last executing test programs:

10m15.185136634s ago: executing program 3 (id=51):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000340)=ANY=[@ANYBLOB="a536000001"])

10m15.11589433s ago: executing program 3 (id=54):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000006140)="18", 0x1, 0x0, &(0x7f00000000c0)={0x11, 0xe, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)

10m15.059745856s ago: executing program 3 (id=57):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x0, 0x12, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8, "136e7597233803e3"}]}}}}}}}}, 0x0)

10m14.993458182s ago: executing program 3 (id=61):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0)
mount$bind(&(0x7f0000000540)='./file0/../file0\x00', &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x2080, 0x0)

10m14.963944955s ago: executing program 3 (id=63):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95,uni_xlate=1,shortname=winnt,shortname=winnt,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c73686f72746e616d653d77696e6e742c000000000000009e5fcf6469722c73687865d2068a008e48488cc8642c6e66733d6e6f73"], 0x1, 0x26c, &(0x7f0000000340)="$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")
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0)

10m13.11941269s ago: executing program 3 (id=127):
io_uring_setup(0x330b, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000005c0)={[{}, {@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, './file0/../file0'}}, {@noquota}, {@nouid32}, {@journal_checksum}, {@data_err_abort}], [{@seclabel}]}, 0x3, 0x473, &(0x7f0000000640)="$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")
bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)

10m13.080000284s ago: executing program 32 (id=127):
io_uring_setup(0x330b, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000005c0)={[{}, {@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, './file0/../file0'}}, {@noquota}, {@nouid32}, {@journal_checksum}, {@data_err_abort}], [{@seclabel}]}, 0x3, 0x473, &(0x7f0000000640)="$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")
bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)

9m21.969316557s ago: executing program 4 (id=2005):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000004c0)={0xfffffffc, 0x0, 0x0, 'queue0\x00', 0x1})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x1, 0x1, 0x0, 0x0, 0xa}})

9m21.916240642s ago: executing program 4 (id=2009):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', r0, 0x0, 0x20}, 0x18)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4000}, 0x18)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0)
syz_usb_disconnect(r1)
syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r1, 0x40085507, &(0x7f0000000100)=0xb)

9m21.144336235s ago: executing program 4 (id=2053):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2000004, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))

9m21.100936379s ago: executing program 4 (id=2055):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@errors_remount}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffff001}, 0x18)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f283e6d60200000000000000000000000100", [0x208]})

9m20.976342231s ago: executing program 4 (id=2061):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000600)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4a)
sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r1)
recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1}, 0x2b46}], 0x1, 0x2000, 0x0)

9m20.67627768s ago: executing program 4 (id=2074):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f000000e0c0), 0x10010)
sendfile(r0, r1, &(0x7f0000000100)=0x10, 0xffff)
close(0x3)

9m20.640700503s ago: executing program 33 (id=2074):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f000000e0c0), 0x10010)
sendfile(r0, r1, &(0x7f0000000100)=0x10, 0xffff)
close(0x3)

3m26.091179905s ago: executing program 2 (id=6626):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2})
ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000000)=0x9b)

3m26.04351534s ago: executing program 2 (id=6629):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000f80)=@security={'security\x00', 0xe, 0x4, 0x2b8, 0xffffffff, 0xc8, 0xc8, 0xc8, 0xffffffff, 0xffffffff, 0x240, 0x240, 0x240, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @empty, 0xffffff00, 0xffffff00, 'bond0\x00', 'netdevsim0\x00', {}, {}, 0x32, 0x2, 0x41}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x4, 0x3}, {0x4, 0x6, 0x4}, {0x1, 0x4, 0x1}, 0x8}}}, {{@ip={@loopback, @remote, 0xff000000, 0xffffffff, 'veth1_to_hsr\x00', 'macvtap0\x00', {0xff}, {}, 0x6c, 0x2, 0x6d}, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x8, 0xfd, 0xf, 0x0, 0x0, "d2cc5bae0ab93a40f259305bf657133da8d456c30ca3487cf109399d866b7b4935b00976375aae4f2313b0920d6b50eea2cfea2df995cff9bb3fc01cea9aa50c"}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x100}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318)

3m26.011355302s ago: executing program 2 (id=6633):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c)

3m25.93278242s ago: executing program 2 (id=6637):
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004004, &(0x7f0000000140), 0x81, 0x477, &(0x7f0000000a40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x10)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x3800)

3m25.854604518s ago: executing program 2 (id=6641):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000480)='yeah', 0x4)
shutdown(r0, 0x1)

3m25.839340699s ago: executing program 2 (id=6645):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x18)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x84000000, 0x2}, 0x50)

3m25.781905014s ago: executing program 34 (id=6645):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x18)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x84000000, 0x2}, 0x50)

10.726473036s ago: executing program 7 (id=9493):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1)
fcntl$setlease(r5, 0x400, 0x1)
fremovexattr(r5, &(0x7f0000000040)=@known='system.posix_acl_default\x00')
lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00')
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="5953fcfffffffddbdf256b000000080003005c9a5db98df47c91a88b787a219b3a1b66d115cd98f8d5542765cc60efc0100784", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000)
sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000a00)={0x1a8, r6, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x41}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x84, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x69}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x800}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10001}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6ca}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xd7ea}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x200}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}, @NL80211_ATTR_REG_RULES={0xd8, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffffd}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7ac}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3a}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x40000000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfe}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffffffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xa}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x845}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x76}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x24000c00}, 0x4044)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
fcntl$setlease(r3, 0x400, 0x2)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x0, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00', 0xfe}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x542)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0, 0xffffffffffffffff, 0x0, 0x100000000}, 0x18)
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)

10.48950029s ago: executing program 7 (id=9494):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f000000aa00)=ANY=[@ANYBLOB="4c595e2f83c7b598f19c108a635722e4319a35d918833d2f87f9181726a8a7260c8e9d54dc28705ed6a6a7b4218f73da8f5d43a01aebd3390758bf9989c919b291b6ee23e191e0828eeea38d4bc8bf5b090721b21056ec0cef341319f3636fae14349fe7d0d1be06487d190829a3d91de239e3b23b9234be95f4db864622c2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff85000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ptrace$getregset(0x4204, r0, 0x6, &(0x7f0000000440)={&(0x7f00000003c0)=""/82, 0x52})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
clock_gettime(0x0, &(0x7f0000000140))
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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")
creat(&(0x7f00000000c0)='./file1\x00', 0x1)

7.165638296s ago: executing program 7 (id=9497):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
read(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = open(&(0x7f0000000280)='.\x00', 0x40080, 0x1d2)
fcntl$notify(r1, 0x402, 0x8000003d)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r2, 0x0, 0x1)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, 0x0)
r3 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
sendmsg$rds(r4, 0x0, 0x0)
shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)

7.050092248s ago: executing program 5 (id=9499):
socket$caif_stream(0x25, 0x1, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[], 0x18)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000005000000020000000400000000000000", @ANYRES32, @ANYRES32, @ANYBLOB], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='tlb_flush\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x4, 0x0, &(0x7f0000000c40)='GPL\x00', 0x403, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf51c}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001811000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x21}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r4}, 0x10)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x4, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080))

6.895066963s ago: executing program 5 (id=9501):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
read(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = open(&(0x7f0000000280)='.\x00', 0x40080, 0x1d2)
fcntl$notify(r1, 0x402, 0x8000003d)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r2, 0x0, 0x1)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, 0x0)
r3 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
sendmsg$rds(r4, 0x0, 0x0)
shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)

6.174975296s ago: executing program 1 (id=9504):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18)
syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103302)
ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x6, 0x0, @scatter={0x1, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/204, 0xcc}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000380)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@data_err_ignore}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@data_err_ignore}, {@noblock_validity}, {@delalloc}, {@nomblk_io_submit}, {@orlov}, {@user_xattr}, {@nodioread_nolock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x572, &(0x7f0000000980)="$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")
poll(&(0x7f0000b2c000)=[{}], 0x2c, 0xffffffffffbffff8)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r3 = syz_open_procfs(0x0, &(0x7f0000002140)='sched\x00')
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000200000000000000fdffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000036c3d58818120000", @ANYRES8, @ANYBLOB="000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000001800000003c6d50f00000000050000008510000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0xca, &(0x7f0000000840)=""/202, 0x40f00, 0x0, '\x00', r5, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000500)=[{0x2, 0x3, 0x1, 0xc}, {0x3, 0x3, 0xa, 0x7}, {0x0, 0x2, 0x0, 0x6}, {0x1, 0x5, 0x5, 0x7}, {0x5, 0x3, 0x9, 0x4}, {0x1, 0x2, 0x0, 0x2}, {0x5, 0x5, 0xa, 0xd}], 0x10, 0x101}, 0x94)
preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/163, 0xa3}], 0x1, 0x0, 0x5)

6.081882856s ago: executing program 6 (id=9506):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES64], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18)
syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103302)
ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x6, 0x0, @scatter={0x1, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/204, 0xcc}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf250401f2800c0018000bac0f00000000001400010000000000000000000000ffff7f00000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1600006cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a608004500ac1414bb0000000048957c6743291d737e2af9837ff66ca81695770bcd5a141b3a42a7f61ea289854ab248636c7fb1f98ee5556249b6de1fb2ed365cf48d6941cf0c1d3c4afe01d88f70f5ff181f7ed024f140efd56a389e1654b32cec7e74f1f99a0d755c7d8f9f0f5e98b9f32fbf85a19d90e9ba8955a02f87489e1774ceaa00fd8dfe80b8d742080f190e33560f42618227ca"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000380)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@data_err_ignore}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@data_err_ignore}, {@noblock_validity}, {@delalloc}, {@nomblk_io_submit}, {@orlov}, {@user_xattr}, {@nodioread_nolock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x572, &(0x7f0000000980)="$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")
poll(&(0x7f0000b2c000)=[{}], 0x2c, 0xffffffffffbffff8)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000002140)='sched\x00')
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200})
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000200000000000000fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000036c3d58818120000", @ANYRES8, @ANYBLOB="000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000001800000003c6d50f00000000050000008510000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0xca, &(0x7f0000000840)=""/202, 0x40f00, 0x0, '\x00', r6, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000500)=[{0x2, 0x3, 0x1, 0xc}, {0x3, 0x3, 0xa, 0x7}, {0x0, 0x2, 0x0, 0x6}, {0x1, 0x5, 0x5, 0x7}, {0x5, 0x3, 0x9, 0x4}, {0x1, 0x2, 0x0, 0x2}, {0x5, 0x5, 0xa, 0xd}], 0x10, 0x101}, 0x94)
preadv(r4, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/163, 0xa3}], 0x1, 0x0, 0x5)

5.311131554s ago: executing program 1 (id=9507):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff85000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
read(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = open(&(0x7f0000000280)='.\x00', 0x40080, 0x1d2)
fcntl$notify(r1, 0x402, 0x8000003d)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r2, 0x0, 0x1)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, 0x0)
r3 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
sendmsg$rds(r4, 0x0, 0x0)
shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)

5.194509425s ago: executing program 6 (id=9508):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
read(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = open(&(0x7f0000000280)='.\x00', 0x40080, 0x1d2)
fcntl$notify(r1, 0x402, 0x8000003d)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r2, 0x0, 0x1)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, 0x0)
r3 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
sendmsg$rds(r4, 0x0, 0x0)
shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)

3.481995288s ago: executing program 0 (id=9509):
socket$caif_stream(0x25, 0x1, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[], 0x18)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000005000000020000000400000000000000", @ANYRES32, @ANYRES32, @ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x4, 0x0, &(0x7f0000000c40)='GPL\x00', 0x403, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf51c}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001811000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x21}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000280), &(0x7f00000002c0)=r4}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r5}, 0x10)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x4, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080))

3.481368338s ago: executing program 7 (id=9510):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18)
read(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = open(&(0x7f0000000280)='.\x00', 0x40080, 0x1d2)
fcntl$notify(r1, 0x402, 0x8000003d)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r2, 0x0, 0x1)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, 0x0)
r3 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
sendmsg$rds(r4, 0x0, 0x0)
shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)

3.480793508s ago: executing program 1 (id=9511):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES64], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18)
syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103302)
ioctl$SG_IO(r3, 0x2285, 0x0)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000380)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@data_err_ignore}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@data_err_ignore}, {@noblock_validity}, {@delalloc}, {@nomblk_io_submit}, {@orlov}, {@user_xattr}, {@nodioread_nolock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x572, &(0x7f0000000980)="$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")
poll(&(0x7f0000b2c000)=[{}], 0x2c, 0xffffffffffbffff8)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000002140)='sched\x00')
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200})
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000200000000000000fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000036c3d58818120000", @ANYRES8, @ANYBLOB="000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000001800000003c6d50f00000000050000008510000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0xca, &(0x7f0000000840)=""/202, 0x40f00, 0x0, '\x00', r6, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000500)=[{0x2, 0x3, 0x1, 0xc}, {0x3, 0x3, 0xa, 0x7}, {0x0, 0x2, 0x0, 0x6}, {0x1, 0x5, 0x5, 0x7}, {0x5, 0x3, 0x9, 0x4}, {0x1, 0x2, 0x0, 0x2}, {0x5, 0x5, 0xa, 0xd}], 0x10, 0x101}, 0x94)
preadv(r4, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/163, 0xa3}], 0x1, 0x0, 0x5)

3.480271368s ago: executing program 5 (id=9512):
socket$caif_stream(0x25, 0x1, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[], 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000005000000020000000400000000000000", @ANYRES32, @ANYRES32, @ANYBLOB], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='tlb_flush\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x4, 0x0, &(0x7f0000000c40)='GPL\x00', 0x403, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf51c}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001811000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x21}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000280), &(0x7f00000002c0)=r4}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r5}, 0x10)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x4, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080))

3.479661638s ago: executing program 6 (id=9513):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0xffffff}, 0x10)
write(0xffffffffffffffff, &(0x7f0000000340)="2400000f12de11a242093d1900000000080004000100"/34, 0x22)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e6576653000000000000000000014000100766574"], 0x104}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='sched\x00')
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYBLOB="747299b5fca60b", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00'])
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xbbd5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, {0xa, 0x4e24, 0x6, @remote, 0x6}, 0xffffffffffffffff, 0x81}}, 0x48)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x168, 0x1d0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcfcf0c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1a, 0x0, {0x80000}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x80000000, 'snmp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410)
pipe2$9p(&(0x7f0000000240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x57)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, <r7=>0x0}, &(0x7f0000000080)=0xc)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',access=', @ANYRESDEC=r7, @ANYBLOB="3a62201e8fac6b05a776146384faa99714edd55212de1c3a061efafefa101bd5280b596dc608095b688a24cf3aa682ca475b5f05c74442d18a69de913c1f9155d988d60cd95627152f95d52cf70a7f40c35f62698fa0c24ee3237a47412c89242c6a2ac2af18dc26a378b7c8c99d6a0bb0dd33718ac0565e838ff1aef83473ea2174177e0766d36fc66eddb0e4"])
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)

3.404420536s ago: executing program 0 (id=9514):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c0000001000ffff28bd7000f8dbdf250000395c", @ANYRES32=0x0, @ANYBLOB="0000000002000000440012800b000100697036746e6c000034000280140002002001000000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x24004845}, 0x40014)

3.379578178s ago: executing program 5 (id=9515):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
read(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = open(&(0x7f0000000280)='.\x00', 0x40080, 0x1d2)
fcntl$notify(r1, 0x402, 0x8000003d)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r2, 0x0, 0x1)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, 0x0)
shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)

3.36331067s ago: executing program 0 (id=9516):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES64], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18)
syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$sg(0x0, 0x0, 0x103302)
ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x6, 0x0, @scatter={0x1, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/204, 0xcc}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000380)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@data_err_ignore}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@data_err_ignore}, {@noblock_validity}, {@delalloc}, {@nomblk_io_submit}, {@orlov}, {@user_xattr}, {@nodioread_nolock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x572, &(0x7f0000000980)="$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")
poll(&(0x7f0000b2c000)=[{}], 0x2c, 0xffffffffffbffff8)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000002140)='sched\x00')
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200})
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000200000000000000fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000036c3d58818120000", @ANYRES8, @ANYBLOB="000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000001800000003c6d50f00000000050000008510000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0xca, &(0x7f0000000840)=""/202, 0x40f00, 0x0, '\x00', r6, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000500)=[{0x2, 0x3, 0x1, 0xc}, {0x3, 0x3, 0xa, 0x7}, {0x0, 0x2, 0x0, 0x6}, {0x1, 0x5, 0x5, 0x7}, {0x5, 0x3, 0x9, 0x4}, {0x1, 0x2, 0x0, 0x2}, {0x5, 0x5, 0xa, 0xd}], 0x10, 0x101}, 0x94)
preadv(r4, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/163, 0xa3}], 0x1, 0x0, 0x5)

3.335084443s ago: executing program 5 (id=9517):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f000000aa00)=ANY=[@ANYBLOB="4c595e2f83c7b598f19c108a635722e4319a35d918833d2f87f9181726a8a7260c8e9d54dc28705ed6a6a7b4218f73da8f5d43a01aebd3390758bf9989c919b291b6ee23e191e0828eeea38d4bc8bf5b090721b21056ec0cef341319f3636fae14349fe7d0d1be06487d190829a3d91de239e3b23b9234be95f4db864622c2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff85000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ptrace$getregset(0x4204, r0, 0x6, &(0x7f0000000440)={&(0x7f00000003c0)=""/82, 0x52})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
clock_gettime(0x0, &(0x7f0000000140))
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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")
creat(&(0x7f00000000c0)='./file1\x00', 0x1)

3.334614683s ago: executing program 6 (id=9518):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000004, 0x2, @perf_bp={0x0, 0x5}, 0x100180, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0xcef3}, 0x18)
pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x8, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x80000000, @loopback}, 0x1c)
socket$unix(0x1, 0x1, 0x0)
socket$unix(0x1, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c)
shutdown(r0, 0x2)

2.255781222s ago: executing program 1 (id=9519):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='mark_victim\x00', r2}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x4a, &(0x7f000002eff0)={0x0, 0x0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000058773ba3446cf64b0005"], 0x48)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60200, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xcfb, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

2.250512982s ago: executing program 6 (id=9520):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES64], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18)
syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103302)
ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000380)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@data_err_ignore}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@data_err_ignore}, {@noblock_validity}, {@delalloc}, {@nomblk_io_submit}, {@orlov}, {@user_xattr}, {@nodioread_nolock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x572, &(0x7f0000000980)="$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")
poll(&(0x7f0000b2c000)=[{}], 0x2c, 0xffffffffffbffff8)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000002140)='sched\x00')
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200})
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000200000000000000fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000036c3d58818120000", @ANYRES8, @ANYBLOB="000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000001800000003c6d50f00000000050000008510000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0xca, &(0x7f0000000840)=""/202, 0x40f00, 0x0, '\x00', r6, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000500)=[{0x2, 0x3, 0x1, 0xc}, {0x3, 0x3, 0xa, 0x7}, {0x0, 0x2, 0x0, 0x6}, {0x1, 0x5, 0x5, 0x7}, {0x5, 0x3, 0x9, 0x4}, {0x1, 0x2, 0x0, 0x2}, {0x5, 0x5, 0xa, 0xd}], 0x10, 0x101}, 0x94)
preadv(r4, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/163, 0xa3}], 0x1, 0x0, 0x5)

2.07598952s ago: executing program 0 (id=9521):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES64], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r2, 0x0, 0x2}, 0x18)
syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103302)
ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x6, 0x0, @scatter={0x1, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/204, 0xcc}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000380)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@data_err_ignore}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@data_err_ignore}, {@noblock_validity}, {@delalloc}, {@nomblk_io_submit}, {@orlov}, {@user_xattr}, {@nodioread_nolock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x572, &(0x7f0000000980)="$eJzs3c9rHOUbAPBnNkl/f79NoRQVkUAPVmo3TeKPCh7qUbRY0Htdkmko2XRLdlObWGh7sBcvUgSRFsS73j0W/wH/ioIWipSgBy+R2cwmabObbNNNdut+PjDhfXdm95lnZ95338k7ywbQt0ayP4WIlyPimyTicEQk+brByFeOrGy39Pj6ZLYksbz86Z9Jfbus3nitxvMO5pWXIuLXryJOFjbGrS4szpTK5XQur4/WZq+MVhcWT12aLU2n0+nl8YmJM29PjL/37jsdy/WN839//8n9D898fXzpu58fHrmTxNk4lK9bn8dzuLm+MhIj+XsyFGef2nCsA8F6SdLtHWBbBvJ2PhRZH3A4BvJWD/z33YiIZaBPJdo/9KnGOKBxbd+h6+AXxqMPVi6ANuY/uPK/kdhXvzY6sJQ8cWWUXe8OdyB+FuOXP+7dyZbo3P8hALZ081ZEnB4c3Nj/JXn/t32n29jm6Rj6P9g997Pxz5vNxj+F1fFPNBn/HGzSdrdj6/ZfeNiBMC1l47/3m45/Vyethgfy2v/qY76h5OKlcpr1bf+PiBMxtDerbzafc2bpwXKrdevHf9mSxW+MBfP9eDi498nnTJVqpefJeb1HtyJeaTr+TVaPf9Lk+Gfvx/k2YxxL773Wat3W+e+s5R8jXm96/NdmtJLN5ydH6+fDaOOs2Oiv28d+axW/2/lnx//A5vkPJ+vna6vPHuOHff+krdY9kX+s5j+wtkXz839P8lm9vCd/7FqpVpsbi9iTfLzx8fG15zbqje2z/E8c37z/a3b+74+Iz9vM//bRn15tK/8uHf+pZzr+z1548NGXd1vFb6//e6teOpE/0k7/1+4OPs97BwAAAAAAAL2mEBGHIikUV8uFQrG4cn/H0ThQKFeqtZMXK/OXp6L+XdnhGCo0ZroPr7sfYiy/H7ZRH3+qPhERRyLi24H99XpxslKe6nbyAAAAAAAAAAAAAAAAAAAA0CMOtvj+f+b3gW7vHbDj/OQ39K8t238nfukJ6Ek+/6F/af/Qv7R/6F9btv8bu7MfwO7z+Q/9S/uH/tVm+/9ip/cD2H0+/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCjzp87ly3LS4+vT2b1qasL8zOVq6em0upMcXZ+sjhZmbtSnK5UpstpcbIyu9XrlSuVK2PjMX9ttJZWa6PVhcULs5X5y7ULl2ZL0+mFdGhXsgIAAAAAAAAAAAAAAAAAAIAXS3VhcaZULqdzCgrbKgx28gXv7l85LXsgr14u3NqFWN3umQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgzb8BAAD//3XgNVw=")
poll(&(0x7f0000b2c000)=[{}], 0x2c, 0xffffffffffbffff8)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000002140)='sched\x00')
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200})
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000200000000000000fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000036c3d58818120000", @ANYRES8, @ANYBLOB="000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000001800000003c6d50f00000000050000008510000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0xca, &(0x7f0000000840)=""/202, 0x40f00, 0x0, '\x00', r6, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000500)=[{0x2, 0x3, 0x1, 0xc}, {0x3, 0x3, 0xa, 0x7}, {0x0, 0x2, 0x0, 0x6}, {0x1, 0x5, 0x5, 0x7}, {0x5, 0x3, 0x9, 0x4}, {0x1, 0x2, 0x0, 0x2}, {0x5, 0x5, 0xa, 0xd}], 0x10, 0x101}, 0x94)
preadv(r4, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/163, 0xa3}], 0x1, 0x0, 0x5)

1.544746844s ago: executing program 7 (id=9522):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r1, 0x0, 0x2}, 0x18)
syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103302)
ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x6, 0x0, @scatter={0x1, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/204, 0xcc}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000380)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@data_err_ignore}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@data_err_ignore}, {@noblock_validity}, {@delalloc}, {@nomblk_io_submit}, {@orlov}, {@user_xattr}, {@nodioread_nolock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x572, &(0x7f0000000980)="$eJzs3c9rHOUbAPBnNkl/f79NoRQVkUAPVmo3TeKPCh7qUbRY0Htdkmko2XRLdlObWGh7sBcvUgSRFsS73j0W/wH/ioIWipSgBy+R2cwmabObbNNNdut+PjDhfXdm95lnZ95338k7ywbQt0ayP4WIlyPimyTicEQk+brByFeOrGy39Pj6ZLYksbz86Z9Jfbus3nitxvMO5pWXIuLXryJOFjbGrS4szpTK5XQur4/WZq+MVhcWT12aLU2n0+nl8YmJM29PjL/37jsdy/WN839//8n9D898fXzpu58fHrmTxNk4lK9bn8dzuLm+MhIj+XsyFGef2nCsA8F6SdLtHWBbBvJ2PhRZH3A4BvJWD/z33YiIZaBPJdo/9KnGOKBxbd+h6+AXxqMPVi6ANuY/uPK/kdhXvzY6sJQ8cWWUXe8OdyB+FuOXP+7dyZbo3P8hALZ081ZEnB4c3Nj/JXn/t32n29jm6Rj6P9g997Pxz5vNxj+F1fFPNBn/HGzSdrdj6/ZfeNiBMC1l47/3m45/Vyethgfy2v/qY76h5OKlcpr1bf+PiBMxtDerbzafc2bpwXKrdevHf9mSxW+MBfP9eDi498nnTJVqpefJeb1HtyJeaTr+TVaPf9Lk+Gfvx/k2YxxL773Wat3W+e+s5R8jXm96/NdmtJLN5ydH6+fDaOOs2Oiv28d+axW/2/lnx//A5vkPJ+vna6vPHuOHff+krdY9kX+s5j+wtkXz839P8lm9vCd/7FqpVpsbi9iTfLzx8fG15zbqje2z/E8c37z/a3b+74+Iz9vM//bRn15tK/8uHf+pZzr+z1548NGXd1vFb6//e6teOpE/0k7/1+4OPs97BwAAAAAAAL2mEBGHIikUV8uFQrG4cn/H0ThQKFeqtZMXK/OXp6L+XdnhGCo0ZroPr7sfYiy/H7ZRH3+qPhERRyLi24H99XpxslKe6nbyAAAAAAAAAAAAAAAAAAAA0CMOtvj+f+b3gW7vHbDj/OQ39K8t238nfukJ6Ek+/6F/af/Qv7R/6F9btv8bu7MfwO7z+Q/9S/uH/tVm+/9ip/cD2H0+/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCjzp87ly3LS4+vT2b1qasL8zOVq6em0upMcXZ+sjhZmbtSnK5UpstpcbIyu9XrlSuVK2PjMX9ttJZWa6PVhcULs5X5y7ULl2ZL0+mFdGhXsgIAAAAAAAAAAAAAAAAAAIAXS3VhcaZULqdzCgrbKgx28gXv7l85LXsgr14u3NqFWN3umQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgzb8BAAD//3XgNVw=")
poll(&(0x7f0000b2c000)=[{}], 0x2c, 0xffffffffffbffff8)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r3 = syz_open_procfs(0x0, &(0x7f0000002140)='sched\x00')
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000200000000000000fdffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000036c3d58818120000", @ANYRES8, @ANYBLOB="000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000001800000003c6d50f00000000050000008510000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0xca, &(0x7f0000000840)=""/202, 0x40f00, 0x0, '\x00', r5, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000500)=[{0x2, 0x3, 0x1, 0xc}, {0x3, 0x3, 0xa, 0x7}, {0x0, 0x2, 0x0, 0x6}, {0x1, 0x5, 0x5, 0x7}, {0x5, 0x3, 0x9, 0x4}, {0x1, 0x2, 0x0, 0x2}, {0x5, 0x5, 0xa, 0xd}], 0x10, 0x101}, 0x94)
preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/163, 0xa3}], 0x1, 0x0, 0x5)

1.507193427s ago: executing program 1 (id=9523):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES64], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18)
syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103302)
ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x6, 0x0, @scatter={0x1, 0x3, &(0x7f00000006c0)=[{0x0}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000380)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@data_err_ignore}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@data_err_ignore}, {@noblock_validity}, {@delalloc}, {@nomblk_io_submit}, {@orlov}, {@user_xattr}, {@nodioread_nolock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x572, &(0x7f0000000980)="$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")
poll(&(0x7f0000b2c000)=[{}], 0x2c, 0xffffffffffbffff8)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000002140)='sched\x00')
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200})
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000200000000000000fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000036c3d58818120000", @ANYRES8, @ANYBLOB="000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000001800000003c6d50f00000000050000008510000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0xca, &(0x7f0000000840)=""/202, 0x40f00, 0x0, '\x00', r6, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000500)=[{0x2, 0x3, 0x1, 0xc}, {0x3, 0x3, 0xa, 0x7}, {0x0, 0x2, 0x0, 0x6}, {0x1, 0x5, 0x5, 0x7}, {0x5, 0x3, 0x9, 0x4}, {0x1, 0x2, 0x0, 0x2}, {0x5, 0x5, 0xa, 0xd}], 0x10, 0x101}, 0x94)
preadv(r4, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/163, 0xa3}], 0x1, 0x0, 0x5)

1.135185615s ago: executing program 5 (id=9524):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f000000aa00)=ANY=[@ANYBLOB="4c595e2f83c7b598f19c108a635722e4319a35d918833d2f87f9181726a8a7260c8e9d54dc28705ed6a6a7b4218f73da8f5d43a01aebd3390758bf9989c919b291b6ee23e191e0828eeea38d4bc8bf5b090721b21056ec0cef341319f3636fae14349fe7d0d1be06487d190829a3d91de239e3b23b9234be95f4db864622c2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff85000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
clock_gettime(0x0, &(0x7f0000000140))
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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")
creat(&(0x7f00000000c0)='./file1\x00', 0x1)

1.064195682s ago: executing program 0 (id=9525):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r2, &(0x7f0000000280), 0x10)
setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000400)=[{{0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}], 0x10)
close(r2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ff9}]})
ioperm(0x4, 0x1, 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
timer_create(0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000006288000000000000000000000000000000000000000000000000000000feffffff0000000000040000000000000000000000000000000000000000000093b1c0b500"/135]}, 0xff)

1.063102452s ago: executing program 6 (id=9526):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES64], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18)
syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103302)
ioctl$SG_IO(r3, 0x2285, 0x0)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000380)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@data_err_ignore}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@data_err_ignore}, {@noblock_validity}, {@delalloc}, {@nomblk_io_submit}, {@orlov}, {@user_xattr}, {@nodioread_nolock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x572, &(0x7f0000000980)="$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")
poll(&(0x7f0000b2c000)=[{}], 0x2c, 0xffffffffffbffff8)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000002140)='sched\x00')
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200})
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000200000000000000fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000036c3d58818120000", @ANYRES8, @ANYBLOB="000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000001800000003c6d50f00000000050000008510000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0xca, &(0x7f0000000840)=""/202, 0x40f00, 0x0, '\x00', r6, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000500)=[{0x2, 0x3, 0x1, 0xc}, {0x3, 0x3, 0xa, 0x7}, {0x0, 0x2, 0x0, 0x6}, {0x1, 0x5, 0x5, 0x7}, {0x5, 0x3, 0x9, 0x4}, {0x1, 0x2, 0x0, 0x2}, {0x5, 0x5, 0xa, 0xd}], 0x10, 0x101}, 0x94)
preadv(r4, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/163, 0xa3}], 0x1, 0x0, 0x5)

979.523111ms ago: executing program 0 (id=9527):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES64], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18)
syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103302)
ioctl$SG_IO(r3, 0x2285, 0x0)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000380)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@data_err_ignore}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@data_err_ignore}, {@noblock_validity}, {@delalloc}, {@nomblk_io_submit}, {@orlov}, {@user_xattr}, {@nodioread_nolock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x572, &(0x7f0000000980)="$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")
poll(&(0x7f0000b2c000)=[{}], 0x2c, 0xffffffffffbffff8)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000002140)='sched\x00')
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200})
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000200000000000000fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000036c3d58818120000", @ANYRES8, @ANYBLOB="000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000001800000003c6d50f00000000050000008510000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0xca, &(0x7f0000000840)=""/202, 0x40f00, 0x0, '\x00', r6, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000500)=[{0x2, 0x3, 0x1, 0xc}, {0x3, 0x3, 0xa, 0x7}, {0x0, 0x2, 0x0, 0x6}, {0x1, 0x5, 0x5, 0x7}, {0x5, 0x3, 0x9, 0x4}, {0x1, 0x2, 0x0, 0x2}, {0x5, 0x5, 0xa, 0xd}], 0x10, 0x101}, 0x94)
preadv(r4, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/163, 0xa3}], 0x1, 0x0, 0x5)

39.957366ms ago: executing program 7 (id=9528):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES64], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18)
syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103302)
ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x6, 0x0, @scatter={0x1, 0x3, &(0x7f00000006c0)=[{0x0}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000380)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@data_err_ignore}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@data_err_ignore}, {@noblock_validity}, {@delalloc}, {@nomblk_io_submit}, {@orlov}, {@user_xattr}, {@nodioread_nolock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x572, &(0x7f0000000980)="$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")
poll(&(0x7f0000b2c000)=[{}], 0x2c, 0xffffffffffbffff8)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000002140)='sched\x00')
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200})
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000200000000000000fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000036c3d58818120000", @ANYRES8, @ANYBLOB="000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000001800000003c6d50f00000000050000008510000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0xca, &(0x7f0000000840)=""/202, 0x40f00, 0x0, '\x00', r6, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000500)=[{0x2, 0x3, 0x1, 0xc}, {0x3, 0x3, 0xa, 0x7}, {0x0, 0x2, 0x0, 0x6}, {0x1, 0x5, 0x5, 0x7}, {0x5, 0x3, 0x9, 0x4}, {0x1, 0x2, 0x0, 0x2}, {0x5, 0x5, 0xa, 0xd}], 0x10, 0x101}, 0x94)
preadv(r4, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/163, 0xa3}], 0x1, 0x0, 0x5)

0s ago: executing program 1 (id=9529):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r2, &(0x7f0000000280), 0x10)
setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000400)=[{{0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}], 0x10)
close(r2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ff9}]})
ioperm(0x4, 0x1, 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
timer_create(0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000006288000000000000000000000000000000000000000000000000000000feffffff0000000000040000000000000000000000000000000000000000000093b1c0b5000000000000000000000000feffffff000000"]}, 0x107)

kernel console output (not intermixed with test programs):

c000003e syscall=231 compat=0 ip=0x7f35d7f6f6c9 code=0x0
[  582.764985][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  582.842954][   T29] audit: type=1326 audit(582.815:30182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29337 comm="syz.0.8976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698878f6c9 code=0x7ffc0000
[  582.885193][T29324] loop7: detected capacity change from 0 to 164
[  582.904427][   T29] audit: type=1326 audit(582.815:30183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29337 comm="syz.0.8976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f698878f6c9 code=0x7ffc0000
[  582.927540][   T29] audit: type=1326 audit(582.815:30184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29337 comm="syz.0.8976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698878f6c9 code=0x7ffc0000
[  582.950584][   T29] audit: type=1326 audit(582.815:30185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29337 comm="syz.0.8976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f698878f6c9 code=0x7ffc0000
[  582.973583][   T29] audit: type=1326 audit(582.815:30186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29337 comm="syz.0.8976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698878f6c9 code=0x7ffc0000
[  582.996621][   T29] audit: type=1326 audit(582.815:30187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29337 comm="syz.0.8976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f698878df10 code=0x7ffc0000
[  582.997248][T29324] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  583.019658][   T29] audit: type=1326 audit(582.815:30188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29337 comm="syz.0.8976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f698878df10 code=0x7ffc0000
[  583.050768][   T29] audit: type=1326 audit(582.815:30189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29337 comm="syz.0.8976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698878f6c9 code=0x7ffc0000
[  583.073783][   T29] audit: type=1326 audit(582.815:30190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29337 comm="syz.0.8976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f698878f6c9 code=0x7ffc0000
[  583.247780][T29347] lo speed is unknown, defaulting to 1000
[  583.255014][T29347] lo speed is unknown, defaulting to 1000
[  583.725155][T29356] loop7: detected capacity change from 0 to 512
[  583.795245][T29356] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.8981: bad orphan inode 11862016
[  583.808111][T29356] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  583.847679][T29379] lo speed is unknown, defaulting to 1000
[  583.853916][T29379] lo speed is unknown, defaulting to 1000
[  583.873178][T29380] lo speed is unknown, defaulting to 1000
[  584.014181][T29380] lo speed is unknown, defaulting to 1000
[  584.419578][T22480] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  584.494118][T29358] Set syz1 is full, maxelem 65536 reached
[  584.644113][T29393] lo speed is unknown, defaulting to 1000
[  584.652318][T29393] lo speed is unknown, defaulting to 1000
[  584.844973][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  584.882630][T29400] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  584.914638][T29395] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  585.554083][T29408] __nla_validate_parse: 4 callbacks suppressed
[  585.554104][T29408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8996'.
[  585.607829][T29409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8996'.
[  585.884925][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  585.927474][T29420] lo speed is unknown, defaulting to 1000
[  585.933830][T29420] lo speed is unknown, defaulting to 1000
[  586.642997][T29434] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9002'.
[  586.877146][T29441] lo speed is unknown, defaulting to 1000
[  586.883302][T29441] lo speed is unknown, defaulting to 1000
[  586.890883][T29444] lo speed is unknown, defaulting to 1000
[  586.905892][T29446] v: renamed from ip6_vti0 (while UP)
[  587.000045][T29444] lo speed is unknown, defaulting to 1000
[  587.093631][T29453] lo speed is unknown, defaulting to 1000
[  587.278943][T29453] lo speed is unknown, defaulting to 1000
[  587.319177][T29456] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  587.390176][T29458] futex_wake_op: wޣ� tries to shift op by -1; fix this program
[  587.438363][T29461] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9009'.
[  587.575716][   T29] kauditd_printk_skb: 172 callbacks suppressed
[  587.575733][   T29] audit: type=1326 audit(587.555:30363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29462 comm="syz.6.9010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f67a872f6c9 code=0x7ffc0000
[  587.605004][   T29] audit: type=1326 audit(587.555:30364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29462 comm="syz.6.9010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a872f6c9 code=0x7ffc0000
[  587.628122][   T29] audit: type=1326 audit(587.555:30365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29462 comm="syz.6.9010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a872f6c9 code=0x7ffc0000
[  587.651189][   T29] audit: type=1326 audit(587.555:30366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29462 comm="syz.6.9010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67a872f6c9 code=0x7ffc0000
[  587.674228][   T29] audit: type=1326 audit(587.555:30367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29462 comm="syz.6.9010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a872f6c9 code=0x7ffc0000
[  587.697255][   T29] audit: type=1326 audit(587.555:30368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29462 comm="syz.6.9010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a872f6c9 code=0x7ffc0000
[  587.720234][   T29] audit: type=1326 audit(587.555:30369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29462 comm="syz.6.9010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67a872f6c9 code=0x7ffc0000
[  587.743355][   T29] audit: type=1326 audit(587.555:30370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29462 comm="syz.6.9010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a872f6c9 code=0x7ffc0000
[  587.919045][   T29] audit: type=1326 audit(587.605:30371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29462 comm="syz.6.9010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67a872f6c9 code=0x7ffc0000
[  587.942151][   T29] audit: type=1326 audit(587.605:30372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29462 comm="syz.6.9010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a872f6c9 code=0x7ffc0000
[  587.965574][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  588.109047][T29476] siw: device registration error -23
[  588.109512][T29478] netlink: 172 bytes leftover after parsing attributes in process `syz.5.9014'.
[  588.130566][T29480] ip6t_srh: unknown srh match flags  4000
[  588.253506][T29486] loop7: detected capacity change from 0 to 1024
[  588.281410][T29486] EXT4-fs: Ignoring removed orlov option
[  588.310746][T29486] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  588.416259][T29486] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  588.485366][T29486] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28
[  588.497884][T29486] EXT4-fs (loop7): This should not happen!! Data will be lost
[  588.497884][T29486] 
[  588.507549][T29486] EXT4-fs (loop7): Total free blocks count 0
[  588.513631][T29486] EXT4-fs (loop7): Free/Dirty block details
[  588.519583][T29486] EXT4-fs (loop7): free_blocks=0
[  588.524595][T29486] EXT4-fs (loop7): dirty_blocks=0
[  588.529696][T29486] EXT4-fs (loop7): Block reservation details
[  588.535726][T29486] EXT4-fs (loop7): i_reserved_data_blocks=0
[  588.648395][T22480] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  588.966222][T29509] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=29509 comm=syz.1.9020
[  589.004976][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  590.027581][T29591] lo speed is unknown, defaulting to 1000
[  590.033752][T29591] lo speed is unknown, defaulting to 1000
[  590.154404][T29598] lo speed is unknown, defaulting to 1000
[  590.209917][T29598] lo speed is unknown, defaulting to 1000
[  590.262152][T29601] IPVS: length: 251 != 24
[  590.899632][T29617] loop7: detected capacity change from 0 to 1024
[  590.906465][T29617] EXT4-fs: Ignoring removed orlov option
[  591.050607][T29617] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  591.084970][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  591.409935][T29618] netlink: 88 bytes leftover after parsing attributes in process `wg1'.
[  591.634048][T22480] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  591.748853][T29614] Set syz1 is full, maxelem 65536 reached
[  591.853973][T29633] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  592.124526][T29653] lo speed is unknown, defaulting to 1000
[  592.130348][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  592.234661][T29653] lo speed is unknown, defaulting to 1000
[  592.327685][T29656] xt_CT: You must specify a L4 protocol and not use inversions on it
[  592.678141][   T29] kauditd_printk_skb: 544 callbacks suppressed
[  592.678155][   T29] audit: type=1326 audit(592.655:30917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29667 comm="syz.7.9046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14aed3f6c9 code=0x7ffc0000
[  592.778654][T29668] 9pnet_fd: Insufficient options for proto=fd
[  592.797427][   T29] audit: type=1326 audit(592.685:30918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29667 comm="syz.7.9046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14aed3f6c9 code=0x7ffc0000
[  592.820650][   T29] audit: type=1326 audit(592.685:30919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29667 comm="syz.7.9046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14aed3f6c9 code=0x7ffc0000
[  592.843811][   T29] audit: type=1326 audit(592.685:30920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29667 comm="syz.7.9046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14aed3f6c9 code=0x7ffc0000
[  592.866849][   T29] audit: type=1326 audit(592.685:30921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29667 comm="syz.7.9046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14aed3f6c9 code=0x7ffc0000
[  592.889853][   T29] audit: type=1326 audit(592.695:30922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29667 comm="syz.7.9046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14aed3f6c9 code=0x7ffc0000
[  592.912910][   T29] audit: type=1326 audit(592.695:30923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29667 comm="syz.7.9046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14aed3f6c9 code=0x7ffc0000
[  592.915036][T29668] netlink: 64 bytes leftover after parsing attributes in process `syz.7.9046'.
[  592.936065][   T29] audit: type=1326 audit(592.695:30924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29667 comm="syz.7.9046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f14aed3f6c9 code=0x7ffc0000
[  592.967890][   T29] audit: type=1326 audit(592.695:30925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29667 comm="syz.7.9046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14aed3f6c9 code=0x7ffc0000
[  592.990910][   T29] audit: type=1326 audit(592.695:30926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29667 comm="syz.7.9046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14aed3f6c9 code=0x7ffc0000
[  593.985811][T29692] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  594.204942][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  594.455938][T29708] 9p: Unknown access argument 00000000004294967295:b ��k�vc������R�:����(Ym�	[h�$�:���G[_�DBъiޑ<�Uو��V'/��: -22
[  594.595836][T29717] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9058'.
[  594.604751][T29717] tc_dump_action: action bad kind
[  595.244996][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  595.485815][T29736] lo speed is unknown, defaulting to 1000
[  595.492407][T29736] lo speed is unknown, defaulting to 1000
[  595.715141][T29735] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9062'.
[  595.977276][T29742] lo speed is unknown, defaulting to 1000
[  595.983670][T29742] lo speed is unknown, defaulting to 1000
[  596.017564][T29744] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29744 comm=syz.7.9064
[  596.103176][T29747] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  596.162181][T29751] netlink: 5 bytes leftover after parsing attributes in process `syz.1.9076'.
[  596.175052][T29751] 0��{X��: renamed from gretap0
[  596.181119][T29751] 0��{X��: entered allmulticast mode
[  596.215376][T29751] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  596.383655][T29758] lo speed is unknown, defaulting to 1000
[  596.425287][T29758] lo speed is unknown, defaulting to 1000
[  596.501443][T29762] 9p: Unknown access argument 18446744073709551615:b ��k�vc������R�:����(Ym�	[h�$�:���G[_�DBъiޑ<�Uو��V'/��: -22
[  596.709458][T29767] 9p: Unknown access argument 00000000004294967295:b ��k�vc������R�:����(Ym�	[h�$�:���G[_�DBъiޑ<�Uو��V'/��: -22
[  596.998500][T29778] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  597.104385][T29785] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9075'.
[  597.201755][T29787] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  597.275495][T29787] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  597.326159][T29787] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  597.335006][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  597.423176][T29787] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  597.478944][T29795] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  597.496441][T12715] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  597.542349][T29799] netlink: 660 bytes leftover after parsing attributes in process `syz.7.9081'.
[  597.554207][T12715] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  597.562867][T12715] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  597.585189][T12715] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  597.595753][T29799] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  597.639901][T29802] A link change request failed with some changes committed already. Interface 
60�X��� may have been left with an inconsistent configuration, please check.
[  597.680256][T29804] 9p: Unknown access argument 00000000004294967295:b ��k�vc������R�:����(Ym�	[h�$�:���G[_�DBъiޑ<�Uو��V'/��: -22
[  597.702642][   T29] kauditd_printk_skb: 1073 callbacks suppressed
[  597.702695][   T29] audit: type=1326 audit(597.675:32000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29801 comm="syz.0.9082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698878f6c9 code=0x7ffc0000
[  597.760466][T29808] loop7: detected capacity change from 0 to 1024
[  597.775305][T29808] EXT4-fs: Ignoring removed orlov option
[  597.778539][   T29] audit: type=1326 audit(597.715:32001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29801 comm="syz.0.9082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f698878f6c9 code=0x7ffc0000
[  597.804096][   T29] audit: type=1326 audit(597.715:32002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29801 comm="syz.0.9082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698878f6c9 code=0x7ffc0000
[  597.827149][   T29] audit: type=1400 audit(597.715:32003): avc:  denied  { create } for  pid=29796 comm="syz.1.9079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  597.837014][T29802] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9082'.
[  597.846239][   T29] audit: type=1326 audit(597.715:32004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29801 comm="syz.0.9082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f698878f6c9 code=0x7ffc0000
[  597.878275][   T29] audit: type=1326 audit(597.715:32005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29801 comm="syz.0.9082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698878f6c9 code=0x7ffc0000
[  597.893938][T29802] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9082'.
[  597.901275][   T29] audit: type=1326 audit(597.715:32006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29801 comm="syz.0.9082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698878f6c9 code=0x7ffc0000
[  597.910261][T29802] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9082'.
[  597.933213][   T29] audit: type=1326 audit(597.715:32007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29801 comm="syz.0.9082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f698878f6c9 code=0x7ffc0000
[  597.965203][   T29] audit: type=1326 audit(597.715:32008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29801 comm="syz.0.9082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f698878f703 code=0x7ffc0000
[  597.988032][   T29] audit: type=1400 audit(597.725:32009): avc:  denied  { write } for  pid=29796 comm="syz.1.9079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  598.015830][T29808] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  598.081368][T29815] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9086'.
[  598.102670][T29815] lo speed is unknown, defaulting to 1000
[  598.109474][T29815] lo speed is unknown, defaulting to 1000
[  598.205131][T29808] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(14)
[  598.211773][T29808] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  598.219977][T29808] vhci_hcd vhci_hcd.0: Device attached
[  598.245606][T29822] netlink: 'syz.0.9086': attribute type 4 has an invalid length.
[  598.274182][T29820] vhci_hcd: connection closed
[  598.274883][T12754] vhci_hcd: stop threads
[  598.283897][T12754] vhci_hcd: release socket
[  598.288448][T12754] vhci_hcd: disconnect device
[  598.364896][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  598.691491][T29843] netlink: 260 bytes leftover after parsing attributes in process `syz.5.9092'.
[  598.736414][T29845] 1��{X��: left allmulticast mode
[  598.745522][T29845] 0�X���: left allmulticast mode
[  598.752709][T29845] veth4: left promiscuous mode
[  598.757615][T29845] veth4: left allmulticast mode
[  598.766647][T29845] bond0: (slave bridge2): Releasing active interface
[  598.784227][T29845] bridge2: left promiscuous mode
[  598.809000][T29845] ip6gre1: left allmulticast mode
[  598.835378][T29845] ip6gre2: left allmulticast mode
[  598.863142][T22480] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  598.872689][T29845] macvlan0: left promiscuous mode
[  598.877838][T29845] bond0: left promiscuous mode
[  598.896449][T29845] geneve2: left promiscuous mode
[  598.909795][T29855] netlink: 'syz.5.9092': attribute type 1 has an invalid length.
[  598.917589][T29855] netlink: 'syz.5.9092': attribute type 2 has an invalid length.
[  599.035114][T29861] netlink: 660 bytes leftover after parsing attributes in process `syz.7.9094'.
[  599.056643][T29861] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  599.233359][T29868] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  599.471654][T29870] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9097'.
[  599.616519][T29875] loop7: detected capacity change from 0 to 512
[  599.639058][T29875] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  599.686262][T29875] EXT4-fs (loop7): 1 truncate cleaned up
[  599.697332][T29875] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  599.698846][T29879] siw: device registration error -23
[  599.962990][T22480] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  599.979492][T29886] netlink: 'syz.1.9112': attribute type 4 has an invalid length.
[  599.987342][T29886] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9112'.
[  600.126927][T29897] siw: device registration error -23
[  600.228526][T29900] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  600.444926][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  600.981064][T29923] x_tables: ip_tables: ah match: only valid for protocol 51
[  601.494986][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  601.862126][T29939] SELinux:  policydb magic number 0xfff70003 does not match expected magic number 0xf97cff8c
[  601.898842][T29939] SELinux: failed to load policy
[  602.415298][T29952] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  602.491363][T29956] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  602.753619][T29961] lo speed is unknown, defaulting to 1000
[  602.760230][T29961] lo speed is unknown, defaulting to 1000
[  602.975853][   T29] kauditd_printk_skb: 1005 callbacks suppressed
[  602.975941][   T29] audit: type=1326 audit(602.605:33015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29954 comm="syz.6.9118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a872f6c9 code=0x7ffc0000
[  603.005285][   T29] audit: type=1326 audit(602.605:33016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29954 comm="syz.6.9118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a872f6c9 code=0x7ffc0000
[  603.028251][   T29] audit: type=1326 audit(602.605:33017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29954 comm="syz.6.9118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a872f6c9 code=0x7ffc0000
[  603.051250][   T29] audit: type=1326 audit(602.605:33018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29954 comm="syz.6.9118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a872f6c9 code=0x7ffc0000
[  603.074295][   T29] audit: type=1326 audit(602.605:33019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29954 comm="syz.6.9118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a872f6c9 code=0x7ffc0000
[  603.097278][   T29] audit: type=1326 audit(602.605:33020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29954 comm="syz.6.9118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a872f6c9 code=0x7ffc0000
[  603.120241][   T29] audit: type=1326 audit(602.605:33021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29954 comm="syz.6.9118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a872f6c9 code=0x7ffc0000
[  603.143194][   T29] audit: type=1326 audit(602.605:33023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29954 comm="syz.6.9118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f67a872f6c9 code=0x7ffc0000
[  603.166214][   T29] audit: type=1326 audit(602.605:33022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29954 comm="syz.6.9118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a872f6c9 code=0x7ffc0000
[  603.189170][   T29] audit: type=1326 audit(602.655:33024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29954 comm="syz.6.9118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a872f6c9 code=0x7ffc0000
[  603.323311][T29964] SELinux: ebitmap: truncated map
[  603.337689][T29964] SELinux: failed to load policy
[  603.361781][T29964] syz!: rxe_newlink: already configured on team_slave_0
[  603.478683][T29974] netlink: 'syz.0.9120': attribute type 6 has an invalid length.
[  603.564966][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  604.380378][T29986] __nla_validate_parse: 3 callbacks suppressed
[  604.380399][T29986] netlink: 660 bytes leftover after parsing attributes in process `syz.1.9122'.
[  604.402961][T29984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9127'.
[  604.414488][T29982] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  604.434046][T29984] syz.0.9127: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[  604.448617][T29984] CPU: 0 UID: 0 PID: 29984 Comm: syz.0.9127 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  604.448661][T29984] Tainted: [W]=WARN
[  604.448669][T29984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  604.448682][T29984] Call Trace:
[  604.448690][T29984]  <TASK>
[  604.448700][T29984]  __dump_stack+0x1d/0x30
[  604.448809][T29984]  dump_stack_lvl+0xe8/0x140
[  604.448836][T29984]  dump_stack+0x15/0x1b
[  604.448858][T29984]  warn_alloc+0x12b/0x1a0
[  604.448899][T29984]  ? __rcu_read_unlock+0x4f/0x70
[  604.448930][T29984]  __vmalloc_node_range_noprof+0x9d/0xed0
[  604.449006][T29984]  ? __futex_wait+0x1fa/0x260
[  604.449025][T29984]  ? __pfx_futex_wake_mark+0x10/0x10
[  604.449045][T29984]  ? __rcu_read_unlock+0x4f/0x70
[  604.449186][T29984]  ? avc_has_perm_noaudit+0x1b1/0x200
[  604.449204][T29984]  ? should_fail_ex+0x30/0x280
[  604.449239][T29984]  ? xskq_create+0x36/0xe0
[  604.449268][T29984]  vmalloc_user_noprof+0x7d/0xb0
[  604.449311][T29984]  ? xskq_create+0x80/0xe0
[  604.449331][T29984]  xskq_create+0x80/0xe0
[  604.449428][T29984]  xsk_init_queue+0x95/0xf0
[  604.449448][T29984]  xsk_setsockopt+0x3f5/0x640
[  604.449503][T29984]  ? __pfx_xsk_setsockopt+0x10/0x10
[  604.449556][T29984]  __sys_setsockopt+0x184/0x200
[  604.449659][T29984]  __x64_sys_setsockopt+0x64/0x80
[  604.449698][T29984]  x64_sys_call+0x20ec/0x3000
[  604.449725][T29984]  do_syscall_64+0xd2/0x200
[  604.449758][T29984]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  604.449783][T29984]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  604.449817][T29984]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  604.449842][T29984] RIP: 0033:0x7f698878f6c9
[  604.449857][T29984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  604.449935][T29984] RSP: 002b:00007f69871ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  604.449952][T29984] RAX: ffffffffffffffda RBX: 00007f69889e5fa0 RCX: 00007f698878f6c9
[  604.449966][T29984] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[  604.449977][T29984] RBP: 00007f6988811f91 R08: 0000000000000004 R09: 0000000000000000
[  604.449989][T29984] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  604.450012][T29984] R13: 00007f69889e6038 R14: 00007f69889e5fa0 R15: 00007ffe364b05e8
[  604.450037][T29984]  </TASK>
[  604.450045][T29984] Mem-Info:
[  604.592036][T29989] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  604.592913][T29984] active_anon:23716 inactive_anon:25851 isolated_anon:0
[  604.592913][T29984]  active_file:16361 inactive_file:11343 isolated_file:0
[  604.592913][T29984]  unevictable:16364 dirty:294 writeback:0
[  604.592913][T29984]  slab_reclaimable:4024 slab_unreclaimable:118645
[  604.592913][T29984]  mapped:30877 shmem:44353 pagetables:2326
[  604.592913][T29984]  sec_pagetables:0 bounce:0
[  604.592913][T29984]  kernel_misc_reclaimable:0
[  604.592913][T29984]  free:1599697 free_pcp:17830 free_cma:0
[  604.609016][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  604.744084][T29984] Node 0 active_anon:94864kB inactive_anon:103404kB active_file:65444kB inactive_file:45488kB unevictable:65456kB isolated(anon):0kB isolated(file):0kB mapped:127568kB dirty:1176kB writeback:0kB shmem:177412kB kernel_stack:5552kB pagetables:9304kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  604.772428][T29984] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  604.802143][T29984] lowmem_reserve[]: 0 2881 7859 7859
[  604.807863][T29984] Node 0 DMA32 free:2946624kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:104kB free_cma:0kB
[  604.839249][T29984] lowmem_reserve[]: 0 0 4978 4978
[  604.844360][T29984] Node 0 Normal free:3436804kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:94864kB inactive_anon:103404kB active_file:65444kB inactive_file:45488kB unevictable:65456kB writepending:1176kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:67588kB local_pcp:17376kB free_cma:0kB
[  604.878336][T29984] lowmem_reserve[]: 0 0 0 0
[  604.882906][T29984] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  604.895757][T29984] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946624kB
[  604.911854][T29984] Node 0 Normal: 2472*4kB (UM) 1822*8kB (UME) 742*16kB (UME) 858*32kB (UME) 645*64kB (UM) 317*128kB (UME) 282*256kB (UME) 233*512kB (UM) 189*1024kB (UME) 63*2048kB (UME) 678*4096kB (UM) = 3436784kB
[  604.931714][T29984] Node 0 hugepages_total=4 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  604.941037][T29984] 88520 total pagecache pages
[  604.945752][T29984] 97 pages in swap cache
[  604.949998][T29984] Free swap  = 89648kB
[  604.954080][T29984] Total swap = 124996kB
[  604.958279][T29984] 2097051 pages RAM
[  604.962149][T29984] 0 pages HighMem/MovableOnly
[  604.966914][T29984] 81087 pages reserved
[  605.006585][T29982] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  605.107788][T29982] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  605.132035][T29997] 9p: Unknown access argument 18446744073709551615:b ��k�vc������R�:����(Ym�	[h�$�:���G[_�DBъiޑ<�Uو��V'/��: -22
[  605.180801][T29982] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  605.276655][T12754] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  605.334976][T12754] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  605.337522][T30005] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  605.343298][T12754] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  605.384263][T12754] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  605.492777][T30014] loop7: detected capacity change from 0 to 256
[  605.525805][T30014] netlink: 10 bytes leftover after parsing attributes in process `syz.7.9136'.
[  605.690377][T30026] loop7: detected capacity change from 0 to 128
[  605.694767][T30022] lo speed is unknown, defaulting to 1000
[  605.702874][T30022] lo speed is unknown, defaulting to 1000
[  605.756256][T30029] syz.7.9140: attempt to access beyond end of device
[  605.756256][T30029] loop7: rw=2049, sector=153, nr_sectors = 8 limit=128
[  605.866435][T30030] lo speed is unknown, defaulting to 1000
[  605.903458][T30029] syz.7.9140: attempt to access beyond end of device
[  605.903458][T30029] loop7: rw=2049, sector=169, nr_sectors = 8 limit=128
[  605.956619][T30030] lo speed is unknown, defaulting to 1000
[  606.261793][T30029] syz.7.9140: attempt to access beyond end of device
[  606.261793][T30029] loop7: rw=2049, sector=185, nr_sectors = 8 limit=128
[  606.377594][T30029] syz.7.9140: attempt to access beyond end of device
[  606.377594][T30029] loop7: rw=2049, sector=201, nr_sectors = 8 limit=128
[  606.437575][T30029] syz.7.9140: attempt to access beyond end of device
[  606.437575][T30029] loop7: rw=2049, sector=217, nr_sectors = 8 limit=128
[  606.451420][T30029] syz.7.9140: attempt to access beyond end of device
[  606.451420][T30029] loop7: rw=2049, sector=233, nr_sectors = 8 limit=128
[  606.464890][T30029] syz.7.9140: attempt to access beyond end of device
[  606.464890][T30029] loop7: rw=2049, sector=249, nr_sectors = 8 limit=128
[  606.484046][T30029] syz.7.9140: attempt to access beyond end of device
[  606.484046][T30029] loop7: rw=2049, sector=265, nr_sectors = 8 limit=128
[  606.502865][T30029] syz.7.9140: attempt to access beyond end of device
[  606.502865][T30029] loop7: rw=2049, sector=281, nr_sectors = 8 limit=128
[  606.555476][T30029] syz.7.9140: attempt to access beyond end of device
[  606.555476][T30029] loop7: rw=2049, sector=297, nr_sectors = 8 limit=128
[  606.575157][T30039] xt_hashlimit: max too large, truncated to 1048576
[  606.581888][T30039] No such timeout policy "syz1"
[  606.638647][T30039] 9pnet: Could not find request transport: fd0x0000000000000006
[  606.655084][T30041] lo speed is unknown, defaulting to 1000
[  606.695466][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  606.697192][T30041] lo speed is unknown, defaulting to 1000
[  606.939858][T30052] loop7: detected capacity change from 0 to 512
[  607.724955][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  607.920701][T30052] EXT4-fs (loop7): orphan cleanup on readonly fs
[  607.940299][T30052] EXT4-fs warning (device loop7): ext4_xattr_inode_get:560: inode #11: comm syz.7.9144: EA inode hash validation failed
[  607.983768][T30052] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  607.999773][T30052] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #15: comm syz.7.9144: corrupted inode contents
[  608.024556][T30052] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #15: comm syz.7.9144: mark_inode_dirty error
[  608.036886][T30052] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #15: comm syz.7.9144: corrupted inode contents
[  608.078055][T30052] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2996: inode #15: comm syz.7.9144: mark_inode_dirty error
[  608.125047][T30052] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2999: inode #15: comm syz.7.9144: mark inode dirty (error -117)
[  608.208679][T30052] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117)
[  608.225476][T30067] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  608.250121][T30052] EXT4-fs (loop7): 1 orphan inode deleted
[  608.277416][T30052] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  608.351576][   T29] kauditd_printk_skb: 457 callbacks suppressed
[  608.351610][   T29] audit: type=1400 audit(608.325:33482): avc:  denied  { name_bind } for  pid=30069 comm="syz.1.9149" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  608.463006][   T29] audit: type=1326 audit(608.395:33483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30071 comm="syz.6.9150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a872f6c9 code=0x7ffc0000
[  608.486142][   T29] audit: type=1326 audit(608.395:33484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30071 comm="syz.6.9150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a872f6c9 code=0x7ffc0000
[  608.509267][   T29] audit: type=1326 audit(608.395:33485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30071 comm="syz.6.9150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67a872f6c9 code=0x7ffc0000
[  608.532519][   T29] audit: type=1326 audit(608.395:33486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30071 comm="syz.6.9150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a872f6c9 code=0x7ffc0000
[  608.555580][   T29] audit: type=1326 audit(608.395:33487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30071 comm="syz.6.9150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a872f6c9 code=0x7ffc0000
[  608.578538][   T29] audit: type=1326 audit(608.405:33488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30071 comm="syz.6.9150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67a872f6c9 code=0x7ffc0000
[  608.601543][   T29] audit: type=1326 audit(608.405:33489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30071 comm="syz.6.9150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a872f6c9 code=0x7ffc0000
[  608.624525][   T29] audit: type=1326 audit(608.405:33490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30071 comm="syz.6.9150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67a872f6c9 code=0x7ffc0000
[  608.647505][   T29] audit: type=1326 audit(608.405:33491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30071 comm="syz.6.9150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a872f6c9 code=0x7ffc0000
[  609.008577][T30077] 9pnet_fd: p9_fd_create_unix (30077): problem connecting socket: ./file0: -111
[  609.306171][T30082] 9pnet_fd: Insufficient options for proto=fd
[  609.332159][T30084] vlan0: entered allmulticast mode
[  609.337475][T30084] bridge_slave_0: entered allmulticast mode
[  609.562754][T22480] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  609.672900][T30100] lo speed is unknown, defaulting to 1000
[  609.672913][T30101] loop7: detected capacity change from 0 to 512
[  609.685449][T30100] lo speed is unknown, defaulting to 1000
[  609.721833][T30101] EXT4-fs (loop7): orphan cleanup on readonly fs
[  609.729584][T30101] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.9157: bad orphan inode 13
[  609.772022][T30101] ext4_test_bit(bit=12, block=18) = 1
[  609.777466][T30101] is_bad_inode(inode)=0
[  609.781633][T30101] NEXT_ORPHAN(inode)=2130706432
[  609.786513][T30101] max_ino=32
[  609.789787][T30101] i_nlink=1
[  609.804961][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  609.828637][T30101] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  609.880034][T30101] netlink: 'syz.7.9157': attribute type 10 has an invalid length.
[  609.898296][T30101] team0: Port device dummy0 added
[  609.912739][T30101] netlink: 'syz.7.9157': attribute type 10 has an invalid length.
[  609.933259][T30101] team0: Port device dummy0 removed
[  609.943683][T30101] .`: (slave dummy0): Enslaving as an active interface with an up link
[  609.956338][T30104] netlink: 10 bytes leftover after parsing attributes in process `syz.0.9158'.
[  609.968282][T30101] EXT4-fs error (device loop7): ext4_lookup:1787: inode #15: comm syz.7.9157: iget: bad i_size value: 360287970189639690
[  610.066814][T22480] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  610.440990][T30113] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9162'.
[  610.461003][T30124] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  610.520009][T30129] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  610.768764][T30140] lo speed is unknown, defaulting to 1000
[  610.775151][T30140] lo speed is unknown, defaulting to 1000
[  610.810280][T30142] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30142 comm=syz.5.9168
[  610.854868][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  610.977515][T30147] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=30147 comm=syz.0.9170
[  611.017001][T30148] lo speed is unknown, defaulting to 1000
[  611.023259][T30148] lo speed is unknown, defaulting to 1000
[  611.217814][T30153] lo speed is unknown, defaulting to 1000
[  611.224203][T30153] lo speed is unknown, defaulting to 1000
[  611.708871][T30162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9174'.
[  611.857696][T30162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9174'.
[  612.022469][T30175] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  612.172076][T30174] 9pnet: Could not find request transport: fd(rfdno=0x0000000000000006
[  612.199878][T30182] raw_sendmsg: syz.7.9178 forgot to set AF_INET. Fix it!
[  612.308549][T30188] xt_recent: hitcount (16777216) is larger than allowed maximum (65535)
[  612.317886][T30188] 9pnet_fd: Insufficient options for proto=fd
[  612.505279][T30197] vlan0: entered allmulticast mode
[  612.510467][T30197] bridge_slave_0: entered allmulticast mode
[  612.616325][T30204] xt_hashlimit: max too large, truncated to 1048576
[  612.624353][T30204] No such timeout policy "syz1"
[  612.655804][T30206] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9187'.
[  612.924874][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  613.055839][T30221] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  613.429510][   T29] kauditd_printk_skb: 1250 callbacks suppressed
[  613.429526][   T29] audit: type=1400 audit(613.405:34742): avc:  denied  { nlmsg_write } for  pid=30216 comm="syz.0.9191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  613.432543][T30231] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=30231 comm=syz.0.9191
[  613.474606][   T29] audit: type=1400 audit(613.445:34743): avc:  denied  { create } for  pid=30228 comm="syz.1.9194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  613.484614][T30234] lo speed is unknown, defaulting to 1000
[  613.504865][   T29] audit: type=1400 audit(613.475:34744): avc:  denied  { connect } for  pid=30228 comm="syz.1.9194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  613.524062][   T29] audit: type=1400 audit(613.475:34745): avc:  denied  { write } for  pid=30228 comm="syz.1.9194" laddr=fe80::d040:e5ff:fefa:81b7 lport=54195 faddr=ff04::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  613.549197][T30234] lo speed is unknown, defaulting to 1000
[  613.566801][T30235] 
@0�: renamed from bond_slave_1
[  613.587806][   T29] audit: type=1400 audit(613.565:34746): avc:  denied  { map } for  pid=30232 comm="syz.7.9195" path="socket:[89363]" dev="sockfs" ino=89363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  613.611210][   T29] audit: type=1326 audit(613.565:34747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30232 comm="syz.7.9195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14aed3f6c9 code=0x7ffc0000
[  613.634215][   T29] audit: type=1326 audit(613.565:34748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30232 comm="syz.7.9195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f14aed3f6c9 code=0x7ffc0000
[  613.779387][   T29] audit: type=1326 audit(613.615:34749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30232 comm="syz.7.9195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14aed3f6c9 code=0x7ffc0000
[  613.802395][   T29] audit: type=1326 audit(613.615:34750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30232 comm="syz.7.9195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14aed3f6c9 code=0x7ffc0000
[  613.825536][   T29] audit: type=1326 audit(613.615:34751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30237 comm="syz.7.9195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f14aed71f85 code=0x7ffc0000
[  613.964952][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  614.324365][T30253] netlink: 80 bytes leftover after parsing attributes in process `syz.1.9199'.
[  614.811435][T30261] ip6t_srh: unknown srh match flags  4000
[  614.941478][T30262] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=30262 comm=syz.7.9201
[  615.008855][T30266] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9203'.
[  615.054660][T30266] netlink: 'syz.6.9203': attribute type 4 has an invalid length.
[  615.062502][T30266] netlink: 152 bytes leftover after parsing attributes in process `syz.6.9203'.
[  615.067660][T30277] loop7: detected capacity change from 0 to 4096
[  615.104301][T30277] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  615.118448][T30282] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  615.143601][T30289] siw: device registration error -23
[  615.267098][T30295] netlink: 4788 bytes leftover after parsing attributes in process `syz.5.9209'.
[  615.308118][T30295] netlink: 4788 bytes leftover after parsing attributes in process `syz.5.9209'.
[  615.336659][T30277] dvmrp1: entered allmulticast mode
[  615.460817][T22480] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  615.482248][T30303] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  615.771447][T30314] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9215'.
[  615.827591][T30318] rdma_rxe: rxe_newlink: failed to add bond0
[  616.027874][T30322] netlink: 'syz.5.9214': attribute type 13 has an invalid length.
[  616.044943][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  616.079167][T30322] bridge0: port 1(gretap0) entered disabled state
[  616.332983][T30334] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  616.467105][T30322] veth1_vlan: left promiscuous mode
[  616.492323][T30322] tipc: Resetting bearer <eth:syzkaller0>
[  616.629620][T11330] lo speed is unknown, defaulting to 1000
[  616.635501][T11330] s
z1: Port: 1 Link DOWN
[  616.649522][T30333] lo speed is unknown, defaulting to 1000
[  616.655830][T30333] lo speed is unknown, defaulting to 1000
[  616.773790][T30337] loop7: detected capacity change from 0 to 732
[  616.810094][T30337] iso9660: Unknown parameter '18446744073709551615'
[  616.825350][T11330] lo speed is unknown, defaulting to 1000
[  616.837367][T30343] 9p: Unknown access argument 00000000004294967295:b ��k�vc������R�:����(Ym�	[h�$�:���G[_�DBъiޑ<�Uو��V'/��: -22
[  616.862972][T30345] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  616.885198][T30337] netlink: 60 bytes leftover after parsing attributes in process `syz.7.9221'.
[  616.932733][T30345] vlan0: entered allmulticast mode
[  617.043482][T30351] netlink: 10 bytes leftover after parsing attributes in process `syz.5.9226'.
[  617.166126][T30356] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  617.405108][T30358] netlink: 14 bytes leftover after parsing attributes in process `syz.6.9225'.
[  617.588902][T30370] loop7: detected capacity change from 0 to 512
[  617.590322][T30371] xt_CT: You must specify a L4 protocol and not use inversions on it
[  617.627161][T30370] EXT4-fs (loop7): 1 orphan inode deleted
[  617.635557][T30374] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9228'.
[  617.636818][T30370] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  617.692459][T30371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9229'.
[  617.715620][T30370] EXT4-fs error (device loop7): ext4_lookup:1787: inode #15: comm syz.7.9232: iget: bad i_size value: 360287970189639690
[  617.742935][T30370] EXT4-fs error (device loop7): ext4_lookup:1787: inode #15: comm syz.7.9232: iget: bad i_size value: 360287970189639690
[  617.949644][T30381] EXT4-fs warning (device loop7): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed
[  618.038191][T22480] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  618.058370][T30387] loop7: detected capacity change from 0 to 128
[  618.071068][T30387] FAT-fs (loop7): error, corrupted directory (invalid entries)
[  618.078692][T30387] FAT-fs (loop7): Filesystem has been set read-only
[  618.225457][T30391] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  618.392565][T30395] 9p: Unknown access argument 00000000004294967295:b ��k�vc������R�:����(Ym�	[h�$�:���G[_�DBъiޑ<�Uو��V'/��: -22
[  618.394616][T30397] loop7: detected capacity change from 0 to 512
[  618.413714][T30397] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  618.425782][T30397] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  618.439203][T30397] EXT4-fs (loop7): 1 truncate cleaned up
[  618.445787][T30397] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  618.462643][   T29] kauditd_printk_skb: 1209 callbacks suppressed
[  618.462659][   T29] audit: type=1326 audit(618.435:35962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30396 comm="syz.7.9235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14aed3f6c9 code=0x7ffc0000
[  618.518412][   T29] audit: type=1326 audit(618.435:35963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30396 comm="syz.7.9235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14aed3f6c9 code=0x7ffc0000
[  618.541492][   T29] audit: type=1326 audit(618.435:35964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30396 comm="syz.7.9235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14aed3f6c9 code=0x7ffc0000
[  618.564466][   T29] audit: type=1326 audit(618.435:35961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30396 comm="syz.7.9235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14aed3f6c9 code=0x7ffc0000
[  618.587456][   T29] audit: type=1326 audit(618.435:35965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30396 comm="syz.7.9235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f14aed3f6c9 code=0x7ffc0000
[  618.610596][   T29] audit: type=1326 audit(618.435:35966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30396 comm="syz.7.9235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14aed3f6c9 code=0x7ffc0000
[  618.633587][   T29] audit: type=1326 audit(618.435:35967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30396 comm="syz.7.9235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14aed3f6c9 code=0x7ffc0000
[  618.656620][   T29] audit: type=1326 audit(618.435:35968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30396 comm="syz.7.9235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14aed3f6c9 code=0x7ffc0000
[  618.679717][   T29] audit: type=1326 audit(618.435:35969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30396 comm="syz.7.9235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14aed3f6c9 code=0x7ffc0000
[  618.702694][   T29] audit: type=1326 audit(618.435:35970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30396 comm="syz.7.9235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14aed3f6c9 code=0x7ffc0000
[  618.881639][T30413] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  618.921662][T22480] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  618.983980][T30417] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=30417 comm=syz.1.9240
[  619.350946][T30428] netlink: 'syz.7.9245': attribute type 21 has an invalid length.
[  619.387865][T30428] netlink: 'syz.7.9245': attribute type 5 has an invalid length.
[  619.390997][T30430] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  619.395756][T30428] netlink: 'syz.7.9245': attribute type 6 has an invalid length.
[  619.459619][T30427] Cannot find del_set index 3 as target
[  619.634380][T30436] lo speed is unknown, defaulting to 1000
[  619.653991][T30436] lo speed is unknown, defaulting to 1000
[  619.733569][T30440] netlink: zone id is out of range
[  619.738788][T30440] netlink: zone id is out of range
[  619.795530][T30440] netlink: set zone limit has 8 unknown bytes
[  619.931037][T30446] 9p: Unknown access argument 00000000004294967295:b ��k�vc������R�:����(Ym�	[h�$�:���G[_�DBъiޑ<�Uو��V'/��: -22
[  620.174629][T30453] loop7: detected capacity change from 0 to 512
[  620.205654][T30453] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  620.248228][T30453] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002e028, mo2=0002]
[  620.265038][T30453] System zones: 1-12
[  620.275557][T30453] EXT4-fs (loop7): 1 truncate cleaned up
[  620.281701][T30453] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  620.592699][T30463] .`: (slave dummy0): Releasing backup interface
[  620.601308][T30463] bond1: (slave bridge3): Releasing active interface
[  620.620080][T30463] bond2: (slave wireguard0): Releasing backup interface
[  620.627166][T30463] wireguard0: left promiscuous mode
[  620.669627][T30463] __nla_validate_parse: 5 callbacks suppressed
[  620.669642][T30463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9254'.
[  620.713464][T30469] rdma_rxe: rxe_newlink: failed to add lo
[  620.869221][T30451] syz.5.9251 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=0
[  620.883569][T30451] CPU: 1 UID: 0 PID: 30451 Comm: syz.5.9251 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  620.883644][T30451] Tainted: [W]=WARN
[  620.883650][T30451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  620.883661][T30451] Call Trace:
[  620.883668][T30451]  <TASK>
[  620.883675][T30451]  __dump_stack+0x1d/0x30
[  620.883700][T30451]  dump_stack_lvl+0xe8/0x140
[  620.883725][T30451]  dump_stack+0x15/0x1b
[  620.883744][T30451]  dump_header+0x81/0x220
[  620.883829][T30451]  oom_kill_process+0x342/0x400
[  620.883872][T30451]  out_of_memory+0x979/0xb80
[  620.883908][T30451]  try_charge_memcg+0x610/0xa10
[  620.883966][T30451]  obj_cgroup_charge_pages+0xa6/0x150
[  620.883992][T30451]  __memcg_kmem_charge_page+0x9f/0x170
[  620.884033][T30451]  __alloc_frozen_pages_noprof+0x188/0x360
[  620.884073][T30451]  alloc_pages_mpol+0xb3/0x260
[  620.884143][T30451]  ? alloc_pages_noprof+0x61/0x130
[  620.884172][T30451]  alloc_pages_noprof+0x90/0x130
[  620.884276][T30451]  __vmalloc_node_range_noprof+0x7a5/0xed0
[  620.884340][T30451]  __kvmalloc_node_noprof+0x483/0x670
[  620.884415][T30451]  ? ip_set_alloc+0x24/0x30
[  620.884461][T30451]  ? ip_set_alloc+0x24/0x30
[  620.884499][T30451]  ? __kmalloc_cache_noprof+0x249/0x4a0
[  620.884582][T30451]  ip_set_alloc+0x24/0x30
[  620.884620][T30451]  hash_netiface_create+0x282/0x740
[  620.884661][T30451]  ? __pfx_hash_netiface_create+0x10/0x10
[  620.884898][T30451]  ip_set_create+0x3cc/0x970
[  620.884930][T30451]  ? __nla_parse+0x40/0x60
[  620.885037][T30451]  nfnetlink_rcv_msg+0x4c6/0x590
[  620.885090][T30451]  netlink_rcv_skb+0x123/0x220
[  620.885128][T30451]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  620.885183][T30451]  nfnetlink_rcv+0x167/0x16c0
[  620.885217][T30451]  ? put_dec+0xd3/0xe0
[  620.885262][T30451]  ? number+0x9ae/0xab0
[  620.885310][T30451]  ? mas_wr_walk_descend+0x36e/0x470
[  620.885336][T30451]  ? css_rstat_updated+0xb7/0x240
[  620.885362][T30451]  ? mod_memcg_lruvec_state+0x1fc/0x2c0
[  620.885494][T30451]  ? __rcu_read_unlock+0x34/0x70
[  620.885529][T30451]  ? xas_find+0x3ab/0x3e0
[  620.885554][T30451]  ? folio_add_file_rmap_ptes+0x1a8/0x1e0
[  620.885647][T30451]  ? next_uptodate_folio+0x815/0x890
[  620.885673][T30451]  ? percpu_counter_add_batch+0xb6/0x130
[  620.885712][T30451]  ? should_fail_ex+0x30/0x280
[  620.885824][T30451]  ? selinux_nlmsg_lookup+0x99/0x890
[  620.885936][T30451]  ? __rcu_read_unlock+0x34/0x70
[  620.885980][T30451]  ? __netlink_lookup+0x266/0x2a0
[  620.886003][T30451]  netlink_unicast+0x5c0/0x690
[  620.886099][T30451]  netlink_sendmsg+0x58b/0x6b0
[  620.886125][T30451]  ? __pfx_netlink_sendmsg+0x10/0x10
[  620.886150][T30451]  __sock_sendmsg+0x145/0x180
[  620.886178][T30451]  ____sys_sendmsg+0x31e/0x4e0
[  620.886218][T30451]  ___sys_sendmsg+0x17b/0x1d0
[  620.886271][T30451]  __x64_sys_sendmsg+0xd4/0x160
[  620.886298][T30451]  x64_sys_call+0x191e/0x3000
[  620.886339][T30451]  do_syscall_64+0xd2/0x200
[  620.886363][T30451]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  620.886452][T30451]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  620.886486][T30451]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  620.886510][T30451] RIP: 0033:0x7f35d7f6f6c9
[  620.886605][T30451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  620.886627][T30451] RSP: 002b:00007f35d69d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  620.886649][T30451] RAX: ffffffffffffffda RBX: 00007f35d81c5fa0 RCX: 00007f35d7f6f6c9
[  620.886663][T30451] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000007
[  620.886675][T30451] RBP: 00007f35d7ff1f91 R08: 0000000000000000 R09: 0000000000000000
[  620.886688][T30451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  620.886703][T30451] R13: 00007f35d81c6038 R14: 00007f35d81c5fa0 R15: 00007ffcf4d84298
[  620.886778][T30451]  </TASK>
[  621.256736][T30451] memory: usage 307200kB, limit 307200kB, failcnt 220
[  621.263516][T30451] memory+swap: usage 337984kB, limit 9007199254740988kB, failcnt 0
[  621.271448][T30451] kmem: usage 254856kB, limit 9007199254740988kB, failcnt 0
[  621.278836][T30451] Memory cgroup stats for /syz5:
[  621.281788][T30451] cache 52420608
[  621.290378][T30451] rss 1007616
[  621.293699][T30451] shmem 43503616
[  621.297294][T30451] mapped_file 5472256
[  621.301323][T30451] dirty 0
[  621.304263][T30451] writeback 0
[  621.307266][T22480] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  621.307615][T30451] workingset_refault_anon 3846
[  621.321341][T30451] workingset_refault_file 2185
[  621.326150][T30451] swap 31522816
[  621.329666][T30451] swapcached 73728
[  621.333388][T30451] pgpgin 1043001
[  621.336966][T30451] pgpgout 1029932
[  621.340609][T30451] pgfault 1001317
[  621.344246][T30451] pgmajfault 500
[  621.347875][T30451] inactive_anon 38187008
[  621.352127][T30451] active_anon 6397952
[  621.356185][T30451] inactive_file 0
[  621.359818][T30451] active_file 8945664
[  621.363792][T30451] unevictable 0
[  621.367313][T30451] hierarchical_memory_limit 314572800
[  621.372697][T30451] hierarchical_memsw_limit 9223372036854771712
[  621.378962][T30451] total_cache 52420608
[  621.383038][T30451] total_rss 1007616
[  621.386948][T30451] total_shmem 43503616
[  621.391028][T30451] total_mapped_file 5472256
[  621.395614][T30451] total_dirty 0
[  621.399079][T30451] total_writeback 0
[  621.400660][T30483] 9p: Unknown access argument 00000000004294967295:b ��k�vc������R�:����(Ym�	[h�$�:���G[_�DBъiޑ<�Uو��V'/��: -22
[  621.402891][T30451] total_workingset_refault_anon 3846
[  621.421704][T30451] total_workingset_refault_file 2185
[  621.427020][T30451] total_swap 31522816
[  621.431010][T30451] total_swapcached 73728
[  621.435377][T30451] total_pgpgin 1043001
[  621.439488][T30451] total_pgpgout 1029932
[  621.443671][T30451] total_pgfault 1001317
[  621.447903][T30451] total_pgmajfault 500
[  621.451977][T30451] total_inactive_anon 38187008
[  621.456805][T30451] total_active_anon 6397952
[  621.461309][T30451] total_inactive_file 0
[  621.465515][T30451] total_active_file 8945664
[  621.470013][T30451] total_unevictable 0
[  621.473997][T30451] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.4631,pid=16393,uid=0
[  621.488743][T30451] Memory cgroup out of memory: Killed process 16393 (syz.5.4631) total-vm:95872kB, anon-rss:1308kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000
[  621.584394][T30487] loop7: detected capacity change from 0 to 512
[  621.606635][T30487] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  621.641967][T30482] EXT4-fs: Remounting fs w/o journal so ignoring data_err option
[  621.649790][T30482] EXT4-fs: Cannot change journaled quota options when quota turned on
[  621.742553][T30491] Cannot find del_set index 3 as target
[  621.763299][T30493] lo speed is unknown, defaulting to 1000
[  621.794307][T30493] lo speed is unknown, defaulting to 1000
[  621.822099][T30498] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9265'.
[  621.896395][T30504] netlink: 'syz.5.9266': attribute type 13 has an invalid length.
[  622.010727][T22480] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  622.035769][T30511] netlink: 76 bytes leftover after parsing attributes in process `syz.5.9269'.
[  622.094952][T30514] netlink: 660 bytes leftover after parsing attributes in process `syz.7.9268'.
[  622.136439][T30517] netlink: 76 bytes leftover after parsing attributes in process `syz.5.9270'.
[  622.165996][T30514] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  622.175678][T30519] netlink: 112 bytes leftover after parsing attributes in process `syz.6.9271'.
[  622.253587][T30527] 9p: Unknown access argument 00000000004294967295:b ��k�vc������R�:����(Ym�	[h�$�:���G[_�DBъiޑ<�Uو��V'/��: -22
[  622.278355][T30529] netlink: 80 bytes leftover after parsing attributes in process `syz.6.9275'.
[  622.343369][T30536] netlink: 'syz.1.9278': attribute type 13 has an invalid length.
[  622.375297][T30537] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9276'.
[  622.390023][T30539] netlink: 76 bytes leftover after parsing attributes in process `syz.5.9279'.
[  622.413636][T30541] netlink: 'syz.6.9280': attribute type 13 has an invalid length.
[  622.443120][T30544] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9276'.
[  622.468308][T30546] netlink: 'syz.1.9281': attribute type 13 has an invalid length.
[  622.500887][T12729] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  622.530426][T12729] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  622.544551][T12729] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  622.560069][T12729] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  622.579745][T30552] netlink: 'syz.6.9283': attribute type 13 has an invalid length.
[  622.655484][T30556] netlink: 'syz.6.9286': attribute type 13 has an invalid length.
[  622.708238][T30559] sy�: rxe_newlink: already configured on bond_slave_0
[  622.744650][T30562] lo speed is unknown, defaulting to 1000
[  622.755458][T30562] lo speed is unknown, defaulting to 1000
[  622.780882][T30557] x_tables: unsorted underflow at hook 3
[  622.796014][T30565] 9p: Unknown access argument 00000000004294967295:b ��k�vc������R�:����(Ym�	[h�$�:���G[_�DBъiޑ<�Uو��V'/��: -22
[  623.185555][T30575] lo speed is unknown, defaulting to 1000
[  623.191604][T30575] lo speed is unknown, defaulting to 1000
[  623.361028][T30582] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  623.687286][T30589] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  623.696544][T30589] sch_tbf: burst 3298 is lower than device lo mtu (11337746) !
[  623.744912][   T29] kauditd_printk_skb: 853 callbacks suppressed
[  623.744928][   T29] audit: type=1326 audit(623.675:36824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30588 comm="syz.6.9295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a872f6c9 code=0x50000
[  623.773872][   T29] audit: type=1326 audit(623.685:36825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30588 comm="syz.6.9295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a872f6c9 code=0x50000
[  623.796607][   T29] audit: type=1326 audit(623.685:36826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30588 comm="syz.6.9295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a872f6c9 code=0x50000
[  623.819407][   T29] audit: type=1326 audit(623.685:36827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30588 comm="syz.6.9295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a872f6c9 code=0x50000
[  623.842227][   T29] audit: type=1326 audit(623.685:36828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30588 comm="syz.6.9295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a872f6c9 code=0x50000
[  623.865028][   T29] audit: type=1326 audit(623.685:36829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30588 comm="syz.6.9295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a872f6c9 code=0x50000
[  623.887955][   T29] audit: type=1326 audit(623.685:36830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30588 comm="syz.6.9295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a872f6c9 code=0x50000
[  623.910685][   T29] audit: type=1326 audit(623.685:36831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30588 comm="syz.6.9295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a872f6c9 code=0x50000
[  623.933462][   T29] audit: type=1326 audit(623.685:36832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30588 comm="syz.6.9295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a872f6c9 code=0x50000
[  623.956240][   T29] audit: type=1326 audit(623.685:36833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30588 comm="syz.6.9295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a872f6c9 code=0x50000
[  624.074103][T30599] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  624.432997][T30609] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  624.911416][T30629] netlink: 'syz.0.9308': attribute type 13 has an invalid length.
[  625.007154][T30632] siw: device registration error -23
[  625.168723][T30634] lo speed is unknown, defaulting to 1000
[  625.175185][T30634] lo speed is unknown, defaulting to 1000
[  625.537765][T12719] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  625.556091][T12719] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  625.669515][T12719] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  625.925069][T12719] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  626.027270][T30644] netlink: 'syz.6.9310': attribute type 1 has an invalid length.
[  626.059563][T30647] __nla_validate_parse: 4 callbacks suppressed
[  626.059582][T30647] netlink: 660 bytes leftover after parsing attributes in process `syz.0.9311'.
[  626.089765][T30642] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9310'.
[  626.127407][T30647] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  626.139458][T30654] netlink: 'syz.5.9313': attribute type 13 has an invalid length.
[  626.254373][T30660] netlink: 'syz.0.9316': attribute type 13 has an invalid length.
[  626.302363][T30662] netlink: 76 bytes leftover after parsing attributes in process `syz.6.9315'.
[  626.351483][T30669] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  626.387627][T30676] netlink: 76 bytes leftover after parsing attributes in process `syz.6.9319'.
[  626.580288][T30688] lo speed is unknown, defaulting to 1000
[  626.618382][T30693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9324'.
[  626.633405][T30688] lo speed is unknown, defaulting to 1000
[  626.839783][T30700] netlink: 660 bytes leftover after parsing attributes in process `syz.6.9327'.
[  626.854359][T30700] sy�: rxe_newlink: already configured on bond_slave_0
[  626.979189][T30711] lo speed is unknown, defaulting to 1000
[  626.997601][T30711] lo speed is unknown, defaulting to 1000
[  627.038789][T30714] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  627.269800][T30722] validate_nla: 2 callbacks suppressed
[  627.269878][T30722] netlink: 'syz.1.9335': attribute type 13 has an invalid length.
[  627.348759][T30724] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  627.446121][T30733] netlink: 'syz.5.9338': attribute type 13 has an invalid length.
[  627.504157][T30736] netlink: 'syz.5.9339': attribute type 13 has an invalid length.
[  627.642638][T30741] netlink: 660 bytes leftover after parsing attributes in process `syz.5.9341'.
[  627.653407][T30741] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  627.705224][T30744] netlink: 'syz.1.9342': attribute type 13 has an invalid length.
[  627.819217][T30757] siw: device registration error -23
[  627.846386][T30762] netlink: 'syz.0.9349': attribute type 13 has an invalid length.
[  627.878689][T30755] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9347'.
[  627.889905][T30760] loop7: detected capacity change from 0 to 1024
[  628.028374][T30778] netlink: 660 bytes leftover after parsing attributes in process `syz.7.9354'.
[  628.056566][T30778] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  628.077191][T30781] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  628.196312][T30784] lo speed is unknown, defaulting to 1000
[  628.202465][T30784] lo speed is unknown, defaulting to 1000
[  628.411496][T30790] netlink: 'syz.6.9356': attribute type 13 has an invalid length.
[  628.605618][T30784] loop7: detected capacity change from 0 to 164
[  628.613314][T30784] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  628.949141][T30802] lo speed is unknown, defaulting to 1000
[  628.960361][T30802] lo speed is unknown, defaulting to 1000
[  629.518898][T30818] lo speed is unknown, defaulting to 1000
[  629.544055][T30818] lo speed is unknown, defaulting to 1000
[  629.618610][T30816] netlink: 60 bytes leftover after parsing attributes in process `syz.6.9363'.
[  630.169413][T30830] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  630.272681][   T29] kauditd_printk_skb: 589 callbacks suppressed
[  630.272760][   T29] audit: type=1326 audit(630.245:37423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30833 comm="syz.5.9368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35d7f6f6c9 code=0x7ffc0000
[  630.302324][   T29] audit: type=1326 audit(630.245:37424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30833 comm="syz.5.9368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35d7f6f6c9 code=0x7ffc0000
[  630.394993][   T29] audit: type=1326 audit(630.305:37425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30833 comm="syz.5.9368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f35d7f6f6c9 code=0x7ffc0000
[  630.417953][   T29] audit: type=1326 audit(630.305:37426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30833 comm="syz.5.9368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35d7f6f6c9 code=0x7ffc0000
[  630.440963][   T29] audit: type=1326 audit(630.305:37427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30833 comm="syz.5.9368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35d7f6f6c9 code=0x7ffc0000
[  630.519206][T30839] lo speed is unknown, defaulting to 1000
[  630.526345][T30839] lo speed is unknown, defaulting to 1000
[  630.563628][   T29] audit: type=1326 audit(630.475:37428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30833 comm="syz.5.9368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f35d7f6f6c9 code=0x7ffc0000
[  630.586758][   T29] audit: type=1326 audit(630.475:37429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30833 comm="syz.5.9368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35d7f6f6c9 code=0x7ffc0000
[  630.609961][   T29] audit: type=1326 audit(630.475:37430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30833 comm="syz.5.9368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35d7f6f6c9 code=0x7ffc0000
[  630.632979][   T29] audit: type=1326 audit(630.475:37431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30833 comm="syz.5.9368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35d7f6f6c9 code=0x7ffc0000
[  630.656201][   T29] audit: type=1326 audit(630.475:37432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30833 comm="syz.5.9368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35d7f6f6c9 code=0x7ffc0000
[  631.444796][T30875] netlink: 'syz.1.9378': attribute type 13 has an invalid length.
[  631.516070][T30877] netlink: 'syz.1.9379': attribute type 13 has an invalid length.
[  631.694036][T30881] loop7: detected capacity change from 0 to 1024
[  631.839089][T30894] lo speed is unknown, defaulting to 1000
[  631.845386][T30894] lo speed is unknown, defaulting to 1000
[  631.884772][T30895] netlink: 'syz.7.9385': attribute type 1 has an invalid length.
[  631.892593][T30895] __nla_validate_parse: 1 callbacks suppressed
[  631.892608][T30895] netlink: 224 bytes leftover after parsing attributes in process `syz.7.9385'.
[  631.955546][T30898] loop7: detected capacity change from 0 to 1024
[  631.973181][T30898] EXT4-fs: Ignoring removed nomblk_io_submit option
[  631.979870][T30898] EXT4-fs: Ignoring removed orlov option
[  631.985683][T30898] ext2: Bad value for 'mb_optimize_scan'
[  632.103918][T30901] lo speed is unknown, defaulting to 1000
[  632.129112][T30901] lo speed is unknown, defaulting to 1000
[  632.570456][T30911] lo speed is unknown, defaulting to 1000
[  632.608402][T30911] lo speed is unknown, defaulting to 1000
[  632.875065][T30920] lo speed is unknown, defaulting to 1000
[  632.881446][T30920] lo speed is unknown, defaulting to 1000
[  632.887952][T30918] lo speed is unknown, defaulting to 1000
[  632.907907][T30921] netlink: 'syz.7.9390': attribute type 1 has an invalid length.
[  632.915774][T30921] netlink: 224 bytes leftover after parsing attributes in process `syz.7.9390'.
[  632.945419][T30921] loop7: detected capacity change from 0 to 1024
[  632.952292][T30921] EXT4-fs: Ignoring removed nomblk_io_submit option
[  632.958958][T30921] EXT4-fs: Ignoring removed orlov option
[  632.964659][T30921] ext2: Bad value for 'mb_optimize_scan'
[  633.014662][T30925] netlink: 'syz.5.9392': attribute type 13 has an invalid length.
[  633.035058][T30918] lo speed is unknown, defaulting to 1000
[  633.125471][T30929] netlink: 76 bytes leftover after parsing attributes in process `syz.5.9393'.
[  633.548099][T30948] loop7: detected capacity change from 0 to 1024
[  633.719523][T30957] netlink: 'syz.1.9403': attribute type 13 has an invalid length.
[  633.830940][T30965] netlink: 'syz.1.9404': attribute type 13 has an invalid length.
[  634.568246][T30988] netlink: 76 bytes leftover after parsing attributes in process `syz.7.9411'.
[  634.757271][T30992] lo speed is unknown, defaulting to 1000
[  634.763452][T30992] lo speed is unknown, defaulting to 1000
[  634.788925][T30996] netlink: 'syz.7.9413': attribute type 1 has an invalid length.
[  634.796823][T30996] netlink: 224 bytes leftover after parsing attributes in process `syz.7.9413'.
[  634.826660][T30996] loop7: detected capacity change from 0 to 1024
[  634.833755][T30996] EXT4-fs: Ignoring removed nomblk_io_submit option
[  634.840552][T30996] EXT4-fs: Ignoring removed orlov option
[  634.846397][T30996] ext2: Bad value for 'mb_optimize_scan'
[  635.146120][T31007] netlink: 'syz.0.9417': attribute type 13 has an invalid length.
[  635.283317][T31021] lo speed is unknown, defaulting to 1000
[  635.298697][T31021] lo speed is unknown, defaulting to 1000
[  635.337060][T31023] lo speed is unknown, defaulting to 1000
[  635.402292][T31023] lo speed is unknown, defaulting to 1000
[  635.554203][   T29] kauditd_printk_skb: 663 callbacks suppressed
[  635.554221][   T29] audit: type=1326 audit(635.515:38096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31031 comm="syz.6.9424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a872f6c9 code=0x7ffc0000
[  635.583554][   T29] audit: type=1326 audit(635.515:38097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31031 comm="syz.6.9424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f67a872f6c9 code=0x7ffc0000
[  635.607844][   T29] audit: type=1326 audit(635.515:38098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31031 comm="syz.6.9424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a872f6c9 code=0x7ffc0000
[  635.630861][   T29] audit: type=1326 audit(635.515:38099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31031 comm="syz.6.9424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67a872f6c9 code=0x7ffc0000
[  635.653935][   T29] audit: type=1326 audit(635.515:38100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31031 comm="syz.6.9424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a872f6c9 code=0x7ffc0000
[  635.676942][   T29] audit: type=1326 audit(635.515:38101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31031 comm="syz.6.9424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f67a872f6c9 code=0x7ffc0000
[  635.699908][   T29] audit: type=1326 audit(635.515:38102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31031 comm="syz.6.9424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a872f6c9 code=0x7ffc0000
[  635.723006][   T29] audit: type=1326 audit(635.515:38103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31031 comm="syz.6.9424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f67a872f6c9 code=0x7ffc0000
[  635.745910][   T29] audit: type=1326 audit(635.515:38104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31031 comm="syz.6.9424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a872f6c9 code=0x7ffc0000
[  635.768893][   T29] audit: type=1326 audit(635.515:38105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31031 comm="syz.6.9424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a872f6c9 code=0x7ffc0000
[  635.949060][T31043] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  636.069714][T31045] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9427'.
[  636.111134][T31050] lo speed is unknown, defaulting to 1000
[  636.120478][T31050] lo speed is unknown, defaulting to 1000
[  636.155059][T31055] netlink: 'syz.7.9428': attribute type 1 has an invalid length.
[  636.162842][T31055] netlink: 224 bytes leftover after parsing attributes in process `syz.7.9428'.
[  636.224589][T31059] loop7: detected capacity change from 0 to 1024
[  636.252623][T31058] lo speed is unknown, defaulting to 1000
[  636.256530][T31059] EXT4-fs: Ignoring removed nomblk_io_submit option
[  636.265471][T31059] EXT4-fs: Ignoring removed orlov option
[  636.271139][T31059] ext2: Bad value for 'mb_optimize_scan'
[  636.303475][T31058] lo speed is unknown, defaulting to 1000
[  636.740009][T31066] netlink: 76 bytes leftover after parsing attributes in process `syz.6.9432'.
[  637.101380][T31090] netlink: 'syz.7.9436': attribute type 1 has an invalid length.
[  637.109274][T31090] netlink: 224 bytes leftover after parsing attributes in process `syz.7.9436'.
[  637.626149][T31094] loop7: detected capacity change from 0 to 1024
[  637.871869][T31089] lo speed is unknown, defaulting to 1000
[  637.877889][T31089] lo speed is unknown, defaulting to 1000
[  637.915055][T31094] EXT4-fs: Ignoring removed nomblk_io_submit option
[  637.921681][T31094] EXT4-fs: Ignoring removed orlov option
[  637.927413][T31094] ext2: Bad value for 'mb_optimize_scan'
[  637.954287][T31088] lo speed is unknown, defaulting to 1000
[  637.972111][T31088] lo speed is unknown, defaulting to 1000
[  637.999301][T31106] netlink: 'syz.0.9440': attribute type 13 has an invalid length.
[  638.061565][T31085] lo speed is unknown, defaulting to 1000
[  638.109271][T31085] lo speed is unknown, defaulting to 1000
[  638.109598][T31112] lo speed is unknown, defaulting to 1000
[  638.163860][T31112] lo speed is unknown, defaulting to 1000
[  638.207610][T31115] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  638.659054][T31132] lo speed is unknown, defaulting to 1000
[  638.665748][T31132] lo speed is unknown, defaulting to 1000
[  639.378807][T31150] lo speed is unknown, defaulting to 1000
[  639.385257][T31150] lo speed is unknown, defaulting to 1000
[  639.508206][T31153] lo speed is unknown, defaulting to 1000
[  639.525204][T31153] lo speed is unknown, defaulting to 1000
[  639.611180][T31126] syz.7.9446 (31126) used greatest stack depth: 6072 bytes left
[  639.775866][T31161] lo speed is unknown, defaulting to 1000
[  639.782747][T31161] lo speed is unknown, defaulting to 1000
[  639.816351][T31163] netlink: 'syz.7.9456': attribute type 1 has an invalid length.
[  639.824177][T31163] netlink: 224 bytes leftover after parsing attributes in process `syz.7.9456'.
[  639.872607][T31163] loop7: detected capacity change from 0 to 1024
[  639.934453][T31163] EXT4-fs: Ignoring removed nomblk_io_submit option
[  639.941129][T31163] EXT4-fs: Ignoring removed orlov option
[  639.946888][T31163] ext2: Bad value for 'mb_optimize_scan'
[  640.390750][T31177] lo speed is unknown, defaulting to 1000
[  640.399546][T31177] lo speed is unknown, defaulting to 1000
[  640.638195][T31182] lo speed is unknown, defaulting to 1000
[  640.655316][T31182] lo speed is unknown, defaulting to 1000
[  640.668412][T31184] netlink: 'syz.7.9462': attribute type 1 has an invalid length.
[  640.676264][T31184] netlink: 224 bytes leftover after parsing attributes in process `syz.7.9462'.
[  640.707562][T31184] loop7: detected capacity change from 0 to 1024
[  640.714347][T31184] EXT4-fs: Ignoring removed nomblk_io_submit option
[  640.721069][T31184] EXT4-fs: Ignoring removed orlov option
[  640.726910][T31184] ext2: Bad value for 'mb_optimize_scan'
[  640.753880][T31172] syz.6.9459 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0
[  640.767889][T31172] CPU: 0 UID: 0 PID: 31172 Comm: syz.6.9459 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  640.767928][T31172] Tainted: [W]=WARN
[  640.767936][T31172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  640.767950][T31172] Call Trace:
[  640.767957][T31172]  <TASK>
[  640.767965][T31172]  __dump_stack+0x1d/0x30
[  640.767986][T31172]  dump_stack_lvl+0xe8/0x140
[  640.768054][T31172]  dump_stack+0x15/0x1b
[  640.768075][T31172]  dump_header+0x81/0x220
[  640.768138][T31172]  oom_kill_process+0x342/0x400
[  640.768322][T31172]  out_of_memory+0x979/0xb80
[  640.768364][T31172]  try_charge_memcg+0x610/0xa10
[  640.768400][T31172]  obj_cgroup_charge_pages+0xa6/0x150
[  640.768459][T31172]  __memcg_kmem_charge_page+0x9f/0x170
[  640.768487][T31172]  __alloc_frozen_pages_noprof+0x188/0x360
[  640.768536][T31172]  alloc_pages_mpol+0xb3/0x260
[  640.768559][T31172]  alloc_pages_noprof+0x90/0x130
[  640.768633][T31172]  __vmalloc_node_range_noprof+0x7a5/0xed0
[  640.768725][T31172]  __kvmalloc_node_noprof+0x483/0x670
[  640.768765][T31172]  ? ip_set_alloc+0x24/0x30
[  640.768819][T31172]  ? ip_set_alloc+0x24/0x30
[  640.768876][T31172]  ? __kmalloc_cache_noprof+0x249/0x4a0
[  640.768915][T31172]  ip_set_alloc+0x24/0x30
[  640.769008][T31172]  hash_netiface_create+0x282/0x740
[  640.769049][T31172]  ? __pfx_hash_netiface_create+0x10/0x10
[  640.769149][T31172]  ip_set_create+0x3cc/0x970
[  640.769183][T31172]  ? __nla_parse+0x40/0x60
[  640.769206][T31172]  nfnetlink_rcv_msg+0x4c6/0x590
[  640.769321][T31172]  netlink_rcv_skb+0x123/0x220
[  640.769360][T31172]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  640.769403][T31172]  nfnetlink_rcv+0x167/0x16c0
[  640.769434][T31172]  ? perf_swevent_event+0x22f/0x450
[  640.769502][T31172]  ? perf_tp_event+0x9b3/0x9f0
[  640.769532][T31172]  ? bpf_trace_run2+0x124/0x1c0
[  640.769579][T31172]  ? __list_add_valid_or_report+0x38/0xe0
[  640.769605][T31172]  ? trace_event_reg+0xdc/0x170
[  640.769638][T31172]  ? perf_trace_add+0x176/0x1a0
[  640.769696][T31172]  ? event_sched_in+0x675/0x750
[  640.769744][T31172]  ? should_fail_ex+0x30/0x280
[  640.769790][T31172]  ? selinux_nlmsg_lookup+0x99/0x890
[  640.769823][T31172]  ? __rcu_read_unlock+0x34/0x70
[  640.769857][T31172]  ? __netlink_lookup+0x266/0x2a0
[  640.769923][T31172]  netlink_unicast+0x5c0/0x690
[  640.769960][T31172]  netlink_sendmsg+0x58b/0x6b0
[  640.769988][T31172]  ? __pfx_netlink_sendmsg+0x10/0x10
[  640.770014][T31172]  __sock_sendmsg+0x145/0x180
[  640.770085][T31172]  ____sys_sendmsg+0x31e/0x4e0
[  640.770114][T31172]  ___sys_sendmsg+0x17b/0x1d0
[  640.770151][T31172]  __x64_sys_sendmsg+0xd4/0x160
[  640.770231][T31172]  x64_sys_call+0x191e/0x3000
[  640.770260][T31172]  do_syscall_64+0xd2/0x200
[  640.770290][T31172]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  640.770335][T31172]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  640.770357][T31172] RIP: 0033:0x7f67a872f6c9
[  640.770372][T31172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  640.770393][T31172] RSP: 002b:00007f67a718f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  640.770449][T31172] RAX: ffffffffffffffda RBX: 00007f67a8985fa0 RCX: 00007f67a872f6c9
[  640.770466][T31172] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000007
[  640.770481][T31172] RBP: 00007f67a87b1f91 R08: 0000000000000000 R09: 0000000000000000
[  640.770493][T31172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  640.770505][T31172] R13: 00007f67a8986038 R14: 00007f67a8985fa0 R15: 00007ffcb50b0e88
[  640.770617][T31172]  </TASK>
[  640.770626][T31172] memory: usage 307200kB, limit 307200kB, failcnt 453
[  641.035361][T31172] memory+swap: usage 308820kB, limit 9007199254740988kB, failcnt 0
[  641.045613][   T29] kauditd_printk_skb: 252 callbacks suppressed
[  641.045630][   T29] audit: type=1400 audit(641.005:38358): avc:  denied  { create } for  pid=31189 comm="syz.1.9464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  641.065307][T31172] kmem: usage 241712kB, limit 9007199254740988kB, failcnt 0
[  641.065325][T31172] Memory cgroup stats for /syz6:
[  641.079451][T31172] cache 67026944
[  641.172642][T31172] rss 0
[  641.175492][T31172] shmem 0
[  641.178480][T31172] mapped_file 0
[  641.181962][T31172] dirty 0
[  641.185080][T31172] writeback 32768
[  641.188743][T31172] workingset_refault_anon 1717
[  641.193518][T31172] workingset_refault_file 4352
[  641.198349][T31172] swap 1658880
[  641.201731][T31172] swapcached 32768
[  641.205476][T31172] pgpgin 1173283
[  641.209039][T31172] pgpgout 1156911
[  641.212695][T31172] pgfault 1027354
[  641.216356][T31172] pgmajfault 295
[  641.219911][T31172] inactive_anon 32768
[  641.223903][T31172] active_anon 0
[  641.227391][T31172] inactive_file 0
[  641.231027][T31172] active_file 0
[  641.234484][T31172] unevictable 67026944
[  641.238618][T31172] hierarchical_memory_limit 314572800
[  641.244083][T31172] hierarchical_memsw_limit 9223372036854771712
[  641.250279][T31172] total_cache 67026944
[  641.254354][T31172] total_rss 0
[  641.257688][T31172] total_shmem 0
[  641.261231][T31172] total_mapped_file 0
[  641.265254][T31172] total_dirty 0
[  641.268727][T31172] total_writeback 32768
[  641.272995][T31172] total_workingset_refault_anon 1717
[  641.278580][T31172] total_workingset_refault_file 4352
[  641.283910][T31172] total_swap 1658880
[  641.287837][T31172] total_swapcached 32768
[  641.292083][T31172] total_pgpgin 1173283
[  641.296188][T31172] total_pgpgout 1156911
[  641.300349][T31172] total_pgfault 1027354
[  641.304506][T31172] total_pgmajfault 295
[  641.308672][T31172] total_inactive_anon 32768
[  641.313253][T31172] total_active_anon 0
[  641.317317][T31172] total_inactive_file 0
[  641.321465][T31172] total_active_file 0
[  641.325523][T31172] total_unevictable 67026944
[  641.330161][T31172] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.9459,pid=31171,uid=0
[  641.344883][T31172] Memory cgroup out of memory: Killed process 31171 (syz.6.9459) total-vm:95880kB, anon-rss:1132kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0
[  641.525330][   T29] audit: type=1326 audit(641.495:38359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31200 comm="syz.7.9468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14aed3f6c9 code=0x7ffc0000
[  641.526230][T31201] loop7: detected capacity change from 0 to 1024
[  641.548437][   T29] audit: type=1326 audit(641.495:38360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31200 comm="syz.7.9468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14aed3f6c9 code=0x7ffc0000
[  641.548478][   T29] audit: type=1326 audit(641.495:38361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31200 comm="syz.7.9468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f14aed3f6c9 code=0x7ffc0000
[  641.548510][   T29] audit: type=1326 audit(641.495:38362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31200 comm="syz.7.9468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14aed3f6c9 code=0x7ffc0000
[  641.616348][T31202] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  641.623810][   T29] audit: type=1326 audit(641.495:38363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31200 comm="syz.7.9468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14aed3f6c9 code=0x7ffc0000
[  641.655255][   T29] audit: type=1326 audit(641.495:38364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31200 comm="syz.7.9468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14aed3f6c9 code=0x7ffc0000
[  641.678327][   T29] audit: type=1326 audit(641.495:38365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31200 comm="syz.7.9468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f14aed3f6c9 code=0x7ffc0000
[  641.701260][   T29] audit: type=1326 audit(641.495:38366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31200 comm="syz.7.9468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14aed3f6c9 code=0x7ffc0000
[  641.719029][T31198] lo speed is unknown, defaulting to 1000
[  641.724256][   T29] audit: type=1326 audit(641.495:38367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31200 comm="syz.7.9468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14aed3f6c9 code=0x7ffc0000
[  641.760243][T31198] lo speed is unknown, defaulting to 1000
[  641.823023][T31211] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9471'.
[  641.832056][T31211] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9471'.
[  641.946429][T31217] lo speed is unknown, defaulting to 1000
[  641.953884][T31218] netlink: 'syz.7.9473': attribute type 1 has an invalid length.
[  641.961677][T31218] netlink: 224 bytes leftover after parsing attributes in process `syz.7.9473'.
[  641.984914][T31217] lo speed is unknown, defaulting to 1000
[  641.993671][T31218] loop7: detected capacity change from 0 to 1024
[  642.006772][T31218] EXT4-fs: Ignoring removed nomblk_io_submit option
[  642.013444][T31218] EXT4-fs: Ignoring removed orlov option
[  642.019254][T31218] ext2: Bad value for 'mb_optimize_scan'
[  642.374737][T31232] lo speed is unknown, defaulting to 1000
[  642.380968][T31232] lo speed is unknown, defaulting to 1000
[  642.793981][T31241] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  642.851340][T31243] lo speed is unknown, defaulting to 1000
[  642.869976][T31244] netlink: 'syz.7.9481': attribute type 1 has an invalid length.
[  642.877886][T31244] netlink: 224 bytes leftover after parsing attributes in process `syz.7.9481'.
[  642.896280][T31243] lo speed is unknown, defaulting to 1000
[  642.936621][T31244] loop7: detected capacity change from 0 to 1024
[  642.951499][T31244] EXT4-fs: Ignoring removed nomblk_io_submit option
[  642.958198][T31244] EXT4-fs: Ignoring removed orlov option
[  642.964033][T31244] ext2: Bad value for 'mb_optimize_scan'
[  643.095466][T31247] lo speed is unknown, defaulting to 1000
[  643.107625][T31247] lo speed is unknown, defaulting to 1000
[  643.349553][T31254] lo speed is unknown, defaulting to 1000
[  643.374765][T31254] lo speed is unknown, defaulting to 1000
[  643.479680][T31261] lo speed is unknown, defaulting to 1000
[  643.485861][T31261] lo speed is unknown, defaulting to 1000
[  643.509986][T31259] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  643.730607][T31275] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9490'.
[  643.739612][T31275] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9490'.
[  643.952692][T31280] lo speed is unknown, defaulting to 1000
[  643.975330][T31280] lo speed is unknown, defaulting to 1000
[  644.085185][T31286] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  644.699627][T31295] loop7: detected capacity change from 0 to 1024
[  644.706687][T31295] EXT4-fs: Ignoring removed bh option
[  646.555419][T31297] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  646.916362][T31295] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  647.284997][   T29] kauditd_printk_skb: 122 callbacks suppressed
[  647.285012][   T29] audit: type=1400 audit(647.125:38490): avc:  denied  { add_name } for  pid=31289 comm="syz.7.9494" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  647.311537][   T29] audit: type=1400 audit(647.125:38491): avc:  denied  { create } for  pid=31289 comm="syz.7.9494" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  647.331457][   T29] audit: type=1400 audit(647.225:38492): avc:  denied  { write } for  pid=31289 comm="syz.7.9494" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  647.353229][   T29] audit: type=1400 audit(647.225:38493): avc:  denied  { open } for  pid=31289 comm="syz.7.9494" path="/482/file1/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  647.545162][T22480] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  647.590373][T31304] lo speed is unknown, defaulting to 1000
[  647.611291][T31304] lo speed is unknown, defaulting to 1000
[  648.418377][T31321] netlink: 660 bytes leftover after parsing attributes in process `syz.6.9503'.
[  648.429388][T31321] sy�: rxe_newlink: already configured on bond_slave_0
[  648.500977][T31324] lo speed is unknown, defaulting to 1000
[  648.516109][T31324] lo speed is unknown, defaulting to 1000
[  648.568881][   T29] audit: type=1326 audit(648.535:38494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31326 comm="syz.6.9505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a872f6c9 code=0x7ffc0000
[  648.591999][   T29] audit: type=1326 audit(648.535:38495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31326 comm="syz.6.9505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f67a872f6c9 code=0x7ffc0000
[  648.615281][   T29] audit: type=1326 audit(648.535:38496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31326 comm="syz.6.9505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a872f6c9 code=0x7ffc0000
[  648.621494][T31329] lo speed is unknown, defaulting to 1000
[  648.638272][   T29] audit: type=1326 audit(648.535:38497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31326 comm="syz.6.9505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67a872f6c9 code=0x7ffc0000
[  648.638322][   T29] audit: type=1326 audit(648.535:38498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31326 comm="syz.6.9505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a872f6c9 code=0x7ffc0000
[  648.638353][   T29] audit: type=1326 audit(648.535:38499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31326 comm="syz.6.9505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f67a872f6c9 code=0x7ffc0000
[  648.717478][T31329] lo speed is unknown, defaulting to 1000
[  648.830196][T31307] syz.0.9500 invoked oom-killer: gfp_mask=0x408d40(GFP_NOFS|__GFP_ZERO|__GFP_NOFAIL|__GFP_ACCOUNT), order=0, oom_score_adj=0
[  648.843317][T31307] CPU: 1 UID: 0 PID: 31307 Comm: syz.0.9500 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  648.843352][T31307] Tainted: [W]=WARN
[  648.843365][T31307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  648.843393][T31307] Call Trace:
[  648.843401][T31307]  <TASK>
[  648.843409][T31307]  __dump_stack+0x1d/0x30
[  648.843434][T31307]  dump_stack_lvl+0xe8/0x140
[  648.843482][T31307]  dump_stack+0x15/0x1b
[  648.843501][T31307]  dump_header+0x81/0x220
[  648.843519][T31307]  oom_kill_process+0x342/0x400
[  648.843549][T31307]  out_of_memory+0x979/0xb80
[  648.843640][T31307]  try_charge_memcg+0x610/0xa10
[  648.843678][T31307]  obj_cgroup_charge_pages+0xa6/0x150
[  648.843729][T31307]  obj_cgroup_charge_account+0x73/0x1a0
[  648.843758][T31307]  __memcg_slab_post_alloc_hook+0x398/0x580
[  648.843785][T31307]  kmem_cache_alloc_noprof+0x2b8/0x480
[  648.843842][T31307]  ? alloc_buffer_head+0x35/0x1f0
[  648.843880][T31307]  alloc_buffer_head+0x35/0x1f0
[  648.843912][T31307]  folio_alloc_buffers+0x14a/0x310
[  648.843948][T31307]  create_empty_buffers+0x2c/0x200
[  648.844052][T31307]  __block_write_begin_int+0x1d4/0xf90
[  648.844088][T31307]  ? jbd2_journal_stop+0x560/0x680
[  648.844185][T31307]  ? __pfx_ext4_da_get_block_prep+0x10/0x10
[  648.844239][T31307]  ? __list_add_valid_or_report+0x38/0xe0
[  648.844266][T31307]  ? inode_io_list_move_locked+0x1d0/0x2d0
[  648.844301][T31307]  ? __mark_inode_dirty+0x44c/0x750
[  648.844362][T31307]  ? __pfx_ext4_da_get_block_prep+0x10/0x10
[  648.844381][T31307]  block_page_mkwrite+0x1a8/0x3d0
[  648.844457][T31307]  ext4_page_mkwrite+0x859/0xb90
[  648.844493][T31307]  ? folio_unlock+0xd9/0x120
[  648.844521][T31307]  handle_mm_fault+0x15ce/0x2be0
[  648.844551][T31307]  ? mt_find+0x21b/0x330
[  648.844622][T31307]  do_user_addr_fault+0x3fe/0x1080
[  648.844673][T31307]  exc_page_fault+0x62/0xa0
[  648.844725][T31307]  asm_exc_page_fault+0x26/0x30
[  648.844743][T31307] RIP: 0033:0x7f698866f822
[  648.844758][T31307] Code: 0f 1f 84 00 00 00 00 00 be 08 00 00 00 48 89 df e8 f3 95 fe ff 48 8b 53 38 48 8d 42 f8 48 89 43 38 8b 43 28 83 c0 08 89 43 28 <4c> 89 62 f8 41 8d 56 01 41 39 ee 0f 83 8d 00 00 00 41 89 d6 48 8b
[  648.844776][T31307] RSP: 002b:00007ffe364b0690 EFLAGS: 00010212
[  648.844796][T31307] RAX: 0000000000008010 RBX: 00007f6989515720 RCX: 0000000000000000
[  648.844874][T31307] RDX: 0000001b33f1bff8 RSI: 0000000000000008 RDI: 00007f6989515720
[  648.844891][T31307] RBP: 0000000000000745 R08: 00007f69881f7058 R09: 00007f69889d2000
[  648.844907][T31307] R10: 00007f69881f7008 R11: 0000000000000012 R12: ffffffff81e01f53
[  648.844923][T31307] R13: 00007f69889e6038 R14: 0000000000000185 R15: ffffffffffff7ff8
[  648.844936][T31307]  ? blk_attempt_bio_merge+0x23/0x4d0
[  648.844964][T31307]  </TASK>
[  649.106463][T31307] memory: usage 307200kB, limit 307200kB, failcnt 579
[  649.113284][T31307] memory+swap: usage 309016kB, limit 9007199254740988kB, failcnt 0
[  649.121271][T31307] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0
[  649.128560][T31307] Memory cgroup stats for /syz0:
[  649.128815][T31307] cache 4096
[  649.137209][T31307] rss 8192
[  649.140273][T31307] shmem 0
[  649.143239][T31307] mapped_file 3493888
[  649.147273][T31307] dirty 0
[  649.150225][T31307] writeback 0
[  649.153516][T31307] workingset_refault_anon 1328
[  649.158406][T31307] workingset_refault_file 5097
[  649.163156][T31307] swap 1859584
[  649.166570][T31307] swapcached 8192
[  649.170208][T31307] pgpgin 1251670
[  649.173743][T31307] pgpgout 1251663
[  649.177378][T31307] pgfault 1183521
[  649.181013][T31307] pgmajfault 303
[  649.184541][T31307] inactive_anon 8192
[  649.188437][T31307] active_anon 0
[  649.191878][T31307] inactive_file 20480
[  649.195888][T31307] active_file 0
[  649.199342][T31307] unevictable 0
[  649.202795][T31307] hierarchical_memory_limit 314572800
[  649.208264][T31307] hierarchical_memsw_limit 9223372036854771712
[  649.214403][T31307] total_cache 4096
[  649.218229][T31307] total_rss 8192
[  649.221774][T31307] total_shmem 0
[  649.225248][T31307] total_mapped_file 3493888
[  649.229780][T31307] total_dirty 0
[  649.233296][T31307] total_writeback 0
[  649.237139][T31307] total_workingset_refault_anon 1328
[  649.242412][T31307] total_workingset_refault_file 5097
[  649.247750][T31307] total_swap 1859584
[  649.251665][T31307] total_swapcached 8192
[  649.255904][T31307] total_pgpgin 1251670
[  649.260055][T31307] total_pgpgout 1251663
[  649.264207][T31307] total_pgfault 1183521
[  649.268373][T31307] total_pgmajfault 303
[  649.272476][T31307] total_inactive_anon 8192
[  649.276936][T31307] total_active_anon 0
[  649.280910][T31307] total_inactive_file 20480
[  649.285436][T31307] total_active_file 0
[  649.289417][T31307] total_unevictable 0
[  649.293382][T31307] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.634,pid=5128,uid=0
[  649.307952][T31307] Memory cgroup out of memory: Killed process 5128 (syz.0.634) total-vm:95872kB, anon-rss:1160kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000
[  649.387695][T31307] syz.0.9500 invoked oom-killer: gfp_mask=0x408d40(GFP_NOFS|__GFP_ZERO|__GFP_NOFAIL|__GFP_ACCOUNT), order=0, oom_score_adj=0
[  649.400742][T31307] CPU: 1 UID: 0 PID: 31307 Comm: syz.0.9500 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  649.400770][T31307] Tainted: [W]=WARN
[  649.400778][T31307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  649.400792][T31307] Call Trace:
[  649.400799][T31307]  <TASK>
[  649.400856][T31307]  __dump_stack+0x1d/0x30
[  649.400881][T31307]  dump_stack_lvl+0xe8/0x140
[  649.400902][T31307]  dump_stack+0x15/0x1b
[  649.400981][T31307]  dump_header+0x81/0x220
[  649.401028][T31307]  oom_kill_process+0x342/0x400
[  649.401055][T31307]  out_of_memory+0x979/0xb80
[  649.401086][T31307]  try_charge_memcg+0x610/0xa10
[  649.401124][T31307]  obj_cgroup_charge_pages+0xa6/0x150
[  649.401158][T31307]  obj_cgroup_charge_account+0x73/0x1a0
[  649.401253][T31307]  __memcg_slab_post_alloc_hook+0x398/0x580
[  649.401282][T31307]  kmem_cache_alloc_noprof+0x2b8/0x480
[  649.401322][T31307]  ? alloc_buffer_head+0x35/0x1f0
[  649.401390][T31307]  alloc_buffer_head+0x35/0x1f0
[  649.401467][T31307]  folio_alloc_buffers+0x14a/0x310
[  649.401492][T31307]  create_empty_buffers+0x2c/0x200
[  649.401699][T31307]  __block_write_begin_int+0x1d4/0xf90
[  649.401726][T31307]  ? jbd2_journal_stop+0x560/0x680
[  649.401761][T31307]  ? __pfx_ext4_da_get_block_prep+0x10/0x10
[  649.401781][T31307]  ? __list_add_valid_or_report+0x38/0xe0
[  649.401833][T31307]  ? inode_io_list_move_locked+0x1d0/0x2d0
[  649.401865][T31307]  ? __mark_inode_dirty+0x44c/0x750
[  649.401903][T31307]  ? __pfx_ext4_da_get_block_prep+0x10/0x10
[  649.401925][T31307]  block_page_mkwrite+0x1a8/0x3d0
[  649.401955][T31307]  ext4_page_mkwrite+0x859/0xb90
[  649.402006][T31307]  ? folio_unlock+0xd9/0x120
[  649.402044][T31307]  handle_mm_fault+0x15ce/0x2be0
[  649.402073][T31307]  ? mt_find+0x21b/0x330
[  649.402101][T31307]  do_user_addr_fault+0x3fe/0x1080
[  649.402135][T31307]  exc_page_fault+0x62/0xa0
[  649.402169][T31307]  asm_exc_page_fault+0x26/0x30
[  649.402187][T31307] RIP: 0033:0x7f698866f822
[  649.402201][T31307] Code: 0f 1f 84 00 00 00 00 00 be 08 00 00 00 48 89 df e8 f3 95 fe ff 48 8b 53 38 48 8d 42 f8 48 89 43 38 8b 43 28 83 c0 08 89 43 28 <4c> 89 62 f8 41 8d 56 01 41 39 ee 0f 83 8d 00 00 00 41 89 d6 48 8b
[  649.402217][T31307] RSP: 002b:00007ffe364b0690 EFLAGS: 00010212
[  649.402300][T31307] RAX: 0000000000008020 RBX: 00007f6989515720 RCX: 0000000000000000
[  649.402317][T31307] RDX: 0000001b33f1bfe8 RSI: 0000000000000008 RDI: 00007f6989515720
[  649.402328][T31307] RBP: 0000000000000745 R08: 00007f69881f7058 R09: 00007f69889d2000
[  649.402339][T31307] R10: 00007f69881f7008 R11: 0000000000000012 R12: ffffffff81e01e9f
[  649.402350][T31307] R13: 00007f69889e6038 R14: 0000000000000187 R15: ffffffffffff7fe8
[  649.402365][T31307]  ? blk_attempt_plug_merge+0xaf/0x130
[  649.402398][T31307]  </TASK>
[  649.402407][T31307] memory: usage 307200kB, limit 307200kB, failcnt 715
[  649.671411][T31307] memory+swap: usage 308880kB, limit 9007199254740988kB, failcnt 0
[  649.679377][T31307] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0
[  649.686678][T31307] Memory cgroup stats for /syz0:
[  649.686989][T31307] cache 4096
[  649.695121][T31307] rss 0
[  649.697871][T31307] shmem 0
[  649.700857][T31307] mapped_file 3493888
[  649.704847][T31307] dirty 0
[  649.707786][T31307] writeback 0
[  649.711133][T31307] workingset_refault_anon 1342
[  649.715896][T31307] workingset_refault_file 5103
[  649.720683][T31307] swap 1720320
[  649.724091][T31307] swapcached 0
[  649.727483][T31307] pgpgin 1251690
[  649.731032][T31307] pgpgout 1251685
[  649.734655][T31307] pgfault 1183536
[  649.738323][T31307] pgmajfault 315
[  649.741875][T31307] inactive_anon 0
[  649.745517][T31307] active_anon 0
[  649.748973][T31307] inactive_file 0
[  649.752610][T31307] active_file 20480
[  649.756459][T31307] unevictable 0
[  649.759907][T31307] hierarchical_memory_limit 314572800
[  649.765293][T31307] hierarchical_memsw_limit 9223372036854771712
[  649.771449][T31307] total_cache 4096
[  649.775174][T31307] total_rss 0
[  649.778457][T31307] total_shmem 0
[  649.781984][T31307] total_mapped_file 3493888
[  649.786510][T31307] total_dirty 0
[  649.790023][T31307] total_writeback 0
[  649.793825][T31307] total_workingset_refault_anon 1342
[  649.799146][T31307] total_workingset_refault_file 5103
[  649.804421][T31307] total_swap 1720320
[  649.808451][T31307] total_swapcached 0
[  649.812365][T31307] total_pgpgin 1251690
[  649.816441][T31307] total_pgpgout 1251685
[  649.820584][T31307] total_pgfault 1183536
[  649.824741][T31307] total_pgmajfault 315
[  649.828811][T31307] total_inactive_anon 0
[  649.832952][T31307] total_active_anon 0
[  649.836982][T31307] total_inactive_file 0
[  649.841271][T31307] total_active_file 20480
[  649.845750][T31307] total_unevictable 0
[  649.849739][T31307] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.6,pid=3488,uid=0
[  649.864212][T31307] Memory cgroup out of memory: Killed process 3488 (syz.0.6) total-vm:93752kB, anon-rss:1156kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000
[  649.954379][T31307] syz.0.9500 invoked oom-killer: gfp_mask=0x408d40(GFP_NOFS|__GFP_ZERO|__GFP_NOFAIL|__GFP_ACCOUNT), order=0, oom_score_adj=0
[  649.967515][T31307] CPU: 1 UID: 0 PID: 31307 Comm: syz.0.9500 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  649.967583][T31307] Tainted: [W]=WARN
[  649.967591][T31307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  649.967605][T31307] Call Trace:
[  649.967615][T31307]  <TASK>
[  649.967624][T31307]  __dump_stack+0x1d/0x30
[  649.967645][T31307]  dump_stack_lvl+0xe8/0x140
[  649.967664][T31307]  dump_stack+0x15/0x1b
[  649.967729][T31307]  dump_header+0x81/0x220
[  649.967750][T31307]  oom_kill_process+0x342/0x400
[  649.967820][T31307]  out_of_memory+0x979/0xb80
[  649.967852][T31307]  try_charge_memcg+0x610/0xa10
[  649.967884][T31307]  obj_cgroup_charge_pages+0xa6/0x150
[  649.967925][T31307]  obj_cgroup_charge_account+0x73/0x1a0
[  649.968000][T31307]  __memcg_slab_post_alloc_hook+0x398/0x580
[  649.968034][T31307]  kmem_cache_alloc_noprof+0x2b8/0x480
[  649.968067][T31307]  ? alloc_buffer_head+0x35/0x1f0
[  649.968104][T31307]  alloc_buffer_head+0x35/0x1f0
[  649.968142][T31307]  folio_alloc_buffers+0x14a/0x310
[  649.968219][T31307]  create_empty_buffers+0x2c/0x200
[  649.968258][T31307]  __block_write_begin_int+0x1d4/0xf90
[  649.968297][T31307]  ? jbd2_journal_stop+0x560/0x680
[  649.968344][T31307]  ? __pfx_ext4_da_get_block_prep+0x10/0x10
[  649.968369][T31307]  ? __list_add_valid_or_report+0x38/0xe0
[  649.968422][T31307]  ? inode_io_list_move_locked+0x1d0/0x2d0
[  649.968464][T31307]  ? __mark_inode_dirty+0x44c/0x750
[  649.968566][T31307]  ? __pfx_ext4_da_get_block_prep+0x10/0x10
[  649.968588][T31307]  block_page_mkwrite+0x1a8/0x3d0
[  649.968628][T31307]  ext4_page_mkwrite+0x859/0xb90
[  649.968677][T31307]  ? folio_unlock+0xd9/0x120
[  649.968732][T31307]  handle_mm_fault+0x15ce/0x2be0
[  649.968763][T31307]  ? mt_find+0x21b/0x330
[  649.968859][T31307]  do_user_addr_fault+0x3fe/0x1080
[  649.968889][T31307]  exc_page_fault+0x62/0xa0
[  649.969005][T31307]  asm_exc_page_fault+0x26/0x30
[  649.969029][T31307] RIP: 0033:0x7f698866f822
[  649.969049][T31307] Code: 0f 1f 84 00 00 00 00 00 be 08 00 00 00 48 89 df e8 f3 95 fe ff 48 8b 53 38 48 8d 42 f8 48 89 43 38 8b 43 28 83 c0 08 89 43 28 <4c> 89 62 f8 41 8d 56 01 41 39 ee 0f 83 8d 00 00 00 41 89 d6 48 8b
[  649.969170][T31307] RSP: 002b:00007ffe364b0690 EFLAGS: 00010212
[  649.969268][T31307] RAX: 0000000000008020 RBX: 00007f6989515720 RCX: 0000000000000000
[  649.969284][T31307] RDX: 0000001b33f1bfe8 RSI: 0000000000000008 RDI: 00007f6989515720
[  649.969306][T31307] RBP: 0000000000000745 R08: 00007f69881f7058 R09: 00007f69889d2000
[  649.969322][T31307] R10: 00007f69881f7008 R11: 0000000000000012 R12: ffffffff81e01e9f
[  649.969338][T31307] R13: 00007f69889e6038 R14: 0000000000000187 R15: ffffffffffff7fe8
[  649.969356][T31307]  ? blk_attempt_plug_merge+0xaf/0x130
[  649.969440][T31307]  </TASK>
[  649.969446][T31307] memory: usage 307200kB, limit 307200kB, failcnt 817
[  650.237762][T31307] memory+swap: usage 308732kB, limit 9007199254740988kB, failcnt 0
[  650.245659][T31307] kmem: usage 307092kB, limit 9007199254740988kB, failcnt 0
[  650.252988][T31307] Memory cgroup stats for /syz0:
[  650.253215][T31307] cache 4096
[  650.261372][T31307] rss 0
[  650.264127][T31307] shmem 0
[  650.267103][T31307] mapped_file 3493888
[  650.271095][T31307] dirty 0
[  650.274028][T31307] writeback 0
[  650.277321][T31307] workingset_refault_anon 1342
[  650.282147][T31307] workingset_refault_file 5103
[  650.286910][T31307] swap 1568768
[  650.290275][T31307] swapcached 0
[  650.293630][T31307] pgpgin 1251690
[  650.297183][T31307] pgpgout 1251685
[  650.300804][T31307] pgfault 1183536
[  650.304426][T31307] pgmajfault 315
[  650.308074][T31307] inactive_anon 0
[  650.311697][T31307] active_anon 0
[  650.315176][T31307] inactive_file 4096
[  650.319060][T31307] active_file 16384
[  650.322921][T31307] unevictable 0
[  650.326384][T31307] hierarchical_memory_limit 314572800
[  650.331738][T31307] hierarchical_memsw_limit 9223372036854771712
[  650.337958][T31307] total_cache 4096
[  650.341662][T31307] total_rss 0
[  650.344959][T31307] total_shmem 0
[  650.348485][T31307] total_mapped_file 3493888
[  650.353044][T31307] total_dirty 0
[  650.356552][T31307] total_writeback 0
[  650.360345][T31307] total_workingset_refault_anon 1342
[  650.365770][T31307] total_workingset_refault_file 5103
[  650.371040][T31307] total_swap 1568768
[  650.374942][T31307] total_swapcached 0
[  650.378844][T31307] total_pgpgin 1251690
[  650.382906][T31307] total_pgpgout 1251685
[  650.387061][T31307] total_pgfault 1183536
[  650.391201][T31307] total_pgmajfault 315
[  650.395308][T31307] total_inactive_anon 0
[  650.399450][T31307] total_active_anon 0
[  650.403417][T31307] total_inactive_file 4096
[  650.407950][T31307] total_active_file 16384
[  650.412289][T31307] total_unevictable 0
[  650.416280][T31307] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.9216,pid=30319,uid=0
[  650.431079][T31307] Memory cgroup out of memory: Killed process 30319 (syz.0.9216) total-vm:95632kB, anon-rss:1180kB, file-rss:22544kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:0
[  650.474549][T31307] syz.0.9500 invoked oom-killer: gfp_mask=0x408d40(GFP_NOFS|__GFP_ZERO|__GFP_NOFAIL|__GFP_ACCOUNT), order=0, oom_score_adj=0
[  650.487619][T31307] CPU: 1 UID: 0 PID: 31307 Comm: syz.0.9500 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  650.487672][T31307] Tainted: [W]=WARN
[  650.487681][T31307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  650.487697][T31307] Call Trace:
[  650.487706][T31307]  <TASK>
[  650.487715][T31307]  __dump_stack+0x1d/0x30
[  650.487743][T31307]  dump_stack_lvl+0xe8/0x140
[  650.487810][T31307]  dump_stack+0x15/0x1b
[  650.487831][T31307]  dump_header+0x81/0x220
[  650.487854][T31307]  oom_kill_process+0x342/0x400
[  650.487921][T31307]  out_of_memory+0x979/0xb80
[  650.487988][T31307]  try_charge_memcg+0x610/0xa10
[  650.488033][T31307]  obj_cgroup_charge_pages+0xa6/0x150
[  650.488122][T31307]  obj_cgroup_charge_account+0x73/0x1a0
[  650.488152][T31307]  __memcg_slab_post_alloc_hook+0x398/0x580
[  650.488220][T31307]  kmem_cache_alloc_noprof+0x2b8/0x480
[  650.488268][T31307]  ? alloc_buffer_head+0x35/0x1f0
[  650.488324][T31307]  alloc_buffer_head+0x35/0x1f0
[  650.488358][T31307]  folio_alloc_buffers+0x14a/0x310
[  650.488470][T31307]  create_empty_buffers+0x2c/0x200
[  650.488507][T31307]  __block_write_begin_int+0x1d4/0xf90
[  650.488544][T31307]  ? add_timer_global+0x51/0x70
[  650.488635][T31307]  ? __queue_delayed_work+0x165/0x1e0
[  650.488667][T31307]  ? queue_delayed_work_on+0xff/0x170
[  650.488697][T31307]  ? __pfx_ext4_da_get_block_prep+0x10/0x10
[  650.488861][T31307]  ? _raw_spin_unlock_irq+0x26/0x50
[  650.488890][T31307]  ? wb_wakeup_delayed+0x9b/0xb0
[  650.489016][T31307]  ? __mark_inode_dirty+0x44c/0x750
[  650.489053][T31307]  ? __pfx_ext4_da_get_block_prep+0x10/0x10
[  650.489076][T31307]  block_page_mkwrite+0x1a8/0x3d0
[  650.489153][T31307]  ext4_page_mkwrite+0x859/0xb90
[  650.489199][T31307]  ? folio_unlock+0xd9/0x120
[  650.489245][T31307]  handle_mm_fault+0x15ce/0x2be0
[  650.489276][T31307]  ? mt_find+0x21b/0x330
[  650.489315][T31307]  do_user_addr_fault+0x3fe/0x1080
[  650.489347][T31307]  exc_page_fault+0x62/0xa0
[  650.489463][T31307]  asm_exc_page_fault+0x26/0x30
[  650.489486][T31307] RIP: 0033:0x7f698866f822
[  650.489502][T31307] Code: 0f 1f 84 00 00 00 00 00 be 08 00 00 00 48 89 df e8 f3 95 fe ff 48 8b 53 38 48 8d 42 f8 48 89 43 38 8b 43 28 83 c0 08 89 43 28 <4c> 89 62 f8 41 8d 56 01 41 39 ee 0f 83 8d 00 00 00 41 89 d6 48 8b
[  650.489524][T31307] RSP: 002b:00007ffe364b0690 EFLAGS: 00010202
[  650.489542][T31307] RAX: 0000000000009008 RBX: 00007f6989515720 RCX: 0000000000000000
[  650.489559][T31307] RDX: 0000001b33f1b000 RSI: 0000000000000008 RDI: 00007f6989515720
[  650.489573][T31307] RBP: 0000000000000745 R08: 00007f69881f7058 R09: 00007f69889d2000
[  650.489586][T31307] R10: 00007f69881f7008 R11: 0000000000000012 R12: ffffffff81860907
[  650.489601][T31307] R13: 00007f69889e6038 R14: 0000000000000384 R15: ffffffffffff7000
[  650.489641][T31307]  ? __rmap_walk_file+0x27/0x2b0
[  650.489735][T31307]  </TASK>
[  650.489742][T31307] memory: usage 307200kB, limit 307200kB, failcnt 904
[  650.766673][T31307] memory+swap: usage 308556kB, limit 9007199254740988kB, failcnt 0
[  650.774596][T31307] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0
[  650.781897][T31307] Memory cgroup stats for /syz0:
[  650.782189][T31307] cache 4096
[  650.790394][T31307] rss 0
[  650.793183][T31307] shmem 0
[  650.796196][T31307] mapped_file 1642496
[  650.800164][T31307] dirty 0
[  650.803162][T31307] writeback 0
[  650.806471][T31307] workingset_refault_anon 1346
[  650.811233][T31307] workingset_refault_file 5128
[  650.816014][T31307] swap 1388544
[  650.819396][T31307] swapcached 0
[  650.822856][T31307] pgpgin 1251719
[  650.826456][T31307] pgpgout 1251714
[  650.830081][T31307] pgfault 1183542
[  650.833702][T31307] pgmajfault 320
[  650.837261][T31307] inactive_anon 0
[  650.840888][T31307] active_anon 0
[  650.844339][T31307] inactive_file 4096
[  650.848287][T31307] active_file 16384
[  650.852232][T31307] unevictable 0
[  650.855812][T31307] hierarchical_memory_limit 314572800
[  650.861227][T31307] hierarchical_memsw_limit 9223372036854771712
[  650.867403][T31307] total_cache 4096
[  650.871175][T31307] total_rss 0
[  650.874460][T31307] total_shmem 0
[  650.877930][T31307] total_mapped_file 1642496
[  650.882426][T31307] total_dirty 0
[  650.885906][T31307] total_writeback 0
[  650.889700][T31307] total_workingset_refault_anon 1346
[  650.895073][T31307] total_workingset_refault_file 5128
[  650.900359][T31307] total_swap 1388544
[  650.904242][T31307] total_swapcached 0
[  650.908201][T31307] total_pgpgin 1251719
[  650.912326][T31307] total_pgpgout 1251714
[  650.916523][T31307] total_pgfault 1183542
[  650.920671][T31307] total_pgmajfault 320
[  650.924870][T31307] total_inactive_anon 0
[  650.929028][T31307] total_active_anon 0
[  650.933093][T31307] total_inactive_file 4096
[  650.937572][T31307] total_active_file 16384
[  650.941907][T31307] total_unevictable 0
[  650.945988][T31307] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.9500,pid=31307,uid=0
[  650.960733][T31307] Memory cgroup out of memory: Killed process 31307 (syz.0.9500) total-vm:95880kB, anon-rss:1260kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:0
[  651.181853][T31343] 9p: Unknown access argument 00000000004294967295:b ��k�vc������R�:����(Ym�	[h�$�:���G[_�DBъiޑ<�Uو��V'/��: -22
[  651.216273][T31347] lo speed is unknown, defaulting to 1000
[  651.222672][T31347] lo speed is unknown, defaulting to 1000
[  651.252581][T31355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9514'.
[  651.261541][T31355] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9514'.
[  651.328433][T31360] lo speed is unknown, defaulting to 1000
[  651.347462][T31360] lo speed is unknown, defaulting to 1000
[  651.548258][T31370] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  652.462875][   T29] kauditd_printk_skb: 11 callbacks suppressed
[  652.462892][   T29] audit: type=1326 audit(652.435:38511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31373 comm="syz.1.9519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4531bcf6c9 code=0x7ffc0000
[  652.552657][T31376] lo speed is unknown, defaulting to 1000
[  652.595252][T31376] lo speed is unknown, defaulting to 1000
[  652.639782][   T29] audit: type=1326 audit(652.465:38512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31373 comm="syz.1.9519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4531bcf6c9 code=0x7ffc0000
[  652.662855][   T29] audit: type=1326 audit(652.465:38513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31373 comm="syz.1.9519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4531bcf6c9 code=0x7ffc0000
[  652.685924][   T29] audit: type=1326 audit(652.465:38514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31373 comm="syz.1.9519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4531bcf6c9 code=0x7ffc0000
[  652.708949][   T29] audit: type=1326 audit(652.465:38515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31373 comm="syz.1.9519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4531bcf6c9 code=0x7ffc0000
[  652.731906][   T29] audit: type=1326 audit(652.485:38516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31373 comm="syz.1.9519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4531bcf6c9 code=0x7ffc0000
[  652.754976][   T29] audit: type=1326 audit(652.485:38517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31373 comm="syz.1.9519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4531bcf6c9 code=0x7ffc0000
[  652.778029][   T29] audit: type=1326 audit(652.485:38518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31373 comm="syz.1.9519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4531bcf6c9 code=0x7ffc0000
[  652.800988][   T29] audit: type=1326 audit(652.485:38519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31373 comm="syz.1.9519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4531bcf6c9 code=0x7ffc0000
[  652.823993][   T29] audit: type=1326 audit(652.495:38520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31373 comm="syz.1.9519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4531bcf6c9 code=0x7ffc0000
[  652.951003][T31379] lo speed is unknown, defaulting to 1000
[  652.977490][T31379] lo speed is unknown, defaulting to 1000
[  653.223021][T31385] lo speed is unknown, defaulting to 1000
[  653.256749][T31385] lo speed is unknown, defaulting to 1000
[  653.265039][T31386] lo speed is unknown, defaulting to 1000
[  653.285921][T31389] netlink: 'syz.7.9522': attribute type 1 has an invalid length.
[  653.293706][T31389] netlink: 224 bytes leftover after parsing attributes in process `syz.7.9522'.
[  653.359333][T31391] loop7: detected capacity change from 0 to 1024
[  653.400600][T31391] EXT4-fs: Ignoring removed nomblk_io_submit option
[  653.407550][T31391] EXT4-fs: Ignoring removed orlov option
[  653.413324][T31391] ext2: Bad value for 'mb_optimize_scan'
[  653.453705][T31386] lo speed is unknown, defaulting to 1000
[  653.648981][T31396] lo speed is unknown, defaulting to 1000
[  653.675520][T31396] lo speed is unknown, defaulting to 1000
[  653.747128][T31404] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  653.905191][T31402] lo speed is unknown, defaulting to 1000
[  654.192751][T31402] lo speed is unknown, defaulting to 1000
[  654.684782][T31399] ==================================================================
[  654.692957][T31399] BUG: KCSAN: data-race in __bpf_get_stackid / __bpf_get_stackid
[  654.700698][T31399] 
[  654.703022][T31399] write to 0xffff8881aa5c1f70 of 4 bytes by task 31412 on cpu 1:
[  654.710756][T31399]  __bpf_get_stackid+0x76b/0x800
[  654.715708][T31399]  bpf_get_stackid+0xe9/0x120
[  654.720394][T31399]  bpf_get_stackid_raw_tp+0xf6/0x120
[  654.725780][T31399]  bpf_prog_53f0063d4d7f65ce+0x2a/0x32
[  654.731243][T31399]  bpf_trace_run2+0x107/0x1c0
[  654.735944][T31399]  __traceiter_kfree+0x2e/0x50
[  654.740752][T31399]  kfree+0x351/0x400
[  654.744662][T31399]  ida_alloc_range+0x63e/0x6c0
[  654.749441][T31399]  proc_register+0x35/0x490
[  654.753954][T31399]  proc_create_net_single+0xb2/0xf0
[  654.759170][T31399]  ip_vs_control_net_init+0x33f/0xe70
[  654.764554][T31399]  __ip_vs_init+0xd6/0x1d0
[  654.768988][T31399]  ops_init+0x22a/0x2e0
[  654.773168][T31399]  setup_net+0x83/0x210
[  654.777339][T31399]  copy_net_ns+0x28c/0x3b0
[  654.781786][T31399]  create_new_namespaces+0x20e/0x3d0
[  654.787104][T31399]  copy_namespaces+0x1ad/0x210
[  654.791893][T31399]  copy_process+0xd32/0x2000
[  654.796504][T31399]  kernel_clone+0x16c/0x5c0
[  654.801024][T31399]  __x64_sys_clone+0xe6/0x120
[  654.805721][T31399]  x64_sys_call+0x119c/0x3000
[  654.810409][T31399]  do_syscall_64+0xd2/0x200
[  654.814925][T31399]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  654.820838][T31399] 
[  654.823169][T31399] read to 0xffff8881aa5c1f70 of 4 bytes by task 31399 on cpu 0:
[  654.830800][T31399]  __bpf_get_stackid+0x287/0x800
[  654.835834][T31399]  bpf_get_stackid+0xe9/0x120
[  654.840515][T31399]  bpf_get_stackid_raw_tp+0xf6/0x120
[  654.845814][T31399]  bpf_prog_53f0063d4d7f65ce+0x2a/0x32
[  654.851275][T31399]  bpf_trace_run2+0x107/0x1c0
[  654.855964][T31399]  __traceiter_kfree+0x2e/0x50
[  654.860728][T31399]  kfree+0x351/0x400
[  654.864627][T31399]  ___sys_recvmsg+0x135/0x370
[  654.869307][T31399]  do_recvmmsg+0x1ef/0x540
[  654.873746][T31399]  __x64_sys_recvmmsg+0xe5/0x170
[  654.878700][T31399]  x64_sys_call+0x27aa/0x3000
[  654.883381][T31399]  do_syscall_64+0xd2/0x200
[  654.887889][T31399]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  654.893787][T31399] 
[  654.896105][T31399] value changed: 0x5b9203d0 -> 0xba7f1c2e
[  654.901825][T31399] 
[  654.904155][T31399] Reported by Kernel Concurrency Sanitizer on:
[  654.910325][T31399] CPU: 0 UID: 0 PID: 31399 Comm: syz.5.9524 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  654.921703][T31399] Tainted: [W]=WARN
[  654.925502][T31399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  654.935556][T31399] ==================================================================
[  654.950547][T31412] lo speed is unknown, defaulting to 1000
[  655.012179][T31412] lo speed is unknown, defaulting to 1000
[  655.035297][T31415] netlink: 'syz.7.9528': attribute type 1 has an invalid length.
[  655.043062][T31415] netlink: 224 bytes leftover after parsing attributes in process `syz.7.9528'.
[  655.077371][T31415] loop7: detected capacity change from 0 to 1024
[  655.094299][T31415] EXT4-fs: Ignoring removed nomblk_io_submit option
[  655.101052][T31415] EXT4-fs: Ignoring removed orlov option
[  655.106803][T31415] ext2: Bad value for 'mb_optimize_scan'