last executing test programs:

21.324356638s ago: executing program 2 (id=2653):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00')

21.272790758s ago: executing program 2 (id=2657):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_read_part_table(0x105d, &(0x7f0000001800)="$eJzszyFuAlEUBdDbTjrTcfWVdZUINIIdEDRbYS3IMewEzSqQJBiG/OGzBUCcI35y38v9yQsv9d+lTX/Yz2ruk0WSbgof5Rmre1ztHs1lxibteC3T5lImP3Xz+zf1av80T/L1PW22n8m5/DiUdNysh6ceCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABv6hYAAP//Gh4ZSQ==")
syz_emit_ethernet(0x56, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x20, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c, 0x0, '\x00', [@ra={0x5, 0x2, 0x6}]}, @dstopts={0x62}], @echo_reply={0x81, 0x0, 0x0, 0x0, 0x3}}}}}}, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000059c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x2, 0x0, 0x0, 0x4, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='f2fs_file_write_iter\x00', r7, 0x0, 0x9b1}, 0x18)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa0</\x00\x8eO4._\x14zC\x8a\xe8\xe0u\xe0\xff\xf1\xb2\xfd\xf6nz\x05-]\xc2Vk\xaeky\xd3\x83\xe2\xc7\xd3\xe6M^\x98ox\x14\t\xe9Q1\x1dK\x9a\x045\xd37\xb22\xfdD(\xd2\xdd\xa0\xff\x0f\x00\x00\x00\x00\x00\x00v\n\xd8?]k\x14N\x18\xf4\xc2j\xed6g\xfd\xd2\xd4\xe3\x1f\xa6 \xa0\x8d\xb5\x9aE<2`]<\x8cR\xd69\x0fO\xbf\xc3\xbd\xb0\x96\x90\x91k\x86\x1a\x10\xd2\xf5\x8b\xfc\xf4\xd0[\x12\xf5+\x1aS\x02/Yx\xf2jJb\x97\x9c/\x1f5i\xc6\x861\x9a\xff\xc3\xe7\xbfU\xd5\xac\xccB=\x8f\xfd\x84\xeepQ\x93nn\x0f\xc6\xa9?\xad\x8b~\x96@i=G\x9ft\x1d\xcc\xc6Ys7\x7f\x8ehv\xd3$\x13s\xa0\xbfi\xfaFS\xa9=Xe\xf8tI\x15\x882\x8b\x8e-X\xb8\xf2\x9du\x15S^\xec\xce\xfaf$S\x9f\xe7Ed\n\x84\\ u\xd2\x16\xc1\xa5\xa0\xaa\xe8.i\xc8\x0e\vt\xe2\xf1lA\x93\xdd\xce\x8f$\x06v\xbe\xe7\x95nN\xc5\xaa\x1ev\xc6P\x9c\\G&y\x8bYA\xc3}\xd9\x86[\xb2\xf3\x0f\x90%\xcb\x81\xe8\xea\xbcs\x95\xe9\x8eXH\x19m\xdfOY\xf1E9-\xc8\xe7\x13^+(\x034\x82\xafiOO\x14\x8f^\x8c', 0x9)
ftruncate(r9, 0x0)
unshare(0x6a040000)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000000)='++\x00')

20.702154466s ago: executing program 2 (id=2669):
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x271e, 0x0, 0x0)

20.624428277s ago: executing program 2 (id=2671):
r0 = socket(0x15, 0x5, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x1, 0x368, &(0x7f0000000180)="$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")
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
r6 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAPCLR(r6, 0x4b68, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
io_setup(0x2, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)
socket$kcm(0x10, 0x2, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="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"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94)

20.238039352s ago: executing program 2 (id=2678):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00')

20.116437163s ago: executing program 2 (id=2683):
syz_emit_ethernet(0x76, &(0x7f00000006c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x40, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @private2, [@dstopts={0x0, 0x0, '\x00', [@generic={0x40}]}]}}}}}}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x1b)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)

20.087496603s ago: executing program 32 (id=2683):
syz_emit_ethernet(0x76, &(0x7f00000006c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x40, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @private2, [@dstopts={0x0, 0x0, '\x00', [@generic={0x40}]}]}}}}}}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x1b)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)

16.437065388s ago: executing program 5 (id=2746):
socket(0x10, 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff060000000100000045000000250000001900040004", 0x25}], 0x1) (async)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 64)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket(0x10, 0x3, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0) (async)
r4 = socket$kcm(0xa, 0x2, 0x3a) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x7, 0x4, 0x0, 0x7ffc0002}]})
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000280)={{0x1, 0x0, 0x0, 0x2000000}}) (async, rerun: 64)
utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) (async, rerun: 64)
r6 = socket$igmp6(0xa, 0x3, 0x2) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0xfffffffffffffdc0, &(0x7f0000000180)={&(0x7f00000004c0)=@getstats={0x1c, 0x5e, 0x511, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x0) (async)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x80ffffff], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async)
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000240)="972e376c4bb6493b2d48250224053f7664ab0acd", 0x14}], 0x1, 0x0, 0x0, 0x900}, 0x4000870) (async)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000440)=""/173, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r5, 0xc0505405, &(0x7f00000003c0)={{0x2, 0x1, 0x8, 0x2}, 0x1, 0x4, 0xe98b})
socket$nl_generic(0x10, 0x3, 0x10)

16.362273729s ago: executing program 5 (id=2748):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
socket$key(0xf, 0x3, 0x2)
io_uring_setup(0x218a, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="14"], 0x7c}}, 0x0)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x42, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r3, &(0x7f0000000300), &(0x7f0000000400)=@udp6=r4}, 0x20)
bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r3, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20)

15.968278094s ago: executing program 5 (id=2751):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e087"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r3, 0x5607, 0x3)
ioctl$VT_ACTIVATE(r3, 0x5606, 0x4)
ioctl$TIOCSWINSZ(r3, 0x5414, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
quotactl$Q_QUOTAOFF(0xffffffff80000301, 0x0, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000dc0)=ANY=[], 0x50)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)

15.104418134s ago: executing program 5 (id=2764):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
r1 = syz_io_uring_setup(0x5a70, &(0x7f0000000500)={0x0, 0xfad8, 0x10000, 0xffffffff, 0x2ae}, &(0x7f00000003c0)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="24ba3aff0044cfbdb400000000", @ANYRESHEX=r3], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r8=>0x0})
sendto$packet(r7, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @local}, 0x14)
sendto$packet(r6, &(0x7f0000000400)="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", 0xff, 0x4000000, &(0x7f0000000380)={0x11, 0x3, r8, 0x1, 0xb3, 0x6, @broadcast}, 0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
r9 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x700, &(0x7f0000000a40)="$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")
futimesat(r9, &(0x7f0000000000)='./file1\x00', 0x0)
io_uring_enter(r1, 0x47f5, 0x0, 0x0, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000580), &(0x7f00000005c0)=0x30)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240), 0x4)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000070000006d0000009502000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

14.916490447s ago: executing program 5 (id=2768):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_read_part_table(0x105d, &(0x7f0000001800)="$eJzszyFuAlEUBdDbTjrTcfWVdZUINIIdEDRbYS3IMewEzSqQJBiG/OGzBUCcI35y38v9yQsv9d+lTX/Yz2ruk0WSbgof5Rmre1ztHs1lxibteC3T5lImP3Xz+zf1av80T/L1PW22n8m5/DiUdNysh6ceCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABv6hYAAP//Gh4ZSQ==")
syz_emit_ethernet(0x56, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x20, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c, 0x0, '\x00', [@ra={0x5, 0x2, 0x6}]}, @dstopts={0x62}], @echo_reply={0x81, 0x0, 0x0, 0x0, 0x3}}}}}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000059c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x2, 0x0, 0x0, 0x4, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000011000000000000000000a22a30456b880000145b41fe69e3ffff78616d3000000000000000000000000079616d3000000000000000000000000076657468315f742f5f626f6e640000000180c20000000000000000000180c20000000800000000000000b100000067010000900100007374617469737469630000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000646e61740000060000000000ff0300000000000000000000000000000000000010000000000000000180c20000000000bb8e66505c1aa6d062c3b52cffffffff000000006e666c6f670000000000000000000000000000000000000050000000121b6eb244c4f0fffbf04a000000007e4b000022569e338e2c551c2fc4a19597ba4c501c8b1f16fb7809c40aeea768e825383d2afb577ed2bb6dd99fd43741089cca6edb0041555449540000000000000000000000000626967e000000000000000000000008000000000000200000000000000000840200"/544]}, 0x298)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='f2fs_file_write_iter\x00', r6, 0x0, 0x9b1}, 0x18)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa0</\x00\x8eO4._\x14zC\x8a\xe8\xe0u\xe0\xff\xf1\xb2\xfd\xf6nz\x05-]\xc2Vk\xaeky\xd3\x83\xe2\xc7\xd3\xe6M^\x98ox\x14\t\xe9Q1\x1dK\x9a\x045\xd37\xb22\xfdD(\xd2\xdd\xa0\xff\x0f\x00\x00\x00\x00\x00\x00v\n\xd8?]k\x14N\x18\xf4\xc2j\xed6g\xfd\xd2\xd4\xe3\x1f\xa6 \xa0\x8d\xb5\x9aE<2`]<\x8cR\xd69\x0fO\xbf\xc3\xbd\xb0\x96\x90\x91k\x86\x1a\x10\xd2\xf5\x8b\xfc\xf4\xd0[\x12\xf5+\x1aS\x02/Yx\xf2jJb\x97\x9c/\x1f5i\xc6\x861\x9a\xff\xc3\xe7\xbfU\xd5\xac\xccB=\x8f\xfd\x84\xeepQ\x93nn\x0f\xc6\xa9?\xad\x8b~\x96@i=G\x9ft\x1d\xcc\xc6Ys7\x7f\x8ehv\xd3$\x13s\xa0\xbfi\xfaFS\xa9=Xe\xf8tI\x15\x882\x8b\x8e-X\xb8\xf2\x9du\x15S^\xec\xce\xfaf$S\x9f\xe7Ed\n\x84\\ u\xd2\x16\xc1\xa5\xa0\xaa\xe8.i\xc8\x0e\vt\xe2\xf1lA\x93\xdd\xce\x8f$\x06v\xbe\xe7\x95nN\xc5\xaa\x1ev\xc6P\x9c\\G&y\x8bYA\xc3}\xd9\x86[\xb2\xf3\x0f\x90%\xcb\x81\xe8\xea\xbcs\x95\xe9\x8eXH\x19m\xdfOY\xf1E9-\xc8\xe7\x13^+(\x034\x82\xafiOO\x14\x8f^\x8c', 0x9)
ftruncate(r8, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000000)='++\x00')

13.749983451s ago: executing program 5 (id=2782):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0xa, 0x0, 0x2, 0x7ffc1ffb}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000240)=ANY=[@ANYRES32=r0], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x2e2080, 0x3)
readlinkat(r1, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000500), 0x0)
r2 = gettid()
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000140))
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x4000864)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x8000000)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x48)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={0xffffffffffffffff, r6}, 0xc)
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00')

13.749683131s ago: executing program 33 (id=2782):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0xa, 0x0, 0x2, 0x7ffc1ffb}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000240)=ANY=[@ANYRES32=r0], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x2e2080, 0x3)
readlinkat(r1, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000500), 0x0)
r2 = gettid()
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000140))
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x4000864)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x8000000)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x48)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={0xffffffffffffffff, r6}, 0xc)
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00')

11.831254345s ago: executing program 3 (id=2810):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00')

11.703963386s ago: executing program 3 (id=2811):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[])

11.665098457s ago: executing program 3 (id=2812):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x158)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'})

11.570924798s ago: executing program 3 (id=2813):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x40})
mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000000), 0x48)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000280)={[{@user_xattr}]}, 0x9, 0x537, &(0x7f0000000fc0)="$eJzs3c9vI1cdAPCvJ4mTbtNmF3qACtgFCgtarb3xtlHVC90LCFWVEIgD4rANiTcKseMQO1UTIpH+DXDgCn8CByQOSD1x4MYRiQNCKgekBSLQBgkkoxlPUm/idL2Nf0D8+UijmTfPM9/3ksy8mefJvAAm1o2IOIiIYkS8FREL+fpCPsXrnSn93KPD/ZWjw/2VQrTb3/pbIctP10XXNqln833ORcQ3vxbxvcLZuM3dvY3lWq26nafLrfpWubm7d3u9vrxWXatuVipLi0t3Xr37SmVgdb1e/8XDr66/8e1f/+rT7//u4Ms/TIs1n+d112OQOlWfOYmTmo6IN4YRbAym8nlxzOXgo0ki4mMR8bns+F+IqeyvEwC4zNrthWgvdKcBgMsuyfrACkkp7wuYjyQplTp9eC/ElaTWaLZuPWjsbK52+squxkzyYL1WvXNt9g8/yK4YZgppejHLy/KzdOVU+m5EXIuIn8w+k6VLK43a6vguewBgoj17qv3/52yn/e9Dj2/1AID/G3PjLgAAMHLafwCYPNp/AJg8fbT/+Zf9B0MvCwAwGk9x/58MsxwAwOjo/weAyaP9B4CJ8o0330yn9lH+/uvVt3d3Nhpv316tNjdK9Z2V0kpje6u01misZe/sqT9pf7VGY2vx5dh5p9yqNlvl5u7e/XpjZ7N1P3uv9/3qzEhqBQB8mGvX3/t9ISIOXnsmm6JrLAdtNVxunueByeUlfjC5jPYFk6v/e/zfDrUcwPj0vA+Y67n4uJ8+RRDPGcH/lJuf7L//3xjPcLno/4fJNfWRtpodeDmA0dP/D5Or3S6cHvO/eJIFAFxKF3jGv/2jQV2EAGP1pOeAB/L9PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwy8xHx/SgkpXws8PlIklIp4rmIuBozhQfrteqdiHg+rkfEzGyaXhx3oQGAC0r+UsjH/7q58NL86dxi4V/ZYP/FtPXP120vpuv/frJ+9nj4sMoH211gXEEAYMDeWW61tiv5vOtG/tHh/srxNMryPLwX/8mHIl45OtzPpk7OdExn87nsWuLKPwp5ujMW6YsRMTWA+AfvRsQnetW/kPWNXM1HPu2OH3ns50YaP3ksfpLldebpxdfHB1AWmDTv3YuI13sdf0ncyOa9j/+57Ax1cQ/vdXZ2fO47OtwvHsc/Pv9N9YifHvM3+o3x8m++fmZle6GT927Ei9OPxT85/xzHL5wT/6U+4//xU5/58VfOyWv/LOJm9I7fHavcqm+Vm7t7t9fry2vVtepmpbK0uHTn1buvVMpZH3X5uKf6rL++duv588qW1v/KOfHneta/eLLtF/qs/8///dZ3P/sh8b/0+V7xk3ihZ/yOtE38Yp/xl6/88tzhu9P4q+fU/0m//1t9xn//z3urfX4UABiB5u7exnKtVt2+0EJ6FzqI/ZxZSIs40B32WCh2Ff5PMdxYT7UwM6yf6tAXpk+uFQe75++kexxxdZKB1+JCC49GFWu85yVg+D446MddEgAAAAAAAAAAAAAA4Dyj+NelcdcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAy+u/AQAA//9xkcaD")
quotactl$Q_SETQUOTA(0xffffffff80000900, &(0x7f0000000c80)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

11.254896132s ago: executing program 3 (id=2817):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0)
mount$tmpfs(0x0, 0x0, 0x0, 0x8200, 0x0)
r0 = dup(0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c00)={0x6, 0x19, &(0x7f0000000480)=ANY=[@ANYBLOB="1800e5000900000000000000ff0f000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181a0000", @ANYRES32=r0, @ANYBLOB="00000000000000000df2ea098a00000085100000fdffffffbd75010004000000185b00000000000000000000000000008500000087000000af102000000000008510000001000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x280, 0x1000, &(0x7f0000000c00)=""/4096, 0x40f00, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3, 0x9, 0x70}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000580)=[{0x5, 0x2, 0xc}, {0x0, 0x3, 0x9, 0x4}], 0x10, 0x9, @void, @value}, 0x94)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x1c)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'dummy0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}})
getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000001e40)={@broadcast, @empty, <r4=>0x0}, &(0x7f0000001e80)=0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYRES64=r1, @ANYBLOB="78258d430236771dc8287fdb3c320714981c46a8535d2cf216844f2e4c9b608da7ce1416c79280c8dffd9c91dec877ef96c625247b3a10dbc460fd4a30e7ba029683de68b83b8faac92a8b46685224632f3ded78de16688f1509089efd9426b9ba13524ab1da26121ca3a37611d34953880bf4843daabe63b6a553ab50c53178acba5416ca60f34e8366ea396c4a770ef312949204fe5075618694346719be7f55881468424b11e43db178e5e274f8fe516e8416448cd0ec40de7166b310c78a73aa5be5c6c2259dc73cee323df4252d6951e7559454892b44a55a3fc63c825f88826387e87e4532756b335ebf", @ANYRESOCT=r0, @ANYBLOB="b122141b6ac1d6e4617a2a9308947a19a8db353a084a9ac3f24b16225b3b2d78b8f3c7a64dec2a19bb7e7de915d832bf1c052b93c22403a9bc371573abb2f0b44d0e32cd9f", @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
creat(&(0x7f0000000100)='./file0\x00', 0x158)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r7}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'})
umount2(&(0x7f00000003c0)='./file0\x00', 0xb)

11.117775053s ago: executing program 3 (id=2820):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00')

11.100182753s ago: executing program 34 (id=2820):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00')

3.21918481s ago: executing program 0 (id=2883):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00')
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
writev(r0, &(0x7f00000003c0), 0x100000000000022d)

3.174710571s ago: executing program 0 (id=2923):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00')
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed, 0x4, 0x2}, 0xe)
acct(&(0x7f00000001c0)='./file0\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r1, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10)
r3 = accept4$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10, 0x0)
bind$vsock_stream(r3, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10)
ioprio_get$uid(0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000005d00)=ANY=[@ANYBLOB="000000004c900200030000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"])
setregid(r5, 0x0)

2.293083652s ago: executing program 0 (id=2943):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
unshare(0x4020400)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="14"], 0x7c}}, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x42, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f0000000300), &(0x7f0000000400)=@udp6=r3}, 0x20)
bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r2, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20)

2.230091202s ago: executing program 0 (id=2944):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000059c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
fsopen(0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x410c84, &(0x7f00000003c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}]}, 0x1, 0x775, &(0x7f0000001180)="$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")
r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x1c1002, 0x0)
geteuid()
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8=r1], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="838323000000000000000000a48874b6749d275a00"/31], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r4, 0x0, 0x0}, 0x20)
sendfile(r3, r2, 0x0, 0x3ffff)
sendfile(r3, r2, 0x0, 0x7ffff000)

2.106339604s ago: executing program 0 (id=2945):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00')
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed, 0x4, 0x2}, 0xe)
acct(&(0x7f00000001c0)='./file0\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r1, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10)
ioprio_get$uid(0x0, 0x0)

2.025345025s ago: executing program 1 (id=2946):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00')
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed, 0x4, 0x2}, 0xe)
acct(&(0x7f00000001c0)='./file0\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r1, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, <r4=>0xffffffffffffffff}, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10)
r6 = accept4$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10, 0x0)
bind$vsock_stream(r6, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10)
tgkill(r2, r2, 0x1a)
ioprio_get$uid(0x0, 0x0)
r7 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r8=>0x0}, &(0x7f0000cab000)=0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x3000000, &(0x7f0000000200)={[{@nobarrier}, {@dioread_nolock}]}, 0x1, 0x527, &(0x7f0000019580)="$eJzs3W1rZFcdAPD/vZPZZndTM1WRtWBbbGW36M5sGttGkXYF0RdSUOv7NSaTEDLJhMykbkLRLH4AQUSFfgDfCH4AQfoRRCjoe1FRRLf6UnvlztyxeZhJhjzN7uT3g5M55z6c/zmXzJ37cLg3gEvruYi4GxGliHgxIqaL6WmRYreb8uXef/j2Qp6SyLI3/5FEUkzr1ZWXJyLierHaZER862sR300Ox21t76zONxr1zaJca69t1FrbO7dX1uaX68v19dnZmVfmXp17ee5OVjhVPysR8dpX/vLTH/3iq6/95nPf++O9v936ft6sL32i2+6IWDhVgAG6dZc726In30ab5xFsRPL+lEujbgUAAMPIj/E/GhGf7hz/T0epczQHAAAAjJPs9an4TxKRAQAAAGMrjYipSNJqMRZgKtK0Wu2O4f14XEsbzVb7s0vNrfXFfF5EJcrp0kqjfqcYK1yJcpKXZ4oxtr3ySwfKsxHxVET8ZPpqp1xdaDYWR33xAwAAAC6J68/uP///93TayQMAAABjpjKwAAAAAIwLp/wAAAAw/pz/AwAAwFj7xhtv5Cnrvcd78a3trdXmW7cX663V6trWQnWhublRXW42lzvP7Fs7rr5Gs7nx+Vjful9r11vtWmt7595ac2u9fW9l3yuwAQAAgAv01LPv/iGJiN0vXu2kKJ4DCFwWX78y1GJ/PveGABeoNOoGACMzMeoGACNTPnYJewgYd8kx8w8P3uleK4zfnk97AACAs3fzk3vv/7/Tmda7GXj8tQHgcWasDwBcPu7uweVVjtKDE61448ybAozIR7ofTwyaP/DhHUPc/+9eY8iyEzUMAAA4M1OdlKTV4jh9KtK0Wo14svNagHKytNKo3ynOD34/XX4iL8901kyOHTMMAAAAAAAAAAAAAAAAAAAAAAAAAHRlWRJZX1G8Fbz/XAAAAODxEZH+NSnO9G9OvzC1/+rAgbd+vfPmz+7Pt9ubMxFXkn9O55OuRET758X0lzKvBAAAAIBHQPc8vficGXVrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg37z98e6GXLjLu378cEZV+8SdisvM5GeWIuPavJCb2rJdEROkM4u8+iIgb/eIn8UGWZZWiFf3iXz3n+JXOpukfP42I62cQHy6zd/P9z91+3780nut89v/+TRTptAbv/9L/7/9KA/Y/Tx4oD/L0e7+qDYz/IOLpif77n178pBt/X4i88PyQffzOt3d2+s7YU2W/+Htj1dprG7XW9s7tlbX55fpyfX12duaVuVfnXp67U1taadSLv33D/PhTv/7gqP5fGxC/sr//h7b/C0P1Pov/vnf/4ce6hXK/+Lee7//7e2NA/LT47ftMkc/n3+zld7v5vZ755e+eOar/iwP6P3lM/28N1f/4wovf/OGf+s45tDUAgIvQ2t5ZnW806ptHZCaHWOaCM68/Gs04w0w8Gs0YVSb7Qff/8XT1nHL1Q5nsNKtPxBk048qh72kpTlphErGb1zXkPyQAADBmPjzoP+oOEgAAAAAAAAAAAAAAAAAAAHCeTvhYssmIOHKZu3tqPhhzdzRdBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA40v8CAAD//+SZylA=")
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f0000005d00)=ANY=[@ANYBLOB="000000004c900200030000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"])
setregid(r8, 0x0)

2.008579535s ago: executing program 0 (id=2947):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
lremovexattr(0x0, 0x0)
mq_open(&(0x7f0000000480)='!sel\x87U\xb9\x10\n\xe9[b\xd7\\P\xc1\xde.\x1dml(:\xb7o\xb2O\xcb]0y', 0x6e93ebbbcc0884f2, 0x184, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3})
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0)
r4 = syz_io_uring_setup(0x39, &(0x7f0000001100)={0x0, 0xe7b8, 0x3501, 0x0, 0x2}, &(0x7f0000000080), &(0x7f00000010c0))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x21, &(0x7f0000000440)=r3, 0x1)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r6}, 0x18)
r7 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r7, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @rand_addr=' \x01\x00'}, {0xa, 0xfffc, 0x0, @dev, 0x2020000}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c)
syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0}}}}}, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000100)=0x4, 0x4)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x13, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x84}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
syslog(0x4, 0x0, 0x0)
getcwd(&(0x7f0000000680)=""/91, 0x5b)
sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001f00)=@newtaction={0x1148, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x1134, 0x1, [@m_police={0x1130, 0x1, 0x0, 0x0, {{0xb}, {0x1104, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffe, 0x0, 0xffff8d54, 0xf, 0x9, {0x6, 0x2, 0x7, 0xffff, 0x9, 0x7}, {0x7, 0x2, 0x3, 0xdcda, 0xfff, 0x7}, 0xfffffd0a, 0x80}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x9db, 0x5, 0x9, 0x10001, 0xc, 0x400, 0x7, 0xa1, 0x1ff, 0x5, 0x8001, 0x7ff, 0xff, 0x4e39, 0x70, 0xd9d8, 0x3, 0x1, 0x9, 0x3, 0x4, 0x7cf, 0x0, 0x800, 0x10000, 0xd, 0xc5e, 0x7, 0x0, 0x4, 0xd, 0x400, 0x800, 0x7, 0xed0, 0x101, 0x7, 0x5, 0x9, 0x0, 0x9, 0x9, 0x4, 0x5, 0xf, 0x0, 0x1, 0x7, 0x102, 0x5, 0x0, 0x8, 0x9, 0x2, 0x2, 0x1, 0xf08a, 0x90b4, 0x2, 0x2, 0x1, 0xffffffff, 0x8, 0x7, 0x0, 0x101, 0x80000000, 0x0, 0xb, 0x3, 0x5, 0x5, 0x3, 0x401, 0x40, 0x10001, 0x7, 0x6, 0xf3a2, 0x10001, 0x4, 0x4, 0x9, 0x7fff, 0x6, 0xf, 0xffffff7f, 0x3ff, 0x0, 0x1719, 0x200, 0xd, 0x8, 0x4, 0x9, 0x3ff, 0xa86, 0xfff, 0x1, 0x80, 0xa794, 0x8, 0x200, 0xd, 0xa, 0x31, 0x9573, 0x1, 0x80000001, 0x8, 0x8b8, 0x6, 0x3, 0x4, 0x5, 0xb18, 0x800, 0x7, 0x98c1, 0x9, 0x9, 0x81, 0x1, 0xa, 0xfffffffb, 0x4, 0x2, 0xd4, 0x3, 0x9d35e01, 0x0, 0x3ff, 0x1b36a1c3, 0x2, 0x1, 0x80000001, 0xfffffffc, 0x9, 0xffffffff, 0x0, 0x8, 0x6, 0xd1a, 0x9, 0x1, 0x5, 0x3, 0xc, 0x4010, 0x9, 0x8, 0x0, 0x3, 0x10000, 0x6, 0x10, 0x3, 0x6, 0xa354, 0xe723, 0x0, 0x8, 0x2, 0x1000, 0x7, 0x47db7d69, 0x9, 0x7, 0x4, 0x5, 0x5, 0x9, 0x7, 0x8, 0x8, 0x800, 0x6, 0xff, 0x2, 0x7, 0x7fff, 0x78, 0x4, 0x8, 0xf, 0x4, 0x10000, 0x0, 0xba4b, 0xffff25d0, 0xc, 0xdee, 0xfffffffa, 0x40232984, 0xfffffffb, 0xf4, 0x7, 0x1, 0xf7ff, 0x2, 0xffffffff, 0x4, 0x6, 0x401, 0x6, 0xb, 0x5c80, 0x6, 0x835, 0x2, 0x9, 0xf, 0x7, 0xffff, 0xfffe, 0x4, 0x400, 0x2, 0x8f, 0x9, 0x3a, 0x7, 0x1, 0x4, 0xe, 0x3d82, 0x7, 0x10001, 0x4, 0x4e, 0x9, 0x7, 0x9, 0x6, 0xc, 0x7, 0x8, 0x2, 0x7, 0x63e, 0x7fffffff, 0xfff, 0x8fb2, 0x8, 0xfffffff8, 0x40, 0x1000, 0x48, 0x9, 0x9, 0x9, 0x8001, 0xb8b8, 0x2, 0x3ff]}, @TCA_POLICE_RATE={0x404, 0x2, [0xb, 0x6a, 0x9, 0xffff8000, 0x6, 0x3, 0x4, 0x1, 0x4, 0x0, 0x80000000, 0x39e, 0x1, 0x1, 0x1, 0xb48a, 0x1ff, 0x480f, 0xb9, 0x8, 0x7, 0x0, 0x9, 0x2, 0x3, 0x0, 0x3ff, 0xdabf, 0xed4, 0x4, 0x68, 0xe514, 0x58, 0xff, 0x4, 0xfffffffb, 0x8314, 0xffffffff, 0xac7, 0x4, 0x7a, 0x1, 0x8001, 0x0, 0x10, 0x8007, 0x3, 0x7, 0xe, 0x3, 0x2, 0x9, 0x80000000, 0x1, 0x4, 0xffffff81, 0x5ae0c288, 0x7, 0x3, 0x10000, 0x5, 0x8c, 0x2, 0x5, 0x1000, 0x7, 0x7, 0xf, 0x7, 0x4, 0x80, 0x7, 0x9, 0xefd9, 0x0, 0x4, 0x8, 0xffffffff, 0xf, 0x6, 0x5, 0x1, 0x71e, 0x6, 0x1b3, 0x8, 0x776, 0x80000000, 0x4ede, 0x9, 0x4, 0x8, 0x8001, 0xf6, 0x3, 0x7, 0x3, 0x5, 0x5, 0x7, 0x3, 0x1000b4, 0x2, 0x4, 0xf83, 0x3, 0x30000000, 0x8001, 0x2, 0x0, 0x7fffffff, 0x4, 0x5, 0x0, 0x3, 0x6, 0x7, 0x842, 0x9, 0xfffeffff, 0x10000, 0x7fffffff, 0x930, 0x80000001, 0x7fffffff, 0xb8a, 0x35, 0x4, 0x7fff, 0xad2f, 0x5, 0x3, 0xfffffffb, 0x4, 0x3ff, 0xabd6, 0x4, 0x7, 0x0, 0x0, 0x1, 0x40e9, 0x7, 0x4, 0x9, 0x2, 0x7, 0x8001, 0x8, 0x2, 0x6, 0x1, 0x1c7, 0x7, 0x7, 0xa, 0x6, 0x1, 0x2e, 0x10, 0x7, 0xffffffff, 0x1, 0x5, 0x4a, 0x4, 0xf41, 0xe, 0xd, 0x5, 0x9, 0x9, 0x8, 0x2, 0x2, 0x68, 0x5, 0x6, 0xffffff80, 0x1, 0x9, 0x2f, 0x7f, 0x0, 0xe0, 0x5, 0x10, 0x2, 0x2, 0x9, 0x1, 0x7f, 0x4, 0x3, 0x9, 0x0, 0x4, 0x9, 0x8, 0x5, 0xebbf, 0x9a5, 0x9, 0x9, 0x5c81826f, 0x0, 0x2, 0xffff0000, 0x2, 0x5, 0x2, 0x2, 0xff, 0xd, 0x0, 0x4, 0x101, 0x2, 0x7fff, 0x5eeb, 0x3, 0xffff, 0x10001, 0xef, 0x7, 0x5, 0x865, 0x2049, 0x7, 0x4c, 0x6, 0x0, 0x6, 0xfffffffd, 0x2, 0x6, 0xfffffeff, 0x6, 0x400, 0x3000, 0x5, 0x9, 0xaa54, 0xffffffff, 0x4, 0x1, 0xfffffffb, 0xfffffff7, 0x6, 0x3ff, 0x8, 0x4, 0x7fffffff, 0x7fffffff, 0x1, 0x2]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8000}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x6, 0xdc4, 0x4, 0x1, {0x1, 0x1, 0x3, 0x51, 0xd585, 0xb}, {0x8b, 0x0, 0x7, 0x3, 0xdd30, 0xf8}, 0x9, 0x8, 0x80000001}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd8, 0x20000000, 0x1, 0x3, 0x8, {0x1, 0x1, 0x5, 0x8ef8, 0x7, 0x3}, {0x9, 0x1, 0x80, 0x219a, 0x200, 0xbf}, 0x5, 0x6, 0xc}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0xfff, 0x6, 0x10, 0x77, 0x3, 0xff1, 0x0, 0x3, 0x7f, 0xffffffff, 0x3, 0x9, 0x0, 0x7ff, 0x9, 0x9, 0x7, 0x9, 0xffffff01, 0x7, 0xce6, 0x8, 0x8, 0x4, 0xbb847b3, 0x101, 0x4, 0xc32, 0xb10, 0x1b680000, 0x9, 0x93, 0x4, 0x6, 0x5, 0x10000, 0xc, 0x0, 0x7, 0x8, 0x9, 0x100, 0x7fffffff, 0x200, 0x8, 0x0, 0x5, 0x4, 0x4, 0x0, 0x2, 0xfa, 0x4, 0x8, 0x4, 0x3, 0x3ff000, 0x1, 0x6, 0x6, 0x2, 0x7fffffff, 0x4, 0x4, 0x0, 0x2, 0x6, 0xdc, 0x6, 0x2, 0x8, 0x90000, 0x0, 0x9, 0xed6d, 0xffff0000, 0x25, 0x6, 0x40, 0xffff, 0x3, 0x6, 0xca7, 0x31, 0x98000000, 0x9, 0x2, 0x398, 0x5d7a, 0x0, 0x4, 0x0, 0xd, 0x8, 0x1, 0xfff, 0x1, 0x200, 0x6, 0x8, 0x7, 0x0, 0xaf3, 0x7fffffff, 0x3, 0xb, 0x1, 0xffffffff, 0x3, 0x80, 0x34d, 0x7, 0x6a6, 0xc099, 0x5, 0x1, 0x8, 0x3, 0x0, 0x7fff, 0x1ff, 0x9, 0x8, 0x2, 0x6, 0x7fff, 0x6, 0x10001, 0x8, 0x1, 0xfff, 0x4, 0xffff, 0x2, 0x8, 0x8001, 0x240000, 0x38000000, 0x0, 0x80000000, 0x6, 0x2, 0x1, 0x8b5, 0x6, 0x2, 0x3, 0xfffffffc, 0x4, 0x6, 0xe, 0xfff, 0x64, 0x2, 0x5, 0x202, 0xd006, 0x3d20, 0x8001, 0x9, 0xff, 0x92d, 0x9316, 0x7fffffff, 0x9, 0x80000001, 0x5, 0x9, 0x1, 0x9, 0x9, 0x6, 0x8, 0x45, 0x1f10, 0x1, 0xfac6, 0x8, 0x80000001, 0x2ca343c6, 0xc898, 0xffff, 0x3, 0x2253, 0x5a4, 0xffffffff, 0x54ac, 0x8a04, 0x6, 0x9, 0x2055, 0x3, 0x30c4, 0x1, 0x5, 0xffff, 0x6, 0xffff, 0x0, 0x9, 0x2, 0xe, 0x5, 0xc, 0xe1, 0x4, 0x1, 0x9, 0x0, 0x1, 0x400, 0x400, 0x8, 0x7ff, 0xa85, 0x800, 0x400, 0x3, 0x0, 0x5, 0xb04d, 0x0, 0x4, 0x4, 0xfadc, 0x80000001, 0x4, 0xfd, 0x31d6, 0x8, 0x8, 0x3, 0xde, 0x7, 0x1000, 0x8, 0x8, 0x7fff, 0x5, 0xa2, 0x80000001, 0x9, 0x7, 0x4bd8, 0x3, 0xffffffac, 0x7, 0x401, 0x3, 0x6, 0xa, 0x8, 0x7, 0x3, 0x4]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4b9bcba8}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x1, 0x8, 0x7582, 0x2, 0x0, 0x1, 0x1, 0xe1, 0xffff0000, 0x16d, 0x200, 0x3, 0x4, 0x1, 0x40, 0x3, 0x9, 0x8, 0x5, 0x7fffffff, 0xffffffea, 0xf51, 0x9, 0x0, 0xfffffff9, 0x8, 0x5, 0xbe0, 0x1ff, 0x8, 0x0, 0x1, 0xb, 0x8, 0x2, 0x8000, 0x2, 0x5, 0x101, 0x9, 0x5, 0xfffffff8, 0x7, 0x10000, 0x7, 0x4, 0x4, 0x0, 0xe, 0x1, 0x2, 0x8, 0xc, 0x101, 0x7e0, 0xffffffa9, 0x81, 0x0, 0xffffffff, 0x66, 0x8000, 0xa01, 0xfffffffc, 0xc79, 0xf8, 0x80000001, 0x7, 0x101, 0x7, 0x7f, 0x8d70000, 0x145a3c9b, 0x0, 0x40000000, 0xc2, 0x3, 0x3, 0x5, 0x5, 0x3, 0xc, 0x9, 0xa73, 0x5, 0x7ff, 0xd690, 0x0, 0x5, 0x4, 0xa8a, 0x400, 0xf76, 0x20cdd2d9, 0x4, 0x7, 0x5, 0xa5, 0x226, 0x2e5e, 0x8, 0x10, 0x4307, 0x81, 0x6, 0x4, 0xfffffff7, 0xab, 0x9, 0x3, 0x7, 0x3, 0x5, 0x1, 0x1, 0x1, 0x8, 0x3, 0xfffffff7, 0x0, 0x1, 0x3, 0x6, 0x3, 0xffffff75, 0xf, 0x4, 0x9, 0x0, 0x9, 0x80000000, 0x2, 0x101, 0x4, 0x2, 0x6, 0x6, 0xffff, 0x3, 0xfffffff7, 0x7, 0x4b5, 0x1, 0x6, 0x9, 0x10001, 0x2, 0x9, 0x7ff, 0x7, 0xe, 0xe1a, 0x2, 0x0, 0x1, 0x1, 0x8, 0x9, 0xfffffff9, 0x3, 0x8, 0x5, 0x6, 0x1, 0x8001, 0x3, 0x0, 0x3, 0x10, 0xef, 0x6, 0x80000001, 0x1, 0x8, 0x385, 0x3, 0x5, 0x3ff, 0x7, 0x528, 0x1, 0x99, 0x2, 0x76, 0x10, 0xfffff000, 0x0, 0x60, 0x7, 0x473, 0x7fff, 0x2, 0x9, 0x9, 0xdb, 0x2, 0x401, 0x4, 0x2, 0x2, 0xdd, 0x6, 0xff, 0x4, 0x9, 0x1, 0xb, 0x5, 0x1, 0xc, 0x1ff, 0x5, 0x477, 0xe1, 0x7ff, 0xbb, 0x7ff, 0x1, 0x1cbdf8fa, 0x0, 0xd, 0x0, 0xfffff69b, 0x4, 0xfff, 0x59, 0x0, 0x470, 0x9, 0x1c00, 0x7, 0x1, 0xd0, 0x46, 0x551b, 0x8, 0x8, 0x1, 0x5, 0x7ff, 0xa9, 0x5, 0x1, 0xfff, 0x7, 0x94a, 0xe2, 0xf5, 0x2, 0x9e60, 0xb, 0x4, 0x5, 0x1, 0x0, 0x9]}]]}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x1148}, 0x1, 0x0, 0x0, 0x8800}, 0x24008044)

1.389365253s ago: executing program 7 (id=2952):
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000880)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x4a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
r3 = eventfd(0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000000c0)=r3, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1})
io_uring_enter(r0, 0x628, 0xc88d, 0x43, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x200000000000006}, 0x18)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x18, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)

1.241108644s ago: executing program 4 (id=2954):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
unshare(0x4020400)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="14"], 0x7c}}, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x42, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f0000000300), &(0x7f0000000400)=@udp6=r3}, 0x20)
bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r2, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20)

1.170035815s ago: executing program 4 (id=2955):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="efff6100000000000000000000d801000000000100000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000f958664e34480000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000300)={0x4, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000040)={0x0, 0x8, 0x1, 'queue0\x00'})

1.169873075s ago: executing program 4 (id=2956):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffff7ffffe9}, 0x18)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x10000, &(0x7f0000000480), 0x3, 0x4c4, &(0x7f0000000780)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x10)
getdents64(r1, 0x0, 0x0)

1.141830035s ago: executing program 1 (id=2957):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00')
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed, 0x4, 0x2}, 0xe)
acct(&(0x7f00000001c0)='./file0\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r1, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10)
ioprio_get$uid(0x0, 0x0)

1.093982166s ago: executing program 4 (id=2958):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS    \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2800128014000180090001006c617374000000000400028010000180060001006c6173740000000008000340000001"], 0xb4}}, 0x20050800)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10)
r7 = gettid()
r8 = epoll_create1(0x0)
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x40000, 0x0)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r10, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="08004000000000000a00000000000000ff0100"], 0x5000)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000200)={0xa000000a})
finit_module(r9, 0x0, 0x0)
tkill(r7, 0x7)
r11 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r12 = fcntl$dupfd(r0, 0x0, r11)
ioctl$USBDEVFS_SUBMITURB(r12, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x6}, 0x8, 0x7, 0x0, 0x48000000, 0x0, 0x0, 0x0})

1.082840576s ago: executing program 1 (id=2959):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000001400048008000140000000000800024000000b002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xb4}}, 0x0)

1.048578527s ago: executing program 1 (id=2960):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b81000085"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb8af, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000600)='kfree\x00', r0}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0)

958.137408ms ago: executing program 1 (id=2961):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000400)={0x2, 0x1, 0x10, 0x0, 0x2}, 0xc)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x74bd2a, 0xfffffffc, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xc}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0xa}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = gettid()
select(0x40, &(0x7f00000000c0)={0x7, 0x7, 0x80000001, 0x0, 0xfff, 0x2, 0xe8, 0x7fffffff}, &(0x7f0000000140)={0x400, 0xe, 0x2, 0x51, 0x7e7, 0x61, 0x4, 0x9}, &(0x7f0000000180)={0x0, 0x9, 0x2, 0x1, 0xfffffffffffffff9, 0x0, 0x5, 0xfffffffffffffffa}, &(0x7f0000000200))
syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@broadcast, @local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@generic={0x7, 0x2}]}}, {{0xffff, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, {[@sack={0x5, 0x2}]}}}}}}}, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r7 = eventfd2(0x0, 0x0)
read$eventfd(r7, &(0x7f0000000400), 0x8)

921.358698ms ago: executing program 4 (id=2962):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18)
pipe2$9p(0x0, 0x4800)
fsetxattr$security_selinux(0xffffffffffffffff, 0x0, &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x24, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, 0x3}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="000127bd7000fcdbdf2518000000140006800800060003000000080006000400002e1c0000804400040020e000000a004e2400000003fe80000000000000000000000000003306000000200002000a004e210000000900000000000000000000ffff0a010102040000001400038008000300040000003900020010000000"], 0x84}, 0x1, 0x0, 0x0, 0x40040}, 0x8841)
mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0)
r2 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x40006, 0x34370, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x3, 0x2}, 0xc58, 0x80af, 0x2, 0x6, 0x7, 0xffffffff, 0xb, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r2, 0x0)

719.392391ms ago: executing program 4 (id=2963):
r0 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x10, 0x0, 0x5, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000000)={0x5, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fffffffefff, 0x2}, 0x112})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x1ffffdf3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000700000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$netlink(0x10, 0x3, 0x4)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback=0x26, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r6, 0x0, 0x1}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c05eac6f4dba7537faf925ac8f1bb906cc9125cdf01340d9851f8760545b2ec5d312fe8a0", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x4801}, 0x20008844)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000104000000fd0f000007000000000000015e3872fe4c3cf0a41a2933402188330927335f84d89615f43601ed0e74ee536152d722e26c33da0d39ed47eab5a39b2e1a70784e69af1b24e57ad676d115cf23ea313b6f8e6162a654e502fde6687c5037c3907f1518d4d48385c653db561e9f31a887f763dc1821d1cd9b39dcf3903cb6e407d6bf98574e05649684be0db152c8ffa4c4bf3ae60678c220a32d77c0998cdf49189a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r8}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000040), &(0x7f0000000080)=r8}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendto$unix(r9, &(0x7f00000006c0)="3572fc7c3c954dcb87", 0x9, 0x4040081, 0x0, 0x0)
recvfrom$unix(r10, 0x0, 0x0, 0x10102, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth1_macvtap\x00', <r11=>0x0})
r12 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={r11, 0x1, 0x6, @local}, 0x10)
sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0xc}, {0x9, 0x8}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004811}, 0x20040000)

537.985143ms ago: executing program 7 (id=2964):
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'\x00', 0x2}) (async)
ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x13)
ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x8) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r3=>0x0, 0x92, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f00000004c0), 0x8, 0xad, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r5], 0x24}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="851001010000000000000000ffffffff5d61ff610100000018000000090000000000000008000000"], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, &(0x7f0000000440), 0x41100, 0x20, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0x9, 0x10000, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x1, 0x1, 0xffffffffffffffff, 0x1, r4, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0xfffffff8, @void, @value}, 0x94) (async)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000ffff000000007200ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r6}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYRES16=r6, @ANYRESOCT=r5, @ANYRES32=r3], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000080)={'team0\x00', <r11=>0x0}) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x1f00, {0x0, 0x0, 0x74, r11, {0xb, 0xfff2}, {}, {0xe, 0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0)

448.086874ms ago: executing program 6 (id=2966):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
unshare(0x4020400)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="14"], 0x7c}}, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x42, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f0000000300), &(0x7f0000000400)=@udp6=r3}, 0x20)
bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r2, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20)

412.121905ms ago: executing program 7 (id=2967):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0)
mount$tmpfs(0x0, 0x0, 0x0, 0x8200, 0x0)
r0 = dup(0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c00)={0x6, 0x19, &(0x7f0000000480)=ANY=[@ANYBLOB="1800e5000900000000000000ff0f000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181a0000", @ANYRES32=r0, @ANYBLOB="00000000000000000df2ea098a00000085100000fdffffffbd75010004000000185b00000000000000000000000000008500000087000000af102000000000008510000001000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x280, 0x1000, &(0x7f0000000c00)=""/4096, 0x40f00, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3, 0x9, 0x70}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000580)=[{0x5, 0x2, 0xc}, {0x0, 0x3, 0x9, 0x4}], 0x10, 0x9, @void, @value}, 0x94)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x1c)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'dummy0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}})
getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000001e40)={@broadcast, @empty, <r4=>0x0}, &(0x7f0000001e80)=0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYRES64=r1, @ANYBLOB="78258d430236771dc8287fdb3c320714981c46a8535d2cf216844f2e4c9b608da7ce1416c79280c8dffd9c91dec877ef96c625247b3a10dbc460fd4a30e7ba029683de68b83b8faac92a8b46685224632f3ded78de16688f1509089efd9426b9ba13524ab1da26121ca3a37611d34953880bf4843daabe63b6a553ab50c53178acba5416ca60f34e8366ea396c4a770ef312949204fe5075618694346719be7f55881468424b11e43db178e5e274f8fe516e8416448cd0ec40de7166b310c78a73aa5be5c6c2259dc73cee323df4252d6951e7559454892b44a55a3fc63c825f88826387e87e4532756b335ebf", @ANYRESOCT=r0, @ANYBLOB="b122141b6ac1d6e4617a2a9308947a19a8db353a084a9ac3f24b16225b3b2d78b8f3c7a64dec2a19bb7e7de915d832bf1c052b93c22403a9bc371573abb2f0b44d0e32cd9f", @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
creat(&(0x7f0000000100)='./file0\x00', 0x158)
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5}, 0x10)
umount2(&(0x7f00000003c0)='./file0\x00', 0xb)

411.906945ms ago: executing program 6 (id=2968):
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14)
fcntl$setsig(r0, 0xa, 0x13)
fcntl$setlease(r0, 0x400, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r3=>0x0})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x10000002}, 0x18)
syz_open_procfs(0x0, &(0x7f0000000300)='timerslack_ns\x00')
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000010001fff000000000007000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000300012800b000100697036746e6c0000200002801400020000000000000000000000ffffac1414bb050004000500000008000a00"], 0x58}, 0x1, 0x0, 0x0, 0x200040d1}, 0x0)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
bind$can_raw(r7, &(0x7f0000000000)={0x1d, r3}, 0x10)
socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x40044)

411.687895ms ago: executing program 7 (id=2969):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2093}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}]}, 0x48}}, 0x20000000)

365.646945ms ago: executing program 6 (id=2970):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000001400048008000140000000000800024000000b002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xb4}}, 0x0)

337.630865ms ago: executing program 6 (id=2971):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
lremovexattr(0x0, 0x0)
mq_open(&(0x7f0000000480)='!sel\x87U\xb9\x10\n\xe9[b\xd7\\P\xc1\xde.\x1dml(:\xb7o\xb2O\xcb]0y', 0x6e93ebbbcc0884f2, 0x184, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3})
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0)
r4 = syz_io_uring_setup(0x39, &(0x7f0000001100)={0x0, 0xe7b8, 0x3501, 0x0, 0x2}, &(0x7f0000000080), &(0x7f00000010c0))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x21, &(0x7f0000000440)=r3, 0x1)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r6}, 0x18)
r7 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r7, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @rand_addr=' \x01\x00'}, {0xa, 0xfffc, 0x0, @dev, 0x2020000}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c)
syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0}}}}}, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000100)=0x4, 0x4)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x13, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x84}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
syslog(0x4, 0x0, 0x0)
getcwd(&(0x7f0000000680)=""/91, 0x5b)
sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001f00)=@newtaction={0x1148, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x1134, 0x1, [@m_police={0x1130, 0x1, 0x0, 0x0, {{0xb}, {0x1104, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffe, 0x0, 0xffff8d54, 0xf, 0x9, {0x6, 0x2, 0x7, 0xffff, 0x9, 0x7}, {0x7, 0x2, 0x3, 0xdcda, 0xfff, 0x7}, 0xfffffd0a, 0x80}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x9db, 0x5, 0x9, 0x10001, 0xc, 0x400, 0x7, 0xa1, 0x1ff, 0x5, 0x8001, 0x7ff, 0xff, 0x4e39, 0x70, 0xd9d8, 0x3, 0x1, 0x9, 0x3, 0x4, 0x7cf, 0x0, 0x800, 0x10000, 0xd, 0xc5e, 0x7, 0x0, 0x4, 0xd, 0x400, 0x800, 0x7, 0xed0, 0x101, 0x7, 0x5, 0x9, 0x0, 0x9, 0x9, 0x4, 0x5, 0xf, 0x0, 0x1, 0x7, 0x102, 0x5, 0x0, 0x8, 0x9, 0x2, 0x2, 0x1, 0xf08a, 0x90b4, 0x2, 0x2, 0x1, 0xffffffff, 0x8, 0x7, 0x0, 0x101, 0x80000000, 0x0, 0xb, 0x3, 0x5, 0x5, 0x3, 0x401, 0x40, 0x10001, 0x7, 0x6, 0xf3a2, 0x10001, 0x4, 0x4, 0x9, 0x7fff, 0x6, 0xf, 0xffffff7f, 0x3ff, 0x0, 0x1719, 0x200, 0xd, 0x8, 0x4, 0x9, 0x3ff, 0xa86, 0xfff, 0x1, 0x80, 0xa794, 0x8, 0x200, 0xd, 0xa, 0x31, 0x9573, 0x1, 0x80000001, 0x8, 0x8b8, 0x6, 0x3, 0x4, 0x5, 0xb18, 0x800, 0x7, 0x98c1, 0x9, 0x9, 0x81, 0x1, 0xa, 0xfffffffb, 0x4, 0x2, 0xd4, 0x3, 0x9d35e01, 0x0, 0x3ff, 0x1b36a1c3, 0x2, 0x1, 0x80000001, 0xfffffffc, 0x9, 0xffffffff, 0x0, 0x8, 0x6, 0xd1a, 0x9, 0x1, 0x5, 0x3, 0xc, 0x4010, 0x9, 0x8, 0x0, 0x3, 0x10000, 0x6, 0x10, 0x3, 0x6, 0xa354, 0xe723, 0x0, 0x8, 0x2, 0x1000, 0x7, 0x47db7d69, 0x9, 0x7, 0x4, 0x5, 0x5, 0x9, 0x7, 0x8, 0x8, 0x800, 0x6, 0xff, 0x2, 0x7, 0x7fff, 0x78, 0x4, 0x8, 0xf, 0x4, 0x10000, 0x0, 0xba4b, 0xffff25d0, 0xc, 0xdee, 0xfffffffa, 0x40232984, 0xfffffffb, 0xf4, 0x7, 0x1, 0xf7ff, 0x2, 0xffffffff, 0x4, 0x6, 0x401, 0x6, 0xb, 0x5c80, 0x6, 0x835, 0x2, 0x9, 0xf, 0x7, 0xffff, 0xfffe, 0x4, 0x400, 0x2, 0x8f, 0x9, 0x3a, 0x7, 0x1, 0x4, 0xe, 0x3d82, 0x7, 0x10001, 0x4, 0x4e, 0x9, 0x7, 0x9, 0x6, 0xc, 0x7, 0x8, 0x2, 0x7, 0x63e, 0x7fffffff, 0xfff, 0x8fb2, 0x8, 0xfffffff8, 0x40, 0x1000, 0x48, 0x9, 0x9, 0x9, 0x8001, 0xb8b8, 0x2, 0x3ff]}, @TCA_POLICE_RATE={0x404, 0x2, [0xb, 0x6a, 0x9, 0xffff8000, 0x6, 0x3, 0x4, 0x1, 0x4, 0x0, 0x80000000, 0x39e, 0x1, 0x1, 0x1, 0xb48a, 0x1ff, 0x480f, 0xb9, 0x8, 0x7, 0x0, 0x9, 0x2, 0x3, 0x0, 0x3ff, 0xdabf, 0xed4, 0x4, 0x68, 0xe514, 0x58, 0xff, 0x4, 0xfffffffb, 0x8314, 0xffffffff, 0xac7, 0x4, 0x7a, 0x1, 0x8001, 0x0, 0x10, 0x8007, 0x3, 0x7, 0xe, 0x3, 0x2, 0x9, 0x80000000, 0x1, 0x4, 0xffffff81, 0x5ae0c288, 0x7, 0x3, 0x10000, 0x5, 0x8c, 0x2, 0x5, 0x1000, 0x7, 0x7, 0xf, 0x7, 0x4, 0x80, 0x7, 0x9, 0xefd9, 0x0, 0x4, 0x8, 0xffffffff, 0xf, 0x6, 0x5, 0x1, 0x71e, 0x6, 0x1b3, 0x8, 0x776, 0x80000000, 0x4ede, 0x9, 0x4, 0x8, 0x8001, 0xf6, 0x3, 0x7, 0x3, 0x5, 0x5, 0x7, 0x3, 0x1000b4, 0x2, 0x4, 0xf83, 0x3, 0x30000000, 0x8001, 0x2, 0x0, 0x7fffffff, 0x4, 0x5, 0x0, 0x3, 0x6, 0x7, 0x842, 0x9, 0xfffeffff, 0x10000, 0x7fffffff, 0x930, 0x80000001, 0x7fffffff, 0xb8a, 0x35, 0x4, 0x7fff, 0xad2f, 0x5, 0x3, 0xfffffffb, 0x4, 0x3ff, 0xabd6, 0x4, 0x7, 0x0, 0x0, 0x1, 0x40e9, 0x7, 0x4, 0x9, 0x2, 0x7, 0x8001, 0x8, 0x2, 0x6, 0x1, 0x1c7, 0x7, 0x7, 0xa, 0x6, 0x1, 0x2e, 0x10, 0x7, 0xffffffff, 0x1, 0x5, 0x4a, 0x4, 0xf41, 0xe, 0xd, 0x5, 0x9, 0x9, 0x8, 0x2, 0x2, 0x68, 0x5, 0x6, 0xffffff80, 0x1, 0x9, 0x2f, 0x7f, 0x0, 0xe0, 0x5, 0x10, 0x2, 0x2, 0x9, 0x1, 0x7f, 0x4, 0x3, 0x9, 0x0, 0x4, 0x9, 0x8, 0x5, 0xebbf, 0x9a5, 0x9, 0x9, 0x5c81826f, 0x0, 0x2, 0xffff0000, 0x2, 0x5, 0x2, 0x2, 0xff, 0xd, 0x0, 0x4, 0x101, 0x2, 0x7fff, 0x5eeb, 0x3, 0xffff, 0x10001, 0xef, 0x7, 0x5, 0x865, 0x2049, 0x7, 0x4c, 0x6, 0x0, 0x6, 0xfffffffd, 0x2, 0x6, 0xfffffeff, 0x6, 0x400, 0x3000, 0x5, 0x9, 0xaa54, 0xffffffff, 0x4, 0x1, 0xfffffffb, 0xfffffff7, 0x6, 0x3ff, 0x8, 0x4, 0x7fffffff, 0x7fffffff, 0x1, 0x2]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8000}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x6, 0xdc4, 0x4, 0x1, {0x1, 0x1, 0x3, 0x51, 0xd585, 0xb}, {0x8b, 0x0, 0x7, 0x3, 0xdd30, 0xf8}, 0x9, 0x8, 0x80000001}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd8, 0x20000000, 0x1, 0x3, 0x8, {0x1, 0x1, 0x5, 0x8ef8, 0x7, 0x3}, {0x9, 0x1, 0x80, 0x219a, 0x200, 0xbf}, 0x5, 0x6, 0xc}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0xfff, 0x6, 0x10, 0x77, 0x3, 0xff1, 0x0, 0x3, 0x7f, 0xffffffff, 0x3, 0x9, 0x0, 0x7ff, 0x9, 0x9, 0x7, 0x9, 0xffffff01, 0x7, 0xce6, 0x8, 0x8, 0x4, 0xbb847b3, 0x101, 0x4, 0xc32, 0xb10, 0x1b680000, 0x9, 0x93, 0x4, 0x6, 0x5, 0x10000, 0xc, 0x0, 0x7, 0x8, 0x9, 0x100, 0x7fffffff, 0x200, 0x8, 0x0, 0x5, 0x4, 0x4, 0x0, 0x2, 0xfa, 0x4, 0x8, 0x4, 0x3, 0x3ff000, 0x1, 0x6, 0x6, 0x2, 0x7fffffff, 0x4, 0x4, 0x0, 0x2, 0x6, 0xdc, 0x6, 0x2, 0x8, 0x90000, 0x0, 0x9, 0xed6d, 0xffff0000, 0x25, 0x6, 0x40, 0xffff, 0x3, 0x6, 0xca7, 0x31, 0x98000000, 0x9, 0x2, 0x398, 0x5d7a, 0x0, 0x4, 0x0, 0xd, 0x8, 0x1, 0xfff, 0x1, 0x200, 0x6, 0x8, 0x7, 0x0, 0xaf3, 0x7fffffff, 0x3, 0xb, 0x1, 0xffffffff, 0x3, 0x80, 0x34d, 0x7, 0x6a6, 0xc099, 0x5, 0x1, 0x8, 0x3, 0x0, 0x7fff, 0x1ff, 0x9, 0x8, 0x2, 0x6, 0x7fff, 0x6, 0x10001, 0x8, 0x1, 0xfff, 0x4, 0xffff, 0x2, 0x8, 0x8001, 0x240000, 0x38000000, 0x0, 0x80000000, 0x6, 0x2, 0x1, 0x8b5, 0x6, 0x2, 0x3, 0xfffffffc, 0x4, 0x6, 0xe, 0xfff, 0x64, 0x2, 0x5, 0x202, 0xd006, 0x3d20, 0x8001, 0x9, 0xff, 0x92d, 0x9316, 0x7fffffff, 0x9, 0x80000001, 0x5, 0x9, 0x1, 0x9, 0x9, 0x6, 0x8, 0x45, 0x1f10, 0x1, 0xfac6, 0x8, 0x80000001, 0x2ca343c6, 0xc898, 0xffff, 0x3, 0x2253, 0x5a4, 0xffffffff, 0x54ac, 0x8a04, 0x6, 0x9, 0x2055, 0x3, 0x30c4, 0x1, 0x5, 0xffff, 0x6, 0xffff, 0x0, 0x9, 0x2, 0xe, 0x5, 0xc, 0xe1, 0x4, 0x1, 0x9, 0x0, 0x1, 0x400, 0x400, 0x8, 0x7ff, 0xa85, 0x800, 0x400, 0x3, 0x0, 0x5, 0xb04d, 0x0, 0x4, 0x4, 0xfadc, 0x80000001, 0x4, 0xfd, 0x31d6, 0x8, 0x8, 0x3, 0xde, 0x7, 0x1000, 0x8, 0x8, 0x7fff, 0x5, 0xa2, 0x80000001, 0x9, 0x7, 0x4bd8, 0x3, 0xffffffac, 0x7, 0x401, 0x3, 0x6, 0xa, 0x8, 0x7, 0x3, 0x4]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4b9bcba8}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x1, 0x8, 0x7582, 0x2, 0x0, 0x1, 0x1, 0xe1, 0xffff0000, 0x16d, 0x200, 0x3, 0x4, 0x1, 0x40, 0x3, 0x9, 0x8, 0x5, 0x7fffffff, 0xffffffea, 0xf51, 0x9, 0x0, 0xfffffff9, 0x8, 0x5, 0xbe0, 0x1ff, 0x8, 0x0, 0x1, 0xb, 0x8, 0x2, 0x8000, 0x2, 0x5, 0x101, 0x9, 0x5, 0xfffffff8, 0x7, 0x10000, 0x7, 0x4, 0x4, 0x0, 0xe, 0x1, 0x2, 0x8, 0xc, 0x101, 0x7e0, 0xffffffa9, 0x81, 0x0, 0xffffffff, 0x66, 0x8000, 0xa01, 0xfffffffc, 0xc79, 0xf8, 0x80000001, 0x7, 0x101, 0x7, 0x7f, 0x8d70000, 0x145a3c9b, 0x0, 0x40000000, 0xc2, 0x3, 0x3, 0x5, 0x5, 0x3, 0xc, 0x9, 0xa73, 0x5, 0x7ff, 0xd690, 0x0, 0x5, 0x4, 0xa8a, 0x400, 0xf76, 0x20cdd2d9, 0x4, 0x7, 0x5, 0xa5, 0x226, 0x2e5e, 0x8, 0x10, 0x4307, 0x81, 0x6, 0x4, 0xfffffff7, 0xab, 0x9, 0x3, 0x7, 0x3, 0x5, 0x1, 0x1, 0x1, 0x8, 0x3, 0xfffffff7, 0x0, 0x1, 0x3, 0x6, 0x3, 0xffffff75, 0xf, 0x4, 0x9, 0x0, 0x9, 0x80000000, 0x2, 0x101, 0x4, 0x2, 0x6, 0x6, 0xffff, 0x3, 0xfffffff7, 0x7, 0x4b5, 0x1, 0x6, 0x9, 0x10001, 0x2, 0x9, 0x7ff, 0x7, 0xe, 0xe1a, 0x2, 0x0, 0x1, 0x1, 0x8, 0x9, 0xfffffff9, 0x3, 0x8, 0x5, 0x6, 0x1, 0x8001, 0x3, 0x0, 0x3, 0x10, 0xef, 0x6, 0x80000001, 0x1, 0x8, 0x385, 0x3, 0x5, 0x3ff, 0x7, 0x528, 0x1, 0x99, 0x2, 0x76, 0x10, 0xfffff000, 0x0, 0x60, 0x7, 0x473, 0x7fff, 0x2, 0x9, 0x9, 0xdb, 0x2, 0x401, 0x4, 0x2, 0x2, 0xdd, 0x6, 0xff, 0x4, 0x9, 0x1, 0xb, 0x5, 0x1, 0xc, 0x1ff, 0x5, 0x477, 0xe1, 0x7ff, 0xbb, 0x7ff, 0x1, 0x1cbdf8fa, 0x0, 0xd, 0x0, 0xfffff69b, 0x4, 0xfff, 0x59, 0x0, 0x470, 0x9, 0x1c00, 0x7, 0x1, 0xd0, 0x46, 0x551b, 0x8, 0x8, 0x1, 0x5, 0x7ff, 0xa9, 0x5, 0x1, 0xfff, 0x7, 0x94a, 0xe2, 0xf5, 0x2, 0x9e60, 0xb, 0x4, 0x5, 0x1, 0x0, 0x9]}]]}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x1148}, 0x1, 0x0, 0x0, 0x8800}, 0x24008044)

332.534616ms ago: executing program 7 (id=2972):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b81000085"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb8af, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000600)='kfree\x00', r0}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0)

223.760347ms ago: executing program 7 (id=2973):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000059c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
fsopen(0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x410c84, &(0x7f00000003c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}]}, 0x1, 0x775, &(0x7f0000001180)="$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")
r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x1c1002, 0x0)
geteuid()
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8=r1], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="838323000000000000000000a48874b6749d275a00"/31], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
write(r3, &(0x7f0000004200)='t', 0x1)
sendfile(r3, r2, 0x0, 0x3ffff)
sendfile(r3, r2, 0x0, 0x7ffff000)

132.848778ms ago: executing program 6 (id=2974):
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14)
fcntl$setsig(r0, 0xa, 0x13)
fcntl$setlease(r0, 0x400, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r3=>0x0})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x10000002}, 0x18)
syz_open_procfs(0x0, &(0x7f0000000300)='timerslack_ns\x00')
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000010001fff000000000007000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000300012800b000100697036746e6c0000200002801400020000000000000000000000ffffac1414bb050004000500000008000a00"], 0x58}, 0x1, 0x0, 0x0, 0x200040d1}, 0x0)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
bind$can_raw(r7, &(0x7f0000000000)={0x1d, r3}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x40044)

53.126119ms ago: executing program 1 (id=2975):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00')
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed, 0x4, 0x2}, 0xe)
acct(&(0x7f00000001c0)='./file0\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r1, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10)
r3 = accept4$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10, 0x0)
bind$vsock_stream(r3, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10)
ioprio_get$uid(0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000005d00)=ANY=[@ANYBLOB="000000004c900200030000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"])
setregid(r5, 0x0)

0s ago: executing program 6 (id=2976):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r2=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000200)=0x8, 0x4)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000180)=0x8, 0x4)
bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x0, r2}, 0x10)
r3 = socket$inet(0x2, 0x1, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000001080)={'nat\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000001100)=0x108)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, 0x0)
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10)
preadv2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000480)=""/201, 0xc9}, {&(0x7f0000000240)=""/95, 0x5f}], 0x2, 0x6, 0x3, 0x0)

kernel console output (not intermixed with test programs):

a
[  182.213825][T11135]  should_fail_ex+0x261/0x270
[  182.213856][T11135]  should_failslab+0x8f/0xb0
[  182.213889][T11135]  kmem_cache_alloc_node_noprof+0x5c/0x340
[  182.213926][T11135]  ? __alloc_skb+0x10d/0x320
[  182.214007][T11135]  __alloc_skb+0x10d/0x320
[  182.214032][T11135]  netlink_alloc_large_skb+0xad/0xe0
[  182.214072][T11135]  netlink_sendmsg+0x3da/0x720
[  182.214158][T11135]  ? __pfx_netlink_sendmsg+0x10/0x10
[  182.214182][T11135]  __sock_sendmsg+0x140/0x180
[  182.214219][T11135]  ____sys_sendmsg+0x350/0x4e0
[  182.214314][T11135]  __sys_sendmsg+0x1a0/0x240
[  182.214356][T11135]  __x64_sys_sendmsg+0x46/0x50
[  182.214383][T11135]  x64_sys_call+0x26f3/0x2e10
[  182.214473][T11135]  do_syscall_64+0xc9/0x1a0
[  182.214506][T11135]  ? clear_bhb_loop+0x25/0x80
[  182.214532][T11135]  ? clear_bhb_loop+0x25/0x80
[  182.214580][T11135]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.214606][T11135] RIP: 0033:0x7f496fb3e969
[  182.214623][T11135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  182.214642][T11135] RSP: 002b:00007f496e1a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  182.214659][T11135] RAX: ffffffffffffffda RBX: 00007f496fd65fa0 RCX: 00007f496fb3e969
[  182.214699][T11135] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000014
[  182.214713][T11135] RBP: 00007f496e1a7090 R08: 0000000000000000 R09: 0000000000000000
[  182.214726][T11135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  182.214741][T11135] R13: 0000000000000000 R14: 00007f496fd65fa0 R15: 00007ffdc63a3ff8
[  182.214764][T11135]  </TASK>
[  182.439882][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.454722][   T31] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1
[  182.483846][T11143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2543'.
[  182.492823][T11143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2543'.
[  182.498048][T11145] FAULT_INJECTION: forcing a failure.
[  182.498048][T11145] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  182.502857][T11139] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2540'.
[  182.514952][T11145] CPU: 1 UID: 0 PID: 11145 Comm: syz.3.2541 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(voluntary) 
[  182.514990][T11145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  182.515007][T11145] Call Trace:
[  182.515015][T11145]  <TASK>
[  182.515026][T11145]  dump_stack_lvl+0xf6/0x150
[  182.515056][T11145]  dump_stack+0x15/0x1a
[  182.515101][T11145]  should_fail_ex+0x261/0x270
[  182.515139][T11145]  should_fail+0xb/0x10
[  182.515233][T11145]  should_fail_usercopy+0x1a/0x20
[  182.515266][T11145]  _copy_from_user+0x1c/0xa0
[  182.515302][T11145]  copy_msghdr_from_user+0x54/0x2b0
[  182.515392][T11145]  ? __fget_files+0x186/0x1c0
[  182.515439][T11145]  __sys_sendmmsg+0x1eb/0x4b0
[  182.515501][T11145]  __x64_sys_sendmmsg+0x57/0x70
[  182.515532][T11145]  x64_sys_call+0x2b53/0x2e10
[  182.515622][T11145]  do_syscall_64+0xc9/0x1a0
[  182.515654][T11145]  ? clear_bhb_loop+0x25/0x80
[  182.515758][T11145]  ? clear_bhb_loop+0x25/0x80
[  182.515785][T11145]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.515811][T11145] RIP: 0033:0x7fc4aa17e969
[  182.515831][T11145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  182.515854][T11145] RSP: 002b:00007fc4a87e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  182.515921][T11145] RAX: ffffffffffffffda RBX: 00007fc4aa3a5fa0 RCX: 00007fc4aa17e969
[  182.515936][T11145] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003
[  182.515952][T11145] RBP: 00007fc4a87e7090 R08: 0000000000000000 R09: 0000000000000000
[  182.515967][T11145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  182.515981][T11145] R13: 0000000000000000 R14: 00007fc4aa3a5fa0 R15: 00007ffd157e5f48
[  182.516031][T11145]  </TASK>
[  182.603794][T11153] loop3: detected capacity change from 0 to 512
[  182.721666][T11143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2543'.
[  182.731079][T11143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2543'.
[  182.759494][T11143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2543'.
[  182.770672][T11143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2543'.
[  182.782190][T11153] EXT4-fs (loop3): too many log groups per flexible block group
[  182.790360][T11153] EXT4-fs (loop3): failed to initialize mballoc (-12)
[  182.797352][T11153] EXT4-fs (loop3): mount failed
[  182.829249][T11161] FAULT_INJECTION: forcing a failure.
[  182.829249][T11161] name failslab, interval 1, probability 0, space 0, times 0
[  182.842267][T11161] CPU: 0 UID: 0 PID: 11161 Comm: syz.3.2547 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(voluntary) 
[  182.842296][T11161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  182.842341][T11161] Call Trace:
[  182.842350][T11161]  <TASK>
[  182.842361][T11161]  dump_stack_lvl+0xf6/0x150
[  182.842392][T11161]  dump_stack+0x15/0x1a
[  182.842408][T11161]  should_fail_ex+0x261/0x270
[  182.842452][T11161]  should_failslab+0x8f/0xb0
[  182.842477][T11161]  __kmalloc_cache_noprof+0x55/0x320
[  182.842507][T11161]  ? __request_region+0x5a/0x470
[  182.842545][T11161]  __request_region+0x5a/0x470
[  182.842652][T11161]  ? bpf_trace_run2+0x12c/0x1d0
[  182.842678][T11161]  ? free_irq+0x460/0x550
[  182.842801][T11161]  ? __slab_free+0x67/0x2b0
[  182.842889][T11161]  serial8250_request_std_resource+0x115/0x250
[  182.842979][T11161]  serial8250_config_port+0x3c/0x2c30
[  182.843080][T11161]  ? free_resource+0x109/0x260
[  182.843142][T11161]  ? __release_region+0x1e1/0x250
[  182.843177][T11161]  univ8250_config_port+0x280/0x360
[  182.843205][T11161]  uart_ioctl+0xc63/0xe70
[  182.843285][T11161]  ? ioctl_has_perm+0x292/0x2f0
[  182.843320][T11161]  ? do_vfs_ioctl+0x977/0x1570
[  182.843438][T11161]  ? tty_jobctrl_ioctl+0x2ab/0x810
[  182.843479][T11161]  tty_ioctl+0x813/0xbd0
[  182.843496][T11161]  ? __pfx_tty_ioctl+0x10/0x10
[  182.843567][T11161]  __se_sys_ioctl+0xc9/0x140
[  182.843593][T11161]  __x64_sys_ioctl+0x43/0x50
[  182.843618][T11161]  x64_sys_call+0x168d/0x2e10
[  182.843638][T11161]  do_syscall_64+0xc9/0x1a0
[  182.843726][T11161]  ? clear_bhb_loop+0x25/0x80
[  182.843745][T11161]  ? clear_bhb_loop+0x25/0x80
[  182.843773][T11161]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.843800][T11161] RIP: 0033:0x7fc4aa17e969
[  182.843857][T11161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  182.843873][T11161] RSP: 002b:00007fc4a87e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  182.843890][T11161] RAX: ffffffffffffffda RBX: 00007fc4aa3a5fa0 RCX: 00007fc4aa17e969
[  182.843947][T11161] RDX: 0000000000000000 RSI: 0000000000005453 RDI: 0000000000000006
[  182.843958][T11161] RBP: 00007fc4a87e7090 R08: 0000000000000000 R09: 0000000000000000
[  182.843969][T11161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  182.843982][T11161] R13: 0000000000000000 R14: 00007fc4aa3a5fa0 R15: 00007ffd157e5f48
[  182.844000][T11161]  </TASK>
[  183.129351][   T29] kauditd_printk_skb: 315 callbacks suppressed
[  183.129369][   T29] audit: type=1400 audit(1745529560.130:25933): avc:  denied  { ioctl } for  pid=11163 comm="syz.4.2548" path="socket:[29442]" dev="sockfs" ino=29442 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  183.136693][T11165] resource: Trying to free nonexistent resource <0x00000000000002e8-0x00000000000002ef>
[  183.182423][T11167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2549'.
[  183.207504][T11171] FAULT_INJECTION: forcing a failure.
[  183.207504][T11171] name failslab, interval 1, probability 0, space 0, times 0
[  183.220432][T11171] CPU: 0 UID: 0 PID: 11171 Comm: syz.2.2552 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(voluntary) 
[  183.220459][T11171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  183.220472][T11171] Call Trace:
[  183.220479][T11171]  <TASK>
[  183.220486][T11171]  dump_stack_lvl+0xf6/0x150
[  183.220513][T11171]  dump_stack+0x15/0x1a
[  183.220532][T11171]  should_fail_ex+0x261/0x270
[  183.220687][T11171]  should_failslab+0x8f/0xb0
[  183.220788][T11171]  kmem_cache_alloc_node_noprof+0x5c/0x340
[  183.220846][T11171]  ? __alloc_skb+0x10d/0x320
[  183.220911][T11171]  __alloc_skb+0x10d/0x320
[  183.220984][T11171]  netlink_alloc_large_skb+0xad/0xe0
[  183.221071][T11171]  netlink_sendmsg+0x3da/0x720
[  183.221102][T11171]  ? __pfx_netlink_sendmsg+0x10/0x10
[  183.221128][T11171]  __sock_sendmsg+0x140/0x180
[  183.221205][T11171]  ____sys_sendmsg+0x350/0x4e0
[  183.221239][T11171]  __sys_sendmsg+0x1a0/0x240
[  183.221288][T11171]  __x64_sys_sendmsg+0x46/0x50
[  183.221315][T11171]  x64_sys_call+0x26f3/0x2e10
[  183.221386][T11171]  do_syscall_64+0xc9/0x1a0
[  183.221418][T11171]  ? clear_bhb_loop+0x25/0x80
[  183.221467][T11171]  ? clear_bhb_loop+0x25/0x80
[  183.221487][T11171]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.221533][T11171] RIP: 0033:0x7f9a2a0de969
[  183.221548][T11171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  183.221566][T11171] RSP: 002b:00007f9a28747038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  183.221589][T11171] RAX: ffffffffffffffda RBX: 00007f9a2a305fa0 RCX: 00007f9a2a0de969
[  183.221604][T11171] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003
[  183.221656][T11171] RBP: 00007f9a28747090 R08: 0000000000000000 R09: 0000000000000000
[  183.221671][T11171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  183.221684][T11171] R13: 0000000000000000 R14: 00007f9a2a305fa0 R15: 00007fff877831f8
[  183.221702][T11171]  </TASK>
[  183.429422][T11175] SELinux: security_context_str_to_sid (ýÿ) failed with errno=-22
[  183.491612][T11183] loop3: detected capacity change from 0 to 512
[  183.513609][T11183] EXT4-fs (loop3): too many log groups per flexible block group
[  183.521573][T11183] EXT4-fs (loop3): failed to initialize mballoc (-12)
[  183.528709][T11187] SELinux:  Context system_u:object_r:printer_device_t:s0 is not valid (left unmapped).
[  183.529980][T11183] EXT4-fs (loop3): mount failed
[  183.544229][   T29] audit: type=1400 audit(1745529560.510:25934): avc:  denied  { read } for  pid=11186 comm="syz.2.2559" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  183.568046][   T29] audit: type=1400 audit(1745529560.510:25935): avc:  denied  { open } for  pid=11186 comm="syz.2.2559" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  183.569831][T11193] loop4: detected capacity change from 0 to 2048
[  183.592621][   T29] audit: type=1400 audit(1745529560.540:25936): avc:  denied  { relabelto } for  pid=11186 comm="syz.2.2559" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:printer_device_t:s0"
[  183.626969][   T29] audit: type=1400 audit(1745529560.540:25937): avc:  denied  { associate } for  pid=11186 comm="syz.2.2559" name="event0" dev="devtmpfs" ino=242 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:printer_device_t:s0"
[  183.667584][T11193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  183.690298][   T29] audit: type=1326 audit(1745529560.680:25938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11196 comm="syz.1.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89873e969 code=0x7ffc0000
[  183.717028][   T29] audit: type=1326 audit(1745529560.680:25939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11196 comm="syz.1.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd89873e969 code=0x7ffc0000
[  183.741645][   T29] audit: type=1326 audit(1745529560.680:25940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11196 comm="syz.1.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89873e969 code=0x7ffc0000
[  183.766451][   T29] audit: type=1326 audit(1745529560.680:25941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11196 comm="syz.1.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89873e969 code=0x7ffc0000
[  183.791469][   T29] audit: type=1326 audit(1745529560.680:25942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11196 comm="syz.1.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd89873e969 code=0x7ffc0000
[  183.817028][T11189] loop0: detected capacity change from 0 to 8192
[  183.843525][T11193] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  183.860487][T11193] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28
[  183.872820][T11193] EXT4-fs (loop4): This should not happen!! Data will be lost
[  183.872820][T11193] 
[  183.882726][T11193] EXT4-fs (loop4): Total free blocks count 0
[  183.889072][T11193] EXT4-fs (loop4): Free/Dirty block details
[  183.895127][T11193] EXT4-fs (loop4): free_blocks=2415919104
[  183.900918][T11193] EXT4-fs (loop4): dirty_blocks=16
[  183.906175][T11193] EXT4-fs (loop4): Block reservation details
[  183.912896][T11193] EXT4-fs (loop4): i_reserved_data_blocks=1
[  183.945431][   T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  183.966444][T11213] loop1: detected capacity change from 0 to 512
[  183.995622][T11219] loop4: detected capacity change from 0 to 512
[  184.005152][T11213] EXT4-fs (loop1): 1 orphan inode deleted
[  184.012179][T11213] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.026395][   T37] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1
[  184.062285][T11219] EXT4-fs (loop4): 1 orphan inode deleted
[  184.070806][T11219] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.087996][   T37] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1
[  184.100779][T11213] ext4 filesystem being mounted at /487/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  184.113969][T11219] ext4 filesystem being mounted at /470/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  184.136572][T11219] FAULT_INJECTION: forcing a failure.
[  184.136572][T11219] name failslab, interval 1, probability 0, space 0, times 0
[  184.140543][T11226] netlink: 'syz.1.2566': attribute type 21 has an invalid length.
[  184.150261][T11219] CPU: 1 UID: 0 PID: 11219 Comm: syz.4.2568 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(voluntary) 
[  184.150301][T11219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  184.150318][T11219] Call Trace:
[  184.150327][T11219]  <TASK>
[  184.150338][T11219]  dump_stack_lvl+0xf6/0x150
[  184.150368][T11219]  dump_stack+0x15/0x1a
[  184.150422][T11219]  should_fail_ex+0x261/0x270
[  184.150467][T11219]  should_failslab+0x8f/0xb0
[  184.150496][T11219]  __kmalloc_noprof+0xad/0x410
[  184.150578][T11219]  ? ext4_find_extent+0x172/0x7e0
[  184.150615][T11219]  ext4_find_extent+0x172/0x7e0
[  184.150653][T11219]  ext4_ext_shift_extents+0x77/0xd00
[  184.150694][T11219]  ? ext4_discard_preallocations+0x882/0x9b0
[  184.150816][T11219]  ext4_collapse_range+0x2f9/0x530
[  184.150857][T11219]  ext4_fallocate+0x318/0x690
[  184.150896][T11219]  vfs_fallocate+0x368/0x3b0
[  184.150924][T11219]  __x64_sys_fallocate+0x78/0xc0
[  184.150973][T11219]  x64_sys_call+0x295f/0x2e10
[  184.151052][T11219]  do_syscall_64+0xc9/0x1a0
[  184.151083][T11219]  ? clear_bhb_loop+0x25/0x80
[  184.151159][T11219]  ? clear_bhb_loop+0x25/0x80
[  184.151186][T11219]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.151212][T11219] RIP: 0033:0x7fa2d2ace969
[  184.151232][T11219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  184.151255][T11219] RSP: 002b:00007fa2d1137038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[  184.151278][T11219] RAX: ffffffffffffffda RBX: 00007fa2d2cf5fa0 RCX: 00007fa2d2ace969
[  184.151293][T11219] RDX: 0000000000004000 RSI: 0000000000000008 RDI: 0000000000000004
[  184.151387][T11219] RBP: 00007fa2d1137090 R08: 0000000000000000 R09: 0000000000000000
[  184.151402][T11219] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001
[  184.151416][T11219] R13: 0000000000000000 R14: 00007fa2d2cf5fa0 R15: 00007ffe54e06e18
[  184.151439][T11219]  </TASK>
[  184.226999][T11213] netlink: 'syz.1.2566': attribute type 21 has an invalid length.
[  184.231348][T11226] netlink: 'syz.1.2566': attribute type 4 has an invalid length.
[  184.289849][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.294427][T11213] netlink: 'syz.1.2566': attribute type 4 has an invalid length.
[  184.419220][ T3462] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1
[  184.441514][T11226] team0 (unregistering): Port device team_slave_0 removed
[  184.450927][T11226] team0 (unregistering): Port device team_slave_1 removed
[  184.467755][T11232] FAULT_INJECTION: forcing a failure.
[  184.467755][T11232] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  184.483862][T11232] CPU: 1 UID: 0 PID: 11232 Comm: syz.4.2570 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(voluntary) 
[  184.483896][T11232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  184.483933][T11232] Call Trace:
[  184.483940][T11232]  <TASK>
[  184.483948][T11232]  dump_stack_lvl+0xf6/0x150
[  184.484028][T11232]  dump_stack+0x15/0x1a
[  184.484049][T11232]  should_fail_ex+0x261/0x270
[  184.484079][T11232]  should_fail+0xb/0x10
[  184.484105][T11232]  should_fail_usercopy+0x1a/0x20
[  184.484136][T11232]  strncpy_from_user+0x25/0x230
[  184.484226][T11232]  ? getname_flags+0x81/0x3b0
[  184.484257][T11232]  getname_flags+0xb0/0x3b0
[  184.484339][T11232]  __se_sys_newlstat+0x4c/0x280
[  184.484380][T11232]  ? fput+0x99/0xd0
[  184.484411][T11232]  ? ksys_write+0x180/0x1b0
[  184.484436][T11232]  __x64_sys_newlstat+0x31/0x40
[  184.484463][T11232]  x64_sys_call+0x1b6e/0x2e10
[  184.484536][T11232]  do_syscall_64+0xc9/0x1a0
[  184.484602][T11232]  ? clear_bhb_loop+0x25/0x80
[  184.484652][T11232]  ? clear_bhb_loop+0x25/0x80
[  184.484678][T11232]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.484771][T11232] RIP: 0033:0x7fa2d2ace969
[  184.484790][T11232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  184.484840][T11232] RSP: 002b:00007fa2d1137038 EFLAGS: 00000246 ORIG_RAX: 0000000000000006
[  184.484863][T11232] RAX: ffffffffffffffda RBX: 00007fa2d2cf5fa0 RCX: 00007fa2d2ace969
[  184.484879][T11232] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  184.484893][T11232] RBP: 00007fa2d1137090 R08: 0000000000000000 R09: 0000000000000000
[  184.484909][T11232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  184.484921][T11232] R13: 0000000000000000 R14: 00007fa2d2cf5fa0 R15: 00007ffe54e06e18
[  184.484972][T11232]  </TASK>
[  184.496616][T11213] process 'syz.1.2566' launched './file1' with NULL argv: empty string added
[  184.718385][T11234] loop4: detected capacity change from 0 to 512
[  184.750290][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.766627][   T12] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1
[  184.800265][T11234] EXT4-fs (loop4): 1 orphan inode deleted
[  184.806522][T11234] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.827831][   T37] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1
[  184.871156][T11242] loop1: detected capacity change from 0 to 512
[  184.906505][T11234] ext4 filesystem being mounted at /472/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  184.947415][T11242] EXT4-fs (loop1): 1 orphan inode deleted
[  184.958976][   T37] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1
[  184.980046][T11242] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  185.026689][T11250] 9pnet: Could not find request transport: f
[  185.034044][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.048406][T11242] ext4 filesystem being mounted at /488/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  185.098979][T11255] loop3: detected capacity change from 0 to 512
[  185.121601][T11257] 9pnet: Could not find request transport: f
[  185.135203][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.159952][ T3462] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1
[  185.172074][T11255] EXT4-fs (loop3): too many log groups per flexible block group
[  185.180420][T11255] EXT4-fs (loop3): failed to initialize mballoc (-12)
[  185.209873][T11255] EXT4-fs (loop3): mount failed
[  185.254582][T11270] loop4: detected capacity change from 0 to 1024
[  185.262755][T11275] FAULT_INJECTION: forcing a failure.
[  185.262755][T11275] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  185.276071][T11275] CPU: 0 UID: 0 PID: 11275 Comm: syz.0.2589 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(voluntary) 
[  185.276103][T11275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  185.276116][T11275] Call Trace:
[  185.276123][T11275]  <TASK>
[  185.276183][T11275]  dump_stack_lvl+0xf6/0x150
[  185.276213][T11275]  dump_stack+0x15/0x1a
[  185.276232][T11275]  should_fail_ex+0x261/0x270
[  185.276259][T11275]  should_fail+0xb/0x10
[  185.276282][T11275]  should_fail_usercopy+0x1a/0x20
[  185.276385][T11275]  _copy_from_user+0x1c/0xa0
[  185.276418][T11275]  memdup_user+0x6b/0xd0
[  185.276452][T11275]  strndup_user+0x68/0xa0
[  185.276520][T11275]  __se_sys_mount+0x50/0x2e0
[  185.276541][T11275]  ? fput+0x99/0xd0
[  185.276608][T11275]  ? ksys_write+0x180/0x1b0
[  185.276629][T11275]  __x64_sys_mount+0x67/0x80
[  185.276659][T11275]  x64_sys_call+0xd11/0x2e10
[  185.276683][T11275]  do_syscall_64+0xc9/0x1a0
[  185.276711][T11275]  ? clear_bhb_loop+0x25/0x80
[  185.276747][T11275]  ? clear_bhb_loop+0x25/0x80
[  185.276771][T11275]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.276863][T11275] RIP: 0033:0x7f496fb3e969
[  185.276881][T11275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  185.276901][T11275] RSP: 002b:00007f496e1a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  185.276946][T11275] RAX: ffffffffffffffda RBX: 00007f496fd65fa0 RCX: 00007f496fb3e969
[  185.277007][T11275] RDX: 0000200000000080 RSI: 0000200000000300 RDI: 0000000000000000
[  185.277021][T11275] RBP: 00007f496e1a7090 R08: 0000200000000200 R09: 0000000000000000
[  185.277034][T11275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  185.277046][T11275] R13: 0000000000000000 R14: 00007f496fd65fa0 R15: 00007ffdc63a3ff8
[  185.277067][T11275]  </TASK>
[  185.343465][T11278] FAULT_INJECTION: forcing a failure.
[  185.343465][T11278] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  185.348102][T11270] EXT4-fs: Ignoring removed bh option
[  185.351477][T11278] CPU: 1 UID: 0 PID: 11278 Comm: syz.2.2587 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(voluntary) 
[  185.351514][T11278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  185.351531][T11278] Call Trace:
[  185.351539][T11278]  <TASK>
[  185.351550][T11278]  dump_stack_lvl+0xf6/0x150
[  185.351783][T11278]  dump_stack+0x15/0x1a
[  185.351802][T11278]  should_fail_ex+0x261/0x270
[  185.351832][T11278]  should_fail+0xb/0x10
[  185.351858][T11278]  should_fail_usercopy+0x1a/0x20
[  185.352009][T11278]  _copy_to_user+0x20/0xa0
[  185.352047][T11278]  simple_read_from_buffer+0xb2/0x130
[  185.352090][T11278]  proc_fail_nth_read+0x103/0x140
[  185.352212][T11278]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  185.352330][T11278]  vfs_read+0x1b2/0x710
[  185.352350][T11278]  ? __rcu_read_unlock+0x4e/0x70
[  185.352378][T11278]  ? __fget_files+0x186/0x1c0
[  185.352487][T11278]  ksys_read+0xeb/0x1b0
[  185.352511][T11278]  __x64_sys_read+0x42/0x50
[  185.352534][T11278]  x64_sys_call+0x2a3b/0x2e10
[  185.352675][T11278]  do_syscall_64+0xc9/0x1a0
[  185.352724][T11278]  ? clear_bhb_loop+0x25/0x80
[  185.352750][T11278]  ? clear_bhb_loop+0x25/0x80
[  185.352777][T11278]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.352860][T11278] RIP: 0033:0x7f9a2a0dd37c
[  185.352880][T11278] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  185.352904][T11278] RSP: 002b:00007f9a28726030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  185.352929][T11278] RAX: ffffffffffffffda RBX: 00007f9a2a306080 RCX: 00007f9a2a0dd37c
[  185.352944][T11278] RDX: 000000000000000f RSI: 00007f9a287260a0 RDI: 0000000000000004
[  185.352961][T11278] RBP: 00007f9a28726090 R08: 0000000000000000 R09: 0000000000000000
[  185.353004][T11278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  185.353019][T11278] R13: 0000000000000000 R14: 00007f9a2a306080 R15: 00007fff877831f8
[  185.353042][T11278]  </TASK>
[  185.681681][T11270] EXT4-fs: inline encryption not supported
[  185.687671][T11270] EXT4-fs: inline encryption not supported
[  185.697289][T11270] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  185.719247][T11270] EXT4-fs error (device loop4): ext4_map_blocks:709: inode #3: block 1: comm syz.4.2586: lblock 1 mapped to illegal pblock 1 (length 1)
[  185.730294][T11282] IPv6: Can't replace route, no match found
[  185.752377][T11270] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.2586: Failed to acquire dquot type 0
[  185.783167][T11270] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.2586: Freeing blocks not in datazone - block = 0, count = 4096
[  185.828051][T11270] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.2586: Invalid inode bitmap blk 0 in block_group 0
[  185.848046][ T3462] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1)
[  185.863891][T11270] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[  185.875242][T11270] EXT4-fs (loop4): 1 orphan inode deleted
[  185.881358][T11270] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  185.901388][ T3462] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 0
[  185.931135][T11270] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.945498][T11303] loop3: detected capacity change from 0 to 512
[  185.987710][T11303] EXT4-fs (loop3): too many log groups per flexible block group
[  185.996099][T11303] EXT4-fs (loop3): failed to initialize mballoc (-12)
[  186.009550][T11312] loop1: detected capacity change from 0 to 512
[  186.016627][T11303] EXT4-fs (loop3): mount failed
[  186.030383][T11312] EXT4-fs (loop1): 1 orphan inode deleted
[  186.041135][T11312] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  186.056273][T11312] ext4 filesystem being mounted at /491/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  186.057925][ T3462] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1
[  186.121675][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.182707][T11327] 9pnet: Could not find request transport: f
[  186.772907][T11356] __nla_validate_parse: 6 callbacks suppressed
[  186.772926][T11356] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2617'.
[  186.809040][T11365] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2620'.
[  186.842177][T11368] netlink: 'syz.0.2618': attribute type 21 has an invalid length.
[  186.881186][T11370] FAULT_INJECTION: forcing a failure.
[  186.881186][T11370] name failslab, interval 1, probability 0, space 0, times 0
[  186.894066][T11370] CPU: 0 UID: 0 PID: 11370 Comm: syz.2.2623 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(voluntary) 
[  186.894177][T11370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  186.894192][T11370] Call Trace:
[  186.894200][T11370]  <TASK>
[  186.894210][T11370]  dump_stack_lvl+0xf6/0x150
[  186.894236][T11370]  dump_stack+0x15/0x1a
[  186.894251][T11370]  should_fail_ex+0x261/0x270
[  186.894281][T11370]  should_failslab+0x8f/0xb0
[  186.894342][T11370]  __kmalloc_node_track_caller_noprof+0xaa/0x410
[  186.894380][T11370]  ? v9fs_session_init+0x7b/0xdb0
[  186.894432][T11370]  kstrdup+0x3d/0xd0
[  186.894464][T11370]  v9fs_session_init+0x7b/0xdb0
[  186.894497][T11370]  ? obj_cgroup_charge+0xc6/0x170
[  186.894525][T11370]  ? should_fail_ex+0xd7/0x270
[  186.894546][T11370]  ? should_failslab+0x8f/0xb0
[  186.894571][T11370]  ? __kmalloc_cache_noprof+0x18d/0x320
[  186.894636][T11370]  ? v9fs_mount+0x56/0x580
[  186.894670][T11370]  v9fs_mount+0x6c/0x580
[  186.894702][T11370]  ? __pfx_v9fs_mount+0x10/0x10
[  186.894735][T11370]  legacy_get_tree+0x77/0xd0
[  186.894797][T11370]  vfs_get_tree+0x56/0x1e0
[  186.894826][T11370]  do_new_mount+0x246/0x6b0
[  186.894863][T11370]  path_mount+0x49b/0xb30
[  186.894897][T11370]  __se_sys_mount+0x28f/0x2e0
[  186.894918][T11370]  __x64_sys_mount+0x67/0x80
[  186.894937][T11370]  x64_sys_call+0xd11/0x2e10
[  186.894959][T11370]  do_syscall_64+0xc9/0x1a0
[  186.895040][T11370]  ? clear_bhb_loop+0x25/0x80
[  186.895066][T11370]  ? clear_bhb_loop+0x25/0x80
[  186.895090][T11370]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.895110][T11370] RIP: 0033:0x7f9a2a0de969
[  186.895124][T11370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  186.895151][T11370] RSP: 002b:00007f9a28747038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  186.895173][T11370] RAX: ffffffffffffffda RBX: 00007f9a2a305fa0 RCX: 00007f9a2a0de969
[  186.895188][T11370] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000
[  186.895202][T11370] RBP: 00007f9a28747090 R08: 0000200000000400 R09: 0000000000000000
[  186.895217][T11370] R10: 0000000000808000 R11: 0000000000000246 R12: 0000000000000002
[  186.895231][T11370] R13: 0000000000000000 R14: 00007f9a2a305fa0 R15: 00007fff877831f8
[  186.895279][T11370]  </TASK>
[  186.993264][T11372] 9pnet: Could not find request transport: f
[  187.210868][T11382] netlink: 'syz.3.2627': attribute type 1 has an invalid length.
[  187.225591][T11377] loop0: detected capacity change from 0 to 2048
[  187.271089][T11377] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  187.290389][T11385] batman_adv: batadv0: Adding interface: dummy0
[  187.296779][T11385] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.322746][T11385] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  187.380347][T11399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2627'.
[  187.455930][T11404] can0: slcan on ttyS3.
[  187.491740][T11406] loop2: detected capacity change from 0 to 512
[  187.528321][T11404] can0 (unregistered): slcan off ttyS3.
[  187.542671][T11408] FAULT_INJECTION: forcing a failure.
[  187.542671][T11408] name failslab, interval 1, probability 0, space 0, times 0
[  187.555731][T11408] CPU: 1 UID: 0 PID: 11408 Comm: syz.4.2632 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(voluntary) 
[  187.555765][T11408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  187.555787][T11408] Call Trace:
[  187.555795][T11408]  <TASK>
[  187.555806][T11408]  dump_stack_lvl+0xf6/0x150
[  187.555884][T11408]  dump_stack+0x15/0x1a
[  187.555903][T11408]  should_fail_ex+0x261/0x270
[  187.555934][T11408]  should_failslab+0x8f/0xb0
[  187.555961][T11408]  __kmalloc_cache_noprof+0x55/0x320
[  187.555994][T11408]  ? __hw_addr_add_ex+0x15a/0x430
[  187.556054][T11408]  __hw_addr_add_ex+0x15a/0x430
[  187.556082][T11408]  dev_addr_init+0xb7/0x130
[  187.556106][T11408]  ? stack_depot_init+0x55/0x1d0
[  187.556129][T11408]  ? __pfx_can_setup+0x10/0x10
[  187.556195][T11408]  alloc_netdev_mqs+0x225/0xac0
[  187.556228][T11408]  alloc_candev_mqs+0x67/0x270
[  187.556264][T11408]  slcan_open+0x58/0x280
[  187.556353][T11408]  tty_ldisc_reinit+0x214/0x310
[  187.556381][T11408]  tty_reopen+0x186/0x1b0
[  187.556412][T11408]  tty_open+0x90a/0xb10
[  187.556491][T11408]  chrdev_open+0x2fc/0x380
[  187.556518][T11408]  ? __pfx_chrdev_open+0x10/0x10
[  187.556540][T11408]  do_dentry_open+0x621/0xa20
[  187.556618][T11408]  vfs_open+0x38/0x1e0
[  187.556651][T11408]  path_openat+0x1b1c/0x2000
[  187.556689][T11408]  ? _parse_integer_limit+0x167/0x180
[  187.556798][T11408]  do_filp_open+0x115/0x240
[  187.556848][T11408]  do_sys_openat2+0xaa/0x110
[  187.556915][T11408]  __x64_sys_openat+0xf8/0x120
[  187.557002][T11408]  x64_sys_call+0x1ac/0x2e10
[  187.557024][T11408]  do_syscall_64+0xc9/0x1a0
[  187.557048][T11408]  ? clear_bhb_loop+0x25/0x80
[  187.557134][T11408]  ? clear_bhb_loop+0x25/0x80
[  187.557156][T11408]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.557175][T11408] RIP: 0033:0x7fa2d2ace969
[  187.557235][T11408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  187.557256][T11408] RSP: 002b:00007fa2d1116038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  187.557274][T11408] RAX: ffffffffffffffda RBX: 00007fa2d2cf6080 RCX: 00007fa2d2ace969
[  187.557285][T11408] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  187.557296][T11408] RBP: 00007fa2d1116090 R08: 0000000000000000 R09: 0000000000000000
[  187.557308][T11408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  187.557363][T11408] R13: 0000000000000001 R14: 00007fa2d2cf6080 R15: 00007ffe54e06e18
[  187.557413][T11408]  </TASK>
[  187.832020][T11406] EXT4-fs (loop2): 1 orphan inode deleted
[  187.838578][T11406] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  187.853087][   T31] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1
[  187.866239][T11406] ext4 filesystem being mounted at /572/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  187.987083][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.072664][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.143346][T11429] 9pnet: Could not find request transport: f
[  188.163078][T11433] loop3: detected capacity change from 0 to 512
[  188.173113][   T29] kauditd_printk_skb: 388 callbacks suppressed
[  188.173131][   T29] audit: type=1400 audit(1745529565.170:26319): avc:  denied  { append } for  pid=11434 comm="syz.0.2641" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  188.173695][T11435] Invalid logical block size (4128)
[  188.192049][T11433] EXT4-fs (loop3): too many log groups per flexible block group
[  188.218038][T11433] EXT4-fs (loop3): failed to initialize mballoc (-12)
[  188.225063][T11433] EXT4-fs (loop3): mount failed
[  188.303338][   T29] audit: type=1326 audit(1745529565.300:26320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11443 comm="syz.3.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4aa17e969 code=0x7ffc0000
[  188.329838][   T29] audit: type=1326 audit(1745529565.300:26321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11443 comm="syz.3.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4aa17e969 code=0x7ffc0000
[  188.364106][T11444] ipt_rpfilter: unknown options
[  188.377799][   T29] audit: type=1326 audit(1745529565.300:26322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11443 comm="syz.3.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc4aa17e969 code=0x7ffc0000
[  188.402779][   T29] audit: type=1400 audit(1745529565.300:26323): avc:  denied  { create } for  pid=11443 comm="syz.3.2644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  188.423206][   T29] audit: type=1326 audit(1745529565.300:26324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11443 comm="syz.3.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4aa17e969 code=0x7ffc0000
[  188.447448][   T29] audit: type=1326 audit(1745529565.300:26325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11443 comm="syz.3.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4aa17e969 code=0x7ffc0000
[  188.471787][   T29] audit: type=1326 audit(1745529565.300:26326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11443 comm="syz.3.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4aa17e969 code=0x7ffc0000
[  188.496513][   T29] audit: type=1326 audit(1745529565.300:26327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11443 comm="syz.3.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4aa17e969 code=0x7ffc0000
[  188.521489][   T29] audit: type=1326 audit(1745529565.300:26328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11443 comm="syz.3.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4aa17e969 code=0x7ffc0000
[  188.564901][T11455] FAULT_INJECTION: forcing a failure.
[  188.564901][T11455] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  188.578106][T11455] CPU: 1 UID: 0 PID: 11455 Comm: syz.3.2646 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(voluntary) 
[  188.578135][T11455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  188.578147][T11455] Call Trace:
[  188.578153][T11455]  <TASK>
[  188.578160][T11455]  dump_stack_lvl+0xf6/0x150
[  188.578260][T11455]  dump_stack+0x15/0x1a
[  188.578281][T11455]  should_fail_ex+0x261/0x270
[  188.578311][T11455]  should_fail+0xb/0x10
[  188.578348][T11455]  should_fail_usercopy+0x1a/0x20
[  188.578371][T11455]  _copy_from_user+0x1c/0xa0
[  188.578401][T11455]  copy_msghdr_from_user+0x54/0x2b0
[  188.578437][T11455]  ? __fget_files+0x186/0x1c0
[  188.578481][T11455]  __sys_sendmsg+0x141/0x240
[  188.578528][T11455]  __x64_sys_sendmsg+0x46/0x50
[  188.578556][T11455]  x64_sys_call+0x26f3/0x2e10
[  188.578584][T11455]  do_syscall_64+0xc9/0x1a0
[  188.578613][T11455]  ? clear_bhb_loop+0x25/0x80
[  188.578696][T11455]  ? clear_bhb_loop+0x25/0x80
[  188.578759][T11455]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.578779][T11455] RIP: 0033:0x7fc4aa17e969
[  188.578793][T11455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  188.578815][T11455] RSP: 002b:00007fc4a87e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  188.578838][T11455] RAX: ffffffffffffffda RBX: 00007fc4aa3a5fa0 RCX: 00007fc4aa17e969
[  188.578853][T11455] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005
[  188.578911][T11455] RBP: 00007fc4a87e7090 R08: 0000000000000000 R09: 0000000000000000
[  188.578922][T11455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  188.578935][T11455] R13: 0000000000000000 R14: 00007fc4aa3a5fa0 R15: 00007ffd157e5f48
[  188.578953][T11455]  </TASK>
[  188.779115][T11457] loop0: detected capacity change from 0 to 512
[  188.788808][T11459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2648'.
[  188.798585][T11459] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2648'.
[  188.832512][T11457] EXT4-fs (loop0): too many log groups per flexible block group
[  188.840437][T11457] EXT4-fs (loop0): failed to initialize mballoc (-12)
[  188.849651][T11457] EXT4-fs (loop0): mount failed
[  188.862765][T11461] loop4: detected capacity change from 0 to 8192
[  188.896235][T11467] 9pnet: Could not find request transport: f
[  189.002708][T11483] loop3: detected capacity change from 0 to 512
[  189.042208][T11480] loop2: detected capacity change from 0 to 8192
[  189.073746][T11483] EXT4-fs (loop3): 1 orphan inode deleted
[  189.088179][T11483] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  189.107713][ T3462] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1
[  189.120166][T11487] loop1: detected capacity change from 0 to 8192
[  189.127966][T11483] ext4 filesystem being mounted at /552/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  189.135207][T11489] loop0: detected capacity change from 0 to 8192
[  189.189427][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.210555][   T12] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1
[  189.382804][T11502] 9pnet: Could not find request transport: f
[  189.624116][T11524] loop2: detected capacity change from 0 to 256
[  189.653656][T11524] FAT-fs (loop2): Directory bread(block 64) failed
[  189.660632][T11524] FAT-fs (loop2): Directory bread(block 65) failed
[  189.667591][T11524] FAT-fs (loop2): Directory bread(block 66) failed
[  189.675948][T11524] FAT-fs (loop2): Directory bread(block 67) failed
[  189.683064][T11524] FAT-fs (loop2): Directory bread(block 68) failed
[  189.695540][T11524] FAT-fs (loop2): Directory bread(block 69) failed
[  189.708898][T11528] loop1: detected capacity change from 0 to 512
[  189.709965][T11524] FAT-fs (loop2): Directory bread(block 70) failed
[  189.729752][T11528] EXT4-fs (loop1): too many log groups per flexible block group
[  189.737609][T11528] EXT4-fs (loop1): failed to initialize mballoc (-12)
[  189.737640][T11524] FAT-fs (loop2): Directory bread(block 71) failed
[  189.758121][T11526] loop3: detected capacity change from 0 to 8192
[  189.761593][T11524] FAT-fs (loop2): Directory bread(block 72) failed
[  189.764591][T11528] EXT4-fs (loop1): mount failed
[  189.776599][T11524] FAT-fs (loop2): Directory bread(block 73) failed
[  189.896194][T11537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2675'.
[  189.954961][ T3311] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  189.962756][ T3311] FAT-fs (loop2): Filesystem has been set read-only
[  189.989698][T11546] 9pnet: Could not find request transport: f
[  190.160623][T11560] loop1: detected capacity change from 0 to 2048
[  190.211821][T11560] Alternate GPT is invalid, using primary GPT.
[  190.218223][T11560]  loop1: p2 p3 p7
[  190.222276][T11557] loop0: detected capacity change from 0 to 8192
[  190.224262][T11559] loop3: detected capacity change from 0 to 1024
[  190.309252][T11559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  190.430666][T11581] loop4: detected capacity change from 0 to 512
[  190.450320][T11581] EXT4-fs (loop4): too many log groups per flexible block group
[  190.458091][T11581] EXT4-fs (loop4): failed to initialize mballoc (-12)
[  190.465179][ T1307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  190.465308][T11581] EXT4-fs (loop4): mount failed
[  190.486652][ T1307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  190.518137][ T1307] bond0 (unregistering): Released all slaves
[  190.569975][ T1307] hsr_slave_0: left promiscuous mode
[  190.581346][ T1307] hsr_slave_1: left promiscuous mode
[  190.590695][ T1307] batman_adv: batadv0: Removing interface: dummy0
[  190.594625][T11591] 9pnet: Could not find request transport: f
[  190.605335][ T1307] batman_adv: batadv0: Removing interface: batadv_slave_0
[  190.621231][ T1307] batman_adv: batadv0: Removing interface: batadv_slave_1
[  190.635095][ T1307] pim6reg (unregistering): left allmulticast mode
[  190.675137][ T1307] team0 (unregistering): Port device team_slave_1 removed
[  190.686027][ T1307] team0 (unregistering): Port device team_slave_0 removed
[  190.698463][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.775233][T11602] loop4: detected capacity change from 0 to 512
[  190.787675][T11562] chnl_net:caif_netlink_parms(): no params data found
[  190.815176][T11602] EXT4-fs: Ignoring removed nobh option
[  190.855456][T11602] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2693: invalid indirect mapped block 256 (level 2)
[  190.870732][T11602] EXT4-fs (loop4): 2 truncates cleaned up
[  190.876864][T11602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  190.901483][T11610] loop0: detected capacity change from 0 to 1024
[  190.909514][T11610] ext4: Unknown parameter 'smackfsfloor'
[  190.960206][T11562] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.967395][T11562] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.980003][T11562] bridge_slave_0: entered allmulticast mode
[  190.987082][T11562] bridge_slave_0: entered promiscuous mode
[  190.994583][T11562] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.001795][T11562] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.009139][T11562] bridge_slave_1: entered allmulticast mode
[  191.010958][ T3462] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm kworker/u8:7: bg 0: block 5: invalid block bitmap
[  191.015798][T11562] bridge_slave_1: entered promiscuous mode
[  191.043460][ T3462] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  191.046873][T11616] loop0: detected capacity change from 0 to 8192
[  191.056004][ T3462] EXT4-fs (loop4): This should not happen!! Data will be lost
[  191.056004][ T3462] 
[  191.056025][ T3462] EXT4-fs (loop4): Total free blocks count 0
[  191.056038][ T3462] EXT4-fs (loop4): Free/Dirty block details
[  191.056051][ T3462] EXT4-fs (loop4): free_blocks=0
[  191.056074][ T3462] EXT4-fs (loop4): dirty_blocks=2140
[  191.056088][ T3462] EXT4-fs (loop4): Block reservation details
[  191.100425][ T3462] EXT4-fs (loop4): i_reserved_data_blocks=2140
[  191.109158][T11562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  191.114270][ T3462] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 84 with error 28
[  191.132242][T11562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  191.150759][T11616]  loop0: p1 < > p2 p3 < p5 p6 > p4
[  191.156009][T11616] loop0: partition table partially beyond EOD, truncated
[  191.163205][T11616] loop0: p1 start 408832 is beyond EOD, truncated
[  191.169756][T11616] loop0: p2 size 8388352 extends beyond EOD, truncated
[  191.178127][T11562] team0: Port device team_slave_0 added
[  191.184829][T11616] loop0: p5 size 8388352 extends beyond EOD, truncated
[  191.198788][T11562] team0: Port device team_slave_1 added
[  191.217702][T11562] batman_adv: batadv0: Adding interface: batadv_slave_0
[  191.224704][T11562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.250715][T11562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  191.264324][T11562] batman_adv: batadv0: Adding interface: batadv_slave_1
[  191.271339][T11562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.297386][T11562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  191.339381][T11562] hsr_slave_0: entered promiscuous mode
[  191.340061][T11562] hsr_slave_1: entered promiscuous mode
[  191.340372][T11562] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  191.340387][T11562] Cannot create hsr debugfs directory
[  191.440742][T11639] 9pnet: Could not find request transport: f
[  191.493511][T11646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2703'.
[  191.500831][T11562] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  191.512114][T11562] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  191.569494][T11648] loop4: detected capacity change from 0 to 512
[  191.584953][T11648] EXT4-fs: Ignoring removed nobh option
[  191.597223][T11562] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  191.605397][T11648] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2704: invalid indirect mapped block 256 (level 2)
[  191.620881][T11648] EXT4-fs (loop4): 2 truncates cleaned up
[  191.629080][T11562] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  191.636574][T11648] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.665092][T11650] can0: slcan on ttyS3.
[  191.673693][T11654] FAULT_INJECTION: forcing a failure.
[  191.673693][T11654] name failslab, interval 1, probability 0, space 0, times 0
[  191.680420][T11648] netlink: 132 bytes leftover after parsing attributes in process `wg1'.
[  191.686512][T11654] CPU: 1 UID: 0 PID: 11654 Comm: syz.0.2706 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(voluntary) 
[  191.686583][T11654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  191.686600][T11654] Call Trace:
[  191.686608][T11654]  <TASK>
[  191.686618][T11654]  dump_stack_lvl+0xf6/0x150
[  191.686648][T11654]  dump_stack+0x15/0x1a
[  191.686702][T11654]  should_fail_ex+0x261/0x270
[  191.686812][T11654]  should_failslab+0x8f/0xb0
[  191.686839][T11654]  __kmalloc_cache_noprof+0x55/0x320
[  191.686921][T11654]  ? md_alloc+0x99/0xa00
[  191.686950][T11654]  md_alloc+0x99/0xa00
[  191.686978][T11654]  md_alloc_and_put+0x18/0x150
[  191.687089][T11654]  md_probe+0x79/0x90
[  191.687121][T11654]  ? __pfx_md_probe+0x10/0x10
[  191.687153][T11654]  blk_request_module+0x1bb/0x1e0
[  191.687263][T11654]  blkdev_get_no_open+0x43/0xe0
[  191.687304][T11654]  bdev_file_open_by_dev+0x99/0x230
[  191.687348][T11654]  swsusp_check+0x3f/0x260
[  191.687381][T11654]  software_resume+0x43/0x2d0
[  191.687451][T11654]  resume_store+0x353/0x3a0
[  191.687479][T11654]  ? __pfx_resume_store+0x10/0x10
[  191.687506][T11654]  kobj_attr_store+0x47/0x70
[  191.687563][T11654]  ? __pfx_kobj_attr_store+0x10/0x10
[  191.687603][T11654]  sysfs_kf_write+0xf3/0x110
[  191.687702][T11654]  ? __pfx_sysfs_kf_write+0x10/0x10
[  191.687740][T11654]  kernfs_fop_write_iter+0x1cd/0x2d0
[  191.687771][T11654]  vfs_write+0x79b/0x950
[  191.687794][T11654]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  191.687860][T11654]  ksys_write+0xeb/0x1b0
[  191.687884][T11654]  __x64_sys_write+0x42/0x50
[  191.687908][T11654]  x64_sys_call+0x2a45/0x2e10
[  191.687936][T11654]  do_syscall_64+0xc9/0x1a0
[  191.687968][T11654]  ? clear_bhb_loop+0x25/0x80
[  191.687996][T11654]  ? clear_bhb_loop+0x25/0x80
[  191.688100][T11654]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.688126][T11654] RIP: 0033:0x7f496fb3e969
[  191.688145][T11654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  191.688168][T11654] RSP: 002b:00007f496e1a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  191.688265][T11654] RAX: ffffffffffffffda RBX: 00007f496fd65fa0 RCX: 00007f496fb3e969
[  191.688282][T11654] RDX: 0000000000000012 RSI: 0000200000000000 RDI: 0000000000000003
[  191.688297][T11654] RBP: 00007f496e1a7090 R08: 0000000000000000 R09: 0000000000000000
[  191.688310][T11654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  191.688323][T11654] R13: 0000000000000000 R14: 00007f496fd65fa0 R15: 00007ffdc63a3ff8
[  191.688339][T11654]  </TASK>
[  191.882364][T11661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2707'.
[  191.961758][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.989905][T11562] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.998298][T11652] can0 (unregistered): slcan off ttyS3.
[  192.002377][T11562] 8021q: adding VLAN 0 to HW filter on device team0
[  192.016044][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.023172][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[  192.038696][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.046423][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[  192.081188][T11665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2709'.
[  192.082220][T11562] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  192.146973][T11675] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2711'.
[  192.195957][T11688] 9pnet_fd: Insufficient options for proto=fd
[  192.202590][T11562] 8021q: adding VLAN 0 to HW filter on device batadv0
[  192.273505][T11703] netlink: 'syz.4.2720': attribute type 7 has an invalid length.
[  192.281708][T11703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2720'.
[  192.348976][T11709] IPv6: Can't replace route, no match found
[  192.373800][T11712] FAULT_INJECTION: forcing a failure.
[  192.373800][T11712] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  192.387117][T11712] CPU: 0 UID: 0 PID: 11712 Comm: syz.4.2721 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(voluntary) 
[  192.387145][T11712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  192.387157][T11712] Call Trace:
[  192.387162][T11712]  <TASK>
[  192.387171][T11712]  dump_stack_lvl+0xf6/0x150
[  192.387268][T11712]  dump_stack+0x15/0x1a
[  192.387342][T11712]  should_fail_ex+0x261/0x270
[  192.387365][T11712]  should_fail+0xb/0x10
[  192.387384][T11712]  should_fail_usercopy+0x1a/0x20
[  192.387413][T11712]  _copy_to_user+0x20/0xa0
[  192.387508][T11712]  simple_read_from_buffer+0xb2/0x130
[  192.387540][T11712]  proc_fail_nth_read+0x103/0x140
[  192.387647][T11712]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  192.387710][T11712]  vfs_read+0x1b2/0x710
[  192.387734][T11712]  ? __rcu_read_unlock+0x4e/0x70
[  192.387756][T11712]  ? __fget_files+0x186/0x1c0
[  192.387778][T11712]  ksys_read+0xeb/0x1b0
[  192.387800][T11712]  __x64_sys_read+0x42/0x50
[  192.387821][T11712]  x64_sys_call+0x2a3b/0x2e10
[  192.387847][T11712]  do_syscall_64+0xc9/0x1a0
[  192.387935][T11712]  ? clear_bhb_loop+0x25/0x80
[  192.387955][T11712]  ? clear_bhb_loop+0x25/0x80
[  192.387978][T11712]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.388003][T11712] RIP: 0033:0x7fa2d2acd37c
[  192.388020][T11712] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  192.388104][T11712] RSP: 002b:00007fa2d1137030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  192.388126][T11712] RAX: ffffffffffffffda RBX: 00007fa2d2cf5fa0 RCX: 00007fa2d2acd37c
[  192.388141][T11712] RDX: 000000000000000f RSI: 00007fa2d11370a0 RDI: 0000000000000005
[  192.388155][T11712] RBP: 00007fa2d1137090 R08: 0000000000000000 R09: 0000000000000000
[  192.388175][T11712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  192.388193][T11712] R13: 0000000000000000 R14: 00007fa2d2cf5fa0 R15: 00007ffe54e06e18
[  192.388211][T11712]  </TASK>
[  192.604864][T11716] 9pnet_fd: Insufficient options for proto=fd
[  192.620004][T11562] veth0_vlan: entered promiscuous mode
[  192.636982][T11562] veth1_vlan: entered promiscuous mode
[  192.662748][T11562] veth0_macvtap: entered promiscuous mode
[  192.674545][T11562] veth1_macvtap: entered promiscuous mode
[  192.686907][T11562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.697464][T11562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.707360][T11562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.717948][T11562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.727916][T11562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.738429][T11562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.748586][T11562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.759134][T11562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.770079][T11562] batman_adv: batadv0: Interface activated: batadv_slave_0
[  192.770363][T11728] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2726'.
[  192.778474][T11562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.796812][T11562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.806652][T11562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.817303][T11562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.827604][T11562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.838076][T11562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.847944][T11562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.858539][T11562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.869447][T11562] batman_adv: batadv0: Interface activated: batadv_slave_1
[  192.883314][T11562] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  192.892393][T11562] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  192.901196][T11562] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  192.910209][T11562] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  192.910294][T11736] loop4: detected capacity change from 0 to 2048
[  192.925615][T11736] EXT4-fs: test_dummy_encryption option not supported
[  192.992715][T11741] x_tables: unsorted entry at hook 1
[  193.140889][T11760] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2738'.
[  193.174250][T11761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2739'.
[  193.200437][   T29] kauditd_printk_skb: 364 callbacks suppressed
[  193.200453][   T29] audit: type=1400 audit(1745529570.200:26689): avc:  denied  { ioctl } for  pid=11764 comm="syz.1.2740" path="/508/file0" dev="tmpfs" ino=2694 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  193.232222][T11757] loop5: detected capacity change from 0 to 8192
[  193.261539][T11768] netlink: 'syz.0.2741': attribute type 39 has an invalid length.
[  193.324291][T11770] netlink: 'syz.0.2742': attribute type 39 has an invalid length.
[  193.332345][T11736] loop4: detected capacity change from 0 to 1024
[  193.339184][T11770] FAULT_INJECTION: forcing a failure.
[  193.339184][T11770] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  193.346894][   T29] audit: type=1400 audit(1745529570.340:26690): avc:  denied  { remount } for  pid=11735 comm="syz.4.2730" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  193.352575][T11770] CPU: 1 UID: 0 PID: 11770 Comm: syz.0.2742 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(voluntary) 
[  193.352602][T11770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  193.352616][T11770] Call Trace:
[  193.352625][T11770]  <TASK>
[  193.352635][T11770]  dump_stack_lvl+0xf6/0x150
[  193.352737][T11770]  dump_stack+0x15/0x1a
[  193.352758][T11770]  should_fail_ex+0x261/0x270
[  193.352789][T11770]  should_fail_alloc_page+0xfd/0x110
[  193.352890][T11770]  __alloc_frozen_pages_noprof+0x11d/0x360
[  193.352921][T11770]  alloc_pages_mpol+0xb6/0x260
[  193.352961][T11770]  vma_alloc_folio_noprof+0x19c/0x300
[  193.353002][T11770]  handle_mm_fault+0xdda/0x2e80
[  193.353033][T11770]  ? mas_walk+0x204/0x320
[  193.353078][T11770]  ? __rcu_read_unlock+0x4e/0x70
[  193.353113][T11770]  exc_page_fault+0x3b9/0x6a0
[  193.353139][T11770]  ? do_syscall_64+0xd6/0x1a0
[  193.353173][T11770]  asm_exc_page_fault+0x26/0x30
[  193.353198][T11770] RIP: 0033:0x7f496faebf6b
[  193.353231][T11770] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01
[  193.353260][T11770] RSP: 002b:00007f496e1a4e10 EFLAGS: 00010246
[  193.353337][T11770] RAX: 00007f496e1a6f30 RBX: 00007f496fd33620 RCX: 0000000000000000
[  193.353348][T11770] RDX: 00007f496e1a6f78 RSI: 00007f496fb9dbf8 RDI: 00007f496e1a4e30
[  193.353359][T11770] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000
[  193.353369][T11770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  193.353407][T11770] R13: 0000000000000000 R14: 00007f496fd65fa0 R15: 00007ffdc63a3ff8
[  193.353430][T11770]  </TASK>
[  193.353443][T11770] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  193.512534][   T29] audit: type=1400 audit(1745529570.500:26691): avc:  denied  { shutdown } for  pid=11764 comm="syz.1.2740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  193.573205][   T29] audit: type=1400 audit(1745529570.570:26692): avc:  denied  { getopt } for  pid=11764 comm="syz.1.2740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  193.593438][   T29] audit: type=1400 audit(1745529570.570:26693): avc:  denied  { create } for  pid=11764 comm="syz.1.2740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  193.740089][T11782] netlink: 'syz.1.2744': attribute type 39 has an invalid length.
[  193.761826][T11781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2745'.
[  193.770825][T11781] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2745'.
[  193.847161][   T29] audit: type=1400 audit(1745529570.840:26694): avc:  denied  { connect } for  pid=11777 comm="syz.1.2744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  193.871080][   T29] audit: type=1400 audit(1745529570.840:26695): avc:  denied  { write } for  pid=11777 comm="syz.1.2744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  193.892317][   T29] audit: type=1326 audit(1745529570.890:26696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11784 comm="syz.4.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d2ace969 code=0x7ffc0000
[  193.916314][   T29] audit: type=1326 audit(1745529570.890:26697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11784 comm="syz.4.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2d2ace969 code=0x7ffc0000
[  193.940740][   T29] audit: type=1326 audit(1745529570.890:26698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11784 comm="syz.4.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d2ace969 code=0x7ffc0000
[  193.983946][T11800] FAULT_INJECTION: forcing a failure.
[  193.983946][T11800] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  193.997639][T11800] CPU: 0 UID: 0 PID: 11800 Comm: syz.3.2749 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(voluntary) 
[  193.997684][T11800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  193.997697][T11800] Call Trace:
[  193.997703][T11800]  <TASK>
[  193.997711][T11800]  dump_stack_lvl+0xf6/0x150
[  193.997816][T11800]  dump_stack+0x15/0x1a
[  193.997837][T11800]  should_fail_ex+0x261/0x270
[  193.997863][T11800]  should_fail+0xb/0x10
[  193.997889][T11800]  should_fail_usercopy+0x1a/0x20
[  193.997919][T11800]  _copy_from_user+0x1c/0xa0
[  193.997955][T11800]  copy_msghdr_from_user+0x54/0x2b0
[  193.998015][T11800]  ? __fget_files+0x186/0x1c0
[  193.998062][T11800]  __sys_sendmsg+0x141/0x240
[  193.998140][T11800]  __x64_sys_sendmsg+0x46/0x50
[  193.998165][T11800]  x64_sys_call+0x26f3/0x2e10
[  193.998191][T11800]  do_syscall_64+0xc9/0x1a0
[  193.998221][T11800]  ? clear_bhb_loop+0x25/0x80
[  193.998256][T11800]  ? clear_bhb_loop+0x25/0x80
[  193.998314][T11800]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.998352][T11800] RIP: 0033:0x7fc4aa17e969
[  193.998370][T11800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  193.998392][T11800] RSP: 002b:00007fc4a87e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  193.998414][T11800] RAX: ffffffffffffffda RBX: 00007fc4aa3a5fa0 RCX: 00007fc4aa17e969
[  193.998430][T11800] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006
[  193.998444][T11800] RBP: 00007fc4a87e7090 R08: 0000000000000000 R09: 0000000000000000
[  193.998469][T11800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  193.998481][T11800] R13: 0000000000000000 R14: 00007fc4aa3a5fa0 R15: 00007ffd157e5f48
[  193.998498][T11800]  </TASK>
[  194.229631][T11799] IPv6: Can't replace route, no match found
[  194.270254][T11802] netlink: 'syz.0.2750': attribute type 20 has an invalid length.
[  194.278175][T11802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2750'.
[  194.292485][T11804] IPv6: Can't replace route, no match found
[  194.302092][T11804] FAULT_INJECTION: forcing a failure.
[  194.302092][T11804] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  194.315262][T11804] CPU: 1 UID: 0 PID: 11804 Comm: syz.3.2752 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(voluntary) 
[  194.315304][T11804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  194.315318][T11804] Call Trace:
[  194.315324][T11804]  <TASK>
[  194.315333][T11804]  dump_stack_lvl+0xf6/0x150
[  194.315425][T11804]  dump_stack+0x15/0x1a
[  194.315445][T11804]  should_fail_ex+0x261/0x270
[  194.315512][T11804]  should_fail+0xb/0x10
[  194.315532][T11804]  should_fail_usercopy+0x1a/0x20
[  194.315560][T11804]  _copy_to_user+0x20/0xa0
[  194.315704][T11804]  simple_read_from_buffer+0xb2/0x130
[  194.315745][T11804]  proc_fail_nth_read+0x103/0x140
[  194.315858][T11804]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  194.315898][T11804]  vfs_read+0x1b2/0x710
[  194.315917][T11804]  ? __rcu_read_unlock+0x4e/0x70
[  194.316004][T11804]  ? __fget_files+0x186/0x1c0
[  194.316031][T11804]  ksys_read+0xeb/0x1b0
[  194.316054][T11804]  __x64_sys_read+0x42/0x50
[  194.316111][T11804]  x64_sys_call+0x2a3b/0x2e10
[  194.316134][T11804]  do_syscall_64+0xc9/0x1a0
[  194.316158][T11804]  ? clear_bhb_loop+0x25/0x80
[  194.316177][T11804]  ? clear_bhb_loop+0x25/0x80
[  194.316246][T11804]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.316267][T11804] RIP: 0033:0x7fc4aa17d37c
[  194.316281][T11804] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  194.316362][T11804] RSP: 002b:00007fc4a87e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  194.316380][T11804] RAX: ffffffffffffffda RBX: 00007fc4aa3a5fa0 RCX: 00007fc4aa17d37c
[  194.316391][T11804] RDX: 000000000000000f RSI: 00007fc4a87e70a0 RDI: 0000000000000004
[  194.316402][T11804] RBP: 00007fc4a87e7090 R08: 0000000000000000 R09: 0000000000000000
[  194.316414][T11804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  194.316428][T11804] R13: 0000000000000000 R14: 00007fc4aa3a5fa0 R15: 00007ffd157e5f48
[  194.316450][T11804]  </TASK>
[  194.522487][T11809] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  194.583208][T11815] loop1: detected capacity change from 0 to 8192
[  194.658765][T11816] IPv6: Can't replace route, no match found
[  194.679605][T11821] loop0: detected capacity change from 0 to 2048
[  194.720685][T11821] Alternate GPT is invalid, using primary GPT.
[  194.727116][T11821]  loop0: p2 p3 p7
[  194.848850][T11824] IPv6: Can't replace route, no match found
[  195.072060][T11843] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  195.117081][T11847] netlink: 'syz.1.2763': attribute type 20 has an invalid length.
[  195.146889][T11849] loop5: detected capacity change from 0 to 164
[  195.154706][T11849] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  195.160343][T11851] IPv6: Can't replace route, no match found
[  195.172047][T11849] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  195.181242][T11849] Symlink component flag not implemented
[  195.187194][T11849] Symlink component flag not implemented
[  195.190835][T11853] FAULT_INJECTION: forcing a failure.
[  195.190835][T11853] name failslab, interval 1, probability 0, space 0, times 0
[  195.194832][T11849] Symlink component flag not implemented (7)
[  195.205600][T11853] CPU: 1 UID: 0 PID: 11853 Comm: syz.1.2766 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(voluntary) 
[  195.205632][T11853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  195.205648][T11853] Call Trace:
[  195.205657][T11853]  <TASK>
[  195.205734][T11853]  dump_stack_lvl+0xf6/0x150
[  195.205765][T11853]  dump_stack+0x15/0x1a
[  195.205785][T11853]  should_fail_ex+0x261/0x270
[  195.205817][T11853]  should_failslab+0x8f/0xb0
[  195.205910][T11853]  kmem_cache_alloc_noprof+0x59/0x340
[  195.205946][T11853]  ? skb_clone+0x154/0x1f0
[  195.206041][T11853]  skb_clone+0x154/0x1f0
[  195.206072][T11853]  nfnetlink_rcv+0x30b/0x1610
[  195.206103][T11853]  ? __kfree_skb+0x102/0x150
[  195.206129][T11853]  ? nlmon_xmit+0x51/0x60
[  195.206177][T11853]  ? __kfree_skb+0x102/0x150
[  195.206201][T11853]  ? consume_skb+0x49/0x160
[  195.206227][T11853]  ? nlmon_xmit+0x51/0x60
[  195.206336][T11853]  ? dev_hard_start_xmit+0x3d1/0x400
[  195.206377][T11853]  ? __dev_queue_xmit+0xb76/0x20b0
[  195.206409][T11853]  ? should_fail_ex+0xd7/0x270
[  195.206506][T11853]  ? ref_tracker_free+0x3b8/0x420
[  195.206551][T11853]  netlink_unicast+0x605/0x6c0
[  195.206596][T11853]  netlink_sendmsg+0x609/0x720
[  195.206681][T11853]  ? __pfx_netlink_sendmsg+0x10/0x10
[  195.206707][T11853]  __sock_sendmsg+0x140/0x180
[  195.206745][T11853]  ____sys_sendmsg+0x350/0x4e0
[  195.206780][T11853]  __sys_sendmsg+0x1a0/0x240
[  195.206880][T11853]  __x64_sys_sendmsg+0x46/0x50
[  195.206919][T11853]  x64_sys_call+0x26f3/0x2e10
[  195.206946][T11853]  do_syscall_64+0xc9/0x1a0
[  195.206980][T11853]  ? clear_bhb_loop+0x25/0x80
[  195.207007][T11853]  ? clear_bhb_loop+0x25/0x80
[  195.207083][T11853]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.207110][T11853] RIP: 0033:0x7fd89873e969
[  195.207130][T11853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  195.207152][T11853] RSP: 002b:00007fd896da7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  195.207178][T11853] RAX: ffffffffffffffda RBX: 00007fd898965fa0 RCX: 00007fd89873e969
[  195.207272][T11853] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  195.207287][T11853] RBP: 00007fd896da7090 R08: 0000000000000000 R09: 0000000000000000
[  195.207301][T11853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  195.207316][T11853] R13: 0000000000000000 R14: 00007fd898965fa0 R15: 00007ffce86301a8
[  195.207339][T11853]  </TASK>
[  195.250557][T11855] loop1: detected capacity change from 0 to 512
[  195.250827][T11849] Symlink component flag not implemented (116)
[  195.260302][T11855] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  195.308360][T11562] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  195.335288][T11855] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  195.338582][T11562] rock: directory entry would overflow storage
[  195.342416][T11855] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002]
[  195.347171][T11562] rock: sig=0x4f50, size=4, remaining=3
[  195.347193][T11562] iso9660: Corrupted directory entry in block 4 of inode 1792
[  195.347309][T11562] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  195.352098][T11855] System zones: 
[  195.358296][T11562] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  195.361413][T11855] 0-1
[  195.365978][T11562] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  195.370620][T11855] , 15-15, 18-18
[  195.377328][T11562] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  195.381352][T11855] , 34-34
[  195.414297][T11855] EXT4-fs (loop1): orphan cleanup on readonly fs
[  195.453859][T11562] rock: directory entry would overflow storage
[  195.454873][T11855] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  195.457386][T11562] rock: sig=0x4f50, size=4, remaining=3
[  195.457399][T11562] iso9660: Corrupted directory entry in block 3 of inode 1856
[  195.463757][T11855] EXT4-fs (loop1): Cannot turn on quotas: error -22
[  195.499243][T11562] VFS: Lookup of '' in iso9660 loop5 would have caused loop
[  195.626364][T11855] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2767: bg 0: block 40: padding at end of block bitmap is not set
[  195.628921][T11562] VFS: Lookup of '' in iso9660 loop5 would have caused loop
[  195.679190][T11855] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  195.693700][T11855] EXT4-fs (loop1): 1 truncate cleaned up
[  195.702729][T11855] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  195.756940][T11855] geneve0: entered allmulticast mode
[  195.781032][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.842715][T11878] netlink: 'syz.4.2775': attribute type 20 has an invalid length.
[  196.115915][T11889] IPv6: Can't replace route, no match found
[  196.127466][T11893] IPv6: Can't replace route, no match found
[  196.442229][   T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.520780][   T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.562038][   T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.598067][ T3382] page_pool_release_retry() stalled pool shutdown: id 105, 1 inflight 61 sec
[  196.624329][   T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.650599][T11902] chnl_net:caif_netlink_parms(): no params data found
[  196.724953][T11902] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.732112][T11902] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.739323][T11902] bridge_slave_0: entered allmulticast mode
[  196.745963][T11902] bridge_slave_0: entered promiscuous mode
[  196.752929][T11902] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.760072][T11902] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.767261][T11902] bridge_slave_1: entered allmulticast mode
[  196.773749][T11902] bridge_slave_1: entered promiscuous mode
[  196.799359][   T12] bridge_slave_1: left allmulticast mode
[  196.805253][   T12] bridge_slave_1: left promiscuous mode
[  196.811115][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.819857][   T12] bridge_slave_0: left allmulticast mode
[  196.825648][   T12] bridge_slave_0: left promiscuous mode
[  196.831402][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.940590][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  196.951115][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  196.961082][   T12] bond0 (unregistering): Released all slaves
[  196.971296][T11902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  196.984657][T11902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  197.003784][   T12] hsr_slave_0: left promiscuous mode
[  197.009435][   T12] hsr_slave_1: left promiscuous mode
[  197.015074][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  197.022605][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  197.030222][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  197.037607][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  197.048307][   T12] veth1_macvtap: left promiscuous mode
[  197.053840][   T12] veth0_macvtap: left promiscuous mode
[  197.059371][   T12] veth1_vlan: left promiscuous mode
[  197.064632][   T12] veth0_vlan: left promiscuous mode
[  197.129289][   T12] team0 (unregistering): Port device team_slave_1 removed
[  197.139244][   T12] team0 (unregistering): Port device team_slave_0 removed
[  197.183016][T11902] team0: Port device team_slave_0 added
[  197.190323][T11902] team0: Port device team_slave_1 added
[  197.219889][T11902] batman_adv: batadv0: Adding interface: batadv_slave_0
[  197.226928][T11902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.252974][T11902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  197.264675][T11902] batman_adv: batadv0: Adding interface: batadv_slave_1
[  197.271817][T11902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.298150][T11902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  197.332505][T11902] hsr_slave_0: entered promiscuous mode
[  197.338961][T11902] hsr_slave_1: entered promiscuous mode
[  197.345221][T11902] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  197.353179][T11902] Cannot create hsr debugfs directory
[  197.423275][T11902] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  197.442049][T11902] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  197.451395][T11902] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  197.462314][T11902] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  197.484512][T11902] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.491784][T11902] bridge0: port 2(bridge_slave_1) entered forwarding state
[  197.499198][T11902] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.506258][T11902] bridge0: port 1(bridge_slave_0) entered forwarding state
[  197.514620][T11942] IPv6: Can't replace route, no match found
[  197.545376][T11902] 8021q: adding VLAN 0 to HW filter on device bond0
[  197.556995][   T31] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.566118][   T31] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.587530][T11902] 8021q: adding VLAN 0 to HW filter on device team0
[  197.594972][T11948] loop0: detected capacity change from 0 to 512
[  197.602603][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.609690][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[  197.613303][T11948] EXT4-fs error (device loop0): ext4_orphan_get:1390: inode #15: comm syz.0.2796: casefold flag without casefold feature
[  197.625880][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.631972][T11948] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.2796: couldn't read orphan inode 15 (err -117)
[  197.636682][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[  197.651803][T11948] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.698630][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.732467][T11902] 8021q: adding VLAN 0 to HW filter on device batadv0
[  197.760374][T11961] loop1: detected capacity change from 0 to 512
[  197.791857][T11961] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2799: invalid indirect mapped block 256 (level 2)
[  197.815814][T11961] EXT4-fs (loop1): 2 truncates cleaned up
[  197.828244][T11961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.856181][T11961] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.1.2799: path /530/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0
[  197.919354][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.935043][T11902] veth0_vlan: entered promiscuous mode
[  197.953376][T11902] veth1_vlan: entered promiscuous mode
[  197.986850][T11902] veth0_macvtap: entered promiscuous mode
[  197.995593][T11902] veth1_macvtap: entered promiscuous mode
[  198.019524][T11984] loop0: detected capacity change from 0 to 8192
[  198.031743][T11902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  198.042308][T11902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.052241][T11902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  198.062838][T11902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.072850][T11902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  198.083397][T11902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.094023][T11902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  198.104573][T11902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.115598][T11902] batman_adv: batadv0: Interface activated: batadv_slave_0
[  198.123965][T11902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.134606][T11902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.144652][T11902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.154490][T11992] netlink: 'syz.1.2806': attribute type 1 has an invalid length.
[  198.155231][T11902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.172851][T11902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.183411][T11902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.193422][T11902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.204039][T11902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.239292][T11996] loop4: detected capacity change from 0 to 2048
[  198.248583][T11902] batman_adv: batadv0: Interface activated: batadv_slave_1
[  198.266062][T11902] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  198.274975][T11902] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  198.283908][T11902] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  198.292981][T11902] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  198.302056][T11994] __nla_validate_parse: 4 callbacks suppressed
[  198.302073][T11994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2806'.
[  198.324419][T11996] Alternate GPT is invalid, using primary GPT.
[  198.330907][T11996]  loop4: p2 p3 p7
[  198.355518][   T29] kauditd_printk_skb: 371 callbacks suppressed
[  198.355534][   T29] audit: type=1326 audit(1745529575.350:27069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.3.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4aa17e969 code=0x7ffc0000
[  198.399119][   T29] audit: type=1326 audit(1745529575.390:27070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.3.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc4aa17e969 code=0x7ffc0000
[  198.422850][   T29] audit: type=1326 audit(1745529575.390:27071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.3.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4aa17e969 code=0x7ffc0000
[  198.446763][   T29] audit: type=1326 audit(1745529575.390:27072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.3.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4aa17e969 code=0x7ffc0000
[  198.678935][T12019] loop3: detected capacity change from 0 to 512
[  198.698363][   T29] audit: type=1326 audit(1745529575.700:27073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12020 comm="syz.6.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1837c0e969 code=0x7ffc0000
[  198.741960][T12019] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.742495][   T29] audit: type=1326 audit(1745529575.720:27074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12020 comm="syz.6.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f1837c0e969 code=0x7ffc0000
[  198.775899][T12019] ext4 filesystem being mounted at /586/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.778577][   T29] audit: type=1326 audit(1745529575.720:27075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12020 comm="syz.6.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1837c0e969 code=0x7ffc0000
[  198.812725][   T29] audit: type=1326 audit(1745529575.720:27076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12020 comm="syz.6.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1837c0e969 code=0x7ffc0000
[  198.836732][   T29] audit: type=1326 audit(1745529575.720:27077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12020 comm="syz.6.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1837c0e969 code=0x7ffc0000
[  198.860681][   T29] audit: type=1326 audit(1745529575.720:27078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12020 comm="syz.6.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1837c0e969 code=0x7ffc0000
[  198.863600][T12019] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.2813: Failed to acquire dquot type 0
[  198.976048][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.095033][T12031] IPv6: Can't replace route, no match found
[  199.124366][ T2734] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.210497][ T2734] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.281766][ T2734] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.340426][ T2734] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.354167][T12043] chnl_net:caif_netlink_parms(): no params data found
[  199.362295][T12055] loop0: detected capacity change from 0 to 8192
[  199.398007][T12043] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.405111][T12043] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.412441][T12043] bridge_slave_0: entered allmulticast mode
[  199.418917][T12043] bridge_slave_0: entered promiscuous mode
[  199.426268][T12043] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.433550][T12043] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.440886][T12043] bridge_slave_1: entered allmulticast mode
[  199.447419][T12043] bridge_slave_1: entered promiscuous mode
[  199.474027][T12043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  199.491095][T12043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  199.500792][ T2734] erspan0: left allmulticast mode
[  199.505983][ T2734] erspan0: left promiscuous mode
[  199.511085][ T2734] GPL: port 1(erspan0) entered disabled state
[  199.590268][ T2734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  199.600210][ T2734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  199.609898][ T2734] bond0 (unregistering): Released all slaves
[  199.632979][T12043] team0: Port device team_slave_0 added
[  199.642193][T12043] team0: Port device team_slave_1 added
[  199.673397][T12043] batman_adv: batadv0: Adding interface: batadv_slave_0
[  199.680464][T12043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.706446][T12043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  199.718742][T12043] batman_adv: batadv0: Adding interface: batadv_slave_1
[  199.725705][T12043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.751827][T12043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  199.770587][ T2734] hsr_slave_0: left promiscuous mode
[  199.776618][ T2734] hsr_slave_1: left promiscuous mode
[  199.782433][ T2734] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  199.790084][ T2734] batman_adv: batadv0: Removing interface: batadv_slave_0
[  199.802219][ T2734] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  199.809679][ T2734] batman_adv: batadv0: Removing interface: batadv_slave_1
[  199.830821][ T2734] veth1_vlan: left promiscuous mode
[  199.837636][ T2734] veth0_vlan: left promiscuous mode
[  199.887225][T12069] syz.1.2828 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  199.905810][T12069] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2828'.
[  199.915923][T12067] loop0: detected capacity change from 0 to 8192
[  199.934425][ T2734] team0 (unregistering): Port device team_slave_1 removed
[  199.946723][ T2734] team0 (unregistering): Port device team_slave_0 removed
[  200.001192][T12073] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.008477][T12073] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.015857][T12073] bridge0: entered allmulticast mode
[  200.024002][T12073] bridge_slave_1: left allmulticast mode
[  200.029835][T12073] bridge_slave_1: left promiscuous mode
[  200.035663][T12073] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.119222][T12073] bridge_slave_0: left allmulticast mode
[  200.124946][T12073] bridge_slave_0: left promiscuous mode
[  200.130650][T12073] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.195292][T12043] hsr_slave_0: entered promiscuous mode
[  200.201380][T12043] hsr_slave_1: entered promiscuous mode
[  200.214018][T12074] IPv6: Can't replace route, no match found
[  200.307208][T12043] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  200.317963][T12043] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  200.327202][T12043] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  200.338244][T12043] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  200.393509][T12043] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.409726][T12043] 8021q: adding VLAN 0 to HW filter on device team0
[  200.419675][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.426796][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  200.451919][T12043] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  200.462470][T12043] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  200.495372][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.502502][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  200.581918][T12043] 8021q: adding VLAN 0 to HW filter on device batadv0
[  200.599560][T12095] IPv6: sit1: Disabled Multicast RS
[  200.605808][T12095] sit1: entered allmulticast mode
[  200.702032][T12043] veth0_vlan: entered promiscuous mode
[  200.727048][T12043] veth1_vlan: entered promiscuous mode
[  200.753265][T12043] veth0_macvtap: entered promiscuous mode
[  200.768205][T12043] veth1_macvtap: entered promiscuous mode
[  200.779145][T12043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  200.789715][T12043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.799619][T12043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  200.810301][T12043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.820223][T12043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  200.830735][T12043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.840669][T12043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  200.851191][T12043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.871220][T12043] batman_adv: batadv0: Interface activated: batadv_slave_0
[  200.887142][T12043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  200.897861][T12043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.907959][T12043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  200.919115][T12043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.929169][T12043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  200.939707][T12043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.949696][T12043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  200.960161][T12043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.973965][T12043] batman_adv: batadv0: Interface activated: batadv_slave_1
[  200.983564][T12043] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  200.992519][T12043] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  201.001296][T12043] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  201.010189][T12043] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  201.036152][T12121] loop1: detected capacity change from 0 to 512
[  201.076083][T12121] EXT4-fs (loop1): 1 orphan inode deleted
[  201.085477][T12121] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.098110][T12120] loop0: detected capacity change from 0 to 8192
[  201.105235][T12121] ext4 filesystem being mounted at /539/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  201.106290][   T37] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1
[  201.140482][T12132] loop4: detected capacity change from 0 to 512
[  201.172558][T12133] loop7: detected capacity change from 0 to 8192
[  201.194186][T12132] EXT4-fs (loop4): 1 orphan inode deleted
[  201.206108][T12132] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.220239][   T12] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1
[  201.239293][T12132] ext4 filesystem being mounted at /531/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  201.455636][T12143] loop6: detected capacity change from 0 to 2048
[  201.481861][T12143] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  201.694600][T12164] loop0: detected capacity change from 0 to 512
[  201.702588][T12164] EXT4-fs: Ignoring removed nobh option
[  201.709615][T12164] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2853: invalid indirect mapped block 256 (level 2)
[  201.724452][T12164] EXT4-fs (loop0): 2 truncates cleaned up
[  201.730791][T12164] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.769255][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.831390][T12172] netlink: 'syz.1.2855': attribute type 1 has an invalid length.
[  201.841777][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.899553][ T3681] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0
[  201.907028][ T3681] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0
[  201.914509][ T3681] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0
[  201.937229][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.949621][ T3681] hid-generic 0000:0004:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  201.964587][T12175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2855'.
[  202.023168][T12179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2857'.
[  202.208047][T12193] IPv6: Can't replace route, no match found
[  202.291836][T11902] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.373594][T12201] loop6: detected capacity change from 0 to 8192
[  202.650296][T12214] loop7: detected capacity change from 0 to 512
[  202.680632][T12214] EXT4-fs (loop7): 1 orphan inode deleted
[  202.700769][   T37] EXT4-fs error (device loop7): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1
[  202.720096][T12214] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.786922][T12214] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  202.833372][T12224] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2872'.
[  202.992881][T12238] loop6: detected capacity change from 0 to 8192
[  203.064210][T12243] IPv6: Can't replace route, no match found
[  203.208905][T12245] loop1: detected capacity change from 0 to 512
[  203.221314][T12245] EXT4-fs: Ignoring removed nobh option
[  203.235836][T12248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2881'.
[  203.238858][T12245] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2880: invalid indirect mapped block 256 (level 2)
[  203.260913][T12245] EXT4-fs (loop1): 2 truncates cleaned up
[  203.269491][T12245] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.341989][T12245] netlink: 132 bytes leftover after parsing attributes in process `wg1'.
[  203.380232][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.447288][   T29] kauditd_printk_skb: 464 callbacks suppressed
[  203.447313][   T29] audit: type=1326 audit(1745529580.440:27538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12255 comm="syz.6.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1837c0e969 code=0x7ffc0000
[  203.477751][   T29] audit: type=1326 audit(1745529580.440:27539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12255 comm="syz.6.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1837c0e969 code=0x7ffc0000
[  203.501510][   T29] audit: type=1326 audit(1745529580.440:27540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12255 comm="syz.6.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1837c0e969 code=0x7ffc0000
[  203.525059][   T29] audit: type=1326 audit(1745529580.440:27541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12255 comm="syz.6.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1837c0e969 code=0x7ffc0000
[  203.559001][T12043] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.568081][   T29] audit: type=1326 audit(1745529580.440:27542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12255 comm="syz.6.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1837c0e969 code=0x7ffc0000
[  203.568118][   T29] audit: type=1326 audit(1745529580.440:27543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12255 comm="syz.6.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1837c0e969 code=0x7ffc0000
[  203.568149][   T29] audit: type=1326 audit(1745529580.440:27544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12255 comm="syz.6.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1837c0e969 code=0x7ffc0000
[  203.639247][   T29] audit: type=1326 audit(1745529580.440:27545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12255 comm="syz.6.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1837c0e969 code=0x7ffc0000
[  203.662897][   T29] audit: type=1326 audit(1745529580.440:27546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12255 comm="syz.6.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1837c0e969 code=0x7ffc0000
[  203.686738][   T29] audit: type=1326 audit(1745529580.440:27547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12255 comm="syz.6.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1837c0e969 code=0x7ffc0000
[  203.740620][T12267] netlink: 'syz.7.2886': attribute type 1 has an invalid length.
[  203.783030][T12273] IPv6: sit1: Disabled Multicast RS
[  203.828082][T12273] sit1: entered allmulticast mode
[  203.834834][T12280] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2886'.
[  203.864497][T12276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2889'.
[  203.947345][   T31] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.045735][   T31] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.089039][T12281] netlink: 'syz.6.2890': attribute type 39 has an invalid length.
[  204.134251][T12259] chnl_net:caif_netlink_parms(): no params data found
[  204.155819][T12294] loop1: detected capacity change from 0 to 2048
[  204.166615][   T31] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.178731][T12291] netlink: 'syz.6.2890': attribute type 3 has an invalid length.
[  204.191778][T12294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  204.257495][   T31] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.344884][T12259] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.352042][T12259] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.409411][T12259] bridge_slave_0: entered allmulticast mode
[  204.441897][T12259] bridge_slave_0: entered promiscuous mode
[  204.452065][T12301] ip6tnl1: entered promiscuous mode
[  204.457334][T12301] ip6tnl1: entered allmulticast mode
[  204.473381][T12259] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.480567][T12259] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.490766][T12259] bridge_slave_1: entered allmulticast mode
[  204.497469][T12259] bridge_slave_1: entered promiscuous mode
[  204.506970][T12301] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2894'.
[  204.520903][   T31] erspan0: left allmulticast mode
[  204.525968][   T31] erspan0: left promiscuous mode
[  204.531161][   T31] GPL: port 1(erspan0) entered disabled state
[  204.661436][   T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  204.671652][   T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  204.681398][   T31] bond0 (unregistering): Released all slaves
[  204.697213][T12305] ip6tnl1: entered promiscuous mode
[  204.702595][T12305] ip6tnl1: entered allmulticast mode
[  204.720604][T12305] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2896'.
[  204.739432][T12259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  204.756684][T12259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  204.778971][T12259] team0: Port device team_slave_0 added
[  204.786715][   T31] hsr_slave_0: left promiscuous mode
[  204.797419][   T31] hsr_slave_1: left promiscuous mode
[  204.810666][   T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  204.818188][   T31] batman_adv: batadv0: Removing interface: batadv_slave_0
[  204.824885][T12310] xt_hashlimit: size too large, truncated to 1048576
[  204.832859][   T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  204.840466][   T31] batman_adv: batadv0: Removing interface: batadv_slave_1
[  204.948415][   T31] veth1_vlan: left promiscuous mode
[  204.964194][   T31] veth0_vlan: left promiscuous mode
[  205.080620][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.184216][   T31] team0 (unregistering): Port device team_slave_1 removed
[  205.208948][   T31] team0 (unregistering): Port device team_slave_0 removed
[  205.243783][T12259] team0: Port device team_slave_1 added
[  205.260005][T12314] IPv6: Can't replace route, no match found
[  205.270125][T12322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2901'.
[  205.291881][T12259] batman_adv: batadv0: Adding interface: batadv_slave_0
[  205.298926][T12259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.324878][T12259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  205.325125][T12326] loop7: detected capacity change from 0 to 2048
[  205.338408][T12259] batman_adv: batadv0: Adding interface: batadv_slave_1
[  205.348842][T12259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.374814][T12259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  205.387089][T12328] IPv6: sit1: Disabled Multicast RS
[  205.393041][T12328] sit1: entered allmulticast mode
[  205.405757][T12326] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  205.452750][T12259] hsr_slave_0: entered promiscuous mode
[  205.466435][T12259] hsr_slave_1: entered promiscuous mode
[  205.475289][T12259] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  205.508701][T12259] Cannot create hsr debugfs directory
[  205.546198][T12338] loop4: detected capacity change from 0 to 2048
[  205.553594][T12340] loop1: detected capacity change from 0 to 512
[  205.570920][T12338] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  205.579757][T12340] EXT4-fs (loop1): 1 orphan inode deleted
[  205.591997][T12340] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.605026][   T12] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1
[  205.640863][T12340] ext4 filesystem being mounted at /557/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  205.738550][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.821209][T12351] loop1: detected capacity change from 0 to 8192
[  205.897932][T12336] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  205.926101][T12259] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  205.933662][T12336] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28
[  205.946059][T12336] EXT4-fs (loop7): This should not happen!! Data will be lost
[  205.946059][T12336] 
[  205.955868][T12336] EXT4-fs (loop7): Total free blocks count 0
[  205.961991][T12336] EXT4-fs (loop7): Free/Dirty block details
[  205.968190][T12336] EXT4-fs (loop7): free_blocks=2415919104
[  205.974023][T12336] EXT4-fs (loop7): dirty_blocks=8224
[  205.980369][T12336] EXT4-fs (loop7): Block reservation details
[  205.987190][T12336] EXT4-fs (loop7): i_reserved_data_blocks=514
[  206.002656][T12259] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  206.022846][T12259] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  206.027137][   T31] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28
[  206.046467][T12259] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  206.125711][T12259] 8021q: adding VLAN 0 to HW filter on device bond0
[  206.156765][T12259] 8021q: adding VLAN 0 to HW filter on device team0
[  206.177193][ T1307] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.184387][ T1307] bridge0: port 1(bridge_slave_0) entered forwarding state
[  206.207127][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.214268][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  206.320047][T12357] loop7: detected capacity change from 0 to 2048
[  206.340952][T12357] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  206.428589][T12259] 8021q: adding VLAN 0 to HW filter on device batadv0
[  206.466133][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.479047][T12365] loop1: detected capacity change from 0 to 512
[  206.496543][T12365] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2912: invalid indirect mapped block 256 (level 2)
[  206.519560][T12365] EXT4-fs (loop1): 2 truncates cleaned up
[  206.533591][T12365] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  206.568167][T12365] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.1.2912: path /559/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0
[  206.590958][T12371] loop4: detected capacity change from 0 to 2048
[  206.592163][T12374] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2914'.
[  206.620702][T12259] veth0_vlan: entered promiscuous mode
[  206.630516][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.640729][T12371] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  206.641474][T12259] veth1_vlan: entered promiscuous mode
[  206.670999][T12259] veth0_macvtap: entered promiscuous mode
[  206.678605][T12259] veth1_macvtap: entered promiscuous mode
[  206.697619][T12259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  206.708220][T12259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.718447][T12259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  206.729068][T12259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.738977][T12259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  206.749694][T12259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.759595][T12259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  206.770177][T12259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.784476][T12259] batman_adv: batadv0: Interface activated: batadv_slave_0
[  206.793020][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.795738][T12259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.812766][T12259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.822743][T12259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.833314][T12259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.843266][T12259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.853900][T12259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.863809][T12259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.874306][T12259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.886238][T12259] batman_adv: batadv0: Interface activated: batadv_slave_1
[  206.902844][T12259] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  206.911715][T12259] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  206.920534][T12259] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  206.929352][T12259] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  206.970823][T12389] loop6: detected capacity change from 0 to 512
[  206.993204][T12389] EXT4-fs: Ignoring removed nobh option
[  207.032426][T12398] loop4: detected capacity change from 0 to 2048
[  207.040160][T12389] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2918: invalid indirect mapped block 256 (level 2)
[  207.060118][T12389] EXT4-fs (loop6): 2 truncates cleaned up
[  207.075954][T12389] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.103300][T12398] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  207.134382][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.180057][T11902] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.212718][T12413] ip6tnl1: entered promiscuous mode
[  207.218092][T12413] ip6tnl1: entered allmulticast mode
[  207.254648][T12413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2926'.
[  207.276781][T12043] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.325446][T12423] loop4: detected capacity change from 0 to 2048
[  207.343811][T12427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2931'.
[  207.354459][T12423] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  207.357360][T12427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2931'.
[  207.421592][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.512334][T12445] loop4: detected capacity change from 0 to 2048
[  207.561239][T12445] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  207.569937][T12443] IPv6: Can't replace route, no match found
[  207.646675][T12460] loop1: detected capacity change from 0 to 512
[  207.653683][T12460] EXT4-fs: Ignoring removed nobh option
[  207.672930][T12460] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2939: invalid indirect mapped block 256 (level 2)
[  207.676611][T12463] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  207.704632][T12460] EXT4-fs (loop1): 2 truncates cleaned up
[  207.733414][T12460] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.777183][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.836272][T12469] loop1: detected capacity change from 0 to 8192
[  207.924396][T12470] IPv6: Can't replace route, no match found
[  207.973887][T12479] loop0: detected capacity change from 0 to 2048
[  208.002094][T12479] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  208.123934][T12259] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.322170][T12493] loop1: detected capacity change from 0 to 512
[  208.375988][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.400157][T12493] EXT4-fs (loop1): 1 orphan inode deleted
[  208.406789][T12493] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.420559][   T37] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1
[  208.446856][T12493] ext4 filesystem being mounted at /572/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  208.462674][T12487] netlink: 'syz.0.2947': attribute type 39 has an invalid length.
[  208.482954][   T29] kauditd_printk_skb: 920 callbacks suppressed
[  208.482971][   T29] audit: type=1326 audit(1745529585.480:28466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12497 comm="syz.4.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d2ace969 code=0x7ffc0000
[  208.524849][   T29] audit: type=1326 audit(1745529585.480:28467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12497 comm="syz.4.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d2ace969 code=0x7ffc0000
[  208.549059][   T29] audit: type=1326 audit(1745529585.480:28468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12497 comm="syz.4.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa2d2ace969 code=0x7ffc0000
[  208.573701][   T29] audit: type=1326 audit(1745529585.480:28469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12497 comm="syz.4.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d2ace969 code=0x7ffc0000
[  208.597485][   T29] audit: type=1326 audit(1745529585.480:28470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12497 comm="syz.4.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d2ace969 code=0x7ffc0000
[  208.621411][   T29] audit: type=1326 audit(1745529585.480:28471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12497 comm="syz.4.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa2d2ace969 code=0x7ffc0000
[  208.645120][   T29] audit: type=1326 audit(1745529585.480:28472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12497 comm="syz.4.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d2ace969 code=0x7ffc0000
[  208.669441][   T29] audit: type=1326 audit(1745529585.480:28473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12497 comm="syz.4.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2d2ace969 code=0x7ffc0000
[  208.693134][   T29] audit: type=1326 audit(1745529585.480:28474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12497 comm="syz.4.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d2ace969 code=0x7ffc0000
[  208.716920][   T29] audit: type=1326 audit(1745529585.480:28475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12497 comm="syz.4.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2d2ace969 code=0x7ffc0000
[  208.740977][T12496] netlink: 'syz.0.2947': attribute type 3 has an invalid length.
[  208.796989][T12504] loop4: detected capacity change from 0 to 8192
[  208.810597][T12501] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  208.956406][T12516] IPv6: Can't replace route, no match found
[  209.040830][T12522] loop4: detected capacity change from 0 to 512
[  209.049141][T12522] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2956: invalid indirect mapped block 256 (level 2)
[  209.064349][T12522] EXT4-fs (loop4): 2 truncates cleaned up
[  209.071137][T12522] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  209.088412][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.089452][T12522] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.4.2956: path /551/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0
[  209.136153][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.163860][T12529] __nla_validate_parse: 5 callbacks suppressed
[  209.163879][T12529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2958'.
[  209.176849][T12532] IPv6: sit1: Disabled Multicast RS
[  209.182052][T12529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2958'.
[  209.191004][T12532] sit1: entered allmulticast mode
[  209.208749][T12529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2958'.
[  209.217828][T12529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2958'.
[  209.240178][T12529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2958'.
[  209.250855][T12529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2958'.
[  209.278962][T12538] pim6reg: entered allmulticast mode
[  209.516736][T12543] netlink: 'syz.4.2963': attribute type 1 has an invalid length.
[  209.577444][T12544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2963'.
[  209.700335][T12546] tap0: tun_chr_ioctl cmd 1074025680
[  209.720968][T12551] IPv6: sit1: Disabled Multicast RS
[  209.727032][T12551] sit1: entered allmulticast mode
[  209.844516][T12557] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2968'.
[  209.918512][T12567] IPv6: sit1: Disabled Multicast RS
[  209.924388][T12567] sit1: entered allmulticast mode
[  210.030988][T12565] netlink: 'syz.6.2971': attribute type 39 has an invalid length.
[  210.039635][T12565] netlink: 'syz.6.2971': attribute type 3 has an invalid length.
[  210.052331][T12569] loop7: detected capacity change from 0 to 2048
[  210.100408][T12569] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  210.161624][T12578] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2974'.
[  210.241362][T12569] ==================================================================
[  210.249489][T12569] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark
[  210.257456][T12569] 
[  210.259815][T12569] write to 0xffff888104ed0714 of 4 bytes by task 12580 on cpu 0:
[  210.267984][T12569]  xas_set_mark+0x13d/0x150
[  210.272594][T12569]  __folio_start_writeback+0x1ea/0x440
[  210.278082][T12569]  ext4_bio_write_folio+0x591/0x9d0
[  210.283337][T12569]  mpage_process_page_bufs+0x488/0x5d0
[  210.288830][T12569]  mpage_prepare_extent_to_map+0x791/0xb80
[  210.294662][T12569]  ext4_do_writepages+0xa3b/0x21d0
[  210.299829][T12569]  ext4_writepages+0x183/0x320
[  210.304696][T12569]  do_writepages+0x1d8/0x480
[  210.309312][T12569]  file_write_and_wait_range+0x16e/0x2f0
[  210.314984][T12569]  generic_buffers_fsync_noflush+0x46/0x120
[  210.320932][T12569]  ext4_sync_file+0x1c3/0x6c0
[  210.325624][T12569]  vfs_fsync_range+0x116/0x130
[  210.330487][T12569]  ext4_buffered_write_iter+0x358/0x3c0
[  210.336137][T12569]  ext4_file_write_iter+0x3b2/0xf80
[  210.341340][T12569]  iter_file_splice_write+0x5f2/0x980
[  210.346749][T12569]  direct_splice_actor+0x160/0x2c0
[  210.351901][T12569]  splice_direct_to_actor+0x305/0x680
[  210.357308][T12569]  do_splice_direct+0xd9/0x150
[  210.362086][T12569]  do_sendfile+0x40a/0x690
[  210.366505][T12569]  __x64_sys_sendfile64+0x113/0x160
[  210.371727][T12569]  x64_sys_call+0xfc3/0x2e10
[  210.376372][T12569]  do_syscall_64+0xc9/0x1a0
[  210.380967][T12569]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.386891][T12569] 
[  210.389248][T12569] read to 0xffff888104ed0714 of 4 bytes by task 12569 on cpu 1:
[  210.397087][T12569]  __writeback_single_inode+0x210/0x850
[  210.402653][T12569]  writeback_single_inode+0x16c/0x3f0
[  210.408075][T12569]  sync_inode_metadata+0x60/0x90
[  210.413081][T12569]  generic_buffers_fsync_noflush+0xd8/0x120
[  210.418999][T12569]  ext4_sync_file+0x1c3/0x6c0
[  210.423691][T12569]  vfs_fsync_range+0x116/0x130
[  210.428462][T12569]  ext4_buffered_write_iter+0x358/0x3c0
[  210.434017][T12569]  ext4_file_write_iter+0x3b2/0xf80
[  210.439230][T12569]  iter_file_splice_write+0x5f2/0x980
[  210.444772][T12569]  direct_splice_actor+0x160/0x2c0
[  210.450361][T12569]  splice_direct_to_actor+0x305/0x680
[  210.456069][T12569]  do_splice_direct+0xd9/0x150
[  210.460866][T12569]  do_sendfile+0x40a/0x690
[  210.465300][T12569]  __x64_sys_sendfile64+0x113/0x160
[  210.470871][T12569]  x64_sys_call+0xfc3/0x2e10
[  210.475491][T12569]  do_syscall_64+0xc9/0x1a0
[  210.480214][T12569]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.486225][T12569] 
[  210.488560][T12569] value changed: 0x0a000021 -> 0x04000021
[  210.494283][T12569] 
[  210.496606][T12569] Reported by Kernel Concurrency Sanitizer on:
[  210.502764][T12569] CPU: 1 UID: 0 PID: 12569 Comm: syz.7.2973 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(voluntary) 
[  210.515336][T12569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  210.525418][T12569] ==================================================================
[  210.877637][T12043] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.757857][ T3378] page_pool_release_retry() stalled pool shutdown: id 156, 1 inflight 60 sec