last executing test programs:

13m49.019576878s ago: executing program 2 (id=1991):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = creat(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x7, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x64000680)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
msgget$private(0x0, 0x8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x3}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x44}}, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1000000000000b, 0x6f76, 0x3, 0x0, 0x1, 0x8, 0x7b, 0x3})
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080), 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x34, 0x0, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000e80)={0x14, 0x1, 0x8, 0x301}, 0x14}}, 0x0)

13m47.923683454s ago: executing program 2 (id=1997):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x2, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2002}, @CTA_ZONE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r1 = request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe)
r2 = request_key(&(0x7f00000008c0)='id_legacy\x00', &(0x7f0000000900)={'syz', 0x0}, 0x0, r1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x14, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000", @ANYRESHEX=r2, @ANYRESHEX=r3, @ANYRESDEC=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r4, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x43}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000100)='kfree\x00', r6, 0x0, 0x4}, 0x18)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r7 = syz_io_uring_setup(0xa4d, &(0x7f0000000880)={0x0, 0xf792, 0x80, 0x0, 0xe0b1}, &(0x7f0000000680)=<r8=>0x0, &(0x7f0000000440)=<r9=>0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x3, 0x8, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020100000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a01010000000000000000020000000900020073797a31000000000900010073797a300000000054000380080002400000000840000380140001006272696467655f736c6176655f31000014000100776732000000000000000000000000001400010077673200000000000000000000000000080001"], 0xa8}}, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x62, 0x0, 0xb3c5})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r6, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, <r11=>0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0], 0x0, 0x1b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xb7, 0x8, 0x8, &(0x7f0000000640)}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="080200"/20, @ANYRES32=r3, @ANYBLOB="0200"/20, @ANYRES32=r11, @ANYRES32, @ANYBLOB="0500000005000000050000000d00"/28], 0x50)
io_uring_enter(r7, 0x47bc, 0x0, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

13m46.941367422s ago: executing program 2 (id=2006):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x256581, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x7, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x64000680)
msgrcv(0x0, &(0x7f0000001080)={0x0, ""/1}, 0x9, 0x2, 0x3000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x3}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x44}}, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080), 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x34, 0x0, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r7, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000e80)={0x14, 0x1, 0x8, 0x301}, 0x14}}, 0x0)

13m45.586250628s ago: executing program 2 (id=2011):
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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")
unshare(0x2c020400)
modify_ldt$write(0x1, &(0x7f0000000180)={0x7f, 0x20001000, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10)
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, 0x0, 0x0)
r1 = perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa0721, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffa, 0x83}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x62136, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x4}, 0x288, 0x0, 0x1000, 0x1, 0x7, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000000))
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1ec)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCGWINSZ(r5, 0x5413, &(0x7f0000000040))

13m45.404688332s ago: executing program 2 (id=2017):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)
r2 = openat(r1, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), 0x0}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x1000, 0x5, 0x1}, 0x20)
stat(&(0x7f0000000040)='./file0\x00', 0x0)
statx(r2, &(0x7f0000000080)='./file0\x00', 0x800, 0x4, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
faccessat(r1, &(0x7f0000000000)='./file0\x00', 0x5)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x25dfdbfb, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}]}}}]}, 0x3c}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2002018}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xec, r7, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x61}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1671}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x18}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7fffffff}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x100}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x52}]}, 0xec}, 0x1, 0x0, 0x0, 0x20004010}, 0x40000)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='security.apparmor\x00', 0x0, 0x0)

13m44.993719015s ago: executing program 2 (id=2022):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x256581, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x7, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x64000680)
msgrcv(0x0, &(0x7f0000001080)={0x0, ""/1}, 0x9, 0x2, 0x3000)
socket$nl_route(0x10, 0x3, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1000000000000b, 0x6f76, 0x3, 0x0, 0x1, 0x8, 0x7b, 0x3})
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080), 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x34, 0x0, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r6, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000e80)={0x14, 0x1, 0x8, 0x301}, 0x14}}, 0x0)

13m44.964019217s ago: executing program 32 (id=2022):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x256581, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x7, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x64000680)
msgrcv(0x0, &(0x7f0000001080)={0x0, ""/1}, 0x9, 0x2, 0x3000)
socket$nl_route(0x10, 0x3, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1000000000000b, 0x6f76, 0x3, 0x0, 0x1, 0x8, 0x7b, 0x3})
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080), 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x34, 0x0, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r6, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000e80)={0x14, 0x1, 0x8, 0x301}, 0x14}}, 0x0)

12m2.573817167s ago: executing program 4 (id=3659):
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000280)=@hopopts={0x33}, 0x8)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
symlinkat(&(0x7f0000001b00)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0)
write$cgroup_int(r0, &(0x7f0000000040)=0xfe8e, 0x12)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
setreuid(0x0, 0xee00)

12m2.508767072s ago: executing program 4 (id=3660):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)

12m2.205630846s ago: executing program 4 (id=3663):
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240), 0x200000000000000, 0x1}}, 0x40)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendfile(0xffffffffffffffff, r2, &(0x7f0000000180), 0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f1f0000060001000000000008000500", @ANYRES32=r4], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000bd643df124878527fde8e9310400"/32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB='&\x00\x00\x00\x00\x00u\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r11}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20)
sendmsg$inet(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000dc0)='>', 0x1}], 0x1}, 0x0)
write$cgroup_subtree(r9, 0x0, 0x0)
recvmsg$unix(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/225, 0xe1}], 0x1}, 0x2142)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r6, <r12=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r13 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r13, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x98, 0x0, 0x0, 0x130, 0x1f0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0xa}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a010200000000000000000a0000050900030093797a30000000000900010073797a3100000000080007006e617400140004800800024054dd5e54080001400000000014000000110001"], 0x70}}, 0x24044850)

12m1.982135704s ago: executing program 4 (id=3667):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x3, &(0x7f0000000380)=[{0x1006, 0x0, 0x0, 0x7ffc1ffb}, {0x7ffd, 0x40, 0xa8, 0x80000001}, {0x6, 0x2, 0x2, 0x400}]})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fddbdf251a0000000600210061000000140022800400000004"], 0x30}}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x5, 0x267, &(0x7f0000000740)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x38, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r5, 0x0, &(0x7f0000000300)=""/123}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8224, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x6}, 0x0, 0xfffd, 0x8, 0x4, 0x8, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
ptrace$setregs(0xd, r7, 0x20000000002, &(0x7f0000000040))
ptrace$cont(0x9, r7, 0x7ff, 0x3)
ptrace$cont(0x21, r7, 0x80000001, 0x4)
r8 = socket(0x10, 0x803, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xac, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r10, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x80, 0x2, [@TCA_U32_LINK={0x8}, @TCA_U32_SEL={0x74, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0xdeb2, 0x3, 0x6, 0x3}, {0x1, 0xfffffffb, 0x100, 0x3ff}, {0x200, 0x3ff, 0x3, 0x4}, {0x7, 0xe22, 0x9, 0x5cf4}, {0x3ff, 0xb, 0x3, 0xa6d}]}}]}}]}, 0xac}}, 0x24040084)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff)

12m1.207091945s ago: executing program 4 (id=3680):
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0040a70622670cf10e1e00d1d0124b000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x75, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
open(&(0x7f0000000140)='./bus\x00', 0x8c0c2, 0x1c0)
r1 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x1, 0x100002cf}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18)
socket$nl_rdma(0x10, 0x3, 0x14)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0x0, r5)
statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2000, 0x800, &(0x7f00000001c0))
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003"], 0x44}}, 0x20008000)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000001c80)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00042abd7000fedbdf250500000005000200b5000000080005000200000038110380040001000400010008000200d287000067000500496156a608a41f2f4c86a7a5341629cf9d117386460388d49b22dc260a31c27c3a439fbb3a4ae24a301cad86406a0e102557b27e8dbe3b4d3e7b4a177257793f13d6896601d2ba4a6a586244b5d0ae00e50a56c2fa3c2e6660acb23eddec4b27b633470008000200010000806200050095c29e75cb317dc5b315309d7cfc7e94bbd9cac3652bd23e9b4b35b1518fd55a2d7aa9651caa78b53c08c2e28fe4032e2156a82599f8bbceacc5575badb61d1dcb7bf6e8b612654e443fe8f8cdfebc9ba945669f39c3982c7b71ade1d402000008000200010000003a00050078a980c3004195899ceeaff9b768e1435cffa2a3bb2d24eeb0f84817e87e86444af964e3dd16e50bfad48ce05bf5cde77eb00d4c6885000008000200c1a8000004100500b7957bc43646f9219b11067a31e55fb5b84284daa3a627cb0c57753b15cc5fff0dd433d5e5b869447a58587be81449540057a91f3700de00ba1edc357b34324b470eeb67a58f2323f284920a826e3cb516972895ce25e976f79b69d695c4718128a22ed0dd50ad5f31e6014cb2d6dde30a9cbe971914860be524550951399eb5dcf4683420c01878d90f66562f9d11266cca94f4ca140336a75c4b9b5f8f941429721b72e375705b04fef42134660c112fa4598a518116b062b86b427a201062cc66da84df93e06e11db1cb65a4877ac66bfafb80b6db6555bf6faca5975ed4a2dcde8137f3590889dee6e05a439015424673b73fa2fc8df41ed7e3c598877d023db5f1b1f00365259e56e3ae23a0beecba4d82199c2cb1063d48bc6c6d89a39ced0153a45b87fc1b84bff4702e38940cb2d04f8f74589cc8ddcaffe848d3478a087fe4e544e29ae9ecc92637b7fbc07e669eb1171d6519f5d35234e44cd5186e63244afd63834f99b4f4de8645300bfbfa4ec454335c9ec730870684d8590274d63fe024de9c286f1f07b18048e67051689a6a6120d0b402e0d57ad938fda5437878ea00b3c29ae7f8ebae15efd056046a737cf871413ec588292affaff2a713c01e2f4d68632673f381298bd24852d0d441b168da175705315093d0c026e11a4218e5b7d63c9630c7814c645505da35d931b2d53672e5e875a8a184b0bd83b17bd93b7e5a7119ce2fa733aaa218408447a05ebb22436aefbdaa96e7b78c4a7dd7a4923e7a70280709e6bf89e8f8a7a06270f057747f3eac64a3217e8feb8cbfccabb1c2fdc5ee8ef8315570d60eec42d087c9b2817830e12afcb2d18fa1bee8fa5af860a3428cb09749d622d21586bf8edb164b05433a48209c86a0ce755fe034051118a63b4c3530d94f279d2feac794445cb83597c96d9917ef68236022be97da4cd25f64d36d9af1401f04c363631fdc4c118da1bcf45f0eb601d5cc6f4b32149e96450a6d07f2e0274781520357445d359cf4485d8e2340dfb99fb095c91188c954264d15bd9622176783cd7a5194f7fb96b39db1e28dadb39165970819970bf58147355da6487157905ffa3c3c3325c7b7bbe7f571c07e07048e439fc5774544d3dee5abb84506f1effe47f9393488a189003b7f3242a678c33aafd40d0611e0ad0d1bce135f4181a2b673449549ab82922d3155f3c13eb51ca088fb6a46ff5fbd781a0fadf368b2a4838fa5240e88b1ec1ed6f33b9d4187583c7e3247b5bc13d2b762ccddd51d9dea552a0d5bfbc8bd16e2eaa50598d473e041f3a98eb701788790721f5ca07e6b00f79187d45d7852cda88493630a176093ec018ff13622388d58f33e80f5da76c562c232f0ff495faee4f7097d1c8a4a68f3ed2efb9bb4be921e74d43c21cca16ff30980cfde6e5cbe2820807ad46f23961f0ebc81d8b49e3e6485cd767fec8b6725f626ad92196992f19ff7a3972715b3aab2e4d488c14b6af1bb5ee2b76bea9c85909c3651e6b6c6497ac67e6fa12e0e892948b358c86f503e65d93569d062505c94cf5e8b10dc6a4dcd932d015211a85938734477ecf62a7dcf443426ddfee9a54d17f08b0afa152876a693582a3240323b09016fb5c31003cc3348c3d6533db964fb6040d41e94b8b6139841f61f3181068c2dd5e1e9c9f7ad9bb2cb77636c2197648f8d9354490f6a2490c4e16f960daa7307861c514d28a0f546b596d807edb2246206cce1b7686f3e33d42012a751f96301765f2983b4060fbfb868bf7b423314cc1b768c42e66b3d19d3eb3a3a77e261a430012cf4987502efefb7dcbe875f2dc1554c17ae1ab0975b282ce0ea65ebf80c79f1649ba790263cae042f1893d1fa66368c189fb82758433b04ea0ded654a3be6f7bfc84f02cefcbb856ec420a080dc70c32a04483a0c8cc32bb2e00e103624f5932a6376334eda626f086a29a0c8c33ea41929503587001c1c5fbf67ac4196441ac0716a6d4a758903d27757241b075958ef0798a54533843318a5e43238360024d124a6995310a410097e7302a942911a7723758a4fb8e4217b24aad6b4150888fd9b486f17acbad49f530eb04ef6973b306fd5da8d041db8d26549650a50d04904a7637c41f5a6a10df7b4ffd3c82b73bb255c790ba8942c49016efbc1cbcd93fe2cc4f5b7dd984efc21dbffb6cf2c82ced5792be81d07504bb8b0175053e38dd9709149319d25aef243aca8ecf745c9a05982b10d42c6e87d22f5c2cd961ae52e37049c637a1fec74ed176e3518aa43a5e7f8df8da35bef1b8dc2ed3269911ef18e8a15a07c795e82e8e624cdc84e5f261c036de6e6018822b31d0e8541948a1f0ad4bf283e6c06b8e55003e2a38cfad109ec30ebaa26a7026b90afd763cfc8a91d7d61eaaf03e693654aa390c346dc8f1ee249b66472c5c852b6e647212f9744e4f2b9be6696e31b2061b2d73f1002ae2611eef27fc6ed24c18e17c1bebc6a4b443c092350da70e69bda44d55b34feddbd5d771483ebb5d29efe411db9aa054db2d2e82bd72ff7986aa8d37b5f5f21ed0d86e9968cbef7d509dc4f073cdb7ddfe7766e62adb3df58297ad4896710d53531efdf8d05bd4846543d0faa63567f5d545f8260c5bb8663bf560a8ed91ca72804a231a637655a16eccf79127529c7384e5d0bcf7d5b289da2ece0ae87a5a8cd0c4f2160d8a95a38f8d4ee3147c9b2eaddbc39aa94ea2090b6851764bbddbd19d7323cf263435604964a9a4fc99b3cc3200cab2d972f956b331c218c4836e9ccf14789febdcac6c6918570d8865671400552211428d37b2fe2037fb985d538b0952a79b9da82e6a272dcb3492b59d08408835c547b73a9647be5a91f2b079b61e3f9713ca783e326dace127ad57016138456b087c8a3f53455a1a783bec41128b34d129110089b1c33415cf883e85ccd256cae8641614e5ad3ba2b45ae681beda5c2036280568644a19e853569a0257ca8be21d523a6cb4ffb5410d7c5d70194a9cd6b3af4e1f487c2ab27d65c6d1ac3ed0a6a1f3e76617bf2ec76484ef7e8aca17a4528d6cda6d15dba3d4492057f295e5570be86779badd591b1e577116a0c6d8ec98c618d5753868952ad8f90fbe41e63a5b7125fb8331c048fb2ea1d4114cc0f9a5e79864b133e204e8b1d5738685706f806780c5dbfbcc6534926d58c8d4373491725a0f62e4cf088c14e0ff443954452a825d13bcbf286bf66c6162aea60397f068b228605052bcd1cdee3b0b8ef55d420408e1758618e5ed5c1b20f34f5ce1d150a8e7c47eb4be8d8b34619062b7d0b8927f313bb8df6288c08969672df046f1e5d3e861fe8eb8bda0208b36019bee5544cf14d122ef663d06a587dd2ca1fd2b5b0e9895a4e3c61ca71db24b46791e9325afc8a6f20a62687357e5a185ad6a0f6ce365b6b5841f3b323ccd7d0130fece2dcb615d04c32439465674ab1093dd2867bcebdffdae53c153bf67ebe5bffff8f37e7e116b991082bba36c900965019ed1c6c76a4f29526f4dcb1459f71c7df07a99223edf02eded620c61434b77877c0bfc2454684aaf79b02d9c05a497d1dedf15631bcb35455449f0b29cb85c246c5eb7be5d2168cc6890202e95af71b571636209db91126a80543b8a0b200794481fb1754b8edd266e53c32f2049726e235f875ae5e5b6af57eadec06be309536d60c1e959698413f43e5e91a9f063b68ea81f6a301f5820aa6e1ad7aa7599afb8ce8301817e031614950807bf2398aa79b59a61ddefbe5c0209e9303d7f18a22f94af618bdb07d9eba6f824b7f84f96ce2581c813f257387922b3faa8d9226726d49530ac76ed177ad348ae3e37f2b02f63d470ea943ebcd01fc3d8b288bb72af4612c7fb3c1d1775498c4fab60af06f48538de8699178ed65fcc55de709b6e0a5c5407371a83d6360ebafef729a28370e385b702ad846807eac6ce62de902f98f6b58a9c83605f1e4d59aff483f2b79591593af01e6964fa0964317a55a8169d09c8133cbd96fa1c56c7c20f7c9087fcc9e48c7117f311b8dcab8c04577d03e07e6eea3eb5ed42c438e923f9c02933d5cb747da982d47a8055a00d37ad87541f41d17fba82db2aed98a925659fd3dbb3c1b0f9889a64f1732fb6fb571b056afb219d5fe091ae4be7376a7a92f54fd135afc5eb196a3d909a740f6051a73f407ba20de2c6a2aa14d899aee9fc43c777acf6e867529bdd2a1d205b26dbe0341d0c3efb6914ce5b5b63edd10f1f2ba64f985e0fb9b9069e868acd2e2dd459cabe73d7ebee930ab853c0122c49570f6e6a9bd6beb10cfb3fbd1c8d82650f8b07cbeb2ccf64b4b10145bbc651b2b422dd88231675c7f53693e31ac1bae9b8598590895b58c4891a70d9b2c61dbd2897d39891362b07f33faa835d29b80b0d87030c92f8ee38f4bbc66dc2e678b0309c295be3f5e189b673fa428cb4ea86db56e496928c8ad19f124e3c0aa08436bca963f8b7814aac11cced5c7f2923b5466c341cfb6436fb8865c0d244365fd744c98a28c9827c834496410636c6f7d55d9b48bd32f6981f549d7e31cef905b951b45ecee99a0c3d021ec25482f270585f95f280452ff86ae556b2f1c025271a49738badd3a7a0d959d32b5d644c1d0f8f37cdd6e348bf9a94c0df892c83f1e62624ef99e3f5a0fee0ea433276730dd5237976953e31066b28f912b990653cc19d023c362ebf9db9f8f36dd1657f9f033a6f958ccf36dd7103134d092da611654a67607916c13adf5da1a847387e1bfc2ec406ddf5e53e63227715e1911728b035b00b73f017b0f0e67823ce5789b5db8fc0ccc152997f7e0d16d3198fe564de0acd0e7a27ecc77bef087649456fd2fe8b64bf00018094876aa7c609b346eb3331d6f430e5e0f1a7127b7779aeefc2642fc2cd6aa6386dba3832d8063e20e9f19587cf1e89a67442a12818ff876f063d66d8087d0fbb1ac6bfde49afed2c18d6f73271a641f52980044947252177217e364edd86ce7007806b081f1295cec6af05df090385a933d905d2517afe3ce3428e65656a3cf0d766a08aff1ccc245d0919ebf0238b26985906052430d9ec8b17a2d11f48752928b288534fd0bf378fbe2ee1bf2eebdeef9777a299d7d75cd4e6be1526d45101afcdea16f4685a65c8720b9d2ea1b4b3974a5e6134326f147d373c3c7bf6a0bf7b65a1e7bedf94a93c69fe6c49efd8c86075b4a0faedda4ace1c388f5e98d680b0519560e2280f632dfa965efc50362d8788c6152b24336b52f9ba34e38629d418e562d9e8395f27a0f301581eb16088c1232e327464ba29a7c5477a1d61aa14781354f06522a00ba5c2e7c9d1c0fe5a672b93ad3ac8d810e15f432b4e6c0b78f0b1e6c51b8b5b814e6548c177a6094af34b16ac0e55d98ca3244b4d9c3bfa1dc9877784031f7304f634f7ec334f05492eda8563df820f3d7dbc9e0b6b355284917eafb8f7e5560006d58a2d7ef3f015028285b4b1b31ddc471ef6fcb7a376ab798458572cc65ac842fb0aaeaf09caf20090b82d486adc673aecec82326cd3ba1ec044711ac598abd51a397873a9b53e7974580fb8245e33ad76d893f91825b639648801aa2794ebaf198499090159105f0df23ea81aa72b5f5bbe9c3cf2367590a900dcf6bd3b5b1c88a9c6a8d49ed9c4fe5e86a740c314032fb4cd1a704adf07ce3a014c044a1f08b19356f4454d728f681cca39ab91720a3127a7c9d34193e1d2d25ab6ee0fc4431335375c344cfc20032c5e3eca7b1ee57d28162b1edf77052c7eefb24d76c27d39ab1a6b26e16e606ab08f838b05000200010000004400018008000300000000000800030003000000140002007465616d300000000000000000000000140002006970766c616e31000000000000000000080003000000000005000600"], 0x11b0}, 0x1, 0x0, 0x0, 0x4000}, 0x18000)
removexattr(&(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000400)=@known='user.incfs.size\x00')

12m0.391743179s ago: executing program 4 (id=3689):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r2=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000380)={r2, @in={{0x2, 0x4e21, @empty}}, 0xe, 0x3, 0xfffffff7, 0x6, 0x52, 0x185, 0x4f}, 0x9c)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x2, 0x572, &(0x7f00000006c0)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000001f00)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x835, 0x0)
truncate(&(0x7f0000000100)='./file0/file0\x00', 0x5)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x2}, 0x18)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETSNDBUF(r4, 0x400454d4, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2)

12m0.386073589s ago: executing program 33 (id=3689):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r2=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000380)={r2, @in={{0x2, 0x4e21, @empty}}, 0xe, 0x3, 0xfffffff7, 0x6, 0x52, 0x185, 0x4f}, 0x9c)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x2, 0x572, &(0x7f00000006c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=")
setxattr$trusted_overlay_upper(&(0x7f0000001f00)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x835, 0x0)
truncate(&(0x7f0000000100)='./file0/file0\x00', 0x5)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x2}, 0x18)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETSNDBUF(r4, 0x400454d4, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2)

9m15.699683602s ago: executing program 5 (id=7006):
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240), 0x200000000000000, 0x1}}, 0x40)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendfile(0xffffffffffffffff, r2, &(0x7f0000000180), 0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f1f0000060001000000000008", @ANYRES32=r4], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20)
sendmsg$inet(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000dc0)='>', 0x1}], 0x1}, 0x0)
write$cgroup_subtree(r9, 0x0, 0x0)
recvmsg$unix(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/225, 0xe1}], 0x1}, 0x2142)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r6, <r10=>0xffffffffffffffff}, 0x4)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r11}, 0x10)
r12 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r12, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x98, 0x0, 0x0, 0x130, 0x1f0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0xa}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a010200000000000000000a0000050900030093797a30000000000900010073797a3100000000080007006e617400140004800800024054dd5e54080001400000000014000000110001"], 0x70}}, 0x24044850)

9m15.699065352s ago: executing program 5 (id=7007):
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x0, <r1=>0x0}, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x6, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xb9, &(0x7f000000cf3d)=""/185, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
socket(0x23, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r3}, 0x10)
r4 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "1e4e1557a609bff6a596dea0fb0503f22231b15d27fce60137b6c6cbf512f89b435f5dd9b4ae337bbf37b108c1ec26276567359e079abe967f5d8aad34301a48", 0x13}, 0x48, 0xfffffffffffffffc)
keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000180)={0x0, <r5=>0x0}, 0x8)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={r5, 0x1, 0x18}, 0xc)
recvmmsg(r0, &(0x7f0000007700), 0x318, 0xfc0, 0x0)
r6 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$KDSKBSENT(r6, 0x4b49, &(0x7f0000000540)={0x8, "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"})
ioctl$TIOCVHANGUP(r6, 0x5437, 0x0)

9m15.626271508s ago: executing program 5 (id=7008):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
socket(0x10, 0x80000, 0x4)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r2}, 0x18)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@fadd={0x58, 0x114, 0x6, {{0x3, 0x4}, &(0x7f0000000380)=0x8, 0x0, 0x7, 0x0, 0x401, 0x100, 0x20, 0x1}}], 0x58, 0x4000000}, 0x0)

9m15.59663548s ago: executing program 5 (id=7009):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x40040000)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0)
syz_io_uring_setup(0x64d, 0x0, 0x0, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18)
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000))
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket(0x8000000010, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r3}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={<r4=>0xffffffffffffffff})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240008c1}, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
close(r4)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r7}, 0x10)
write(r2, &(0x7f00000002c0)="fc0000001c000704ab5b2509b86803000aab087a0400000001481193210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, r0, 0x0)

9m15.251590957s ago: executing program 5 (id=7015):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x0, 0x41}, 0x28)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000004cbd18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c0003"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00'}, 0x10)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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")

9m14.944299651s ago: executing program 5 (id=7021):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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", @ANYRES16=r0], 0x21c}}, 0x0)

9m14.933064322s ago: executing program 34 (id=7021):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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", @ANYRES16=r0], 0x21c}}, 0x0)

3m22.975275561s ago: executing program 0 (id=14186):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdir(0x0, 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x6, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000", @ANYRES32, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = socket$rxrpc(0x21, 0x2, 0x2)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000a40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$rds(0x15, 0x5, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x1b, 0x5, 0x458, 0x0, 0x2e8, 0xffffffff, 0x140, 0x2e8, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, &(0x7f0000000340), {[{{@ip={@private=0xa010102, @broadcast, 0xffffff00, 0xff, 'veth1_virt_wifi\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x88, 0x1, 0x12}, 0x0, 0x108, 0x140, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth1_to_bridge\x00', {}, 'pim6reg0\x00', {0xff}, 0x5}}, @common=@ah={{0x30}, {[0x60, 0xf]}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @local, @loopback, @icmp_id=0x66, @port=0x4e22}}}}, {{@ip={@local, @local, 0xff000000, 0xffffff00, 'macvtap0\x00', 'batadv_slave_1\x00', {}, {}, 0x1, 0x0, 0x10}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x4a}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xc, @private=0xa010102, @local, @port=0x4e22, @port=0x4e22}}}}, {{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@ah={{0x30}, {[0x6, 0xe9], 0x1}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x17, @private=0xa010102, @private=0xa010102, @icmp_id=0x67, @icmp_id=0x64}}}}, {{@ip={@multicast2, @local, 0xff000000, 0x0, 'sit0\x00', 'caif0\x00', {0xff}, {}, 0x73, 0x1, 0x5d}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x411, 0x800}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xe, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @port=0x4e23, @gre_key=0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8)
bind$rds(r6, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r6, &(0x7f0000000080)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@mask_cswp={0x58, 0x114, 0x9, {{0x9, 0x660}, &(0x7f0000000180)=0x80000001, 0x0, 0x6, 0xd, 0x1, 0x3, 0x3a, 0x8}}], 0x58}, 0x0)
bind$rxrpc(r4, &(0x7f00000001c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @remote}}, 0x24)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x101}, 0x18)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0x1)
bind$rxrpc(r4, &(0x7f0000001280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)
ioctl$KDSETMODE(r3, 0x4b45, 0x1)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xfffd, 0x2fd, 0x1, 0x101}})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

3m22.85058184s ago: executing program 0 (id=14190):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c000140000000020000010148"], 0xf8}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
r1 = socket(0x10, 0x3, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20)
utime(&(0x7f0000000040)='./file0\x00', 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fe007c05e8fe50a10a000600014002020c600e", 0x27}], 0x1}, 0x894)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800)
ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080))

3m22.782196906s ago: executing program 0 (id=14192):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, 0x0, 0x20040000)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000009385000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000016c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xe929, 0x7, 0x0, 0x7, 0xfffffffffffffff9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840)
connect$pptp(r4, &(0x7f0000000040)={0x18, 0x2, {0x2, @empty}}, 0x1e)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000030605000000000000050000000000060500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000012c0)=[{{&(0x7f0000000300)=@xdp, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/124, 0x7c}], 0x1, &(0x7f0000001740)=""/4096, 0x1000}, 0xe}, {{&(0x7f0000000580)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000940)=[{&(0x7f00000006c0)=""/69, 0x45}, {&(0x7f0000001500)=""/245, 0xf5}, {&(0x7f00000008c0)=""/86, 0x56}, {&(0x7f0000000a40)=""/235, 0xeb}, {&(0x7f0000000400)=""/36, 0x24}], 0x5, &(0x7f0000000b40)}, 0x8}, {{&(0x7f0000000b80)=@qipcrtr, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000c00)=""/43, 0x2b}, {&(0x7f0000000b40)=""/4, 0x4}, {&(0x7f0000000c80)=""/191, 0xbf}, {&(0x7f0000000d40)=""/24, 0x18}, {&(0x7f0000000d80)=""/115, 0x73}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000000e00)=""/236, 0xec}], 0x7, &(0x7f0000003740)=""/4086, 0xff6}}, {{&(0x7f0000000f80)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001000)=""/47, 0x2f}, {&(0x7f0000001040)=""/193, 0xc1}, {&(0x7f0000001140)=""/118, 0x76}, {&(0x7f00000011c0)=""/36, 0x24}, {&(0x7f0000001200)=""/62, 0x3e}], 0x5}, 0xffffff24}], 0x4, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x2002, 0x0, 0x6, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3m22.551087734s ago: executing program 0 (id=14195):
r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r0, 0x0, 0x6e, 0xa4, &(0x7f0000000380)="1e9812998693ecdfc618bf08d63c60113d205b4b24c7261247a2035d8f92f0e501649258a92ba710b6a5b31b248b592d734f1918f27e8fae12bf43c4badc5c685b1129fc4db4852d37f97bea1663f6ef9833bbf847649d9208f41f436f0e10edfb7e1c38aea4b3a3c0cd609c7b7c", &(0x7f0000000400)=""/164, 0x80000001, 0x0, 0xce, 0x98, &(0x7f0000000600)="c0112377af5e8b952a4ea26640684161c3aedbcffa10f7b295fa1214523c6a293b3b8f951a23f9aa4f53f77f5b810d5416af3cc1006b578dffdf0d5180151795ba008846b69e9696782ea25d7aaefdaa00396a9fabd7f97aab31e6530b9cb89cf3a83642559aa02bb7e010a0d0aa6007428858fad9822a2f7c66dba68a168c7fa1a3e0e4b5cc289e8402677aaee0f5e86b3524b529ca4fd70e9d436fedc530c0599fb761e64706b0ab5ad38a9197c4747b0dca452a8b7324268fd03f84532c9bb852108a3be3f5c65c89d3076cbf", &(0x7f0000000700)="368d1bd2cf029a9368e85cf65b1980e952dbe428d9e20f5178afa4d126e96d74de7a9f34744c2945c45076760f648e3f983e8454cba785480c47d7e585d4defd36ab1dbbd4837fd88a6b4ed8ade63b7cb1523b36951a0f17de98be3d1c4e947556f598c8e21ce2b5fbb9701f7d4d42be37251da7cff47c8c7a673b3e465fbb6566aefe1e9b9a14400b57b11e8dfc92a9c99a37bac3119b94", 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00')
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r2}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xee8e, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x1fffffffffffffcd, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r3}, 0x10)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
socket(0x80000000000000a, 0x2, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
socket$kcm(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x6, 0x642, &(0x7f0000000b40)="$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")
umount2(&(0x7f00000002c0)='./file0\x00', 0x2)

3m21.539652663s ago: executing program 0 (id=14208):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)

3m21.478484668s ago: executing program 0 (id=14209):
mkdir(&(0x7f0000000400)='./file0\x00', 0x101) (async)
mkdir(&(0x7f0000000400)='./file0\x00', 0x101)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18)
wait4(r0, 0x0, 0x8, 0x0)
pipe2$9p(&(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r5}, 0x10)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) (async)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
r6 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2)
write$UHID_DESTROY(r6, &(0x7f0000000040), 0x4)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x28, 0x2, 0x3, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x100}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x9}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x4004) (async)
sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x28, 0x2, 0x3, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x100}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x9}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x4004)
chroot(&(0x7f0000000000)='./bus\x00')
fallocate(r6, 0x0, 0x0, 0x1000f4)
sendfile(r6, r6, 0x0, 0x800000a1e) (async)
sendfile(r6, r6, 0x0, 0x800000a1e)

3m6.447118179s ago: executing program 35 (id=14209):
mkdir(&(0x7f0000000400)='./file0\x00', 0x101) (async)
mkdir(&(0x7f0000000400)='./file0\x00', 0x101)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18)
wait4(r0, 0x0, 0x8, 0x0)
pipe2$9p(&(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r5}, 0x10)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) (async)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
r6 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2)
write$UHID_DESTROY(r6, &(0x7f0000000040), 0x4)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x28, 0x2, 0x3, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x100}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x9}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x4004) (async)
sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x28, 0x2, 0x3, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x100}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x9}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x4004)
chroot(&(0x7f0000000000)='./bus\x00')
fallocate(r6, 0x0, 0x0, 0x1000f4)
sendfile(r6, r6, 0x0, 0x800000a1e) (async)
sendfile(r6, r6, 0x0, 0x800000a1e)

2.760025053s ago: executing program 1 (id=16877):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
syz_io_uring_setup(0x38, &(0x7f0000000140)={0x0, 0x1d2d, 0x13500}, &(0x7f0000000240), &(0x7f0000000480))
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f)
r2 = socket$inet(0x2, 0x2, 0x1)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4c010)
sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000)

2.681817079s ago: executing program 1 (id=16882):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00')
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000400)={0x2, 0x957, 0x7, 0x0, 0x2, 0x0, [{0x4, 0x1, 0x8594, '\x00', 0x902}, {0x3, 0x5, 0x6, '\x00', 0xc00}]})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0)
r6 = dup(r5)
r7 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0xa8000, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x100000000000007, 0x8, 0x3}, 0x0)
sendfile(r6, r7, 0x0, 0x8000fffffffe)
ioctl$TIOCVHANGUP(r6, 0x5437, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff}, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x0, 0x10001, 0x1}, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000006c0)={0x0, 0x8, 0x20}, 0xc)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x1007}}, {@dioread_nolock}, {@bsdgroups}]}, 0x53, 0x4f3, &(0x7f00000012c0)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101000, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB], 0x34}}, 0x6048800)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10)
r9 = syz_io_uring_setup(0x7272, &(0x7f0000000b80)={0x0, 0x86e4, 0x2, 0x8}, &(0x7f0000010080), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_PROBE(r9, 0x8, 0xfffffffffffffffe, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000cdee2cca841000cc51080b6dcc0dc5cbde0bf337000000000000000000", @ANYRESDEC, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.819462237s ago: executing program 1 (id=16903):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
syz_io_uring_setup(0x38, &(0x7f0000000140)={0x0, 0x1d2d, 0x13500}, &(0x7f0000000240), &(0x7f0000000480))
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f)
r2 = socket$inet(0x2, 0x2, 0x1)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4c010)
sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000)

1.746625813s ago: executing program 1 (id=16905):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, 0x0, 0x20040000)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000009385000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x5c}}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000016c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xe929, 0x7, 0x0, 0x7, 0xfffffffffffffff9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840)
connect$pptp(r4, &(0x7f0000000040)={0x18, 0x2, {0x2, @empty}}, 0x1e)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000030605000000000000050000000000060500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000012c0)=[{{&(0x7f0000000300)=@xdp, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/124, 0x7c}], 0x1, &(0x7f0000001740)=""/4096, 0x1000}, 0xe}, {{&(0x7f0000000580)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000940)=[{&(0x7f00000006c0)=""/69, 0x45}, {&(0x7f0000001500)=""/245, 0xf5}, {&(0x7f00000008c0)=""/86, 0x56}, {&(0x7f0000000a40)=""/235, 0xeb}, {&(0x7f0000000400)=""/36, 0x24}], 0x5, &(0x7f0000000b40)}, 0x8}, {{&(0x7f0000000b80)=@qipcrtr, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000c00)=""/43, 0x2b}, {&(0x7f0000000b40)=""/4, 0x4}, {&(0x7f0000000c80)=""/191, 0xbf}, {&(0x7f0000000d40)=""/24, 0x18}, {&(0x7f0000000d80)=""/115, 0x73}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000000e00)=""/236, 0xec}], 0x7, &(0x7f0000003740)=""/4086, 0xff6}}, {{&(0x7f0000000f80)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001000)=""/47, 0x2f}, {&(0x7f0000001040)=""/193, 0xc1}, {&(0x7f0000001140)=""/118, 0x76}, {&(0x7f00000011c0)=""/36, 0x24}, {&(0x7f0000001200)=""/62, 0x3e}], 0x5}, 0xffffff24}], 0x4, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x2002, 0x0, 0x6, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.618889333s ago: executing program 8 (id=16906):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x4}, 0x18)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
ioctl$VT_RESIZEX(r2, 0x4bfa, &(0x7f0000000080)={0xd, 0x18, 0x3, 0x0, 0x0, 0x1000})

1.571549537s ago: executing program 8 (id=16909):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18050000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007000000f8ffffffb702000000000000b7030000000000008500000072000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4000, @fd_index, 0x2, &(0x7f0000001480)="2b010ed9a2708e87eed9561f0432352e1295f4c90b262fae", 0x18})
io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x45, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e2100000008f503400000000806000140000100000900010073797a30000000000900020073797a320000000008000b4000000003140000001100"], 0x9c}}, 0x0)
close(r1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0, 0x0, 0x1000}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, 0x0, &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000002, 0xf, 0x4000000)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x8014}, 0x0)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r2], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20004014)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="a1ab27bd700900009cff8f000000080017015700000008000300", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x20, 0x11, 0x43d, 0x0, 0x200, {0x0, 0x0, 0x0, r5, {0xfff2, 0x9}, {0x10}, {0x9, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

1.499520202s ago: executing program 1 (id=16912):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00')
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000400)={0x2, 0x957, 0x7, 0x0, 0x2, 0x0, [{0x4, 0x1, 0x8594, '\x00', 0x902}, {0x3, 0x5, 0x6, '\x00', 0xc00}]})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0)
r6 = dup(r5)
r7 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0xa8000, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x100000000000007, 0x8, 0x3}, 0x0)
sendfile(r6, r7, 0x0, 0x8000fffffffe)
ioctl$TIOCVHANGUP(r6, 0x5437, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff}, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x0, 0x10001, 0x1}, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x1007}}, {@dioread_nolock}, {@bsdgroups}]}, 0x53, 0x4f3, &(0x7f00000012c0)="$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")
r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101000, 0x0)
getdents64(r8, &(0x7f0000000f80)=""/4096, 0x1000)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000fbdbdf25250000000e0001000d9fa8f80e0000196d0000000f0002006e657464657673696d30"], 0x34}}, 0x6048800)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x10)
r10 = syz_io_uring_setup(0x7272, &(0x7f0000000b80)={0x0, 0x86e4, 0x2, 0x8}, &(0x7f0000010080), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_PROBE(r10, 0x8, 0xfffffffffffffffe, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000cdee2cca841000cc51080b6dcc0dc5cbde0bf337000000000000000000", @ANYRESDEC, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.361174953s ago: executing program 8 (id=16915):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
close(0x3)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f00000005c0), 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES16], 0x48}, 0x1, 0x0, 0x0, 0x8000010}, 0x20004801)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r3, 0x0, 0x80, 0x6)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r4, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r6=>0x0})
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e1200000800020010"], 0x44}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x1, 0x7, 0x3, 0x1000, {{0x5, 0x4, 0x3, 0x27, 0x14, 0x64, 0x0, 0x8, 0x2f, 0x0, @private=0xa010100, @remote}}}})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r10=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001980)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7040010000000f00000005002e000000000008000300", @ANYRES32=r10, @ANYBLOB="08002b000800000005002f00"], 0x4c}}, 0x18)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000640)=<r11=>0x0)
connect$nfc_llcp(r1, &(0x7f0000000680)={0x27, r11, 0x0, 0x7, 0x2, 0xfe, "c7c5f9322364ad93e4f3201b3a81229e609785aafd27e6c7d955ea9adafc9e93022ebce96e716f0888a97e2a7573aa052342738aa90bb4a673453bb495e0f9", 0x2d}, 0x60)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r9, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xb3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c081}, 0x2004c040)
r12 = socket$inet6(0xa, 0x3, 0x3c)
getsockopt$sock_int(r12, 0x1, 0x26, 0x0, &(0x7f0000000140))
fcntl$setflags(r8, 0x2, 0x1)

1.219442764s ago: executing program 8 (id=16918):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00')
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000400)={0x2, 0x957, 0x7, 0x0, 0x2, 0x0, [{0x4, 0x1, 0x8594, '\x00', 0x902}, {0x3, 0x5, 0x6, '\x00', 0xc00}]})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0)
r6 = dup(r5)
r7 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0xa8000, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x100000000000007, 0x8, 0x3}, 0x0)
sendfile(r6, r7, 0x0, 0x8000fffffffe)
ioctl$TIOCVHANGUP(r6, 0x5437, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff}, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x0, 0x10001, 0x1}, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x1007}}, {@dioread_nolock}, {@bsdgroups}]}, 0x53, 0x4f3, &(0x7f00000012c0)="$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")
r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101000, 0x0)
getdents64(r8, &(0x7f0000000f80)=""/4096, 0x1000)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000fbdbdf25250000000e0001000d9fa8f80e0000196d0000000f0002006e657464657673"], 0x34}}, 0x6048800)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x10)
r10 = syz_io_uring_setup(0x7272, &(0x7f0000000b80)={0x0, 0x86e4, 0x2, 0x8}, &(0x7f0000010080), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_PROBE(r10, 0x8, 0xfffffffffffffffe, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000cdee2cca841000cc51080b6dcc0dc5cbde0bf337000000000000000000", @ANYRESDEC, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.178766717s ago: executing program 7 (id=16919):
syz_emit_ethernet(0xd6, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x65, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x26, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0xe, "9606053d0006ff00800000b6"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x4b, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x1, 0x12, "8c9300"/16}, {0x0, 0x8, "2189ea43a214"}, {0x0, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0x9, "ccf0294e2a3bdb"}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}, @lsrr={0x83, 0x7, 0x62, [@rand_addr=0x64010100]}]}}, "a815a23d"}}}}}, 0x0)

1.14513338s ago: executing program 7 (id=16920):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
mq_open(0x0, 0x6e93ebbbcc0884f2, 0x0, 0x0)

1.087181035s ago: executing program 7 (id=16921):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'})
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES32], 0xb4}}, 0x0)

1.022871999s ago: executing program 7 (id=16923):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$packet(0x11, 0xa, 0x300)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, 0x0, 0x0)
sendmmsg$inet(r1, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000cc0)="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", 0x179}, {&(0x7f0000003380)="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", 0x114}], 0x2}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ec0)="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", 0x31f}], 0x1}}], 0x2, 0x2000c048)
sendto$inet(r1, &(0x7f0000000140)="e9", 0x1, 0x0, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
pipe(&(0x7f0000000d00)={<r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000c044)
splice(r2, 0x0, r3, 0x0, 0x100000000, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x800)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)

793.664977ms ago: executing program 6 (id=16926):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000100000000ffff00000b000000010000000e96bd4370fa675cff22c3feeb96a8f92ff84bd464b29aed4839e2b05c57f94e072dd773635950ad4d725fa0185026acbcb7230e0ac7b86ab6e5ba5635dd701201d5be801fcd3ecd339ddbc3061de89914bdd1bece55e26c25e2942f489f16bcd24de03cafb90c068fafbf544b1a1d1853b0fed1375b6ee99f533b8bcc451cc5e54e8b2e7488f94b7c8025e350748b447671b72e5d7b71ab5a46a0718fa1c38f68f34f5e9df45daf025e6cc6cf73c03298b46f529ac7a5b5108b040e41320e89305be04a6cebdd49c205b7f99f", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000000), 0x0}, 0x20)
pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0x1, 0x8000c61)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe3aa6ea)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x3b}}, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r2})
ptrace$ARCH_MAP_VDSO_X32(0x1e, r2, 0x91, 0x2001)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000100), 0x1, 0x4c4, &(0x7f0000000f40)="$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") (async)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000100), 0x1, 0x4c4, &(0x7f0000000f40)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x7}, 0x18)
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x8, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000001, 0xb, 0x37, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40000000, 0x3ff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x4, 0x2, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x0, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x5, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0xff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x20000008, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x2, 0x7, 0x4, 0xfffffa0c, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x4000002, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x80, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x100002, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0xf, 0x772, 0x80a, 0xffe, 0x3, 0x3f7, 0x4, 0x8, 0x7, 0x1, 0x5d, 0x9, 0xd, 0x82]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async)
sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x8, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000001, 0xb, 0x37, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40000000, 0x3ff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x4, 0x2, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x0, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x5, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0xff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x20000008, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x2, 0x7, 0x4, 0xfffffa0c, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x4000002, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x80, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x100002, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0xf, 0x772, 0x80a, 0xffe, 0x3, 0x3f7, 0x4, 0x8, 0x7, 0x1, 0x5d, 0x9, 0xd, 0x82]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x50}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x7, 0x1, 0x1, 0x3}, {0x1ee, 0x1, 0x7, 0x3ff}]}) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x7, 0x1, 0x1, 0x3}, {0x1ee, 0x1, 0x7, 0x3ff}]})
kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) (async)
kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000640)='LX[X\x00.]%Jk\xe8\xd4M\xd7\xf9m\xa7%\xe5)J81`.\x7f7\xa6\'\x1f4\x06_0\xf3\x05\xc8\xcc\xf8\r:\r*w\x8d\xbd\x02\xd3F\x83\x82u3\xc7\x1bp\xa1=\xdb\x9e8H\a\xdc(\xb9\x84\f%\xb8\xd8\xd9\xa2`2\xc6V\xda\x14@\x12-\x94e\xca\xb8\xf8\x0e\xf4\xb2\x87J3\x9eucSYT\x81\xb2t\x13*\x8c\x8d\xdf\x17\xcc\xa7nO\xbb\x05\x95;\xcd\x10\x80\xfdx$\xc6CLk.\xe4Nin\xdaXH(\x97\xd1\x03\xe6\xec\x1d)\x98\xca\x83hy\x11\a\xda\xac\xfb{\xa6\xdd\x7f\xe2\xf5\xc4p=\x14v\x91\x92Hhd42\xbb\x00\x00\x00')
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
ioprio_set$uid(0x3, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48)
socket(0x10, 0x803, 0x0) (async)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
socket$packet(0x11, 0x2, 0x300)

719.778494ms ago: executing program 6 (id=16927):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_CMAP(r0, 0x4b70, 0x0)
r1 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0x60b13e, 0x0, 0x6, 0x3a2})
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xfffffffffffffff5]}, 0x8, 0x0)
readv(r2, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0, 0xe00}], 0x10000000000000fb)
r3 = gettid()
rt_sigsuspend(&(0x7f0000000040)={[0x1ff]}, 0x8)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=<r4=>0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r4, @ANYRES32=r5, @ANYRESDEC=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f00000002c0)=<r8=>0x0, &(0x7f0000000300)=0x4)
sendmsg$nl_xfrm(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000c00)=@allocspi={0x16c, 0x16, 0x339, 0x0, 0x0, {{{@in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x32}, @in6=@loopback, {0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xe}}, 0x0, 0x4}, [@migrate={0x50, 0x11, [{@in=@multicast1, @in6=@mcast1, @in6=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x0, 0x0, 0x3500, 0xa, 0xa}]}, @lifetime_val={0x24, 0x9, {0x101, 0x2f, 0xd886, 0x100000000}}]}, 0x16c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94)
close_range(r1, 0xffffffffffffffff, 0x0)

710.062354ms ago: executing program 3 (id=16928):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xb)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)
openat(r1, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50)
faccessat(r1, &(0x7f0000000000)='./file0\x00', 0x5)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0xd0)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES16], 0x58}}, 0x40011)
recvmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1}, 0x7fff}], 0x1, 0x2, 0x0)
io_uring_enter(0xffffffffffffffff, 0x47f8, 0x0, 0x0, 0x0, 0x0)

682.059356ms ago: executing program 3 (id=16929):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)

642.53974ms ago: executing program 3 (id=16930):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)

641.38648ms ago: executing program 3 (id=16931):
syz_emit_ethernet(0xd6, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x65, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x26, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0xe, "9606053d0006ff00800000b6"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x4b, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x1, 0x12, "8c9300"/16}, {0x0, 0x8, "2189ea43a214"}, {0x0, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0x9, "ccf0294e2a3bdb"}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}, @lsrr={0x83, 0x7, 0x62, [@rand_addr=0x64010100]}]}}, "a815a23d"}}}}}, 0x0)

624.243921ms ago: executing program 1 (id=16932):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
shmctl$IPC_RMID(0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0x2, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$phonet(0x23, 0x2, 0x1)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f, 0x8}}, 0x20)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000040)={0x2, 'xfrm0\x00', {0x80}, 0xc})
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="80ffffffffffffff00000000070000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10)
r4 = accept$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, @broadcast}, &(0x7f0000000400)=0x10)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000008c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x340, 0x160, 0x340, 0xc8, 0x160, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, &(0x7f0000000500), {[{{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x7, 0xc94e, @remote, 0x4e20}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x81}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x9, 0x6, [0xb, 0x33, 0xc, 0x33, 0x3e, 0x39, 0x25, 0x21, 0x37, 0x16, 0x9, 0x13, 0x27, 0xc, 0x1, 0x27], 0x0, 0xfffffffc, 0x7}}}, {{@ip={@private=0xa010101, @empty, 0x2d17021f1c22610, 0xffffff00, 'batadv0\x00', 'pimreg1\x00', {0xff}, {}, 0x1, 0x0, 0x2e}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x2, 0x2, 0x2}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0xff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0)
syz_io_uring_setup(0x114, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x41, 0xffffffff, 0x3}, 0x3)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESDEC, @ANYRES8=r5], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x10, 0xcb38}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0xfffffffffffffffc}, 0x18)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
sendto$inet6(r8, &(0x7f0000000000)="aa", 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c)
sendto$inet6(r6, &(0x7f0000000440)="2ca1480bb7d86ef3afb436c3a4159c8e48f28aa73e02782ec625bda2f3b130a6e000387fa9c9c635ba3dfc66a17df733f95a757e5f6fc3acb4bb82", 0x3b, 0x24008000, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c)

605.213663ms ago: executing program 3 (id=16933):
r0 = getpid()
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x14, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r6=>0x0})
setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000040)=[{{0x3, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1}}], 0x8)
bind$can_raw(r5, &(0x7f0000000200)={0x1d, r6}, 0x10)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x1}, {0xffff, 0xa}, {0x1}}}, 0x24}}, 0x80)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000140)={r6, 0x1, 0x6, @random="b28493140a8c"}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$kcm(0x11, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18)
syz_pidfd_open(r0, 0x0)

596.607943ms ago: executing program 6 (id=16934):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r0, &(0x7f0000001580)={0xfc, {"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", 0x1000}}, 0x1006)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$getregs(0xc, r2, 0x800005, &(0x7f0000000100)=""/62)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x401, 0x2, 0x173, 0x2}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xc1160cbda5ab1ab}]}}}]}, 0x64}}, 0x20000000)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@getsa={0x3c, 0x12, 0x1, 0x70bd26, 0x25dfdbfd, {@in=@multicast2, 0x4d3, 0xa, 0xff}, [@coaddr={0x14, 0xe, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}}]}, 0x3c}}, 0x8044)
setsockopt$packet_int(r6, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)

549.059657ms ago: executing program 3 (id=16935):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00')
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000400)={0x2, 0x957, 0x7, 0x0, 0x2, 0x0, [{0x4, 0x1, 0x8594, '\x00', 0x902}, {0x3, 0x5, 0x6, '\x00', 0xc00}]})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0)
r6 = dup(r5)
r7 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0xa8000, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x100000000000007, 0x8, 0x3}, 0x0)
sendfile(r6, r7, 0x0, 0x8000fffffffe)
ioctl$TIOCVHANGUP(r6, 0x5437, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff}, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x0, 0x10001, 0x1}, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000006c0)={0x0, 0x8, 0x20}, 0xc)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x1007}}, {@dioread_nolock}, {@bsdgroups}]}, 0x53, 0x4f3, &(0x7f00000012c0)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101000, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0], 0x34}}, 0x6048800)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10)
r9 = syz_io_uring_setup(0x7272, &(0x7f0000000b80)={0x0, 0x86e4, 0x2, 0x8}, &(0x7f0000010080), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_PROBE(r9, 0x8, 0xfffffffffffffffe, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000cdee2cca841000cc51080b6dcc0dc5cbde0bf337000000000000000000", @ANYRESDEC, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

467.179513ms ago: executing program 6 (id=16936):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, 0x0, 0x20040000)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000009385000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780"], 0x5c}}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000016c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xe929, 0x7, 0x0, 0x7, 0xfffffffffffffff9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840)
connect$pptp(r4, &(0x7f0000000040)={0x18, 0x2, {0x2, @empty}}, 0x1e)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000030605000000000000050000000000060500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000012c0)=[{{&(0x7f0000000300)=@xdp, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/124, 0x7c}], 0x1, &(0x7f0000001740)=""/4096, 0x1000}, 0xe}, {{&(0x7f0000000580)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000940)=[{&(0x7f00000006c0)=""/69, 0x45}, {&(0x7f0000001500)=""/245, 0xf5}, {&(0x7f00000008c0)=""/86, 0x56}, {&(0x7f0000000a40)=""/235, 0xeb}, {&(0x7f0000000400)=""/36, 0x24}], 0x5, &(0x7f0000000b40)}, 0x8}, {{&(0x7f0000000b80)=@qipcrtr, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000c00)=""/43, 0x2b}, {&(0x7f0000000b40)=""/4, 0x4}, {&(0x7f0000000c80)=""/191, 0xbf}, {&(0x7f0000000d40)=""/24, 0x18}, {&(0x7f0000000d80)=""/115, 0x73}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000000e00)=""/236, 0xec}], 0x7, &(0x7f0000003740)=""/4086, 0xff6}}, {{&(0x7f0000000f80)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001000)=""/47, 0x2f}, {&(0x7f0000001040)=""/193, 0xc1}, {&(0x7f0000001140)=""/118, 0x76}, {&(0x7f00000011c0)=""/36, 0x24}, {&(0x7f0000001200)=""/62, 0x3e}], 0x5}, 0xffffff24}], 0x4, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x2002, 0x0, 0x6, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

324.743854ms ago: executing program 8 (id=16937):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100"], 0x64}}, 0x0)

229.595642ms ago: executing program 6 (id=16938):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
syz_io_uring_setup(0x38, &(0x7f0000000140)={0x0, 0x1d2d, 0x13500}, &(0x7f0000000240), &(0x7f0000000480))
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f)
r2 = socket$inet(0x2, 0x2, 0x1)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4c010)
sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000)

194.669235ms ago: executing program 8 (id=16939):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xb)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)
openat(r1, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50)
faccessat(r1, &(0x7f0000000000)='./file0\x00', 0x5)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES16], 0x58}}, 0x40011)
recvmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1}, 0x7fff}], 0x1, 0x2, 0x0)
io_uring_enter(0xffffffffffffffff, 0x47f8, 0x0, 0x0, 0x0, 0x0)

154.482448ms ago: executing program 6 (id=16940):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
pipe2$9p(&(0x7f00000000c0)={<r1=>0xffffffffffffffff}, 0x80000)
r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x102)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x94, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wf', @ANYRESHEX=r0])
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000600))
sendmsg$tipc(r2, &(0x7f00000004c0)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000240)="1678e7e659c0ed32a97a0cf67c0d06b6a309d72277a27f5e834142b9c81ceb4c17d9", 0x22}, {&(0x7f0000000280)="b80a6cc5b8ff8fef99b0c270488ed32bbab0978203e0b3bad33017a2d68b70364457711f607db4c4f2b5c49405dbdb18e1326b2eedc91676188f15a7da7b590d9fea2fee66eb89d9afd4b2d1cb11fa7deeaf1c591623ee651e6da9f3cb0d808af76f7d399f21c79d85230b070355fad84108b11c4701dae1d6eb8a11fb1a369bfbc6e0e694cb60d05a862e1878ea58a041e0a8", 0x93}], 0x2, &(0x7f00000003c0)="5edd360dfa239957c1668bf4bc4c28ee6d2b0c37cc802f6d76d5987f00816cd190b0bb3c38881442b17add9baa28d4406ea739586f1f231583177a35df6d034e33e2773fbd2a5fbe6e49484938d5a792edd40517263035d44feb2d367cad5f8fe308ba17d3ad25bc130b7e065f30f94277dd0c01c6e5d0a0e312d062ca5cf1aa1cfe72409f0706f69828e3b1e11f9e52e491f108f5d68bf75503f3c6ffc1e6d3324bf0536fd5e8658ac36de481c91dfb2a42c1b37419780e85a2ff7b82ddbe529676119472e47172d87ae58eb576ac5584f5fd35407212049c53695635902612d16b89a357ff0ab2a37ad47a8f95a52624d2", 0xf2, 0x280040d1}, 0x4041)
r3 = creat(&(0x7f0000000440)='./file0\x00', 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000440)='GPL\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
ioctl$sock_netdev_private(r2, 0x89f5, &(0x7f0000000800)="c7c9426d13c52ff6838a97ba07bbe05e243f9cd3199edc0e6a1b53761868bb0be6f7ee03d105f346d9ab3981b26462e2faec0d53fef874ca1389ee59edea9794d4b4553d9a27c11b901c8c4833d5ce7efe44c6a67346d4f513b40780dcbce5b743359d410bb763e13802945c46f75f070a21")
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, @in, 0x4e21, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x0, 0x2}, {0xffff, 0x50d, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x80000000}, {0x800, 0x0, 0x6}, 0x9}, {{@in=@broadcast, 0x0, 0x2b}, 0x0, @in6=@mcast1, 0x0, 0x3}}, 0xe8)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000d40)=ANY=[@ANYBLOB="0212000005020000fcffffff0000000001020900008000006bdae99676f5d98b222c1d175b1bde5f2af814867595cca148f284845d6726daecb906b52bcbe4a0671f0cfe91064a71252070eab7b079faae2437c1c6375c071120ac3c3dfb0e5500269ca1cd7c4713a0369feb90311ab8556d5bac400f5ffbe90545162b4d370163c56d991d223d5da19c52bdbff65404e119035c710bccfff638d731934ecdd791b655adfc821d0887903e07df64c986fa6fb88f4a7d0b3f81044ac984488238d0f3c48cf099ab574e73f1a68d600ab06ec38d634b447f1d4aad0dd4f056494500bab1d7792480ea186568121117e75c05a8bde6476b7304bb2b64f14f54921845a91f868fa925cf0a818b9bba4ea375d10464e94cba1fefd1cf5efc16c2e5c1cf9adb172617d21d333c27c4554adf58cd7508fe0eed1a11186e77fce9e4518b7280db2fc8acac72e4934e0ae31d2132afdb95c105813b90284c0f3bd48d2bae45cd2d03aeb092f6ad45692fc26c26909b57d12e3bf2024de3edce03c2dd8cf1081fbc181cb24fb432907ee893125e386edee1e48b5fb72dc536fd879fc356b5bff8ae29afeda341fbb0fbba2d1a133f05b1cac0479743ca5c562d8a9d0ddb7bee5282f97fea614ca3aab3c10d6d6a81f495737f3787737ade4f9af413bc0298d7364c46dbcacedb88aba3b4add5e20c7927ca485152618468c3d23edc4d9cd368d4791e555fd2b8ec465a838f331950b862e23a9d8291dc879d7ea58209a3372319c8a5f2db16e3ebd1e349eb699a79faa391f8cee02ba5e9d1bc0f71b4e912681dfe4716c490dbf06199553c3bac487a1f2964d2f5fd7f064807dd11c3ca2f12c7a3ec79362c247f63d20d3ca52f0474b47c40a394ddfed196dce0259bf849bcb86f2d4919522d46f87443998f7ed5e40da41a80428d3b6e3845a9b377b3c6577add73ead5d1dc4d3620b53818be04d9f7ba74600cf5b462a7ed38b53b701465a152983c8fabe301fc42bebcb7c631e94afec308dee54b51e9c1df0f446fcd47612e90a275e51516310c59eb67c1e3b2da93bd52a7c9c4135fdc36027aad74c3cfd5c6ca6f5ae914a7cab1a3a5d397422163c49c609f53bd370fdecb126cea447defd3d448dadf5079430c058cba11fbb17c14ea71f96091f9a5d3a034ae9b34ac7a0b1d4eca440a51e4cd265911eeba260345b28ac84c065553e9aace53f1f29aa6b80ef7c4070192e4c12cb4389c3476b1f0a69825fdf4de60e9d02266fe9f50cba35775b2103bf85b312b04f3c6bec4b67e1b642a6b9bbef45d28ea1af055bf3c6cc62cb571cfbc4229c7d5aa62a2ed3ce2f42666fa295c71f44263c703d207fb6925f303a3facbd7afa4dccb0b6c37cf8e8a3fdc8ed1cfff049b48a94e50a5631a75589317dbcfd154f16e7dddac2945baf059a2aa4b14b9ac1d411c81dc600343abf5e9c4750e190a5116bab2258d8f1d5e0d3ab740423267be7e21c2eac41ae2aefead42fd71f91c4c3694617fb7fc265a48c3b82eea6e57c90824914847f857deb94c810b34ad53a9824127c2fef4cc5d7fd23307dd90c01bc32c79c2344459a58442b59260d8e21dc41f0b54d5d5433b9fd44ba4803766cacfec5bb5fd1ca3ccbc7c11cfd7274b526b9b61a231499a83831b9be1f708cde614165ce3bd0ccd42ab401bcd35143199d43395107e240e61c3abbcbad69a53ec9205bc2946dab619214ae55dfc6aad9a72683cb84f489efd02f1d439d6abfc4a9d2588c4db6419a7dd6c2387461298941a1d8d5bf4c0e35d0294014f217985cca434d557899c3090c236efe06bc9f2c5dc46f67896d56450a0aa4b6b6247ce45c12a1f547825cbac09f13bb48200ee1f85b00a0ce88723c19449fe2bbe500861bb03dbc2ae489e9b3f5ddaea3b4459be8aebd66cdc054affa87d60e0e86bb0ce56f604f697c5be3cb868e6dad28e3366ef5b6e9a26f8e1ba44d700eda13fa3f589ae638843a8a98c157f25c5e88c3df285e1e70d32110614c51d0e0a74abc7800006cf0d1d3d66e84ec726edc5c52f26f702d182e702be580bf74670201ebeffecc62630b637320626cbac4e9e98c608252e3932da36804e3e1e3ec3bee53bcf0071088c84f2a014b0122dcd9507d6003e63e34d7b59807dd24907e17ba43b83af0b734d9861870f137464be924a415a7607d7c2936c9156f6bc604c51600c558cdf18fe73fffa575443a4174311ecab11cd96572306b00a8998c20bb3879c37c9d400b06f03fd7b54ab24cefc134176df98af05086839f83eeaa9efa3e7629bdb0bc8377020b040e86cf36ff9f2bcc788091c9285b423cc7670a8290c394db287b24533b508a7df6786d571e6be8cd989ea2d1b846a03f24fcdae10333f55461716292e0589efbf61462943b8c8544ac128c8ce01e99ae5ba81cf037e86e1f35271c405c640a8429bc189a749033b831ef71bfb05fa72d2da716f2d86046296f481e4364f7e033dcb4fed15eb0937a66b62143ad51e76242f4cf425d662eeeb179a46a059489c2bbdee163cf5ac3d0fb6441bf171a7c34bbbcf2e3a59e637d35f32301d9d4a85b2a1db1a5cb6fffa7ebec998674711fdfd49297d7ac33f5c89d0999172bc3dad8e76ac1f081e4c1bb755562ff5715361000f56fb464881dfe6abb4f039a139f8fb2e2dca14b895ad3ee1d2835e0cd47051ea34d855b7c8387ef1a85d94b851602cbdb2242a2afb59d26292be2ebbd8ca3b2866b293c1ef2048dd65addb63230643502ab8e9548dfee031ee8306344f89973dc22712ae6896ab40c61e6093c026524da15ca192b1ecd14ec10cebfea7faed1a9bae2be7edf9c53182805fa4af868751ff3758b9c4f7e877dc8e16475592c85bda5a62c1b38938ac3b7031773c06c5eb5539baeb0588e6ede91d2da317a1a823045e375bb4ac29d6dc75d228a4ade916671eccd320ee5c0298650b541d98c4d1e09ed841f1cffbf0c7551c5ae725ad0f77f612829a409becb4e60ccc3cbb80d77e8d9bac59cfcac2c8a4c857f862747473148d9089dc56ed827784a63390eeb78f791c75c4eb3a1efad0f75e062cc4948e4b1b67a373494b88ff819a695ceac580bdd7b2c63222a663432e31b8531ee74d34afa70266ffe08d6ab6439c1b442df9195bd1b729d9ebfa25f326e48f7104303120046b2f1eb45c59a415b68d9cc3f6ca68dadf64748393f4c1f4a5876173ef0c95ea73c682b05e9e05c9a8a1d65500106a980f0a0effa10b93a03715f40f851d122a15fd4b60740a711b1121c146bb59b740ccf8db57b2eee36e4c5a3c6aadaca73b9637cb21f1d87acd9b76885b8694a5d036b6e3dde6ceb589575b6414bef68ae179973b5e04012a3ad10c55f9049ccd757185583633543f556967796eeebb8348e969860fdeb9166f1a431d44a2ae6e73c75d3b891ea014ce2be631c9d1eb301c7043aa03b66218095c0375ed12090e5bc32c44e3ddfbbcbe48f8d396e489db24cd7d8779d659b48193b96374e2937d3087e911b4d1c70cef3b984a72f80ed2f17ef50aab6f5931c897367aa6dd86e8e93de921c611f112f676e34b4ee720f46434b2c70742c1af99bee1b0c72683cd840bbba4e75e3a0128d0ebf1010dea64f896ef3cfd82a73fe329ce53b63697cb7bc0c03e127fd59d3241646f62a25ceb692d9e469c649dec8b693975d718d89394345b684ea2507d295422c88892de4e69c71e2dbf6bfd160a1c20b63e6e21b73d6bb14377ce3578664196f7ab33be87d3fe5772415361f857f6128b7ecd261638f4133f6384b1e2ba1c045985636e818e622460d4ef2af43267efb71168a92d22ec6b337158d3bcff2f0913ece4258ba89b5e19f8cae9c7f87ac8d051247f3635f398404f1d9fb1ace4082dd6897024070dddd7942b566d3f7f2a4fd9ec148397ddb814057c66b738f45ccb08f2f9ed8c5c8735a9c6938b7c5260a8cb0cbfd2bb9656592b4a70f368ecdcc8fdfcd52ad0ea0b9c3152147e9e441519eb1a69bc1b216fda362376ce23729bd384e8579c37aadf759b6c23ea54bfde28652d0b37cbcea221da9125919212cbad64e4aec3075bb70cc7eca71a25cb2a77c898fd775d74d61dcfcbff9d4d20102f3b5c804ccc3bb711b88140508a8802dcb205ebff54cbd9af252f36cf44b2337c382a7562ad6fc035313bff7f7d30a45fe01a083fb744460147a3a4b34b8dcc047607f38ba6b927c93872830e8d0c84031889b29afc2ef3944c4c0a3f3060f337bf0da8c7209e79a81f09330ecbf0024dcf85f7e4ec644867f5343f259825b1f421c51d30f3da87bbcb67946f133c6a4add120054b1b8a16a12a58352d37425f68d55e8e3a0391ed03085fef286214f51ab917906b2b9fcbf6ef85e04ba368f8811f9ec5a3a112c1b498f553e6659ed41b10ad141d921cca6878c7e1960380a2d0f86226f6b7e95a9639b41be4f73c392d3e7b133cfc2009f6a02edcfeb11bd2c84b3fcf50d4cb0d49f770ae2c71c73c766d327fb0c8d79c9908e1f7292eff8657f0ff0542df3127613c31cc2387d270b9510bd0a9709d80ed781b828d3a0f92df1be687206d572066d44b9afcf6b440b7298bf30f657fd9f986debea4f23032f37d711859854a134e7ad44613643eb7104e624e0bc34dddc2dd0ecee2bd04a87b03e06864710c51d561f28718c88ddc35dcbf23f1c5f0ef8149e24949e1d50572f039da9ef0fd29934fc6c7bcc9c44771b0d8c1dd739796eedd036abd78f4f26da1bb680138f9191eac4669d84e4866974257d8438f3253198b0478d33c325f633aaf85d9e6056766d1a17fa6cc1e1d639cf59dd06c1d8c1f4d48ea9ab2c3cc08fa812821eda5f32f17e808c14002aa846ee6f18177d27e6f715462e5562f0f7afbe6f5fa6ec031536b478733270175d928a46bc23cf14ed073854afd5032a8bef43d4c5664e159ffa7e9cdef4fe17c2c5ef36c6e6ddf342d16ce207cfe09b8067f2e48c6bae69b620d8be76725200b63522d766517203c6641e7d891469bf239c7a48d14f7c690e182c4f6a1fd02f2aa1b97dbecb8e120cc0fbd374ff598c53cb505698f94429466b97acb1a0232169e0e19e9ad7e3a41ee63e3b9ddcc0d40385c3d5acbb51e1987821de029bd9dc1fabd200a2e55bf786c52ae9ffc335d8a82e9156705ebfaff0992c1f5bca9d0d020834fea9163fcb691bf06deb6f92b76e2c21b3fa1625910846f3c715cbfb7de75209aec43c1a9acd2b4f833ac3a3883ba23349aa2a439871764c54ac8842a4a10280ff498072928aa1b4ced9ab3d9d27e4b5fab13bb979788848f7a4239896fe73a176a38766ed7fa1e84e88efb12a9c75c2e4431396b192b9dc4fa92343a702538feef01ae577fa443f4b50666bb87fc62577045963e8168981e1b6063b7454345a84dfdb278a4090d155220a18fd21e90a2c84943d947f5079aaa3e04364ffeb8a804df0f6e3c1b45782fcd5a4535940f26636ee79188ccb2ba071e0c832d9e9a9a391e0992e0f6965100ad2e6608d5db25847b2aa794ea6ee9b7687a1f9357320d073d06db8c38fbdc1be781bf53d05a5deeeb9e8d8ff66876b3a88b309d27bb83f8b3390947fd97c9f9ea41b215803088ac254cdab849291ed081e4a0cfd611fb7819d50753121bdda8770ad38d84bfadd9da9d7e9ffa5b9af3b9b8c13d7f73d920173137a6d4d17f2a2d0605926a68623947ee798dffe22746288195a718ae5dbfcc03b7da8a8ff0aa40c133b56c0c3ee95dd1dfaadafbdb37dc17ec84b0a0ce29ad46d50ef4fde31b6ba31c76498091fea2ef0c785be2daf492121dbc2101fd102000a"], 0x1028}}, 0x20000050)
open_by_handle_at(r3, 0x0, 0x830200)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r8, &(0x7f0000000340)=ANY=[], 0xff2e)
ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"})
r9 = syz_open_pts(r8, 0xc0000)
r10 = dup3(r9, r8, 0x0)
ioctl$TCSETSW(r10, 0x5403, &(0x7f0000000080)={0x3a, 0x3, 0x2, 0x1, 0x2, "299a40ffa617083bbb0967b0a4e7d25ef92284"})
sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x48404)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008", @ANYRES16, @ANYRES8=r3, @ANYRESHEX=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r12}, 0x18)
r13 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r13, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)

82.806113ms ago: executing program 7 (id=16941):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x12, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0364, 0x0, 0x0, 0x0, 0x1000}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff9}, @jmp={0x5, 0x0, 0x3, 0x9, 0x3, 0x20, 0xfffffffffffffff0}, @generic={0x5, 0x7, 0xf, 0x0, 0x9}, @map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000000}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000600)='syzkaller\x00', 0x65d, 0x25, &(0x7f0000000640)=""/37, 0x41000, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x2, 0x6, 0x5}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000700)=[r1, r1], &(0x7f0000000740)=[{0x0, 0x2, 0xf, 0x5}, {0x5, 0x3, 0xd, 0x2}, {0x3, 0x4, 0xb, 0x9}, {0x0, 0x8, 0xe, 0x8}, {0x0, 0x1, 0x5, 0x7}, {0x3, 0x5, 0x4}, {0x5, 0x2, 0x7, 0x657ee51301f9a90c}, {0x1, 0x2, 0x4, 0xc}], 0x10, 0xca}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0x6, &(0x7f0000000140)=@raw=[@map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x5}, @alu={0x7, 0x0, 0x9, 0x2, 0x3, 0x50, 0xffffffffffffffff}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0xa6, &(0x7f0000000440)=""/166, 0x41100, 0x86, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0xc, 0x40, 0x4e5}, 0x10, 0x0, r3, 0x6, 0x0, &(0x7f0000000880)=[{0x2, 0x2, 0xf, 0x8}, {0x1, 0x5, 0xb, 0x7}, {0x4, 0x2, 0x7}, {0x2, 0x5, 0x6}, {0x3, 0x3, 0x5, 0x2}, {0x5, 0x3, 0x2, 0x9}], 0x10, 0x8}, 0x94)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)

0s ago: executing program 7 (id=16942):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
mq_open(0x0, 0x6e93ebbbcc0884f2, 0x0, 0x0)

kernel console output (not intermixed with test programs):

0007fb0b1126090 RCX: 00007fb0b0ecf749
[ 1005.650737][T17795] RDX: c0eb25bde518a8ba RSI: 0000200000000340 RDI: 0000000000000009
[ 1005.650761][T17795] RBP: 00007fb0af916090 R08: 0000000000000000 R09: 0000000000000000
[ 1005.650777][T17795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1005.650794][T17795] R13: 00007fb0b1126128 R14: 00007fb0b1126090 R15: 00007ffe0479e088
[ 1005.650820][T17795]  </TASK>
[ 1005.854926][T17798] loop7: detected capacity change from 0 to 1024
[ 1005.867385][T17798] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.16384: Failed to acquire dquot type 0
[ 1005.887888][T17798] EXT4-fs error (device loop7): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[ 1005.902943][T17798] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #13: comm syz.7.16384: corrupted inode contents
[ 1005.915322][T17798] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #13: comm syz.7.16384: mark_inode_dirty error
[ 1005.928476][T17798] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #13: comm syz.7.16384: corrupted inode contents
[ 1005.944876][T17807] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[ 1005.957326][T17798] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #13: comm syz.7.16384: mark_inode_dirty error
[ 1005.973543][T17798] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #13: comm syz.7.16384: corrupted inode contents
[ 1005.993709][T17798] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem
[ 1006.013376][T17798] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #13: comm syz.7.16384: corrupted inode contents
[ 1006.025951][T17798] EXT4-fs error (device loop7): ext4_truncate:4635: inode #13: comm syz.7.16384: mark_inode_dirty error
[ 1006.037629][T17798] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem
[ 1006.051751][T17816] loop1: detected capacity change from 0 to 512
[ 1006.058403][T17798] EXT4-fs (loop7): 1 truncate cleaned up
[ 1006.064652][T17798] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1006.080530][T17816] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.16392: iget: bad extra_isize 90 (inode size 256)
[ 1006.098147][T17816] EXT4-fs (loop1): Remounting filesystem read-only
[ 1006.104920][T17816] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30)
[ 1006.114494][T17816] EXT4-fs (loop1): 1 orphan inode deleted
[ 1006.115854][T14173] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1006.121236][T17816] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1006.167495][T14934] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1006.278865][T17833] loop3: detected capacity change from 0 to 512
[ 1006.285859][T17833] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1006.296367][T17833] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.16396: invalid block
[ 1006.325121][T17837] loop1: detected capacity change from 0 to 1024
[ 1006.331983][T17833] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.16396: invalid indirect mapped block 4294967295 (level 1)
[ 1006.332585][T17837] journal_path: Non-blockdev passed as './file1'
[ 1006.352780][T17837] EXT4-fs: error: could not find journal device path
[ 1006.367781][T17833] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.16396: invalid indirect mapped block 4294967295 (level 1)
[ 1006.382809][T17833] EXT4-fs (loop3): 2 truncates cleaned up
[ 1006.390001][T17833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1006.429411][T17847] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16402'.
[ 1006.499220][T17849] netlink: 12 bytes leftover after parsing attributes in process `syz.7.16403'.
[ 1006.524253][T17860] loop1: detected capacity change from 0 to 512
[ 1006.619622][T17874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16412'.
[ 1006.649603][T17872] SELinux:  policydb magic number 0x4c5047 does not match expected magic number 0xf97cff8c
[ 1006.660504][T17872] SELinux: failed to load policy
[ 1006.660974][T17874] xt_bpf: check failed: parse error
[ 1006.701305][T17876] loop7: detected capacity change from 0 to 2048
[ 1006.711975][T17883] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16416'.
[ 1006.726041][T17880] loop1: detected capacity change from 0 to 1024
[ 1006.726672][T17876] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[ 1006.733747][T17880] journal_path: Non-blockdev passed as './file1'
[ 1006.751115][T17880] EXT4-fs: error: could not find journal device path
[ 1007.111767][T17876] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[ 1007.348712][T13754] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1007.373647][T17876] EXT4-fs (loop7): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 33 with error 28
[ 1007.386226][T17876] EXT4-fs (loop7): This should not happen!! Data will be lost
[ 1007.386226][T17876] 
[ 1007.395996][T17876] EXT4-fs (loop7): Total free blocks count 0
[ 1007.402039][T17876] EXT4-fs (loop7): Free/Dirty block details
[ 1007.407972][T17876] EXT4-fs (loop7): free_blocks=2415919104
[ 1007.413785][T17876] EXT4-fs (loop7): dirty_blocks=48
[ 1007.418948][T17876] EXT4-fs (loop7): Block reservation details
[ 1007.424959][T17876] EXT4-fs (loop7): i_reserved_data_blocks=3
[ 1007.537463][T17890] EXT4-fs (loop7): Online defrag not supported with bigalloc
[ 1007.837264][T17913] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16424'.
[ 1007.858048][T17913] netlink: 24 bytes leftover after parsing attributes in process `syz.6.16424'.
[ 1007.993008][T17924] bond1 (unregistering): Released all slaves
[ 1008.002827][ T2948] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1008.041760][T17919] loop7: detected capacity change from 0 to 512
[ 1008.083156][T17919] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1008.133490][T17919] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.16425: invalid block
[ 1008.207463][T17919] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.16425: invalid indirect mapped block 4294967295 (level 1)
[ 1008.226132][T17919] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.16425: invalid indirect mapped block 4294967295 (level 1)
[ 1008.251904][T17919] EXT4-fs (loop7): 2 truncates cleaned up
[ 1008.269128][T17919] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1008.285083][T17937] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1008.303483][T17937] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.16429: invalid block
[ 1008.330701][T14173] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1008.341471][T17937] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.16429: invalid indirect mapped block 4294967295 (level 1)
[ 1008.367439][T17942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16431'.
[ 1008.374129][T17937] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.16429: invalid indirect mapped block 4294967295 (level 1)
[ 1008.376732][T17942] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16431'.
[ 1008.391611][T17937] EXT4-fs (loop3): 2 truncates cleaned up
[ 1008.403915][T17942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17942 comm=syz.1.16431
[ 1008.408345][T17940] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.16430: Failed to acquire dquot type 0
[ 1008.430873][T17937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1008.442137][T17945] syzkaller0: entered promiscuous mode
[ 1008.444096][T17940] EXT4-fs error (device loop7): mb_free_blocks:2037: group 0, inode 13: 
[ 1008.448917][T17945] syzkaller0: entered allmulticast mode
[ 1008.462972][T17940] block 144:freeing already freed block (bit 9); block bitmap corrupt.
[ 1008.474511][T17940] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #13: comm syz.7.16430: corrupted inode contents
[ 1008.497271][T17940] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #13: comm syz.7.16430: mark_inode_dirty error
[ 1008.509413][T17940] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #13: comm syz.7.16430: corrupted inode contents
[ 1008.522703][T17940] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #13: comm syz.7.16430: mark_inode_dirty error
[ 1008.534414][T17940] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #13: comm syz.7.16430: corrupted inode contents
[ 1008.546868][T17940] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem
[ 1008.555726][T17940] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #13: comm syz.7.16430: corrupted inode contents
[ 1008.567954][T17940] EXT4-fs error (device loop7): ext4_truncate:4635: inode #13: comm syz.7.16430: mark_inode_dirty error
[ 1008.579536][T17940] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem
[ 1008.589442][T17940] EXT4-fs (loop7): 1 truncate cleaned up
[ 1008.596153][T17940] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1008.648995][T14173] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1008.724748][T17953] iso9660: Unknown parameter ''
[ 1008.746294][T17958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17958 comm=syz.7.16435
[ 1008.853960][T17960] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #18: comm syz.7.16436: iget: bad extra_isize 90 (inode size 256)
[ 1008.873541][T17960] EXT4-fs (loop7): Remounting filesystem read-only
[ 1008.885959][T17960] EXT4-fs warning (device loop7): ext4_evict_inode:273: xattr delete (err -30)
[ 1008.896063][T17960] EXT4-fs (loop7): 1 orphan inode deleted
[ 1008.902671][T17960] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1008.936319][T14173] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1009.000009][T13754] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1009.071434][T17976] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1009.085245][T17976] EXT4-fs error (device loop3): ext4_quota_enable:7173: comm syz.3.16442: Bad quota inum: 4, type: 2
[ 1009.097105][T17976] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=4). Please run e2fsck to fix.
[ 1009.117351][T17973] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1009.135762][T17965] FAULT_INJECTION: forcing a failure.
[ 1009.135762][T17965] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1009.149098][T17965] CPU: 0 UID: 0 PID: 17965 Comm: syz.8.16439 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[ 1009.149216][T17965] Tainted: [W]=WARN
[ 1009.149237][T17965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1009.149254][T17965] Call Trace:
[ 1009.149261][T17965]  <TASK>
[ 1009.149318][T17965]  __dump_stack+0x1d/0x30
[ 1009.149344][T17965]  dump_stack_lvl+0xe8/0x140
[ 1009.149393][T17965]  dump_stack+0x15/0x1b
[ 1009.149444][T17965]  should_fail_ex+0x265/0x280
[ 1009.149472][T17965]  should_fail+0xb/0x20
[ 1009.149493][T17965]  should_fail_usercopy+0x1a/0x20
[ 1009.149524][T17965]  _copy_to_user+0x20/0xa0
[ 1009.149562][T17965]  simple_read_from_buffer+0xb5/0x130
[ 1009.149587][T17965]  proc_fail_nth_read+0x10e/0x150
[ 1009.149617][T17965]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1009.149711][T17965]  vfs_read+0x1a8/0x770
[ 1009.149797][T17965]  ? __rcu_read_unlock+0x4f/0x70
[ 1009.149817][T17965]  ? __fget_files+0x184/0x1c0
[ 1009.149867][T17965]  ? mutex_lock+0x58/0x90
[ 1009.149894][T17965]  ksys_read+0xda/0x1a0
[ 1009.149920][T17965]  __x64_sys_read+0x40/0x50
[ 1009.149945][T17965]  x64_sys_call+0x2889/0x3000
[ 1009.149977][T17965]  do_syscall_64+0xd8/0x2a0
[ 1009.150133][T17965]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1009.150155][T17965] RIP: 0033:0x7fb0b0ece15c
[ 1009.150171][T17965] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1009.150192][T17965] RSP: 002b:00007fb0af937030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1009.150217][T17965] RAX: ffffffffffffffda RBX: 00007fb0b1125fa0 RCX: 00007fb0b0ece15c
[ 1009.150241][T17965] RDX: 000000000000000f RSI: 00007fb0af9370a0 RDI: 0000000000000004
[ 1009.150257][T17965] RBP: 00007fb0af937090 R08: 0000000000000000 R09: 0000000000000000
[ 1009.150333][T17965] R10: ffffffffff600000 R11: 0000000000000246 R12: 0000000000000001
[ 1009.150350][T17965] R13: 00007fb0b1126038 R14: 00007fb0b1125fa0 R15: 00007ffe0479e088
[ 1009.150370][T17965]  ? 0xffffffffff600000
[ 1009.150393][T17965]  </TASK>
[ 1009.154402][T17973] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1009.158022][T17976] EXT4-fs (loop3): mount failed
[ 1009.374101][T14173] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1009.421078][T17976] EXT4-fs: quotafile must be on filesystem root
[ 1009.583076][T18001] EXT4-fs (loop7): unable to read superblock
[ 1009.651313][T18009] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1009.661370][T18009] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.16451: invalid block
[ 1009.677736][T18009] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.16451: invalid indirect mapped block 4294967295 (level 1)
[ 1009.708728][T18009] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.16451: invalid indirect mapped block 4294967295 (level 1)
[ 1009.748046][T18008] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1009.794286][   T29] kauditd_printk_skb: 790 callbacks suppressed
[ 1009.794304][   T29] audit: type=1400 audit(1765549969.588:78487): avc:  denied  { setattr } for  pid=18007 comm="syz.1.16453" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 1009.837332][T18009] EXT4-fs (loop3): 2 truncates cleaned up
[ 1009.843519][T18009] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1009.888867][T14934] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1009.905491][T18001] set_capacity_and_notify: 10 callbacks suppressed
[ 1009.905507][T18001] loop7: detected capacity change from 0 to 512
[ 1009.928947][T17993] Set syz1 is full, maxelem 65536 reached
[ 1009.945986][T18001] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #15: comm syz.7.16450: corrupted inode contents
[ 1009.959394][   T29] audit: type=1326 audit(1765549969.758:78488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18017 comm="syz.1.16454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d08d7f749 code=0x7ffc0000
[ 1009.967635][T18001] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem
[ 1010.000317][   T29] audit: type=1326 audit(1765549969.758:78489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18017 comm="syz.1.16454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d08d7f749 code=0x7ffc0000
[ 1010.024172][   T29] audit: type=1326 audit(1765549969.758:78490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18017 comm="syz.1.16454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f4d08d7f749 code=0x7ffc0000
[ 1010.048688][   T29] audit: type=1326 audit(1765549969.758:78491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18017 comm="syz.1.16454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d08d7f749 code=0x7ffc0000
[ 1010.056729][T18020] loop1: detected capacity change from 0 to 1024
[ 1010.072510][   T29] audit: type=1326 audit(1765549969.758:78492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18017 comm="syz.1.16454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d08d7f749 code=0x7ffc0000
[ 1010.072548][   T29] audit: type=1326 audit(1765549969.758:78493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18017 comm="syz.1.16454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f4d08d7f749 code=0x7ffc0000
[ 1010.072580][   T29] audit: type=1326 audit(1765549969.758:78494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18017 comm="syz.1.16454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d08d7f749 code=0x7ffc0000
[ 1010.081355][ T3846] Bluetooth: hci0: command 0x1003 tx timeout
[ 1010.102721][   T29] audit: type=1326 audit(1765549969.758:78495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18017 comm="syz.1.16454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d08d7f749 code=0x7ffc0000
[ 1010.102776][   T29] audit: type=1326 audit(1765549969.758:78496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18017 comm="syz.1.16454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f4d08d7f749 code=0x7ffc0000
[ 1010.137785][T18001] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #15: comm syz.7.16450: corrupted inode contents
[ 1010.150647][T31831] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 1010.158419][T18001] EXT4-fs error (device loop7): ext4_evict_inode:301: inode #15: comm syz.7.16450: mark_inode_dirty error
[ 1010.236606][T18022] __nla_validate_parse: 2 callbacks suppressed
[ 1010.236627][T18022] netlink: 24 bytes leftover after parsing attributes in process `syz.8.16456'.
[ 1010.253049][T18001] EXT4-fs (loop7): 1 orphan inode deleted
[ 1010.259873][T18020] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1010.276262][T18001] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1010.428833][T14934] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1010.544911][T13754] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1010.884597][T18060] loop1: detected capacity change from 0 to 764
[ 1010.973588][T18065] loop1: detected capacity change from 0 to 512
[ 1010.988618][T18065] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1011.017927][T18065] EXT4-fs error (device loop1): ext4_quota_enable:7173: comm syz.1.16469: Bad quota inum: 4, type: 2
[ 1011.031660][T18065] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=4). Please run e2fsck to fix.
[ 1011.051209][T14173] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1011.060795][T18065] EXT4-fs (loop1): mount failed
[ 1011.087203][T18065] loop1: detected capacity change from 0 to 512
[ 1011.094300][T18065] EXT4-fs: quotafile must be on filesystem root
[ 1011.188635][T18071] loop7: detected capacity change from 0 to 512
[ 1011.207741][T18071] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1011.253407][T18071] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.16471: invalid block
[ 1011.286698][T18071] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.16471: invalid indirect mapped block 4294967295 (level 1)
[ 1011.297833][T18077] loop1: detected capacity change from 0 to 512
[ 1011.302953][T18071] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.16471: invalid indirect mapped block 4294967295 (level 1)
[ 1011.307946][T18077] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1011.325249][T18071] EXT4-fs (loop7): 2 truncates cleaned up
[ 1011.336632][T18071] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1011.358551][T18071] EXT4-fs error (device loop7): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.7.16471: path /210/file0/file0: bad entry in directory: directory entry overrun - offset=196864, inode=4278190093, rec_len=196860, size=60 fake=0
[ 1011.359409][T18077] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.16472: invalid block
[ 1011.394038][T18077] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.16472: invalid indirect mapped block 4294967295 (level 1)
[ 1011.459006][T18077] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.16472: invalid indirect mapped block 4294967295 (level 1)
[ 1011.473662][T18077] EXT4-fs (loop1): 2 truncates cleaned up
[ 1011.480080][T18077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1011.555754][T18094] FAULT_INJECTION: forcing a failure.
[ 1011.555754][T18094] name failslab, interval 1, probability 0, space 0, times 0
[ 1011.568547][T18094] CPU: 1 UID: 0 PID: 18094 Comm: syz.3.16478 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[ 1011.568590][T18094] Tainted: [W]=WARN
[ 1011.568649][T18094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1011.568666][T18094] Call Trace:
[ 1011.568675][T18094]  <TASK>
[ 1011.568687][T18094]  __dump_stack+0x1d/0x30
[ 1011.568720][T18094]  dump_stack_lvl+0xe8/0x140
[ 1011.568751][T18094]  dump_stack+0x15/0x1b
[ 1011.568794][T18094]  should_fail_ex+0x265/0x280
[ 1011.568825][T18094]  should_failslab+0x8c/0xb0
[ 1011.568857][T18094]  kmem_cache_alloc_node_noprof+0x6b/0x4c0
[ 1011.568996][T18094]  ? __alloc_skb+0x324/0x4d0
[ 1011.569035][T18094]  __alloc_skb+0x324/0x4d0
[ 1011.569065][T18094]  ? __alloc_skb+0x24d/0x4d0
[ 1011.569099][T18094]  netlink_alloc_large_skb+0xbf/0xf0
[ 1011.569132][T18094]  netlink_sendmsg+0x3cf/0x6b0
[ 1011.569173][T18094]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1011.569212][T18094]  __sock_sendmsg+0x145/0x180
[ 1011.569260][T18094]  ____sys_sendmsg+0x31e/0x4a0
[ 1011.569300][T18094]  ___sys_sendmsg+0x17b/0x1d0
[ 1011.569357][T18094]  __x64_sys_sendmsg+0xd4/0x160
[ 1011.569451][T18094]  x64_sys_call+0x17ba/0x3000
[ 1011.569549][T18094]  do_syscall_64+0xd8/0x2a0
[ 1011.569674][T18094]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1011.569703][T18094] RIP: 0033:0x7ff5e7edf749
[ 1011.569723][T18094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1011.569759][T18094] RSP: 002b:00007ff5e693f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1011.569827][T18094] RAX: ffffffffffffffda RBX: 00007ff5e8135fa0 RCX: 00007ff5e7edf749
[ 1011.569844][T18094] RDX: 0000000020008844 RSI: 00002000000000c0 RDI: 0000000000000007
[ 1011.569859][T18094] RBP: 00007ff5e693f090 R08: 0000000000000000 R09: 0000000000000000
[ 1011.569900][T18094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1011.569916][T18094] R13: 00007ff5e8136038 R14: 00007ff5e8135fa0 R15: 00007ffd98c139b8
[ 1011.569939][T18094]  </TASK>
[ 1011.957754][T18100] FAULT_INJECTION: forcing a failure.
[ 1011.957754][T18100] name failslab, interval 1, probability 0, space 0, times 0
[ 1011.970655][T18100] CPU: 1 UID: 0 PID: 18100 Comm: syz.6.16480 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[ 1011.970728][T18100] Tainted: [W]=WARN
[ 1011.970757][T18100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1011.970772][T18100] Call Trace:
[ 1011.970782][T18100]  <TASK>
[ 1011.970794][T18100]  __dump_stack+0x1d/0x30
[ 1011.970828][T18100]  dump_stack_lvl+0xe8/0x140
[ 1011.970914][T18100]  dump_stack+0x15/0x1b
[ 1011.970941][T18100]  should_fail_ex+0x265/0x280
[ 1011.971031][T18100]  should_failslab+0x8c/0xb0
[ 1011.971060][T18100]  kmem_cache_alloc_node_noprof+0x6b/0x4c0
[ 1011.971094][T18100]  ? __alloc_skb+0x324/0x4d0
[ 1011.971268][T18100]  __alloc_skb+0x324/0x4d0
[ 1011.971301][T18100]  ? __alloc_skb+0x24d/0x4d0
[ 1011.971392][T18100]  netlink_alloc_large_skb+0xbf/0xf0
[ 1011.971422][T18100]  netlink_sendmsg+0x3cf/0x6b0
[ 1011.971465][T18100]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1011.971576][T18100]  __sock_sendmsg+0x145/0x180
[ 1011.971603][T18100]  ____sys_sendmsg+0x31e/0x4a0
[ 1011.971643][T18100]  ___sys_sendmsg+0x17b/0x1d0
[ 1011.971698][T18100]  __x64_sys_sendmsg+0xd4/0x160
[ 1011.971733][T18100]  x64_sys_call+0x17ba/0x3000
[ 1011.971767][T18100]  do_syscall_64+0xd8/0x2a0
[ 1011.971892][T18100]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1011.971964][T18100] RIP: 0033:0x7fe85d06f749
[ 1011.971993][T18100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1011.972012][T18100] RSP: 002b:00007fe85bad7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1011.972042][T18100] RAX: ffffffffffffffda RBX: 00007fe85d2c5fa0 RCX: 00007fe85d06f749
[ 1011.972061][T18100] RDX: 0000000020000090 RSI: 0000200000000340 RDI: 0000000000000003
[ 1011.972080][T18100] RBP: 00007fe85bad7090 R08: 0000000000000000 R09: 0000000000000000
[ 1011.972129][T18100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1011.972143][T18100] R13: 00007fe85d2c6038 R14: 00007fe85d2c5fa0 R15: 00007ffdb1bc0a88
[ 1011.972174][T18100]  </TASK>
[ 1012.209759][T14173] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1012.222439][T14934] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1012.324513][T18131] loop7: detected capacity change from 0 to 512
[ 1012.350760][T18136] loop3: detected capacity change from 0 to 512
[ 1012.358161][T18131] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #18: comm syz.7.16493: iget: bad extra_isize 90 (inode size 256)
[ 1012.372390][T18131] EXT4-fs (loop7): Remounting filesystem read-only
[ 1012.379262][T18131] EXT4-fs warning (device loop7): ext4_evict_inode:273: xattr delete (err -30)
[ 1012.388588][T18131] EXT4-fs (loop7): 1 orphan inode deleted
[ 1012.395741][T18131] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1012.430567][T14173] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1012.449312][T18142] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16500'.
[ 1012.466840][T18144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16497'.
[ 1012.480569][T18144] loop3: detected capacity change from 0 to 512
[ 1012.510353][T18144] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1012.514037][T18125] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18125 comm=syz.1.16491
[ 1012.551145][T18144] ext4 filesystem being mounted at /247/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1012.587183][T18152] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1012.603502][T18144] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.16497: Failed to acquire dquot type 0
[ 1012.619096][T18152] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.16499: invalid block
[ 1012.645134][T18152] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.16499: invalid indirect mapped block 4294967295 (level 1)
[ 1012.686396][T18152] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.16499: invalid indirect mapped block 4294967295 (level 1)
[ 1012.704445][T18152] EXT4-fs (loop7): 2 truncates cleaned up
[ 1012.710889][T18152] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1012.726757][T18157] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1012.736680][T18152] EXT4-fs error (device loop7): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.7.16499: path /213/file0/file0: bad entry in directory: directory entry overrun - offset=196864, inode=4278190093, rec_len=196860, size=60 fake=0
[ 1012.762680][T18157] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.16502: invalid block
[ 1012.776666][T18157] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.16502: invalid indirect mapped block 4294967295 (level 1)
[ 1012.791913][T18157] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.16502: invalid indirect mapped block 4294967295 (level 1)
[ 1012.806601][T18157] EXT4-fs (loop1): 2 truncates cleaned up
[ 1012.813503][T18157] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1012.813526][T13754] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1012.893484][T18168] FAULT_INJECTION: forcing a failure.
[ 1012.893484][T18168] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1012.906664][T18168] CPU: 1 UID: 0 PID: 18168 Comm: syz.6.16506 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[ 1012.906713][T18168] Tainted: [W]=WARN
[ 1012.906720][T18168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1012.906737][T18168] Call Trace:
[ 1012.906746][T18168]  <TASK>
[ 1012.906757][T18168]  __dump_stack+0x1d/0x30
[ 1012.906860][T18168]  dump_stack_lvl+0xe8/0x140
[ 1012.906882][T18168]  dump_stack+0x15/0x1b
[ 1012.906903][T18168]  should_fail_ex+0x265/0x280
[ 1012.906947][T18168]  should_fail+0xb/0x20
[ 1012.906977][T18168]  should_fail_usercopy+0x1a/0x20
[ 1012.907006][T18168]  _copy_to_user+0x20/0xa0
[ 1012.907042][T18168]  simple_read_from_buffer+0xb5/0x130
[ 1012.907070][T18168]  proc_fail_nth_read+0x10e/0x150
[ 1012.907108][T18168]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1012.907164][T18168]  vfs_read+0x1a8/0x770
[ 1012.907181][T18168]  ? kern_path+0xbc/0x130
[ 1012.907205][T18168]  ? __rcu_read_unlock+0x4f/0x70
[ 1012.907378][T18168]  ? __fget_files+0x184/0x1c0
[ 1012.907483][T18168]  ? mutex_lock+0x58/0x90
[ 1012.907518][T18168]  ksys_read+0xda/0x1a0
[ 1012.907575][T18168]  __x64_sys_read+0x40/0x50
[ 1012.907594][T18168]  x64_sys_call+0x2889/0x3000
[ 1012.907618][T18168]  do_syscall_64+0xd8/0x2a0
[ 1012.907730][T18168]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1012.907752][T18168] RIP: 0033:0x7fe85d06e15c
[ 1012.907767][T18168] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1012.907787][T18168] RSP: 002b:00007fe85bad7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1012.907872][T18168] RAX: ffffffffffffffda RBX: 00007fe85d2c5fa0 RCX: 00007fe85d06e15c
[ 1012.907982][T18168] RDX: 000000000000000f RSI: 00007fe85bad70a0 RDI: 0000000000000005
[ 1012.907998][T18168] RBP: 00007fe85bad7090 R08: 0000000000000000 R09: 0000000000000000
[ 1012.908014][T18168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1012.908093][T18168] R13: 00007fe85d2c6038 R14: 00007fe85d2c5fa0 R15: 00007ffdb1bc0a88
[ 1012.908120][T18168]  </TASK>
[ 1013.263428][T18191] FAULT_INJECTION: forcing a failure.
[ 1013.263428][T18191] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1013.276630][T18191] CPU: 0 UID: 0 PID: 18191 Comm: syz.8.16516 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[ 1013.276669][T18191] Tainted: [W]=WARN
[ 1013.276677][T18191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1013.276690][T18191] Call Trace:
[ 1013.276699][T18191]  <TASK>
[ 1013.276708][T18191]  __dump_stack+0x1d/0x30
[ 1013.276736][T18191]  dump_stack_lvl+0xe8/0x140
[ 1013.276833][T18191]  dump_stack+0x15/0x1b
[ 1013.276855][T18191]  should_fail_ex+0x265/0x280
[ 1013.276883][T18191]  should_fail+0xb/0x20
[ 1013.276904][T18191]  should_fail_usercopy+0x1a/0x20
[ 1013.276931][T18191]  _copy_to_user+0x20/0xa0
[ 1013.277017][T18191]  simple_read_from_buffer+0xb5/0x130
[ 1013.277043][T18191]  proc_fail_nth_read+0x10e/0x150
[ 1013.277131][T18191]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1013.277191][T18191]  vfs_read+0x1a8/0x770
[ 1013.277210][T18191]  ? __rcu_read_unlock+0x4f/0x70
[ 1013.277243][T18191]  ? __fget_files+0x184/0x1c0
[ 1013.277269][T18191]  ? mutex_lock+0x58/0x90
[ 1013.277298][T18191]  ksys_read+0xda/0x1a0
[ 1013.277320][T18191]  __x64_sys_read+0x40/0x50
[ 1013.277414][T18191]  x64_sys_call+0x2889/0x3000
[ 1013.277439][T18191]  do_syscall_64+0xd8/0x2a0
[ 1013.277474][T18191]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1013.277500][T18191] RIP: 0033:0x7fb0b0ece15c
[ 1013.277518][T18191] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1013.277607][T18191] RSP: 002b:00007fb0af937030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1013.277628][T18191] RAX: ffffffffffffffda RBX: 00007fb0b1125fa0 RCX: 00007fb0b0ece15c
[ 1013.277641][T18191] RDX: 000000000000000f RSI: 00007fb0af9370a0 RDI: 0000000000000006
[ 1013.277654][T18191] RBP: 00007fb0af937090 R08: 0000000000000000 R09: 0000000000000000
[ 1013.277686][T18191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1013.277699][T18191] R13: 00007fb0b1126038 R14: 00007fb0b1125fa0 R15: 00007ffe0479e088
[ 1013.277720][T18191]  </TASK>
[ 1013.502669][T14173] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1013.528702][T14934] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1013.912547][T18195] FAT-fs (loop7): bogus number of FAT sectors
[ 1013.918770][T18195] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 1013.953258][T18215] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1013.994970][T18215] EXT4-fs error (device loop1): ext4_quota_enable:7173: comm syz.1.16524: Bad quota inum: 4, type: 2
[ 1014.010829][T18215] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=4). Please run e2fsck to fix.
[ 1014.049280][T18218] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1014.061573][T18215] EXT4-fs (loop1): mount failed
[ 1014.072823][T18218] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #11: comm syz.3.16514: iget: bogus i_mode (1)
[ 1014.086669][T18218] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.16514: couldn't read orphan inode 11 (err -117)
[ 1014.099417][T18218] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1014.099919][T18215] EXT4-fs: quotafile must be on filesystem root
[ 1014.182222][T18224] netlink: 28 bytes leftover after parsing attributes in process `syz.6.16526'.
[ 1014.242671][T18227] EXT4-fs (loop7): unable to read superblock
[ 1014.394776][T13754] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1014.418504][T18227] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #15: comm syz.7.16527: corrupted inode contents
[ 1014.443192][T18227] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem
[ 1014.455113][T18227] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #15: comm syz.7.16527: corrupted inode contents
[ 1014.518774][T18227] EXT4-fs error (device loop7): ext4_evict_inode:301: inode #15: comm syz.7.16527: mark_inode_dirty error
[ 1014.546673][T18227] EXT4-fs (loop7): 1 orphan inode deleted
[ 1014.547570][T18241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16531'.
[ 1014.563913][T18227] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1014.598018][T18248] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1014.640928][T18248] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.16529: invalid block
[ 1014.675735][T18248] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.16529: invalid indirect mapped block 4294967295 (level 1)
[ 1014.697338][T18248] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.16529: invalid indirect mapped block 4294967295 (level 1)
[ 1014.731480][T18248] EXT4-fs (loop3): 2 truncates cleaned up
[ 1014.741483][T18248] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1014.863582][   T29] kauditd_printk_skb: 854 callbacks suppressed
[ 1014.863597][   T29] audit: type=1400 audit(1765549974.658:79349): avc:  denied  { create } for  pid=18226 comm=77DEA305FF07 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1015.237224][T14173] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1015.301654][T13754] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1015.317869][T18270] set_capacity_and_notify: 10 callbacks suppressed
[ 1015.317887][T18270] loop7: detected capacity change from 0 to 512
[ 1015.336087][T18270] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #18: comm syz.7.16541: iget: bad extra_isize 90 (inode size 256)
[ 1015.353078][T18270] EXT4-fs (loop7): Remounting filesystem read-only
[ 1015.357624][T18273] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16542'.
[ 1015.359892][T18270] EXT4-fs warning (device loop7): ext4_evict_inode:273: xattr delete (err -30)
[ 1015.377986][T18270] EXT4-fs (loop7): 1 orphan inode deleted
[ 1015.384361][T18270] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1015.407995][T18270] netlink: 28 bytes leftover after parsing attributes in process `syz.7.16541'.
[ 1015.425854][T18275] loop3: detected capacity change from 0 to 512
[ 1015.435055][T18275] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.16543: iget: bad extra_isize 90 (inode size 256)
[ 1015.448802][T18275] EXT4-fs (loop3): Remounting filesystem read-only
[ 1015.455446][T18275] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30)
[ 1015.464498][T18275] EXT4-fs (loop3): 1 orphan inode deleted
[ 1015.470674][T18275] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1015.720068][T18266] syz.6.16540 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[ 1015.734576][T18266] CPU: 1 UID: 0 PID: 18266 Comm: syz.6.16540 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[ 1015.734709][T18266] Tainted: [W]=WARN
[ 1015.734718][T18266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1015.734736][T18266] Call Trace:
[ 1015.734745][T18266]  <TASK>
[ 1015.734757][T18266]  __dump_stack+0x1d/0x30
[ 1015.734791][T18266]  dump_stack_lvl+0xe8/0x140
[ 1015.734821][T18266]  dump_stack+0x15/0x1b
[ 1015.734845][T18266]  dump_header+0x81/0x240
[ 1015.734929][T18266]  oom_kill_process+0x295/0x350
[ 1015.734953][T18266]  out_of_memory+0x97b/0xb80
[ 1015.734983][T18266]  try_charge_memcg+0x610/0xa10
[ 1015.735020][T18266]  obj_cgroup_charge_pages+0xa6/0x150
[ 1015.735123][T18266]  __memcg_kmem_charge_page+0x9f/0x170
[ 1015.735165][T18266]  __alloc_frozen_pages_noprof+0x18f/0x360
[ 1015.735207][T18266]  alloc_pages_mpol+0xb3/0x260
[ 1015.735289][T18266]  ? alloc_pages_noprof+0x61/0x130
[ 1015.735372][T18266]  alloc_pages_noprof+0x90/0x130
[ 1015.735410][T18266]  __vmalloc_node_range_noprof+0xa7b/0x1310
[ 1015.735455][T18266]  __kvmalloc_node_noprof+0x492/0x6b0
[ 1015.735556][T18266]  ? ip_set_alloc+0x24/0x30
[ 1015.735602][T18266]  ? ip_set_alloc+0x24/0x30
[ 1015.735653][T18266]  ip_set_alloc+0x24/0x30
[ 1015.735693][T18266]  hash_netiface_create+0x282/0x740
[ 1015.735801][T18266]  ? __pfx_hash_netiface_create+0x10/0x10
[ 1015.735842][T18266]  ip_set_create+0x3cc/0x970
[ 1015.735886][T18266]  ? __nla_parse+0x40/0x60
[ 1015.735923][T18266]  nfnetlink_rcv_msg+0x4c6/0x590
[ 1015.736046][T18266]  netlink_rcv_skb+0x123/0x220
[ 1015.736075][T18266]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[ 1015.736192][T18266]  nfnetlink_rcv+0x167/0x16c0
[ 1015.736219][T18266]  ? kmem_cache_free+0xe3/0x3a0
[ 1015.736283][T18266]  ? __kfree_skb+0x109/0x150
[ 1015.736308][T18266]  ? nlmon_xmit+0x4f/0x60
[ 1015.736326][T18266]  ? consume_skb+0x49/0x150
[ 1015.736402][T18266]  ? nlmon_xmit+0x4f/0x60
[ 1015.736469][T18266]  ? dev_hard_start_xmit+0x3b0/0x3e0
[ 1015.736564][T18266]  ? __dev_queue_xmit+0x138d/0x1ec0
[ 1015.736601][T18266]  ? __dev_queue_xmit+0x148/0x1ec0
[ 1015.736664][T18266]  ? ref_tracker_free+0x37d/0x3e0
[ 1015.736714][T18266]  ? __netlink_deliver_tap+0x4dc/0x500
[ 1015.736756][T18266]  netlink_unicast+0x5c0/0x690
[ 1015.736798][T18266]  netlink_sendmsg+0x58b/0x6b0
[ 1015.736865][T18266]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1015.736987][T18266]  __sock_sendmsg+0x145/0x180
[ 1015.737013][T18266]  ____sys_sendmsg+0x31e/0x4a0
[ 1015.737045][T18266]  ___sys_sendmsg+0x17b/0x1d0
[ 1015.737179][T18266]  __x64_sys_sendmsg+0xd4/0x160
[ 1015.737299][T18266]  x64_sys_call+0x17ba/0x3000
[ 1015.737330][T18266]  do_syscall_64+0xd8/0x2a0
[ 1015.737368][T18266]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1015.737397][T18266] RIP: 0033:0x7fe85d06f749
[ 1015.737459][T18266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1015.737493][T18266] RSP: 002b:00007fe85bad7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1015.737513][T18266] RAX: ffffffffffffffda RBX: 00007fe85d2c5fa0 RCX: 00007fe85d06f749
[ 1015.737596][T18266] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004
[ 1015.737613][T18266] RBP: 00007fe85d0f3f91 R08: 0000000000000000 R09: 0000000000000000
[ 1015.737630][T18266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1015.737647][T18266] R13: 00007fe85d2c6038 R14: 00007fe85d2c5fa0 R15: 00007ffdb1bc0a88
[ 1015.737674][T18266]  </TASK>
[ 1016.069787][T18266] memory: usage 307200kB, limit 307200kB, failcnt 36328
[ 1016.076940][T18266] memory+swap: usage 308556kB, limit 9007199254740988kB, failcnt 0
[ 1016.084960][T18266] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0
[ 1016.092347][T18266] Memory cgroup stats for /syz6:
[ 1016.093615][T18266] cache 0
[ 1016.098679][   T29] audit: type=1400 audit(1765549975.898:79350): avc:  denied  { tracepoint } for  pid=18288 comm="syz.1.16546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[ 1016.101583][T18266] rss 0
[ 1016.101595][T18266] shmem 0
[ 1016.101605][T18266] mapped_file 0
[ 1016.130809][T18266] dirty 0
[ 1016.131109][   T29] audit: type=1400 audit(1765549975.928:79351): avc:  denied  { write } for  pid=18288 comm="syz.1.16546" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1016.133752][T18266] writeback 0
[ 1016.133763][T18266] workingset_refault_anon 7212
[ 1016.133775][T18266] workingset_refault_file 366
[ 1016.167272][T18266] swap 1388544
[ 1016.170673][T18266] swapcached 16384
[ 1016.174435][T18266] pgpgin 871951
[ 1016.177955][T18266] pgpgout 871947
[ 1016.181528][T18266] pgfault 1076173
[ 1016.185161][T18266] pgmajfault 1856
[ 1016.188920][T18266] inactive_anon 4096
[ 1016.192846][T18266] active_anon 12288
[ 1016.196656][T18266] inactive_file 0
[ 1016.200492][T18266] active_file 0
[ 1016.203949][T18266] unevictable 0
[ 1016.207495][T18266] hierarchical_memory_limit 314572800
[ 1016.212907][T18266] hierarchical_memsw_limit 9223372036854771712
[ 1016.219169][T18266] total_cache 0
[ 1016.222632][T18266] total_rss 0
[ 1016.225911][T18266] total_shmem 0
[ 1016.229439][T18266] total_mapped_file 0
[ 1016.233416][T18266] total_dirty 0
[ 1016.236875][T18266] total_writeback 0
[ 1016.240711][T18266] total_workingset_refault_anon 7212
[ 1016.246067][T18266] total_workingset_refault_file 366
[ 1016.251301][T18266] total_swap 1388544
[ 1016.255196][T18266] total_swapcached 16384
[ 1016.259566][T18266] total_pgpgin 871951
[ 1016.263613][T18266] total_pgpgout 871947
[ 1016.267747][T18266] total_pgfault 1076173
[ 1016.271915][T18266] total_pgmajfault 1856
[ 1016.276067][T18266] total_inactive_anon 4096
[ 1016.280502][T18266] total_active_anon 12288
[ 1016.284837][T18266] total_inactive_file 0
[ 1016.289012][T18266] total_active_file 0
[ 1016.293035][T18266] total_unevictable 0
[ 1016.297102][T18266] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.16540,pid=18265,uid=0
[ 1016.312006][T18266] Memory cgroup out of memory: Killed process 18265 (syz.6.16540) total-vm:94028kB, anon-rss:1132kB, file-rss:22312kB, shmem-rss:128kB, UID:0 pgtables:148kB oom_score_adj:1000
[ 1016.365769][T14173] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1016.375508][T13754] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1016.442184][T18294] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=18294 comm=syz.6.16549
[ 1016.496300][   T29] audit: type=1326 audit(1765549976.288:79352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18301 comm="syz.8.16552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b0ecf749 code=0x7ffc0000
[ 1016.520143][   T29] audit: type=1326 audit(1765549976.288:79353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18301 comm="syz.8.16552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b0ecf749 code=0x7ffc0000
[ 1016.575804][T18298] loop1: detected capacity change from 0 to 512
[ 1016.583192][   T29] audit: type=1400 audit(1765549976.328:79354): avc:  denied  { read } for  pid=18297 comm="syz.6.16551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1016.602939][   T29] audit: type=1400 audit(1765549976.338:79355): avc:  denied  { bind } for  pid=18293 comm="syz.3.16548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1016.622606][   T29] audit: type=1326 audit(1765549976.338:79356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18301 comm="syz.8.16552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0b0ecf749 code=0x7ffc0000
[ 1016.646391][   T29] audit: type=1326 audit(1765549976.338:79357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18301 comm="syz.8.16552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b0ecf749 code=0x7ffc0000
[ 1016.670190][   T29] audit: type=1326 audit(1765549976.338:79358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18301 comm="syz.8.16552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b0ecf749 code=0x7ffc0000
[ 1016.712289][T18298] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.16550: iget: bad extra_isize 90 (inode size 256)
[ 1016.743631][T18298] EXT4-fs (loop1): Remounting filesystem read-only
[ 1016.786185][T18298] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30)
[ 1016.795496][T18298] EXT4-fs (loop1): 1 orphan inode deleted
[ 1016.801884][T18298] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1016.819210][T18298] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16550'.
[ 1016.849004][T14934] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1016.908027][T18320] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16555'.
[ 1016.961432][T18323] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16557'.
[ 1016.980177][T18327] loop3: detected capacity change from 0 to 512
[ 1016.991145][T18326] loop1: detected capacity change from 0 to 512
[ 1017.006969][T18327] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1017.025530][T18326] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1017.045254][T18327] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.16554: invalid block
[ 1017.058303][T18326] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.16556: invalid block
[ 1017.071331][T18327] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.16554: invalid indirect mapped block 4294967295 (level 1)
[ 1017.086889][T18326] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.16556: invalid indirect mapped block 4294967295 (level 1)
[ 1017.101940][T18327] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.16554: invalid indirect mapped block 4294967295 (level 1)
[ 1017.116918][T18327] EXT4-fs (loop3): 2 truncates cleaned up
[ 1017.123088][T18327] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1017.136019][T18326] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.16556: invalid indirect mapped block 4294967295 (level 1)
[ 1017.162366][T18326] EXT4-fs (loop1): 2 truncates cleaned up
[ 1017.170029][T18326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1017.177371][T18327] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.3.16554: path /256/file0/file0: bad entry in directory: directory entry overrun - offset=196864, inode=4278190093, rec_len=196860, size=60 fake=0
[ 1017.334601][T18300] syzkaller0: tun_chr_ioctl cmd 35108
[ 1017.410819][T18323] Set syz1 is full, maxelem 65536 reached
[ 1017.488779][T18333] netlink: 20 bytes leftover after parsing attributes in process `syz.8.16558'.
[ 1017.691794][T13754] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1017.709802][T18351] loop7: detected capacity change from 0 to 1024
[ 1017.722486][T18351] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.16566: Failed to acquire dquot type 0
[ 1017.780223][T18351] EXT4-fs error (device loop7): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[ 1017.807256][T18351] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #13: comm syz.7.16566: corrupted inode contents
[ 1017.819962][T18351] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #13: comm syz.7.16566: mark_inode_dirty error
[ 1017.832707][T18359] loop3: detected capacity change from 0 to 512
[ 1017.839160][T18351] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #13: comm syz.7.16566: corrupted inode contents
[ 1017.852087][T18351] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #13: comm syz.7.16566: mark_inode_dirty error
[ 1017.852458][T18359] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1017.874704][T18351] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #13: comm syz.7.16566: corrupted inode contents
[ 1017.897590][T18351] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem
[ 1017.910197][T18351] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #13: comm syz.7.16566: corrupted inode contents
[ 1017.924450][T18351] EXT4-fs error (device loop7): ext4_truncate:4635: inode #13: comm syz.7.16566: mark_inode_dirty error
[ 1017.935958][T18351] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem
[ 1017.945534][T18359] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.16567: invalid block
[ 1017.945757][T18351] EXT4-fs (loop7): 1 truncate cleaned up
[ 1018.000420][T18359] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.16567: invalid indirect mapped block 4294967295 (level 1)
[ 1018.020708][T18359] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.16567: invalid indirect mapped block 4294967295 (level 1)
[ 1018.058327][T18359] EXT4-fs (loop3): 2 truncates cleaned up
[ 1018.068220][T18376] loop1: detected capacity change from 0 to 512
[ 1018.080671][T18376] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1018.097152][T18376] EXT4-fs error (device loop1): ext4_quota_enable:7173: comm syz.1.16576: Bad quota inum: 4, type: 2
[ 1018.098960][T18359] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.3.16567: path /257/file0/file0: bad entry in directory: directory entry overrun - offset=196864, inode=4278190093, rec_len=196860, size=60 fake=0
[ 1018.115049][T18376] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=4). Please run e2fsck to fix.
[ 1018.147934][T18376] EXT4-fs (loop1): mount failed
[ 1018.170926][T18376] loop1: detected capacity change from 0 to 512
[ 1018.185917][T18376] EXT4-fs: quotafile must be on filesystem root
[ 1018.338228][T18397] netlink: 'syz.1.16584': attribute type 4 has an invalid length.
[ 1018.346133][T18397] netlink: 17 bytes leftover after parsing attributes in process `syz.1.16584'.
[ 1018.383272][T18398] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12)
[ 1018.389951][T18398] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1018.397491][T18398] vhci_hcd vhci_hcd.0: Device attached
[ 1018.411312][T18399] vhci_hcd: connection closed
[ 1018.411400][ T2962] vhci_hcd vhci_hcd.6: stop threads
[ 1018.421522][ T2962] vhci_hcd vhci_hcd.6: release socket
[ 1018.426939][ T2962] vhci_hcd vhci_hcd.6: disconnect device
[ 1018.462579][T18405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16586'.
[ 1018.473438][T18405] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16586'.
[ 1018.527803][T18412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16588'.
[ 1018.618335][T18420] loop3: detected capacity change from 0 to 1024
[ 1018.625791][T18420] EXT4-fs (loop3): unable to read superblock
[ 1018.699095][T18424] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: comm syz.1.16592: inode #4: comm syz.1.16592: iget: illegal inode #
[ 1018.712690][T18424] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.16592: error while reading EA inode 4 err=-117
[ 1018.727678][T18420] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.16590: corrupted inode contents
[ 1018.740037][T18420] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[ 1018.749635][T18420] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.16590: corrupted inode contents
[ 1018.761884][T18420] EXT4-fs error (device loop3): ext4_evict_inode:301: inode #15: comm syz.3.16590: mark_inode_dirty error
[ 1018.773889][T18420] EXT4-fs (loop3): 1 orphan inode deleted
[ 1019.436004][T18478] EXT4-fs: inline encryption not supported
[ 1019.441933][T18478] EXT4-fs: Ignoring removed orlov option
[ 1019.472608][T18480] EXT4-fs: inline encryption not supported
[ 1019.481285][T18478] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled
[ 1019.499278][T18465] Set syz1 is full, maxelem 65536 reached
[ 1019.500027][T18480] EXT4-fs: quotafile must be on filesystem root
[ 1019.561604][T18480] EXT4-fs: Ignoring removed orlov option
[ 1019.568095][T18478] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002]
[ 1019.576230][T18478] System zones: 0-1, 3-12
[ 1019.602190][T18480] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1019.619655][T18482] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[ 1019.627948][ T7510] IPVS: starting estimator thread 0...
[ 1019.737193][T18489] IPVS: using max 2208 ests per chain, 110400 per kthread
[ 1019.749504][T18493] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.16614: Failed to acquire dquot type 0
[ 1019.761493][T18493] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[ 1019.787358][T18493] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #13: comm syz.1.16614: corrupted inode contents
[ 1019.826340][T18493] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #13: comm syz.1.16614: mark_inode_dirty error
[ 1019.878552][T18493] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #13: comm syz.1.16614: corrupted inode contents
[ 1019.980423][T18493] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.16614: mark_inode_dirty error
[ 1020.001511][T18493] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #13: comm syz.1.16614: corrupted inode contents
[ 1020.025429][T18493] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[ 1020.034267][T18493] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #13: comm syz.1.16614: corrupted inode contents
[ 1020.058399][T18493] EXT4-fs error (device loop1): ext4_truncate:4635: inode #13: comm syz.1.16614: mark_inode_dirty error
[ 1020.077515][T18493] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[ 1020.094536][T18493] EXT4-fs (loop1): 1 truncate cleaned up
[ 1020.134022][   T29] kauditd_printk_skb: 556 callbacks suppressed
[ 1020.134035][   T29] audit: type=1400 audit(1765549979.928:79909): avc:  denied  { mount } for  pid=18507 comm="syz.1.16619" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[ 1020.243583][   T29] audit: type=1400 audit(1765549980.038:79910): avc:  denied  { unmount } for  pid=14934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[ 1020.460432][T18526] __nla_validate_parse: 2 callbacks suppressed
[ 1020.460454][T18526] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16626'.
[ 1020.636547][T18533] set_capacity_and_notify: 9 callbacks suppressed
[ 1020.636564][T18533] loop7: detected capacity change from 0 to 1024
[ 1020.677626][T18534] netlink: 'syz.3.16628': attribute type 4 has an invalid length.
[ 1020.685518][T18534] netlink: 17 bytes leftover after parsing attributes in process `syz.3.16628'.
[ 1020.708323][T18533] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1020.738953][T18536] loop1: detected capacity change from 0 to 1024
[ 1020.754528][T18533] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #11: comm syz.7.16615: iget: bogus i_mode (1)
[ 1020.767363][T18536] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1020.787454][T18533] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.16615: couldn't read orphan inode 11 (err -117)
[ 1020.807789][T18536] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #11: comm syz.1.16624: iget: bogus i_mode (1)
[ 1020.829753][T18536] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.16624: couldn't read orphan inode 11 (err -117)
[ 1021.030229][   T29] audit: type=1400 audit(1765549980.828:79911): avc:  denied  { setopt } for  pid=18542 comm="syz.3.16630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1021.069298][T18544] loop3: detected capacity change from 0 to 1024
[ 1021.093338][T18544] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1021.105395][T18544] EXT4-fs (loop3): revision level too high, forcing read-only mode
[ 1021.135222][T18544] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1021.147833][T18544] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.16630: Freeing blocks not in datazone - block = 0, count = 4096
[ 1021.177271][T18544] EXT4-fs (loop3): 1 orphan inode deleted
[ 1021.253674][   T29] audit: type=1326 audit(1765549981.048:79912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18558 comm="syz.3.16634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e7edf749 code=0x7ffc0000
[ 1021.298208][T18561] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16636'.
[ 1021.313649][T18561] bridge_slave_1: left allmulticast mode
[ 1021.319073][   T29] audit: type=1326 audit(1765549981.078:79913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18558 comm="syz.3.16634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5e7edf749 code=0x7ffc0000
[ 1021.319474][T18561] bridge_slave_1: left promiscuous mode
[ 1021.343230][   T29] audit: type=1326 audit(1765549981.078:79914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18558 comm="syz.3.16634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e7edf749 code=0x7ffc0000
[ 1021.348858][T18561] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1021.372380][   T29] audit: type=1326 audit(1765549981.078:79915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18558 comm="syz.3.16634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff5e7edf749 code=0x7ffc0000
[ 1021.403034][   T29] audit: type=1326 audit(1765549981.078:79916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18558 comm="syz.3.16634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e7edf749 code=0x7ffc0000
[ 1021.426765][   T29] audit: type=1326 audit(1765549981.078:79917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18558 comm="syz.3.16634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff5e7edf749 code=0x7ffc0000
[ 1021.450490][   T29] audit: type=1326 audit(1765549981.078:79918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18558 comm="syz.3.16634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e7edf749 code=0x7ffc0000
[ 1021.476257][T18566] netlink: 24 bytes leftover after parsing attributes in process `syz.8.16636'.
[ 1021.511689][T18561] bridge_slave_0: left allmulticast mode
[ 1021.517442][T18561] bridge_slave_0: left promiscuous mode
[ 1021.523136][T18561] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1021.598613][T18570] loop3: detected capacity change from 0 to 732
[ 1021.605253][T18570] iso9660: Unknown parameter ''
[ 1021.702332][T18573] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16639'.
[ 1021.723124][T18579] loop1: detected capacity change from 0 to 1024
[ 1021.731125][T18580] syzkaller0: tun_chr_ioctl cmd 35108
[ 1021.749664][T18579] EXT4-fs (loop1): unable to read superblock
[ 1021.855659][T18583] netlink: 32 bytes leftover after parsing attributes in process `syz.8.16643'.
[ 1021.913404][T18579] loop1: detected capacity change from 0 to 512
[ 1021.942484][T18579] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.16641: corrupted inode contents
[ 1021.957932][T18579] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[ 1021.997250][T18579] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.16641: corrupted inode contents
[ 1022.083974][T18583] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16643'.
[ 1022.136439][T18579] EXT4-fs error (device loop1): ext4_evict_inode:301: inode #15: comm syz.1.16641: mark_inode_dirty error
[ 1022.154535][T18583] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1022.169821][T18583] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1022.190183][T18581] Set syz1 is full, maxelem 65536 reached
[ 1022.213022][T18579] EXT4-fs (loop1): 1 orphan inode deleted
[ 1022.244480][T18583] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1022.252801][T18583] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1022.718312][T18598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1022.735111][T18598] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1022.752771][T18591] infiniband syz!: set active
[ 1022.757552][T18591] infiniband syz!: added team_slave_0
[ 1022.816574][T18591] RDS/IB: syz!: added
[ 1022.820712][T18591] smc: adding ib device syz! with port count 1
[ 1022.827175][T18591] smc:    ib device syz! port 1 has no pnetid
[ 1022.896382][T18605] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16649'.
[ 1022.986480][T18611] loop1: detected capacity change from 0 to 512
[ 1022.995563][T18611] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.16652: iget: bad extra_isize 90 (inode size 256)
[ 1023.009329][T18611] EXT4-fs (loop1): Remounting filesystem read-only
[ 1023.015974][T18611] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30)
[ 1023.027232][T18611] EXT4-fs (loop1): 1 orphan inode deleted
[ 1023.096878][T18621] FAULT_INJECTION: forcing a failure.
[ 1023.096878][T18621] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1023.110011][T18621] CPU: 0 UID: 0 PID: 18621 Comm: syz.3.16656 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[ 1023.110078][T18621] Tainted: [W]=WARN
[ 1023.110084][T18621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1023.110098][T18621] Call Trace:
[ 1023.110150][T18621]  <TASK>
[ 1023.110158][T18621]  __dump_stack+0x1d/0x30
[ 1023.110209][T18621]  dump_stack_lvl+0xe8/0x140
[ 1023.110230][T18621]  dump_stack+0x15/0x1b
[ 1023.110273][T18621]  should_fail_ex+0x265/0x280
[ 1023.110295][T18621]  should_fail+0xb/0x20
[ 1023.110313][T18621]  should_fail_usercopy+0x1a/0x20
[ 1023.110335][T18621]  _copy_from_user+0x1c/0xb0
[ 1023.110401][T18621]  __sys_bpf+0x183/0x7c0
[ 1023.110427][T18621]  __x64_sys_bpf+0x41/0x50
[ 1023.110465][T18621]  x64_sys_call+0x28e1/0x3000
[ 1023.110488][T18621]  do_syscall_64+0xd8/0x2a0
[ 1023.110519][T18621]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1023.110538][T18621] RIP: 0033:0x7ff5e7edf749
[ 1023.110553][T18621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1023.110589][T18621] RSP: 002b:00007ff5e693f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1023.110607][T18621] RAX: ffffffffffffffda RBX: 00007ff5e8135fa0 RCX: 00007ff5e7edf749
[ 1023.110618][T18621] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a
[ 1023.110629][T18621] RBP: 00007ff5e693f090 R08: 0000000000000000 R09: 0000000000000000
[ 1023.110643][T18621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1023.110653][T18621] R13: 00007ff5e8136038 R14: 00007ff5e8135fa0 R15: 00007ffd98c139b8
[ 1023.110672][T18621]  </TASK>
[ 1023.554139][T18629] loop7: detected capacity change from 0 to 1024
[ 1023.670371][T18637] loop3: detected capacity change from 0 to 512
[ 1023.701535][T18629] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: comm syz.7.16659: inode #4: comm syz.7.16659: iget: illegal inode #
[ 1023.720052][T18629] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.16659: error while reading EA inode 4 err=-117
[ 1023.759559][T18637] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.16660: iget: bad extra_isize 90 (inode size 256)
[ 1023.821219][T18637] EXT4-fs (loop3): Remounting filesystem read-only
[ 1023.834237][T18637] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30)
[ 1023.844741][T18637] EXT4-fs (loop3): 1 orphan inode deleted
[ 1024.061161][T18650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16663'.
[ 1024.126943][T18656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16666'.
[ 1024.262293][T18661] loop3: detected capacity change from 0 to 512
[ 1024.277190][T18661] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.16668: iget: bad extra_isize 90 (inode size 256)
[ 1024.297298][T18661] EXT4-fs (loop3): Remounting filesystem read-only
[ 1024.307272][T18661] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30)
[ 1024.317052][T18661] EXT4-fs (loop3): 1 orphan inode deleted
[ 1024.358402][T18668] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1024.390420][T18668] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #11: comm syz.7.16661: iget: bogus i_mode (1)
[ 1024.409206][T18673] syzkaller0: tun_chr_ioctl cmd 35108
[ 1024.422313][T18668] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.16661: couldn't read orphan inode 11 (err -117)
[ 1024.785702][T18646] syz.7.16661 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[ 1024.800102][T18646] CPU: 1 UID: 0 PID: 18646 Comm: syz.7.16661 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[ 1024.800139][T18646] Tainted: [W]=WARN
[ 1024.800147][T18646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1024.800239][T18646] Call Trace:
[ 1024.800247][T18646]  <TASK>
[ 1024.800256][T18646]  __dump_stack+0x1d/0x30
[ 1024.800281][T18646]  dump_stack_lvl+0xe8/0x140
[ 1024.800346][T18646]  dump_stack+0x15/0x1b
[ 1024.800370][T18646]  dump_header+0x81/0x240
[ 1024.800394][T18646]  oom_kill_process+0x295/0x350
[ 1024.800422][T18646]  out_of_memory+0x97b/0xb80
[ 1024.800451][T18646]  try_charge_memcg+0x610/0xa10
[ 1024.800486][T18646]  obj_cgroup_charge_pages+0xa6/0x150
[ 1024.800675][T18646]  __memcg_kmem_charge_page+0x9f/0x170
[ 1024.800714][T18646]  __alloc_frozen_pages_noprof+0x18f/0x360
[ 1024.800795][T18646]  alloc_pages_mpol+0xb3/0x260
[ 1024.800822][T18646]  ? alloc_pages_noprof+0xf4/0x130
[ 1024.800934][T18646]  alloc_pages_noprof+0x90/0x130
[ 1024.800981][T18646]  __vmalloc_node_range_noprof+0xa7b/0x1310
[ 1024.801054][T18646]  __kvmalloc_node_noprof+0x492/0x6b0
[ 1024.801084][T18646]  ? ip_set_alloc+0x24/0x30
[ 1024.801138][T18646]  ? ip_set_alloc+0x24/0x30
[ 1024.801182][T18646]  ip_set_alloc+0x24/0x30
[ 1024.801255][T18646]  hash_netiface_create+0x282/0x740
[ 1024.801365][T18646]  ? __pfx_hash_netiface_create+0x10/0x10
[ 1024.801406][T18646]  ip_set_create+0x3cc/0x970
[ 1024.801434][T18646]  ? __nla_parse+0x40/0x60
[ 1024.801487][T18646]  nfnetlink_rcv_msg+0x4c6/0x590
[ 1024.801541][T18646]  netlink_rcv_skb+0x123/0x220
[ 1024.801576][T18646]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[ 1024.801614][T18646]  nfnetlink_rcv+0x167/0x16c0
[ 1024.801642][T18646]  ? kmem_cache_free+0xe3/0x3a0
[ 1024.801678][T18646]  ? __kfree_skb+0x109/0x150
[ 1024.801701][T18646]  ? nlmon_xmit+0x4f/0x60
[ 1024.801719][T18646]  ? consume_skb+0x49/0x150
[ 1024.801806][T18646]  ? nlmon_xmit+0x4f/0x60
[ 1024.801853][T18646]  ? dev_hard_start_xmit+0x3b0/0x3e0
[ 1024.801882][T18646]  ? __dev_queue_xmit+0x138d/0x1ec0
[ 1024.801929][T18646]  ? __dev_queue_xmit+0x148/0x1ec0
[ 1024.801966][T18646]  ? ref_tracker_free+0x37d/0x3e0
[ 1024.802021][T18646]  ? __netlink_deliver_tap+0x4dc/0x500
[ 1024.802106][T18646]  netlink_unicast+0x5c0/0x690
[ 1024.802144][T18646]  netlink_sendmsg+0x58b/0x6b0
[ 1024.802185][T18646]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1024.802276][T18646]  __sock_sendmsg+0x145/0x180
[ 1024.802298][T18646]  ____sys_sendmsg+0x31e/0x4a0
[ 1024.802328][T18646]  ___sys_sendmsg+0x17b/0x1d0
[ 1024.802370][T18646]  __x64_sys_sendmsg+0xd4/0x160
[ 1024.802407][T18646]  x64_sys_call+0x17ba/0x3000
[ 1024.802431][T18646]  do_syscall_64+0xd8/0x2a0
[ 1024.802464][T18646]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1024.802485][T18646] RIP: 0033:0x7f1d7223f749
[ 1024.802554][T18646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1024.802578][T18646] RSP: 002b:00007f1d70ca7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1024.802600][T18646] RAX: ffffffffffffffda RBX: 00007f1d72495fa0 RCX: 00007f1d7223f749
[ 1024.802616][T18646] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004
[ 1024.802633][T18646] RBP: 00007f1d722c3f91 R08: 0000000000000000 R09: 0000000000000000
[ 1024.802679][T18646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1024.802693][T18646] R13: 00007f1d72496038 R14: 00007f1d72495fa0 R15: 00007fffb502f898
[ 1024.802713][T18646]  </TASK>
[ 1024.802720][T18646] memory: usage 307200kB, limit 307200kB, failcnt 23051
[ 1025.143713][T18646] memory+swap: usage 308952kB, limit 9007199254740988kB, failcnt 0
[ 1025.151657][T18646] kmem: usage 307076kB, limit 9007199254740988kB, failcnt 0
[ 1025.152649][   T29] kauditd_printk_skb: 413 callbacks suppressed
[ 1025.152667][   T29] audit: type=1326 audit(1765549984.958:80332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18677 comm="syz.6.16671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe85d0665e7 code=0x7ffc0000
[ 1025.158973][T18646] Memory cgroup stats for /syz7:
[ 1025.159309][T18646] cache 16384
[ 1025.169265][   T29] audit: type=1326 audit(1765549984.958:80333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18677 comm="syz.6.16671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe85d00b829 code=0x7ffc0000
[ 1025.188803][T18646] rss 0
[ 1025.188817][T18646] shmem 0
[ 1025.188876][T18646] mapped_file 0
[ 1025.193816][   T29] audit: type=1326 audit(1765549984.958:80334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18677 comm="syz.6.16671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe85d0665e7 code=0x7ffc0000
[ 1025.197183][T18646] dirty 0
[ 1025.220719][   T29] audit: type=1326 audit(1765549984.958:80335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18677 comm="syz.6.16671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe85d00b829 code=0x7ffc0000
[ 1025.223479][T18646] writeback 0
[ 1025.226417][   T29] audit: type=1326 audit(1765549984.958:80336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18677 comm="syz.6.16671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fe85d06f749 code=0x7ffc0000
[ 1025.229908][T18646] workingset_refault_anon 9185
[ 1025.256626][   T29] audit: type=1326 audit(1765549985.058:80337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18677 comm="syz.6.16671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe85d0665e7 code=0x7ffc0000
[ 1025.280038][T18646] workingset_refault_file 1398
[ 1025.280125][T18646] swap 1794048
[ 1025.283374][   T29] audit: type=1326 audit(1765549985.058:80338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18677 comm="syz.6.16671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe85d00b829 code=0x7ffc0000
[ 1025.307039][T18646] swapcached 12288
[ 1025.311790][   T29] audit: type=1326 audit(1765549985.058:80339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18677 comm="syz.6.16671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fe85d06f749 code=0x7ffc0000
[ 1025.335338][T18646] pgpgin 711357
[ 1025.367051][   T29] audit: type=1326 audit(1765549985.148:80340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18677 comm="syz.6.16671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe85d0665e7 code=0x7ffc0000
[ 1025.370788][T18646] pgpgout 711326
[ 1025.370801][T18646] pgfault 921012
[ 1025.370812][T18646] pgmajfault 1712
[ 1025.370823][T18646] inactive_anon 12288
[ 1025.397751][   T29] audit: type=1326 audit(1765549985.198:80341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18677 comm="syz.6.16671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe85d00b829 code=0x7ffc0000
[ 1025.398066][T18646] active_anon 0
[ 1025.398075][T18646] inactive_file 114688
[ 1025.467563][T18646] active_file 0
[ 1025.467577][T18646] unevictable 0
[ 1025.467586][T18646] hierarchical_memory_limit 314572800
[ 1025.467598][T18646] hierarchical_memsw_limit 9223372036854771712
[ 1025.467609][T18646] total_cache 16384
[ 1025.467618][T18646] total_rss 0
[ 1025.467634][T18646] total_shmem 0
[ 1025.467644][T18646] total_mapped_file 0
[ 1025.467654][T18646] total_dirty 0
[ 1025.467661][T18646] total_writeback 0
[ 1025.467668][T18646] total_workingset_refault_anon 9185
[ 1025.467676][T18646] total_workingset_refault_file 1398
[ 1025.467685][T18646] total_swap 1794048
[ 1025.467692][T18646] total_swapcached 12288
[ 1025.467700][T18646] total_pgpgin 711357
[ 1025.467745][T18646] total_pgpgout 711326
[ 1025.467755][T18646] total_pgfault 921012
[ 1025.467765][T18646] total_pgmajfault 1712
[ 1025.467775][T18646] total_inactive_anon 12288
[ 1025.467785][T18646] total_active_anon 0
[ 1025.467795][T18646] total_inactive_file 114688
[ 1025.467804][T18646] total_active_file 0
[ 1025.467812][T18646] total_unevictable 0
[ 1025.467820][T18646] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.16661,pid=18643,uid=0
[ 1025.467980][T18646] Memory cgroup out of memory: Killed process 18643 (syz.7.16661) total-vm:96148kB, anon-rss:1264kB, file-rss:22348kB, shmem-rss:128kB, UID:0 pgtables:148kB oom_score_adj:1000
[ 1025.505986][T18661] Can't find ip_set type hash
[ 1025.854098][T18698] set_capacity_and_notify: 1 callbacks suppressed
[ 1025.854118][T18698] loop3: detected capacity change from 0 to 764
[ 1026.024802][T18708] loop3: detected capacity change from 0 to 1024
[ 1026.039483][T18656] Set syz1 is full, maxelem 65536 reached
[ 1026.056587][T18708] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: comm syz.3.16684: inode #4: comm syz.3.16684: iget: illegal inode #
[ 1026.073063][T18708] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.16684: error while reading EA inode 4 err=-117
[ 1026.183228][T18721] loop3: detected capacity change from 0 to 512
[ 1026.197569][T18721] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1026.222094][T18721] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.16686: invalid block
[ 1026.238886][T18721] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.16686: invalid indirect mapped block 4294967295 (level 1)
[ 1026.254230][T18721] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.16686: invalid indirect mapped block 4294967295 (level 1)
[ 1026.269497][T18721] EXT4-fs (loop3): 2 truncates cleaned up
[ 1026.280403][T18721] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.3.16686: path /281/file0/file0: bad entry in directory: directory entry overrun - offset=196864, inode=4278190093, rec_len=196860, size=60 fake=0
[ 1026.494298][T18741] loop7: detected capacity change from 0 to 512
[ 1026.495483][T18745] netlink: 20 bytes leftover after parsing attributes in process `syz.6.16699'.
[ 1026.501821][T18741] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1026.530063][T18741] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.16696: invalid block
[ 1026.542653][T18741] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.16696: invalid indirect mapped block 4294967295 (level 1)
[ 1026.557113][T18741] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.16696: invalid indirect mapped block 4294967295 (level 1)
[ 1026.572192][T18741] EXT4-fs (loop7): 2 truncates cleaned up
[ 1026.842176][T18774] loop1: detected capacity change from 0 to 1024
[ 1026.849197][T18776] netlink: 40 bytes leftover after parsing attributes in process `syz.6.16710'.
[ 1026.869314][T18774] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: comm syz.1.16709: inode #4: comm syz.1.16709: iget: illegal inode #
[ 1026.883085][T18774] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.16709: error while reading EA inode 4 err=-117
[ 1026.981394][T18788] loop3: detected capacity change from 0 to 764
[ 1027.156419][T18806] loop1: detected capacity change from 0 to 1024
[ 1027.163776][T18806] EXT4-fs (loop1): unable to read superblock
[ 1027.311667][T18809] loop3: detected capacity change from 0 to 512
[ 1027.326512][T18809] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1027.354425][T18809] EXT4-fs error (device loop3): ext4_quota_enable:7173: comm syz.3.16723: Bad quota inum: 4, type: 2
[ 1027.385999][T18809] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=4). Please run e2fsck to fix.
[ 1027.404507][T18809] EXT4-fs (loop3): mount failed
[ 1027.426674][T18809] loop3: detected capacity change from 0 to 512
[ 1027.434277][T18809] EXT4-fs: quotafile must be on filesystem root
[ 1027.468403][T18806] loop1: detected capacity change from 0 to 512
[ 1027.476513][T18806] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.16722: corrupted inode contents
[ 1027.488989][T18806] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[ 1027.497893][T18806] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.16722: corrupted inode contents
[ 1027.510171][T18806] EXT4-fs error (device loop1): ext4_evict_inode:301: inode #15: comm syz.1.16722: mark_inode_dirty error
[ 1027.529377][T18806] EXT4-fs (loop1): 1 orphan inode deleted
[ 1027.631679][T18829] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16729'.
[ 1027.646367][T18825] rock: corrupted directory entry. extent=32, offset=2044, size=237
[ 1027.683304][T18831] netlink: 24 bytes leftover after parsing attributes in process `syz.7.16729'.
[ 1027.732045][T18825] Symlink component flag not implemented
[ 1027.743979][T18825] Symlink component flag not implemented (7)
[ 1027.797604][T18835] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16728'.
[ 1027.809048][T18825] tmpfs: Unknown parameter 'sië™óÎÕœ'
[ 1027.816027][T18825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16728'.
[ 1028.137164][T18844] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1028.216412][T18844] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.16734: invalid block
[ 1028.387467][T18844] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.16734: invalid indirect mapped block 4294967295 (level 1)
[ 1028.467442][T18844] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.16734: invalid indirect mapped block 4294967295 (level 1)
[ 1028.528058][T18844] EXT4-fs (loop7): 2 truncates cleaned up
[ 1028.642601][T18859] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1028.665254][T18859] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.16736: invalid block
[ 1028.727113][T18859] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.16736: invalid indirect mapped block 4294967295 (level 1)
[ 1028.757957][T18859] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.16736: invalid indirect mapped block 4294967295 (level 1)
[ 1028.773137][T18864] netlink: 16 bytes leftover after parsing attributes in process `syz.6.16741'.
[ 1028.782976][T18859] EXT4-fs (loop1): 2 truncates cleaned up
[ 1028.789897][T18864] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16741'.
[ 1028.796887][T18846] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1028.811580][T18859] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.1.16736: path /249/file0/file0: bad entry in directory: directory entry overrun - offset=196864, inode=4278190093, rec_len=196860, size=60 fake=0
[ 1028.838654][T18846] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #11: comm syz.3.16733: iget: bogus i_mode (1)
[ 1028.840942][T18870] FAULT_INJECTION: forcing a failure.
[ 1028.840942][T18870] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1028.863222][T18870] CPU: 1 UID: 0 PID: 18870 Comm: syz.6.16741 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[ 1028.863268][T18870] Tainted: [W]=WARN
[ 1028.863276][T18870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1028.863291][T18870] Call Trace:
[ 1028.863298][T18870]  <TASK>
[ 1028.863308][T18870]  __dump_stack+0x1d/0x30
[ 1028.863336][T18870]  dump_stack_lvl+0xe8/0x140
[ 1028.863433][T18870]  dump_stack+0x15/0x1b
[ 1028.863454][T18870]  should_fail_ex+0x265/0x280
[ 1028.863479][T18870]  should_fail+0xb/0x20
[ 1028.863500][T18870]  should_fail_usercopy+0x1a/0x20
[ 1028.863528][T18870]  _copy_from_iter+0xcf/0xe70
[ 1028.863633][T18870]  ? __alloc_skb+0x3bb/0x4d0
[ 1028.863659][T18870]  ? __alloc_skb+0x24d/0x4d0
[ 1028.863687][T18870]  netlink_sendmsg+0x471/0x6b0
[ 1028.863728][T18870]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1028.863763][T18870]  __sock_sendmsg+0x145/0x180
[ 1028.863905][T18870]  ____sys_sendmsg+0x31e/0x4a0
[ 1028.863940][T18870]  ___sys_sendmsg+0x17b/0x1d0
[ 1028.863994][T18870]  __x64_sys_sendmsg+0xd4/0x160
[ 1028.864030][T18870]  x64_sys_call+0x17ba/0x3000
[ 1028.864069][T18870]  do_syscall_64+0xd8/0x2a0
[ 1028.864173][T18870]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1028.864195][T18870] RIP: 0033:0x7fe85d06f749
[ 1028.864228][T18870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1028.864247][T18870] RSP: 002b:00007fe85bab6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1028.864297][T18870] RAX: ffffffffffffffda RBX: 00007fe85d2c6090 RCX: 00007fe85d06f749
[ 1028.864310][T18870] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005
[ 1028.864336][T18870] RBP: 00007fe85bab6090 R08: 0000000000000000 R09: 0000000000000000
[ 1028.864400][T18870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1028.864412][T18870] R13: 00007fe85d2c6128 R14: 00007fe85d2c6090 R15: 00007ffdb1bc0a88
[ 1028.864433][T18870]  </TASK>
[ 1028.870810][T18846] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.16733: couldn't read orphan inode 11 (err -117)
[ 1029.111764][T18874] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16744'.
[ 1029.237917][T18883] netlink: 'syz.7.16746': attribute type 4 has an invalid length.
[ 1029.245833][T18883] netlink: 17 bytes leftover after parsing attributes in process `syz.7.16746'.
[ 1029.365191][T18840] syz.3.16733 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[ 1029.379566][T18840] CPU: 1 UID: 0 PID: 18840 Comm: syz.3.16733 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[ 1029.379609][T18840] Tainted: [W]=WARN
[ 1029.379619][T18840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1029.379636][T18840] Call Trace:
[ 1029.379647][T18840]  <TASK>
[ 1029.379659][T18840]  __dump_stack+0x1d/0x30
[ 1029.379684][T18840]  dump_stack_lvl+0xe8/0x140
[ 1029.379708][T18840]  dump_stack+0x15/0x1b
[ 1029.379730][T18840]  dump_header+0x81/0x240
[ 1029.379759][T18840]  oom_kill_process+0x295/0x350
[ 1029.379827][T18840]  out_of_memory+0x97b/0xb80
[ 1029.379856][T18840]  try_charge_memcg+0x610/0xa10
[ 1029.379895][T18840]  obj_cgroup_charge_pages+0xa6/0x150
[ 1029.379938][T18840]  __memcg_kmem_charge_page+0x9f/0x170
[ 1029.380009][T18840]  __alloc_frozen_pages_noprof+0x18f/0x360
[ 1029.380102][T18840]  alloc_pages_mpol+0xb3/0x260
[ 1029.380137][T18840]  ? alloc_pages_noprof+0x61/0x130
[ 1029.380182][T18840]  alloc_pages_noprof+0x90/0x130
[ 1029.380238][T18840]  __vmalloc_node_range_noprof+0xa7b/0x1310
[ 1029.380288][T18840]  __kvmalloc_node_noprof+0x492/0x6b0
[ 1029.380319][T18840]  ? ip_set_alloc+0x24/0x30
[ 1029.380355][T18840]  ? ip_set_alloc+0x24/0x30
[ 1029.380393][T18840]  ? __slab_alloc+0x25/0x50
[ 1029.380423][T18840]  ip_set_alloc+0x24/0x30
[ 1029.380505][T18840]  hash_netiface_create+0x282/0x740
[ 1029.380545][T18840]  ? __pfx_hash_netiface_create+0x10/0x10
[ 1029.380580][T18840]  ip_set_create+0x3cc/0x970
[ 1029.380619][T18840]  ? __nla_parse+0x40/0x60
[ 1029.380650][T18840]  nfnetlink_rcv_msg+0x4c6/0x590
[ 1029.380699][T18840]  netlink_rcv_skb+0x123/0x220
[ 1029.380765][T18840]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[ 1029.380854][T18840]  nfnetlink_rcv+0x167/0x16c0
[ 1029.380887][T18840]  ? kmem_cache_free+0xe3/0x3a0
[ 1029.380922][T18840]  ? __kfree_skb+0x109/0x150
[ 1029.380947][T18840]  ? nlmon_xmit+0x4f/0x60
[ 1029.380977][T18840]  ? consume_skb+0x49/0x150
[ 1029.381010][T18840]  ? nlmon_xmit+0x4f/0x60
[ 1029.381035][T18840]  ? dev_hard_start_xmit+0x3b0/0x3e0
[ 1029.381120][T18840]  ? __dev_queue_xmit+0x138d/0x1ec0
[ 1029.381158][T18840]  ? __dev_queue_xmit+0x148/0x1ec0
[ 1029.381194][T18840]  ? ref_tracker_free+0x37d/0x3e0
[ 1029.381225][T18840]  ? __netlink_deliver_tap+0x4dc/0x500
[ 1029.381379][T18840]  netlink_unicast+0x5c0/0x690
[ 1029.381415][T18840]  netlink_sendmsg+0x58b/0x6b0
[ 1029.381470][T18840]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1029.381517][T18840]  __sock_sendmsg+0x145/0x180
[ 1029.381542][T18840]  ____sys_sendmsg+0x31e/0x4a0
[ 1029.381732][T18840]  ___sys_sendmsg+0x17b/0x1d0
[ 1029.381782][T18840]  __x64_sys_sendmsg+0xd4/0x160
[ 1029.381867][T18840]  x64_sys_call+0x17ba/0x3000
[ 1029.381893][T18840]  do_syscall_64+0xd8/0x2a0
[ 1029.381929][T18840]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1029.382020][T18840] RIP: 0033:0x7ff5e7edf749
[ 1029.382042][T18840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1029.382066][T18840] RSP: 002b:00007ff5e693f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1029.382125][T18840] RAX: ffffffffffffffda RBX: 00007ff5e8135fa0 RCX: 00007ff5e7edf749
[ 1029.382143][T18840] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004
[ 1029.382161][T18840] RBP: 00007ff5e7f63f91 R08: 0000000000000000 R09: 0000000000000000
[ 1029.382179][T18840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1029.382196][T18840] R13: 00007ff5e8136038 R14: 00007ff5e8135fa0 R15: 00007ffd98c139b8
[ 1029.382223][T18840]  </TASK>
[ 1029.382233][T18840] memory: usage 307200kB, limit 307200kB, failcnt 43749
[ 1029.727975][T18840] memory+swap: usage 310152kB, limit 9007199254740988kB, failcnt 0
[ 1029.735873][T18840] kmem: usage 307012kB, limit 9007199254740988kB, failcnt 0
[ 1029.743232][T18840] Memory cgroup stats for /syz3:
[ 1029.744421][T18840] cache 4096
[ 1029.752651][T18840] rss 0
[ 1029.755435][T18840] shmem 0
[ 1029.758434][T18840] mapped_file 0
[ 1029.761900][T18840] dirty 0
[ 1029.764940][T18840] writeback 0
[ 1029.768271][T18840] workingset_refault_anon 10631
[ 1029.773190][T18840] workingset_refault_file 23438
[ 1029.778066][T18840] swap 3022848
[ 1029.781492][T18840] swapcached 4096
[ 1029.785129][T18840] pgpgin 1311392
[ 1029.788747][T18840] pgpgout 1311345
[ 1029.792418][T18840] pgfault 1480780
[ 1029.796112][T18840] pgmajfault 2410
[ 1029.799768][T18840] inactive_anon 0
[ 1029.803413][T18840] active_anon 4096
[ 1029.807153][T18840] inactive_file 0
[ 1029.810792][T18840] active_file 188416
[ 1029.814689][T18840] unevictable 0
[ 1029.818200][T18840] hierarchical_memory_limit 314572800
[ 1029.823690][T18840] hierarchical_memsw_limit 9223372036854771712
[ 1029.829922][T18840] total_cache 4096
[ 1029.833701][T18840] total_rss 0
[ 1029.837068][T18840] total_shmem 0
[ 1029.840540][T18840] total_mapped_file 0
[ 1029.844515][T18840] total_dirty 0
[ 1029.848002][T18840] total_writeback 0
[ 1029.851810][T18840] total_workingset_refault_anon 10631
[ 1029.857222][T18840] total_workingset_refault_file 23438
[ 1029.862591][T18840] total_swap 3022848
[ 1029.866484][T18840] total_swapcached 4096
[ 1029.870738][T18840] total_pgpgin 1311392
[ 1029.874816][T18840] total_pgpgout 1311345
[ 1029.878985][T18840] total_pgfault 1480780
[ 1029.883186][T18840] total_pgmajfault 2410
[ 1029.887350][T18840] total_inactive_anon 0
[ 1029.891548][T18840] total_active_anon 4096
[ 1029.895813][T18840] total_inactive_file 0
[ 1029.900055][T18840] total_active_file 188416
[ 1029.904483][T18840] total_unevictable 0
[ 1029.908487][T18840] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.16733,pid=18839,uid=0
[ 1029.923495][T18840] Memory cgroup out of memory: Killed process 18839 (syz.3.16733) total-vm:96148kB, anon-rss:1136kB, file-rss:22356kB, shmem-rss:128kB, UID:0 pgtables:144kB oom_score_adj:1000
[ 1030.016087][T18893] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: comm syz.1.16749: inode #4: comm syz.1.16749: iget: illegal inode #
[ 1030.044223][T18893] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.16749: error while reading EA inode 4 err=-117
[ 1030.158663][   T29] kauditd_printk_skb: 739 callbacks suppressed
[ 1030.158738][   T29] audit: type=1326 audit(1765549989.958:81081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18899 comm="syz.6.16751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe85d06e3aa code=0x7ffc0000
[ 1030.196757][T18907] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[ 1030.267345][   T29] audit: type=1326 audit(1765549989.988:81082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18899 comm="syz.6.16751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85d06f749 code=0x7ffc0000
[ 1030.291114][   T29] audit: type=1326 audit(1765549989.988:81083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18899 comm="syz.6.16751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe85d06f749 code=0x7ffc0000
[ 1030.314942][   T29] audit: type=1326 audit(1765549989.988:81084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18899 comm="syz.6.16751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85d06f749 code=0x7ffc0000
[ 1030.338773][   T29] audit: type=1326 audit(1765549989.988:81085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18899 comm="syz.6.16751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe85d06f749 code=0x7ffc0000
[ 1030.362760][   T29] audit: type=1326 audit(1765549989.988:81086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18899 comm="syz.6.16751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85d06f749 code=0x7ffc0000
[ 1030.386461][   T29] audit: type=1326 audit(1765549989.988:81087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18899 comm="syz.6.16751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe85d06f749 code=0x7ffc0000
[ 1030.410237][   T29] audit: type=1326 audit(1765549989.988:81088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18899 comm="syz.6.16751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85d06f749 code=0x7ffc0000
[ 1030.433999][   T29] audit: type=1326 audit(1765549989.988:81089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18899 comm="syz.6.16751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fe85d06f749 code=0x7ffc0000
[ 1030.457813][   T29] audit: type=1326 audit(1765549989.988:81090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18899 comm="syz.6.16751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85d06f749 code=0x7ffc0000
[ 1030.656090][T18933] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[ 1030.831600][T18938] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: comm syz.7.16765: inode #4: comm syz.7.16765: iget: illegal inode #
[ 1030.854317][T18938] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.16765: error while reading EA inode 4 err=-117
[ 1030.944436][T18949] netlink: 'syz.3.16770': attribute type 4 has an invalid length.
[ 1031.094820][T18955] FAULT_INJECTION: forcing a failure.
[ 1031.094820][T18955] name failslab, interval 1, probability 0, space 0, times 0
[ 1031.107637][T18955] CPU: 0 UID: 0 PID: 18955 Comm: syz.3.16772 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[ 1031.107691][T18955] Tainted: [W]=WARN
[ 1031.107701][T18955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1031.107718][T18955] Call Trace:
[ 1031.107725][T18955]  <TASK>
[ 1031.107736][T18955]  __dump_stack+0x1d/0x30
[ 1031.107767][T18955]  dump_stack_lvl+0xe8/0x140
[ 1031.107798][T18955]  dump_stack+0x15/0x1b
[ 1031.107822][T18955]  should_fail_ex+0x265/0x280
[ 1031.107851][T18955]  should_failslab+0x8c/0xb0
[ 1031.107875][T18955]  __kmalloc_noprof+0xb9/0x5a0
[ 1031.107949][T18955]  ? sctp_auth_set_key+0x18a/0x4f0
[ 1031.107983][T18955]  ? sctp_auth_set_key+0x115/0x4f0
[ 1031.108031][T18955]  sctp_auth_set_key+0x18a/0x4f0
[ 1031.108066][T18955]  sctp_setsockopt_auth_key+0x2d7/0x3e0
[ 1031.108172][T18955]  sctp_setsockopt+0x4ba/0xe30
[ 1031.108210][T18955]  sock_common_setsockopt+0x69/0x80
[ 1031.108263][T18955]  ? __pfx_sock_common_setsockopt+0x10/0x10
[ 1031.108364][T18955]  __sys_setsockopt+0x184/0x200
[ 1031.108398][T18955]  __x64_sys_setsockopt+0x64/0x80
[ 1031.108431][T18955]  x64_sys_call+0x21d5/0x3000
[ 1031.108468][T18955]  do_syscall_64+0xd8/0x2a0
[ 1031.108532][T18955]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1031.108560][T18955] RIP: 0033:0x7ff5e7edf749
[ 1031.108577][T18955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1031.108619][T18955] RSP: 002b:00007ff5e693f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1031.108642][T18955] RAX: ffffffffffffffda RBX: 00007ff5e8135fa0 RCX: 00007ff5e7edf749
[ 1031.108658][T18955] RDX: 0000000000000017 RSI: 0000000000000084 RDI: 0000000000000003
[ 1031.108671][T18955] RBP: 00007ff5e693f090 R08: 0000000000000009 R09: 0000000000000000
[ 1031.108718][T18955] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001
[ 1031.108734][T18955] R13: 00007ff5e8136038 R14: 00007ff5e8135fa0 R15: 00007ffd98c139b8
[ 1031.108758][T18955]  </TASK>
[ 1031.319694][T18965] set_capacity_and_notify: 9 callbacks suppressed
[ 1031.319710][T18965] loop1: detected capacity change from 0 to 512
[ 1031.333327][T18965] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1031.342014][T18967] loop7: detected capacity change from 0 to 1024
[ 1031.352908][T18967] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1031.364379][T18965] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.16774: invalid block
[ 1031.366264][T18967] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #11: comm syz.7.16777: iget: bogus i_mode (1)
[ 1031.377109][T18965] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.16774: invalid indirect mapped block 4294967295 (level 1)
[ 1031.388130][T18967] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.16777: couldn't read orphan inode 11 (err -117)
[ 1031.414420][T18965] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.16774: invalid indirect mapped block 4294967295 (level 1)
[ 1031.432831][T18965] EXT4-fs (loop1): 2 truncates cleaned up
[ 1031.460042][T18965] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.1.16774: path /257/file0/file0: bad entry in directory: directory entry overrun - offset=196864, inode=4278190093, rec_len=196860, size=60 fake=0
[ 1031.567725][T18984] loop7: detected capacity change from 0 to 1024
[ 1031.735740][T18976] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.16779: Allocating blocks 385-513 which overlap fs metadata
[ 1031.751733][T18976] EXT4-fs (loop7): pa ffff888100622b60: logic 16, phys. 129, len 24
[ 1031.759828][T18976] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8
[ 1031.771740][T18976] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 1 with error 28
[ 1031.784033][T18976] EXT4-fs (loop7): This should not happen!! Data will be lost
[ 1031.784033][T18976] 
[ 1031.793804][T18976] EXT4-fs (loop7): Total free blocks count 0
[ 1031.799844][T18976] EXT4-fs (loop7): Free/Dirty block details
[ 1031.805796][T18976] EXT4-fs (loop7): free_blocks=128
[ 1031.810978][T18976] EXT4-fs (loop7): dirty_blocks=0
[ 1031.816086][T18976] EXT4-fs (loop7): Block reservation details
[ 1031.822152][T18976] EXT4-fs (loop7): i_reserved_data_blocks=0
[ 1031.878487][T18973] Set syz1 is full, maxelem 65536 reached
[ 1031.975893][T19001] netlink: 'syz.1.16788': attribute type 4 has an invalid length.
[ 1031.983833][T19001] __nla_validate_parse: 4 callbacks suppressed
[ 1031.983849][T19001] netlink: 17 bytes leftover after parsing attributes in process `syz.1.16788'.
[ 1032.010520][T19003] netlink: 'syz.8.16789': attribute type 4 has an invalid length.
[ 1032.018584][T19003] netlink: 17 bytes leftover after parsing attributes in process `syz.8.16789'.
[ 1032.216106][T19024] loop7: detected capacity change from 0 to 512
[ 1032.225535][T19024] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #18: comm syz.7.16796: iget: bad extra_isize 90 (inode size 256)
[ 1032.248595][T19024] EXT4-fs (loop7): Remounting filesystem read-only
[ 1032.255808][T19024] EXT4-fs warning (device loop7): ext4_evict_inode:273: xattr delete (err -30)
[ 1032.267195][T19024] EXT4-fs (loop7): 1 orphan inode deleted
[ 1032.300529][T19029] loop3: detected capacity change from 0 to 512
[ 1032.314083][T19029] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[ 1032.347623][T19033] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(18)
[ 1032.354280][T19033] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1032.361840][T19033] vhci_hcd vhci_hcd.0: Device attached
[ 1032.380992][T19041] netlink: 'syz.7.16803': attribute type 4 has an invalid length.
[ 1032.384445][T19033] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(20)
[ 1032.389040][T19041] netlink: 17 bytes leftover after parsing attributes in process `syz.7.16803'.
[ 1032.395549][T19033] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1032.412206][T19033] vhci_hcd vhci_hcd.0: Device attached
[ 1032.441004][T19033] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(22)
[ 1032.447727][T19033] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1032.455458][T19033] vhci_hcd vhci_hcd.0: Device attached
[ 1032.481883][T19033] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(24)
[ 1032.488543][T19033] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1032.496183][T19033] vhci_hcd vhci_hcd.0: Device attached
[ 1032.505013][T19033] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(26)
[ 1032.511780][T19033] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1032.519444][T19033] vhci_hcd vhci_hcd.0: Device attached
[ 1032.525076][T19058] loop7: detected capacity change from 0 to 1024
[ 1032.534050][T19058] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1032.555329][T19058] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #11: comm syz.7.16806: iget: bogus i_mode (1)
[ 1032.567356][T19033] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(28)
[ 1032.574159][T19033] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1032.581996][T19033] vhci_hcd vhci_hcd.0: Device attached
[ 1032.589088][T19058] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.16806: couldn't read orphan inode 11 (err -117)
[ 1032.589260][T19033] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1032.610892][T15877] usb 3-1: new low-speed USB device number 2 using vhci_hcd
[ 1032.627578][T19058] 9pnet_fd: Insufficient options for proto=fd
[ 1032.636114][T19033] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1032.645557][T19033] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(34)
[ 1032.652224][T19033] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1032.659805][T19033] vhci_hcd vhci_hcd.0: Device attached
[ 1032.669116][T19033] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1032.678065][T19042] vhci_hcd: connection closed
[ 1032.680476][T19056] vhci_hcd: connection closed
[ 1032.685699][ T2954] vhci_hcd vhci_hcd.1: stop threads
[ 1032.695797][ T2954] vhci_hcd vhci_hcd.1: release socket
[ 1032.697162][T19062] vhci_hcd: connection closed
[ 1032.701278][T19053] vhci_hcd: connection closed
[ 1032.701346][ T2954] vhci_hcd vhci_hcd.1: disconnect device
[ 1032.707090][T19048] vhci_hcd: connection closed
[ 1032.716593][T19034] vhci_hcd: connection reset by peer
[ 1032.739747][ T2954] vhci_hcd vhci_hcd.1: stop threads
[ 1032.745338][ T2954] vhci_hcd vhci_hcd.1: release socket
[ 1032.750834][ T2954] vhci_hcd vhci_hcd.1: disconnect device
[ 1032.758343][ T2954] vhci_hcd vhci_hcd.1: stop threads
[ 1032.763636][ T2954] vhci_hcd vhci_hcd.1: release socket
[ 1032.769234][ T2954] vhci_hcd vhci_hcd.1: disconnect device
[ 1032.788257][ T2954] vhci_hcd vhci_hcd.1: stop threads
[ 1032.793629][ T2954] vhci_hcd vhci_hcd.1: release socket
[ 1032.799089][ T2954] vhci_hcd vhci_hcd.1: disconnect device
[ 1032.805145][ T2954] vhci_hcd vhci_hcd.1: stop threads
[ 1032.810482][ T2954] vhci_hcd vhci_hcd.1: release socket
[ 1032.815980][ T2954] vhci_hcd vhci_hcd.1: disconnect device
[ 1032.818130][T19080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16812'.
[ 1032.822221][ T2954] vhci_hcd vhci_hcd.1: stop threads
[ 1032.832035][T19080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16812'.
[ 1032.837075][ T2954] vhci_hcd vhci_hcd.1: release socket
[ 1032.845833][T19080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16812'.
[ 1032.851260][ T2954] vhci_hcd vhci_hcd.1: disconnect device
[ 1033.053040][T19090] loop3: detected capacity change from 0 to 512
[ 1033.109278][T19090] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.16816: iget: bad extra_isize 90 (inode size 256)
[ 1033.167219][T19090] EXT4-fs (loop3): Remounting filesystem read-only
[ 1033.187615][T19090] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30)
[ 1033.227101][T19090] EXT4-fs (loop3): 1 orphan inode deleted
[ 1033.244762][T19070] vhci_hcd: connection closed
[ 1033.245006][ T2961] vhci_hcd vhci_hcd.1: stop threads
[ 1033.255003][ T2961] vhci_hcd vhci_hcd.1: release socket
[ 1033.260466][ T2961] vhci_hcd vhci_hcd.1: disconnect device
[ 1033.348995][T19103] loop1: detected capacity change from 0 to 512
[ 1033.375093][T19106] loop3: detected capacity change from 0 to 512
[ 1033.382175][T19106] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1033.401383][T19106] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.16820: invalid block
[ 1033.420375][T19106] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.16820: invalid indirect mapped block 4294967295 (level 1)
[ 1033.513324][T19106] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.16820: invalid indirect mapped block 4294967295 (level 1)
[ 1033.560162][T19106] EXT4-fs (loop3): 2 truncates cleaned up
[ 1033.576251][T19114] loop1: detected capacity change from 0 to 512
[ 1033.585110][T19116] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16823'.
[ 1033.601181][T19114] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.16824: iget: bad extra_isize 90 (inode size 256)
[ 1033.625066][T19116] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16823'.
[ 1033.634305][T19116] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16823'.
[ 1033.643819][T19114] EXT4-fs (loop1): Remounting filesystem read-only
[ 1033.650838][T19114] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30)
[ 1033.662154][T19114] EXT4-fs (loop1): 1 orphan inode deleted
[ 1033.975414][T19140] netlink: 'syz.8.16833': attribute type 4 has an invalid length.
[ 1033.983378][T19140] netlink: 17 bytes leftover after parsing attributes in process `syz.8.16833'.
[ 1034.178463][T13754] EXT4-fs unmount: 68 callbacks suppressed
[ 1034.178487][T13754] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1034.335526][T19172] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[ 1034.346497][T19172] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[ 1034.359636][T19172] JBD2: no valid journal superblock found
[ 1034.365418][T19172] EXT4-fs (loop1): Could not load journal inode
[ 1034.692725][T19159] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[ 1034.985441][T19183] iso9660: Unknown parameter ''
[ 1035.303428][   T29] kauditd_printk_skb: 705 callbacks suppressed
[ 1035.303457][   T29] audit: type=1400 audit(1765549994.958:81796): avc:  denied  { execmem } for  pid=19167 comm="syz.6.16845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 1035.329293][   T29] audit: type=1400 audit(1765549995.058:81797): avc:  denied  { read } for  pid=19167 comm="syz.6.16845" dev="nsfs" ino=4026532457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 1035.350809][   T29] audit: type=1400 audit(1765549995.058:81798): avc:  denied  { open } for  pid=19167 comm="syz.6.16845" path="net:[4026532457]" dev="nsfs" ino=4026532457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 1035.374324][   T29] audit: type=1400 audit(1765549995.068:81799): avc:  denied  { create } for  pid=19167 comm="syz.6.16845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1035.394659][   T29] audit: type=1400 audit(1765549995.068:81800): avc:  denied  { write } for  pid=19167 comm="syz.6.16845" path="socket:[211533]" dev="sockfs" ino=211533 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1035.473787][T19175] syz.7.16846 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[ 1035.488219][T19175] CPU: 0 UID: 0 PID: 19175 Comm: syz.7.16846 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[ 1035.488258][T19175] Tainted: [W]=WARN
[ 1035.488267][T19175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1035.488284][T19175] Call Trace:
[ 1035.488360][T19175]  <TASK>
[ 1035.488371][T19175]  __dump_stack+0x1d/0x30
[ 1035.488397][T19175]  dump_stack_lvl+0xe8/0x140
[ 1035.488422][T19175]  dump_stack+0x15/0x1b
[ 1035.488447][T19175]  dump_header+0x81/0x240
[ 1035.488469][T19175]  oom_kill_process+0x295/0x350
[ 1035.488540][T19175]  out_of_memory+0x97b/0xb80
[ 1035.488567][T19175]  try_charge_memcg+0x610/0xa10
[ 1035.488598][T19175]  obj_cgroup_charge_pages+0xa6/0x150
[ 1035.488649][T19175]  __memcg_kmem_charge_page+0x9f/0x170
[ 1035.488679][T19175]  __alloc_frozen_pages_noprof+0x18f/0x360
[ 1035.488717][T19175]  alloc_pages_mpol+0xb3/0x260
[ 1035.488763][T19175]  alloc_pages_noprof+0x90/0x130
[ 1035.488873][T19175]  __vmalloc_node_range_noprof+0xa7b/0x1310
[ 1035.488918][T19175]  __kvmalloc_node_noprof+0x492/0x6b0
[ 1035.488978][T19175]  ? ip_set_alloc+0x24/0x30
[ 1035.489014][T19175]  ? ip_set_alloc+0x24/0x30
[ 1035.489086][T19175]  ? __kmalloc_cache_noprof+0x3e5/0x4c0
[ 1035.489151][T19175]  ip_set_alloc+0x24/0x30
[ 1035.489180][T19175]  hash_netiface_create+0x282/0x740
[ 1035.489220][T19175]  ? __pfx_hash_netiface_create+0x10/0x10
[ 1035.489266][T19175]  ip_set_create+0x3cc/0x970
[ 1035.489284][T19175]  ? _raw_spin_unlock+0x26/0x50
[ 1035.489305][T19175]  ? finish_task_switch+0x7a/0x2a0
[ 1035.489354][T19175]  ? __cond_resched+0x4e/0x90
[ 1035.489432][T19175]  nfnetlink_rcv_msg+0x4c6/0x590
[ 1035.489492][T19175]  netlink_rcv_skb+0x123/0x220
[ 1035.489564][T19175]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[ 1035.489599][T19175]  nfnetlink_rcv+0x167/0x16c0
[ 1035.489640][T19175]  ? kmem_cache_free+0xe3/0x3a0
[ 1035.489740][T19175]  ? __kfree_skb+0x109/0x150
[ 1035.489812][T19175]  ? nlmon_xmit+0x4f/0x60
[ 1035.489837][T19175]  ? consume_skb+0x49/0x150
[ 1035.489863][T19175]  ? nlmon_xmit+0x4f/0x60
[ 1035.489927][T19175]  ? dev_hard_start_xmit+0x3b0/0x3e0
[ 1035.489969][T19175]  ? __dev_queue_xmit+0x138d/0x1ec0
[ 1035.490012][T19175]  ? __dev_queue_xmit+0x148/0x1ec0
[ 1035.490079][T19175]  ? ref_tracker_free+0x37d/0x3e0
[ 1035.490120][T19175]  ? __netlink_deliver_tap+0x4dc/0x500
[ 1035.490208][T19175]  netlink_unicast+0x5c0/0x690
[ 1035.490260][T19175]  netlink_sendmsg+0x58b/0x6b0
[ 1035.490294][T19175]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1035.490352][T19175]  __sock_sendmsg+0x145/0x180
[ 1035.490379][T19175]  ____sys_sendmsg+0x31e/0x4a0
[ 1035.490419][T19175]  ___sys_sendmsg+0x17b/0x1d0
[ 1035.490464][T19175]  __x64_sys_sendmsg+0xd4/0x160
[ 1035.490533][T19175]  x64_sys_call+0x17ba/0x3000
[ 1035.490563][T19175]  do_syscall_64+0xd8/0x2a0
[ 1035.490702][T19175]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1035.490769][T19175] RIP: 0033:0x7f1d7223f749
[ 1035.490786][T19175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1035.490804][T19175] RSP: 002b:00007f1d70ca7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1035.490825][T19175] RAX: ffffffffffffffda RBX: 00007f1d72495fa0 RCX: 00007f1d7223f749
[ 1035.490842][T19175] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004
[ 1035.490855][T19175] RBP: 00007f1d722c3f91 R08: 0000000000000000 R09: 0000000000000000
[ 1035.490872][T19175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1035.490888][T19175] R13: 00007f1d72496038 R14: 00007f1d72495fa0 R15: 00007fffb502f898
[ 1035.490914][T19175]  </TASK>
[ 1035.490924][T19175] memory: usage 303300kB, limit 307200kB, failcnt 23434
[ 1035.817979][T19193] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1035.825102][T19175] memory+swap: usage 37188kB, limit 9007199254740988kB, failcnt 0
[ 1035.825124][T19175] kmem: usage 28780kB, limit 9007199254740988kB, failcnt 0
[ 1035.825137][T19175] Memory cgroup stats for /syz7:
[ 1035.839072][T19193] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #11: comm syz.7.16846: iget: bogus i_mode (1)
[ 1035.844855][T19175] cache 7081984
[ 1035.861791][T19193] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.16846: couldn't read orphan inode 11 (err -117)
[ 1035.868935][T19175] rss 77824
[ 1035.868948][T19175] shmem 7065600
[ 1035.868958][T19175] mapped_file 6541312
[ 1035.878575][T19193] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1035.886229][T19175] dirty 0
[ 1035.890343][   T29] audit: type=1400 audit(1765549995.698:81801): avc:  denied  { mount } for  pid=19174 comm="syz.7.16846" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 1035.901635][T19175] writeback 0
[ 1035.901649][T19175] workingset_refault_anon 9253
[ 1035.957922][T19175] workingset_refault_file 1398
[ 1035.962715][T19175] swap 1183744
[ 1035.966112][T19175] swapcached 61440
[ 1035.969897][T19175] pgpgin 719621
[ 1035.973381][T19175] pgpgout 717845
[ 1035.977128][T19175] pgfault 931515
[ 1035.980731][T19175] pgmajfault 1745
[ 1035.984359][T19175] inactive_anon 0
[ 1035.988029][T19175] active_anon 7065600
[ 1035.992086][T19175] inactive_file 0
[ 1035.995722][T19175] active_file 102400
[ 1035.999639][T19175] unevictable 0
[ 1036.003100][T19175] hierarchical_memory_limit 314572800
[ 1036.008527][T19175] hierarchical_memsw_limit 9223372036854771712
[ 1036.014810][T19175] total_cache 7081984
[ 1036.018814][T19175] total_rss 77824
[ 1036.022441][T19175] total_shmem 7065600
[ 1036.026456][T19175] total_mapped_file 6541312
[ 1036.031067][T19175] total_dirty 0
[ 1036.034596][T19175] total_writeback 0
[ 1036.038452][T19175] total_workingset_refault_anon 9253
[ 1036.043743][T19175] total_workingset_refault_file 1398
[ 1036.049055][T19175] total_swap 1183744
[ 1036.053116][T19175] total_swapcached 61440
[ 1036.057448][T19175] total_pgpgin 719621
[ 1036.061458][T19175] total_pgpgout 717845
[ 1036.065550][T19175] total_pgfault 931515
[ 1036.069663][T19175] total_pgmajfault 1745
[ 1036.073819][T19175] total_inactive_anon 0
[ 1036.078014][T19175] total_active_anon 7065600
[ 1036.082534][T19175] total_inactive_file 0
[ 1036.086765][T19175] total_active_file 102400
[ 1036.091273][T19175] total_unevictable 0
[ 1036.095274][T19175] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.16846,pid=19174,uid=0
[ 1036.110280][T19175] Memory cgroup out of memory: Killed process 19174 (syz.7.16846) total-vm:96148kB, anon-rss:1300kB, file-rss:22480kB, shmem-rss:6400kB, UID:0 pgtables:148kB oom_score_adj:1000
[ 1036.205536][   T29] audit: type=1400 audit(1765549995.998:81802): avc:  denied  { unmount } for  pid=14173 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 1036.236826][T14173] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1036.350233][   T29] audit: type=1400 audit(1765549996.028:81803): avc:  denied  { create } for  pid=19201 comm="syz.3.16854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1036.371206][   T29] audit: type=1400 audit(1765549996.038:81804): avc:  denied  { write } for  pid=19201 comm="syz.3.16854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1036.392061][   T29] audit: type=1400 audit(1765549996.078:81805): avc:  denied  { name_bind } for  pid=19206 comm="syz.1.16856" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[ 1036.458164][T19214] set_capacity_and_notify: 4 callbacks suppressed
[ 1036.458182][T19214] loop7: detected capacity change from 0 to 512
[ 1036.479351][T19214] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #18: comm syz.7.16853: iget: bad extra_isize 90 (inode size 256)
[ 1036.499648][T19214] EXT4-fs (loop7): Remounting filesystem read-only
[ 1036.506346][T19214] EXT4-fs warning (device loop7): ext4_evict_inode:273: xattr delete (err -30)
[ 1036.515436][T19214] EXT4-fs (loop7): 1 orphan inode deleted
[ 1036.521698][T19214] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1036.550286][T14173] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1036.731408][T19240] loop7: detected capacity change from 0 to 512
[ 1036.745243][T19240] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1036.759780][T19240] EXT4-fs error (device loop7): ext4_quota_enable:7173: comm syz.7.16867: Bad quota inum: 4, type: 2
[ 1036.771746][T19240] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=4). Please run e2fsck to fix.
[ 1036.788201][T19240] EXT4-fs (loop7): mount failed
[ 1036.812431][T19240] loop7: detected capacity change from 0 to 512
[ 1036.821297][T19240] EXT4-fs: quotafile must be on filesystem root
[ 1037.167024][T19253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16871'.
[ 1037.187482][T19253] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16871'.
[ 1037.627853][T15877] usb 3-1: enqueue for inactive port 0
[ 1037.654376][T15877] usb 3-1: enqueue for inactive port 0
[ 1037.747080][T15877] vhci_hcd vhci_hcd.1: vhci_device speed not set
[ 1037.815746][T19285] netlink: 'syz.6.16884': attribute type 4 has an invalid length.
[ 1037.823817][T19285] netlink: 17 bytes leftover after parsing attributes in process `syz.6.16884'.
[ 1037.841243][T19287] loop1: detected capacity change from 0 to 512
[ 1037.868568][T19287] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1037.910706][T19287] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.16882: invalid block
[ 1037.943775][T19287] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.16882: invalid indirect mapped block 4294967295 (level 1)
[ 1037.960030][T19293] 9p: Bad value for 'wfdno'
[ 1037.998701][T19287] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.16882: invalid indirect mapped block 4294967295 (level 1)
[ 1038.033334][T19287] EXT4-fs (loop1): 2 truncates cleaned up
[ 1038.039742][T19287] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1038.136389][T19304] loop7: detected capacity change from 0 to 1024
[ 1038.149034][T19304] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1038.188592][T14173] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1038.213446][T19312] netlink: 24 bytes leftover after parsing attributes in process `syz.6.16894'.
[ 1038.229095][T19314] loop7: detected capacity change from 0 to 512
[ 1038.236203][T19314] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1038.246602][T19314] EXT4-fs error (device loop7): ext4_quota_enable:7173: comm syz.7.16893: Bad quota inum: 4, type: 2
[ 1038.258092][T19314] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=4). Please run e2fsck to fix.
[ 1038.273976][T19314] EXT4-fs (loop7): mount failed
[ 1038.288083][T19314] loop7: detected capacity change from 0 to 512
[ 1038.295277][T19314] EXT4-fs: quotafile must be on filesystem root
[ 1038.302467][T19317] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16895'.
[ 1038.313624][T19317] netlink: 24 bytes leftover after parsing attributes in process `syz.6.16895'.
[ 1038.585394][T19334] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16902'.
[ 1038.596193][T19334] veth1_macvtap: left promiscuous mode
[ 1038.619451][T14934] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1038.660617][T19339] netlink: 180 bytes leftover after parsing attributes in process `syz.3.16904'.
[ 1038.856056][T19352] netlink: 16 bytes leftover after parsing attributes in process `syz.8.16909'.
[ 1038.876772][T19354] loop3: detected capacity change from 0 to 512
[ 1038.886541][T19352] netlink: 12 bytes leftover after parsing attributes in process `syz.8.16909'.
[ 1038.903091][T19354] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1038.913009][T19354] EXT4-fs error (device loop3): ext4_quota_enable:7173: comm syz.3.16910: Bad quota inum: 4, type: 2
[ 1038.924300][T19354] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=4). Please run e2fsck to fix.
[ 1038.940369][T19354] EXT4-fs (loop3): mount failed
[ 1038.963199][T19354] loop3: detected capacity change from 0 to 512
[ 1038.970414][T19354] EXT4-fs: quotafile must be on filesystem root
[ 1039.033934][T19363] loop1: detected capacity change from 0 to 512
[ 1039.041095][T19363] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1039.054590][T19363] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.16912: invalid block
[ 1039.077968][T19363] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.16912: invalid indirect mapped block 4294967295 (level 1)
[ 1039.096929][T19363] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.16912: invalid indirect mapped block 4294967295 (level 1)
[ 1039.112786][T19363] EXT4-fs (loop1): 2 truncates cleaned up
[ 1039.119010][T19363] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1039.133155][T19363] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.1.16912: path /279/file0/file0: bad entry in directory: directory entry overrun - offset=196864, inode=4278190093, rec_len=196860, size=60 fake=0
[ 1039.196720][T19378] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1039.208380][T19378] EXT4-fs error (device loop3): ext4_quota_enable:7173: comm syz.3.16917: Bad quota inum: 4, type: 2
[ 1039.219988][T19378] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=4). Please run e2fsck to fix.
[ 1039.235928][T19378] EXT4-fs (loop3): mount failed
[ 1039.281988][T19378] EXT4-fs: quotafile must be on filesystem root
[ 1039.548349][T19400] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1039.593346][T19400] EXT4-fs error (device loop3): ext4_quota_enable:7173: comm syz.3.16924: Bad quota inum: 4, type: 2
[ 1039.604734][T19400] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=4). Please run e2fsck to fix.
[ 1039.620183][T19400] EXT4-fs (loop3): mount failed
[ 1039.634718][T19400] EXT4-fs: quotafile must be on filesystem root
[ 1039.797071][T19195] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[ 1039.816517][T14934] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1039.977893][T19435] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1040.117536][T19435] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.16935: invalid block
[ 1040.141131][T19435] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.16935: invalid indirect mapped block 4294967295 (level 1)
[ 1040.177392][T19435] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.16935: invalid indirect mapped block 4294967295 (level 1)
[ 1040.254946][T19435] EXT4-fs (loop3): 2 truncates cleaned up
[ 1040.270287][T19435] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1040.362840][T19451] 9pnet_fd: Insufficient options for proto=fd
[ 1040.450502][ T2945] ==================================================================
[ 1040.458652][ T2945] BUG: KCSAN: data-race in n_tty_receive_char_flow_ctrl / tty_set_termios
[ 1040.467224][ T2945] 
[ 1040.469633][ T2945] write to 0xffff888119a4b908 of 44 bytes by task 19457 on cpu 0:
[ 1040.477496][ T2945]  tty_set_termios+0xc0/0x8c0
[ 1040.482219][ T2945]  set_termios+0x490/0x4d0
[ 1040.486694][ T2945]  tty_mode_ioctl+0x379/0x5c0
[ 1040.491423][ T2945]  n_tty_ioctl_helper+0x91/0x210
[ 1040.496425][ T2945]  n_tty_ioctl+0x101/0x230
[ 1040.500902][ T2945]  tty_ioctl+0x83f/0xb80
[ 1040.505184][ T2945]  __se_sys_ioctl+0xce/0x140
[ 1040.509845][ T2945]  __x64_sys_ioctl+0x43/0x50
[ 1040.514503][ T2945]  x64_sys_call+0x14b0/0x3000
[ 1040.519232][ T2945]  do_syscall_64+0xd8/0x2a0
[ 1040.523776][ T2945]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1040.529702][ T2945] 
[ 1040.532037][ T2945] read to 0xffff888119a4b922 of 1 bytes by task 2945 on cpu 1:
[ 1040.539584][ T2945]  n_tty_receive_char_flow_ctrl+0x59/0x1d0
[ 1040.545413][ T2945]  n_tty_lookahead_flow_ctrl+0xed/0x130
[ 1040.551021][ T2945]  tty_port_default_lookahead_buf+0x91/0xc0
[ 1040.556933][ T2945]  flush_to_ldisc+0x288/0x340
[ 1040.561631][ T2945]  process_scheduled_works+0x4ce/0x9d0
[ 1040.567108][ T2945]  worker_thread+0x582/0x770
[ 1040.571731][ T2945]  kthread+0x489/0x510
[ 1040.575833][ T2945]  ret_from_fork+0x149/0x290
[ 1040.580455][ T2945]  ret_from_fork_asm+0x1a/0x30
[ 1040.585240][ T2945] 
[ 1040.587573][ T2945] value changed: 0x13 -> 0x09
[ 1040.592340][ T2945] 
[ 1040.594671][ T2945] Reported by Kernel Concurrency Sanitizer on:
[ 1040.600833][ T2945] CPU: 1 UID: 0 PID: 2945 Comm: kworker/u8:38 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[ 1040.612396][ T2945] Tainted: [W]=WARN
[ 1040.616214][ T2945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1040.626284][ T2945] Workqueue: events_unbound flush_to_ldisc
[ 1040.632140][ T2945] ==================================================================
[ 1040.644856][ T3939] usb usb4-port1: attempt power cycle
[ 1040.774289][T13754] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1041.135817][   T29] kauditd_printk_skb: 541 callbacks suppressed
[ 1041.135833][   T29] audit: type=1326 audit(1765550000.928:82347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19449 comm="syz.6.16940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe85d0665e7 code=0x7fc00000
[ 1042.527257][ T3939] usb usb4-port1: unable to enumerate USB device