tainted: [W]=WARN
[  337.816446][T18470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  337.816460][T18470] Call Trace:
[  337.816468][T18470]  <TASK>
[  337.816477][T18470]  __dump_stack+0x1d/0x30
[  337.816546][T18470]  dump_stack_lvl+0x95/0xd0
[  337.816570][T18470]  dump_stack+0x15/0x1b
[  337.816589][T18470]  should_fail_ex+0x265/0x280
[  337.816610][T18470]  should_failslab+0x8c/0xb0
[  337.816688][T18470]  kmem_cache_alloc_node_noprof+0x6b/0x4c0
[  337.816782][T18470]  ? __alloc_skb+0x2ff/0x4b0
[  337.816807][T18470]  __alloc_skb+0x2ff/0x4b0
[  337.816828][T18470]  ? __alloc_skb+0x228/0x4b0
[  337.816852][T18470]  netlink_alloc_large_skb+0xbf/0xf0
[  337.816951][T18470]  netlink_sendmsg+0x3cf/0x6b0
[  337.817053][T18470]  ? __pfx_netlink_sendmsg+0x10/0x10
[  337.817094][T18470]  __sock_sendmsg+0x145/0x180
[  337.817161][T18470]  ____sys_sendmsg+0x31e/0x4a0
[  337.817253][T18470]  ___sys_sendmsg+0x17b/0x1d0
[  337.817340][T18470]  __x64_sys_sendmsg+0xd4/0x160
[  337.817378][T18470]  x64_sys_call+0x17ba/0x3000
[  337.817462][T18470]  do_syscall_64+0xca/0x2b0
[  337.817498][T18470]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.817518][T18470] RIP: 0033:0x7f9336faf749
[  337.817534][T18470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  337.817605][T18470] RSP: 002b:00007f9335a0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  337.817624][T18470] RAX: ffffffffffffffda RBX: 00007f9337205fa0 RCX: 00007f9336faf749
[  337.817641][T18470] RDX: 0000000000040090 RSI: 0000200000000000 RDI: 0000000000000003
[  337.817653][T18470] RBP: 00007f9335a0f090 R08: 0000000000000000 R09: 0000000000000000
[  337.817665][T18470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  337.817676][T18470] R13: 00007f9337206038 R14: 00007f9337205fa0 R15: 00007fff4c9b3138
[  337.817694][T18470]  </TASK>
[  338.325233][T18494] loop9: detected capacity change from 0 to 512
[  338.339308][T18494] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4767: bg 0: block 167: padding at end of block bitmap is not set
[  338.369100][T18494] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.4767: corrupted inode contents
[  338.381770][T18494] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem
[  338.408343][T18494] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.4767: corrupted inode contents
[  338.459253][T18494] EXT4-fs error (device loop9): ext4_evict_inode:301: inode #15: comm syz.9.4767: mark_inode_dirty error
[  338.471057][T18494] EXT4-fs (loop9): 1 orphan inode deleted
[  338.496482][T18494] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  338.568181][T15998] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.631466][T18512] loop9: detected capacity change from 0 to 1024
[  338.633809][T18503] __nla_validate_parse: 2 callbacks suppressed
[  338.633862][T18503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4770'.
[  338.666080][T18512] EXT4-fs (loop9): bad geometry: first data block is 0 with a 1k block and cluster size
[  338.822427][T18525] loop8: detected capacity change from 0 to 128
[  338.882196][T18528] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4777'.
[  338.892430][T18528] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4777'.
[  338.901409][T18528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4777'.
[  338.924419][T18528] loop0: detected capacity change from 0 to 1024
[  338.931849][T18528] EXT4-fs: Ignoring removed oldalloc option
[  338.943511][T18528] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  339.040423][T18528] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  339.808361][T16396] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  339.809210][T18525] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  339.857841][T18525] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  339.905323][T18560] loop2: detected capacity change from 0 to 512
[  339.931399][T18560] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  339.939774][T18560] EXT4-fs (loop2): orphan cleanup on readonly fs
[  339.948998][T18560] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.4789: corrupted inode contents
[  339.965799][T18560] EXT4-fs (loop2): Remounting filesystem read-only
[  339.977837][T18560] EXT4-fs (loop2): 1 truncate cleaned up
[  339.993762][ T8285] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  340.004413][ T8285] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  340.034513][ T8285] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[  340.046168][T18562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4788'.
[  340.070722][T18560] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  340.194999][T18582] loop8: detected capacity change from 0 to 1024
[  340.210010][T18582] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a001c01c, mo2=0002]
[  340.219757][T18582] System zones: 0-1, 3-36
[  340.271877][T18592] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4796'.
[  340.282005][T18592] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4796'.
[  340.291013][T18592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4796'.
[  340.318840][T18588] ==================================================================
[  340.326980][T18588] BUG: KCSAN: data-race in __bpf_get_stackid / bcmp
[  340.333622][T18588] 
[  340.336011][T18588] write to 0xffff88810c772190 of 88 bytes by task 18592 on cpu 1:
[  340.343854][T18588]  __bpf_get_stackid+0x737/0x7d0
[  340.348874][T18588]  bpf_get_stackid+0xf3/0x130
[  340.353603][T18588]  bpf_get_stackid_raw_tp+0xf6/0x120
[  340.358916][T18588]  bpf_prog_53f0063d4d7f65ce+0x2a/0x32
[  340.364401][T18588]  bpf_trace_run2+0x107/0x1d0
[  340.369128][T18588]  __traceiter_kfree+0x2e/0x50
[  340.373918][T18588]  kfree+0x353/0x3c0
[  340.377824][T18588]  __bpf_prog_put_noref+0xd0/0x230
[  340.382954][T18588]  bpf_prog_load+0x109d/0x1140
[  340.387737][T18588]  __sys_bpf+0x469/0x7c0
[  340.391999][T18588]  __x64_sys_bpf+0x41/0x50
[  340.396452][T18588]  x64_sys_call+0x28e1/0x3000
[  340.401178][T18588]  do_syscall_64+0xca/0x2b0
[  340.405734][T18588]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  340.411650][T18588] 
[  340.413986][T18588] read to 0xffff88810c7721c8 of 8 bytes by task 18588 on cpu 0:
[  340.421630][T18588]  bcmp+0x23/0x90
[  340.425280][T18588]  __bpf_get_stackid+0x382/0x7d0
[  340.430267][T18588]  bpf_get_stackid+0xf3/0x130
[  340.434967][T18588]  bpf_get_stackid_raw_tp+0xf6/0x120
[  340.440279][T18588]  bpf_prog_53f0063d4d7f65ce+0x2a/0x32
[  340.445769][T18588]  bpf_trace_run2+0x107/0x1d0
[  340.450472][T18588]  __traceiter_kfree+0x2e/0x50
[  340.455265][T18588]  kfree+0x353/0x3c0
[  340.459184][T18588]  ___sys_recvmsg+0x135/0x370
[  340.463888][T18588]  do_recvmmsg+0x1ef/0x540
[  340.468339][T18588]  __x64_sys_recvmmsg+0xe5/0x170
[  340.473315][T18588]  x64_sys_call+0x2b75/0x3000
[  340.478013][T18588]  do_syscall_64+0xca/0x2b0
[  340.482540][T18588]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  340.488457][T18588] 
[  340.490793][T18588] value changed: 0xffffffff81275ec5 -> 0xffffffff81626901
[  340.497908][T18588] 
[  340.500242][T18588] Reported by Kernel Concurrency Sanitizer on:
[  340.506415][T18588] CPU: 0 UID: 0 PID: 18588 Comm: syz.4.4796 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  340.517825][T18588] Tainted: [W]=WARN
[  340.521635][T18588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  340.531703][T18588] ==================================================================