last executing test programs:

3m28.509613481s ago: executing program 32 (id=248):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r1 = socket$rds(0x15, 0x5, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfee5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)='%pS    \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
syz_clone(0x808000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000200)=@md0, 0x0, 0x0)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x2)
readv(r8, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000380), 0x4)
ioperm(0x9, 0x40, 0x8001)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x4, 0x0, 0x0, 0x0, 0x2, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_config_ext, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close_range(r0, 0xffffffffffffffff, 0x100000000000000)

3m19.748163688s ago: executing program 33 (id=409):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0xe8, 0xe8, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe0}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r1}, 0x18)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000900)=ANY=[], 0x28}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80006f, 0x81501)
ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x4b5a9da54893e123, 0x3, 0x5, 0xffff}, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0})
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
close_range(r7, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
fdatasync(r8)

1m18.759409108s ago: executing program 1 (id=2836):
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000340)=@name={0x1e, 0x2, 0x3, {{0x43, 0x1}}}, 0x10)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/pm_wakeup_irq', 0x101000, 0x0)
r5 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x2, 0x40024e}, &(0x7f0000000340)=<r6=>0x0, &(0x7f0000000040)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1})
io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)

1m18.745003298s ago: executing program 1 (id=2838):
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/cgroup.procs\x00', 0x80042, 0x20262076a4e6d5e)
write$binfmt_format(r3, &(0x7f0000000180)='-1\x00', 0x3)
write$rfkill(r3, &(0x7f0000000000)={0x6, 0x5, 0x3}, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r4}, 0x18)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)

1m17.835392674s ago: executing program 1 (id=2848):
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800488, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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")
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000005000000020000aadec3ba21f25eb4d3cdd8476000"/41], 0x50)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x18)
shmdt(0x0)
r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x1e, r6, 0xffffffffffffffff, 0x0, 0x1)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r4, 0x25, 0x0, @void}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3a, 0x6, &(0x7f0000000440)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @ringbuf_query], &(0x7f0000000480)='syzkaller\x00', 0x9, 0x9f, &(0x7f0000000580)=""/159, 0x41100, 0x32, '\x00', 0x0, @fallback=0xd, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x1, 0x8, 0x8, 0x1}, 0x10, 0x0, r1, 0x5, 0x0, &(0x7f0000000640)=[{0x5, 0x1, 0x8, 0x9}, {0x1, 0x1, 0x7, 0x5}, {0x1, 0x3, 0x7, 0x2}, {0x3, 0x5, 0x8}, {0x3, 0x2, 0x9, 0x6}], 0x10, 0xfffffff7}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x1f, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x474b, 0x0, 0x0, 0x0, 0xa}, [@map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xc}, @map_fd={0x18, 0x4, 0x1, 0x0, r2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xeb, &(0x7f0000000300)=""/235, 0x40f00, 0x6, '\x00', r4, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x4, 0x5}, 0x10, 0x0, r8, 0x0, &(0x7f0000000500)=[r0], 0x0, 0x10, 0x4}, 0x94)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r9, 0x0, 0x12, 0x0, 0x0)
creat(&(0x7f0000000100)='./bus\x00', 0x0)
add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854528f45826cb35be51ca73845d177dd8dba7221daeccfda56b75cfe286fdd14cb5b11b1cab614fec2236da7d88ea0f0700"}, 0x48, 0xfffffffffffffffe)
mount(&(0x7f0000003340)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r10 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100)
preadv2(r10, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x2, 0x0, 0x0, 0x0)

1m17.781239264s ago: executing program 1 (id=2850):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1, 0x0, 0x1000000005}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
get_robust_list(0x0, 0x0, 0x0) (fail_nth: 7)

1m17.403029376s ago: executing program 1 (id=2851):
socket$inet6(0xa, 0x5, 0x0) (async)
r0 = socket$inet6(0xa, 0x5, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, &(0x7f00000000c0))
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x1004, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r5=>0x0})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x7fff}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x7fff}, 0x18)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x69}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x69}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x20, r9, 0xc4fc9e906872338b, 0x70bd2e, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}}, 0x20}}, 0x40000) (async)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x20, r9, 0xc4fc9e906872338b, 0x70bd2e, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}}, 0x20}}, 0x40000)
syz_emit_ethernet(0xb2, &(0x7f0000000380)={@remote, @empty, @void, {@x25={0x805, {0x3, 0x4, 0xfb, "6c726ece90e03aca596d71dc3ee329c9073bb6cb1e173c0e3de7d412acdd4463a37d18e517b394d0a7f14ffc189f2b9bd385739c2282ff08d3ea777078a0ca4655738c621fc380e310f3992ac7b965079643460d207af2590cbd9f6f6ff822336ced164d87d3ba5fa8fd74c836b156ddad32fa0b823b8cc0fc1691c34c92d217183ab9722b43218652b22dac25a5a62f6c1ca08edff628bb7c184a951be55d5717"}}}}, &(0x7f0000000500)={0x1, 0x2, [0x642, 0xa6d, 0x53b, 0x7c9]}) (async)
syz_emit_ethernet(0xb2, &(0x7f0000000380)={@remote, @empty, @void, {@x25={0x805, {0x3, 0x4, 0xfb, "6c726ece90e03aca596d71dc3ee329c9073bb6cb1e173c0e3de7d412acdd4463a37d18e517b394d0a7f14ffc189f2b9bd385739c2282ff08d3ea777078a0ca4655738c621fc380e310f3992ac7b965079643460d207af2590cbd9f6f6ff822336ced164d87d3ba5fa8fd74c836b156ddad32fa0b823b8cc0fc1691c34c92d217183ab9722b43218652b22dac25a5a62f6c1ca08edff628bb7c184a951be55d5717"}}}}, &(0x7f0000000500)={0x1, 0x2, [0x642, 0xa6d, 0x53b, 0x7c9]})
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)

1m17.022973099s ago: executing program 1 (id=2857):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fchmod(0xffffffffffffffff, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
r4 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10)
connect$vsock_stream(r4, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xd1cb3ed8a708bab1, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r5}, 0x10)
syz_io_uring_setup(0x42c8, &(0x7f0000000300)={0x0, 0x125a, 0x40, 0xffffffff, 0x16f}, &(0x7f0000000040), &(0x7f00000002c0))
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x355, 0xc0)
epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400)

1m13.864377519s ago: executing program 34 (id=2724):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0xfffffff1, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2, 0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0)

1m1.908003085s ago: executing program 35 (id=2857):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fchmod(0xffffffffffffffff, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
r4 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10)
connect$vsock_stream(r4, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xd1cb3ed8a708bab1, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r5}, 0x10)
syz_io_uring_setup(0x42c8, &(0x7f0000000300)={0x0, 0x125a, 0x40, 0xffffffff, 0x16f}, &(0x7f0000000040), &(0x7f00000002c0))
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x355, 0xc0)
epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400)

56.51111433s ago: executing program 5 (id=3156):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0xfc}}, 0x0)

56.50599928s ago: executing program 5 (id=3158):
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800488, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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")
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000005000000020000aadec3ba21f25eb4d3cdd8476000"/41], 0x50)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18)
socket$inet_mptcp(0x2, 0x1, 0x106)
creat(&(0x7f0000000100)='./bus\x00', 0x0)
mount(&(0x7f0000003340)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r3 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100)
preadv2(r3, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x2, 0x0, 0x0, 0x0)

56.309648791s ago: executing program 5 (id=3164):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b70500000000000085000000a500000018010000202064050000000000"], &(0x7f0000000280)='syzkaller\x00', 0xc8fb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x1})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]})
r2 = io_uring_setup(0x2e35, &(0x7f0000000440)={0x0, 0x2140, 0x3, 0x0, 0x122, 0x0, r1})
socket(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00'})
rmdir(&(0x7f0000000240)='./cgroup/../file0\x00')
io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x700, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001840)={&(0x7f0000001700)=ANY=[@ANYBLOB="9febe9bc00000000000000001000000083a1030002000000000000"], 0x0, 0x1b, 0x0, 0x0, 0x7c}, 0x28)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r6}, 0x10)
symlinkat(0x0, 0xffffffffffffff9c, 0x0)
socket$inet6(0xa, 0x2, 0x0)

56.184055462s ago: executing program 5 (id=3168):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0}, 0x94)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)={0x1e4, 0x0, 0x2, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_EXPECT_NAT={0x1d0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010102}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_NAT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0xffff}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x24044044}, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x5e, &(0x7f0000000b40)={[{@data_err_ignore}, {@min_batch_time={'min_batch_time', 0x3d, 0x80000000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@lazytime}, {@noinit_itable}, {@nodiscard}]}, 0x3, 0x44a, &(0x7f00000006c0)="$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")
unlink(&(0x7f0000000180)='./file1\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)

56.016037283s ago: executing program 5 (id=3173):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000003c0)='mm_page_alloc\x00', r1, 0x0, 0xffffffffffffffff}, 0x18)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 1)

55.218900898s ago: executing program 5 (id=3191):
syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000000600)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = dup3(r0, r0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="144000001000010000000000000000000500000a2c000000180a050042ec021c00000000020000000900010073797a3002000000090002007379000000000000000b00000a00"/84], 0x54}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r4 = io_uring_setup(0x7a12, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getrlimit(0xc, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = getpid()
sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000dc0)=[{{&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000440)="9998822f1628b8b7424bc9c229cbcf1a071688b933cbd09ecf3bf366888432532311e492e5fa9fbe154c70ee4062359e597cb87f3d5adac6f99a4dfb50510c5f529a804886f33d3861a142ed9cffbf09d10c09b7debad7222cec56911fe0", 0x5e}, {&(0x7f0000000740)="093f2fa20d2d3c388bfdbfb09985a020933fd76d09134983c990528defcb8fcabed55057a1917f9863ec808c71e8e21584dd8e7895a0afec473f53a117395e4138363a0f472dc70ffe2de2f70674535cfbf015b4f7d247516a7f5cb841481437e4ce9bb1eb66f40b1e074219843a4ec46851dbb7409331c7ae22958777399219243ad59c8113d3ddeb66038cbb19e65bc2c11850ccfbf9f253395299df4e0d260f69cae900996bfb2277fad3c981", 0xae}, {&(0x7f00000001c0)="9f1b62b64cf3e2", 0x7}, {&(0x7f0000000800)="7dbd170e005694a3030ff114b70e195bfc10b6edf70013a2c1ab548e5aa1b1d1e87a8b97071c9d81dda0d5f1fcc25eb0a0bfc7621e258d21746ab5c9298c3a2f7a3dab21f7e8ad28dc6d9ed7c7d50af6a703f673461968fcd50ec4e5be15e546a1faf8f7872e03b56a1d029368ffaafa46dca7ecdf04c53f7d2b3f63ddc10cebdabeccfd69d244477fe74ec197db8ecfe80277d5cf3574cef004dcc28a5dc6ca4b79b0fad8d28518f96d7b049a18b1fe6005bf2bbc7dfdb0ce2aabd10b5ffb153da50fadec63f4d340b6904a34cbff", 0xcf}, {&(0x7f0000000900)="19b2c701447b6f92af1f881fdd63d42b2e848bf24746250f0e3e05dcbb4425a28aae890f95a415f1fcedd50e21f790b139a8d97debd7155b5c2b2847e477181edf45a49b4d6ba8e0ee2ad0f4928acaff51d42fb904e7e2ba77613289e5d96acbb70b668c31c305f210b165a59651620b1e61fba054a3492d22f814f34f64fb4a57b23780a1e0f4ad0b6d12ba3c927bda5619852bab4ef774cdd9322f0425a9d79851743fad400f44e4fb2eb6fbfa4c533cf9865f4d4c33ba63a10520aea8eb9ac79d097389220156097aaeee6caeaf9dc325de0e6516dc1e41144e871d7764d11ad08e17aaf2210cb7fecd2a6b3fed2b958ae991cd555160a9", 0xf9}, {&(0x7f0000000a00)="e0878725882431caf16c68e1657c91741fa0f57f575aeafd3c53c29d5abf1eb501d56a497e8b7f7b08fb3ef85760a9853974856db7c19257aa47907ce5080bdc513b7bcbfffe102a59a217a98d23da4bdc6bef51b1f969de71eaedbcb3cb1537f71f45e4e6ac97f1d254b4deb36ab46bdb7eb8b9d9de1bd0571bc49f5d0bd4dca0691ae38529699abcb65a962005a551c2cd2213585809cc23a4f0e6c1c37c2b1639a331c74e1a99cd6df94c03287be400eca0346e9f6e11c18ae1e535e1bd8d669bb913b65a1f1381c1b7e8838d2d3f5029e596bbbf85b69c668fa02ed150b8e414b1a6110a3e470b3a25a003ff2a33cebe715cc9a2ff", 0xf7}, {&(0x7f0000000240)="1023a01ffe7725b21c9517748fafd14a8091c487", 0x14}, {&(0x7f0000000b00)="bb455322f1f775117153b7a3fc57204307a26c5427905fcb2c589e5fe41ce5804d4f1b44565e04930169b9fcf2795a8499794599733e900879713b4df16807f28ee08b79ec6204fe9a58a7f3c2efd9282264080478faae59e07d9ddc3ceaf39acc4a7468719fde37f764c31cb94770b00121426863eeb1756c0cc08c321af5d4311b548c5ea75471d112b6c2494c89c9dbec0158fcf35738cc84de1092b80eb6e038f406f7081e80b02771ad35b160bd6bb85740d42ca0d5c77cf1969a8654dec9a7d875b1fb73b7caefdae198807da34b733d49f33f279790139b0e418c8c4a5fee08", 0xe3}, {&(0x7f0000000380)="ea9503aef37a352f2e59779509ae3de2acd2dc59f41eced6f9727105588f9ed4dcfc0405e432c9a7b3e9ce550df12c65819813c85d31", 0x36}], 0x9, &(0x7f0000000e00)=ANY=[@ANYRESDEC=r4, @ANYRES32=r3, @ANYBLOB="977c3c8cb0ed89a4c033a222b8be5a9b67cd88bd2ab81a37fc16667d59d874c724c99664a617c87dfcc5f62dffb70927f1acc2aa844b59ada8a835e3de6d91b3e2b736f38f1c3365197d0bd7597bc05f103dbc21c1688db4f218b2319a80962db414f77de4122fad5e83157a44210fefb7d6693cc467f9cab2c8331e4a1f343cd25749ca282d31c11d4afe1f0b797d94c33d2b437727819955ae0ed337f75a9d3dc74a7def53b95dc7d96346dcfe8de12c", @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x38, 0x4000084}}], 0x1, 0x40000)
accept$unix(r7, 0x0, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r9}, 0x18)
r10 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0)

55.136417308s ago: executing program 36 (id=3191):
syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000000600)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = dup3(r0, r0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="144000001000010000000000000000000500000a2c000000180a050042ec021c00000000020000000900010073797a3002000000090002007379000000000000000b00000a00"/84], 0x54}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r4 = io_uring_setup(0x7a12, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getrlimit(0xc, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = getpid()
sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000dc0)=[{{&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000440)="9998822f1628b8b7424bc9c229cbcf1a071688b933cbd09ecf3bf366888432532311e492e5fa9fbe154c70ee4062359e597cb87f3d5adac6f99a4dfb50510c5f529a804886f33d3861a142ed9cffbf09d10c09b7debad7222cec56911fe0", 0x5e}, {&(0x7f0000000740)="093f2fa20d2d3c388bfdbfb09985a020933fd76d09134983c990528defcb8fcabed55057a1917f9863ec808c71e8e21584dd8e7895a0afec473f53a117395e4138363a0f472dc70ffe2de2f70674535cfbf015b4f7d247516a7f5cb841481437e4ce9bb1eb66f40b1e074219843a4ec46851dbb7409331c7ae22958777399219243ad59c8113d3ddeb66038cbb19e65bc2c11850ccfbf9f253395299df4e0d260f69cae900996bfb2277fad3c981", 0xae}, {&(0x7f00000001c0)="9f1b62b64cf3e2", 0x7}, {&(0x7f0000000800)="7dbd170e005694a3030ff114b70e195bfc10b6edf70013a2c1ab548e5aa1b1d1e87a8b97071c9d81dda0d5f1fcc25eb0a0bfc7621e258d21746ab5c9298c3a2f7a3dab21f7e8ad28dc6d9ed7c7d50af6a703f673461968fcd50ec4e5be15e546a1faf8f7872e03b56a1d029368ffaafa46dca7ecdf04c53f7d2b3f63ddc10cebdabeccfd69d244477fe74ec197db8ecfe80277d5cf3574cef004dcc28a5dc6ca4b79b0fad8d28518f96d7b049a18b1fe6005bf2bbc7dfdb0ce2aabd10b5ffb153da50fadec63f4d340b6904a34cbff", 0xcf}, {&(0x7f0000000900)="19b2c701447b6f92af1f881fdd63d42b2e848bf24746250f0e3e05dcbb4425a28aae890f95a415f1fcedd50e21f790b139a8d97debd7155b5c2b2847e477181edf45a49b4d6ba8e0ee2ad0f4928acaff51d42fb904e7e2ba77613289e5d96acbb70b668c31c305f210b165a59651620b1e61fba054a3492d22f814f34f64fb4a57b23780a1e0f4ad0b6d12ba3c927bda5619852bab4ef774cdd9322f0425a9d79851743fad400f44e4fb2eb6fbfa4c533cf9865f4d4c33ba63a10520aea8eb9ac79d097389220156097aaeee6caeaf9dc325de0e6516dc1e41144e871d7764d11ad08e17aaf2210cb7fecd2a6b3fed2b958ae991cd555160a9", 0xf9}, {&(0x7f0000000a00)="e0878725882431caf16c68e1657c91741fa0f57f575aeafd3c53c29d5abf1eb501d56a497e8b7f7b08fb3ef85760a9853974856db7c19257aa47907ce5080bdc513b7bcbfffe102a59a217a98d23da4bdc6bef51b1f969de71eaedbcb3cb1537f71f45e4e6ac97f1d254b4deb36ab46bdb7eb8b9d9de1bd0571bc49f5d0bd4dca0691ae38529699abcb65a962005a551c2cd2213585809cc23a4f0e6c1c37c2b1639a331c74e1a99cd6df94c03287be400eca0346e9f6e11c18ae1e535e1bd8d669bb913b65a1f1381c1b7e8838d2d3f5029e596bbbf85b69c668fa02ed150b8e414b1a6110a3e470b3a25a003ff2a33cebe715cc9a2ff", 0xf7}, {&(0x7f0000000240)="1023a01ffe7725b21c9517748fafd14a8091c487", 0x14}, {&(0x7f0000000b00)="bb455322f1f775117153b7a3fc57204307a26c5427905fcb2c589e5fe41ce5804d4f1b44565e04930169b9fcf2795a8499794599733e900879713b4df16807f28ee08b79ec6204fe9a58a7f3c2efd9282264080478faae59e07d9ddc3ceaf39acc4a7468719fde37f764c31cb94770b00121426863eeb1756c0cc08c321af5d4311b548c5ea75471d112b6c2494c89c9dbec0158fcf35738cc84de1092b80eb6e038f406f7081e80b02771ad35b160bd6bb85740d42ca0d5c77cf1969a8654dec9a7d875b1fb73b7caefdae198807da34b733d49f33f279790139b0e418c8c4a5fee08", 0xe3}, {&(0x7f0000000380)="ea9503aef37a352f2e59779509ae3de2acd2dc59f41eced6f9727105588f9ed4dcfc0405e432c9a7b3e9ce550df12c65819813c85d31", 0x36}], 0x9, &(0x7f0000000e00)=ANY=[@ANYRESDEC=r4, @ANYRES32=r3, @ANYBLOB="977c3c8cb0ed89a4c033a222b8be5a9b67cd88bd2ab81a37fc16667d59d874c724c99664a617c87dfcc5f62dffb70927f1acc2aa844b59ada8a835e3de6d91b3e2b736f38f1c3365197d0bd7597bc05f103dbc21c1688db4f218b2319a80962db414f77de4122fad5e83157a44210fefb7d6693cc467f9cab2c8331e4a1f343cd25749ca282d31c11d4afe1f0b797d94c33d2b437727819955ae0ed337f75a9d3dc74a7def53b95dc7d96346dcfe8de12c", @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x38, 0x4000084}}], 0x1, 0x40000)
accept$unix(r7, 0x0, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r9}, 0x18)
r10 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0)

38.948241362s ago: executing program 9 (id=3544):
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x6, 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="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", @ANYRES16=r0], 0x0, 0x20000005, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="090000000500000003000000840000ebff0000006095ddf4f2a5c0b651b2de5510bd019e2c2a31fb6c978f7d0ac09d5705c59f528e71b0fda41a", @ANYRESHEX=r1, @ANYRESOCT=r1, @ANYRESOCT=r1, @ANYRES32, @ANYRES64=r1], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000cc0), &(0x7f0000000d80), 0x800, r2}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r2}, 0x38)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00', r4}, 0x18)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000b80)=[{0x6}]}, 0x10)
bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r6 = socket(0x1e, 0x4, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r8 = socket(0x1e, 0x1, 0x0)
setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x65, 0x0, 0xfffffffc}, 0x10)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x40}, 0x10)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0xffffffffffffffff}, 0x18)
sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)

38.833176163s ago: executing program 9 (id=3547):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYRES64=r2, @ANYRES16=0x0, @ANYBLOB="000000000000000ab7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900d4122b39653efe000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x4e)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="8ae74f10c62ece292d00", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000100"/28], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r5}, 0x10)
r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000008c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002dbd7000ffdbdf2507000000080001008000000008000300", @ANYRES32=r7, @ANYBLOB="0a00180003030300000a0018000303030303030000080005000700000008000500090000000400cc000a0018000303030303030040000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4804)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00'}, 0x10)
ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f00000003c0))
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', <r9=>0x0})
sendmsg$nl_route_sched_retired(r8, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000900)=@delqdisc={0x118, 0x25, 0x200, 0x2070bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x10, 0x3}, {0xb}, {0xfff3, 0x6}}, [@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x29}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x11}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xc0}]}}, @q_dsmark={{0xb}, {0x38, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x14}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x26}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x12}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3a}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x12}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x11}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x118}, 0x1, 0x0, 0x0, 0x2}, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x50e, &(0x7f0000000280)="$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")
openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18f1ff0000000000000000000000000071108f000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, 0x9}, 0x94)
r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r10)

38.740600783s ago: executing program 9 (id=3549):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10)
statx(0xffffffffffffffff, 0x0, 0x100, 0x800, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffffb, 0x8400)
write$binfmt_misc(r1, &(0x7f0000000240)="56ffd28ba8d337ebaf68b5fe38f5a5f54a6b4a8b589b0463c6197d56e12ae89a22e0fc1f13f274cb33f4ec94486e9acac208169a2334fdffa6850436c23dca8ab6f9e31a4caaa55a6d09e1624f57f5095d5950850501c76d0084825e7a9a5cffc172600a18bc45c3c3130539c8d43ba19646493ad56363978758afdb1453cbad7b491bdac234ed391f1ed42dd4a6222733", 0x91)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r2}, 0x10)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mount$nfs(0x0, 0x0, &(0x7f0000000380), 0x1002000, &(0x7f0000000440)={[{'kfree\x00'}, {'syzkaller\x00'}, {'\x00'}, {'@^-%'}, {'sys_enter\x00'}]})
write$UHID_CREATE2(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/231], 0x138)
write$UHID_DESTROY(r3, &(0x7f0000000340), 0x4)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000007c0)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c)

38.720732694s ago: executing program 9 (id=3550):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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")
r8 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
pread64(r8, &(0x7f0000000100)=""/222, 0xde, 0x200000000013)
mount_setattr(r7, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x40000}, 0x20)
r9 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9)
getsockname$packet(r9, &(0x7f0000000680)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r11, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e1f, @empty}, {0x2, 0xfffe, @empty}, {0x2, 0x4e22, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2100000000, 0x400})
syz_emit_ethernet(0xae, &(0x7f0000000240)={@random="05b1ff035660", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x78, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1803"}, {0x0, 0x1, "a280ffffff02000000000000"}, {0x0, 0x1, "fe906d26efe3"}]}}}}}}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r10, {}, {0x1}, {0x4, 0x3d}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x40)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x1}}}, 0x24}}, 0x10)

38.484591315s ago: executing program 9 (id=3555):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000000000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000)

37.69299272s ago: executing program 9 (id=3579):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18)
getcwd(&(0x7f0000000140)=""/237, 0xfffffee1)

37.69277466s ago: executing program 37 (id=3579):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18)
getcwd(&(0x7f0000000140)=""/237, 0xfffffee1)

36.899828505s ago: executing program 8 (id=3592):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r0, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r1 = syz_open_procfs(0x0, &(0x7f0000000500)='status\x00')
lseek(r1, 0x9, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e20, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}, 0x0, 0x0, 0x2d, 0x0, "b7f34b3124533252305d736140daf329707c687bf15a4c1a68be9488f1164bc5664a1ddf4b9718006de4d7b0d4e0cd5e57a17c3e076823328ae3b9e609d0a4cae2514abb3e33813f451e619ac46cf7b7"}, 0xd8)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x20060084, &(0x7f00000018c0)={0x2, 0x4e20, @broadcast}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f0000000400000004000000"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r2}, 0x20)
recvmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/19, 0x13}], 0x1}, 0x10041)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x7}, "042b0000000200", "1cf6a5f3f0c7306970614ecf95de6b3e", "0300", "010400"}, 0x28)
r4 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = socket(0x2, 0x80805, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x82, &(0x7f0000000000)=@assoc_value, &(0x7f00000001c0)=0x8)

35.835157342s ago: executing program 8 (id=3603):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10)
sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
shutdown(r2, 0x1)
recvmmsg(r2, 0x0, 0x0, 0x10001, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10)
utimes(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x77359400}})
socket$nl_route(0x10, 0x3, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x4)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$PPPIOCSACTIVE(r3, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
read(r3, 0x0, 0xff40)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020200090f000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000002000100000004d20000020300000020050005002f8000000a00000000000000ff0100000000000000000000000000010000000000000000010018"], 0x78}}, 0x0)

34.938496487s ago: executing program 8 (id=3610):
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', &(0x7f0000000080)={0x10000, 0x14, 0x20}, 0x18)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
write$binfmt_register(r1, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32)

34.851173218s ago: executing program 8 (id=3611):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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")
r8 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
pread64(r8, &(0x7f0000000100)=""/222, 0xde, 0x200000000013)
mount_setattr(r7, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x40000}, 0x20)
r9 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9)
getsockname$packet(r9, &(0x7f0000000680)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r11, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e1f, @empty}, {0x2, 0xfffe, @empty}, {0x2, 0x4e22, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2100000000, 0x400})
syz_emit_ethernet(0xae, &(0x7f0000000240)={@random="05b1ff035660", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x78, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1803"}, {0x0, 0x1, "a280ffffff02000000000000"}, {0x0, 0x1, "fe906d26efe3"}]}}}}}}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r10, {}, {0x1}, {0x4, 0x3d}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x40)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x1}}}, 0x24}}, 0x10)

34.386318611s ago: executing program 8 (id=3615):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10)
statx(0xffffffffffffffff, 0x0, 0x100, 0x800, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffffb, 0x8400)
write$binfmt_misc(r1, &(0x7f0000000240)="56ffd28ba8d337ebaf68b5fe38f5a5f54a6b4a8b589b0463c6197d56e12ae89a22e0fc1f13f274cb33f4ec94486e9acac208169a2334fdffa6850436c23dca8ab6f9e31a4caaa55a6d09e1624f57f5095d5950850501c76d0084825e7a9a5cffc172600a18bc45c3c3130539c8d43ba19646493ad56363978758afdb1453cbad7b491bdac234ed391f1ed42dd4a6222733", 0x91)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r2}, 0x10)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mount$nfs(0x0, 0x0, &(0x7f0000000380), 0x1002000, &(0x7f0000000440)={[{'sys_enter\x00'}, {'syzkaller\x00'}, {'\x00'}, {'@^-%'}, {'sys_enter\x00'}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@subj_type={'subj_type', 0x3d, 'GPL\x00'}}, {@smackfshat={'smackfshat', 0x3d, '-^s,}#}*'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'kfree\x00'}}]})
write$UHID_CREATE2(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3f14db126c935954a335f6469a793"], 0x138)
write$UHID_DESTROY(r3, &(0x7f0000000340), 0x4)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000007c0)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c)

33.461519807s ago: executing program 8 (id=3627):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x14)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)

33.204599448s ago: executing program 38 (id=3627):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x14)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)

11.348356878s ago: executing program 4 (id=4138):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18)
r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
write$binfmt_register(r1, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32)

11.319336168s ago: executing program 4 (id=4140):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00'}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r1}, 0x10)
shutdown(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x7ff}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
io_uring_enter(0xffffffffffffffff, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, 0x0)
r7 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8)

10.434370133s ago: executing program 4 (id=4163):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x18)
r1 = socket(0x1e, 0x4, 0x0)
r2 = socket(0x1e, 0x1, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x65, 0x0, 0xfffffffc}, 0x10)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x40}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xffffffffffffffff}, 0x18)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)

10.367572714s ago: executing program 4 (id=4166):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f0000000280)='./file0/file0\x00', 0x3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r0}, 0x18)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc0100, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
ioctl$TCFLSH(r3, 0x400455c8, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000002c0), &(0x7f0000000340)={'U-', 0x800000000000}, 0x16, 0x4)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x2000000)

9.731214008s ago: executing program 4 (id=4174):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00'}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r1}, 0x10)
shutdown(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x7ff}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
io_uring_enter(0xffffffffffffffff, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, 0x0)
r7 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8)

9.279406981s ago: executing program 4 (id=4180):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @empty, 'geneve0\x00'}}, 0x1e)
connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x0, @remote, 'veth0_to_batadv\x00'}}, 0x1e)

9.278729681s ago: executing program 39 (id=4180):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @empty, 'geneve0\x00'}}, 0x1e)
connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x0, @remote, 'veth0_to_batadv\x00'}}, 0x1e)

4.422066262s ago: executing program 6 (id=4265):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000000000085000000bc000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20)
syz_emit_ethernet(0xd81, &(0x7f0000000600)={@multicast, @empty, @void, {@ipv6={0x86dd, @generic={0x8, 0x6, "d6c438", 0xd4b, 0xe, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@hopopts={0x2c, 0x1a3, '\x00', [@generic={0x3, 0xd17, "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"}]}], "14cb3cc2fb45052d9fe6fac8aa4a609dd6d1c5c751d2211f5ab5c585aece759fc83959"}}}}}, 0x0)

4.405156512s ago: executing program 6 (id=4267):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800100000400"], 0x50)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x1}}, './file0\x00'})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x18)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00005200060005000100000008000800", @ANYRES32=r4], 0x2c}}, 0x20008000)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)

4.358672272s ago: executing program 6 (id=4268):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18)
r2 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2000, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff00000001, 0x1ff}, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x0, 0x0, 0x20000000, 0x7, 0x4, 0x400008, 0x8000, 0x0, 0x40000000, 0x0, 0x20000}, 0x0, 0x0, r2, 0x3)

4.357902482s ago: executing program 6 (id=4269):
syz_emit_ethernet(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0)
r0 = getpid()
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x2010, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f00000000c0)=0x1)
sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000340)={0x20, 0x5, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x4040040)
readv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/24, 0xfd90}], 0x1)
r5 = fcntl$dupfd(r4, 0x406, r4)
write$sndseq(r5, &(0x7f0000000040)=[{0x82, 0x4, 0x0, 0x0, @tick=0xb, {0xb2, 0xb8}, {0x3, 0x2}, @result={0x10, 0x3b53}}, {0x0, 0x0, 0xfd, 0x4, @time={0x4800000, 0xfff}, {0x6, 0x4}, {0xc}, @result={0x8, 0x2}}], 0x38)
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x1, r6})
rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000380)='./bus/file0\x00')
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSBRKP(r7, 0x5425, 0x0)
r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
sendfile(r8, 0xffffffffffffffff, 0x0, 0x20000023896)
ioctl$TCSETAF(r8, 0x5408, &(0x7f0000000280)={0xad2f, 0x5, 0x5, 0x8b, 0x7, "7f4ec452f80d501f"})

2.500203234s ago: executing program 3 (id=4304):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8)
bind$vsock_stream(r0, &(0x7f0000000940), 0x10)
listen(r0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1)

2.161197376s ago: executing program 3 (id=4306):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x1, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x65, 0x0, 0xfffffffc}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x40}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)

1.871065688s ago: executing program 3 (id=4309):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
r1 = socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000002900)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ///+864GIw8IlpAdcIJ0Yrq6u+//pzLASAS5d6/5/vwN5nCzASCn2NQIQGGX/9/3/c6XpQyUEAAAM3HRrSgql7Ou96SgUSqWIm62fBSgmaxvVynxEPBERv50pXmvWF1pbJn2MEQAAAAAAAAAAAAAAAAAAAAAAAAAAovVU7iRSAAAAYKRFFP6U/LL9LP+5meenu78fmEj+1fpJ4ImIeOuHb3z/7nKjsbvQXP63o+WNH2TLXxzGNxgAAABAt851emv+z2FnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCoee/B2yudqY+XTw0q7l++EBGzefHHY7I1n4xiRFz/exLjJ7ZLImJsAPEP70XER/PiJ820jkLmxR/Em3BO/JjN3oW8+DcGEB+usvvN489ref2vEM+25vn9bzzif+ofVO/jXxwd/8Z69P+bfcZ46p2flXvGvxfx1Hj+8acTP+kR/7k+43/9awcHvdalP4qY63z+tI54JyMcl8qNrZ1yff/g9sbW8nplvbK9uLjw8tIrSy8tzZfXNqqV7N/cGN95+ufvn9X+67mff0mWTe/2P5+zv7zPpP+8c/fBhzuVw9Pxbz2XE/9XP85ecTp+IYvzqazcXD/XKR+2yyc989PfPHNW+1eP2198mP//W7122u1UR3m63z8dAOAC1PcPNper1cruyBaaV+mPQBoKj2DhWwPdYZqmabNP5ay6HxH97CeJAbe0kJ/PcaHnEWDYRyYAAGDQjk/6h50JAAAAAAAAAAAAAAAAAAAAXF2X8ZS17pjHj0BOBvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgfhvAAAA//89e9P5")
sendmsg$key(r1, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
close(r3)

1.764163699s ago: executing program 3 (id=4311):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x104, 0x4, 0x3c8, 0x110, 0xe0, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@empty, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101, 0x8, 0x1}}}, {{@arp={@loopback, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00', {}, {}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x80ca, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)

1.67431662s ago: executing program 3 (id=4316):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x848a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@grpjquota, 0x22}, {@errors_continue}, {@noload}, {@nombcache}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@barrier}]}, 0x1, 0x460, &(0x7f0000001200)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000656000/0x3000)=nil, 0x3000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x63}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)

956.354874ms ago: executing program 6 (id=4336):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000080)={{r3}})
ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18)
ioctl$SIOCPNADDRESOURCE(r3, 0x89e0, &(0x7f0000000040)=0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x136f, 0x10000, 0x2, 0x2d0, 0x0, r3}, &(0x7f0000000100), &(0x7f0000000400))
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r5, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x69}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000085}, 0x20040040)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TCXONC(r6, 0x540a, 0x2)
io_uring_enter(r4, 0x7b20, 0xe93c, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, &(0x7f0000000080)=[0x2, 0x1ff], 0x2)
io_uring_enter(r4, 0x1e61, 0x1d64, 0x1, 0x0, 0x2c)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000480)=ANY=[@ANYBLOB="3c0c02"], 0x68)

922.989324ms ago: executing program 7 (id=4339):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @empty, 'geneve0\x00'}}, 0x1e)
connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x0, @remote, 'veth0_to_batadv\x00'}}, 0x1e)

888.080765ms ago: executing program 0 (id=4341):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18)
r2 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2000, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff00000001, 0x1ff}, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x0, 0x0, 0x20000000, 0x7, 0x4, 0x400008, 0x8000, 0x0, 0x40000000, 0x0, 0x20000}, 0x0, 0x0, r2, 0x3)

845.956734ms ago: executing program 3 (id=4343):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00'}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r1}, 0x10)
shutdown(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x7ff}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r6}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
io_uring_enter(0xffffffffffffffff, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, 0x0)
r8 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8)

799.330315ms ago: executing program 7 (id=4344):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800488, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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")
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18)
socket$inet_mptcp(0x2, 0x1, 0x106)
creat(&(0x7f0000000100)='./bus\x00', 0x0)
mount(&(0x7f0000003340)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(0x0, 0x4000, 0x100)
preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x2, 0x0, 0x0, 0x0)

747.188015ms ago: executing program 0 (id=4345):
socket$netlink(0x10, 0x3, 0x8000000004)
syz_open_dev$loop(0x0, 0x282, 0x82000)
r0 = syz_io_uring_setup(0x7d97, &(0x7f0000000640)={0x0, 0xd06d, 0x800, 0x3, 0x205}, &(0x7f0000000800)=<r1=>0x0, &(0x7f00000006c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0)

563.360716ms ago: executing program 6 (id=4347):
syz_emit_ethernet(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0)
r0 = getpid()
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x2010, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f00000000c0)=0x1)
sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000340)={0x20, 0x5, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x4040040)
readv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/24, 0xfd90}], 0x1)
r5 = fcntl$dupfd(r4, 0x406, r4)
write$sndseq(r5, &(0x7f0000000040)=[{0x82, 0x4, 0x0, 0x0, @tick=0xb, {0xb2, 0xb8}, {0x3, 0x2}, @result={0x10, 0x3b53}}, {0x0, 0x0, 0xfd, 0x4, @time={0x4800000, 0xfff}, {0x6, 0x4}, {0xc}, @result={0x8, 0x2}}], 0x38)
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x1, r6})
rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000380)='./bus/file0\x00')
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSBRKP(r7, 0x5425, 0x0)
r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
sendfile(r8, 0xffffffffffffffff, 0x0, 0x20000023896)
ioctl$TCSETAF(r8, 0x5408, &(0x7f0000000280)={0xad2f, 0x5, 0x5, 0x8b, 0x7, "7f4ec452f80d501f"})

416.917807ms ago: executing program 7 (id=4350):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000004c0)='tlb_flush\x00', r0}, 0x10) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000640)='siox_get_data\x00', r1}, 0x18) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="fb8e7fce6a7c3e52e78d55602f6816bfec04083e49e1f6ea6e3f440a35c363d8cb9db5e9", @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@remote, @multicast2, <r3=>0x0}, &(0x7f0000000100)=0xc) (async)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, 0x0, &(0x7f0000000080)) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1a, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r3, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) (async)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x6, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x10040}) (async)
r6 = syz_io_uring_setup(0x174d, &(0x7f0000000780)={0x0, 0x11f8, 0x100, 0x3, 0x15cc}, &(0x7f0000000600)=<r7=>0x0, &(0x7f0000000080)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r6}) (async)
io_uring_enter(r6, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2, r3, 0x25, 0x4, @void}, 0x10) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32)
r10 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
r11 = socket(0x10, 0x803, 0x0) (async, rerun: 32)
sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x14}, 0x0) (rerun: 32)
getsockname$packet(r11, &(0x7f0000000140)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000001000390429bd70000000000000000000", @ANYRES32=r12, @ANYBLOB="0198000000010000000012803297e30fc1bdd25168d90b0001006970366772650000100002800400120008000d0005000000"], 0x40}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000004) (async)
sendto$packet(r9, &(0x7f0000000300)="3114", 0x2, 0x0, &(0x7f0000000000)={0x11, 0x8100, r12, 0x1, 0xaa, 0x6, @broadcast}, 0x14)

392.278198ms ago: executing program 2 (id=4353):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x2, [@enum64={0x8, 0x5, 0x0, 0x13, 0x0, 0x4, [{0xb, 0xc, 0x1}, {0x10, 0x80000001, 0x3}, {0xa, 0x4, 0x105}, {0xa, 0xac, 0x1}, {0x4, 0x5, 0x4}]}, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0xb, 0xd62}, {0xc, 0x5}, {0x3, 0x2}, {0x5, 0x7}, {0x20000008, 0x6}, {0xb}]}]}}, 0x0, 0x9e, 0x0, 0x0, 0x8}, 0x28)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x68, {0x2, 0x0, @empty}})
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000540)=ANY=[@ANYBLOB="636865636b3d7374726963742c636865636b3d72656c61786564006d6f64653d307830303030303030303030303030303047438c70703d6f66662c73657373696f6e3d3078303030303030303030303030303036322c696f636861727365743d6d6163677265656b416d61703d61636f726e2c696f636861727365743d69736f383835392d322c73657373696f6e3d3078303030303030303030303030303035382c73686f776173736f632c6d6f64653d3078666666666666666666666666666666656ebe6865636b3d7374726963742c6673636f6e746578743d73797374656d5f752c7065726d69745f646972656374696f2c00"], 0xfa, 0x69f, &(0x7f0000000f00)="$eJzs3c9v2+Ydx/EP5V+yOwTFNhRBkB9PkhVwsEyR5MaBkQEtR1E2N0kUSHmwgQFF1thFEDndkg5YfOl82Q+gA3berZcddts/MKDn/he7bUCx3QZsBw4kRVmyRMlqHLdZ3y8jEUV++Txfkgq/oSU+EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkOXUyuWKpYbX2t4x+Zxa4DcnLE9bW9CtdOLW1H4lK/6jYlEX01kXv328+I34rxu6nD67rGL8UNTha2+8fv9b84Vs/QkJfRGatcFnzw8fP+h2956eInZOMzf/ZVLhFEGbbssLfa9pb7rGC32zsb5evrNVD03da7jhbthxm8YJ3ELHD8yqc8tUNjbWjFva9bdbmzW74WYz732vWi6vmx8upQdaUil0trxGw2ttJjHx4jjmnvn4J2mAazeN2X/U3VublmQcVMlbWBgIqk5rqVquViuVarWyfnfj7r1yeX5kRjlmlfs0EnHmL1q8Ys7u5A28oEJc//9mSQ0V1dK2dmTG/jiqKZCvZs7ynqz+v3nHndjvYP3PqvxF6e3e4ktK6v/V9NnVvPqfk4uRSVYYt8TKmT/bz0KSkdEzPdehHuuBuupqT0/PoG0jc+1MWjmHn025aslTKF+emrKTOaY3x2hD61pXWe9qS3WFMqrLU0OuQu0qVEdu8opyFMiVrY58BTJalaNbMqpoQxtak5Grknbla1stbaomW/+Oomhfj5L9vjYhR2VBlZyApcGg6oSW8ur/Tz9KX6e9+l+m/n9dpa+DpfThs0kxwFdA1Lv+n9G1l5MNAAAAAAB4Gazkt+9W8t79FUmR6l7DLeevsHie2QEAAAAAgLNgKVrSZVnx9b+kK7KmXP8DAAAAAIBXjpXcY2dJWkk+1G8d3wl1ml8CzJ1DigAAAAAA4AUld/5fXZSiZNCKa7Jmuv4HAAAAAACvgN8OjLE/n42xG2Vv6xckhe0l66//XFKwYB21d75jHdjxEvtgrpCEjHwCoFO/ZIV/SAfqTcbrXZSUPHPcy1avt94gmP1xBz/fnzbWvxWcSGBxbrCBEwlc6K1txT2vz/ee6WNdf3so9uFhQcmStJeVutdwS47fuF+RbV8odNydzi+ePPqlFPS3c/9Rd6/03gfdh0kuR/Gso4M4j4+ydP6y2Nt1w7kkD/1c/hulpCtjt3hZ9azL37WaK1bSbznb/jnZB4XjY5S7/cN96te6kR6zGytp7Mphf8T9ePuL8fZXSskhG9r6YME6zqJycsvHHYicLIpJFjfTmJurN9OHLL+4nYJV/O6cVC2NHoOhLKqDWUzfF9a/RvbFpCx6+2ItzuLTuKGcLNZmy2LkiADAl2U/GfUnufMvGcR8pO5m5SE7qX2hujO9ur8zXN0//GNcGdP/Xsz33puY2EtR8Rl91Urq0KKSE+v8pZEzerY19oWics7o5ReobnFffz7+DqRe2iNZ/CeKovuVpN/fn6iqn8QrfJLbb9hId/udDw9+lgyAH3t/7/29J9Xq2nr5rXL5blULyWb0HuZE7QEAjJj+HTtTI6y3dD2NuP7wH2+mU0MV75v9jxSU9J4+UFcPtZB9hcC18a2uDHwM4XZ61aqBq1bzxuv3l6WTsRXdzr2qS2rpQGy1H7ugbJXhSn0cu/aSjwIAAOfrxpQ6PL7+F4fq/22tphGrl8Zedw/X8t7Vcf+SPi+2Mj35d856bwAA8PXgBp9bK53fWEHgtd+tbGxU7M6WawLf+ZEJvNqma7xWxw2cLbu16Zp24Hd8x2+YdqAlr+aGJtxut/2gY+p+YNp+6O0k3/xuel/9HrpNu9XxnLDdcO3QNY7f6thOx9S80DHt7R80vHDLDZKVw7breHXPsTue3zKhvx04bsmY0HUHAr2a2+p4dS+ebJl24DXtYNf82G9sN11Tc0Mn8NodP20w68tr1f2gmTRbUjTzFx0CAPD/6Nnzw8cPut29pycnluNL83TOkXJiRicWxzTIGEEAAHzFHJfrGVYq9qc+jV5KVgAAAAAAAAAAAAAAAAAAAAAAYND0W/pmnFgYd7Og1J/z8wu9OfqVjm8xHGnH0lknNstEYda1slsiDh9/NiF4uT8n2/2DMUfntoF//4b0WjJH6Zz5ccHF/Has6X0tTzi4p5yYi3fQaYO/v5/u0dyYeOHYRUv9YzF/9v8c4oknf8pZFEVRNHn1peF9uDhpA4cn5iU9XXyBQ3D+5yIA5+t/AQAA//+xxzz3")
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00')
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14)
close(r2)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x4e20, @multicast2}, {0x300, @local}, 0x44, {0x2, 0x4e24, @multicast1}, 'team_slave_0\x00'})
open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000020000001d"], 0x0)

330.822218ms ago: executing program 0 (id=4354):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000001240)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @empty, 'geneve0\x00'}}, 0x1e)
connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x0, @remote, 'veth0_to_batadv\x00'}}, 0x1e)

273.753218ms ago: executing program 0 (id=4355):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
mq_open(&(0x7f0000002300)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xefhe\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+\xf7\xc6>n\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:i\x99\xcb\xb5\xd7\xac+\xcdW\xd4\xdc\xd1\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xb3\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xdf\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\x02\x00\x00\x00\x00\x00\x00\x00n\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xee\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\xfe\a^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\xda8\x9cQ\xd9\xac\x9e\xa4\x8d\x13\x8a-sN/\xbf`\xc6\x16\x06\x1e\b(CLPSX5N\xd4ZR\x87\x80J\xfe:\xc9\xf8\xd9\xc5\xa5|\x8dq\x8bq\\ka\xba\\\xe3|\xe8\xa2\xd9\x86hB\xb5\x1e\x8d?\xf7\xd3\x1c\xf5\xa9q\xcc\'E6\xd9FK\x8c\x86f*\xd6\xd9\x84\xf7!\x16\xf1^\xae\x14\xf8\"\xb6/h\xba\x88J\xf0\xbduM\xc4\xac\xfc\xd7\xf2\xfcB\xa2e\xf3Ed\xbc\xb9\x03^\xea\xd6\xeb\xd2\xc7\x89\x8a\xb7\xb1\xc6\xbe\x0e\xb77\xf7A\x92\x91\x02H\x90\xfe\xdb\xc4\x14~\x14\x1d\x1fz\x1f\x81\x89#q\x1en', 0x41, 0x1c5, 0x0)
ioprio_get$uid(0x3, 0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000080)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x9, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
readv(r4, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/171, 0xab}], 0x1)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000180)=[{0x2, 0x800000, {0x2, 0x1, 0x3}, {0x0, 0x0, 0x4}, 0x2, 0x99f499b4b67a323b}, {0x3, 0x3, {0x2, 0xff}, {0x0, 0x0, 0x3}, 0xfe, 0x2}], 0x40)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r7}, 0x8)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r8}, 0x10)

272.939108ms ago: executing program 2 (id=4356):
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x6, 0x6, 0xfe})
syz_open_pts(0xffffffffffffffff, 0x141601)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1)
syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1)
sendmsg$NFC_CMD_DEP_LINK_UP(r1, 0x0, 0x40)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4)
read$nci(0xffffffffffffffff, &(0x7f0000000180)=""/116, 0x74)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f00000000c0)=[{0x6, 0x81, 0xca}]}, 0x10)
sendmsg$NFC_CMD_SE_IO(r1, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x102, 0x0)
close(r3)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1da49d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x6025, 0x4005, 0x9, 0x0, 0x1, 0x1, 0xf, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_')
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000380)={0x9d2, 0x0, 0x1, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r6, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'})
syz_genetlink_get_family_id$tipc(0x0, r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, 0x0, 0x0)
close(0xffffffffffffffff)

242.124278ms ago: executing program 2 (id=4357):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @empty, 'geneve0\x00'}}, 0x1e)
connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x0, @remote, 'veth0_to_batadv\x00'}}, 0x1e)

189.827409ms ago: executing program 2 (id=4358):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280050019000000000005"], 0x44}}, 0x80)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @dev}, {0x2, 0x4e24, @remote}, {0x2, 0xfffd, @empty}, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200})
r1 = syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0x10, 0x0, 0x5, 0x80}, &(0x7f0000000180)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = accept$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000040)=0x6e)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000001b40)=0x1ff, 0x4)
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0xa4ffffff)
dup2(r7, r7)
sendmsg$nl_route(r7, &(0x7f00000018c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)=@getroute={0x14, 0x1a, 0x400, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x88c1}, 0x140a0010)
sendmmsg$unix(r5, &(0x7f0000001800)=[{{&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001780)=[{&(0x7f0000000240)}, {&(0x7f0000000400)="741c91fef8bd73cd3922a64b5267e5cc030d7ad2191563b14158308e6cc4047cf6dcbff53cbda4dd6582e3b032861f0c941d7f2fedaca7ebee4a515868e62fae4d4143f592587aa9b0e4c9da5151f88b3050bd9daf7104193735f2f45aaf9f313dbd960f9ecb97a4e0083de0ab07c0dfb8991099ec609064f267b1f3d39443c85dda89616f21f2415bf6a24d136c1f53922af04b98d4cebfff646ccde0415fb9e19acd60f6d65e6ad6a7c8855958f36e6e0b9899fb9afd16c1c2e650181eeb2ab6edb92183861443", 0xc8}, {&(0x7f0000000500)="dbf4e16fc3951e93aa4b7af12073aa245a63d49ac8b18d6844d3f6974abd3d38c968e40d11bab6b909694e6293331be7a74700d9ef743259fea577786621d345f2b0ab362a0643f5cc503582e9819fca88914df51bd1df922790ee3285efdfdcc93fbd52607e263fc3453133cbab3fc44bc12b5c546e02b3c76e443d786ef8b187a943bbb0d5e604904bbc76d203a3fc511910f9c251e691215f6a9196da516b630cc5107a554c419c50a3e0095927563bd03c67981a9e8a", 0xb8}, {&(0x7f00000005c0)="ee4ec856736378d855773a07e6258f3ac2285c42240e2548688e1ef52b39a5442be90524b4e4538f2e4047e0dc1931c508d91b282eab2de711dda6ae5dfef9d474d5f9df922af4055b840eaa9eaf54e4706e0385af9c4ea8453a69bc2ac9c3635364c3c2001b63e2c5f240761516f09edca91bab79d8c592e830ecf2b720a925", 0x80}, {&(0x7f0000000340)="a292fdbdee085f92c41e79ffab6bfd2fb66d707397904e509d92b2", 0x1b}, {&(0x7f0000000640)="01971b0cc780bd94791acc", 0xb}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="a86d60d281cbe4bb86e0a59e31febbc3ed8a4782cbd5a21449f625c8284d291b18cb1058e0e988730591c6d1899cec83833195237f817d44e96d7af43ca28ce602ae0ec6b4b87a72ca6602194ceca10e7d6dcfff7b3729d8b48a1d9d8924d61ba901e4a3c168694fdf669b835a8394132389d05947209e0921987dcc024ce3c98fe7021b36ea0d5d08a1c51ac9b2ff32d9528dce59f734d7d30b00b4d5eb7687756d673bc655ccd9d64e6c533f10f829339c03ec8effe6e71eb7583148304b770c7bfb41adc4f4bba25ed0f0a3892f156dcfb0f77791", 0xd6}], 0x8, 0x0, 0x0, 0x4040800}}], 0x1, 0x4005)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[r4], 0x1})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH")
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001b80)={{0x1, 0x1, 0x18, <r8=>0xffffffffffffffff, {0x6}}, './file0/file0/file0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r8, 0x400448c9, &(0x7f0000001bc0)={@any, 0x3})
setxattr$security_ima(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)=ANY=[], 0x700, 0x1)
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')
io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0)
r9 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r9, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

90.248679ms ago: executing program 0 (id=4359):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @empty, 'geneve0\x00'}}, 0x1e)
connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x0, @remote, 'veth0_to_batadv\x00'}}, 0x1e)

47.17883ms ago: executing program 7 (id=4360):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e)
connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x0, @remote, 'veth0_to_batadv\x00'}}, 0x1e)

46.516229ms ago: executing program 7 (id=4361):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380))
fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)

45.752569ms ago: executing program 2 (id=4362):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18)
r1 = socket(0x1e, 0x4, 0x0)
r2 = socket(0x1e, 0x1, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x65, 0x0, 0xfffffffc}, 0x10)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x40}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xffffffffffffffff}, 0x18)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)

25.53776ms ago: executing program 0 (id=4363):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b70500000000000085000000a500000018010000202064050000000000"], &(0x7f0000000280)='syzkaller\x00', 0xc8fb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x6, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]})
r2 = io_uring_setup(0x2e35, &(0x7f0000000440)={0x0, 0x2140, 0x3, 0x0, 0x122, 0x0, r1})
socket(0x10, 0x3, 0x0)
mkdir(0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00'})
rmdir(&(0x7f0000000240)='./cgroup/../file0\x00')
io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x700, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r6}, 0x10)
symlinkat(0x0, 0xffffffffffffff9c, 0x0)
socket$inet6(0xa, 0x2, 0x0)

1.38384ms ago: executing program 7 (id=4364):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x403, 0x300, 0xffffffef, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}}, 0x8000)

0s ago: executing program 2 (id=4365):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0, 0x0, 0xfffffffffffffffd}, 0x18)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r2, 0x0, r4, 0x0, 0x7, 0x9)
write$P9_RWRITE(r4, &(0x7f0000000040)={0xb}, 0x11000)
read(r3, &(0x7f0000032440)=""/102364, 0x18fdc)
socket$inet6(0xa, 0x80001, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="70000000150001002cbd7000fddbdf250a08e2fe", @ANYRES32, @ANYBLOB="14000100fc010000000000000000000000000001140006004cffffffffffffff09000000ed00000014ff06000300000002000000ff7f0000800000001400060001040000c6080000da0800000000000008000a0001000000"], 0x70}, 0x1, 0x0, 0x0, 0x4840}, 0x20000840)

kernel console output (not intermixed with test programs):

loop8: detected capacity change from 0 to 164
[  204.930591][T18533] loop7: detected capacity change from 0 to 512
[  204.938701][T18533] EXT4-fs: Ignoring removed nobh option
[  204.955626][T18533] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #3: comm syz.7.3346: corrupted inode contents
[  204.971928][T18533] EXT4-fs (loop7): Remounting filesystem read-only
[  204.988760][T18533] EXT4-fs (loop7): 1 truncate cleaned up
[  204.994960][T18533] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.008808][T18533] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  205.083316][T18533] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.335818][T18574] SELinux: failed to load policy
[  205.343525][T18576] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  205.385403][T18576] SELinux: failed to load policy
[  205.532553][T18580] loop9: detected capacity change from 0 to 164
[  205.970869][T18619] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  205.980594][T18619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3376'.
[  206.148347][   T29] kauditd_printk_skb: 946 callbacks suppressed
[  206.148361][   T29] audit: type=1326 audit(1762252742.131:34094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18606 comm="syz.0.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa3f6116567 code=0x7ffc0000
[  206.183157][   T29] audit: type=1326 audit(1762252742.131:34095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18606 comm="syz.0.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa3f60bb779 code=0x7ffc0000
[  206.206810][   T29] audit: type=1326 audit(1762252742.131:34096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18606 comm="syz.0.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fa3f611f6c9 code=0x7ffc0000
[  206.230459][   T29] audit: type=1326 audit(1762252742.131:34097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18606 comm="syz.0.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa3f6116567 code=0x7ffc0000
[  206.253991][   T29] audit: type=1326 audit(1762252742.131:34098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18606 comm="syz.0.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa3f60bb779 code=0x7ffc0000
[  206.277497][   T29] audit: type=1326 audit(1762252742.131:34099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18606 comm="syz.0.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fa3f611f6c9 code=0x7ffc0000
[  206.301097][   T29] audit: type=1326 audit(1762252742.131:34100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18606 comm="syz.0.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa3f6116567 code=0x7ffc0000
[  206.324584][   T29] audit: type=1326 audit(1762252742.131:34101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18606 comm="syz.0.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa3f60bb779 code=0x7ffc0000
[  206.348219][   T29] audit: type=1326 audit(1762252742.131:34102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18606 comm="syz.0.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fa3f611f6c9 code=0x7ffc0000
[  206.371902][   T29] audit: type=1326 audit(1762252742.161:34103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18606 comm="syz.0.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa3f6116567 code=0x7ffc0000
[  206.624114][T18650] tipc: Started in network mode
[  206.629061][T18650] tipc: Node identity 8e7f0a48f9b3, cluster identity 4711
[  206.636294][T18650] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  206.646870][T18650] tipc: Disabling bearer <eth:syzkaller0>
[  206.748087][T18663] loop7: detected capacity change from 0 to 164
[  206.757775][T18663] bio_check_eod: 48 callbacks suppressed
[  206.757788][T18663] syz.7.3390: attempt to access beyond end of device
[  206.757788][T18663] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  206.778933][T18663] syz.7.3390: attempt to access beyond end of device
[  206.778933][T18663] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164
[  206.840967][T18671] loop7: detected capacity change from 0 to 2048
[  206.859663][T18671] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  206.927453][T15444] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[  206.953674][T15444] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  206.981527][T15444] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.047075][T18701] loop7: detected capacity change from 0 to 512
[  207.052886][T18694] SELinux: failed to load policy
[  207.070184][T18701] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  207.078449][T18701] EXT4-fs (loop7): orphan cleanup on readonly fs
[  207.086339][T18701] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.3399: corrupted inode contents
[  207.098827][T18701] EXT4-fs (loop7): Remounting filesystem read-only
[  207.105635][T18701] EXT4-fs (loop7): 1 truncate cleaned up
[  207.112527][   T52] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  207.123124][   T52] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  207.133921][   T52] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started
[  207.144503][T18701] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  207.167245][T15444] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.304660][T18731] loop7: detected capacity change from 0 to 2048
[  207.329729][T18731] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  207.372614][T15444] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[  207.390585][T15444] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  207.403115][T15444] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.425169][T18749] loop7: detected capacity change from 0 to 1024
[  207.431882][T18749] EXT4-fs: Ignoring removed orlov option
[  207.450295][T18749] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  207.480167][T18749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=18749 comm=syz.7.3412
[  207.526318][T15444] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.622177][T18771] binfmt_misc: register: failed to install interpreter file ./file2
[  207.682499][T18776] loop7: detected capacity change from 0 to 2048
[  207.699515][T18776] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  207.738966][T15444] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[  207.753676][T15444] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  207.767012][T15444] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.832756][T18790] loop7: detected capacity change from 0 to 1024
[  207.839563][T18790] EXT4-fs: Ignoring removed orlov option
[  207.850378][T18790] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  207.868941][T18790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=18790 comm=syz.7.3427
[  207.907889][T15444] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.079089][T18821] SELinux: failed to load policy
[  208.084274][T18825] loop7: detected capacity change from 0 to 1024
[  208.091340][T18825] EXT4-fs: Ignoring removed orlov option
[  208.126995][T18825] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  208.144849][T18825] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=18825 comm=syz.7.3440
[  208.192034][T15444] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.205693][T18839] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3444'.
[  208.214764][T18839] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3444'.
[  208.277860][T18851] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3449'.
[  208.286878][T18851] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3449'.
[  208.340658][T18864] binfmt_misc: register: failed to install interpreter file ./file2
[  208.385859][T18879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3456'.
[  208.389815][T18878] loop7: detected capacity change from 0 to 1024
[  208.401771][T18878] EXT4-fs: Ignoring removed mblk_io_submit option
[  208.410191][T18878] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  208.433616][T18882] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=18882 comm=syz.0.3458
[  208.475870][T18878] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.499009][T18878] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3457'.
[  208.508073][T18878] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3457'.
[  208.572367][T15444] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.609489][T18911] hub 1-0:1.0: USB hub found
[  208.618591][T18918] binfmt_misc: register: failed to install interpreter file ./file2
[  208.638833][T18911] hub 1-0:1.0: 8 ports detected
[  208.658748][ T3421] kernel write not supported for file bpf-prog (pid: 3421 comm: kworker/1:3)
[  208.718886][T18911] netdevsim netdevsim0: Direct firmware load for þ failed with error -2
[  208.749767][ T3401] hid-generic 0000:0000:10001.0024: unknown main item tag 0x7
[  208.757298][ T3401] hid-generic 0000:0000:10001.0024: unknown main item tag 0x0
[  208.764865][ T3401] hid-generic 0000:0000:10001.0024: unknown main item tag 0x0
[  208.772408][ T3401] hid-generic 0000:0000:10001.0024: unknown main item tag 0x0
[  208.779951][ T3401] hid-generic 0000:0000:10001.0024: unknown main item tag 0x0
[  208.787650][ T3401] hid-generic 0000:0000:10001.0024: unknown main item tag 0x0
[  208.795299][ T3401] hid-generic 0000:0000:10001.0024: unknown main item tag 0x0
[  208.802848][ T3401] hid-generic 0000:0000:10001.0024: unknown main item tag 0x0
[  208.810407][ T3401] hid-generic 0000:0000:10001.0024: unknown main item tag 0x0
[  208.817961][ T3401] hid-generic 0000:0000:10001.0024: unknown main item tag 0x0
[  208.832161][T18911] team_slave_0: entered promiscuous mode
[  208.837886][T18911] team_slave_1: entered promiscuous mode
[  208.846372][T18911] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  208.858218][T18938] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  208.867478][T18935] loop7: detected capacity change from 0 to 1024
[  208.876019][ T3401] hid-generic 0000:0000:10001.0024: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  208.878645][T18935] EXT4-fs: Ignoring removed orlov option
[  208.916889][T18935] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  208.971211][T18935] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=18935 comm=syz.7.3474
[  209.146156][T15444] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.207631][T18987] loop8: detected capacity change from 0 to 164
[  209.233693][T18987] syz.8.3487: attempt to access beyond end of device
[  209.233693][T18987] loop8: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  209.259887][T18987] syz.8.3487: attempt to access beyond end of device
[  209.259887][T18987] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164
[  209.439539][T19013] loop7: detected capacity change from 0 to 1024
[  209.446365][T19013] EXT4-fs: Ignoring removed orlov option
[  209.472530][T19022] binfmt_misc: register: failed to install interpreter file ./file2
[  209.491384][T19013] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  209.509965][T19013] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=19013 comm=syz.7.3496
[  209.583932][T15444] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.651706][T19033] loop8: detected capacity change from 0 to 1024
[  209.658556][T19033] EXT4-fs: Ignoring removed mblk_io_submit option
[  209.667066][T19033] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  209.755563][T19049] xt_hashlimit: max too large, truncated to 1048576
[  209.762966][T19049] FAULT_INJECTION: forcing a failure.
[  209.762966][T19049] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  209.776109][T19049] CPU: 0 UID: 0 PID: 19049 Comm: syz.7.3508 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  209.776144][T19049] Tainted: [W]=WARN
[  209.776166][T19049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  209.776179][T19049] Call Trace:
[  209.776186][T19049]  <TASK>
[  209.776194][T19049]  __dump_stack+0x1d/0x30
[  209.776293][T19049]  dump_stack_lvl+0xe8/0x140
[  209.776316][T19049]  dump_stack+0x15/0x1b
[  209.776335][T19049]  should_fail_ex+0x265/0x280
[  209.776356][T19049]  should_fail+0xb/0x20
[  209.776371][T19049]  should_fail_usercopy+0x1a/0x20
[  209.776402][T19049]  _copy_to_user+0x20/0xa0
[  209.776426][T19049]  simple_read_from_buffer+0xb5/0x130
[  209.776451][T19049]  proc_fail_nth_read+0x10e/0x150
[  209.776480][T19049]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  209.776532][T19049]  vfs_read+0x1a8/0x770
[  209.776553][T19049]  ? __rcu_read_unlock+0x4f/0x70
[  209.776651][T19049]  ? __fget_files+0x184/0x1c0
[  209.776688][T19049]  ksys_read+0xda/0x1a0
[  209.776714][T19049]  __x64_sys_read+0x40/0x50
[  209.776760][T19049]  x64_sys_call+0x27c0/0x3000
[  209.776782][T19049]  do_syscall_64+0xd2/0x200
[  209.776802][T19049]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  209.776832][T19049]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  209.776930][T19049]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.776953][T19049] RIP: 0033:0x7f56118de0dc
[  209.777046][T19049] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  209.777065][T19049] RSP: 002b:00007f561033f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  209.777083][T19049] RAX: ffffffffffffffda RBX: 00007f5611b35fa0 RCX: 00007f56118de0dc
[  209.777096][T19049] RDX: 000000000000000f RSI: 00007f561033f0a0 RDI: 0000000000000007
[  209.777117][T19049] RBP: 00007f561033f090 R08: 0000000000000000 R09: 0000000000000000
[  209.777175][T19049] R10: 0000200000000fc0 R11: 0000000000000246 R12: 0000000000000002
[  209.777187][T19049] R13: 00007f5611b36038 R14: 00007f5611b35fa0 R15: 00007ffcfa550ae8
[  209.777204][T19049]  </TASK>
[  209.880640][T19033] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  210.018558][T19056] SELinux: security_context_str_to_sid (syz1) failed with errno=-22
[  210.048995][T19033] __nla_validate_parse: 5 callbacks suppressed
[  210.049031][T19033] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3503'.
[  210.064170][T19033] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3503'.
[  210.107450][T19058] SELinux: failed to load policy
[  210.127489][T16493] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.209427][T19061] netlink: 'syz.9.3511': attribute type 21 has an invalid length.
[  210.240203][T19069] loop8: detected capacity change from 0 to 1024
[  210.257816][T19069] EXT4-fs: Ignoring removed orlov option
[  210.268587][T19069] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  210.402094][T19069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=19069 comm=syz.8.3513
[  211.162352][T19061] netlink: 156 bytes leftover after parsing attributes in process `syz.9.3511'.
[  211.171521][T19061] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3511'.
[  211.226890][   T29] kauditd_printk_skb: 835 callbacks suppressed
[  211.226904][   T29] audit: type=1326 audit(1762252747.191:34933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19016 comm="syz.0.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fa3f611f6c9 code=0x7ffc0000
[  211.256698][   T29] audit: type=1326 audit(1762252747.191:34934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19016 comm="syz.0.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa3f6116567 code=0x7ffc0000
[  211.280403][   T29] audit: type=1326 audit(1762252747.191:34935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19016 comm="syz.0.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa3f60bb779 code=0x7ffc0000
[  211.304220][   T29] audit: type=1326 audit(1762252747.191:34936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19016 comm="syz.0.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa3f6116567 code=0x7ffc0000
[  211.327781][   T29] audit: type=1326 audit(1762252747.191:34937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19016 comm="syz.0.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa3f60bb779 code=0x7ffc0000
[  211.351449][   T29] audit: type=1326 audit(1762252747.191:34938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19016 comm="syz.0.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa3f6116567 code=0x7ffc0000
[  211.375026][   T29] audit: type=1326 audit(1762252747.191:34939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19016 comm="syz.0.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa3f60bb779 code=0x7ffc0000
[  211.398506][   T29] audit: type=1326 audit(1762252747.191:34940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19016 comm="syz.0.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa3f6116567 code=0x7ffc0000
[  211.422244][   T29] audit: type=1326 audit(1762252747.191:34941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19016 comm="syz.0.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa3f60bb779 code=0x7ffc0000
[  211.445808][   T29] audit: type=1326 audit(1762252747.191:34942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19016 comm="syz.0.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa3f6116567 code=0x7ffc0000
[  211.474945][T16493] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.522219][T19097] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3520'.
[  211.532764][T19099] binfmt_misc: register: failed to install interpreter file ./file2
[  211.637763][T19112] loop8: detected capacity change from 0 to 128
[  211.657711][T19112] FAT-fs (loop8): Directory bread(block 32) failed
[  211.672381][T19112] FAT-fs (loop8): Directory bread(block 33) failed
[  211.692016][T19112] FAT-fs (loop8): Directory bread(block 34) failed
[  211.700171][T19112] FAT-fs (loop8): Directory bread(block 35) failed
[  211.706724][T19112] FAT-fs (loop8): Directory bread(block 36) failed
[  211.713268][T19112] FAT-fs (loop8): Directory bread(block 37) failed
[  211.723589][T19112] FAT-fs (loop8): Directory bread(block 38) failed
[  211.730217][T19112] FAT-fs (loop8): Directory bread(block 39) failed
[  211.736789][T19112] FAT-fs (loop8): Directory bread(block 40) failed
[  211.743354][T19112] FAT-fs (loop8): Directory bread(block 41) failed
[  211.849685][T19122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3529'.
[  211.858624][T19122] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3529'.
[  211.945606][ T3394] kernel write not supported for file bpf-prog (pid: 3394 comm: kworker/0:3)
[  212.140538][T19140] loop8: detected capacity change from 0 to 512
[  212.147592][T19145] SELinux: security_context_str_to_sid (syz1) failed with errno=-22
[  212.345172][T19162] loop8: detected capacity change from 0 to 2048
[  212.369609][T19162] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  212.406892][T16493] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[  212.478112][T16493] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  212.493734][T19170] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3544'.
[  212.516458][T16493] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.566233][T19176] loop8: detected capacity change from 0 to 1024
[  212.573412][T19176] ext4: Unknown parameter 'dont_hash'
[  212.580930][T19178] loop7: detected capacity change from 0 to 16384
[  212.619468][T19184] loop9: detected capacity change from 0 to 512
[  212.629238][T19184] EXT4-fs warning (device loop9): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  212.645957][T19184] EXT4-fs (loop9): mount failed
[  212.750257][T19190] loop7: detected capacity change from 16384 to 0
[  212.750568][    C1] I/O error, dev loop7, sector 14592 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2
[  212.775297][T19201] loop9: detected capacity change from 0 to 512
[  212.789924][T19201] EXT4-fs (loop9): 1 orphan inode deleted
[  212.790423][T19201] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  212.808218][   T12] EXT4-fs error (device loop9): ext4_release_dquot:6981: comm kworker/u8:0: Failed to release dquot type 1
[  212.875818][T19208] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3550'.
[  212.929646][T19211] SELinux: failed to load policy
[  212.942096][T17549] EXT4-fs error (device loop9): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /74/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  212.963683][T17549] EXT4-fs error (device loop9): ext4_empty_dir:3086: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  212.983743][T17549] EXT4-fs warning (device loop9): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.'
[  212.996146][T17549] EXT4-fs error (device loop9): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /74/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  213.019166][T17549] EXT4-fs error (device loop9): ext4_empty_dir:3086: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  213.047944][T17549] EXT4-fs warning (device loop9): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.'
[  213.059545][T17549] EXT4-fs error (device loop9): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /74/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  213.101912][T17549] EXT4-fs error (device loop9): ext4_empty_dir:3086: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  213.156045][T17549] EXT4-fs warning (device loop9): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.'
[  213.172387][    T9] hid-generic 0000:3000000:0000.0025: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  213.212370][T17549] EXT4-fs error (device loop9): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /74/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  213.224542][T19235] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3562'.
[  213.234512][T17549] EXT4-fs error (device loop9): ext4_empty_dir:3086: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  213.283552][T17549] EXT4-fs warning (device loop9): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.'
[  213.299650][T17549] EXT4-fs error (device loop9): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /74/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  213.300836][T19239] loop7: detected capacity change from 0 to 164
[  213.324083][T17549] EXT4-fs warning (device loop9): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.'
[  213.343349][T17549] EXT4-fs warning (device loop9): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.'
[  213.355668][T17549] EXT4-fs warning (device loop9): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.'
[  213.367718][T17549] EXT4-fs warning (device loop9): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.'
[  213.394993][T17549] EXT4-fs warning (device loop9): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.'
[  213.416629][T17549] EXT4-fs warning (device loop9): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.'
[  213.425252][T19246] SELinux: failed to load policy
[  213.573012][T19269] loop7: detected capacity change from 0 to 1024
[  213.583376][T19269] EXT4-fs: Ignoring removed orlov option
[  213.608260][T19269] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=19269 comm=syz.7.3574
[  213.732576][   T52] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.791383][   T52] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.803730][T19294] SELinux: failed to load policy
[  213.851504][   T52] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.901140][   T52] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.927271][T19300] lo speed is unknown, defaulting to 1000
[  214.009142][   T52] bridge_slave_1: left allmulticast mode
[  214.014891][   T52] bridge_slave_1: left promiscuous mode
[  214.020602][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.028751][   T52] bridge_slave_0: left allmulticast mode
[  214.034409][   T52] bridge_slave_0: left promiscuous mode
[  214.040357][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.093328][T19357] loop7: detected capacity change from 0 to 1024
[  214.134978][T19357] EXT4-fs: Ignoring removed orlov option
[  214.215184][T19357] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=19357 comm=syz.7.3588
[  214.453750][T19366] loop8: detected capacity change from 0 to 2048
[  214.471779][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  214.482538][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  214.492807][   T52] bond0 (unregistering): Released all slaves
[  214.529141][T19373] binfmt_misc: register: failed to install interpreter file ./file2
[  214.555294][T16493] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[  214.608380][T16493] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  214.631612][T19300] chnl_net:caif_netlink_parms(): no params data found
[  214.657511][   T52] hsr_slave_0: left promiscuous mode
[  214.676071][   T52] hsr_slave_1: left promiscuous mode
[  214.684579][T19465] loop7: detected capacity change from 0 to 164
[  214.695962][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  214.703429][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[  214.795802][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  214.803283][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[  214.835013][   T52] veth1_macvtap: left promiscuous mode
[  214.848499][T19477] loop7: detected capacity change from 0 to 1024
[  214.854902][   T52] veth0_macvtap: left promiscuous mode
[  214.855393][T19477] EXT4-fs: Ignoring removed mblk_io_submit option
[  214.860853][   T52] veth1_vlan: left promiscuous mode
[  214.867815][T19477] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  214.880285][   T52] veth0_vlan: left promiscuous mode
[  214.929737][T19478] SELinux: failed to load policy
[  215.149188][   T52] team0 (unregistering): Port device team_slave_1 removed
[  215.159322][   T52] team0 (unregistering): Port device team_slave_0 removed
[  215.362861][T19477] __nla_validate_parse: 2 callbacks suppressed
[  215.362877][T19477] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3598'.
[  215.378168][T19477] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3598'.
[  215.444555][T19300] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.451732][T19300] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.466034][T19300] bridge_slave_0: entered allmulticast mode
[  215.475325][T19300] bridge_slave_0: entered promiscuous mode
[  215.483685][T19300] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.490869][T19300] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.498068][T19300] bridge_slave_1: entered allmulticast mode
[  215.504469][T19300] bridge_slave_1: entered promiscuous mode
[  215.525278][T19300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  215.544843][T19300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  215.575592][T19300] team0: Port device team_slave_0 added
[  215.584439][T19300] team0: Port device team_slave_1 added
[  215.632757][T19300] batman_adv: batadv0: Adding interface: batadv_slave_0
[  215.639758][T19300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  215.646330][T19542] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=19542 comm=syz.2.3602
[  215.665729][T19300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  215.666778][T19300] batman_adv: batadv0: Adding interface: batadv_slave_1
[  215.696010][T19300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  215.721943][T19300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  215.762578][   T52] IPVS: stop unused estimator thread 0...
[  215.764003][T19300] hsr_slave_0: entered promiscuous mode
[  215.818690][T19300] hsr_slave_1: entered promiscuous mode
[  215.824667][T19300] debugfs: 'hsr0' already exists in 'hsr'
[  215.830442][T19300] Cannot create hsr debugfs directory
[  216.285199][T19300] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  216.307146][T19300] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  216.325729][T19300] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  216.353052][T19300] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  216.478613][T19300] 8021q: adding VLAN 0 to HW filter on device bond0
[  216.494064][T19300] 8021q: adding VLAN 0 to HW filter on device team0
[  216.510786][T19777] SELinux: failed to load policy
[  216.516807][ T7892] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.523973][ T7892] bridge0: port 1(bridge_slave_0) entered forwarding state
[  216.533516][T19783] binfmt_misc: register: failed to install interpreter file ./file2
[  216.550472][ T7892] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.557593][ T7892] bridge0: port 2(bridge_slave_1) entered forwarding state
[  216.587678][T19791] loop8: detected capacity change from 0 to 512
[  216.607937][T19791] EXT4-fs (loop8): 1 orphan inode deleted
[  216.614650][T19300] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  216.625051][T19300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  216.663469][T19791] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  216.690278][ T7892] __quota_error: 512 callbacks suppressed
[  216.690296][ T7892] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  216.705851][ T7892] EXT4-fs error (device loop8): ext4_release_dquot:6981: comm kworker/u8:25: Failed to release dquot type 1
[  216.710776][T19803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3613'.
[  216.744800][T19791] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3611'.
[  216.757481][   T29] audit: type=1326 audit(2000000004.620:35452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19806 comm="syz.0.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f611f6c9 code=0x7ffc0000
[  216.781114][   T29] audit: type=1326 audit(2000000004.620:35453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19806 comm="syz.0.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa3f611f6c9 code=0x7ffc0000
[  216.804808][   T29] audit: type=1326 audit(2000000004.620:35454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19806 comm="syz.0.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f611f6c9 code=0x7ffc0000
[  216.828541][   T29] audit: type=1326 audit(2000000004.620:35455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19806 comm="syz.0.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f611f6c9 code=0x7ffc0000
[  216.853347][   T29] audit: type=1326 audit(2000000004.650:35456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19806 comm="syz.0.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fa3f611f6c9 code=0x7ffc0000
[  216.877005][   T29] audit: type=1326 audit(2000000004.650:35457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19806 comm="syz.0.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f611f6c9 code=0x7ffc0000
[  216.888401][T19808] netlink: 'syz.0.3614': attribute type 1 has an invalid length.
[  216.900632][   T29] audit: type=1326 audit(2000000004.650:35458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19806 comm="syz.0.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f611f6c9 code=0x7ffc0000
[  216.908410][T19808] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3614'.
[  216.941153][   T29] audit: type=1326 audit(2000000004.650:35459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19806 comm="syz.0.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa3f611f6c9 code=0x7ffc0000
[  216.964712][   T29] audit: type=1326 audit(2000000004.650:35460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19806 comm="syz.0.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f611f6c9 code=0x7ffc0000
[  217.001116][T19827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  217.012436][T19827] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  217.013723][T19300] 8021q: adding VLAN 0 to HW filter on device batadv0
[  217.038922][T16493] EXT4-fs error (device loop8): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /87/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  217.070086][T16493] EXT4-fs error (device loop8): ext4_empty_dir:3086: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  217.089181][T16493] EXT4-fs warning (device loop8): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.'
[  217.128225][T16493] EXT4-fs error (device loop8): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /87/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  217.150054][ T7941] Bluetooth: hci0: Frame reassembly failed (-84)
[  217.188323][T16493] EXT4-fs error (device loop8): ext4_empty_dir:3086: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  217.234978][T19300] veth0_vlan: entered promiscuous mode
[  217.248137][T16493] EXT4-fs warning (device loop8): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.'
[  217.260487][T19300] veth1_vlan: entered promiscuous mode
[  217.273322][T16493] EXT4-fs error (device loop8): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /87/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  217.297904][T19300] veth0_macvtap: entered promiscuous mode
[  217.308537][T19300] veth1_macvtap: entered promiscuous mode
[  217.319644][T19300] batman_adv: batadv0: Interface activated: batadv_slave_0
[  217.329868][T16493] EXT4-fs error (device loop8): ext4_empty_dir:3086: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  217.354635][T19300] batman_adv: batadv0: Interface activated: batadv_slave_1
[  217.366234][ T7892] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  217.375277][ T7892] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  217.387500][T16493] EXT4-fs warning (device loop8): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.'
[  217.405895][ T7892] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  217.418124][T16493] EXT4-fs error (device loop8): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /87/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  217.440703][ T7892] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  217.450198][T16493] EXT4-fs error (device loop8): ext4_empty_dir:3086: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  217.472024][T16493] EXT4-fs warning (device loop8): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.'
[  217.499954][T16493] EXT4-fs error (device loop8): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /87/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  217.523460][T16493] EXT4-fs warning (device loop8): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.'
[  217.545819][T16493] EXT4-fs warning (device loop8): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.'
[  217.562217][T16493] EXT4-fs warning (device loop8): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.'
[  217.575001][T16493] EXT4-fs warning (device loop8): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.'
[  217.598287][T16493] EXT4-fs warning (device loop8): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.'
[  217.621779][T16493] EXT4-fs warning (device loop8): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.'
[  217.668170][T19918] binfmt_misc: register: failed to install interpreter file ./file2
[  217.750706][T19930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3624'.
[  217.965267][ T7892] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  217.975628][ T7892] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.106204][ T7892] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  218.116668][ T7892] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.226426][ T7892] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  218.236880][ T7892] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.443948][ T7892] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  218.454284][ T7892] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.585245][ T7892] bridge_slave_1: left allmulticast mode
[  218.591097][ T7892] bridge_slave_1: left promiscuous mode
[  218.596745][ T7892] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.618381][T19991] loop7: detected capacity change from 0 to 16384
[  218.700013][ T7892] bridge_slave_0: left allmulticast mode
[  218.705670][ T7892] bridge_slave_0: left promiscuous mode
[  218.711380][ T7892] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.808530][T20000] loop7: detected capacity change from 16384 to 0
[  218.815063][    C1] I/O error, dev loop7, sector 6528 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2
[  218.842928][ T7892] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  218.874937][ T7892] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  218.889270][ T7892] bond0 (unregistering): Released all slaves
[  218.924107][T19958] lo speed is unknown, defaulting to 1000
[  219.073068][T20025] loop4: detected capacity change from 0 to 2048
[  219.083322][ T7892] hsr_slave_0: left promiscuous mode
[  219.103643][ T7892] hsr_slave_1: left promiscuous mode
[  219.118125][ T7892] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  219.125536][ T7892] batman_adv: batadv0: Removing interface: batadv_slave_0
[  219.134512][ T7892] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  219.141948][ T7892] batman_adv: batadv0: Removing interface: batadv_slave_1
[  219.183357][ T7892] veth1_macvtap: left promiscuous mode
[  219.189370][ T7892] veth0_macvtap: left promiscuous mode
[  219.200522][ T7892] veth1_vlan: left promiscuous mode
[  219.225208][ T7892] veth0_vlan: left promiscuous mode
[  219.230607][ T6466] Bluetooth: hci0: command 0x1003 tx timeout
[  219.236710][ T3507] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  219.247746][T20082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3636'.
[  219.300162][T20065] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set
[  219.322008][ T7892] team0 (unregistering): Port device team_slave_1 removed
[  219.334871][ T7892] team0 (unregistering): Port device team_slave_0 removed
[  219.405489][T20089] binfmt_misc: register: failed to install interpreter file ./file2
[  219.457387][T19958] chnl_net:caif_netlink_parms(): no params data found
[  219.555318][T19958] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.562614][T19958] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.577277][T19958] bridge_slave_0: entered allmulticast mode
[  219.583860][T19958] bridge_slave_0: entered promiscuous mode
[  219.591059][T19958] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.598197][T19958] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.605524][T19958] bridge_slave_1: entered allmulticast mode
[  219.613582][T19958] bridge_slave_1: entered promiscuous mode
[  219.641010][T19958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  219.660532][T19958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  219.697511][T19958] team0: Port device team_slave_0 added
[  219.708736][T19958] team0: Port device team_slave_1 added
[  219.741646][T19958] batman_adv: batadv0: Adding interface: batadv_slave_0
[  219.748683][T19958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  219.774707][T19958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  219.786065][T19958] batman_adv: batadv0: Adding interface: batadv_slave_1
[  219.793136][T19958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  219.819148][T19958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  219.831785][T20313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3648'.
[  219.840701][T20313] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3648'.
[  219.878064][T19958] hsr_slave_0: entered promiscuous mode
[  219.900106][T19958] hsr_slave_1: entered promiscuous mode
[  219.928126][T19958] debugfs: 'hsr0' already exists in 'hsr'
[  219.933902][T19958] Cannot create hsr debugfs directory
[  219.955409][T20344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=20344 comm=syz.2.3649
[  220.010716][T20374] binfmt_misc: register: failed to install interpreter file ./file2
[  220.085900][T20408] SELinux: security_context_str_to_sid (syz1) failed with errno=-22
[  220.357570][T19958] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  220.378570][T19958] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  220.397317][T19958] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  220.408415][T19958] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  220.497661][T19958] 8021q: adding VLAN 0 to HW filter on device bond0
[  220.517448][T19958] 8021q: adding VLAN 0 to HW filter on device team0
[  220.544921][ T7892] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.552024][ T7892] bridge0: port 1(bridge_slave_0) entered forwarding state
[  220.625926][ T7892] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.633107][ T7892] bridge0: port 2(bridge_slave_1) entered forwarding state
[  220.696269][T20481] lo speed is unknown, defaulting to 1000
[  220.698752][T19958] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  220.725300][T20496] loop4: detected capacity change from 0 to 1024
[  220.738550][T20496] EXT4-fs: Ignoring removed orlov option
[  220.785115][T20494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=20494 comm=syz.4.3660
[  220.878360][T20517] loop7: detected capacity change from 0 to 1024
[  220.888486][T20517] EXT4-fs: Ignoring removed mblk_io_submit option
[  220.928334][T20517] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  220.942765][T19958] 8021q: adding VLAN 0 to HW filter on device batadv0
[  221.091976][T19958] veth0_vlan: entered promiscuous mode
[  221.135654][T19958] veth1_vlan: entered promiscuous mode
[  221.260626][T19958] veth0_macvtap: entered promiscuous mode
[  221.270352][T19958] veth1_macvtap: entered promiscuous mode
[  221.289145][T19958] batman_adv: batadv0: Interface activated: batadv_slave_0
[  221.299655][T19958] batman_adv: batadv0: Interface activated: batadv_slave_1
[  221.341528][  T419] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  221.367970][  T419] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  221.446801][  T419] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  221.480626][  T419] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  221.735457][   T29] kauditd_printk_skb: 348 callbacks suppressed
[  221.735473][   T29] audit: type=1326 audit(2000000009.590:35808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20609 comm="syz.3.3673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19342bf6c9 code=0x7ffc0000
[  221.793653][   T29] audit: type=1326 audit(2000000009.630:35809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20609 comm="syz.3.3673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19342bf6c9 code=0x7ffc0000
[  221.822192][T20616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3673'.
[  221.831110][T20616] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3673'.
[  221.868160][ T7882] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  221.877230][ T7882] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  221.888070][   T29] audit: type=1326 audit(2000000009.680:35810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20609 comm="syz.3.3673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f19342bf6c9 code=0x7ffc0000
[  221.911779][   T29] audit: type=1326 audit(2000000009.680:35811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20609 comm="syz.3.3673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19342bf6c9 code=0x7ffc0000
[  221.935364][   T29] audit: type=1326 audit(2000000009.680:35812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20609 comm="syz.3.3673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f19342bf6c9 code=0x7ffc0000
[  221.959031][   T29] audit: type=1326 audit(2000000009.680:35813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20609 comm="syz.3.3673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19342bf6c9 code=0x7ffc0000
[  221.968729][ T7882] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  221.982744][   T29] audit: type=1326 audit(2000000009.680:35814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20609 comm="syz.3.3673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f19342bf6c9 code=0x7ffc0000
[  222.014972][   T29] audit: type=1326 audit(2000000009.680:35815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20609 comm="syz.3.3673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19342bf6c9 code=0x7ffc0000
[  222.038758][   T29] audit: type=1326 audit(2000000009.680:35816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20609 comm="syz.3.3673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f19342bf6c9 code=0x7ffc0000
[  222.062896][   T29] audit: type=1326 audit(2000000009.680:35817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20609 comm="syz.3.3673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19342bf6c9 code=0x7ffc0000
[  222.063378][ T7882] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  222.170044][T20641] loop7: detected capacity change from 0 to 164
[  222.262928][T20657] loop4: detected capacity change from 0 to 164
[  222.281362][T20660] SELinux: security_context_str_to_sid (syz1) failed with errno=-22
[  222.291614][T20657] syz.4.3678: attempt to access beyond end of device
[  222.291614][T20657] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  222.310825][T20663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3679'.
[  222.322665][T20657] syz.4.3678: attempt to access beyond end of device
[  222.322665][T20657] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164
[  222.376254][T20671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3681'.
[  222.490691][T20688] loop4: detected capacity change from 0 to 1024
[  222.517936][T20688] EXT4-fs: Ignoring removed mblk_io_submit option
[  222.551311][T20688] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  222.650867][T20688] EXT4-fs mount: 18 callbacks suppressed
[  222.650895][T20688] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  222.738661][T19300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.822971][T20711] loop4: detected capacity change from 0 to 164
[  222.849302][T20711] rock: directory entry would overflow storage
[  222.855488][T20711] rock: sig=0x4d4e, size=5, remaining=4
[  222.867206][T20711] isofs: isofs_export_get_parent(): child directory not normalized!
[  222.962476][T20726] binfmt_misc: register: failed to install interpreter file ./file2
[  223.080932][T20741] loop3: detected capacity change from 0 to 1024
[  223.094297][T20741] EXT4-fs: Ignoring removed orlov option
[  223.131467][T20741] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  223.252003][T20741] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=20741 comm=syz.3.3696
[  223.289400][T19958] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.305387][T20771] ip6t_srh: unknown srh match flags  4000
[  223.310137][T20778] loop7: detected capacity change from 0 to 1024
[  223.317902][T20778] EXT4-fs: Ignoring removed orlov option
[  223.337358][T20785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3701'.
[  223.357468][T20778] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  223.376549][T20787] loop4: detected capacity change from 0 to 164
[  223.379987][T20778] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=20778 comm=syz.7.3702
[  223.407637][T20787] syz.4.3703: attempt to access beyond end of device
[  223.407637][T20787] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  223.433509][T20787] syz.4.3703: attempt to access beyond end of device
[  223.433509][T20787] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164
[  223.469071][T15444] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.538342][T20807] binfmt_misc: register: failed to install interpreter file ./file2
[  223.720453][T20833] ip6t_srh: unknown srh match flags  4000
[  223.786967][T20846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3723'.
[  224.016438][T20869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3732'.
[  224.019999][T20866] FAULT_INJECTION: forcing a failure.
[  224.019999][T20866] name failslab, interval 1, probability 0, space 0, times 0
[  224.037944][T20866] CPU: 0 UID: 0 PID: 20866 Comm: syz.3.3730 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  224.037977][T20866] Tainted: [W]=WARN
[  224.037983][T20866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  224.037999][T20866] Call Trace:
[  224.038006][T20866]  <TASK>
[  224.038018][T20866]  __dump_stack+0x1d/0x30
[  224.038040][T20866]  dump_stack_lvl+0xe8/0x140
[  224.038125][T20866]  dump_stack+0x15/0x1b
[  224.038156][T20866]  should_fail_ex+0x265/0x280
[  224.038176][T20866]  should_failslab+0x8c/0xb0
[  224.038203][T20866]  kmem_cache_alloc_bulk_noprof+0x50/0x3d0
[  224.038266][T20866]  ? bpf_test_run_xdp_live+0x736/0x11c0
[  224.038299][T20866]  bpf_test_run_xdp_live+0xdbd/0x11c0
[  224.038395][T20866]  ? synchronize_rcu+0x45/0x320
[  224.038414][T20866]  ? bpf_test_run_xdp_live+0x354/0x11c0
[  224.038562][T20866]  bpf_prog_test_run_xdp+0x525/0x970
[  224.038592][T20866]  ? kstrtouint+0x51/0xc0
[  224.038645][T20866]  ? __rcu_read_unlock+0x4f/0x70
[  224.038671][T20866]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  224.038701][T20866]  bpf_prog_test_run+0x22a/0x390
[  224.038723][T20866]  __sys_bpf+0x4c0/0x7c0
[  224.038770][T20866]  __x64_sys_bpf+0x41/0x50
[  224.038868][T20866]  x64_sys_call+0x2aee/0x3000
[  224.038924][T20866]  do_syscall_64+0xd2/0x200
[  224.038942][T20866]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  224.039093][T20866]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  224.039135][T20866]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.039155][T20866] RIP: 0033:0x7f19342bf6c9
[  224.039169][T20866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  224.039186][T20866] RSP: 002b:00007f1932d1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  224.039247][T20866] RAX: ffffffffffffffda RBX: 00007f1934515fa0 RCX: 00007f19342bf6c9
[  224.039267][T20866] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  224.039279][T20866] RBP: 00007f1932d1f090 R08: 0000000000000000 R09: 0000000000000000
[  224.039290][T20866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  224.039301][T20866] R13: 00007f1934516038 R14: 00007f1934515fa0 R15: 00007ffcdf8dd6a8
[  224.039388][T20866]  </TASK>
[  224.331714][T20874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3734'.
[  224.463757][T20885] loop7: detected capacity change from 0 to 164
[  224.483402][T20883] loop4: detected capacity change from 0 to 1024
[  224.496928][T20885] syz.7.3739: attempt to access beyond end of device
[  224.496928][T20885] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  224.513106][T20885] syz.7.3739: attempt to access beyond end of device
[  224.513106][T20885] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164
[  224.518464][T20883] EXT4-fs: Ignoring removed mblk_io_submit option
[  224.553542][T20883] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  224.576462][T20883] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  224.659306][T19300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.712836][T20909] loop4: detected capacity change from 0 to 2048
[  224.831216][T20909] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  224.916398][T19300] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[  224.945821][T19300] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  224.968436][T19300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.972535][T20936] loop7: detected capacity change from 0 to 2048
[  224.999464][T20936] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  225.016453][T20945] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  225.026390][T20945] SELinux: failed to load policy
[  225.051416][T15444] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[  225.066077][T15444] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  225.083078][T15444] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.362488][T20962] loop7: detected capacity change from 0 to 1024
[  225.378648][T20962] EXT4-fs: Ignoring removed orlov option
[  225.402275][T20969] loop4: detected capacity change from 0 to 1024
[  225.410489][T20962] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  225.423615][T20969] EXT4-fs: Ignoring removed orlov option
[  225.432770][T20962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=20962 comm=syz.7.3765
[  225.441768][T20969] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  225.469683][T20969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=20969 comm=syz.4.3767
[  225.470023][T15444] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.532046][T19300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.572968][T20989] loop4: detected capacity change from 0 to 164
[  225.585587][T20989] syz.4.3772: attempt to access beyond end of device
[  225.585587][T20989] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  225.600206][T20989] syz.4.3772: attempt to access beyond end of device
[  225.600206][T20989] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164
[  225.656284][T20992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3773'.
[  225.799715][T21015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=21015 comm=syz.0.3779
[  226.036443][T21031] loop3: detected capacity change from 0 to 164
[  226.057637][T21031] syz.3.3784: attempt to access beyond end of device
[  226.057637][T21031] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  226.084091][T21031] syz.3.3784: attempt to access beyond end of device
[  226.084091][T21031] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164
[  226.184928][ T6518] hid_parser_main: 57 callbacks suppressed
[  226.184945][ T6518] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  226.198596][ T6518] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  226.206014][ T6518] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  226.213440][ T6518] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  226.220840][ T6518] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  226.228453][ T6518] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  226.235861][ T6518] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  226.243267][ T6518] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  226.250709][ T6518] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  226.258157][ T6518] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  226.266824][ T6518] hid-generic 0000:0000:0000.0026: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  226.403832][T21047] loop3: detected capacity change from 0 to 2048
[  226.469529][T21047] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  226.522068][T19958] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[  226.552176][T19958] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  226.643154][T19958] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.654492][T21056] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=21056 comm=syz.2.3791
[  226.705129][T21062] loop3: detected capacity change from 0 to 164
[  226.744414][T21062] rock: directory entry would overflow storage
[  226.750827][T21062] rock: sig=0x4d4e, size=5, remaining=4
[  226.756686][T21062] isofs: isofs_export_get_parent(): child directory not normalized!
[  226.800296][T21069] netlink: 4 bytes leftover after parsing attributes in process `GPL'.
[  226.817047][   T29] kauditd_printk_skb: 872 callbacks suppressed
[  226.817061][   T29] audit: type=1326 audit(2000000014.670:36690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21074 comm="syz.3.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19342bf6c9 code=0x7ffc0000
[  226.847708][   T29] audit: type=1326 audit(2000000014.670:36691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21074 comm="syz.3.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f19342bf6c9 code=0x7ffc0000
[  226.871447][   T29] audit: type=1326 audit(2000000014.670:36692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21074 comm="syz.3.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19342bf6c9 code=0x7ffc0000
[  226.908175][   T29] audit: type=1326 audit(2000000014.760:36693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21074 comm="syz.3.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19342bf6c9 code=0x7ffc0000
[  226.931804][   T29] audit: type=1326 audit(2000000014.760:36694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21074 comm="syz.3.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f19342bf6c9 code=0x7ffc0000
[  226.955687][   T29] audit: type=1326 audit(2000000014.760:36695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21074 comm="syz.3.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19342bf6c9 code=0x7ffc0000
[  226.979246][   T29] audit: type=1326 audit(2000000014.760:36696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21074 comm="syz.3.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19342bf6c9 code=0x7ffc0000
[  227.002833][   T29] audit: type=1326 audit(2000000014.760:36697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21074 comm="syz.3.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19342bf6c9 code=0x7ffc0000
[  227.026445][   T29] audit: type=1326 audit(2000000014.760:36698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21074 comm="syz.3.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19342bf6c9 code=0x7ffc0000
[  227.050017][   T29] audit: type=1326 audit(2000000014.760:36699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21074 comm="syz.3.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19342bf6c9 code=0x7ffc0000
[  227.082076][T21077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3797'.
[  227.280528][T21087] SELinux: failed to load policy
[  227.344595][T21094] vhci_hcd: default hub control req: 0314 v001b i0006 l0
[  227.516243][T21103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3807'.
[  227.701319][T21117] loop3: detected capacity change from 0 to 164
[  227.731174][T21117] syz.3.3813: attempt to access beyond end of device
[  227.731174][T21117] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  227.763910][T21117] syz.3.3813: attempt to access beyond end of device
[  227.763910][T21117] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164
[  227.856492][T21122] loop3: detected capacity change from 0 to 2048
[  227.891786][T21122] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  227.999721][T19958] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[  228.033129][T19958] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  228.046221][T19958] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.073995][T21129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3817'.
[  228.158691][T21145] loop3: detected capacity change from 0 to 164
[  228.167849][T21145] rock: directory entry would overflow storage
[  228.174072][T21145] rock: sig=0x4d4e, size=5, remaining=4
[  228.179950][T21145] isofs: isofs_export_get_parent(): child directory not normalized!
[  228.275509][T21156] loop3: detected capacity change from 0 to 512
[  228.283720][T21156] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  228.291934][T21156] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  228.300582][T21156] EXT4-fs (loop3): 1 truncate cleaned up
[  228.306625][T21156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  228.320399][T21156] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 4: comm syz.3.3823: lblock 0 mapped to illegal pblock 4 (length 1)
[  228.324853][T21160] loop4: detected capacity change from 0 to 512
[  228.336818][T21156] EXT4-fs (loop3): Remounting filesystem read-only
[  228.342907][T21160] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  228.355268][T21160] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[  228.363790][T21160] EXT4-fs (loop4): 1 truncate cleaned up
[  228.369914][T21160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  228.389559][T21160] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 4: comm syz.4.3824: lblock 0 mapped to illegal pblock 4 (length 1)
[  228.391913][T21164] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3825'.
[  228.413168][T21160] EXT4-fs (loop4): Remounting filesystem read-only
[  229.125583][T19958] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.175342][T19300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.767425][T21225] loop4: detected capacity change from 0 to 2048
[  229.779854][T21225] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.815792][T21232] loop7: detected capacity change from 0 to 1024
[  229.841493][T19300] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[  229.856780][T19300] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  229.870728][T19300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.881638][T21232] EXT4-fs: Ignoring removed orlov option
[  229.901429][T21232] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.913662][T21237] loop4: detected capacity change from 0 to 164
[  229.923582][T21237] syz.4.3849: attempt to access beyond end of device
[  229.923582][T21237] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  229.927605][T21232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=21232 comm=syz.7.3848
[  229.953531][T21237] syz.4.3849: attempt to access beyond end of device
[  229.953531][T21237] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164
[  230.033177][T21242] SELinux: failed to load policy
[  230.049466][T15444] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.093339][T21254] netlink: 'syz.7.3853': attribute type 1 has an invalid length.
[  230.101142][T21254] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3853'.
[  230.145012][T21264] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3853'.
[  230.288714][T21286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3858'.
[  230.297781][T21286] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3858'.
[  230.357912][T21290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3860'.
[  230.366930][T21290] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3860'.
[  230.402484][T21295] SELinux: failed to load policy
[  230.426885][T21304] loop4: detected capacity change from 0 to 1024
[  230.448877][T21304] EXT4-fs: Ignoring removed mblk_io_submit option
[  230.455850][T21304] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  230.467234][T21308] loop3: detected capacity change from 0 to 164
[  230.475429][T21308] syz.3.3869: attempt to access beyond end of device
[  230.475429][T21308] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  230.489632][T21308] syz.3.3869: attempt to access beyond end of device
[  230.489632][T21308] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164
[  230.519316][T21304] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  230.583469][T21322] loop3: detected capacity change from 0 to 2048
[  230.607246][T21326] SELinux: security_context_str_to_sid (syz1) failed with errno=-22
[  230.618767][T21327] SELinux: security_context_str_to_sid (syz1) failed with errno=-22
[  230.660953][T21322] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  230.690314][T19300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.730895][T19958] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[  230.745788][T19958] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  230.879060][T19958] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.944906][T21349] binfmt_misc: register: failed to install interpreter file ./file2
[  231.162232][T21359] loop7: detected capacity change from 0 to 164
[  231.181179][T21359] syz.7.3881: attempt to access beyond end of device
[  231.181179][T21359] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  231.235075][T21359] syz.7.3881: attempt to access beyond end of device
[  231.235075][T21359] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164
[  231.345518][T21373] SELinux: failed to load policy
[  231.632640][T21405] FAULT_INJECTION: forcing a failure.
[  231.632640][T21405] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  231.645898][T21405] CPU: 1 UID: 0 PID: 21405 Comm: syz.0.3899 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  231.645934][T21405] Tainted: [W]=WARN
[  231.645940][T21405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  231.645950][T21405] Call Trace:
[  231.645958][T21405]  <TASK>
[  231.645967][T21405]  __dump_stack+0x1d/0x30
[  231.645991][T21405]  dump_stack_lvl+0xe8/0x140
[  231.646009][T21405]  dump_stack+0x15/0x1b
[  231.646092][T21405]  should_fail_ex+0x265/0x280
[  231.646165][T21405]  should_fail+0xb/0x20
[  231.646291][T21405]  should_fail_usercopy+0x1a/0x20
[  231.646314][T21405]  _copy_from_user+0x1c/0xb0
[  231.646342][T21405]  ___sys_sendmsg+0xc1/0x1d0
[  231.646371][T21405]  __x64_sys_sendmsg+0xd4/0x160
[  231.646395][T21405]  x64_sys_call+0x191e/0x3000
[  231.646491][T21405]  do_syscall_64+0xd2/0x200
[  231.646509][T21405]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  231.646564][T21405]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  231.646598][T21405]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.646617][T21405] RIP: 0033:0x7fa3f611f6c9
[  231.646630][T21405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  231.646646][T21405] RSP: 002b:00007fa3f4b87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  231.646664][T21405] RAX: ffffffffffffffda RBX: 00007fa3f6375fa0 RCX: 00007fa3f611f6c9
[  231.646679][T21405] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004
[  231.646693][T21405] RBP: 00007fa3f4b87090 R08: 0000000000000000 R09: 0000000000000000
[  231.646767][T21405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  231.646779][T21405] R13: 00007fa3f6376038 R14: 00007fa3f6375fa0 R15: 00007fff391c8e78
[  231.646796][T21405]  </TASK>
[  231.832195][   T29] kauditd_printk_skb: 1036 callbacks suppressed
[  231.832251][   T29] audit: type=1326 audit(2000000019.680:37736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21388 comm="syz.4.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59c21f6c9 code=0x7ffc0000
[  231.862125][   T29] audit: type=1326 audit(2000000019.680:37737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21388 comm="syz.4.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59c21f6c9 code=0x7ffc0000
[  231.885727][   T29] audit: type=1326 audit(2000000019.680:37738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21402 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f084b5f6567 code=0x7ffc0000
[  231.908683][   T29] audit: type=1326 audit(2000000019.680:37739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21402 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f084b59b779 code=0x7ffc0000
[  231.931651][   T29] audit: type=1326 audit(2000000019.680:37740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21402 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f084b5ff6c9 code=0x7ffc0000
[  231.954880][   T29] audit: type=1326 audit(2000000019.680:37741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21402 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084b5ff6c9 code=0x7ffc0000
[  231.977929][   T29] audit: type=1326 audit(2000000019.680:37742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21402 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084b5ff6c9 code=0x7ffc0000
[  232.001102][   T29] audit: type=1326 audit(2000000019.690:37743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21402 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f084b5f6567 code=0x7ffc0000
[  232.024308][   T29] audit: type=1326 audit(2000000019.690:37744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21402 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f084b59b779 code=0x7ffc0000
[  232.047496][   T29] audit: type=1326 audit(2000000019.690:37745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21402 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084b5ff6c9 code=0x7ffc0000
[  232.094198][T21413] __nla_validate_parse: 1 callbacks suppressed
[  232.094214][T21413] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3901'.
[  232.109377][T21413] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3901'.
[  232.192287][T21421] loop7: detected capacity change from 0 to 2048
[  232.241880][T21421] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  232.271776][T21431] FAULT_INJECTION: forcing a failure.
[  232.271776][T21431] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  232.277441][T15444] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[  232.285077][T21431] CPU: 0 UID: 0 PID: 21431 Comm: syz.0.3908 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  232.285110][T21431] Tainted: [W]=WARN
[  232.285117][T21431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  232.285130][T21431] Call Trace:
[  232.285138][T21431]  <TASK>
[  232.285146][T21431]  __dump_stack+0x1d/0x30
[  232.285230][T21431]  dump_stack_lvl+0xe8/0x140
[  232.285251][T21431]  dump_stack+0x15/0x1b
[  232.285288][T21431]  should_fail_ex+0x265/0x280
[  232.285309][T21431]  should_fail_alloc_page+0xf2/0x100
[  232.285341][T21431]  __alloc_frozen_pages_noprof+0xff/0x360
[  232.285364][T21431]  alloc_pages_mpol+0xb3/0x260
[  232.285385][T21431]  ? __rcu_read_lock+0x37/0x50
[  232.285470][T21431]  vma_alloc_folio_noprof+0x1aa/0x300
[  232.285494][T21431]  handle_mm_fault+0xec2/0x2be0
[  232.285521][T21431]  ? vma_start_read+0x141/0x1f0
[  232.285588][T21431]  do_user_addr_fault+0x630/0x1080
[  232.285650][T21431]  ? fpregs_assert_state_consistent+0xb4/0xe0
[  232.285686][T21431]  exc_page_fault+0x62/0xa0
[  232.285792][T21431]  asm_exc_page_fault+0x26/0x30
[  232.285818][T21431] RIP: 0033:0x7fa3f5fe09e0
[  232.285835][T21431] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41
[  232.285854][T21431] RSP: 002b:00007fa3f4b864a0 EFLAGS: 00010202
[  232.285870][T21431] RAX: 0000000000001000 RBX: 00007fa3f4b86540 RCX: 0000000000000003
[  232.285884][T21431] RDX: 0000000000007fe3 RSI: 0000000000000be4 RDI: 00007fa3f4b865e0
[  232.285946][T21431] RBP: 0000000000000004 R08: 00007fa3ec767000 R09: 0000000000000002
[  232.285959][T21431] R10: 0000200000000382 R11: 0000000000000510 R12: 0000000000000801
[  232.285973][T21431] R13: 00007fa3f61bdc40 R14: 0000000000000016 R15: 00007fa3f4b865e0
[  232.286031][T21431]  </TASK>
[  232.286041][T21431] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  232.299676][T15444] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  232.506245][T21434] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3910'.
[  232.529662][T15444] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.556634][T21445] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3909'.
[  232.574088][T21445] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3909'.
[  232.575141][T21436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3911'.
[  232.585363][T21445] veth0: entered promiscuous mode
[  232.625507][T21444] veth0: left promiscuous mode
[  232.638335][T21450] loop4: detected capacity change from 0 to 1024
[  232.645107][T21450] EXT4-fs: Ignoring removed mblk_io_submit option
[  232.654896][T21450] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  232.686740][T21450] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  232.725678][T21450] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3914'.
[  232.734731][T21450] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3914'.
[  232.789639][T19300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.885145][T21472] loop4: detected capacity change from 0 to 164
[  232.896658][T21472] rock: directory entry would overflow storage
[  232.903002][T21472] rock: sig=0x4d4e, size=5, remaining=4
[  232.908891][T21472] isofs: isofs_export_get_parent(): child directory not normalized!
[  233.032245][T21479] loop7: detected capacity change from 0 to 2048
[  233.053144][T21479] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  233.106828][T15444] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[  233.121673][T21486] loop4: detected capacity change from 0 to 2048
[  233.129268][T15444] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  233.141875][T15444] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.156624][T21486] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  233.210285][T19300] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[  233.245886][T19300] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  233.262160][T19300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.424020][T21510] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3933'.
[  233.458138][T21512] loop7: detected capacity change from 0 to 164
[  233.482095][T21512] rock: directory entry would overflow storage
[  233.488374][T21512] rock: sig=0x4d4e, size=5, remaining=4
[  233.498138][T21512] isofs: isofs_export_get_parent(): child directory not normalized!
[  233.585079][T21525] loop7: detected capacity change from 0 to 512
[  233.600545][T21525] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  233.613631][T21525] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2
[  233.623667][T21528] loop3: detected capacity change from 0 to 2048
[  233.632174][T21525] EXT4-fs (loop7): 1 truncate cleaned up
[  233.638244][T21525] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  233.638436][T21534] FAULT_INJECTION: forcing a failure.
[  233.638436][T21534] name failslab, interval 1, probability 0, space 0, times 0
[  233.653296][T21525] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #2: block 4: comm syz.7.3937: lblock 0 mapped to illegal pblock 4 (length 1)
[  233.663388][T21534] CPU: 1 UID: 0 PID: 21534 Comm: syz.2.3941 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  233.663501][T21534] Tainted: [W]=WARN
[  233.663508][T21534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  233.663522][T21534] Call Trace:
[  233.663529][T21534]  <TASK>
[  233.663538][T21534]  __dump_stack+0x1d/0x30
[  233.663566][T21534]  dump_stack_lvl+0xe8/0x140
[  233.663655][T21534]  dump_stack+0x15/0x1b
[  233.663673][T21534]  should_fail_ex+0x265/0x280
[  233.663694][T21534]  ? sctp_add_bind_addr+0x71/0x1e0
[  233.663729][T21534]  should_failslab+0x8c/0xb0
[  233.663785][T21534]  __kmalloc_cache_noprof+0x4c/0x4a0
[  233.663820][T21534]  sctp_add_bind_addr+0x71/0x1e0
[  233.663855][T21534]  sctp_do_bind+0x427/0x4b0
[  233.663955][T21534]  sctp_connect_new_asoc+0x153/0x3a0
[  233.663985][T21534]  sctp_sendmsg+0xf10/0x18d0
[  233.664011][T21534]  ? selinux_socket_sendmsg+0x131/0x1b0
[  233.664062][T21534]  ? __pfx_sctp_sendmsg+0x10/0x10
[  233.664086][T21534]  inet_sendmsg+0xc5/0xd0
[  233.664131][T21534]  __sock_sendmsg+0x102/0x180
[  233.664158][T21534]  __sys_sendto+0x268/0x330
[  233.664201][T21534]  __x64_sys_sendto+0x76/0x90
[  233.664232][T21534]  x64_sys_call+0x2d14/0x3000
[  233.664256][T21534]  do_syscall_64+0xd2/0x200
[  233.664282][T21534]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  233.664467][T21534]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  233.664499][T21534]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.664580][T21534] RIP: 0033:0x7f084b5ff6c9
[  233.664596][T21534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  233.664671][T21534] RSP: 002b:00007f084a067038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  233.664745][T21534] RAX: ffffffffffffffda RBX: 00007f084b855fa0 RCX: 00007f084b5ff6c9
[  233.664758][T21534] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003
[  233.664771][T21534] RBP: 00007f084a067090 R08: 000020000005ffe4 R09: 000000000000001c
[  233.664785][T21534] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000001
[  233.664798][T21534] R13: 00007f084b856038 R14: 00007f084b855fa0 R15: 00007ffd13bfd318
[  233.664870][T21534]  </TASK>
[  233.710454][T21528] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  233.760295][T21525] EXT4-fs (loop7): Remounting filesystem read-only
[  233.782273][T21544] random: crng reseeded on system resumption
[  233.828986][T19958] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[  233.933260][T19958] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  233.956581][T19958] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.999567][T21556] netlink: 'syz.0.3949': attribute type 1 has an invalid length.
[  234.007341][T21556] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3949'.
[  234.204445][T21584] binfmt_misc: register: failed to install interpreter file ./file2
[  234.222932][T21588] loop4: detected capacity change from 0 to 164
[  234.241384][T21588] syz.4.3957: attempt to access beyond end of device
[  234.241384][T21588] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  234.255406][T21588] syz.4.3957: attempt to access beyond end of device
[  234.255406][T21588] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164
[  234.322021][T21600] tipc: Started in network mode
[  234.326925][T21600] tipc: Node identity 8e91ce13366a, cluster identity 4711
[  234.334096][T21600] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  234.352741][T21600] syzkaller0: entered promiscuous mode
[  234.358308][T21600] syzkaller0: entered allmulticast mode
[  234.375243][T21600] tipc: Resetting bearer <eth:syzkaller0>
[  234.381917][T21597] tipc: Resetting bearer <eth:syzkaller0>
[  234.390072][T21597] tipc: Disabling bearer <eth:syzkaller0>
[  234.431186][T15444] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.470185][T21618] random: crng reseeded on system resumption
[  234.481867][T21617] syz.7.3963: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[  234.496469][T21617] CPU: 0 UID: 0 PID: 21617 Comm: syz.7.3963 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  234.496490][T21617] Tainted: [W]=WARN
[  234.496495][T21617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  234.496519][T21617] Call Trace:
[  234.496523][T21617]  <TASK>
[  234.496528][T21617]  __dump_stack+0x1d/0x30
[  234.496542][T21617]  dump_stack_lvl+0xe8/0x140
[  234.496597][T21617]  dump_stack+0x15/0x1b
[  234.496614][T21617]  warn_alloc+0x12b/0x1a0
[  234.496649][T21617]  ? __rcu_read_unlock+0x4f/0x70
[  234.496691][T21617]  __vmalloc_node_range_noprof+0x9d/0xed0
[  234.496748][T21617]  ? __futex_wait+0x1fa/0x260
[  234.496834][T21617]  ? __pfx_futex_wake_mark+0x10/0x10
[  234.496923][T21617]  ? __rcu_read_unlock+0x4f/0x70
[  234.496937][T21617]  ? avc_has_perm_noaudit+0x1b1/0x200
[  234.496949][T21617]  ? should_fail_ex+0x30/0x280
[  234.496960][T21617]  ? xskq_create+0x36/0xe0
[  234.497040][T21617]  vmalloc_user_noprof+0x7d/0xb0
[  234.497083][T21617]  ? xskq_create+0x80/0xe0
[  234.497095][T21617]  xskq_create+0x80/0xe0
[  234.497107][T21617]  xsk_init_queue+0x95/0xf0
[  234.497118][T21617]  xsk_setsockopt+0x477/0x640
[  234.497151][T21617]  ? __pfx_xsk_setsockopt+0x10/0x10
[  234.497163][T21617]  __sys_setsockopt+0x184/0x200
[  234.497197][T21617]  __x64_sys_setsockopt+0x64/0x80
[  234.497258][T21617]  x64_sys_call+0x20ec/0x3000
[  234.497283][T21617]  do_syscall_64+0xd2/0x200
[  234.497293][T21617]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  234.497326][T21617]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  234.497344][T21617]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.497355][T21617] RIP: 0033:0x7f56118df6c9
[  234.497365][T21617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  234.497398][T21617] RSP: 002b:00007f561033f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  234.497411][T21617] RAX: ffffffffffffffda RBX: 00007f5611b35fa0 RCX: 00007f56118df6c9
[  234.497418][T21617] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008
[  234.497425][T21617] RBP: 00007f5611961f91 R08: 0000000000000004 R09: 0000000000000000
[  234.497432][T21617] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  234.497439][T21617] R13: 00007f5611b36038 R14: 00007f5611b35fa0 R15: 00007ffcfa550ae8
[  234.497485][T21617]  </TASK>
[  234.497492][T21617] Mem-Info:
[  234.730626][T21617] active_anon:26827 inactive_anon:13479 isolated_anon:0
[  234.730626][T21617]  active_file:25866 inactive_file:2616 isolated_file:0
[  234.730626][T21617]  unevictable:0 dirty:54 writeback:0
[  234.730626][T21617]  slab_reclaimable:2749 slab_unreclaimable:191952
[  234.730626][T21617]  mapped:31625 shmem:21347 pagetables:1334
[  234.730626][T21617]  sec_pagetables:0 bounce:0
[  234.730626][T21617]  kernel_misc_reclaimable:0
[  234.730626][T21617]  free:1675449 free_pcp:2232 free_cma:0
[  234.776021][T21617] Node 0 active_anon:107772kB inactive_anon:53916kB active_file:103464kB inactive_file:10464kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:126500kB dirty:216kB writeback:0kB shmem:85388kB kernel_stack:5152kB pagetables:5336kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  234.803959][T21617] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  234.833648][T21617] lowmem_reserve[]: 0 2881 7859 7859
[  234.839051][T21617] Node 0 DMA32 free:2946732kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950260kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB
[  234.870479][T21617] lowmem_reserve[]: 0 0 4978 4978
[  234.875597][T21617] Node 0 Normal free:3739704kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:108236kB inactive_anon:53916kB active_file:103464kB inactive_file:10464kB unevictable:0kB writepending:208kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:4688kB local_pcp:2692kB free_cma:0kB
[  234.909027][T21617] lowmem_reserve[]: 0 0 0 0
[  234.913572][T21617] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  234.926321][T21617] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 5*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946732kB
[  234.942521][T21617] Node 0 Normal: 872*4kB (UME) 1248*8kB (UME) 821*16kB (UME) 672*32kB (UME) 404*64kB (UME) 198*128kB (UME) 263*256kB (UME) 129*512kB (UME) 158*1024kB (UME) 73*2048kB (UME) 780*4096kB (UM) = 3738864kB
[  234.962310][T21617] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  234.971630][T21617] 63226 total pagecache pages
[  234.976294][T21617] 13479 pages in swap cache
[  234.980878][T21617] Free swap  = 71080kB
[  234.984932][T21617] Total swap = 124996kB
[  234.989157][T21617] 2097051 pages RAM
[  234.992949][T21617] 0 pages HighMem/MovableOnly
[  234.997608][T21617] 81086 pages reserved
[  235.163022][T21643] loop4: detected capacity change from 0 to 164
[  235.173166][T21643] rock: directory entry would overflow storage
[  235.179440][T21643] rock: sig=0x4d4e, size=5, remaining=4
[  235.195863][T21643] isofs: isofs_export_get_parent(): child directory not normalized!
[  235.258825][T21653] loop4: detected capacity change from 0 to 1024
[  235.266012][T21653] EXT4-fs: Ignoring removed orlov option
[  235.308106][T21653] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  235.333752][T21653] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=21653 comm=syz.4.3977
[  235.335252][T21637] lo speed is unknown, defaulting to 1000
[  235.398913][T19300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.508360][T21692] loop4: detected capacity change from 0 to 2048
[  235.534042][T21694] SELinux: security_context_str_to_sid (syz1) failed with errno=-22
[  235.543184][T21692] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  235.637371][T19300] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[  235.676961][T19300] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  235.721559][T19300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.728720][T21827] loop4: detected capacity change from 0 to 2048
[  236.751386][T21827] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  236.846816][   T29] kauditd_printk_skb: 783 callbacks suppressed
[  236.846831][   T29] audit: type=1326 audit(2000000024.700:38529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21848 comm="syz.7.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56118df6c9 code=0x7ffc0000
[  236.876634][   T29] audit: type=1326 audit(2000000024.700:38530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21848 comm="syz.7.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56118df6c9 code=0x7ffc0000
[  236.900248][   T29] audit: type=1326 audit(2000000024.700:38531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21848 comm="syz.7.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56118df6c9 code=0x7ffc0000
[  236.924256][   T29] audit: type=1326 audit(2000000024.700:38532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21848 comm="syz.7.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f56118df6c9 code=0x7ffc0000
[  236.948079][   T29] audit: type=1326 audit(2000000024.700:38533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21848 comm="syz.7.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56118df6c9 code=0x7ffc0000
[  236.971979][   T29] audit: type=1326 audit(2000000024.700:38534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21848 comm="syz.7.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f56118df6c9 code=0x7ffc0000
[  236.995640][   T29] audit: type=1326 audit(2000000024.700:38535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21848 comm="syz.7.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56118df6c9 code=0x7ffc0000
[  237.028195][T19300] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[  237.109779][T19300] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  237.141118][T19300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.171530][T21872] loop7: detected capacity change from 0 to 2048
[  237.178378][T21872] ext4: Unknown parameter 'pcr'
[  237.197592][T21883] __nla_validate_parse: 8 callbacks suppressed
[  237.197608][T21883] netlink: 4752 bytes leftover after parsing attributes in process `syz.2.4039'.
[  237.203136][   T29] audit: type=1326 audit(2000000025.050:38536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21884 comm="syz.7.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56118df6c9 code=0x7ffc0000
[  237.223194][T21883] netlink: 4752 bytes leftover after parsing attributes in process `syz.2.4039'.
[  237.236505][   T29] audit: type=1326 audit(2000000025.050:38537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21884 comm="syz.7.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56118df6c9 code=0x7ffc0000
[  237.272862][   T29] audit: type=1326 audit(2000000025.070:38538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21884 comm="syz.7.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f56118df6c9 code=0x7ffc0000
[  237.318880][T21883] 9pnet_fd: Insufficient options for proto=fd
[  237.747218][T21908] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  237.784534][T21908] SELinux: failed to load policy
[  237.864691][T21916] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  237.874391][T21916] SELinux: failed to load policy
[  237.945589][T21918] loop7: detected capacity change from 0 to 164
[  237.955246][T21918] syz.7.4051: attempt to access beyond end of device
[  237.955246][T21918] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  237.979088][T21918] syz.7.4051: attempt to access beyond end of device
[  237.979088][T21918] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164
[  238.167345][T21947] binfmt_misc: register: failed to install interpreter file ./file2
[  238.187037][T21951] loop7: detected capacity change from 0 to 512
[  238.196321][T21951] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  238.204578][T21951] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2
[  238.213461][T21951] EXT4-fs (loop7): 1 truncate cleaned up
[  238.218606][T21956] pimreg: entered allmulticast mode
[  238.219870][T21951] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  238.228941][T21956] lo speed is unknown, defaulting to 1000
[  238.245016][T21951] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #2: block 4: comm syz.7.4065: lblock 0 mapped to illegal pblock 4 (length 1)
[  238.260119][T21956] lo speed is unknown, defaulting to 1000
[  238.262259][T21951] EXT4-fs (loop7): Remounting filesystem read-only
[  238.266131][T21956] lo speed is unknown, defaulting to 1000
[  238.279758][T21956] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  238.281566][T21944] pimreg: left allmulticast mode
[  238.295825][T21956] lo speed is unknown, defaulting to 1000
[  238.303295][T21956] lo speed is unknown, defaulting to 1000
[  238.309628][T21956] lo speed is unknown, defaulting to 1000
[  238.315847][T21956] lo speed is unknown, defaulting to 1000
[  238.322207][T21956] lo speed is unknown, defaulting to 1000
[  238.338269][T21956] lo speed is unknown, defaulting to 1000
[  238.351873][T21956] lo speed is unknown, defaulting to 1000
[  238.405993][T21980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4073'.
[  238.574690][T21989] binfmt_misc: register: failed to install interpreter file ./file2
[  238.965948][T22010] pimreg: entered allmulticast mode
[  238.974310][T22005] siw: device registration error -23
[  238.980016][T22009] FAULT_INJECTION: forcing a failure.
[  238.980016][T22009] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  238.993335][T22009] CPU: 0 UID: 0 PID: 22009 Comm: syz.0.4085 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  238.993446][T22009] Tainted: [W]=WARN
[  238.993452][T22009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  238.993486][T22009] Call Trace:
[  238.993493][T22009]  <TASK>
[  238.993502][T22009]  __dump_stack+0x1d/0x30
[  238.993526][T22009]  dump_stack_lvl+0xe8/0x140
[  238.993548][T22009]  dump_stack+0x15/0x1b
[  238.993643][T22009]  should_fail_ex+0x265/0x280
[  238.993666][T22009]  should_fail+0xb/0x20
[  238.993681][T22009]  should_fail_usercopy+0x1a/0x20
[  238.993700][T22009]  _copy_from_user+0x1c/0xb0
[  238.993746][T22009]  memdup_user+0x5e/0xd0
[  238.993775][T22009]  strndup_user+0x68/0xb0
[  238.993799][T22009]  __se_sys_request_key+0xea/0x290
[  238.993829][T22009]  ? fput+0x8f/0xc0
[  238.993847][T22009]  __x64_sys_request_key+0x55/0x70
[  238.993934][T22009]  x64_sys_call+0x1d98/0x3000
[  238.993988][T22009]  do_syscall_64+0xd2/0x200
[  238.994010][T22009]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  238.994094][T22009]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  238.994128][T22009]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.994152][T22009] RIP: 0033:0x7fa3f611f6c9
[  238.994177][T22009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  238.994252][T22009] RSP: 002b:00007fa3f4b87038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9
[  238.994270][T22009] RAX: ffffffffffffffda RBX: 00007fa3f6375fa0 RCX: 00007fa3f611f6c9
[  238.994284][T22009] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040
[  238.994298][T22009] RBP: 00007fa3f4b87090 R08: 0000000000000000 R09: 0000000000000000
[  238.994397][T22009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  238.994411][T22009] R13: 00007fa3f6376038 R14: 00007fa3f6375fa0 R15: 00007fff391c8e78
[  238.994488][T22009]  </TASK>
[  239.005344][T22005] pimreg: left allmulticast mode
[  239.188735][T15444] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.257084][T22023] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4088'.
[  239.351667][T22035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=22035 comm=syz.3.4092
[  239.369345][T22033] SELinux: failed to load policy
[  239.433156][T22043] loop7: detected capacity change from 0 to 512
[  239.449997][T22043] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.4096: couldn't read orphan inode 26 (err -116)
[  239.463341][T22043] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  239.476333][T22043] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  239.507710][T15444] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.545806][T22065] netlink: 'syz.2.4104': attribute type 1 has an invalid length.
[  239.553712][T22065] netlink: 'syz.2.4104': attribute type 4 has an invalid length.
[  239.561543][T22065] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4104'.
[  239.616292][T22073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=22073 comm=syz.3.4107
[  239.653267][T22079] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4110'.
[  239.703644][T22088] binfmt_misc: register: failed to install interpreter file ./file2
[  239.995280][T22123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4130'.
[  240.082706][T22141] binfmt_misc: register: failed to install interpreter file ./file2
[  240.325411][T22162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4145'.
[  240.407476][T22168] SELinux: failed to load policy
[  240.534148][T22177] binfmt_misc: register: failed to install interpreter file ./file2
[  240.671111][T22183] netlink: 'syz.2.4154': attribute type 10 has an invalid length.
[  240.696368][T22183] team0: Port device dummy0 added
[  240.878432][T22193] IPv6: addrconf: prefix option has invalid lifetime
[  241.948365][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.146166][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.226805][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.278941][T22254] lo speed is unknown, defaulting to 1000
[  242.295499][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.333735][T22254] lo speed is unknown, defaulting to 1000
[  242.358195][T22275] loop7: detected capacity change from 0 to 2048
[  242.365655][T22275] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  242.375429][T22275] EXT4-fs (loop7): group descriptors corrupted!
[  242.409174][   T12] bridge_slave_1: left allmulticast mode
[  242.414846][   T12] bridge_slave_1: left promiscuous mode
[  242.420591][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.436866][   T12] bridge_slave_0: left allmulticast mode
[  242.442607][   T12] bridge_slave_0: left promiscuous mode
[  242.448484][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.603145][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  242.618206][   T29] kauditd_printk_skb: 508 callbacks suppressed
[  242.618223][   T29] audit: type=1326 audit(2000000030.450:39047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22272 comm="syz.7.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56118df6c9 code=0x7ffc0000
[  242.648137][   T29] audit: type=1326 audit(2000000030.450:39048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22272 comm="syz.7.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56118df6c9 code=0x7ffc0000
[  242.671755][   T29] audit: type=1326 audit(2000000030.450:39049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22272 comm="syz.7.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f56118df6c9 code=0x7ffc0000
[  242.695291][   T29] audit: type=1326 audit(2000000030.450:39050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22272 comm="syz.7.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56118df6c9 code=0x7ffc0000
[  242.719024][   T29] audit: type=1326 audit(2000000030.450:39051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22272 comm="syz.7.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56118df6c9 code=0x7ffc0000
[  242.742752][   T29] audit: type=1326 audit(2000000030.450:39052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22272 comm="syz.7.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f56118df6c9 code=0x7ffc0000
[  242.766283][   T29] audit: type=1326 audit(2000000030.450:39053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22272 comm="syz.7.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56118df6c9 code=0x7ffc0000
[  242.789884][   T29] audit: type=1326 audit(2000000030.450:39054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22272 comm="syz.7.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56118df6c9 code=0x7ffc0000
[  242.813532][   T29] audit: type=1326 audit(2000000030.450:39055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22272 comm="syz.7.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f56118df6c9 code=0x7ffc0000
[  242.837134][   T29] audit: type=1326 audit(2000000030.450:39056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22272 comm="syz.7.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56118df6c9 code=0x7ffc0000
[  242.905929][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  242.916253][   T12] bond0 (unregistering): Released all slaves
[  242.970099][T22254] chnl_net:caif_netlink_parms(): no params data found
[  242.972971][T22325] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=22325 comm=syz.3.4191
[  242.979353][   T12] tipc: Left network mode
[  243.067909][   T12] hsr_slave_0: left promiscuous mode
[  243.079343][   T12] hsr_slave_1: left promiscuous mode
[  243.088329][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  243.096030][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  243.119455][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  243.126915][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  243.151652][   T12] veth1_macvtap: left promiscuous mode
[  243.157156][   T12] veth0_macvtap: left promiscuous mode
[  243.169991][   T12] veth1_vlan: left promiscuous mode
[  243.180478][   T12] veth0_vlan: left promiscuous mode
[  243.329967][   T12] team0 (unregistering): Port device team_slave_1 removed
[  243.351844][   T12] team0 (unregistering): Port device team_slave_0 removed
[  243.429681][T22254] bridge0: port 1(bridge_slave_0) entered blocking state
[  243.436768][T22254] bridge0: port 1(bridge_slave_0) entered disabled state
[  243.490522][T22254] bridge_slave_0: entered allmulticast mode
[  243.497362][T22254] bridge_slave_0: entered promiscuous mode
[  243.541443][T22254] bridge0: port 2(bridge_slave_1) entered blocking state
[  243.548642][T22254] bridge0: port 2(bridge_slave_1) entered disabled state
[  243.568306][T22254] bridge_slave_1: entered allmulticast mode
[  243.574980][T22254] bridge_slave_1: entered promiscuous mode
[  243.625818][T22254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  243.651754][T22254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  243.737351][T22254] team0: Port device team_slave_0 added
[  243.757722][T22526] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4202'.
[  243.759910][T22254] team0: Port device team_slave_1 added
[  243.766716][T22526] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4202'.
[  243.807056][T22254] batman_adv: batadv0: Adding interface: batadv_slave_0
[  243.814095][T22254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  243.840079][T22254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  243.852528][T22254] batman_adv: batadv0: Adding interface: batadv_slave_1
[  243.859604][T22254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  243.885567][T22254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  243.966434][T22254] hsr_slave_0: entered promiscuous mode
[  243.974022][T22254] hsr_slave_1: entered promiscuous mode
[  243.980108][T22254] debugfs: 'hsr0' already exists in 'hsr'
[  243.985843][T22254] Cannot create hsr debugfs directory
[  244.047565][T22634] SELinux: security_context_str_to_sid (syz1) failed with errno=-22
[  244.315252][T22254] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  244.335567][T22254] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  244.460415][T22254] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  244.469335][T22254] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  244.554255][T22254] 8021q: adding VLAN 0 to HW filter on device bond0
[  244.569301][T22254] 8021q: adding VLAN 0 to HW filter on device team0
[  244.579889][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.586980][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  244.650084][ T7941] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.657190][ T7941] bridge0: port 2(bridge_slave_1) entered forwarding state
[  244.780571][T22254] 8021q: adding VLAN 0 to HW filter on device batadv0
[  245.083124][T22254] veth0_vlan: entered promiscuous mode
[  245.093001][T22254] veth1_vlan: entered promiscuous mode
[  245.119026][T22254] veth0_macvtap: entered promiscuous mode
[  245.136676][T22254] veth1_macvtap: entered promiscuous mode
[  245.157211][T22254] batman_adv: batadv0: Interface activated: batadv_slave_0
[  245.193175][T22254] batman_adv: batadv0: Interface activated: batadv_slave_1
[  245.205067][ T7909] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  245.214636][   T52] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  245.228282][   T52] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  245.247246][   T52] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  245.487645][T22765] vlan2: entered allmulticast mode
[  245.795343][T22784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4235'.
[  245.881773][T22793] SELinux: failed to load policy
[  246.124453][T22825] loop6: detected capacity change from 0 to 128
[  246.161443][T22825] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4246'.
[  246.176188][T22825] syz.6.4246: attempt to access beyond end of device
[  246.176188][T22825] loop6: rw=0, sector=2078, nr_sectors = 1 limit=128
[  246.189479][T22825] buffer_io_error: 6 callbacks suppressed
[  246.189494][T22825] Buffer I/O error on dev loop6, logical block 2078, async page read
[  246.268187][T22825] syz.6.4246: attempt to access beyond end of device
[  246.268187][T22825] loop6: rw=0, sector=2078, nr_sectors = 1 limit=128
[  246.281459][T22825] Buffer I/O error on dev loop6, logical block 2078, async page read
[  246.338088][T22825] syz.6.4246: attempt to access beyond end of device
[  246.338088][T22825] loop6: rw=0, sector=2078, nr_sectors = 1 limit=128
[  246.351399][T22825] Buffer I/O error on dev loop6, logical block 2078, async page read
[  246.400255][T22825] syz.6.4246: attempt to access beyond end of device
[  246.400255][T22825] loop6: rw=0, sector=2078, nr_sectors = 1 limit=128
[  246.413521][T22825] Buffer I/O error on dev loop6, logical block 2078, async page read
[  246.459986][T22825] syz.6.4246: attempt to access beyond end of device
[  246.459986][T22825] loop6: rw=0, sector=2078, nr_sectors = 1 limit=128
[  246.473302][T22825] Buffer I/O error on dev loop6, logical block 2078, async page read
[  246.529187][T22825] syz.6.4246: attempt to access beyond end of device
[  246.529187][T22825] loop6: rw=0, sector=2078, nr_sectors = 1 limit=128
[  246.542502][T22825] Buffer I/O error on dev loop6, logical block 2078, async page read
[  246.568090][T22825] syz.6.4246: attempt to access beyond end of device
[  246.568090][T22825] loop6: rw=0, sector=2078, nr_sectors = 1 limit=128
[  246.581361][T22825] Buffer I/O error on dev loop6, logical block 2078, async page read
[  246.618083][T22825] syz.6.4246: attempt to access beyond end of device
[  246.618083][T22825] loop6: rw=0, sector=2078, nr_sectors = 1 limit=128
[  246.631437][T22825] Buffer I/O error on dev loop6, logical block 2078, async page read
[  246.650252][T22825] syz.6.4246: attempt to access beyond end of device
[  246.650252][T22825] loop6: rw=0, sector=2078, nr_sectors = 1 limit=128
[  246.663603][T22825] Buffer I/O error on dev loop6, logical block 2078, async page read
[  246.672739][T22850] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  246.679307][T22850] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  246.681427][T22825] syz.6.4246: attempt to access beyond end of device
[  246.681427][T22825] loop6: rw=0, sector=2078, nr_sectors = 1 limit=128
[  246.686843][T22850] vhci_hcd vhci_hcd.0: Device attached
[  246.699956][T22825] Buffer I/O error on dev loop6, logical block 2078, async page read
[  246.744607][T22851] vhci_hcd: connection closed
[  246.744730][ T7941] vhci_hcd: stop threads
[  246.753839][ T7941] vhci_hcd: release socket
[  246.758273][ T7941] vhci_hcd: disconnect device
[  246.897083][T22863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=22863 comm=syz.2.4260
[  247.647192][   T29] kauditd_printk_skb: 346 callbacks suppressed
[  247.647209][   T29] audit: type=1326 audit(2000000035.500:39403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22919 comm="syz.0.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f611f6c9 code=0x7ffc0000
[  247.698054][   T29] audit: type=1326 audit(2000000035.500:39404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22919 comm="syz.0.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f611f6c9 code=0x7ffc0000
[  247.758120][   T29] audit: type=1326 audit(2000000035.580:39405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22919 comm="syz.0.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa3f611f6c9 code=0x7ffc0000
[  247.781870][T22924] loop7: detected capacity change from 0 to 512
[  247.788634][T22924] EXT4-fs: dax option not supported
[  247.862980][T22929] FAULT_INJECTION: forcing a failure.
[  247.862980][T22929] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  247.876155][T22929] CPU: 1 UID: 0 PID: 22929 Comm: syz.7.4284 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  247.876236][T22929] Tainted: [W]=WARN
[  247.876244][T22929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  247.876266][T22929] Call Trace:
[  247.876275][T22929]  <TASK>
[  247.876282][T22929]  __dump_stack+0x1d/0x30
[  247.876334][T22929]  dump_stack_lvl+0xe8/0x140
[  247.876378][T22929]  dump_stack+0x15/0x1b
[  247.876394][T22929]  should_fail_ex+0x265/0x280
[  247.876412][T22929]  should_fail+0xb/0x20
[  247.876427][T22929]  should_fail_usercopy+0x1a/0x20
[  247.876452][T22929]  _copy_from_user+0x1c/0xb0
[  247.876478][T22929]  ___sys_sendmsg+0xc1/0x1d0
[  247.876563][T22929]  __x64_sys_sendmsg+0xd4/0x160
[  247.876587][T22929]  x64_sys_call+0x191e/0x3000
[  247.876609][T22929]  do_syscall_64+0xd2/0x200
[  247.876629][T22929]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  247.876693][T22929]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  247.876791][T22929]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.876813][T22929] RIP: 0033:0x7f56118df6c9
[  247.876829][T22929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  247.876847][T22929] RSP: 002b:00007f561033f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  247.876899][T22929] RAX: ffffffffffffffda RBX: 00007f5611b35fa0 RCX: 00007f56118df6c9
[  247.876914][T22929] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004
[  247.877003][T22929] RBP: 00007f561033f090 R08: 0000000000000000 R09: 0000000000000000
[  247.877014][T22929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  247.877026][T22929] R13: 00007f5611b36038 R14: 00007f5611b35fa0 R15: 00007ffcfa550ae8
[  247.877042][T22929]  </TASK>
[  248.065241][   T29] audit: type=1326 audit(2000000035.920:39406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22919 comm="syz.0.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f611f6c9 code=0x7ffc0000
[  248.088875][   T29] audit: type=1326 audit(2000000035.920:39407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22919 comm="syz.0.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f611f6c9 code=0x7ffc0000
[  248.165239][   T29] audit: type=1326 audit(2000000035.950:39408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22919 comm="syz.0.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3f611f6c9 code=0x7ffc0000
[  248.172703][T22932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=22932 comm=syz.2.4283
[  248.188946][   T29] audit: type=1326 audit(2000000035.950:39409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22919 comm="syz.0.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f611f6c9 code=0x7ffc0000
[  248.225121][   T29] audit: type=1326 audit(2000000035.950:39410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22919 comm="syz.0.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f611f6c9 code=0x7ffc0000
[  248.248703][   T29] audit: type=1326 audit(2000000035.950:39411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22919 comm="syz.0.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3f611f6c9 code=0x7ffc0000
[  248.272396][   T29] audit: type=1326 audit(2000000035.950:39412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22919 comm="syz.0.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f611f6c9 code=0x7ffc0000
[  248.754722][T22976] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=22976 comm=syz.3.4300
[  249.054661][T22986] lo speed is unknown, defaulting to 1000
[  249.108436][T22986] lo speed is unknown, defaulting to 1000
[  249.391979][T23014] netlink: 'syz.2.4305': attribute type 12 has an invalid length.
[  249.728668][T23032] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=23032 comm=syz.0.4312
[  249.938406][T23054] loop7: detected capacity change from 0 to 164
[  249.965801][T23048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4319'.
[  250.070331][T23066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4325'.
[  250.113767][T23072] lo speed is unknown, defaulting to 1000
[  250.175843][T23072] lo speed is unknown, defaulting to 1000
[  250.220812][T23080] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  250.276350][T23080] SELinux: failed to load policy
[  250.411083][T23107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4332'.
[  250.623027][T23132] loop7: detected capacity change from 0 to 2048
[  250.695761][T23127] SELinux: failed to load policy
[  250.793898][T23132] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  251.028077][T15444] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[  251.061402][T15444] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  251.137090][T15444] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.233823][T23169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4355'.
[  251.305444][T23184] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=23184 comm=syz.2.4358
[  251.443825][   T52] ==================================================================
[  251.451914][   T52] BUG: KCSAN: data-race in alloc_pid / copy_process
[  251.458505][   T52] 
[  251.460816][   T52] read-write to 0xffffffff8685ff78 of 4 bytes by task 7882 on cpu 1:
[  251.468862][   T52]  alloc_pid+0x539/0x720
[  251.473088][   T52]  copy_process+0xe25/0x2000
[  251.477683][   T52]  kernel_clone+0x16c/0x5c0
[  251.482176][   T52]  user_mode_thread+0x7d/0xb0
[  251.486845][   T52]  call_usermodehelper_exec_work+0x41/0x160
[  251.492721][   T52]  process_scheduled_works+0x4ce/0x9d0
[  251.498171][   T52]  worker_thread+0x582/0x770
[  251.502743][   T52]  kthread+0x489/0x510
[  251.506800][   T52]  ret_from_fork+0x122/0x1b0
[  251.511376][   T52]  ret_from_fork_asm+0x1a/0x30
[  251.516124][   T52] 
[  251.518426][   T52] read to 0xffffffff8685ff78 of 4 bytes by task 52 on cpu 0:
[  251.525773][   T52]  copy_process+0x17fc/0x2000
[  251.530442][   T52]  kernel_clone+0x16c/0x5c0
[  251.534937][   T52]  user_mode_thread+0x7d/0xb0
[  251.539604][   T52]  call_usermodehelper_exec_work+0x41/0x160
[  251.545492][   T52]  process_scheduled_works+0x4ce/0x9d0
[  251.550955][   T52]  worker_thread+0x582/0x770
[  251.555543][   T52]  kthread+0x489/0x510
[  251.559604][   T52]  ret_from_fork+0x122/0x1b0
[  251.564180][   T52]  ret_from_fork_asm+0x1a/0x30
[  251.568932][   T52] 
[  251.571234][   T52] value changed: 0x80000145 -> 0x80000146
[  251.576933][   T52] 
[  251.579241][   T52] Reported by Kernel Concurrency Sanitizer on:
[  251.585383][   T52] CPU: 0 UID: 0 PID: 52 Comm: kworker/u8:3 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  251.596649][   T52] Tainted: [W]=WARN
[  251.600432][   T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  251.610472][   T52] Workqueue: events_unbound call_usermodehelper_exec_work
[  251.617572][   T52] ==================================================================