last executing test programs:

6m27.694189561s ago: executing program 0 (id=241):
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', <r0=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@delqdisc={0xc4, 0x25, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0x4, 0x2}, {0x9, 0x6}, {0xfff7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x7ff, 0x4}}}, @TCA_RATE={0x6, 0x5, {0xef, 0xaa}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @qdisc_kind_options=@q_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x3}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x1}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xe2}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x6}]}}, @TCA_RATE={0x6, 0x5, {0xc, 0x6}}, @TCA_STAB={0x4}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0xba, 0x4f2, 0x7982, 0x0, 0x2, 0xfff, 0x4}}, {0xc, 0x2, [0x5, 0x748c, 0xa95e, 0x6]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6401}]}, 0xc4}, 0x1, 0x0, 0x0, 0x44800}, 0x8800)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="000000000000000044001280000100626f6e6400000000340002800500010004000000050016000000000008001c889636709684dd490f628254bd6e60d18804b29882bb00"], 0xc3}, 0x1, 0x100000000000000}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x150, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x7, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x104, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xec, 0x1, [@m_simple={0xb0, 0x1e, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '-\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x2, 0x20000000, 0x8, 0x13b}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x1, 0x6, 0x2, 0xd}}]}, {0x31, 0x6, "b83be43ce3f0453fdb55a3fbb55ce131cff5300b92efaf853271bbac333e650817fc6029bf8265bde8d86f1542"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x150}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r2, 0x0, 0x4804}, 0x18)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="dfbf00000000000000006700000008000300", @ANYRES32=r3, @ANYBLOB="0800c300741300000800c4"], 0x30}, 0x1, 0x0, 0x0, 0x240408c3}, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x18)
r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
write$selinux_attr(r7, 0x0, 0x49)
r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x2040e, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_bp={0x0, 0x8}, 0x11aa0, 0x30, 0x10000, 0x0, 0x18bb, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000000)='cpu>00||!')

6m27.593943441s ago: executing program 0 (id=245):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_dev$tty1(0xc, 0x4, 0x4)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
r2 = getpid()
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x3)
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@loopback={0xa4}, 0x800, 0x0, 0xff, 0x1, 0x3}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000140)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0xff, 0x3, 0x0, 0x66c3}, 0x20)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="7472616e733d66642c0100646e6f3d", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',\x00'])
r7 = syz_pidfd_open(r2, 0x0)
pidfd_getfd(r7, r7, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
write$sndseq(r5, &(0x7f00000002c0)=[{0xb, 0xa5, 0x4, 0x40, @tick=0x3, {0x0, 0x6}, {0x22}, @control={0x9, 0x814e, 0x8}}, {0x44, 0x9, 0xf9, 0x8, @time={0x3, 0x5c5}, {0x1c, 0x40}, {0x3, 0xb}, @quote={{0xc8, 0x1}, 0x6, &(0x7f0000000040)={0xf8, 0x4, 0x3, 0x6, @time={0x87f, 0x4}, {0x0, 0x6}, {0x6, 0x5}, @control={0x4, 0x0, 0x1}}}}], 0x38)
r8 = getpid()
sched_setscheduler(r8, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)

6m26.985523811s ago: executing program 0 (id=256):
r0 = socket$inet6(0xa, 0x3, 0x3c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
unshare(0x8000000)
semtimedop(0x0, &(0x7f00000002c0)=[{0x3, 0x8, 0x1800}], 0x1, 0x0)
unshare(0x2c040000)
r2 = socket(0x10, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x1b9, @remote, 0x9}, 0x1c)
sendmmsg$inet(r0, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)="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", 0x2d7}, {&(0x7f0000001200)="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", 0x22b}, {&(0x7f0000000140)="5be081cd2e5383c893e2c864f68d8573838b7c45b1b91b502672fbed5f011c8997b7ab38d99b9455046f57b5fc090014b5e2bb01000000000000001a7838d85997aa2fa46ff7203067c30aa7352abbdf98e9bf033a3184a11e84639d3b91f8cb16eeb4eff27492712fcf94d28549f37bd93c88ead64493602291b385aa18601c787fc7", 0x83}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
brk(0x20ffc004)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r7}, 0x10)
iopl(0x3)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a300000000008000340"], 0x64}}, 0x0)

6m26.912084438s ago: executing program 0 (id=259):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = syz_io_uring_setup(0x4e0, 0x0, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_MKDIRAT={0x25, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0xf9b7a26b18f77d51})
io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2125099, 0x0) (async)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2125099, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89901) (async)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', r4, &(0x7f0000000180)='./file0\x00', 0x100) (async)
move_mount(r4, &(0x7f0000000140)='.\x00', r4, &(0x7f0000000180)='./file0\x00', 0x100)
syz_emit_ethernet(0xe, &(0x7f00000029c0)=ANY=[@ANYBLOB="a000000000000000000088f7"], 0x0)
fcntl$dupfd(r3, 0x0, r3) (async)
r5 = fcntl$dupfd(r3, 0x0, r3)
ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000000)=0xffff)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r7, 0x0, 0x200000000000006}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r7, 0x0, 0x200000000000006}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000a2eaf129ebe0e0e259d6ae11d7abb0a10000000000090300"], 0x0, 0x4a}, 0x20)
utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x4, <r8=>0x0}, 0x8)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000c00000000000000090000002589c08cf9dfdfa7853d9e00030000009500000000000000"], &(0x7f0000000740)='syzkaller\x00', 0x1, 0x4d, &(0x7f0000000780)=""/77, 0x41100, 0x8, '\x00', 0x0, @fallback=0x31, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x0, 0x8, 0xfffff000, 0x388a}, 0x10, 0xffffffffffffffff, r5, 0x3, &(0x7f0000000840)=[r6, r0], &(0x7f00000008c0)=[{0x3, 0x3, 0xb, 0xa}, {0x1, 0x1, 0xe, 0x2}, {0x1, 0x1, 0x10}], 0x10, 0x74}, 0x94)
r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a00)={0xffffffffffffffff, 0x9, 0x10}, 0xc)
r11 = syz_open_dev$mouse(&(0x7f0000000a40), 0x26, 0x200)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x19, 0x18, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000800000000000000d1f900001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f85affffb702000008000000b7030000b200000085000000060010008d1afefff0ffffff850000008a00000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000086000000186900000100000000000000ffffff7f9500000000000000"], &(0x7f0000000040)='GPL\x00', 0xf, 0xa1, &(0x7f0000000400)=""/161, 0x41100, 0x32, '\x00', 0x0, @cgroup_sockopt=0x16, r5, 0x8, &(0x7f0000000080)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0xf, 0x4, 0x6}, 0x10, r8, r9, 0x8, &(0x7f0000000b00)=[r10, r5, r11, r5, 0xffffffffffffffff, r0], &(0x7f0000000b40)=[{0x1, 0x1, 0xe, 0x5}, {0x5, 0x3, 0x0, 0x1c769a9b403bb90b}, {0x2, 0x4, 0x6, 0x2}, {0x3, 0x5, 0x7, 0x6}, {0x0, 0x5, 0x7, 0x6}, {0x5, 0x4, 0x5, 0x5}, {0x2, 0x1, 0x0, 0xb}, {0x5, 0x4, 0x7, 0x5}], 0x10, 0x9}, 0x94)
r12 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2, @in, 0x4e21, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x0, 0x33}, {0xffff, 0x4, 0x0, 0x0, 0x80000001, 0x6, 0x1000000, 0x80000000}, {0x800, 0x0, 0x6, 0xffffffffffffffff}, 0x9, 0x200000, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe, 0x2b}, 0x0, @in=@multicast1, 0x0, 0x3}}, 0xe8)
socket$key(0xf, 0x3, 0x2) (async)
socket$key(0xf, 0x3, 0x2)
socket$inet6(0xa, 0x2, 0x0) (async)
socket$inet6(0xa, 0x2, 0x0)

6m26.757083544s ago: executing program 0 (id=262):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='ext4_da_update_reserve_space\x00', r0, 0x0, 0x1}, 0x18)
r1 = memfd_secret(0x80000)
fcntl$setlease(r1, 0x400, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000003c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
listen(r2, 0x984)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0xc020)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, 0x0, 0x0, 0x10000000000000)
openat$cgroup_int(r1, &(0x7f0000000140)='blkio.throttle.write_bps_device\x00', 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x18)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

6m26.568102503s ago: executing program 0 (id=269):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0)
dup3(0xffffffffffffffff, r0, 0x80000)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r1}, 0x18)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setresuid(0xee00, 0xee00, 0x0)
r2 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x408252}, &(0x7f0000000640)=<r3=>0x0, &(0x7f0000000340)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000070000000000000000000000850000004100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
syz_io_uring_submit(r3, r4, &(0x7f0000000500)=@IORING_OP_MKDIRAT={0x25, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0xf9b7a26b18f77d51})
io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]})
setregid(0xee01, 0x0)

6m26.539851576s ago: executing program 32 (id=269):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0)
dup3(0xffffffffffffffff, r0, 0x80000)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r1}, 0x18)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setresuid(0xee00, 0xee00, 0x0)
r2 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x408252}, &(0x7f0000000640)=<r3=>0x0, &(0x7f0000000340)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000070000000000000000000000850000004100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
syz_io_uring_submit(r3, r4, &(0x7f0000000500)=@IORING_OP_MKDIRAT={0x25, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0xf9b7a26b18f77d51})
io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]})
setregid(0xee01, 0x0)

4m29.366938416s ago: executing program 4 (id=2977):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x35, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff0d}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]})
nanosleep(0x0, 0x0)

4m29.366691036s ago: executing program 4 (id=2978):
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='inode_foreign_history\x00', r0}, 0x18)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00\x00'], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r2, 0x0, 0x4}, 0x18)
syz_open_dev$usbfs(0x0, 0xf, 0xc340)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = open(0x0, 0x145142, 0x0)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}, 0x140)
nanosleep(0x0, 0x0)
r4 = inotify_init1(0x0)
inotify_add_watch(r4, &(0x7f00000000c0)='.\x00', 0xa4000061)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000c40)=@o_path={&(0x7f0000000c00)='./file1\x00', 0x0, 0x0, r5}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x14, 0xd, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, [@jmp={0x5, 0x1, 0x0, 0x8, 0x6, 0x18, 0xfffffffffffffffc}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000580)='GPL\x00', 0x3, 0x52, &(0x7f0000000700)=""/82, 0x40f00, 0xc, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r6, 0x8, &(0x7f0000000c80)=[0xffffffffffffffff, r1, r1], &(0x7f0000000cc0)=[{0x1, 0x2, 0x0, 0xf}, {0x4, 0x5, 0x10, 0xc}, {0x3, 0x4, 0x7, 0x2}, {0x4, 0x3, 0x8, 0x7}, {0x4, 0x1, 0x7, 0x2}, {0x4, 0x2, 0xf, 0xa}, {0x3, 0x5, 0x10, 0x7}, {0x4, 0x3, 0x0, 0x7}], 0x10, 0x4}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="050000000400f3fffe0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x2f}, 0x20)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r7, @ANYRES32, @ANYBLOB="84c200004800000004000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0)
read(r4, &(0x7f0000002040)=""/76, 0x4c)

4m29.271152225s ago: executing program 4 (id=2982):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18)
timer_getoverrun(0x0)

4m29.211902971s ago: executing program 4 (id=2984):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10)
r1 = gettid()
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f0000000a00)={[{@noblock_validity}, {@init_itable}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x48b, &(0x7f0000000f40)="$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")
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r9, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x20000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r10}, 0x10)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r11, 0x89f9, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@private0, @private=0xa010100, 0x19, 0x18}})
r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={<r13=>0xffffffffffffffff}, 0x106, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r13, 0x1}}, 0x18)
syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0)

4m28.978458534s ago: executing program 4 (id=2988):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000004800000095"], &(0x7f0000000280)='syzkaller\x00', 0xe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e000000000f000004000000ff"], 0x48)
sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000f80)={0x710, 0x0, 0x5, 0x5, 0x0, 0x0, {0x3}, [{{0x254, 0x1, {{0x0, 0xec2}, 0x4, 0x73, 0x2, 0xff, 0x6, 'syz0\x00', "71c0876e407249518dd08b38b631cf449c374ba3bd08d3b2518de73a5b412730", "37d63ca4932a0b6eff08b5c941b2eb165617d9852f71702e73f2c4fa9a255c02", [{0xfffd, 0x0, {0x3, 0x8}}, {0x4, 0x7, {0x3, 0x101}}, {0x4278, 0x4000, {0x2, 0xf}}, {0xf3c9, 0xd, {0x3, 0x90}}, {0x87be, 0x0, {0x0, 0x3ff}}, {0x0, 0x8261, {0x1, 0x9}}, {0x4, 0x0, {0x1, 0x52e}}, {0x0, 0xe, {0x1, 0x7}}, {0x6, 0xd89}, {0xfffe, 0x8, {0x0, 0x8}}, {0x1, 0x2, {0x1, 0x40}}, {0x5, 0xc, {0x3, 0x7000000}}, {0x8, 0x6, {0x2, 0x8}}, {0x3, 0x7fff, {0x3}}, {0x7ff, 0xd4b4, {0x1, 0x6}}, {0x8, 0x101, {0x2, 0x3b3e6fc5}}, {0x7, 0x1, {0x1, 0x4d}}, {0x8001, 0x8000, {0x0, 0xffffffff}}, {0x8, 0x7ff, {0x0, 0x9}}, {0x9, 0x4, {0x2, 0x2}}, {0x9, 0xc12, {0x0, 0x2}}, {0x5, 0x3, {0x3, 0x8}}, {0x400, 0x8, {0x2, 0x3}}, {0x7fff, 0x101, {0x1, 0x1}}, {0x400, 0x8000, {0x2, 0x8}}, {0x8, 0xe98a, {0x2, 0x7}}, {0x54, 0x200, {0x3, 0x78}}, {0x0, 0x0, {0x0, 0x2}}, {0x8, 0x9, {0x2, 0xe18}}, {0x7, 0x3, {0x0, 0x4c}}, {0xfff8, 0x20b9, {0x3, 0x40}}, {0xa3, 0x3, {0x3, 0x8}}, {0x10, 0x0, {0x1, 0x2}}, {0x4, 0x6, {0x0, 0x1}}, {0x0, 0x1ff, {0x0, 0xfffffff9}}, {0x200, 0x9, {0x1, 0xd}}, {0x4, 0xf, {0x2, 0x9}}, {0xfffa, 0x0, {0x1, 0x6}}, {0x0, 0x1, {0x3, 0xb}}, {0x2, 0xd, {0x3, 0x4}}]}}}, {{0x254, 0x1, {{0x3, 0x4}, 0x2, 0x6, 0x51c5, 0x8, 0x26, 'syz0\x00', "3942ada4b3507bea36aae305a2667307f610440ddacadff6c78340fe2e589b8d", "3ad73db0ea8c4d3efdf7783717c30524108d7ffc2e6cd9d2cbb6fe602f6f6e0a", [{0x87d2, 0x2, {0x0, 0x3}}, {0x1, 0x6, {0x0, 0x9}}, {0x0, 0x3, {0x0, 0x5}}, {0x636, 0xffff, {0x2, 0x18}}, {0x6c, 0xf0, {0x1, 0x571c}}, {0x2, 0xfffc, {0x2, 0xf83}}, {0x9, 0x7, {0x0, 0x9c}}, {0xd4ab, 0x8, {0x3, 0x1}}, {0x7fff, 0x2}, {0x7, 0x1, {0x3, 0x3}}, {0x2, 0x6, {0x3}}, {0x3, 0x7ff, {0x2, 0xfffffff5}}, {0x9, 0xfff7, {0x2, 0xfffffff5}}, {0x7, 0x7, {0x0, 0x80000001}}, {0x8, 0x1, {0x1, 0x80000001}}, {0x40, 0x4, {0x0, 0xba09}}, {0x539c, 0x81, {0x3, 0x3}}, {0x8, 0x1, {0x3, 0x8}}, {0xfd, 0x3, {0x0, 0xd1cb}}, {0x6, 0x1, {0x3, 0x800}}, {0xc, 0x10, {0x2, 0x7}}, {0x4, 0x2a67, {0x0, 0x3}}, {0x2a, 0x4, {0x1, 0x401}}, {0xffc0, 0x8, {0x1, 0x7f}}, {0x927b, 0x1, {0x2, 0x6}}, {0x1, 0xb8, {0x2, 0x8000}}, {0xff, 0x3, {0x2, 0x6}}, {0x3, 0x9, {0x0, 0x10d2}}, {0x8, 0x5, {0x1, 0x1}}, {0x4b6, 0xf, {0x3, 0x5}}, {0x9800, 0x9, {0x1, 0x8}}, {0x8, 0xf, {0x2, 0x9}}, {0x3, 0x1, {0x2, 0x50cc}}, {0x2, 0x100, {0x1, 0x7ff}}, {0x8000, 0x7, {0x1, 0xc}}, {0x4adc, 0x9, {0x1, 0x5}}, {0xfffb, 0x4, {0x2, 0x8}}, {0x9, 0x7, {0x2}}, {0x3, 0x0, {0x0, 0x7}}, {0x3, 0x20f1, {0x3, 0x5}}]}}}, {{0x254, 0x1, {{0x3, 0x5}, 0x7f, 0xcb, 0x1, 0x9, 0x17, 'syz0\x00', "2d4161d149fb49e55f813baa77aeefcf77bc2dc96944a7ff1a56b316d1439cbc", "5d0ea5bd35d6f48d47fe8edcf37af30363f510bce2114217fd8b5274fd1d14ed", [{0x6, 0xfcf, {0x0, 0x3ff}}, {0x5, 0x7f, {0x0, 0x9a50}}, {0x8, 0x7fff, {0x0, 0x8001}}, {0xb668, 0xffff, {0x1, 0x7}}, {0x4, 0xd4a6, {0x1, 0x80000000}}, {0x8, 0x9, {0x2, 0x694486d8}}, {0x2, 0x8, {0x0, 0xa2b9}}, {0x30, 0xf7, {0x0, 0x7}}, {0x5, 0x8d4, {0x0, 0x10001}}, {0x7, 0x5, {0x3, 0x7}}, {0x0, 0x3, {0x1, 0xfffffff2}}, {0xffff, 0x0, {0x0, 0x8000}}, {0x9, 0x7ff, {0x1, 0x4}}, {0x101, 0x6, {0x1}}, {0x2, 0x200, {0x0, 0x2}}, {0xd, 0xc379, {0x3, 0x3}}, {0x3, 0x1, {0x3, 0x2}}, {0x6bf, 0x7, {0x7}}, {0x6, 0x4, {0x1, 0xd}}, {0x8, 0x101, {0x2, 0x101}}, {0x4, 0x8948, {0x3, 0x1}}, {0x9, 0x3, {0x3, 0xffff}}, {0x4, 0x3, {0x1, 0x9}}, {0x0, 0x80, {0x0, 0xff}}, {0x6, 0x1, {0x1}}, {0x80, 0x3, {0x2, 0x73b2}}, {0x1, 0x8, {0x2, 0xd05}}, {0xd1, 0xe, {0x0, 0xaa1}}, {0x7, 0x9, {0x3, 0x2}}, {0x300, 0x2, {0x1, 0x8000}}, {0xfff7, 0x4, {0x3, 0x10}}, {0x4, 0x0, {0x1, 0xf}}, {0xfffc, 0x4, {0x3, 0x9}}, {0xe, 0x9, {0x1, 0x3}}, {0xe3, 0x0, {0x1}}, {0x3ff, 0xd, {0x1, 0x8}}, {0x4, 0x4, {0x0, 0x3}}, {0x0, 0x3, {0x3, 0x18d}}, {0x1f, 0xd3f, {0x0, 0x1000}}, {0x4, 0x7, {0x0, 0x205}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x44004}, 0x20040001)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000daa9e11e8d84d2cfd8a48f400c1af4d422aed979c6d5929d25a6dce15aeec0173a7a576e759b3e7cbaedf8a35416002a55c71347590359e7178907e7b65800a9f8", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000043c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x2000000000000}, 0xfffffffffffffef4)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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")
sendmsg$key(r0, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000300)=0x3, 0x2)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r5}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
sendfile(r3, r3, 0x0, 0x3fffff)
ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000080))

4m28.72780819s ago: executing program 4 (id=2996):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000bbdffc)=<r5=>0x0)
timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000080)={<r6=>0xffffffffffffffff})
vmsplice(r6, &(0x7f0000001280)=[{&(0x7f0000001180)="83", 0x1}], 0x1, 0x1000000000000000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(0xffffffffffffffff, 0x1e61, 0x1d64, 0x1, 0x0, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000080)}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000740)='kfree\x00', r8, 0x0, 0x40008003}, 0x18)
write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', r0, 0x4000, r0}, 0x18)

4m28.709500821s ago: executing program 33 (id=2996):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000bbdffc)=<r5=>0x0)
timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000080)={<r6=>0xffffffffffffffff})
vmsplice(r6, &(0x7f0000001280)=[{&(0x7f0000001180)="83", 0x1}], 0x1, 0x1000000000000000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(0xffffffffffffffff, 0x1e61, 0x1d64, 0x1, 0x0, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000080)}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000740)='kfree\x00', r8, 0x0, 0x40008003}, 0x18)
write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', r0, 0x4000, r0}, 0x18)

3m58.686289427s ago: executing program 5 (id=3465):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="9b5800"/20, @ANYRES32, @ANYRES32, @ANYBLOB="000000000000000000a88602de00"/25], 0x50)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r2=>0x0})
socket(0x27, 0x80805, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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")
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000013c0)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xd}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0xcd}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0xcb}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x64d678a8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

3m58.239555231s ago: executing program 5 (id=3473):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x14, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000018000000000000000010000851000000000000000020000000000000000000100da"], 0x0, 0x52}, 0x20)

3m58.1488433s ago: executing program 5 (id=3476):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000009385000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, 0x0)
getpid()
r2 = socket$kcm(0x29, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000180)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@noblock_validity}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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")
r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0xffffffffffffffff, &(0x7f0000000080)=0x20)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000f00)={'veth1_macvtap\x00', &(0x7f0000000e80)=@ethtool_perm_addr={0x4b, 0x25}})
write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0x8eef0a3e)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0xc0a85320, &(0x7f0000000880)={{0x80}, 'port0\x00', 0x3c, 0x151625, 0x2, 0x2, 0x20107, 0x6, 0x8, 0x0, 0x4, 0x3})
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94)
fsopen(0x0, 0x0)

3m57.506601504s ago: executing program 5 (id=3492):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x7)
capget(&(0x7f0000000180)={0x19980330, r4}, &(0x7f00000001c0)={0x3, 0x8, 0x0, 0x3, 0x7, 0x9})
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000580)={0x1}, 0x8)
sendto$inet6(r3, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x3000005, 0x0)

3m57.400974105s ago: executing program 5 (id=3496):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
socket$unix(0x1, 0x5, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r0, @ANYRES32=r2], 0x44}}, 0x0)

3m57.140519261s ago: executing program 5 (id=3508):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000559318110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044)
sendto$inet(r0, 0x0, 0x0, 0x12000000, 0x0, 0x0)

3m57.087817336s ago: executing program 34 (id=3508):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000559318110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044)
sendto$inet(r0, 0x0, 0x0, 0x12000000, 0x0, 0x0)

3m9.597079884s ago: executing program 2 (id=4448):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x18}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000"], 0x50)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x20, &(0x7f0000000500)={&(0x7f0000000600)=""/238, 0xee, <r1=>0x0, &(0x7f00000004c0)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x9, &(0x7f0000000580)=@framed={{}, [@alu={0x4, 0x0, 0xf, 0x9, 0x4, 0x6, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0xa, 0x4, 0x9, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
setgid(0x0)

3m9.596487034s ago: executing program 2 (id=4449):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000001000010407000000ffff070000000000", @ANYRES32=0x0, @ANYBLOB="00100000421004002800128008000100767469001c000280080004000a0101010800030002000000080002009db900001400030069705f76746930000000000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x8c5}, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7fff}, 0x18)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180))

3m9.390039895s ago: executing program 2 (id=4457):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000200000004f1000000000000063000000000000009500059e00020000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3a)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x16, 0xb4, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x61, 0x0, 0x0, 0x64}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x5}, 0x80)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}, 0x1b0c, 0x0, 0x0, 0x0, 0x7ff, 0x4}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@init_itable}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$eJzs3d9rHNUeAPDvbJLmR3tvcuFy7+1b4EJvoHRzU2Or4EPFBxEsFPTZNmy2oWaTLdlNaULAFhF8EVR8EPSlz/6ob776A3zS/8IHaamaFis+SGR2Z5M02c2vJtloPh+YzDkzsznnO+fMzNmdYTeAQ2sw/ZOLOB4RbycR/dnyJCK6aqnOiHP17R4uLvRERCGJpaWXfkpq2zxYXCjEqtekjmaZ/0TEV29EnMytL7cyNz85VioVZ7L8cHXq6nBlbv7UlamxieJEcfrMyOjo6bNPnj2ze7H+8t38sbvvPP+/T8/99vq/b7/1dRLn4li2bnUcu2UwBrN90pXuwkc8t9uFtVnS7gqwI+mh2VE/yuN49EdHLdVC737WDADYK69FxBIAcMgkrv8AcMg0Pgd4sLhQaEzt/URif917NiJ66vE/zKb6ms7snl1P7T5o34PkkTsjSUQM7EL5gxHx4eevnOjI8mk93EsD9sONmxFxaWBw/fk/WffMwnb9f6OVS9212eCaxYft+gPt9EU6/nmq2fgvtzz+iSbjn+76sfuvxy1/8+M/d+dxy9hIOv57pv5s25rx3/JDawMdWe5vtTFfV3L5SqmYntv+HhFD0dWd5kdqmzYfuQ3d//1+q/Kz8d/H6fTzu69+lJafzle2yN3p7H70NeNj1c5vHjfwzL2b0Zcl18SfLLd/0mL8e2GLZbzw9JsftFqXxp/G25jWx7+3lm5FnGja/ittmWz4fOJwrTsMNzpFE599/35fq/JXt386peWn892PtLl7N6PWAZJkZR/U1yzHP5Csfl6zsv0yvr3V/2WrdZvH37T/jx1JXq6lj2TLro9VqzMjEUeSF9cvP73y2ka+sX0a/9B/mx//9WKb9//0PeGlLcbfeffHT3Ye/95K4x/fuP+vaf+ebPHKks0Stx9OdrQqf2vtP1pLDWVL0vbfLK6t1GtnvRkAAAAAAAAAAAAAAAAAAAAAAAAAti8XEcciyeWX07lcPl//De9/Rl+uVK5UT14uz06PR+23sgeiK9f4qsv+Vd+HOpJ9H34jf3pN/omI+EdEvNfdW8vnC+XSeLuDBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDM0Ra//5/6obvdtQMA9kxPuysAAOw7138AOHy2d/3v3bN6AAD7x/t/ADh8tnz9v7S39QAA9o/3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOyxC+fPp9PSr4sLhTQ/fm1udrJ87dR4sTKZn5ot5Avlmav5iXJ5olTMF8pTLf/RjfqsVC5fHY3p2evD1WKlOlyZm784VZ6drl68MjU2UbxY7Nq3yAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg6ypz85NjpVJx5i+RuLES2C7/5962xtV3MHbvqkRnHIhqHOhEdxyIauwwsfos0duGMxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAn8MfAQAA//94WBdi")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58)
copy_file_range(r2, 0x0, r2, &(0x7f00000000c0)=0xf000, 0x863, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r5}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000080000009500000000000e00"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r3, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94)
r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001300), 0x10000, 0x0)
pidfd_send_signal(r6, 0x28, &(0x7f0000001340)={0xf, 0x80000001, 0x6}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x300, 0x56, 0x0, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90040000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c96", 0x0, 0x2f00, 0x0, 0xe3, 0x0, &(0x7f0000000980)="ffc4438e5c3081d0e133e812196ec0ed923733aa8b5aba32c8650e7a66d6136853773dfbc6226be13039e230d511f1ac50cc7811aac0400e4c833fedf842ae2918e6fddb550729246fcf4c0a01bc64989ea3985fb362751a83991bd56e761379caa64f6148893ff25f38d5cd6dd695bbf9ca709a9960e0e6b054d5e2239bcb7c0fb2ac66dc4c8f534e439ff20ccaf0d48a98c19c92a3b437a699350f49606d21a403f8c112c46fea5486bf367a854b0f6c1e563b656e4794f6793a08bb3656c391643f6df71d0255054368a938d38503d064da82d5dbf395ad47ed3932669168d324ed", &(0x7f00000007c0), 0x2, 0x0, 0x10000}, 0x50)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x1, 0x9, @private=0xa010101, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)

3m9.064017938s ago: executing program 2 (id=4459):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@oldalloc}, {@block_validity}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {}, {@i_version}, {@nomblk_io_submit}, {@nodioread_nolock}]}, 0x6, 0x434, &(0x7f0000000940)="$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")
r0 = open(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x52700, 0x220fe89706ce99c0)
syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4008, &(0x7f0000000600)={[{@nobarrier}]}, 0xfe, 0x269, &(0x7f0000000200)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002)
sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) (async)
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0xfffffffd, 0x200, 0x20, 0xffffffffffffffff, 0x200, '\x00', 0x0, r0, 0x0, 0x0, 0x3}, 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0xfffffffd, 0x200, 0x20, 0xffffffffffffffff, 0x200, '\x00', 0x0, r0, 0x0, 0x0, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYRES64=r1, @ANYRES32=r0, @ANYBLOB="000000458ffdddf081e1b5000700e3166945ada447b50000bfa20000006737e1483caa94a8023101be7cca00000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYRES64=r1, @ANYRES32=r0, @ANYBLOB="000000458ffdddf081e1b5000700e3166945ada447b50000bfa20000006737e1483caa94a8023101be7cca00000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1acd060, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev_mcast\x00')
socketpair$unix(0x1, 0x1, 0x0, 0x0)
getgroups(0x0, 0x0)
truncate(&(0x7f0000000000)='./bus\x00', 0x9471)
finit_module(r0, 0x0, 0x0) (async)
finit_module(r0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6, 0x0, 0xd4d}, 0x18)
unshare(0x6a040000) (async)
unshare(0x6a040000)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0)

3m8.396096674s ago: executing program 2 (id=4465):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x85, 0x7, 0x8000}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000ffa26eca45db35b38e8bc7b7f755d6695930e41409366d6bdcf2958ee49f8c442b8647207bd772f0b93fbb7b7d3ca24717a58925e43f64faeabbb4aeb1c911436c8d5295051112e6e04f36594e3f1e563a243b6b4909e9b136b7782de4f8eb60e4b58063a788067a8cb9d1930a3848a50a1d16eb381019629461c7a7afaa3e00"/162, @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000ed5d0000850000001b000000b70000000000000095", @ANYRES16=r1], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
statx(0xffffffffffffffff, 0x0, 0x6000, 0x6, 0x0)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r3, r0}, 0xc)

3m8.007462153s ago: executing program 2 (id=4471):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@getqdisc={0x40, 0x26, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x4}, {0xc, 0xffe0}, {0x0, 0x3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x24044004}, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
removexattr(0x0, &(0x7f0000000000)=@known='system.posix_acl_default\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50)
faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5)
socket$inet_sctp(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0)

3m7.987509725s ago: executing program 35 (id=4471):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@getqdisc={0x40, 0x26, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x4}, {0xc, 0xffe0}, {0x0, 0x3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x24044004}, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
removexattr(0x0, &(0x7f0000000000)=@known='system.posix_acl_default\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50)
faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5)
socket$inet_sctp(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0)

2m50.275468612s ago: executing program 8 (id=4859):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYRES32=r0, @ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff004a0000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8ab8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone3(&(0x7f0000000080)={0x1801480, &(0x7f0000000040)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r3 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x3)
fcntl$setsig(r4, 0xa, 0x12)
poll(&(0x7f0000b2c000)=[{r5, 0x5063}], 0x1, 0xffffffffffbffff8)
dup2(r4, r5)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x10, 0x29, 0x1, 0x0, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x1}, 0x0)
fcntl$setown(r4, 0x8, r3)
tkill(r3, 0x13)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f00000002c0)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@usrjquota}, {@acl}, {@grpjquota}]}, 0xff, 0x23f, &(0x7f0000000540)="$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")
getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x50)
pidfd_getfd(r1, r1, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r8, 0x0, 0x3}, 0x18)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x2040000}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000030605000000000000000000000000060500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0)

2m50.129320267s ago: executing program 8 (id=4864):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
creat(0x0, 0x10)
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0xfd, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0)

2m49.952104525s ago: executing program 8 (id=4866):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50)
syz_usbip_server_init(0x2)
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x0, 0x27, 0x0, 0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, 0x0)
r1 = creat(0x0, 0x182)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000009f59d26ff9a700a300"/36], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000053c480d9", @ANYRESDEC=r1, @ANYRESOCT=0x0], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
lsm_get_self_attr(0x69, &(0x7f0000000480)={0x0, 0x0, 0xbc, 0x9c, ""/156}, &(0x7f0000000140)=0xbc, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0)
write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xfd44)
mount(&(0x7f00000001c0), &(0x7f0000000440)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,')
fsmount(r1, 0x0, 0x70)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r5=>0x0})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x2000007, '\x00', r5, r1, 0x0, 0x0, 0x4}, 0x50)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000100)='kfree\x00', r7}, 0x18)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)

2m49.314382688s ago: executing program 8 (id=4885):
syz_mount_image$ext4(&(0x7f0000010300)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x1204000, &(0x7f00000102c0), 0x3, 0x57c, &(0x7f0000010a00)="$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")
r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
accept4$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000000)=0x6e, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000001811000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
fsmount(r1, 0x0, 0x0)
ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000140)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, 0x0})

2m49.212049758s ago: executing program 8 (id=4887):
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f00000007c0)='./bus\x00', 0x21081e, &(0x7f0000000840)={[{@i_version}, {@nogrpid}, {@nobh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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")
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000640)='kmem_cache_free\x00', r2, 0x0, 0x89d1}, 0x18)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
set_mempolicy(0x8006, &(0x7f0000000040)=0x1003, 0x5)
r6 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r6, 0x0, 0x4, 0x0, 0x28)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000280)=0x8)
r7 = syz_clone(0xa5144411, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18)
syz_usb_disconnect(0xffffffffffffffff)
ioprio_set$pid(0x2, 0x0, 0x4007)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
connect$unix(r10, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r11, &(0x7f00000013c0)=[{{&(0x7f0000000880)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000900)="1199ec08eda55821f6ea741561d65532571307533601730043b7e5eed8e5b2dfaa4d757057d30a5bda49437fc1e7557ffca865f0b5120eba92b1485dd368aac94accb18c7f698e9b1b1b517be4c2ca98e34c007cb28fe616114b7e94853921524944aaea3e3e79f57774960581340eff9a2bb584e7e20ef362655bc2c0cee484c5279f54270a38369cc4809444b8424ab9bafd75dbebfd85a48b31fba03124932e96ebeee45dbb1b11129dfb4f067927e61495a8eb49da29ebe9c09a", 0xbc}, {&(0x7f00000009c0)="73f06637c4494a3f1ef7103b93e6acedd0d564bb10638a9b5653dc9b2296429b7eb5e3280678b0d029f646cced9125b587044ab16c7d3ffef94214f5e953d09dea816439378e0e438e883911f002a36e3bcca0ffadf5d1e6940fdf9f17792ee7d4bdbc6defda92da50694c91455aacc9f699b59ee5663b385f6e94d74e01f267cc23ec688d738773d616bcd65618adc1ab194411e3fba965ad5569877d190a51f3cfcb9530898bd540f9328d6fb1ed044d7d87aa", 0xb4}, {&(0x7f0000000a80)="62a0b45c0c9fd3561ea97f89122ed7a1c08fe423eb766e9198d157dd72d15337b6971cedefd72c108b7c59d780c33953db67a895e70d3c39c5b28964af231e94ea4fbf59daa3fafd59b4b58f2101bfa09a96923f98a4884207781877f2f7ef256d503bb162c4289c6dc5fc0e9cec913f94", 0x71}], 0x3, &(0x7f00000012c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r11, r0, r5]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r4, r9, r9, 0xffffffffffffffff, r10, 0xffffffffffffffff, r1, r3]}}, @cred={{0x1c, 0x1, 0x2, {r7}}}, @cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x18, 0x1, 0x1, [r2, r9]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r2, r3, r5, r2, r2, 0xffffffffffffffff]}}], 0x100}}], 0x1, 0x0)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, 0x0)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r12], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r13}, 0x10)
r14 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f0000000340)={0x0, "69dcaf20127e9a854528f45826cb35be51ca73845d177dd8dba7221daeccfda56b75cfe286fdd14cb5b11b1cab614fec2236da7d88ea0f0700", 0x3f}, 0x48, 0xfffffffffffffffe)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000380)={@desc={0x1, 0x0, @desc2}, 0x40, r14, '\x00', @a})

2m48.818153548s ago: executing program 8 (id=4895):
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0)

2m48.817932657s ago: executing program 36 (id=4895):
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0)

4.035506118s ago: executing program 1 (id=8336):
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000240)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nodioread_nolock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nouid32}, {@nobh}, {@noload}, {@nouid32}, {@grpquota}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$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")
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18, &(0x7f00000007c0)={[{@jqfmt_vfsold}, {@test_dummy_encryption_v1}, {@resuid}, {@noload}, {@nombcache}, {@test_dummy_encryption_v1}, {@nodelalloc}, {@jqfmt_vfsv0}], [{@fsmagic={'fsmagic', 0x3d, 0x3}}, {@uid_lt}, {@euid_lt}, {@subj_type={'subj_type', 0x3d, 'ext3\x00'}}, {@dont_appraise}, {@flag='nolazytime'}, {@permit_directio}, {@dont_appraise}]}, 0xfe, 0x47c, &(0x7f0000000a80)="$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")
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14c)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001, 0x0, 0x0, 0x753e}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001600606f00000000000000000a097400", @ANYRES32=0x0], 0x18}}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0x4}, 0x18)
r5 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r5)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=r0, @ANYRES64=r5], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000100000000000000000000f47bf79d00f641df6b9bc76f6499e09a5f8478b0887b33c9e9b1872d69ebfb558d9cb808254de1d33f65c9f0497d38d28dfb7f06d3a622a0c9a0aaec4779fd012fb104a1487c1201a292982ee0e9a62583cf951c3ee72a279f7fd22fedddb6cc0069abe3750ab6945634ab944b5540e0302a8b463f006ba2281d2ae73f56956acb7969033a9c3d8d8e8b527447930190b934b32afd90ce402c462047a39762e21fe7fdb6a0234c9b8c6049b87f0a354203ce93f7b6bc5b023e6931dd19fe", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881)
write$sndseq(r8, 0x0, 0x0)
poll(&(0x7f0000000000)=[{r8}], 0x1, 0x100)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x4058534c, &(0x7f0000001140)={0x80, 0x1})
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000400000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200008385000000710000001801000002696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mq_notify(0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
socket$inet6_sctp(0xa, 0x5, 0x84)

3.763141135s ago: executing program 6 (id=8339):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000ec0)={0x1, &(0x7f0000000080)=[{0x3, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={&(0x7f0000000300)=""/72, 0x48, <r1=>0x0, &(0x7f0000000780)=""/149, 0x95}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_read_part_table(0x60d, &(0x7f0000002200)="$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")
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11ffc)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x4, 0x80400, 0x200000002006, 0x7fc})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4)
mount$nfs(0x0, &(0x7f0000000200)='.\x00', &(0x7f0000000240), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000029252c7569649caeac8486b8d40bc70a5ed413ff07b7445156df21edde6a10007f1d9bf18d"])
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000206030000000000000000000d0000000c000300686173683a69700005000400000000400900020073797a310000000005000500020000000500010006000000"], 0x44}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94)
syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f0000000fc0)={[{@mode={'mode', 0x3d, 0x7}}, {@nocompress}, {@hide}, {@check_strict}, {@cruft}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@map_acorn}, {@dmode={'dmode', 0x3d, 0x4}}], [{@permit_directio}, {@flag='async'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'cruft'}}, {@hash}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x64, 0x36, 0x35, 0x65, 0x35, 0x64, 0x32], 0x2d, [0x39, 0x61, 0x5d, 0x9], 0x2d, [0x32, 0x38, 0x0, 0x38], 0x2d, [0x66, 0x66, 0x33, 0x34], 0x2d, [0x31, 0x38, 0xf5227b442797c8a1, 0x33, 0x31, 0x30, 0x38, 0x33]}}}, {@fowner_gt}]}, 0x1, 0x54e, &(0x7f0000001580)="$eJzs3V9v01YfwPGfS/sQ5ZGqRw+PEKpKOZRnUpFKcFIoirjynJP0gGNHtsPaK1TRdqpIx0SZtPaG9YZt0na9a3a5F7F3hPYSNtlO+ocmMaV/Qd9PBefEPj7nd0Lkn0zjYwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGK5NdsuW+IZv72oBnNrYdDce9k9+tAGuX2gGDKuiJX8kUJBrmWbrv1vb/fV5K9pmcxeTUohKQqy/e+r/3l4ZXSkd/yQgI/k94/saXNr+/lyp7P68qQCuYCuXx68r6F9EwWm6TS0MlGgqvPz9t2FeqTqxtPRUhTrpnJD7cRBqGbc26pcrc4pXVoK2n6j5ni6t/HBnYptz6tHpZZ2wijw7z4qRe6C8TzjN9I2ye6kzYPkg/jYxCrWTlOptfXO6lzeBJJG5Q9pVMlrVLErlXK5UinP36/ef2Dbo4c22O+RQy1O7kOLT9MJnr2B4xnp5n/xxIgvbVkU1ffHlZqEEkhzwP6uXv7/4q4eOu7+/N/L8tf2dk9Imv+nsldTg/L/gFjO7mdTtmRbnsuydKQjq/Ly3CM625+GaPHFSCSBGGmKk25R3S1KqjIv82LLU1mQukSipC5GPNESyZJEEotOP1GuhKLFkVgCCUXJjLhyW5SUpSpVmRMlWkqyJIG0xZeG1MRJe1mT9fR9nxNlDYpxt1F54DSKvc/dqlSGzJb8j+M70fM3cBx/9/I/AAAAAAD4bFnp/74n1/9jcj2t1Y2n7fMOCwAAAAAAnKD0N/+TSTGW1K6LxfU/AAAAAACfGyu9x84SkaLcyGprYknnq6nzjgwAAAAAAJyU9Pf/U0mRroFyQ6zd5VL4EgAAAAAAAJ+Jn3LX2I9al60//5IwHLN2Wov/tzbStXmdjUvZcZfe7zGuT1jj3U7SYj4rRkddPWkVska7i2C+6xZreXFYewE4uwH8cJQArozKL3Iza3NzJStXenuyUYp14+mSG3gPy+I44yOxXoy/+2b9e0mn/7PfHLcKst5ZLT170VlJY9lJetnZ6C6geGgdxSGxvErXW0jvueg747H0RozuuEVL1tY7q/b++Y9kh48cHPH1+JAx38h01mq6u+Jt8eD8C8mY5dKg2XejKB9z5m/kVtbm1sytrOgTRSUvisr+KPq/F8ePYi4virljRgEA52VtaBb6rdtqJz/vDD3LfVx2lyNm9zcyk7WZmUhPrKMTfc7odt4Z3T5mdvvj0DOQBuXYZNxf38uqb5MD3g4cN/IqVvIWXnq18a1c3dzavrO+sfx1L43Y92z7fkXG0ml0C3IPAKCP/c/Ysfpe/+c+hce6l3NV/d/drxSU5Jm8kI6syGx6t0H6jYO+vRb3fQ1hNueqtZimyewJL7NDrur+ld7l0Ou3MrTtwRjmzuBfAgCAszOdk4c/JP/P5lx3H8zlw6+Oi/ue1gYAAE6HDt9ZxfhHKwxN62m5Wi078YJWYeA+VqGpNbQyfqxDd8HxG1q1wiAO3MBLKk9MTUcqardaQRirehCqVhCZxXT5QNV99Hukm44fGzdqedqJtHIDP3bcWNVM5KpW+0vPRAs6TA+OWto1deM6sQl8FQXt0NUlpSKt9zU0Ne3Hpm6Sqq9aoWk6YUE9Cbx2U6uajtzQtOIg67A3lvHrQdhMuy2d95sNAMAFsbm1/Xy501l9eYqVvgMXznyqAACgKydLAwAAAAAAAAAAAAAAAAAAAACAC+As7v+j8ilVrKMf1VsK+vyDP/2KXIwwTr+Se+p4feonJwCn6p8AAAD//4zkTBw=")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7a18e00000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000955c81fff727f067742d464ebf263605fa1facabc5630f3fb7608718871a119166f3263ba23d4af979d79b9069b890d1083faa252db8e09ced0a09ce057f31eb40dc779b02da08e43884bf4a434174d99551798ff57fdbfec4448bb1e4efddafcf5e2a06a80b7b"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r7}, 0x10)
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fspick(r8, &(0x7f0000000000)='.\x00', 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x92)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r9=>0x0})
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r9}, 0x10, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='\a'], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001)
r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a00)=r1, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_lsm={0x1d, 0xf, &(0x7f00000010c0)=ANY=[@ANYBLOB="180000000900000000000000e301000085100000f8ffffff85100000faffffff0820000003000000181200005806c70f6412fac68ccc9df3b8b00622d4ac9cfb1dca30df9fad702a23daddea9b375aa3cdb34baa2752b61fac9cc8ce1bbc658c4aaef80c7b0cf11e88c38e7240d0523a8d349744b59c6ee4aed400ae6ae578b813105d4a9759c22718f293bb7920edabf048d96bf0f73874e726a1e2eb4aa174679eaef5dca4db2f2d5ca853429a85ddf4aa4cada9411b669c18307f", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018280000", @ANYRES32=r2, @ANYBLOB="0000000001f8ffff184400000600000000000000000000009500000000000000"], &(0x7f0000000840)='GPL\x00', 0x1e3, 0xf7, &(0x7f0000000a80)=""/247, 0x41100, 0x0, '\x00', r9, 0x1b, r10, 0x8, &(0x7f0000000b80)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x8, 0x9bd5cd1, 0x1000}, 0x10, 0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000c00)=[{0x4, 0x4, 0x1, 0x5}, {0x0, 0x2, 0x1, 0x8}, {0x0, 0x1, 0x1}, {0x2, 0x2, 0x7, 0xb}, {0x4, 0x5, 0x4}], 0x10, 0x8}, 0x94)
lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640))

3.615958579s ago: executing program 7 (id=8342):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
r2 = syz_clone(0x2900b100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0)
ptrace(0x4206, r2)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00')
pwritev(r3, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
fchdir(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x4)
sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x140000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)={0x13c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6300000000000000}]}, @TIPC_NLA_MEDIA={0xfc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfa8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80e4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffe907}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x17620000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffff01}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
rmdir(0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffe76)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r7=>0x0})
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000002c0)={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x22}, 0x1, 0x6, 0x3, 0x100, 0x200004, 0x140360, r7})

3.570665574s ago: executing program 7 (id=8343):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x700)
io_submit(0x0, 0x0, &(0x7f0000000340))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x40000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x2, 0xffffffffffffffff}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$rds(0x15, 0x5, 0x0)
r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0200000001"], 0x48)
r4 = fsmount(r1, 0x1, 0x0)
fchdir(r4)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r3}, 0x18)

3.450238816s ago: executing program 7 (id=8346):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f00000000c0)=0x4, 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0)

3.055984076s ago: executing program 9 (id=8351):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50)
syz_usbip_server_init(0x2)
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x0, 0x27, 0x0, 0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, 0x0)
r1 = creat(&(0x7f0000010280)='./file0\x00', 0x182)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000009f59d26ff9a700a300"/36], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000053c480d9", @ANYRESDEC=r1, @ANYRESOCT=0x0], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
lsm_get_self_attr(0x69, &(0x7f0000000480)={0x0, 0x0, 0xbc, 0x9c, ""/156}, &(0x7f0000000140)=0xbc, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0)
write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xfd44)
mount(&(0x7f00000001c0), &(0x7f0000000440)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,')
fsmount(r1, 0x0, 0x70)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r4=>0x0})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x2000007, '\x00', r4, r1, 0x0, 0x0, 0x4}, 0x50)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000100)='kfree\x00', r6}, 0x18)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)

2.718729379s ago: executing program 1 (id=8353):
syz_mount_image$ext4(&(0x7f0000010300)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x1204000, &(0x7f00000102c0), 0x3, 0x57c, &(0x7f0000010a00)="$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")
r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000000)=0x6e, 0x0)
sendmmsg$unix(r1, &(0x7f0000000100), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000001811000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
fsmount(r2, 0x0, 0x0)
ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000140)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, 0x0})

2.554252265s ago: executing program 6 (id=8356):
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x300000000000000, 0x0, 0x0, 0x4, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
pidfd_send_signal(r1, 0x29, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r2}, 0x18)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x2023, &(0x7f0000000180)=ANY=[@ANYBLOB="180840000000000000f5ffffff00ffffffffffffff5a00000000000000000000b0"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000000), 0x4)
setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fbdbdf251000000008000800f7ffffff08000600c40000000800090001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
r6 = socket$rxrpc(0x21, 0x2, 0xa)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r7}, 0x10)
r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_load(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65)
bind$rxrpc(r6, 0x0, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x200005}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080)

2.487673582s ago: executing program 7 (id=8358):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x6}, 0x18)
r1 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000002e40)=ANY=[], 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r3}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x20000001}, 0x8}, 0x94)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xeb8, 0x2, 0x0, 0x0, {{0xa}, {0xe8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x0, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x80, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbffb, 0x6}, {0x0, 0x7, 0x1000, 0x2, 0x9163ef6c, 0x80003}, {0x3, 0x6, 0x80, 0x0, 0xacc4, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000004, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x400, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x5300, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10001, 0xe4d, 0x7f, 0x4}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x2, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0xa8e, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x5, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x80003}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x3, 0x2}, {0x1006, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x7fd}, {0x10, 0x10000, 0x1, 0x1, 0x2}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0x3}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x1, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x0, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffd, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0x80000001, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x9, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0x8, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0xf, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0x9, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x200}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0x9, 0x0, 0x101, 0x2, 0x1, 0x1aca}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0xde8, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x100, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x5, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x2, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x3, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x2, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5}, {0x3}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf18}}, 0x0)

2.485011462s ago: executing program 7 (id=8359):
statx(0xffffffffffffff9c, 0x0, 0x6000, 0xfd0, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f00000002c0)={[{@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$eJzs28tvVNUfAPDvvX0APx7tD/EBolaJSaOxpQWVhRuNJsZgNNEFLms7kIaBGlqNIJFiDG5MDImujUujf4E7Y2LUlYlb3bgyJETZALqpuXfuLdNpp1A6ZWrn80lue869Z+ac79zXuefMBNCxBrI/ScS2iPg1Ivpq2YUFBmr/rl05O379ytnxJObmXvszyctdvXJ2vCxavm5rkRlMI9IPk6KShaZPnzk+Vq1WThX54ZkTbw1Pnz7zxDsnxo5VjlVOjh46dPDAyNNPjT7ZkjizuK7ueX9q7+4X37j48viRi2/++HXW3m3F9vo4WmUgC/yvuVzd6vxjerTVlbXZ9rp00t3GhrAiXRGR7a6e/Pzvi664sfP64oUP2to4YE1l96ZNzTfPzgEbWBLtbgHQHuWNPnv+LZc71PVYFy4/W3sAyuK+Viy1Ld2RFmV6Gp5vW2kgIo7M/v15tsQajUMAANT7ePyzw70R8d71r17K+h5981vSuCf//3v+d0cxh9IfEf+PiJ0RcVdE7IqIuyPysvdGxH2rbM/i/k96aZVvuays//dMMbe1sP9X9v6iv6vIbc/j70mOTlYr+4vPZDB6NmX5kWXq+Pb5Xz5ptq2+/5ctWf1lX7Box6XuhgG6ibGZsbxT2gKXz0fs6V4q/mR+JiCJiN0RsWdlb72jTEw+9uXeZoVuHv8yWjDPNPdFFt5sFv9sNMRfSurnJycXzU8Ob45qZf9weVQs9tPPF15tVv9AzN1+/C1wuRL/xMLjv7FIf1I/Xzu98jou/PZR02ea2zz+097k9XyeubdY9+7YzMypkYje5HCeX7B+9MZry3xZPjv+B/ctff7vLF6TxX9/RGQH8QMR8WBEPFS0/eGIeCQi9i0T/w/PNd9Wxh9pm/b/+YiJJa9/88d/w/5feaLr+PffNKv/1vb/wTw1WKzJr383sVRzsstFYwNX89kBAADAf0Wafwc+SYfm02k6NFT7Dv+u+F9anZqeefzo1NsnJ2rfle+PnrQc6eorxkOrk9XKSDJbvGNtfHS0GCsux0sPFOPGn3ZtyfND41PViTbHDp1ua5PzP/NHV7tbB6yxLUuuHe294w0B2qBxHj1dmD33SrgYwEbl99rQuZqf/5tjcXcA2Ejc/6FzLXX+n2vImwuAjcn9HzqX8x86VPpdu1sAtJH7P3Sk1fyufw0Tm9dHM9qTWK87JU9ElIl0XbRHYqWJLbdWuN1XJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNb4NwAA///Xm+pu")
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0xfe)
ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0})
wait4(0x0, &(0x7f00000003c0), 0x1000000, &(0x7f0000000500))
socket$nl_netfilter(0x10, 0x3, 0xc)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000400)=""/235, 0xeb}], 0x1)
process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)

2.277334113s ago: executing program 6 (id=8360):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000001001400000000080000001801000020696c2500000000002020207b1af8ff00000000bfa1000000000000070100007cffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbffffe}, 0x94)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)

2.242603117s ago: executing program 6 (id=8361):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200025bd7000020000001f00000008000300", @ANYRES8=r1, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB='\x00'/12], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=<r3=>0xffffffffffffffff, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r5)
sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000340)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000ffdbdf2509000000640003800800010001000000080003000400000014000200", @ANYRESHEX=r3, @ANYRES8=r2, @ANYRES64=r2], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)

2.219967509s ago: executing program 9 (id=8362):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ")
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1, 0x6, 0x4, 0x9, 0x1}, 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000240)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x27, 0x5, 0x7fff, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100), &(0x7f0000000140)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
r3 = io_uring_setup(0xad5, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x1, 0xe9})
close(r3)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r4, 0x0, 0x100000000}, 0x18)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000800)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000900)={0xfff, 0x9, 0xab10, 0x7, 0x8000000000000001, 0x90000000000000, 0x3ff, 0x8, 0x2})

2.155586045s ago: executing program 3 (id=8363):
r0 = socket(0x2a, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x39}}, 0x8010)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x4}, {}, {0x1c, 0xfff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.138524777s ago: executing program 3 (id=8364):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x7, 0x8000, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4, <r5=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r6}, 0x10)
pipe2$9p(&(0x7f0000001900)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
r9 = dup(r8)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[], [], 0x6b}})
r10 = socket$netlink(0x10, 0x3, 0x0)
socket(0x400000000010, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x9}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x200000000000000)

1.996069511s ago: executing program 9 (id=8365):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r2 = gettid()
tkill(r2, 0x12)
tkill(r2, 0x1)
tkill(r2, 0x14)
renameat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0)

1.967143294s ago: executing program 3 (id=8366):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ftruncate(r1, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000811}, 0x44041)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TTY_SET(r4, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x18, 0x3f9, 0x200, 0x70bd2a, 0x25dfdbfe}, 0x18}, 0x1, 0x0, 0x0, 0x1090}, 0x4000080)
creat(0x0, 0x81)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lc\x00', 0x10, 0x0, 0xe}, 0x2c)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'rr\x00', 0x3a, 0x4, 0x15}, 0x2c)

1.921826418s ago: executing program 3 (id=8367):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x700)
io_submit(0x0, 0x0, &(0x7f0000000340))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x40000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x2, 0xffffffffffffffff}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$rds(0x15, 0x5, 0x0)
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200000001"], 0x48)
r3 = fsmount(r0, 0x1, 0x0)
fchdir(r3)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18)

1.894096531s ago: executing program 9 (id=8368):
semget$private(0x0, 0x2, 0x40)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18)
socket$nl_audit(0x10, 0x3, 0x9)
capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r4}, 0x10)
syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0)
listen(r1, 0x1000)
r5 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(0xffffffffffffffff, 0x220c)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x3)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x0)
listen(0xffffffffffffffff, 0x7)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r8, 0x2)

1.8032691s ago: executing program 3 (id=8369):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
creat(0x0, 0x182)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004"], 0x50)
bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x18)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817", 0x15, 0xfffffffffffffffd)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0)
umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x9)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000003140100c68f7bec9aff068609000200737962320000000008004100736977001400330062726964676530"], 0x38}, 0x1, 0x0, 0x0, 0x44805}, 0x50)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, 0x0, 0x0)
open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x8)
socket$kcm(0x21, 0x2, 0x2)

1.680060823s ago: executing program 1 (id=8370):
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000040}, 0x0)
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0xc, 0xce, 0x4, 0x200, 0x0, 0x5, 0x9, 0x200}, 0x20)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffa000/0x2000)=nil)
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f000001f680)={'wg2\x00'})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
brk(0x400000ffc000)

1.634300487s ago: executing program 1 (id=8371):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000001001400000000080000001801000020696c2500000000002020207b1af8ff00000000bfa1000000000000070100007cffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbffffe}, 0x94)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)

1.399891s ago: executing program 1 (id=8372):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_clone(0x4120ff00, 0x0, 0x0, 0x0, 0x0, 0x0)

1.246206746s ago: executing program 6 (id=8373):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10)
syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0)

1.212468419s ago: executing program 9 (id=8374):
r0 = socket(0x2a, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x39}}, 0x8010)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x4}, {}, {0x1c, 0xfff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.146678276s ago: executing program 9 (id=8375):
syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x48000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x24, &(0x7f0000000040)=@raw=[@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff9}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4bf}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x16, &(0x7f0000000200)=""/22, 0x40f00, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc000000190001002dbd7000000000000000f5ff000000000000000000000004f4ffffffffffff00000000000000000000000000000a00000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r0], 0xfc}}, 0x0)
sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x37bc0b736aabec5e, &(0x7f0000000100)={0xa, 0x0, 0xa576, @local, 0x0, 0x2}, 0x20)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='dax_writeback_one\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8)
r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000300)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="0300"/14, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x200}, &(0x7f00000000c0)=0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a000000"], 0x48)

323.968288ms ago: executing program 7 (id=8376):
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan3\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, r1, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x28000}, 0x800)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000e"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000e43000000018000180140002006e657464657673696d30000000000000080004000600000008000500000000000800030006"], 0x44}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)
r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r8, &(0x7f0000000300)='asymmetric\x00', &(0x7f00000001c0)='id:\xff\xffe{')
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
unshare(0x8040600)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time_for_children\x00')
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="280000001000ffff2abd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="142005002120000008001c00", @ANYRES32=r11, @ANYBLOB="81f036eec896057c87918db2d1cc1d0c72aaf1699472c669fdfbadf75ac088ba1d760f7988bc2465539a3b8a7abde6e39d93ed22ec7407f9ff8c66cfb6c91bae5204be1b4bfae150"], 0x28}, 0x1, 0x0, 0x0, 0x8841}, 0x280048c6)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

299.35546ms ago: executing program 6 (id=8377):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x7, 0x8000, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4, <r5=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r6}, 0x10)
pipe2$9p(&(0x7f0000001900)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
r9 = dup(r8)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[], [], 0x6b}})
r10 = socket$netlink(0x10, 0x3, 0x0)
socket(0x400000000010, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x9}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x200000000000000)

69.280503ms ago: executing program 3 (id=8378):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000001c0)={0x800000, 0x90, 0x0, 0x4, 0x3ffd, 0x7})
close_range(r2, 0xffffffffffffffff, 0x40000000000000)

0s ago: executing program 1 (id=8379):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x700)
io_submit(0x0, 0x0, &(0x7f0000000340))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x40000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x2, 0xffffffffffffffff}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$rds(0x15, 0x5, 0x0)
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200000001"], 0x48)
r3 = fsmount(r0, 0x1, 0x0)
fchdir(r3)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18)

kernel console output (not intermixed with test programs):

syz.9.7699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b18ff749 code=0x7ffc0000
[  378.842112][   T29] audit: type=1326 audit(1768122684.123:128261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25439 comm="syz.9.7699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b18ff749 code=0x7ffc0000
[  378.865944][   T29] audit: type=1326 audit(1768122684.123:128262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25439 comm="syz.9.7699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b18ff749 code=0x7ffc0000
[  378.889631][   T29] audit: type=1326 audit(1768122684.123:128263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25439 comm="syz.9.7699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8b18ff749 code=0x7ffc0000
[  378.913315][   T29] audit: type=1326 audit(1768122684.123:128264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25439 comm="syz.9.7699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b18ff749 code=0x7ffc0000
[  378.944047][T25442] loop7: detected capacity change from 0 to 512
[  378.956333][T25440] loop9: detected capacity change from 0 to 512
[  378.978381][T25440] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  379.013122][T25442] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  379.021452][T25442] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  379.032700][T25440] EXT4-fs (loop9): 1 truncate cleaned up
[  379.038532][T25442] System zones: 0-1, 15-15, 18-18, 34-34
[  379.044876][T25440] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  379.058839][T25442] EXT4-fs (loop7): orphan cleanup on readonly fs
[  379.065344][T25442] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0
[  379.080041][T25448] netlink: 4124 bytes leftover after parsing attributes in process `syz.3.7701'.
[  379.098774][T25442] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  379.107148][T14596] usb 13-1: enqueue for inactive port 0
[  379.113433][T25442] EXT4-fs (loop7): Cannot turn on quotas: error -22
[  379.119164][ T3499] usb 19-1: enqueue for inactive port 0
[  379.130371][T25440] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7699'.
[  379.137005][T14596] usb 13-1: enqueue for inactive port 0
[  379.140263][T25440] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7699'.
[  379.145737][ T3499] usb 19-1: enqueue for inactive port 0
[  379.163320][   T29] audit: type=1326 audit(1768122684.244:128265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25439 comm="syz.9.7699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b18ff749 code=0x7ffc0000
[  379.187249][   T29] audit: type=1326 audit(1768122684.244:128266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25439 comm="syz.9.7699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b18ff749 code=0x7ffc0000
[  379.210926][   T29] audit: type=1326 audit(1768122684.244:128267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25439 comm="syz.9.7699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8b18ff749 code=0x7ffc0000
[  379.234636][   T29] audit: type=1326 audit(1768122684.244:128268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25439 comm="syz.9.7699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b18ff749 code=0x7ffc0000
[  379.282762][T25442] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.7698: bg 0: block 40: padding at end of block bitmap is not set
[  379.334144][T25442] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  379.345192][T25440] bridge1: entered promiscuous mode
[  379.350413][T25440] bridge1: entered allmulticast mode
[  379.366538][T25442] EXT4-fs (loop7): 1 truncate cleaned up
[  379.379884][T25442] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  379.446938][T25442] EXT4-fs error (device loop7): ext4_encrypted_get_link:46: inode #16: comm syz.7.7698: bad symlink.
[  379.473485][T25453] loop6: detected capacity change from 0 to 1024
[  379.480628][T25442] EXT4-fs error (device loop7): ext4_encrypted_get_link:46: inode #16: comm syz.7.7698: bad symlink.
[  379.495038][T25453] EXT4-fs: Ignoring removed orlov option
[  379.526119][T25453] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  379.570278][T25442] netlink: 192 bytes leftover after parsing attributes in process `syz.7.7698'.
[  379.582612][T18041] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  379.601631][T25459] random: crng reseeded on system resumption
[  379.614231][T25459] Unrecognized hibernate image header format!
[  379.620382][T25459] PM: hibernation: Image mismatch: architecture specific data
[  379.645602][T22233] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  379.665641][T14596] vhci_hcd vhci_hcd.6: vhci_device speed not set
[  379.672155][ T3499] vhci_hcd vhci_hcd.9: vhci_device speed not set
[  379.686475][T25461] loop9: detected capacity change from 0 to 512
[  379.695415][T25459] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  379.706555][T14960] hid_parser_main: 22 callbacks suppressed
[  379.706568][T14960] hid-generic 0000:FFFFFFFC:FFFFFFFC.000D: unknown main item tag 0x0
[  379.721534][T14960] hid-generic 0000:FFFFFFFC:FFFFFFFC.000D: unknown main item tag 0x0
[  379.729764][T14960] hid-generic 0000:FFFFFFFC:FFFFFFFC.000D: unknown main item tag 0x0
[  379.742159][T14960] hid-generic 0000:FFFFFFFC:FFFFFFFC.000D: unknown main item tag 0x0
[  379.749751][T25459] netlink: 168 bytes leftover after parsing attributes in process `syz.1.7704'.
[  379.750264][T14960] hid-generic 0000:FFFFFFFC:FFFFFFFC.000D: unknown main item tag 0x0
[  379.765769][T25461] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.7703: bad orphan inode 13
[  379.767518][T14960] hid-generic 0000:FFFFFFFC:FFFFFFFC.000D: unknown main item tag 0x0
[  379.786418][T14960] hid-generic 0000:FFFFFFFC:FFFFFFFC.000D: unknown main item tag 0x1
[  379.794549][T14960] hid-generic 0000:FFFFFFFC:FFFFFFFC.000D: unknown main item tag 0x0
[  379.795811][T25461] ext4_test_bit(bit=12, block=4) = 1
[  379.802629][T14960] hid-generic 0000:FFFFFFFC:FFFFFFFC.000D: unknown main item tag 0x0
[  379.802658][T14960] hid-generic 0000:FFFFFFFC:FFFFFFFC.000D: unknown main item tag 0x0
[  379.807993][T25461] is_bad_inode(inode)=0
[  379.808003][T25461] NEXT_ORPHAN(inode)=0
[  379.808009][T25461] max_ino=32
[  379.808017][T25461] i_nlink=1
[  379.831160][T25461] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  379.852354][T14960] hid-generic 0000:FFFFFFFC:FFFFFFFC.000D: hidraw0: <UNKNOWN> HID v8.00 Device [syz0] on syz0
[  379.912088][T19518] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  379.931751][T18041] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  379.963809][T25472] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7709'.
[  379.985033][T25474] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7710'.
[  380.011898][T25478] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4)
[  380.018704][T25478] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  380.026338][T25478] vhci_hcd vhci_hcd.0: Device attached
[  380.043773][T25484] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20004
[  380.060416][T25486] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25486 comm=syz.9.7714
[  380.119179][T25478] SELinux: failed to load policy
[  380.137119][T25478] 9p: Bad value for 'source'
[  380.155713][T25479] vhci_hcd: connection closed
[  380.155911][ T8069] vhci_hcd vhci_hcd.7: stop threads
[  380.165987][ T8069] vhci_hcd vhci_hcd.7: release socket
[  380.172239][ T8069] vhci_hcd vhci_hcd.7: disconnect device
[  380.221953][T14960] vhci_hcd vhci_hcd.7: vhci_device speed not set
[  380.630458][T25508] loop9: detected capacity change from 0 to 128
[  380.660334][T25508] vfat: Unknown parameter '18446744073709551615'
[  381.452409][T25539] siw: device registration error -23
[  381.524518][T25541] loop7: detected capacity change from 0 to 512
[  381.596046][T25541] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  381.720950][T25541] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.7735: corrupted in-inode xattr: e_value out of bounds
[  381.880853][T25541] EXT4-fs (loop7): Remounting filesystem read-only
[  381.950088][T25541] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  382.078966][T25552] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4)
[  382.085584][T25552] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  382.093301][T25552] vhci_hcd vhci_hcd.0: Device attached
[  382.306131][ T3425] vhci_hcd vhci_hcd.6: vhci_device speed not set
[  382.479081][ T3425] usb 13-1: new full-speed USB device number 9 using vhci_hcd
[  382.535180][T25557] 9p: Bad value for 'source'
[  382.568977][T25552] SELinux: failed to load policy
[  382.646797][T25553] vhci_hcd: connection reset by peer
[  382.674153][ T8013] vhci_hcd vhci_hcd.6: stop threads
[  382.679426][ T8013] vhci_hcd vhci_hcd.6: release socket
[  382.684902][ T8013] vhci_hcd vhci_hcd.6: disconnect device
[  382.760777][T25541] xt_NFQUEUE: number of total queues is 0
[  382.923171][T22233] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  382.944660][T25578] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3)
[  382.951194][T25578] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  382.959776][T25578] vhci_hcd vhci_hcd.0: Device attached
[  382.970759][T25578] SELinux:  policydb magic number 0x7850006 does not match expected magic number 0xf97cff8c
[  382.982316][T25578] SELinux: failed to load policy
[  382.989983][T25579] vhci_hcd: connection closed
[  382.990152][ T8001] vhci_hcd vhci_hcd.7: stop threads
[  383.000904][ T8001] vhci_hcd vhci_hcd.7: release socket
[  383.006394][ T8001] vhci_hcd vhci_hcd.7: disconnect device
[  383.053426][T25589] loop9: detected capacity change from 0 to 128
[  383.061604][T25589] vfat: Unknown parameter '18446744073709551615'
[  383.413831][T25597] siw: device registration error -23
[  384.166523][T14960] hid-generic 0000:FFFFFFFC:FFFFFFFC.000E: hidraw0: <UNKNOWN> HID v8.00 Device [syz0] on syz0
[  384.196045][   T29] kauditd_printk_skb: 1449 callbacks suppressed
[  384.196060][   T29] audit: type=1326 audit(1768122689.155:129715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25607 comm="syz.7.7759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53374f749 code=0x7ffc0000
[  384.291181][T25610] netlink: 'syz.6.7760': attribute type 4 has an invalid length.
[  384.299017][T25610] netlink: 17 bytes leftover after parsing attributes in process `syz.6.7760'.
[  384.335670][   T29] audit: type=1326 audit(1768122689.192:129716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25607 comm="syz.7.7759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53374f749 code=0x7ffc0000
[  384.360359][   T29] audit: type=1326 audit(1768122689.192:129717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25607 comm="syz.7.7759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53374f749 code=0x7ffc0000
[  384.384235][   T29] audit: type=1326 audit(1768122689.192:129718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25607 comm="syz.7.7759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fc53374f749 code=0x7ffc0000
[  384.408757][   T29] audit: type=1326 audit(1768122689.192:129719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25607 comm="syz.7.7759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53374f749 code=0x7ffc0000
[  384.432611][   T29] audit: type=1326 audit(1768122689.192:129720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25607 comm="syz.7.7759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53374f749 code=0x7ffc0000
[  384.457154][   T29] audit: type=1326 audit(1768122689.192:129721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25607 comm="syz.7.7759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53374f749 code=0x7ffc0000
[  384.480845][   T29] audit: type=1326 audit(1768122689.192:129722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25607 comm="syz.7.7759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc53374f749 code=0x7ffc0000
[  384.505367][   T29] audit: type=1326 audit(1768122689.192:129723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25607 comm="syz.7.7759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53374f749 code=0x7ffc0000
[  384.529033][   T29] audit: type=1326 audit(1768122689.192:129724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25607 comm="syz.7.7759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53374f749 code=0x7ffc0000
[  384.565383][T25610] FAULT_INJECTION: forcing a failure.
[  384.565383][T25610] name failslab, interval 1, probability 0, space 0, times 0
[  384.578158][T25610] CPU: 1 UID: 0 PID: 25610 Comm: syz.6.7760 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  384.578210][T25610] Tainted: [W]=WARN
[  384.578218][T25610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  384.578246][T25610] Call Trace:
[  384.578253][T25610]  <TASK>
[  384.578283][T25610]  __dump_stack+0x1d/0x30
[  384.578305][T25610]  dump_stack_lvl+0x95/0xd0
[  384.578323][T25610]  dump_stack+0x15/0x1b
[  384.578340][T25610]  should_fail_ex+0x265/0x280
[  384.578437][T25610]  should_failslab+0x8c/0xb0
[  384.578461][T25610]  kmem_cache_alloc_node_noprof+0x6b/0x4c0
[  384.578492][T25610]  ? __alloc_skb+0x2ff/0x4b0
[  384.578519][T25610]  __alloc_skb+0x2ff/0x4b0
[  384.578576][T25610]  ? __alloc_skb+0x228/0x4b0
[  384.578602][T25610]  netlink_ack+0xfd/0x500
[  384.578625][T25610]  ? avc_has_perm_noaudit+0xab/0x130
[  384.578711][T25610]  netlink_rcv_skb+0x192/0x220
[  384.578737][T25610]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  384.578823][T25610]  rtnetlink_rcv+0x1c/0x30
[  384.578855][T25610]  netlink_unicast+0x5c0/0x690
[  384.578887][T25610]  netlink_sendmsg+0x58b/0x6b0
[  384.578973][T25610]  ? __pfx_netlink_sendmsg+0x10/0x10
[  384.579006][T25610]  __sock_sendmsg+0x145/0x180
[  384.579028][T25610]  ____sys_sendmsg+0x31e/0x4a0
[  384.579115][T25610]  ___sys_sendmsg+0x17b/0x1d0
[  384.579156][T25610]  __x64_sys_sendmsg+0xd4/0x160
[  384.579218][T25610]  x64_sys_call+0x17ba/0x3000
[  384.579238][T25610]  do_syscall_64+0xca/0x2b0
[  384.579288][T25610]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.579306][T25610] RIP: 0033:0x7f241facf749
[  384.579320][T25610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  384.579335][T25610] RSP: 002b:00007f241e52f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  384.579357][T25610] RAX: ffffffffffffffda RBX: 00007f241fd25fa0 RCX: 00007f241facf749
[  384.579443][T25610] RDX: 0000000000000810 RSI: 0000200000000080 RDI: 0000000000000006
[  384.579454][T25610] RBP: 00007f241e52f090 R08: 0000000000000000 R09: 0000000000000000
[  384.579466][T25610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  384.579476][T25610] R13: 00007f241fd26038 R14: 00007f241fd25fa0 R15: 00007ffebdd42348
[  384.579500][T25610]  </TASK>
[  384.874895][T25620] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4)
[  384.881469][T25620] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  384.889127][T25620] vhci_hcd vhci_hcd.0: Device attached
[  384.894808][T25618] loop9: detected capacity change from 0 to 512
[  384.905626][T25624] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  384.912160][T25624] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  384.919776][T25624] vhci_hcd vhci_hcd.0: Device attached
[  384.956399][T25624] SELinux:  policydb magic number 0x7850006 does not match expected magic number 0xf97cff8c
[  384.968443][T25624] SELinux: failed to load policy
[  385.022993][T25618] EXT4-fs (loop9): too many log groups per flexible block group
[  385.024109][T25629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7766'.
[  385.032663][T25620] SELinux: failed to load policy
[  385.050437][T25625] vhci_hcd: connection closed
[  385.050656][T14834] vhci_hcd vhci_hcd.3: stop threads
[  385.061786][T14834] vhci_hcd vhci_hcd.3: release socket
[  385.067227][T14834] vhci_hcd vhci_hcd.3: disconnect device
[  385.075461][T25618] EXT4-fs (loop9): failed to initialize mballoc (-12)
[  385.082303][T25618] EXT4-fs (loop9): mount failed
[  385.082430][T25632] loop7: detected capacity change from 0 to 512
[  385.108208][T25620] 9p: Bad value for 'source'
[  385.118575][ T3499] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  385.125179][T25632] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  385.129076][T25621] vhci_hcd: connection closed
[  385.138355][T14834] vhci_hcd vhci_hcd.6: stop threads
[  385.142500][T25632] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  385.143266][T14834] vhci_hcd vhci_hcd.6: release socket
[  385.148984][T25632] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  385.159609][T14834] vhci_hcd vhci_hcd.6: disconnect device
[  385.247853][T25641] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3)
[  385.254429][T25641] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  385.262155][T25641] vhci_hcd vhci_hcd.0: Device attached
[  385.364144][T25641] SELinux: failed to load policy
[  385.365403][T25645] 9p: Bad value for 'source'
[  385.424490][T25642] vhci_hcd: connection closed
[  385.424722][T14834] vhci_hcd vhci_hcd.7: stop threads
[  385.434693][T14834] vhci_hcd vhci_hcd.7: release socket
[  385.440956][T14834] vhci_hcd vhci_hcd.7: disconnect device
[  385.459820][T14960] vhci_hcd vhci_hcd.7: vhci_device speed not set
[  385.628281][T25647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7771'.
[  385.662938][ T3495] hid_parser_main: 48 callbacks suppressed
[  385.662958][ T3495] hid-generic 0000:FFFFFFFC:FFFFFFFC.000F: unknown main item tag 0x0
[  385.677003][ T3495] hid-generic 0000:FFFFFFFC:FFFFFFFC.000F: unknown main item tag 0x0
[  385.685097][ T3495] hid-generic 0000:FFFFFFFC:FFFFFFFC.000F: unknown main item tag 0x0
[  385.707546][ T3495] hid-generic 0000:FFFFFFFC:FFFFFFFC.000F: unknown main item tag 0x0
[  385.715769][ T3495] hid-generic 0000:FFFFFFFC:FFFFFFFC.000F: unknown main item tag 0x0
[  385.724009][ T3495] hid-generic 0000:FFFFFFFC:FFFFFFFC.000F: unknown main item tag 0x0
[  385.732202][ T3495] hid-generic 0000:FFFFFFFC:FFFFFFFC.000F: unknown main item tag 0x1
[  385.740431][ T3495] hid-generic 0000:FFFFFFFC:FFFFFFFC.000F: unknown main item tag 0x0
[  385.748916][ T3495] hid-generic 0000:FFFFFFFC:FFFFFFFC.000F: unknown main item tag 0x0
[  385.756991][ T3495] hid-generic 0000:FFFFFFFC:FFFFFFFC.000F: unknown main item tag 0x0
[  385.767284][ T3495] hid-generic 0000:FFFFFFFC:FFFFFFFC.000F: hidraw0: <UNKNOWN> HID v8.00 Device [syz0] on syz0
[  385.880579][T25663] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7776'.
[  385.890437][T25663] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7776'.
[  385.977592][T25667] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  386.444773][T25679] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  387.577405][T25706] siw: device registration error -23
[  387.918796][ T3425] usb 13-1: enqueue for inactive port 0
[  387.933604][ T3425] usb 13-1: enqueue for inactive port 0
[  388.025717][ T3425] vhci_hcd vhci_hcd.6: vhci_device speed not set
[  388.058578][T25723] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7798'.
[  388.790238][T25737] siw: device registration error -23
[  389.323290][T25749] loop6: detected capacity change from 0 to 512
[  389.344807][T25749] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  389.451979][T25749] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.7809: corrupted in-inode xattr: e_value out of bounds
[  389.473999][T25749] EXT4-fs (loop6): Remounting filesystem read-only
[  389.495017][T25749] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  389.547578][   T29] kauditd_printk_skb: 737 callbacks suppressed
[  389.547593][   T29] audit: type=1326 audit(1768122694.169:130462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25738 comm="syz.1.7804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7d6cd665e7 code=0x7ffc0000
[  389.642098][   T29] audit: type=1326 audit(1768122694.197:130463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25738 comm="syz.1.7804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7d6cda2005 code=0x7ffc0000
[  389.665857][   T29] audit: type=1326 audit(1768122694.197:130464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25738 comm="syz.1.7804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7d6cd0b829 code=0x7ffc0000
[  389.689640][   T29] audit: type=1326 audit(1768122694.197:130465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25738 comm="syz.1.7804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7d6cd665e7 code=0x7ffc0000
[  389.713292][   T29] audit: type=1326 audit(1768122694.197:130466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25738 comm="syz.1.7804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7d6cd0b829 code=0x7ffc0000
[  389.736869][   T29] audit: type=1326 audit(1768122694.197:130467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25738 comm="syz.1.7804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7d6cd6f749 code=0x7ffc0000
[  389.760354][   T29] audit: type=1326 audit(1768122694.197:130468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25738 comm="syz.1.7804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7d6cda2005 code=0x7ffc0000
[  389.784149][   T29] audit: type=1326 audit(1768122694.197:130469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25738 comm="syz.1.7804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7d6cd665e7 code=0x7ffc0000
[  389.807827][   T29] audit: type=1326 audit(1768122694.197:130470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25738 comm="syz.1.7804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7d6cd0b829 code=0x7ffc0000
[  389.831509][   T29] audit: type=1326 audit(1768122694.197:130471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25738 comm="syz.1.7804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7d6cd6f749 code=0x7ffc0000
[  389.932783][T25765] netlink: 'syz.1.7814': attribute type 49 has an invalid length.
[  389.941061][T25766] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3)
[  389.947567][T25766] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  389.955316][T25766] vhci_hcd vhci_hcd.0: Device attached
[  389.996146][T25766] SELinux:  policydb magic number 0x7850006 does not match expected magic number 0xf97cff8c
[  390.007504][T25766] SELinux: failed to load policy
[  390.013808][T25768] vhci_hcd: connection closed
[  390.014182][ T2416] vhci_hcd vhci_hcd.9: stop threads
[  390.024158][ T2416] vhci_hcd vhci_hcd.9: release socket
[  390.030503][ T2416] vhci_hcd vhci_hcd.9: disconnect device
[  390.079818][T19518] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  390.343104][T25785] netlink: 'syz.7.7821': attribute type 21 has an invalid length.
[  390.352657][T25785] netlink: 132 bytes leftover after parsing attributes in process `syz.7.7821'.
[  390.609065][T25789] netlink: 'syz.9.7823': attribute type 15 has an invalid length.
[  391.117102][T25795] loop9: detected capacity change from 0 to 128
[  391.154549][T25795] vfat: Unknown parameter '18446744073709551615'
[  391.196167][T25798] loop6: detected capacity change from 0 to 128
[  391.226135][T25798] vfat: Unknown parameter '18446744073709551615'
[  391.815731][T25821] netlink: 4124 bytes leftover after parsing attributes in process `syz.7.7836'.
[  391.834455][T25825] netlink: 4124 bytes leftover after parsing attributes in process `syz.1.7838'.
[  392.108368][T25842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7844'.
[  392.139058][T25842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7844'.
[  392.167073][T25844] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7845'.
[  392.186764][T25842] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25842 comm=syz.3.7844
[  392.517000][T25857] loop6: detected capacity change from 0 to 512
[  392.555261][T25857] EXT4-fs: Ignoring removed bh option
[  392.569440][T25857] EXT4-fs: Mount option(s) incompatible with ext3
[  392.711485][T25858] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  392.959697][T25875] random: crng reseeded on system resumption
[  392.968972][T25875] Unrecognized hibernate image header format!
[  392.975070][T25875] PM: hibernation: Image mismatch: architecture specific data
[  392.992768][T25875] loop6: detected capacity change from 0 to 512
[  393.008443][T25875] EXT4-fs: dax option not supported
[  393.033071][T25875] loop6: detected capacity change from 0 to 1024
[  393.041763][T25875] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  393.052861][T25875] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  393.064602][T25875] JBD2: no valid journal superblock found
[  393.070358][T25875] EXT4-fs (loop6): Could not load journal inode
[  393.088689][T25875] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  393.109735][T25875] netlink: 168 bytes leftover after parsing attributes in process `syz.6.7857'.
[  393.111572][T25877] $Hÿ: renamed from .`
[  393.233888][T25877] $Hÿ: entered promiscuous mode
[  393.238950][T25877] bond_slave_0: entered promiscuous mode
[  393.244699][T25877] bond_slave_1: entered promiscuous mode
[  393.314731][T25888] netlink: 32 bytes leftover after parsing attributes in process `syz.9.7863'.
[  393.471409][T25905] loop7: detected capacity change from 0 to 512
[  393.537549][T25905] EXT4-fs (loop7): too many log groups per flexible block group
[  393.624917][T25905] EXT4-fs (loop7): failed to initialize mballoc (-12)
[  393.647154][T25917] loop3: detected capacity change from 0 to 512
[  393.651955][T25905] EXT4-fs (loop7): mount failed
[  393.689461][T25917] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  393.722688][T25917] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.7868: corrupted in-inode xattr: e_value out of bounds
[  393.742970][T25898] cgroup: fork rejected by pids controller in /syz6
[  393.744696][T25917] EXT4-fs (loop3): Remounting filesystem read-only
[  393.758636][T25917] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  393.759093][T25919] netlink: 4124 bytes leftover after parsing attributes in process `syz.9.7869'.
[  394.300874][T20595] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  394.563097][T25957] syz.6.7875: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[  394.577925][T25957] CPU: 0 UID: 0 PID: 25957 Comm: syz.6.7875 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  394.577957][T25957] Tainted: [W]=WARN
[  394.577963][T25957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  394.578015][T25957] Call Trace:
[  394.578022][T25957]  <TASK>
[  394.578031][T25957]  __dump_stack+0x1d/0x30
[  394.578058][T25957]  dump_stack_lvl+0x95/0xd0
[  394.578097][T25957]  dump_stack+0x15/0x1b
[  394.578115][T25957]  warn_alloc+0x12b/0x1a0
[  394.578141][T25957]  ? __schedule+0x85f/0xcd0
[  394.578219][T25957]  ? __rcu_read_unlock+0x4f/0x70
[  394.578238][T25957]  __vmalloc_node_range_noprof+0xa0/0x1310
[  394.578261][T25957]  ? __futex_wait+0x1fa/0x260
[  394.578347][T25957]  ? __pfx_futex_wake_mark+0x10/0x10
[  394.578377][T25957]  ? __rcu_read_unlock+0x4f/0x70
[  394.578442][T25957]  ? avc_has_perm_noaudit+0xab/0x130
[  394.578478][T25957]  ? should_fail_ex+0x30/0x280
[  394.578503][T25957]  ? should_failslab+0x8c/0xb0
[  394.578529][T25957]  vmalloc_user_noprof+0x7d/0xb0
[  394.578633][T25957]  ? xskq_create+0x80/0xe0
[  394.578695][T25957]  xskq_create+0x80/0xe0
[  394.578712][T25957]  xsk_init_queue+0x95/0xf0
[  394.578746][T25957]  xsk_setsockopt+0x3f5/0x640
[  394.578779][T25957]  ? __pfx_xsk_setsockopt+0x10/0x10
[  394.578848][T25957]  __sys_setsockopt+0x184/0x200
[  394.578926][T25957]  __x64_sys_setsockopt+0x64/0x80
[  394.578955][T25957]  x64_sys_call+0x21d5/0x3000
[  394.578979][T25957]  do_syscall_64+0xca/0x2b0
[  394.579011][T25957]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  394.579110][T25957] RIP: 0033:0x7f241facf749
[  394.579126][T25957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  394.579144][T25957] RSP: 002b:00007f241e52f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  394.579214][T25957] RAX: ffffffffffffffda RBX: 00007f241fd25fa0 RCX: 00007f241facf749
[  394.579228][T25957] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  394.579314][T25957] RBP: 00007f241fb53f91 R08: 0000000000000004 R09: 0000000000000000
[  394.579327][T25957] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  394.579340][T25957] R13: 00007f241fd26038 R14: 00007f241fd25fa0 R15: 00007ffebdd42348
[  394.579360][T25957]  </TASK>
[  394.800696][T25957] Mem-Info:
[  394.803965][T25957] active_anon:20071 inactive_anon:33 isolated_anon:0
[  394.803965][T25957]  active_file:14032 inactive_file:17968 isolated_file:0
[  394.803965][T25957]  unevictable:0 dirty:271 writeback:0
[  394.803965][T25957]  slab_reclaimable:4183 slab_unreclaimable:161313
[  394.803965][T25957]  mapped:34364 shmem:10165 pagetables:1579
[  394.803965][T25957]  sec_pagetables:0 bounce:0
[  394.803965][T25957]  kernel_misc_reclaimable:0
[  394.803965][T25957]  free:1689664 free_pcp:5771 free_cma:0
[  394.849264][T25957] Node 0 active_anon:80284kB inactive_anon:132kB active_file:56128kB inactive_file:71872kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:137456kB dirty:1084kB writeback:0kB shmem:40660kB kernel_stack:6272kB pagetables:6316kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  394.876955][T25957] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  394.906773][T25957] lowmem_reserve[]: 0 2880 7859 7859
[  394.912172][T25957] Node 0 DMA32 free:2945888kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949520kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:104kB free_cma:0kB
[  394.943512][T25957] lowmem_reserve[]: 0 0 4978 4978
[  394.948566][T25957] Node 0 Normal free:3797408kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:80284kB inactive_anon:132kB active_file:56128kB inactive_file:71872kB unevictable:0kB writepending:1084kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:19388kB local_pcp:16908kB free_cma:0kB
[  394.981861][T25957] lowmem_reserve[]: 0 0 0 0
[  394.986419][T25957] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  394.999271][T25957] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 3*16kB (M) 3*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945888kB
[  395.015484][T25957] Node 0 Normal: 1188*4kB (UME) 2469*8kB (UME) 1299*16kB (UME) 1088*32kB (UME) 1042*64kB (UME) 781*128kB (UME) 494*256kB (UM) 390*512kB (UME) 373*1024kB (UM) 250*2048kB (UME) 569*4096kB (UM) = 3797480kB
[  395.035587][T25957] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  395.044872][T25957] 42167 total pagecache pages
[  395.049628][T25957] 21 pages in swap cache
[  395.053927][T25957] Free swap  = 124912kB
[  395.058057][T25957] Total swap = 124996kB
[  395.062339][T25957] 2097051 pages RAM
[  395.066145][T25957] 0 pages HighMem/MovableOnly
[  395.070833][T25957] 81271 pages reserved
[  395.221993][   T29] kauditd_printk_skb: 1282 callbacks suppressed
[  395.222008][   T29] audit: type=1326 audit(1768122699.473:131754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25960 comm="syz.3.7873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b453f749 code=0x7ffc0000
[  395.260473][   T29] audit: type=1326 audit(1768122699.473:131755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25960 comm="syz.3.7873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb3b453f749 code=0x7ffc0000
[  395.284311][   T29] audit: type=1326 audit(1768122699.473:131756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25960 comm="syz.3.7873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b453f749 code=0x7ffc0000
[  395.308126][   T29] audit: type=1326 audit(1768122699.510:131757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25960 comm="syz.3.7873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb3b453f749 code=0x7ffc0000
[  395.332097][   T29] audit: type=1326 audit(1768122699.510:131758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25960 comm="syz.3.7873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b453f749 code=0x7ffc0000
[  395.355753][   T29] audit: type=1326 audit(1768122699.510:131759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25960 comm="syz.3.7873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb3b453f749 code=0x7ffc0000
[  395.379363][   T29] audit: type=1326 audit(1768122699.510:131760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25960 comm="syz.3.7873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b453f749 code=0x7ffc0000
[  395.403097][   T29] audit: type=1326 audit(1768122699.510:131761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25960 comm="syz.3.7873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fb3b453f749 code=0x7ffc0000
[  395.426697][   T29] audit: type=1326 audit(1768122699.510:131762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25960 comm="syz.3.7873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b453f749 code=0x7ffc0000
[  395.450421][   T29] audit: type=1326 audit(1768122699.510:131763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25960 comm="syz.3.7873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fb3b453f749 code=0x7ffc0000
[  395.549715][T25971] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3)
[  395.556259][T25971] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  395.563965][T25971] vhci_hcd vhci_hcd.0: Device attached
[  395.663830][T25971] SELinux: failed to load policy
[  395.674478][T25982] loop9: detected capacity change from 0 to 512
[  395.681891][T25982] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem
[  395.696100][T25985] loop6: detected capacity change from 0 to 128
[  395.702290][T25982] EXT4-fs error (device loop9): ext4_iget_extra_inode:5073: inode #15: comm syz.9.7883: corrupted in-inode xattr: e_value out of bounds
[  395.702843][T25985] vfat: Unknown parameter '18446744073709551615'
[  395.720831][T25971] 9p: Bad value for 'source'
[  395.865692][T25982] EXT4-fs (loop9): Remounting filesystem read-only
[  395.872754][T25974] vhci_hcd: connection closed
[  395.872899][   T42] vhci_hcd vhci_hcd.7: stop threads
[  395.882847][   T42] vhci_hcd vhci_hcd.7: release socket
[  395.888268][   T42] vhci_hcd vhci_hcd.7: disconnect device
[  395.912984][T25982] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  396.586605][T18041] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  396.601534][T25996] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3)
[  396.608099][T25996] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  396.615733][T25996] vhci_hcd vhci_hcd.0: Device attached
[  396.731952][T25998] vhci_hcd: connection closed
[  396.732265][T22908] vhci_hcd vhci_hcd.7: stop threads
[  396.742214][T22908] vhci_hcd vhci_hcd.7: release socket
[  396.747587][T22908] vhci_hcd vhci_hcd.7: disconnect device
[  396.820006][T26007] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7889'.
[  396.978280][T26001] lo speed is unknown, defaulting to 1000
[  397.114032][T26022] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7893'.
[  397.144861][ T3389] vhci_hcd vhci_hcd.7: vhci_device speed not set
[  397.175970][T26001] lo speed is unknown, defaulting to 1000
[  397.197216][T26026] random: crng reseeded on system resumption
[  397.215536][T26026] Unrecognized hibernate image header format!
[  397.221739][T26026] PM: hibernation: Image mismatch: architecture specific data
[  397.254840][T26001] chnl_net:caif_netlink_parms(): no params data found
[  397.297241][T26026] loop3: detected capacity change from 0 to 512
[  397.313914][T26026] EXT4-fs: dax option not supported
[  397.344694][T26026] loop3: detected capacity change from 0 to 1024
[  397.361998][T26026] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  397.373729][T26026] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  397.384594][T26026] JBD2: no valid journal superblock found
[  397.390424][T26026] EXT4-fs (loop3): Could not load journal inode
[  397.398322][T26001] bridge0: port 1(bridge_slave_0) entered blocking state
[  397.406556][T26001] bridge0: port 1(bridge_slave_0) entered disabled state
[  397.413908][T26001] bridge_slave_0: entered allmulticast mode
[  397.418148][T26045] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  397.420558][T26001] bridge_slave_0: entered promiscuous mode
[  397.433608][T26026] netlink: 168 bytes leftover after parsing attributes in process `syz.3.7895'.
[  397.437858][T26001] bridge0: port 2(bridge_slave_1) entered blocking state
[  397.451393][T26001] bridge0: port 2(bridge_slave_1) entered disabled state
[  397.457223][T26045] SELinux: failed to load policy
[  397.459163][T26001] bridge_slave_1: entered allmulticast mode
[  397.470880][T26001] bridge_slave_1: entered promiscuous mode
[  397.510271][T26001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  397.528332][T26046] loop7: detected capacity change from 0 to 2048
[  397.537823][T26001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  397.565360][T26001] team0: Port device team_slave_0 added
[  397.573763][T26046] Alternate GPT is invalid, using primary GPT.
[  397.574271][T26001] team0: Port device team_slave_1 added
[  397.580025][T26046]  loop7: p1 p2 p3
[  397.589304][T26046] loop7: partition table partially beyond EOD, truncated
[  397.626241][T26001] batman_adv: batadv0: Adding interface: batadv_slave_0
[  397.633256][T26001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  397.659315][T26001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  397.685522][T26001] batman_adv: batadv0: Adding interface: batadv_slave_1
[  397.688619][T26062] netlink: 'syz.3.7908': attribute type 1 has an invalid length.
[  397.692600][T26001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  397.692710][T26001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  397.738448][T26062] netlink: 244 bytes leftover after parsing attributes in process `syz.3.7908'.
[  397.747499][T26062] NCSI netlink: No device for ifindex 1851879543
[  397.765320][T26062] loop3: detected capacity change from 0 to 1024
[  397.772523][T26062] EXT4-fs: inline encryption not supported
[  397.778702][T26062] journal_path: Non-blockdev passed as './file0'
[  397.781918][T26001] hsr_slave_0: entered promiscuous mode
[  397.785037][T26062] EXT4-fs: error: could not find journal device path
[  397.800275][T26001] hsr_slave_1: entered promiscuous mode
[  397.806662][T26001] debugfs: 'hsr0' already exists in 'hsr'
[  397.812546][T26001] Cannot create hsr debugfs directory
[  397.908424][T26069] loop7: detected capacity change from 0 to 2048
[  397.918918][T26069] EXT4-fs (loop7): unsupported inode size: 84
[  397.925292][T26069] EXT4-fs (loop7): blocksize: 4096
[  397.984031][T26074] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.055838][T26074] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.105412][T26001] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  398.116488][T26074] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.127949][T26001] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  398.137055][T26001] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  398.147083][T26001] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  398.175898][T26074] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.198935][T26001] 8021q: adding VLAN 0 to HW filter on device bond0
[  398.212828][T26001] 8021q: adding VLAN 0 to HW filter on device team0
[  398.222826][ T8085] bridge0: port 1(bridge_slave_0) entered blocking state
[  398.229900][ T8085] bridge0: port 1(bridge_slave_0) entered forwarding state
[  398.244021][ T8085] bridge0: port 2(bridge_slave_1) entered blocking state
[  398.251149][ T8085] bridge0: port 2(bridge_slave_1) entered forwarding state
[  398.269799][ T8085] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  398.286356][ T8085] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  398.299404][ T8085] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  398.314242][   T42] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  398.346743][T26085] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7914'.
[  398.387697][T26001] 8021q: adding VLAN 0 to HW filter on device batadv0
[  398.501592][T26101] loop7: detected capacity change from 0 to 1024
[  398.529733][T26101] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  398.557442][T26001] veth0_vlan: entered promiscuous mode
[  398.563294][T26111] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  398.567021][T26001] veth1_vlan: entered promiscuous mode
[  398.569808][T26111] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  398.583122][T26111] vhci_hcd vhci_hcd.0: Device attached
[  398.619062][T26001] veth0_macvtap: entered promiscuous mode
[  398.628910][T26001] veth1_macvtap: entered promiscuous mode
[  398.644352][T26001] batman_adv: batadv0: Interface activated: batadv_slave_0
[  398.658731][T26001] batman_adv: batadv0: Interface activated: batadv_slave_1
[  398.672529][T25304] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  398.690919][T25304] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  398.722479][T26117] loop6: detected capacity change from 0 to 8192
[  398.729760][T26111] SELinux: failed to load policy
[  398.730871][T25304] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  398.757284][T26112] vhci_hcd: connection closed
[  398.757377][T25304] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  398.762355][T22908] vhci_hcd vhci_hcd.1: stop threads
[  398.776433][T22908] vhci_hcd vhci_hcd.1: release socket
[  398.782860][T22908] vhci_hcd vhci_hcd.1: disconnect device
[  398.788549][ T3499] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  398.912532][T26131] loop9: detected capacity change from 0 to 512
[  398.920943][T26131] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  398.929665][T26131] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended
[  398.938762][T26131] EXT4-fs (loop9): SIPHASH is not a valid default hash value
[  399.201673][T26147] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  399.408345][T22233] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  399.499264][T26156] siw: device registration error -23
[  399.901083][T26176] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7941'.
[  400.310993][T26184] 9p: Bad value for 'wfdno'
[  400.394146][T26186] sch_tbf: burst 22 is lower than device lo mtu (65550) !
[  400.429516][T26182] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  401.043247][T26196] set_capacity_and_notify: 2 callbacks suppressed
[  401.043261][T26196] loop6: detected capacity change from 0 to 1024
[  401.075981][T26196] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  401.099136][T26196] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #11: comm syz.6.7947: iget: bogus i_mode (1)
[  401.123271][T26196] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.7947: couldn't read orphan inode 11 (err -117)
[  401.158711][T26196] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  401.173427][T20595] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  401.205015][T26196] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  401.225469][T26199] random: crng reseeded on system resumption
[  401.238962][T26196] FAULT_INJECTION: forcing a failure.
[  401.238962][T26196] name failslab, interval 1, probability 0, space 0, times 0
[  401.251629][T26196] CPU: 0 UID: 0 PID: 26196 Comm: syz.6.7947 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  401.251731][T26196] Tainted: [W]=WARN
[  401.251745][T26196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  401.251758][T26196] Call Trace:
[  401.251765][T26196]  <TASK>
[  401.251774][T26196]  __dump_stack+0x1d/0x30
[  401.251799][T26196]  dump_stack_lvl+0x95/0xd0
[  401.251838][T26196]  dump_stack+0x15/0x1b
[  401.251854][T26196]  should_fail_ex+0x265/0x280
[  401.251873][T26196]  should_failslab+0x8c/0xb0
[  401.251892][T26196]  __kmalloc_cache_node_noprof+0x6a/0x4d0
[  401.251921][T26196]  ? page_pool_create_percpu+0x4d/0x640
[  401.251950][T26196]  page_pool_create_percpu+0x4d/0x640
[  401.251977][T26196]  page_pool_create+0x1a/0x30
[  401.251996][T26196]  bpf_test_run_xdp_live+0x133/0x11d0
[  401.252086][T26196]  ? avc_has_perm_noaudit+0xab/0x130
[  401.252121][T26196]  ? avc_has_perm+0xf7/0x180
[  401.252157][T26196]  ? selinux_file_open+0x2dc/0x330
[  401.252270][T26196]  ? should_fail_ex+0xdb/0x280
[  401.252289][T26196]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  401.252369][T26196]  ? _copy_from_user+0x89/0xb0
[  401.252391][T26196]  ? bpf_test_init+0xf4/0x140
[  401.252420][T26196]  bpf_prog_test_run_xdp+0x525/0x970
[  401.252454][T26196]  ? kstrtouint_from_user+0x9f/0xf0
[  401.252508][T26196]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  401.252533][T26196]  bpf_prog_test_run+0x204/0x340
[  401.252595][T26196]  __sys_bpf+0x4c0/0x7c0
[  401.252623][T26196]  __x64_sys_bpf+0x41/0x50
[  401.252648][T26196]  x64_sys_call+0x28e1/0x3000
[  401.252670][T26196]  do_syscall_64+0xca/0x2b0
[  401.252746][T26196]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.252764][T26196] RIP: 0033:0x7f241facf749
[  401.252778][T26196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  401.252846][T26196] RSP: 002b:00007f241e52f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  401.252867][T26196] RAX: ffffffffffffffda RBX: 00007f241fd25fa0 RCX: 00007f241facf749
[  401.252881][T26196] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a
[  401.252946][T26196] RBP: 00007f241e52f090 R08: 0000000000000000 R09: 0000000000000000
[  401.252960][T26196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  401.252973][T26196] R13: 00007f241fd26038 R14: 00007f241fd25fa0 R15: 00007ffebdd42348
[  401.252994][T26196]  </TASK>
[  401.549891][T26199] Unrecognized hibernate image header format!
[  401.556106][T26199] PM: hibernation: Image mismatch: architecture specific data
[  401.578349][T26203] vxcan1: entered allmulticast mode
[  401.627553][T26199] loop3: detected capacity change from 0 to 512
[  401.634323][T26199] EXT4-fs: dax option not supported
[  401.661140][T26199] loop3: detected capacity change from 0 to 1024
[  401.679134][T26199] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  401.690193][T26199] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  401.701860][T26199] JBD2: no valid journal superblock found
[  401.707617][T26199] EXT4-fs (loop3): Could not load journal inode
[  401.727709][T26209] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[  401.734254][T26209] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  401.741885][T26209] vhci_hcd vhci_hcd.0: Device attached
[  401.756919][T26199] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  401.779416][T26199] netlink: 168 bytes leftover after parsing attributes in process `syz.3.7948'.
[  401.798146][   T29] kauditd_printk_skb: 1401 callbacks suppressed
[  401.798162][   T29] audit: type=1326 audit(1768122705.618:133165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26208 comm="syz.1.7953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7d6cd665e7 code=0x7ffc0000
[  401.828154][   T29] audit: type=1326 audit(1768122705.618:133166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26208 comm="syz.1.7953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7d6cd0b829 code=0x7ffc0000
[  401.851841][   T29] audit: type=1326 audit(1768122705.618:133167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26208 comm="syz.1.7953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7d6cd665e7 code=0x7ffc0000
[  401.875456][   T29] audit: type=1326 audit(1768122705.618:133168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26208 comm="syz.1.7953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7d6cd0b829 code=0x7ffc0000
[  401.899236][   T29] audit: type=1326 audit(1768122705.618:133169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26208 comm="syz.1.7953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6cd6f749 code=0x7ffc0000
[  401.923043][   T29] audit: type=1326 audit(1768122705.618:133170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26208 comm="syz.1.7953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6cd6f749 code=0x7ffc0000
[  401.946958][   T29] audit: type=1326 audit(1768122705.618:133171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26208 comm="syz.1.7953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6cd6f749 code=0x7ffc0000
[  401.960712][T26212] 9p: Bad value for 'source'
[  401.970665][   T29] audit: type=1326 audit(1768122705.618:133172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26208 comm="syz.1.7953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d6cd6f749 code=0x7ffc0000
[  401.970728][   T29] audit: type=1326 audit(1768122705.618:133173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26208 comm="syz.1.7953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6cd6f749 code=0x7ffc0000
[  401.970773][   T29] audit: type=1326 audit(1768122705.618:133174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26208 comm="syz.1.7953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6cd6f749 code=0x7ffc0000
[  401.972775][T26209] SELinux: failed to load policy
[  402.062854][ T3409] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  402.163722][T26210] vhci_hcd: connection closed
[  402.163939][T25289] vhci_hcd vhci_hcd.1: stop threads
[  402.173958][T25289] vhci_hcd vhci_hcd.1: release socket
[  402.179400][T25289] vhci_hcd vhci_hcd.1: disconnect device
[  402.280339][ T3409] usb 3-1: new full-speed USB device number 10 using vhci_hcd
[  402.288127][ T3409] usb 3-1: enqueue for inactive port 0
[  402.293644][ T3409] usb 3-1: enqueue for inactive port 0
[  402.302878][ T3409] usb 3-1: enqueue for inactive port 0
[  402.311442][T25289] bridge_slave_1: left allmulticast mode
[  402.317142][T25289] bridge_slave_1: left promiscuous mode
[  402.322924][T25289] bridge0: port 2(bridge_slave_1) entered disabled state
[  402.340039][T25289] bridge_slave_0: left promiscuous mode
[  402.346107][T25289] bridge0: port 1(bridge_slave_0) entered disabled state
[  402.364830][T26223] random: crng reseeded on system resumption
[  402.365360][T26225] loop7: detected capacity change from 0 to 1024
[  402.378663][T25289] bond_slave_0: left promiscuous mode
[  402.384360][T25289] bond_slave_1: left promiscuous mode
[  402.386262][T26223] Unrecognized hibernate image header format!
[  402.390040][ T3409] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  402.395920][T26223] PM: hibernation: Image mismatch: architecture specific data
[  402.417617][T26225] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  402.454929][T26223] loop3: detected capacity change from 0 to 512
[  402.462018][T26223] EXT4-fs: dax option not supported
[  402.471713][T26223] netlink: 168 bytes leftover after parsing attributes in process `syz.3.7957'.
[  402.481945][T25289] bond1 (unregistering): (slave gretap1): Releasing active interface
[  402.498275][T25289] dvmrp8 (unregistering): left allmulticast mode
[  402.573639][T25289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  402.584109][T25289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  402.594250][T25289] bond0 (unregistering): Released all slaves
[  402.604340][T25289] bond1 (unregistering): Released all slaves
[  402.616813][T26001] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  402.643759][ T3499] IPVS: starting estimator thread 0...
[  402.727552][T26237] FAULT_INJECTION: forcing a failure.
[  402.727552][T26237] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  402.740971][T26237] CPU: 0 UID: 0 PID: 26237 Comm: gtp Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  402.741026][T26237] Tainted: [W]=WARN
[  402.741033][T26237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  402.741046][T26237] Call Trace:
[  402.741053][T26237]  <TASK>
[  402.741060][T26237]  __dump_stack+0x1d/0x30
[  402.741132][T26237]  dump_stack_lvl+0x95/0xd0
[  402.741154][T26237]  dump_stack+0x15/0x1b
[  402.741171][T26237]  should_fail_ex+0x265/0x280
[  402.741193][T26237]  should_fail+0xb/0x20
[  402.741242][T26237]  should_fail_usercopy+0x1a/0x20
[  402.741262][T26237]  strncpy_from_user+0x27/0x260
[  402.741293][T26237]  getname_flags+0xae/0x3b0
[  402.741319][T26237]  path_setxattrat+0x223/0x310
[  402.741435][T26237]  __x64_sys_setxattr+0x6e/0x90
[  402.741454][T26237]  x64_sys_call+0xf1e/0x3000
[  402.741479][T26237]  do_syscall_64+0xca/0x2b0
[  402.741587][T26237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.741676][T26237] RIP: 0033:0x7f241facf749
[  402.741694][T26237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  402.741714][T26237] RSP: 002b:00007f241e52f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  402.741734][T26237] RAX: ffffffffffffffda RBX: 00007f241fd25fa0 RCX: 00007f241facf749
[  402.741768][T26237] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000200000000300
[  402.741779][T26237] RBP: 00007f241e52f090 R08: 0000000000000000 R09: 0000000000000000
[  402.741790][T26237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  402.741803][T26237] R13: 00007f241fd26038 R14: 00007f241fd25fa0 R15: 00007ffebdd42348
[  402.741824][T26237]  </TASK>
[  402.939203][T26231] IPVS: using max 2640 ests per chain, 132000 per kthread
[  403.001230][T26243] loop3: detected capacity change from 0 to 1024
[  403.026081][T25289] hsr_slave_0: left promiscuous mode
[  403.036989][T25289] hsr_slave_1: left promiscuous mode
[  403.047601][T25289] veth1_macvtap: left promiscuous mode
[  403.053487][T25289] veth0_macvtap: left promiscuous mode
[  403.061397][T26243] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  403.074469][T26243] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #11: comm syz.3.7965: iget: bogus i_mode (1)
[  403.093012][T25289] veth1_vlan: left promiscuous mode
[  403.112012][T25289] veth0_vlan: left promiscuous mode
[  403.165566][T26243] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.7965: couldn't read orphan inode 11 (err -117)
[  403.306054][T26243] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  403.334763][T22233] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  403.414587][T26243] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  403.444098][T25289] team0 (unregistering): Port device team_slave_1 removed
[  403.466030][T25289] team0 (unregistering): Port device team_slave_0 removed
[  403.650237][ T8017] smc: removing ib device syz1
[  403.664870][ T3499] lo speed is unknown, defaulting to 1000
[  403.671564][ T3499] syz1: Port: 1 Link DOWN
[  403.716026][T26251] random: crng reseeded on system resumption
[  403.903520][T26251] loop6: detected capacity change from 0 to 512
[  403.960336][T26251] EXT4-fs: dax option not supported
[  404.092745][T26251] loop6: detected capacity change from 0 to 1024
[  404.099323][T26254] loop7: detected capacity change from 0 to 128
[  404.149862][T26254] vfat: Unknown parameter '18446744073709551615'
[  404.157035][T26251] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  404.168853][T26251] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  404.221966][T26259] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7970'.
[  404.266046][T26251] JBD2: no valid journal superblock found
[  404.271851][T26251] EXT4-fs (loop6): Could not load journal inode
[  404.333713][T26251] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  404.377810][T26251] netlink: 168 bytes leftover after parsing attributes in process `syz.6.7968'.
[  404.566905][T26269] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4)
[  404.573447][T26269] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  404.581131][T26269] vhci_hcd vhci_hcd.0: Device attached
[  404.764972][T26276] 9p: Bad value for 'source'
[  404.766432][T26269] SELinux: failed to load policy
[  404.801927][T14960] vhci_hcd vhci_hcd.6: vhci_device speed not set
[  404.843143][T26271] vhci_hcd: connection closed
[  404.843290][T25303] vhci_hcd vhci_hcd.6: stop threads
[  404.853685][T25303] vhci_hcd vhci_hcd.6: release socket
[  404.859136][T25303] vhci_hcd vhci_hcd.6: disconnect device
[  404.863306][T14960] usb 13-1: new full-speed USB device number 10 using vhci_hcd
[  404.867840][T26284] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7976'.
[  404.874759][T14960] usb 13-1: enqueue for inactive port 0
[  404.885204][T26286] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7979'.
[  404.896061][T26286] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7979'.
[  404.929262][T14960] usb 13-1: enqueue for inactive port 0
[  404.934945][T14960] usb 13-1: enqueue for inactive port 0
[  404.994550][T26290] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7981'.
[  405.032847][T14960] vhci_hcd vhci_hcd.6: vhci_device speed not set
[  405.210283][T26293] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7982'.
[  405.406276][T26295] random: crng reseeded on system resumption
[  405.414889][T26295] Unrecognized hibernate image header format!
[  405.421028][T26295] PM: hibernation: Image mismatch: architecture specific data
[  405.444162][T26295] loop7: detected capacity change from 0 to 512
[  405.457960][T26295] EXT4-fs: dax option not supported
[  405.485286][T26295] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  405.496397][T26295] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  405.540121][T26295] JBD2: no valid journal superblock found
[  405.546058][T26295] EXT4-fs (loop7): Could not load journal inode
[  405.743823][T26295] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  405.763562][T26295] netlink: 168 bytes leftover after parsing attributes in process `syz.7.7983'.
[  406.161820][T26279] Set syz1 is full, maxelem 65536 reached
[  406.265322][T26323] netlink: 8 bytes leftover after parsing attributes in process `gtp'.
[  406.432594][T26323] lo speed is unknown, defaulting to 1000
[  407.243728][   T29] kauditd_printk_skb: 622 callbacks suppressed
[  407.243743][   T29] audit: type=1326 audit(1768122710.716:133797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26330 comm="syz.9.7995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd2e80265e7 code=0x7ffc0000
[  407.308608][   T29] audit: type=1326 audit(1768122710.716:133798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26330 comm="syz.9.7995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd2e7fcb829 code=0x7ffc0000
[  407.332264][   T29] audit: type=1326 audit(1768122710.716:133799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26330 comm="syz.9.7995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2e802f749 code=0x7ffc0000
[  407.356039][   T29] audit: type=1326 audit(1768122710.716:133800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26330 comm="syz.9.7995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2e802f749 code=0x7ffc0000
[  407.379843][   T29] audit: type=1326 audit(1768122710.725:133801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26330 comm="syz.9.7995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd2e80265e7 code=0x7ffc0000
[  407.403462][   T29] audit: type=1326 audit(1768122710.725:133802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26330 comm="syz.9.7995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd2e7fcb829 code=0x7ffc0000
[  407.427199][   T29] audit: type=1326 audit(1768122710.725:133803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26330 comm="syz.9.7995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2e802f749 code=0x7ffc0000
[  407.451085][   T29] audit: type=1326 audit(1768122710.735:133804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26330 comm="syz.9.7995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd2e80265e7 code=0x7ffc0000
[  407.474687][   T29] audit: type=1326 audit(1768122710.735:133805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26330 comm="syz.9.7995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd2e7fcb829 code=0x7ffc0000
[  407.498288][   T29] audit: type=1326 audit(1768122710.735:133806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26330 comm="syz.9.7995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2e802f749 code=0x7ffc0000
[  407.946756][T26375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  407.968886][T26380] netlink: 4124 bytes leftover after parsing attributes in process `syz.1.8005'.
[  407.982308][T26375] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  408.008619][T26375] set_capacity_and_notify: 1 callbacks suppressed
[  408.008637][T26375] loop6: detected capacity change from 0 to 1024
[  408.022712][T26375] EXT4-fs: Ignoring removed bh option
[  408.033390][T26375] EXT4-fs: inline encryption not supported
[  408.048578][T26375] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  408.049757][T26386] loop7: detected capacity change from 0 to 512
[  408.093234][T26375] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  408.109546][T26375] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 2: comm syz.6.8007: lblock 2 mapped to illegal pblock 2 (length 1)
[  408.125174][T26375] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 48: comm syz.6.8007: lblock 0 mapped to illegal pblock 48 (length 1)
[  408.154320][T26375] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.8007: Failed to acquire dquot type 0
[  408.165983][T26386] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  408.176375][T26386] EXT4-fs (loop7): orphan cleanup on readonly fs
[  408.201831][T26386] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #16: comm syz.7.8011: corrupted inode contents
[  408.217725][T26375] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  408.235372][T26386] EXT4-fs (loop7): Remounting filesystem read-only
[  408.245047][T26375] EXT4-fs error (device loop6): ext4_evict_inode:253: inode #11: comm syz.6.8007: mark_inode_dirty error
[  408.263532][T26386] EXT4-fs (loop7): 1 truncate cleaned up
[  408.269455][ T8012] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  408.280040][ T8012] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  408.303197][T26375] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  408.324308][ T8012] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started
[  408.335438][T26375] EXT4-fs (loop6): 1 orphan inode deleted
[  408.353993][ T8012] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:21: lblock 1 mapped to illegal pblock 1 (length 1)
[  408.369956][T26375] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  408.383167][ T8012] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:21: Failed to release dquot type 0
[  408.396392][T26375] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  408.406006][T26386] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-0000002a0000 ro without journal. Quota mode: writeback.
[  408.418964][T26375] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz.6.8007: Invalid inode table block 1 in block_group 0
[  408.441328][T26375] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  408.471308][T22233] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-0000002a0000.
[  408.481147][T26375] EXT4-fs error (device loop6): ext4_quota_off:7270: inode #3: comm syz.6.8007: mark_inode_dirty error
[  408.515236][T26397] netlink: 'syz.7.8013': attribute type 1 has an invalid length.
[  408.530846][T26397] 8021q: adding VLAN 0 to HW filter on device bond0
[  408.548945][T26397] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8013'.
[  408.562999][T26401] loop3: detected capacity change from 0 to 512
[  408.570958][T26401] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  408.588213][T26397] team0 (unregistering): Port device team_slave_0 removed
[  408.598903][T26397] team0 (unregistering): Port device team_slave_1 removed
[  408.609052][T26401] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.8014: corrupted in-inode xattr: e_value out of bounds
[  408.626610][T26401] EXT4-fs (loop3): Remounting filesystem read-only
[  408.633703][T26397] team0 (unregistering): Port device dummy0 removed
[  408.643840][T26401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  408.665038][T26398] macvlan2: entered promiscuous mode
[  408.671166][T26398] macvlan2: entered allmulticast mode
[  408.677831][T26398] bond0: entered promiscuous mode
[  408.683907][T26398] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  408.703681][T26398] bond0: left promiscuous mode
[  408.718331][T26403] macvlan2: entered promiscuous mode
[  408.723692][T26403] macvlan2: entered allmulticast mode
[  408.730223][T26403] bond0: entered promiscuous mode
[  408.738024][T26403] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  408.757456][T26403] bond0: left promiscuous mode
[  408.770300][T14960] syz!: Port: 1 Link DOWN
[  408.922726][T26412] loop7: detected capacity change from 0 to 128
[  408.930487][T26412] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  408.943272][T26412] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  408.981257][T26412] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received
[  408.991443][T20595] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  409.099052][T26426] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[  409.105594][T26426] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  409.113403][T26426] vhci_hcd vhci_hcd.0: Device attached
[  409.187362][T26426] SELinux: failed to load policy
[  409.196190][T26426] 9p: Bad value for 'source'
[  409.210590][T26427] vhci_hcd: connection closed
[  409.210781][ T8012] vhci_hcd vhci_hcd.1: stop threads
[  409.220746][ T8012] vhci_hcd vhci_hcd.1: release socket
[  409.226169][ T8012] vhci_hcd vhci_hcd.1: disconnect device
[  409.260270][T26435] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8026'.
[  409.269287][T26435] netlink: 108 bytes leftover after parsing attributes in process `syz.3.8026'.
[  409.279675][T26435] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8026'.
[  409.288721][T26435] netlink: 108 bytes leftover after parsing attributes in process `syz.3.8026'.
[  409.297812][T26435] netlink: 84 bytes leftover after parsing attributes in process `syz.3.8026'.
[  409.312510][T26436] netlink: 4124 bytes leftover after parsing attributes in process `syz.6.8025'.
[  409.322420][T26435] loop3: detected capacity change from 0 to 512
[  409.399480][T26442] loop3: detected capacity change from 0 to 512
[  409.420907][T26442] EXT4-fs (loop3): too many log groups per flexible block group
[  409.440025][T26442] EXT4-fs (loop3): failed to initialize mballoc (-12)
[  409.457097][T26442] EXT4-fs (loop3): mount failed
[  409.527913][T26446] loop3: detected capacity change from 0 to 512
[  409.542987][T26446] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  409.573610][T26446] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.8030: corrupted in-inode xattr: e_value out of bounds
[  409.607225][T26449] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8031'.
[  409.616175][T26449] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8031'.
[  409.636270][T26446] EXT4-fs (loop3): Remounting filesystem read-only
[  409.658237][T26446] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  409.987986][T26467] loop9: detected capacity change from 0 to 512
[  409.994924][T26467] EXT4-fs: Ignoring removed oldalloc option
[  410.001185][T26467] EXT4-fs: Ignoring removed i_version option
[  410.007254][T26467] EXT4-fs: Ignoring removed nomblk_io_submit option
[  410.028377][T26469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  410.036855][T26467] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  410.049340][T26467] EXT4-fs (loop9): 1 truncate cleaned up
[  410.058695][T26469] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  410.079612][T20595] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  410.111808][T26467] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  410.232666][T26480] FAULT_INJECTION: forcing a failure.
[  410.232666][T26480] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  410.245999][T26480] CPU: 1 UID: 0 PID: 26480 Comm: syz.3.8044 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  410.246029][T26480] Tainted: [W]=WARN
[  410.246051][T26480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  410.246064][T26480] Call Trace:
[  410.246071][T26480]  <TASK>
[  410.246080][T26480]  __dump_stack+0x1d/0x30
[  410.246105][T26480]  dump_stack_lvl+0x95/0xd0
[  410.246123][T26480]  dump_stack+0x15/0x1b
[  410.246207][T26480]  should_fail_ex+0x265/0x280
[  410.246227][T26480]  should_fail+0xb/0x20
[  410.246302][T26480]  should_fail_usercopy+0x1a/0x20
[  410.246323][T26480]  _copy_to_user+0x20/0xa0
[  410.246346][T26480]  simple_read_from_buffer+0xb5/0x130
[  410.246364][T26480]  proc_fail_nth_read+0x10e/0x150
[  410.246453][T26480]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  410.246479][T26480]  vfs_read+0x1a8/0x770
[  410.246493][T26480]  ? __rcu_read_unlock+0x4f/0x70
[  410.246594][T26480]  ? __fget_files+0x184/0x1c0
[  410.246617][T26480]  ? mutex_lock+0x58/0x90
[  410.246640][T26480]  ksys_read+0xda/0x1a0
[  410.246657][T26480]  __x64_sys_read+0x40/0x50
[  410.246716][T26480]  x64_sys_call+0x2889/0x3000
[  410.246737][T26480]  do_syscall_64+0xca/0x2b0
[  410.246765][T26480]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  410.246789][T26480] RIP: 0033:0x7fb3b453e15c
[  410.246845][T26480] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  410.246864][T26480] RSP: 002b:00007fb3b2fa7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  410.246882][T26480] RAX: ffffffffffffffda RBX: 00007fb3b4795fa0 RCX: 00007fb3b453e15c
[  410.246893][T26480] RDX: 000000000000000f RSI: 00007fb3b2fa70a0 RDI: 0000000000000007
[  410.246965][T26480] RBP: 00007fb3b2fa7090 R08: 0000000000000000 R09: 0000000000000000
[  410.246979][T26480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  410.246992][T26480] R13: 00007fb3b4796038 R14: 00007fb3b4795fa0 R15: 00007ffe7f5c9428
[  410.247013][T26480]  </TASK>
[  410.886370][T26491] lo speed is unknown, defaulting to 1000
[  410.963700][T26491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  410.972247][T26491] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  411.031278][T26001] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  411.452778][T26505] siw: device registration error -23
[  412.190135][T26514] loop6: detected capacity change from 0 to 512
[  412.198423][T26531] loop7: detected capacity change from 0 to 512
[  412.204978][T23888] Bluetooth: hci0: Frame reassembly failed (-84)
[  412.217323][T26514] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  412.229795][T26531] journal_path: Lookup failure for './file0'
[  412.235816][T26531] EXT4-fs: error: could not find journal device path
[  412.334351][T26534] EXT4-fs: Ignoring removed nomblk_io_submit option
[  412.344049][T26534] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  412.439162][T22233] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  412.487945][T26539] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  412.762513][   T29] kauditd_printk_skb: 436 callbacks suppressed
[  412.762537][   T29] audit: type=1326 audit(1768122715.879:134234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26546 comm="syz.9.8068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2e802f749 code=0x7ffc0000
[  412.794255][   T29] audit: type=1326 audit(1768122715.879:134235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26546 comm="syz.9.8068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2e802f749 code=0x7ffc0000
[  412.818837][   T29] audit: type=1326 audit(1768122715.879:134236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26546 comm="syz.9.8068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2e802f749 code=0x7ffc0000
[  412.842604][   T29] audit: type=1326 audit(1768122715.879:134237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26546 comm="syz.9.8068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2e802f749 code=0x7ffc0000
[  412.867059][   T29] audit: type=1326 audit(1768122715.879:134238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26546 comm="syz.9.8068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2e802f749 code=0x7ffc0000
[  412.890733][   T29] audit: type=1326 audit(1768122715.879:134239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26546 comm="syz.9.8068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd2e802f749 code=0x7ffc0000
[  412.915021][   T29] audit: type=1326 audit(1768122715.889:134240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26546 comm="syz.9.8068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2e802f749 code=0x7ffc0000
[  412.938779][   T29] audit: type=1326 audit(1768122715.889:134241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26546 comm="syz.9.8068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2e802f749 code=0x7ffc0000
[  412.963553][   T29] audit: type=1326 audit(1768122715.889:134242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26546 comm="syz.9.8068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fd2e802f749 code=0x7ffc0000
[  412.987222][   T29] audit: type=1326 audit(1768122715.889:134243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26546 comm="syz.9.8068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2e802f749 code=0x7ffc0000
[  413.373630][T22233] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  413.681470][T26590] set_capacity_and_notify: 2 callbacks suppressed
[  413.681556][T26590] loop7: detected capacity change from 0 to 128
[  413.852874][T26592] binfmt_misc: register: failed to install interpreter file ./file0
[  413.887955][T26594] loop7: detected capacity change from 0 to 1024
[  413.901596][T26594] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  414.004571][T26600] __nla_validate_parse: 5 callbacks suppressed
[  414.004663][T26600] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8089'.
[  414.261630][T26612] xt_hashlimit: max too large, truncated to 1048576
[  414.285738][T26612] xt_CT: You must specify a L4 protocol and not use inversions on it
[  414.345948][ T3632] Bluetooth: hci0: command 0x1003 tx timeout
[  414.346214][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  414.362583][T26616] lo speed is unknown, defaulting to 1000
[  414.555710][T26622] loop9: detected capacity change from 0 to 512
[  414.580141][T26622] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  414.649814][T26622] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  414.718047][T26622] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  414.785664][T26628] lo speed is unknown, defaulting to 1000
[  414.842669][T22233] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  414.843366][T26001] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  414.894050][T26628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8098'.
[  414.968240][T26636] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  414.974939][T26636] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  414.982695][T26636] vhci_hcd vhci_hcd.0: Device attached
[  415.003331][T26628] pimreg: entered allmulticast mode
[  415.038191][T26628] pimreg: left allmulticast mode
[  415.112028][T26636] SELinux: failed to load policy
[  415.133441][T26637] vhci_hcd: connection closed
[  415.139058][ T8029] vhci_hcd vhci_hcd.3: stop threads
[  415.149166][ T8029] vhci_hcd vhci_hcd.3: release socket
[  415.154561][ T8029] vhci_hcd vhci_hcd.3: disconnect device
[  415.506612][T26647] siw: device registration error -23
[  415.663496][T26649] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8105'.
[  415.672544][T26649] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  415.731267][T26649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26649 comm=syz.6.8105
[  415.985188][T26658] loop3: detected capacity change from 0 to 128
[  416.048862][T26658] vfat: Unknown parameter '18446744073709551615'
[  416.056234][T26661] FAULT_INJECTION: forcing a failure.
[  416.056234][T26661] name failslab, interval 1, probability 0, space 0, times 0
[  416.069124][T26661] CPU: 0 UID: 0 PID: 26661 Comm: syz.7.8110 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  416.069156][T26661] Tainted: [W]=WARN
[  416.069163][T26661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  416.069177][T26661] Call Trace:
[  416.069184][T26661]  <TASK>
[  416.069193][T26661]  __dump_stack+0x1d/0x30
[  416.069236][T26661]  dump_stack_lvl+0x95/0xd0
[  416.069298][T26661]  dump_stack+0x15/0x1b
[  416.069320][T26661]  should_fail_ex+0x265/0x280
[  416.069401][T26661]  should_failslab+0x8c/0xb0
[  416.069422][T26661]  kmem_cache_alloc_noprof+0x69/0x4b0
[  416.069446][T26661]  ? audit_log_start+0x342/0x720
[  416.069470][T26661]  audit_log_start+0x342/0x720
[  416.069494][T26661]  audit_seccomp+0x48/0x100
[  416.069592][T26661]  ? __seccomp_filter+0x832/0x1260
[  416.069621][T26661]  __seccomp_filter+0x843/0x1260
[  416.069652][T26661]  ? _raw_spin_unlock+0x26/0x50
[  416.069726][T26661]  ? finish_task_switch+0x7a/0x2a0
[  416.069762][T26661]  __secure_computing+0x82/0x150
[  416.069792][T26661]  syscall_trace_enter+0xcf/0x1e0
[  416.069818][T26661]  do_syscall_64+0xa4/0x2b0
[  416.069848][T26661]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.069947][T26661] RIP: 0033:0x7fc53374f749
[  416.069964][T26661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  416.070040][T26661] RSP: 002b:00007fc5321af038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ac
[  416.070058][T26661] RAX: ffffffffffffffda RBX: 00007fc5339a5fa0 RCX: 00007fc53374f749
[  416.070073][T26661] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  416.070086][T26661] RBP: 00007fc5321af090 R08: 0000000000000000 R09: 0000000000000000
[  416.070100][T26661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  416.070188][T26661] R13: 00007fc5339a6038 R14: 00007fc5339a5fa0 R15: 00007ffd5155d998
[  416.070216][T26661]  </TASK>
[  416.596034][T26676] loop7: detected capacity change from 0 to 1764
[  416.604021][T26676] iso9660: Unknown parameter '18446744073709551615'
[  416.876036][T26695] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8123'.
[  416.884099][T26696] netlink: 56 bytes leftover after parsing attributes in process `syz.7.8120'.
[  416.907207][T26695] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8123'.
[  417.008280][T26689] SELinux: failed to load policy
[  417.369661][T26711] siw: device registration error -23
[  417.498282][T26717] loop7: detected capacity change from 0 to 164
[  417.508841][T26717] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  417.519233][T26717] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  417.528176][T26717] Symlink component flag not implemented
[  417.534715][T26717] Symlink component flag not implemented
[  417.541174][T26717] Symlink component flag not implemented (7)
[  417.547251][T26717] Symlink component flag not implemented (116)
[  417.577860][T26720] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  417.599897][T26720] rock: directory entry would overflow storage
[  417.606103][T26720] rock: sig=0x4f50, size=4, remaining=3
[  417.611719][T26720] iso9660: Corrupted directory entry in block 4 of inode 1792
[  417.798836][T26726] FAULT_INJECTION: forcing a failure.
[  417.798836][T26726] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  417.812118][T26726] CPU: 1 UID: 0 PID: 26726 Comm: syz.7.8136 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  417.812152][T26726] Tainted: [W]=WARN
[  417.812160][T26726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  417.812171][T26726] Call Trace:
[  417.812177][T26726]  <TASK>
[  417.812198][T26726]  __dump_stack+0x1d/0x30
[  417.812225][T26726]  dump_stack_lvl+0x95/0xd0
[  417.812291][T26726]  dump_stack+0x15/0x1b
[  417.812308][T26726]  should_fail_ex+0x265/0x280
[  417.812354][T26726]  should_fail+0xb/0x20
[  417.812374][T26726]  should_fail_usercopy+0x1a/0x20
[  417.812399][T26726]  _copy_from_iter+0xcf/0xe70
[  417.812425][T26726]  ? __build_skb_around+0x164/0x1c0
[  417.812458][T26726]  ? __alloc_skb+0x396/0x4b0
[  417.812477][T26726]  ? __alloc_skb+0x228/0x4b0
[  417.812553][T26726]  pfkey_sendmsg+0x126/0x900
[  417.812585][T26726]  ? avc_has_perm+0xf7/0x180
[  417.812634][T26726]  ? selinux_socket_sendmsg+0x175/0x1b0
[  417.812657][T26726]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  417.812680][T26726]  __sock_sendmsg+0x145/0x180
[  417.812733][T26726]  ____sys_sendmsg+0x31e/0x4a0
[  417.812766][T26726]  ___sys_sendmsg+0x17b/0x1d0
[  417.812840][T26726]  __x64_sys_sendmsg+0xd4/0x160
[  417.812901][T26726]  x64_sys_call+0x17ba/0x3000
[  417.812927][T26726]  do_syscall_64+0xca/0x2b0
[  417.812958][T26726]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.812976][T26726] RIP: 0033:0x7fc53374f749
[  417.813051][T26726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  417.813109][T26726] RSP: 002b:00007fc5321af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  417.813129][T26726] RAX: ffffffffffffffda RBX: 00007fc5339a5fa0 RCX: 00007fc53374f749
[  417.813143][T26726] RDX: 0000000000048000 RSI: 0000200000000080 RDI: 0000000000000004
[  417.813227][T26726] RBP: 00007fc5321af090 R08: 0000000000000000 R09: 0000000000000000
[  417.813258][T26726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  417.813269][T26726] R13: 00007fc5339a6038 R14: 00007fc5339a5fa0 R15: 00007ffd5155d998
[  417.813293][T26726]  </TASK>
[  418.110008][   T29] kauditd_printk_skb: 1542 callbacks suppressed
[  418.110056][   T29] audit: type=1326 audit(1768122720.884:135784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26734 comm="syz.7.8140" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc53374f749 code=0x0
[  418.219646][   T29] audit: type=1400 audit(1768122720.987:135785): avc:  denied  { append } for  pid=26734 comm="syz.7.8140" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  418.245468][T26737] @: renamed from vlan0 (while UP)
[  418.255860][   T29] audit: type=1400 audit(1768122721.015:135786): avc:  denied  { ioctl } for  pid=26734 comm="syz.7.8140" path="socket:[91055]" dev="sockfs" ino=91055 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  418.281986][   T29] audit: type=1400 audit(1768122721.015:135787): avc:  denied  { read } for  pid=26734 comm="syz.7.8140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  418.301675][   T29] audit: type=1400 audit(1768122721.015:135788): avc:  denied  { shutdown } for  pid=26734 comm="syz.7.8140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  418.543735][   T29] audit: type=1326 audit(1768122721.286:135789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26741 comm="syz.3.8142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b453f749 code=0x7ffc0000
[  418.567579][   T29] audit: type=1326 audit(1768122721.286:135790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26741 comm="syz.3.8142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b453f749 code=0x7ffc0000
[  418.591347][   T29] audit: type=1326 audit(1768122721.286:135791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26741 comm="syz.3.8142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb3b453f749 code=0x7ffc0000
[  418.600566][T26744] loop6: detected capacity change from 0 to 1024
[  418.615063][   T29] audit: type=1326 audit(1768122721.286:135792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26741 comm="syz.3.8142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b453f749 code=0x7ffc0000
[  418.615232][   T29] audit: type=1326 audit(1768122721.286:135793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26741 comm="syz.3.8142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fb3b453f749 code=0x7ffc0000
[  418.671876][T26744] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  418.685136][T26744] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.8143: Invalid block bitmap block 0 in block_group 0
[  418.699350][T26744] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.8143: Failed to acquire dquot type 0
[  418.717415][T26744] EXT4-fs error (device loop6): ext4_free_blocks:6728: comm syz.6.8143: Freeing blocks not in datazone - block = 0, count = 4096
[  418.731127][T26744] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.8143: Invalid inode bitmap blk 0 in block_group 0
[  418.737600][T26749] FAULT_INJECTION: forcing a failure.
[  418.737600][T26749] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  418.750592][T26744] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem
[  418.757113][T26749] CPU: 0 UID: 0 PID: 26749 Comm: syz.3.8144 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  418.757145][T26749] Tainted: [W]=WARN
[  418.757151][T26749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  418.757162][T26749] Call Trace:
[  418.757168][T26749]  <TASK>
[  418.757193][T26749]  __dump_stack+0x1d/0x30
[  418.757214][T26749]  dump_stack_lvl+0x95/0xd0
[  418.757235][T26749]  dump_stack+0x15/0x1b
[  418.757256][T26749]  should_fail_ex+0x265/0x280
[  418.757280][T26749]  should_fail_alloc_page+0xf2/0x100
[  418.757366][T26749]  __alloc_frozen_pages_noprof+0x109/0x360
[  418.757458][T26749]  alloc_pages_mpol+0xb3/0x260
[  418.757488][T26749]  folio_alloc_noprof+0x97/0x150
[  418.757589][T26749]  filemap_alloc_folio_noprof+0x93/0x230
[  418.757613][T26749]  __filemap_get_folio_mpol+0x295/0x650
[  418.757636][T26749]  ? __kmalloc_noprof+0x2b4/0x5a0
[  418.757660][T26749]  aio_setup_ring+0x26f/0x760
[  418.757816][T26749]  ioctx_alloc+0x2aa/0x4c0
[  418.757843][T26749]  __se_sys_io_setup+0x6b/0x1b0
[  418.757867][T26749]  __x64_sys_io_setup+0x31/0x40
[  418.757976][T26749]  x64_sys_call+0x2a8e/0x3000
[  418.758035][T26749]  do_syscall_64+0xca/0x2b0
[  418.758069][T26749]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.758090][T26749] RIP: 0033:0x7fb3b453f749
[  418.758106][T26749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  418.758200][T26749] RSP: 002b:00007fb3b2fa7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[  418.758219][T26749] RAX: ffffffffffffffda RBX: 00007fb3b4795fa0 RCX: 00007fb3b453f749
[  418.758232][T26749] RDX: 0000000000000000 RSI: 0000200000002400 RDI: 00000000000008f0
[  418.758244][T26749] RBP: 00007fb3b2fa7090 R08: 0000000000000000 R09: 0000000000000000
[  418.758257][T26749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  418.758269][T26749] R13: 00007fb3b4796038 R14: 00007fb3b4795fa0 R15: 00007ffe7f5c9428
[  418.758364][T26749]  </TASK>
[  418.758590][T14834] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:61: Failed to release dquot type 0
[  418.766600][T26744] EXT4-fs (loop6): 1 orphan inode deleted
[  418.984760][T26744] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  419.016850][T19518] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  419.084206][T26767] lo speed is unknown, defaulting to 1000
[  419.141436][T26772] loop6: detected capacity change from 0 to 512
[  419.157751][T26772] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  419.185240][T26767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8151'.
[  419.286364][T26772] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  419.302078][T26779] siw: device registration error -23
[  419.320183][T26772] ext4 filesystem being mounted at /547/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  419.395973][T19518] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  419.565441][T26786] bridge_slave_0: left allmulticast mode
[  419.571188][T26786] bridge_slave_0: left promiscuous mode
[  419.577038][T26786] bridge0: port 1(bridge_slave_0) entered disabled state
[  419.590205][T26786] bridge_slave_1: left allmulticast mode
[  419.596084][T26786] bridge_slave_1: left promiscuous mode
[  419.601875][T26786] bridge0: port 2(bridge_slave_1) entered disabled state
[  419.614180][T26787] netlink: 'syz.7.8159': attribute type 10 has an invalid length.
[  419.623363][T26787] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8159'.
[  419.639052][T26786] .`: (slave bond_slave_0): Releasing backup interface
[  419.651915][T26786] .`: (slave bond_slave_1): Releasing backup interface
[  419.664650][T26786] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  419.672156][T26786] batman_adv: batadv0: Removing interface: batadv_slave_0
[  419.684074][T26786] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  419.691569][T26786] batman_adv: batadv0: Removing interface: batadv_slave_1
[  419.703405][T26786] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  419.721941][T26787] batman_adv: batadv0: Adding interface: veth1_vlan
[  419.728613][T26787] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  419.757792][T26787] batman_adv: batadv0: Interface activated: veth1_vlan
[  419.799638][T26788] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8159'.
[  419.808617][T26788] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8159'.
[  419.818443][T26788] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8159'.
[  419.827404][T26788] netlink: 2 bytes leftover after parsing attributes in process `syz.7.8159'.
[  419.859546][T26788] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8159'.
[  420.275952][T26798] loop6: detected capacity change from 0 to 512
[  420.339374][T26798] EXT4-fs (loop6): too many log groups per flexible block group
[  420.396769][T26798] EXT4-fs (loop6): failed to initialize mballoc (-12)
[  420.438421][T26798] EXT4-fs (loop6): mount failed
[  420.688819][T26842] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8182'.
[  420.689186][T26829] netlink: 4124 bytes leftover after parsing attributes in process `syz.6.8176'.
[  420.723485][T26845] loop3: detected capacity change from 0 to 512
[  420.760889][T26845] EXT4-fs (loop3): too many log groups per flexible block group
[  420.770791][T26845] EXT4-fs (loop3): failed to initialize mballoc (-12)
[  420.777910][T26845] EXT4-fs (loop3): mount failed
[  420.875551][T26859] pimreg: entered allmulticast mode
[  420.916639][T26859] pimreg: left allmulticast mode
[  421.772714][T26883] loop3: detected capacity change from 0 to 512
[  421.789118][T26883] EXT4-fs (loop3): too many log groups per flexible block group
[  421.805023][T26883] EXT4-fs (loop3): failed to initialize mballoc (-12)
[  421.818990][T26883] EXT4-fs (loop3): mount failed
[  422.543631][T26909] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8207'.
[  422.716896][T26919] loop6: detected capacity change from 0 to 1024
[  422.733864][T26919] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  422.818529][T26923] siw: device registration error -23
[  423.163844][T26930] loop3: detected capacity change from 0 to 256
[  423.186739][T26930] vfat: Bad value for 'fmask'
[  423.411326][T26936] loop7: detected capacity change from 0 to 256
[  423.424033][T26932] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[  423.430573][T26932] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  423.438247][T26932] vhci_hcd vhci_hcd.0: Device attached
[  423.462493][T26936] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8215'.
[  423.575439][T26940] macvtap1: entered promiscuous mode
[  423.580814][T26940] macvtap1: entered allmulticast mode
[  423.590204][T26940] dummy0: entered promiscuous mode
[  423.596670][T26940] dummy0: entered allmulticast mode
[  423.602447][   T29] kauditd_printk_skb: 387 callbacks suppressed
[  423.602459][   T29] audit: type=1326 audit(1768122726.019:136178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26931 comm="syz.3.8214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b453f749 code=0x7ffc0000
[  423.647045][T26940] team0: Device macvtap1 failed to register rx_handler
[  423.657392][ T3389] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  423.664359][T19518] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  423.673767][T26940] dummy0: left allmulticast mode
[  423.687174][T26940] dummy0: left promiscuous mode
[  423.729566][   T29] audit: type=1326 audit(1768122726.057:136179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26931 comm="syz.3.8214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b453f749 code=0x7ffc0000
[  423.753597][   T29] audit: type=1326 audit(1768122726.057:136180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26931 comm="syz.3.8214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b453f749 code=0x7ffc0000
[  423.777316][   T29] audit: type=1326 audit(1768122726.057:136181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26931 comm="syz.3.8214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b453f749 code=0x7ffc0000
[  423.801005][   T29] audit: type=1326 audit(1768122726.057:136182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26931 comm="syz.3.8214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b453f749 code=0x7ffc0000
[  423.824734][   T29] audit: type=1326 audit(1768122726.057:136183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26931 comm="syz.3.8214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3b453f749 code=0x7ffc0000
[  423.848513][   T29] audit: type=1326 audit(1768122726.057:136184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26931 comm="syz.3.8214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b453f749 code=0x7ffc0000
[  423.872162][   T29] audit: type=1326 audit(1768122726.057:136185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26931 comm="syz.3.8214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b453f749 code=0x7ffc0000
[  423.895873][   T29] audit: type=1326 audit(1768122726.057:136186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26931 comm="syz.3.8214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b453f749 code=0x7ffc0000
[  423.919613][   T29] audit: type=1326 audit(1768122726.057:136187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26931 comm="syz.3.8214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b453f749 code=0x7ffc0000
[  423.945363][ T3389] usb 7-1: new full-speed USB device number 13 using vhci_hcd
[  423.972759][T26937] 9p: Bad value for 'source'
[  423.987108][T26933] SELinux: failed to load policy
[  423.998926][T26936] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  424.008524][T26936] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  424.018256][T26934] vhci_hcd: connection reset by peer
[  424.031370][ T7997] vhci_hcd vhci_hcd.3: stop threads
[  424.036812][ T7997] vhci_hcd vhci_hcd.3: release socket
[  424.042286][ T7997] vhci_hcd vhci_hcd.3: disconnect device
[  424.106393][T26950] loop6: detected capacity change from 0 to 512
[  424.123705][T26951] loop7: detected capacity change from 0 to 512
[  424.129149][T26950] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  424.141260][T26950] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.8219: corrupted in-inode xattr: e_value out of bounds
[  424.156375][T26950] EXT4-fs (loop6): Remounting filesystem read-only
[  424.163525][T26950] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  424.177471][T26951] EXT4-fs (loop7): too many log groups per flexible block group
[  424.185315][T26951] EXT4-fs (loop7): failed to initialize mballoc (-12)
[  424.192158][T26951] EXT4-fs (loop7): mount failed
[  424.198070][T19518] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  424.228462][T26960] random: crng reseeded on system resumption
[  424.239773][T26960] Unrecognized hibernate image header format!
[  424.245917][T26960] PM: hibernation: Image mismatch: architecture specific data
[  424.283354][T26960] loop7: detected capacity change from 0 to 512
[  424.306162][T26960] EXT4-fs: dax option not supported
[  424.340854][T26960] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  424.351839][T26960] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  424.366076][T26960] JBD2: no valid journal superblock found
[  424.371852][T26960] EXT4-fs (loop7): Could not load journal inode
[  424.387559][T26960] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  424.694098][T26979] Cannot find del_set index 0 as target
[  424.703410][T26980] @: renamed from vlan0 (while UP)
[  424.766309][T26988] set_capacity_and_notify: 1 callbacks suppressed
[  424.766323][T26988] loop7: detected capacity change from 0 to 512
[  424.782071][T26988] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  424.792769][T26988] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.8234: corrupted in-inode xattr: e_value out of bounds
[  424.807704][T26988] EXT4-fs (loop7): Remounting filesystem read-only
[  424.814825][T26988] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  424.840610][T22233] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  424.859097][T26991] netlink: 'syz.7.8236': attribute type 10 has an invalid length.
[  425.000403][T26997] random: crng reseeded on system resumption
[  425.008886][T26997] Unrecognized hibernate image header format!
[  425.014996][T26997] PM: hibernation: Image mismatch: architecture specific data
[  425.030918][T26997] loop7: detected capacity change from 0 to 512
[  425.041275][T26997] EXT4-fs: dax option not supported
[  425.043908][T27001] loop9: detected capacity change from 0 to 512
[  425.054261][T26997] loop7: detected capacity change from 0 to 1024
[  425.054582][T27001] EXT4-fs: dax option not supported
[  425.066151][T26997] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  425.074745][T27001] loop9: detected capacity change from 0 to 1024
[  425.077099][T26997] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  425.083988][T27001] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  425.095838][T26997] JBD2: no valid journal superblock found
[  425.104743][T27001] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  425.109729][T26997] EXT4-fs (loop7): Could not load journal inode
[  425.120414][T27001] JBD2: no valid journal superblock found
[  425.131263][T27001] EXT4-fs (loop9): Could not load journal inode
[  425.146791][T27001] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  425.157039][T27001] __nla_validate_parse: 4 callbacks suppressed
[  425.157055][T27001] netlink: 168 bytes leftover after parsing attributes in process `syz.9.8240'.
[  425.160929][T26997] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  425.184307][T26997] netlink: 168 bytes leftover after parsing attributes in process `syz.7.8239'.
[  425.210511][T27003] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8241'.
[  425.219469][T27003] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8241'.
[  425.228755][T27003] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8241'.
[  425.237687][T27003] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8241'.
[  425.369388][T27024] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8249'.
[  425.423367][T27021] lo speed is unknown, defaulting to 1000
[  425.523432][T27034] netlink: 4124 bytes leftover after parsing attributes in process `syz.3.8252'.
[  425.550247][T27029] lo speed is unknown, defaulting to 1000
[  425.563758][T27038] can0: slcan on ttyS3.
[  425.612065][T27044] tmpfs: Bad value for 'mpol'
[  425.805954][T27047] siw: device registration error -23
[  426.310734][T27004] can0 (unregistered): slcan off ttyS3.
[  426.525760][T27053] loop7: detected capacity change from 0 to 1024
[  426.547239][T27053] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  426.777885][T27057] loop9: detected capacity change from 0 to 512
[  426.792036][T27057] EXT4-fs (loop9): too many log groups per flexible block group
[  426.800079][T27057] EXT4-fs (loop9): failed to initialize mballoc (-12)
[  426.807759][T27057] EXT4-fs (loop9): mount failed
[  426.949870][T27066] loop6: detected capacity change from 0 to 164
[  426.957483][T27066] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  426.967386][T27066] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  426.976574][T27066] Symlink component flag not implemented
[  426.982342][T27066] Symlink component flag not implemented
[  426.988969][T27066] Symlink component flag not implemented (7)
[  426.995772][T27066] Symlink component flag not implemented (116)
[  427.022223][T27068] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8262'.
[  427.104361][T27070] loop9: detected capacity change from 0 to 1024
[  427.123682][T27070] EXT4-fs: inline encryption not supported
[  427.132511][T27070] EXT4-fs (loop9): can't mount with journal_async_commit, fs mounted w/o journal
[  427.207157][T27074] random: crng reseeded on system resumption
[  427.217188][T27074] Unrecognized hibernate image header format!
[  427.223392][T27074] PM: hibernation: Image mismatch: architecture specific data
[  427.238949][T27074] loop6: detected capacity change from 0 to 512
[  427.245685][T27074] EXT4-fs: dax option not supported
[  427.276551][T27074] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  427.288352][T27074] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  427.341557][T27074] JBD2: no valid journal superblock found
[  427.348374][T27074] EXT4-fs (loop6): Could not load journal inode
[  427.428019][T22233] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  427.440406][T27074] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  427.451835][T27095] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8274'.
[  427.565272][T27097] lo speed is unknown, defaulting to 1000
[  427.652919][T27106] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  427.672421][T27106] EXT4-fs (loop6): orphan cleanup on readonly fs
[  427.688288][T27106] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.8278: Failed to acquire dquot type 1
[  427.701290][T27106] EXT4-fs (loop6): Remounting filesystem read-only
[  427.707888][T27106] EXT4-fs (loop6): 1 truncate cleaned up
[  427.714865][T27106] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  427.765897][T19518] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  427.821728][T27097] pimreg: entered allmulticast mode
[  427.841639][T27121] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.8282: bad orphan inode 11862016
[  427.853871][T27121] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  427.870372][T27121] ext4 filesystem being mounted at /566/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  427.981712][T27130] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  428.000487][T27130] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  428.011379][T27130] Symlink component flag not implemented
[  428.017021][T27130] Symlink component flag not implemented
[  428.023736][T27130] Symlink component flag not implemented (7)
[  428.029861][T27130] Symlink component flag not implemented (116)
[  428.035612][T27132] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  428.084159][T22905] pimreg (unregistering): left allmulticast mode
[  428.112447][T27136] EXT4-fs (loop7): too many log groups per flexible block group
[  428.123689][T27136] EXT4-fs (loop7): failed to initialize mballoc (-12)
[  428.140372][T27136] EXT4-fs (loop7): mount failed
[  428.156523][T19518] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  428.203603][T27142] EXT4-fs (loop6): too many log groups per flexible block group
[  428.212656][T27142] EXT4-fs (loop6): failed to initialize mballoc (-12)
[  428.219496][T27142] EXT4-fs (loop6): mount failed
[  428.291513][T27152] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  428.310581][T27152] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  428.324181][T27152] Symlink component flag not implemented
[  428.330049][T27152] Symlink component flag not implemented
[  428.340499][T27152] Symlink component flag not implemented (7)
[  428.346557][T27152] Symlink component flag not implemented (116)
[  428.355911][T27152] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  428.364921][T27152] rock: directory entry would overflow storage
[  428.371111][T27152] rock: sig=0x4f50, size=4, remaining=3
[  428.377748][T27152] iso9660: Corrupted directory entry in block 4 of inode 1792
[  428.452706][T27163] random: crng reseeded on system resumption
[  428.464785][T27163] Unrecognized hibernate image header format!
[  428.471723][T27163] PM: hibernation: Image mismatch: architecture specific data
[  428.485131][T27163] EXT4-fs: dax option not supported
[  428.498170][T27163] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  428.509961][T27163] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  428.526247][T27163] JBD2: no valid journal superblock found
[  428.532027][T27163] EXT4-fs (loop6): Could not load journal inode
[  428.562968][T27163] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  428.643609][T27177] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  428.674358][T27177] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  428.713419][T27177] ext4 filesystem being mounted at /367/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  428.820351][T22233] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  428.898771][T20595] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  429.148971][T27198] FAULT_INJECTION: forcing a failure.
[  429.148971][T27198] name failslab, interval 1, probability 0, space 0, times 0
[  429.161723][T27198] CPU: 0 UID: 0 PID: 27198 Comm: syz.1.8310 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  429.161754][T27198] Tainted: [W]=WARN
[  429.161828][T27198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  429.161840][T27198] Call Trace:
[  429.161847][T27198]  <TASK>
[  429.161854][T27198]  __dump_stack+0x1d/0x30
[  429.162048][T27198]  dump_stack_lvl+0x95/0xd0
[  429.162071][T27198]  dump_stack+0x15/0x1b
[  429.162102][T27198]  should_fail_ex+0x265/0x280
[  429.162147][T27198]  should_failslab+0x8c/0xb0
[  429.162165][T27198]  __kvmalloc_node_noprof+0x149/0x6b0
[  429.162265][T27198]  ? __nf_hook_entries_try_shrink+0x265/0x460
[  429.162301][T27198]  ? __kvmalloc_node_noprof+0x4f0/0x6b0
[  429.162328][T27198]  __nf_hook_entries_try_shrink+0x265/0x460
[  429.162363][T27198]  __nf_unregister_net_hook+0x2db/0x370
[  429.162399][T27198]  nf_unregister_net_hooks+0xab/0xe0
[  429.162432][T27198]  ? __pfx_nf_defrag_ipv4_disable+0x10/0x10
[  429.162505][T27198]  nf_defrag_ipv4_disable+0x84/0xa0
[  429.162564][T27198]  bpf_nf_link_release+0xc8/0x1b0
[  429.162584][T27198]  ? __pfx_bpf_nf_link_detach+0x10/0x10
[  429.162606][T27198]  bpf_nf_link_detach+0x15/0x20
[  429.162688][T27198]  link_detach+0x12e/0x180
[  429.162711][T27198]  __sys_bpf+0x535/0x7c0
[  429.162737][T27198]  __x64_sys_bpf+0x41/0x50
[  429.162804][T27198]  x64_sys_call+0x28e1/0x3000
[  429.162828][T27198]  do_syscall_64+0xca/0x2b0
[  429.162886][T27198]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  429.162909][T27198] RIP: 0033:0x7f7d6cd6f749
[  429.162925][T27198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  429.162943][T27198] RSP: 002b:00007f7d6b7d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  429.162997][T27198] RAX: ffffffffffffffda RBX: 00007f7d6cfc5fa0 RCX: 00007f7d6cd6f749
[  429.163008][T27198] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000022
[  429.163088][T27198] RBP: 00007f7d6b7d7090 R08: 0000000000000000 R09: 0000000000000000
[  429.163102][T27198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  429.163115][T27198] R13: 00007f7d6cfc6038 R14: 00007f7d6cfc5fa0 R15: 00007ffc8d0738f8
[  429.163148][T27198]  </TASK>
[  429.388975][ T3389] usb 7-1: enqueue for inactive port 0
[  429.394512][ T3389] usb 7-1: enqueue for inactive port 0
[  429.473086][ T3389] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  429.573136][   T29] kauditd_printk_skb: 512 callbacks suppressed
[  429.573152][   T29] audit: type=1326 audit(1768122731.604:136698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27222 comm="syz.7.8320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53374f749 code=0x7ffc0000
[  429.614136][   T29] audit: type=1326 audit(1768122731.641:136699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27222 comm="syz.7.8320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc53374f749 code=0x7ffc0000
[  429.638663][   T29] audit: type=1326 audit(1768122731.641:136700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27222 comm="syz.7.8320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53374f749 code=0x7ffc0000
[  429.662407][   T29] audit: type=1326 audit(1768122731.641:136701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27222 comm="syz.7.8320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fc53374f749 code=0x7ffc0000
[  429.686901][   T29] audit: type=1326 audit(1768122731.641:136702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27222 comm="syz.7.8320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53374f749 code=0x7ffc0000
[  429.710605][   T29] audit: type=1326 audit(1768122731.641:136703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27222 comm="syz.7.8320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fc53374f749 code=0x7ffc0000
[  429.735054][   T29] audit: type=1326 audit(1768122731.641:136704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27222 comm="syz.7.8320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53374f749 code=0x7ffc0000
[  429.758752][   T29] audit: type=1326 audit(1768122731.641:136705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27222 comm="syz.7.8320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fc53374f749 code=0x7ffc0000
[  429.784234][   T29] audit: type=1326 audit(1768122731.716:136706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27215 comm="syz.1.8317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6cd6f749 code=0x7ffc0000
[  429.807995][   T29] audit: type=1326 audit(1768122731.716:136707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27215 comm="syz.1.8317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d6cd6f749 code=0x7ffc0000
[  430.095179][T27263] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  430.201916][T27263] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  430.240952][T27263] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  430.426851][T27276] set_capacity_and_notify: 13 callbacks suppressed
[  430.426869][T27276] loop6: detected capacity change from 0 to 2048
[  430.458049][T26001] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  430.514153][T27276]  loop6: p1 < > p4
[  430.541285][T27276] loop6: p4 size 8388608 extends beyond EOD, truncated
[  430.640224][T27286] openvswitch: netlink: Missing key (keys=40, expected=80)
[  430.773504][T27296] netlink: 'syz.7.8346': attribute type 1 has an invalid length.
[  430.781316][T27296] netlink: 'syz.7.8346': attribute type 4 has an invalid length.
[  430.789080][T27296] __nla_validate_parse: 16 callbacks suppressed
[  430.789094][T27296] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.8346'.
[  430.804869][T27296] netlink: 'syz.7.8346': attribute type 1 has an invalid length.
[  430.812909][T27296] netlink: 'syz.7.8346': attribute type 4 has an invalid length.
[  430.820679][T27296] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.8346'.
[  430.976696][T27307] loop3: detected capacity change from 0 to 512
[  431.004854][T27307] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  431.083838][T27312] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(4)
[  431.090374][T27312] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  431.098806][T27312] vhci_hcd vhci_hcd.0: Device attached
[  431.145609][T27308] lo speed is unknown, defaulting to 1000
[  431.185270][T27307] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  431.266503][T27307] ext4 filesystem being mounted at /446/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  431.270652][T27312] SELinux: failed to load policy
[  431.308094][T20595] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  431.314368][T27316] 9p: Bad value for 'source'
[  431.355610][T13633] vhci_hcd vhci_hcd.9: vhci_device speed not set
[  431.375365][T27313] vhci_hcd: connection closed
[  431.375685][T14847] vhci_hcd vhci_hcd.9: stop threads
[  431.385631][T14847] vhci_hcd vhci_hcd.9: release socket
[  431.391928][T14847] vhci_hcd vhci_hcd.9: disconnect device
[  431.419779][T13633] usb 19-1: new full-speed USB device number 6 using vhci_hcd
[  431.427299][T13633] usb 19-1: enqueue for inactive port 0
[  431.435118][T13633] usb 19-1: enqueue for inactive port 0
[  431.440871][T13633] usb 19-1: enqueue for inactive port 0
[  431.515764][T13633] vhci_hcd vhci_hcd.9: vhci_device speed not set
[  431.579414][T27276] Set syz1 is full, maxelem 65536 reached
[  431.669649][T27329] lo speed is unknown, defaulting to 1000
[  431.698454][T27332] SELinux:  policydb version 280 does not match my version range 15-35
[  431.707199][T27332] SELinux: failed to load policy
[  431.722687][T27335] loop7: detected capacity change from 0 to 512
[  431.767186][T27329] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8357'.
[  431.783753][T27335] EXT4-fs warning (device loop7): ext4_xattr_inode_get:560: inode #11: comm syz.7.8359: EA inode hash validation failed
[  431.802214][T27329] pimreg: entered allmulticast mode
[  431.808844][T27329] pimreg: left allmulticast mode
[  431.817800][T27335] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #15: comm syz.7.8359: corrupted inode contents
[  431.830390][T27335] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #15: comm syz.7.8359: mark_inode_dirty error
[  431.844880][T27335] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #15: comm syz.7.8359: corrupted inode contents
[  431.856970][T27335] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3000: inode #15: comm syz.7.8359: mark_inode_dirty error
[  431.869518][T27335] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3003: inode #15: comm syz.7.8359: mark inode dirty (error -117)
[  431.883503][T27335] EXT4-fs warning (device loop7): ext4_evict_inode:273: xattr delete (err -117)
[  431.894293][T27335] EXT4-fs (loop7): 1 orphan inode deleted
[  431.901947][T27335] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  431.962345][T27343] loop9: detected capacity change from 0 to 512
[  431.972122][T27343] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  432.004551][T27343] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  432.070936][T27343] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  432.176054][T26001] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  432.710361][T27372] siw: device registration error -23
[  433.063723][T27383] netlink: 68 bytes leftover after parsing attributes in process `syz.9.8375'.
[  433.791797][T22233] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  434.176944][    C0] ==================================================================
[  434.185071][    C0] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick
[  434.192286][    C0] 
[  434.194604][    C0] read-write to 0xffff888100a13ab8 of 8 bytes by interrupt on cpu 1:
[  434.203096][    C0]  wq_worker_tick+0x60/0x230
[  434.207701][    C0]  sched_tick+0xd7/0x220
[  434.212302][    C0]  update_process_times+0x15f/0x190
[  434.217519][    C0]  tick_nohz_handler+0x276/0x3d0
[  434.222457][    C0]  __hrtimer_run_queues+0x20f/0x5a0
[  434.227651][    C0]  hrtimer_interrupt+0x21a/0x460
[  434.232579][    C0]  __sysvec_apic_timer_interrupt+0x5f/0x1d0
[  434.238482][    C0]  sysvec_apic_timer_interrupt+0x6f/0x80
[  434.244128][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  434.250113][    C0]  unwind_next_frame+0x3a8/0xca0
[  434.255046][    C0]  __unwind_start+0x182/0x1e0
[  434.259724][    C0]  perf_callchain_kernel+0x12a/0x350
[  434.265005][    C0]  get_perf_callchain+0x2bc/0x640
[  434.270031][    C0]  __bpf_get_stack+0x2a7/0x650
[  434.274795][    C0]  bpf_get_stack+0x33/0x50
[  434.279211][    C0]  bpf_get_stack_raw_tp+0x106/0x130
[  434.284426][    C0]  bpf_prog_4b3f8e3d902f6f0d+0x41/0x49
[  434.289872][    C0]  bpf_trace_run2+0x107/0x1d0
[  434.294553][    C0]  __traceiter_kfree+0x2e/0x50
[  434.299318][    C0]  kfree+0x353/0x3c0
[  434.303204][    C0]  io_alloc_cache_free+0xc0/0xe0
[  434.308153][    C0]  io_free_alloc_caches+0x42/0x70
[  434.313189][    C0]  io_ring_ctx_free+0x7a/0x3d0
[  434.317963][    C0]  io_ring_exit_work+0x506/0x530
[  434.322906][    C0]  process_scheduled_works+0x4ce/0x9d0
[  434.328372][    C0]  worker_thread+0x582/0x770
[  434.332977][    C0]  kthread+0x489/0x510
[  434.337395][    C0]  ret_from_fork+0x149/0x290
[  434.341980][    C0]  ret_from_fork_asm+0x1a/0x30
[  434.346735][    C0] 
[  434.349040][    C0] read-write to 0xffff888100a13ab8 of 8 bytes by interrupt on cpu 0:
[  434.357104][    C0]  wq_worker_tick+0x60/0x230
[  434.361710][    C0]  sched_tick+0xd7/0x220
[  434.365958][    C0]  update_process_times+0x15f/0x190
[  434.371163][    C0]  tick_nohz_handler+0x276/0x3d0
[  434.376094][    C0]  __hrtimer_run_queues+0x20f/0x5a0
[  434.381280][    C0]  hrtimer_interrupt+0x21a/0x460
[  434.386206][    C0]  __sysvec_apic_timer_interrupt+0x5f/0x1d0
[  434.392084][    C0]  sysvec_apic_timer_interrupt+0x6f/0x80
[  434.397717][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  434.403688][    C0]  __sanitizer_cov_trace_pc+0x0/0x70
[  434.408962][    C0]  io_poll_remove_all+0x89/0x1a0
[  434.413898][    C0]  io_uring_try_cancel_requests+0x279/0x310
[  434.419788][    C0]  io_ring_exit_work+0x145/0x530
[  434.424724][    C0]  process_scheduled_works+0x4ce/0x9d0
[  434.430184][    C0]  worker_thread+0x582/0x770
[  434.434774][    C0]  kthread+0x489/0x510
[  434.438839][    C0]  ret_from_fork+0x149/0x290
[  434.443434][    C0]  ret_from_fork_asm+0x1a/0x30
[  434.448193][    C0] 
[  434.450497][    C0] value changed: 0x00000000003f2be0 -> 0x00000000003f52f0
[  434.457586][    C0] 
[  434.459890][    C0] Reported by Kernel Concurrency Sanitizer on:
[  434.466114][    C0] CPU: 0 UID: 0 PID: 3797 Comm: kworker/u8:11 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  434.477652][    C0] Tainted: [W]=WARN
[  434.481434][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  434.491489][    C0] Workqueue: iou_exit io_ring_exit_work
[  434.497044][    C0] ==================================================================