last executing test programs:

1m21.783782281s ago: executing program 2 (id=17):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000004008500000082"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x90, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x64, 0x3, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPR={0x58, 0x7, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_INFO={0x30, 0x3, "b08c674515113085726709225a7547b6f14c1aa7a7202afc0811618e3b5a514fb651ff7360e7749fe5bee390"}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}]}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x114}}, 0x0)

1m21.722341203s ago: executing program 2 (id=19):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x74, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10)
close(r0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={<r4=>0x0, @multicast1, @multicast2}, &(0x7f0000000080)=0xc)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xe6, <r5=>0x0}, 0x8)
r6 = syz_open_dev$vcsu(&(0x7f0000000180), 0x4f, 0x50482)
sendto$inet(r6, &(0x7f0000000540)="05e0ad2cca717ed937fd91b44151da882f5c6650549fae7840cea4b44a30b1aec1346addee0e138a978fb381fbe8015c621633ac073417d4cb35893196e5fa77234fb807c54bcf480afeb3bec42af24c1718ed353aa8170f1249265b8667a4c3e7566306b2915da827b9ae9174c3b73429bb3bdaf622d5dd5aacd0cbf5aa4f70489b76c688cb1ea6a2c33082711458eb99058e7c7ef604af136111310d4150388e096a288e7885edb33c3c4b2d86ccb90a388027193bb4b48e95d7dc85dbc24b826a3fe4c0b01d7fabc6063d8bb6009e708640df9d5cfe5bcd48e3c755148498d4b87957d48cd3cfdc83", 0xea, 0x4841, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r7}, &(0x7f00000005c0), &(0x7f0000000600)='%pB    \x00'}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000003c0)='mm_page_alloc\x00', r8, 0x0, 0xffffffffffffffff}, 0x18)
r9 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4c58, 0x4, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r9, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x12, '\x00', r4, @cgroup_sock_addr=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r10}, 0x18)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)

1m19.689811058s ago: executing program 2 (id=40):
r0 = syz_open_procfs$pagemap(0x0, 0x0)
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x100000c01, 0x61, 0x0, 0x0, 0x6e})

1m19.609344052s ago: executing program 2 (id=41):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000003c0)={[{@errors_continue}, {@data_err_abort}, {@noinit_itable}, {@dioread_lock}, {@noquota}, {@resgid}, {@data_err_ignore}, {@nodiscard}, {@nobh}, {@nojournal_checksum}, {@grpquota}, {@dioread_nolock}]}, 0x1, 0x56b, &(0x7f0000000b00)="$eJzs3c9rHOUbAPBnNkl/f79NoRQVkUAPVmo3TeKPCh7qUbRY0Htdkmko2XRLdlOaWLA92IsXKYKIBfGud4/Foxf/ioIWipSgBxFWZjObbpvdZJum2W3384EJ7zszu+/77szz5pmdXTaAgTWW/SlEvBgRXyURByMiybcNR75xbHW/lftXp7MliXr94z+Txn5ZvflczcftzysvRMQvX0QcL6xvt7q0PFcql9OFvD5em780Xl1aPnFhvjSbzqYXJ6emTr05NfnO229t21hfO/v3tx/dfv/Ul0dXvvnp7qGbSZyOA/m21nE8gWutlbEYy1+TkTj9yI4T29BYP0l63QG2ZCiP85HI5oCDMZRHPfD8+zwi6sCASsQ/DKhmHtC8tt/4Ovj/O5SV7Jx7761eAK0f//DqeyOxp3FttG8leejKKLveHd2G9rM2fv7j1s1sie17HwJgU9euR8TJ4eH181+Sz39bd7L96j2tlUfbMP/Bzrmd5T+vt8t/Cmv5T7TJf/a3id2t2Dz+C3e3oZmOsvzv3bb579pNq9GhvPa/Rs43kpy/UE5P5tnwsRjZndU3up9zauVOvdO21vwvW7L2m7lg3o+7w7sffsxMqVZ6kjG3unc94qW2+W+ydvyTNsc/ez3OdtnGkfTWK522bT7+p6v+Q8SrbY//gztaycb3J8cb58N486xY768bR37r1H6vx58d/30bj380ab1fW338Nr7f80/aadtD44/uz/9dySeN8q583ZVSrbYwEbEr+XD9+skHj23Wm/tn4z92dOP5r935vzciPu1y/DcO//hyV+Pv0fGfeazj//iFOx989l2n9rub/95olI7la7qZ/7rt4JO8dgAAAAAAANBvChFxIJJCca1cKBSLq5/vOBz7CuVKtXb8fGXx4kw0vis7GiOF5p3ugy2fh5jIPw/brE8+Up+KiEMR8fXQ3ka9OF0pz/R68AAAAAAAAAAAAAAAAAAAANAn9nf4/n/m96Fe9w546vzkNwyuTeN/O37pCehL/v/D4BL/MLjEPwwu8Q+DS/zD4BL/MLjEPwyudfH/b71e701XAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Hlw9syZbKmv3L86ndVnLi8tzlUun5hJq3PF+cXp4nRl4VJxtlKZLafF6cr8Zs9XrlQuTUzG4pXxWlqtjVeXls/NVxYv1s5dmC/NpufSkR0ZFQAAAAAAAAAAAAAAAAAAADxbqkvLc6VyOV1QUNhSYbg/uvGMFH6NiD7oRheFXs9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDAfwEAAP//LN46xw==")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x4661, 0x800, 0x5, 0x20e}, &(0x7f0000000240)=<r2=>0x0, &(0x7f0000000680)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1})
io_uring_enter(r1, 0x40f9, 0x217, 0xa5, 0x0, 0x0)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000000)={0x64, 0x0, 0x1, 0x70bd2d, 0x65dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0xb}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x80}, {0x8, 0xb, 0x6}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[], 0x400040)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f00000005c0)={'#! ', './file0/file0'}, 0x11)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0)
read(r6, &(0x7f0000000000), 0x20f1)

1m19.431468689s ago: executing program 2 (id=45):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYRESDEC=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000006c0)={'wg1\x00', <r5=>0x0})
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700), 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x1a, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffff8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='GPL\x00', 0xa, 0x1000, &(0x7f0000000e00)=""/4096, 0x40f00, 0x60, '\x00', r5, 0x25, r6, 0x8, &(0x7f0000000740)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x2, 0x5, 0x7, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000007c0)=[r2, r2], &(0x7f0000000800)=[{0x5, 0x4, 0x7, 0x7}, {0x2, 0x5, 0xe, 0x3}, {0x4, 0x5, 0x6, 0x5}, {0x1, 0x5, 0x7, 0x5}, {0x0, 0x4, 0x2, 0xb}, {0x1, 0x3, 0x2}], 0x10, 0xdc}, 0x94)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0)
clock_adjtime(0xffffffd3, &(0x7f00000004c0)={0x30000000000000, 0x4, 0x26, 0x100000000000009, 0x28, 0x1, 0x8000000064a, 0x5, 0x9657, 0x5, 0x2, 0x6a780000, 0x9, 0xb, 0x5, 0xcc4, 0x2efa, 0x1, 0x9d46, 0x4, 0x1, 0x6, 0x10, 0xfffffffffffffff8, 0x1, 0x2000008000000})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
syz_emit_ethernet(0xfffffffffffffd93, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaabb08004500002c0afe0000ff119078ac1e0001e000000100004e220018907804000000090000dda63d1c40f8ee40a1f037bf0e86b145b3cd"], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES8], 0x0, 0x23e, &(0x7f0000000bc0)="$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")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r7, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)

1m18.877036873s ago: executing program 2 (id=53):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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")
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffd13}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48)

1m18.876665603s ago: executing program 32 (id=53):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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")
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffd13}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48)

1m9.049584466s ago: executing program 4 (id=213):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000100000009000000ae00000000000000", @ANYRES32, @ANYBLOB="00000000000600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x50)
bpf$MAP_CREATE(0xc00000000000000, &(0x7f00000007c0)=ANY=[@ANYBLOB="0d00000002000000040000000240000000000000", @ANYRES32=r1, @ANYBLOB="1e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000011"], 0x48)

1m8.906595362s ago: executing program 4 (id=216):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rxrpc_transmit\x00', r0, 0x0, 0x2b5}, 0x18)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x0, 0x41}, 0x28)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b0300000000006c1d0010047e0c8131a6080c000af32c6e020075f800250002000f00e5aa000017d34460bc24eab556a705251e6182949a36c2d13b48dfffa600000000ecb8f6ec63c9f4d4938037e786a6d1bdd700", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1ff, 0x1}, 0x4352, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
socket$can_bcm(0x1d, 0x2, 0x2)
sendto$inet(r1, &(0x7f0000000a00)="092b361298c650e2620e5623855a160c7f3a095d54c6ec9bce68a3d679380e1a5a963f31e451a00e3494e02ed0c41c7a2fdaa03831a9d9d0200baa5de84a715c9ff39b1e59325bbbbe946bddd37fda5e0daf479d9eeaec344d8884a222096c9852fff3ea8ff75e4b45f90c3f0f76f9d409bfdcf9c6ae5e9b912c472ab31dfe0e55aca8a00e62bdd95aee3cc52fa896204bb72e86a79dc3444ad2a76986fe2a9f338899101a6821c930685a9eba3970cf65c0d644c4cfff0dcf2e855e432359f0f2b2137a168a3f0ca6736dd634d86b8b2850d0a36e60f465bdf17c08449c8da1ff0f3cc7948d60ac35642e4e1ffec64d1555771d0b59b5d0dfab34edd053d99d38e85e7e9c7c5ce06149e141403fb69731c554253c715c8d88dba134b417576df34322873a02fc07292e4c6365308745b55108834f76de16e2b96aa80ea57785a6fe49cab3a3f1679e91f68a5e14f56d3a29d579509b90dbf6c9d57ed537a20f223d3c79652e26e89816054a15acd63e0ea492203dd02459c42cfd8cb4c3cf546f01b0ef106be7df772def85adea6f2a32bad254e4f855eb572ad4d83b93b8584edd6001ae1b436b5fc197dc4a12e35ab8f3c06b539ed220ac215a84df298f18edc0a56b908eff57c80d18b8753d037e6f282f8dfc772b51226e0a80c4ac058f17268374e261e9f2e36a3134f73a68640fe7a4b7da866bd57314a8c2aee7de4ecc127b2440a7ca9b82a0843f00f20621cdf203c72b88aa7568ede9e90ab3a5f4c7c812743af9c9fb05627305c08c1ff230ad6c70a405cf1dd88d64c33a82e7d9a0db1ad58eb0b6662beead549b7d312df86a2d1f3c864152903cdafad3cbd5ff99713c6d3fa17df2e94cec5bd9eb43214a2c9b904052caf5513bed7f8224c730d54ed67672ddde59eea45bce50d03dfe2f0f3ae298ea3b07ea228bd7d01e470f1eced92b873fb4137fc308a85715f1c508957bffec9b4f91f3e463bae6b6aa3559acdd5063b1ea1819b8616afbd9fe98d7caba6c19ee2990830f37ccd5744c592a18c83defba5185405f333a285bcc504746ad2b12a6a534c58ad3b73321d99ceda8f7bf1ffc509c3dceb262fb1eb7430fa2563ff440b59aca07ffc8625ae3f8d4e06c19526a9550e9d5c31dc2753fce44976b81d52f5e87ed826ab7a24d2d1f026d7500fd05b2058207db84c201cffc2f17f8252e448196115fdb7ea8751a691556e9ca9b9867a29c727e1a3a896307c5ee9779df9c2f06ce8b80a072315937656db4d6923d5af3249d9f52af0a697c82ded125ed50f4c112594c6974c755e4fd78daed858951da99e1aceaebc68c8138f34729c7171baadc5541dde0f9251403450fe12d1283e7a8f92e7966bdf5b9daeccd1b20870bae441744152eca2e6e9a88b9cad700cea1bd7295e5b6459e7f13fc6dac3544a5a8b015376fcee1b41a2ea8485b46551104f65c671ec9167c928fad134b5ef21dfcbd9853928c8a37a504b40de6cdf3977da7e3c0740666d85321036d69917dbcb8bef35588c9c70556f4c80c4ee2bf2142f21eb762f10bb23c06a6244f8669da25192ac9896ca04f9b0faa3c39cdf9e00437969fdb71ae97e75b191e1452460dcf8f855b88cedf7d2acfd863d272a99834684191412d92248ae4d1dd58db625b33818960dad496e409589cb360d6a3b61fafc0ade8e6a5f44d4e2a981674c6dce11773db80b5c0c526f3746187ca450a05f6c8b11bc9241b6f419fd55033f708d4239578b19d2eeecb07b0633ff9fee1f9539fe595e56bc95d7ed56b51b51308b8c348496603fd54bd4dec28f4ecea58256bb8bd8f84c0a6bdb0aaa734f796e704e959174ed5744cd63f6dfd76fd480a37b51e034e6b8b230f6fbe2026d5f7841b8ddfaf95e852bf036ce9415c23e203fc17f22e7ee395184d9ca2f41ef488f3e7ccc6d6ea84cba89fe4fe65434bd60518f3cc8dc5a823e45f3d65ea317a8293aa0c365e023654a76bc8c832707ee796f7a453a21efe0dadc2c23b593801d03085b7d3f8348e5ab226f759d2da5d8d67dd3a5d0d23dba393142150c2e1a4583ac77f8a3e565e010e0aa438f534afdb687854958e150918c88b148aed4023f94bd8907769244c235b80ddf575688e8eeb2c72c3e728bb07aa70a9d8d65090edc0f3529f08595d3a4fc6d658c3f0db06eda19a6f33352c907e8db19416ef0c0894347bad969d88a9d4aa02c08bd4477a7e8ffd17d37e0bcb2d26c20c891dfe08f74f4efa3431189af9bd972989f827a398418d22c465db87d1d300d99676a1c98bb3114f61fc5f98af47f5e5fe3b73058dea4434e49f00005d384cf849c33668d3c3b1465f1a4fe0c8e9134b4bb82512003b8dccaa64680fa8c86f3531c4ed3a9f55eafadb6be50363a28acf893cf7221222a46e35ea3f4197b8cc1ba9584337b3810804e77ac32b3fa2bf5d8a8fda845c715d1f66af04f5e86a24c24c477abdabf8feaf1d5cf587439763775c5fe9bb2eb41922b896b670ae3f52ba4d51cbe9c16cb6d39dbcbfa010030c5c38adf4460d6fb40088effe52889ef16e6f37b7b8e8041575efe8f6f2b67101121be135160d8bfd2cc860c2a319154ad810bfcc4f4fa22476c871acf99634d7254c821cdf014bee338f199de2f87893027b3e0b2f5c5b8ad788c86230441ec029ce8361f9eff66ccfdee6bc065560f19c19f5d15b0a76435b82b9134cd69da5496f470c419f88e2b494cba573ef37a7347220afa92d8d1a3c6293b7281214b2b09255a7f037b7481978bf00fe5100447eed7ec4eb0adfe87a58bab5e7e07cb7325ff42f4950a74e96c98f9da88a7c08a98e04126e2f68a7bc219c04ac61b0325732cb2f11b4504ba0ce1c6aa24906d2bdb05d301a41e688125647f16996a5992494aadf32c7fcc9c4f6795f52b43154ce3edc052e0e8dfaf256e6f00d5c2dd6e6a21f1320303c9aa38bf901be7dcbfcef533fda80ef9e03675014841d24f60bc0419f4eb77cc1650c9e847857693f0dad76dc70dcd354eaf78dec53eda8ced056f35645f9d1f6cbbe0cb559e1bdf6b3d719db8bf52e6aa4036d669091b158207d71606f50ea078e17d98d84417399a92e676d4f0490ed8316e6ad659f318661302d9ac447ebbbb0dfa23d1a88fc13ed4827331e32a44806aa15d758b04546e642ba618351d54e13cd1a59ba131f2d7401f5955d030c01edadb0196f65919ec85361b41712a9bc3452218aabac74d0e6641b2006ce669f4a270cb320cd45d4d55cf9a880433de554befd9688892263c1437dd8e292b4d001b03ebaa49ef5748fde5e196161a06cac60a25adbd97880f0232e1ddcbe192fecb70080814456e143584f3dfb093509c0bbfe0784325d77b058110c890f23329502c85d25895a769b455a6a237d4b875472e68c3edc8c993d408dab0f2dfde66bbba603a80f53bf08ceb84ef198812b976c642f0aa9a7fb30313d3db0bff20f7d568886871a764abff6b1834d514f7e21122f838f5d17c489dc6f38c920a3769239a8056e5fa7bd3cbccc882c0e291117e490d1ddad1037e3ff378bbc8ec819a996862da691b0c577e44802d6fc8beeb58278558d5f9d39d33a74115d44a0c3f997e5d8b2bec0268078b9c3103d86afb8c2e70cb271ce8953c2dabd948a232660ad78b27d6905d9952037ad2132390266ca40db622e1bfe1d1ee3718790ca4828cdfda6073d8aabd723ee5d2e900e64cfbad46a23ca4b289ef3b67f573cefbd1b1703f0701bd8f79c4503f13f510cedf68b7b28b0dabbae45da225f99320b457aaa59d79a9b096380e05fa0cb406a9789f6b5a7c126db50af5b0e93cfe1378493e880e84c2fa0b2bb71d08bf52c81571b1cdb00def15a83f835d3215f20a53a75aeff8371382ce81a7d33b4319a166f349fef01e72c555a945597577e5a78cd14854b21628e0531b55460a7dca696563183240b6f192a5af4de51970666ea0f059c30def5bee6ff6a00d4395948ff50a39cd50061afd2ae6fa8abd8f5b5858c59cd9a3fbdf8b7b4cc0d245e0f6ad937f37a0632c69d977ada8ab694b02e3427af17e4b041f3cde4527fd2fa83304dff9a4a57a9527b0d700ff343f52c952f588cdb6ef438689f2084989c36c39422437b18ad8c79927e993a191ee584f3210d9e354520c7a64e4a8da3f383c1399eb7a61c0535b0121cf986aefd3b5fe46f564f8a7636ec18071ea8fe98099c04eaf84092ef051ba9a6510acd7d599a195f165ae47900893967f6c9529ff79eaba8faad5c3b3e5ffdd26a28a82842e22f80822bdba297113bec5e294ca389f0ff86103a79b455ca098a3662f2921067ceb614adb90aab26e564e950a5629fe956e50b213420c03c0c8270dbd9389e59fdbf928a4ba1435f096c0e6b3b30d7e61fc69d71ea9f78edce2f9bb40499e0ecd78383cd79a8acc477630e5e238d8d913c1deaaa286c710fdf2da01fc6902f3f24f4479680230a6813a28ee9c8b65432b244e71b74e8206506f2f2e35f5530c1e6bb82f0f4cb2bf57e6c13ba72c74018bef588d8df10a84fe3a46c6870147a148b81c785a3c20c723abdf41c750b2ccc6d493e1123f49a013740a6125f7ef0468bc2050f43826020f3a042970dbebdaba70656a2d50c29da44e7acd0ecb23929a9f022a40633d5da6860524a8848f4824dc70a79e08364bdec8b9bb938df726a278319f8bb6201846bbc45a7337d873de825d13088bae89d80695c1f24c6c1bf8e905bba21b791f868f49ded0e8e6a39706cf331794d8970b56301640293ae325feddb23bc0b0207f3ffe5ef14ab7587822db507f28517c6efd257edb0bb94f47b4b2286da07622ff6de97a0f4ffea783e7598e36b8084ba3ac2123694a1ac09b83e9eb5b6b3a5181dbbbe0007bd659a9a1eaefdf72792c98df9479e7006776f4ce5a59fbc8f529c1cc7f6eb3b6b98ab618a1c12dd4c15887fabcce85f6a37c1fcc6d61a7f182c02a058c53eae95418569cf3e1ebdcffbf29f8dda5cb5f342b0cdb4a58be7f6d4cf288f7550c3707372c861973eaa3be4e7f762e60148c4a7d9f1a41794f0176f7cc50a349952417c775420c3ace7c07eaa2bbcc612258d18a19cff7fb6a9894321047632afbf1b656d68883db8f560168ecad21d4516507199baf398ced4105ec45c138d4e078b83adb86f2755d712d60c912961d7822412433d96da6e119dabfd2ad923fc4f4fa4ead9876d56a69a436eb266b970d99259e737d1ffe385afe08d27482d4e676c88ccd056b089542ea17348b86fc399e8aa3c1e1deb27a5a4eb0a2c9c576a2bfe98b48c368fce0c2e9f32c9bce6bd7c6aaabca0a8209c35e7b4282b0e95959fb49cea06e4e14a02a07d33f4933b2494df572840ecc032eae8c57a5fb2474c24f60c00a5558c849c8f45b77394f8e6643e84fef490e63a01b7ad1fa4eb7e5c0c7490152330b53b898a19a7bd6c1d93174388083a5a2f072e47e1714b6e53d4d1e238c0a7f3a155c2d2638809b1471e61f8440f5d8a2d44ebcb3a7fee1d1da58d0ad3be61c56d795139ce4a4ff8cdc52e7af6ab31d168e2b7d89741c8d7d094550a62fb690fc76328fa3a2b6687f847c2110f337a35418f0e3792ab634f53c8ff43ccca532b0378300e1f95f128ac2fe1159ee7b9ab796d94573694732ea8846e0e6f2d6ad324ddadbd6adadc83890725bff213ffaebd6ad56e5e9510605ddabd66e3e932388b8c1cb9a1efea3d442a364bbd5429a49998fea8b99befb39343e2f979f146eee9b8597cb15273a650b8539c6558e64bf54914ef2b617e6a80", 0x1000, 0x24008004, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3c80, 0x0, 0x0, 0x41100}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0)

1m7.994746481s ago: executing program 4 (id=225):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}})

1m7.931814523s ago: executing program 4 (id=226):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}})

1m7.808965228s ago: executing program 4 (id=231):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="48c80000000000002000128008000100677265001400028006000367216b230e8af6b1000726998da29065ea09b4c03880000000"], 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380"], 0x110}}, 0x0)
r5 = msgget(0x2, 0x4)
msgrcv(r5, &(0x7f0000000580)={0x0, ""/57}, 0x41, 0x1, 0x3000)
r6 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0x0)
keyctl$unlink(0x9, 0x0, r6)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000002c0)='.dead\x00', &(0x7f0000000380))
socket$nl_audit(0x10, 0x3, 0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000840)={'dummy0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xfffffeb2, 0x2}]}}}]}, 0x9c}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000000300)={'erspan0\x00', r9, 0x7, 0x10, 0x7, 0x800, {{0x6, 0x4, 0x3, 0x1d, 0x18, 0x68, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop]}}}}})
r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x6, '\x00', r9, r10, 0x3, 0x1, 0x5}, 0x50)
syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x1d, 0x0, [{0x1, 0x11, "b385dbf7ebae8ad7db3ae778ebd295"}, {0x6, 0x6, "1147274d"}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)

1m7.561727129s ago: executing program 4 (id=235):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x310)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, 0x0, 0x240448c1)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x1, @mcast1, 0x8000}}, {{0xa, 0x0, 0xb53, @empty, 0x80}}}, 0x108)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
sigaltstack(&(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, 0x0)
timer_settime(r1, 0x1, 0x0, 0x0)
unshare(0x64000600)

1m4.012991718s ago: executing program 5 (id=273):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28832, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21000000}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000180)={[{@dioread_lock}, {@resgid}, {@mblk_io_submit}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@grpid}, {@jqfmt_vfsv0}]}, 0xfc, 0x58f, &(0x7f0000002d00)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fallocate(r2, 0x10, 0x6, 0x9)
mlockall(0x1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESOCT], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000540), 0x80000000, r3}, 0x38)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x4}, 0x18)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0xf5ff, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d103"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)=ANY=[@ANYBLOB="18000000011401002abd7000fcdb94a0e59fbbec86f9a054"], 0x18}}, 0x10)
setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0x0, &(0x7f0000000000), 0x4)

1m2.651046265s ago: executing program 5 (id=275):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001000c107"], 0x7b}}, 0x20048482)
r3 = socket$netlink(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'rose0\x00', 0x0})
socket$netlink(0x10, 0x3, 0x0)
r4 = syz_usb_connect(0x2, 0x298, &(0x7f0000000800)={{0x12, 0x1, 0x200, 0x2b, 0xb6, 0x47, 0x20, 0x413c, 0x7933, 0x6dd5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x286, 0x1, 0x4, 0xb, 0x80, 0x3, [{{0x9, 0x4, 0xf7, 0x1, 0xa, 0x2, 0xd, 0x0, 0x6, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "5ae4c8e055"}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0xb9, 0x6a1b, 0x2, 0x4}, [@mdlm={0x15, 0x24, 0x12, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x1, 0x9, 0x9}]}], [{{0x9, 0x5, 0x5, 0x0, 0x8, 0x0, 0x3, 0x4, [@generic={0x8b, 0x3, "00f8c7fed3568b21a27d8bdec7fa69aa0f33b77fa230f6b010efbcaa4e70a2348cb4e42cd63bb28a517a37464df6572d8a0b2b39d9fdc438df24b01addc95860e5008c150038e4473d390cc37b4c0471d1b089ff85ee55c1692649e43a9b1cdab866bb29dbbe4f9688a265aa1de771960b533936498ef467c3ef403948c75909a3986d724e33892326"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3b}]}}, {{0x9, 0x5, 0x89, 0x3, 0x10, 0x4, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x3ff}, @generic={0x24, 0xe, "1946b3610e7edf2234a68e6c0d968b68349cca6f4e845b3cf7aeb5142a2e2f28d666"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x7, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0xd}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x6}]}}, {{0x9, 0x5, 0xf, 0x8, 0x3ff, 0x80, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x1}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x31, 0x8, 0x62, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x6}]}}, {{0x9, 0x5, 0x6, 0xc, 0x200, 0x4, 0x3b, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x2}]}}, {{0x9, 0x5, 0x80, 0x8, 0x3ff, 0xc, 0x0, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0xb4}, @generic={0x18, 0x4, "c315828d5446e1287d646661e499e14bd77f4f2080dc"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0x3, 0x1, 0x0, [@generic={0x9, 0xb, "26ba0aa4a6e6a4"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x400, 0x1, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x9}]}}, {{0x9, 0x5, 0x4, 0x8, 0x20, 0x0, 0x0, 0xc2, [@generic={0x59, 0x10, "996ad89ba70c16d68b79ad4e89435a69095bb9e78ad983d787fc4e5de16511b21437c3286548ab2717552996bc56203fb98541cd28d3d75d1108b169beaeed67f7ba324cbc2c0209d765cceaa3ee17d88c1a6347afca00"}, @generic={0x7a, 0x2, "9755ed6acd56181555f42a5c59ec9c2112765809699b412684b4d93a7b56ed5360952524016d777b88b6ea72fdec4ccd7e1546cdd37bbcd4f5d6ddf7307f6e1cf32e094d73098b1c38f432cc4ca49198d40b4f607e2e27cd15e5308899a4bc763eacee46941c39a83e978fdbf497f3d2e9b3734f69feaa4a"}]}}]}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x310, 0x4, 0x4, 0xd2, 0x8, 0x10}, 0x114, &(0x7f0000000500)={0x5, 0xf, 0x114, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x6, 0xe9, 0x8}, @generic={0xcd, 0x10, 0x1, "0eeb82181ebfe15174825ffb729f349927ae5dbcb116de3ec18b59eaabe356c344c7315341db3c095b9bbd6e9fdfae6dd916de31f7ae27a347b70015fbfc1251f4766fcf2cc8875658ef47a90d8fce580afba7c61a430aea1f748cd21118997ef00830eb5aa6b8589c46ca73e7c528f1fb672bae9676c211efe0ed20aff7687c7a9a3066353b6f4396a96ebc0e79237c43777748f7402835f49dfa0642911bd8a9f4fa8bb13ca06772f630b1f40f19bcd3be9e39532f7c9adafd6226a3fdf0bf8e783eaa680293cf4545"}, @ss_container_id={0x14, 0x10, 0x4, 0xe, "45665550b6fb7738b8f303adc6df4c95"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xf, 0x8, 0x10}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x6, 0x6, 0x2}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x10, 0x0, 0x4, [0xffff0f]}]}, 0x2, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x421}}, {0x31, &(0x7f0000000680)=@string={0x31, 0x3, "792ae6af112fdbc6cfa65bedafbd1badbbfddd6b6f33ca9ca3273aaf55d41147e9719c74e12b73a3dc7b982ee7a0e8"}}]})
syz_usb_disconnect(r4)
sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24004010}, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x2, 0x0, 0x7ffffdbd}]})
get_robust_list(0x0, 0x0, 0x0)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x58)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x2000775)
socket$xdp(0x2c, 0x3, 0x0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10)
mount(&(0x7f0000000280)=@sg0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)='ceph\x00', 0x38c201c, &(0x7f00000003c0)='memory.swap.current\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r6 = io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

59.550075415s ago: executing program 5 (id=309):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000000), 0x4)

59.506923697s ago: executing program 5 (id=310):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000ef3d00180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x1f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000300)='kfree\x00', r0}, 0x18)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x2, 0x4}}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880), 0x4)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000c80)={'syztnl1\x00', &(0x7f0000000c00)={'ip6gre0\x00', 0x0, 0x4, 0x2, 0x5c, 0x2, 0x28, @mcast1, @local, 0x8, 0x8, 0xfba1, 0xfffffffb}})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000e80)={0xffffffffffffffff, 0x20, &(0x7f0000000e40)={&(0x7f0000000d40)=""/71, 0x47, 0x0, &(0x7f0000000dc0)=""/128, 0x80}}, 0x10)
read(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, 0x0, 0x0, 0x2a7e}, 0x94)
r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$selinux_access(r2, &(0x7f00000002c0)={'system_u:object_r:gpg_agent_exec_t:s0', 0x20, 'unconfined', 0x20, 0x3}, 0x46)

59.481667599s ago: executing program 5 (id=311):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f50850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="ffff6799269a8a4d18b800000000000000000800", @ANYRES32=<r3=>0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x50)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB='\x00'], 0x14}, 0x1, 0x0, 0x0, 0x141}, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001ac0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000003100)=ANY=[@ANYBLOB="0c140000", @ANYRES16=r5, @ANYBLOB="000127bd7000fddbdf250c000000b400038094000400a5c10b17b1b70a06464e693ef9afa1bee272ba1ac66ffb802e38585ddca9c35261bef886fc3b5ad3cfe68582915519ebda9d77c3e26aeb819459b28607244a045d81e4f5bc9b3825d7ffd46dfa41ad5744ee037f1ae1669695e34b6b182c5b700cd27774d2bc3038bc31bc6cac918b219755add3f12534e228b07d869c3db2bb6e8a0f9fb77b66ec7574e929e0094fbd080002000001000008000200ff0700000400010004000100040001000c00018008000100", @ANYRES32=r3, @ANYBLOB="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"], 0x140c}, 0x1, 0x0, 0x0, 0x10000400}, 0x8000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
io_setup(0x4, &(0x7f00000014c0)=<r6=>0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00')
io_submit(r6, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r7, 0x0}])
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
pwritev(r8, 0x0, 0x0, 0x1, 0x2)
socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f00000004c0), &(0x7f0000000500)=0x40)
r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz1\x00', 0x200002, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000540), 0x48c200, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={0xffffffffffffffff, r9, 0x3, 0x0, @void}, 0x10)
r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
pread64(r10, &(0x7f0000000380)=""/19, 0x13, 0x53)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r10, 0x89f8, &(0x7f0000002d00)={'gre0\x00', &(0x7f0000002c00)={'tunl0\x00', 0x0, 0x1, 0x8, 0x0, 0x3a44, {{0x2c, 0x4, 0x2, 0x3f, 0xb0, 0x66, 0x0, 0x7, 0x2, 0x0, @rand_addr=0x64010101, @private=0xa010100, {[@lsrr={0x83, 0x17, 0x7, [@loopback, @local, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @lsrr={0x83, 0xf, 0x21, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x18, 0x6a, 0x0, 0x1, [0x9, 0x401, 0x2, 0x4ec0e91e, 0x9]}, @timestamp={0x44, 0x20, 0xb5, 0x0, 0xd, [0xe7, 0x0, 0x0, 0x200, 0x0, 0x7, 0x4000000]}, @timestamp_addr={0x44, 0x1c, 0x60, 0x1, 0x2, [{@private=0xa010102, 0x100}, {@empty, 0x4}, {@local, 0x7fffffff}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0x39, 0x3, 0x8, [{@multicast1, 0x8}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}]}]}}}}})

59.341260604s ago: executing program 5 (id=314):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000040)=0x7, 0x4)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e00000004000000040000000900000000000000", @ANYRES32, @ANYBLOB="0000000000000000770fd5ecda0400"/26, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=r0], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r3, 0x0, 0x0}, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x40)
bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r4, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)
unshare(0x6a040000)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r2], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000020020008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10)
getpgid(0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010021bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="858804000300000008001b000000000008000d00080000004469db08a9d815762789002d90c8aaa3f6e79b2d"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)

52.353716708s ago: executing program 33 (id=235):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x310)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, 0x0, 0x240448c1)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x1, @mcast1, 0x8000}}, {{0xa, 0x0, 0xb53, @empty, 0x80}}}, 0x108)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
sigaltstack(&(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, 0x0)
timer_settime(r1, 0x1, 0x0, 0x0)
unshare(0x64000600)

44.21613579s ago: executing program 34 (id=314):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000040)=0x7, 0x4)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e00000004000000040000000900000000000000", @ANYRES32, @ANYBLOB="0000000000000000770fd5ecda0400"/26, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=r0], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r3, 0x0, 0x0}, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x40)
bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r4, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)
unshare(0x6a040000)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r2], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000020020008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10)
getpgid(0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010021bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="858804000300000008001b000000000008000d00080000004469db08a9d815762789002d90c8aaa3f6e79b2d"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)

33.695566683s ago: executing program 7 (id=568):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r2, 0x209}, 0x14}, 0x1, 0x0, 0x0, 0x4008080}, 0x0)

33.51806404s ago: executing program 7 (id=570):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x4008084, &(0x7f0000000300)={[{@nodots}, {@dots}, {@dots}, {@fat=@check_strict}, {@dots}, {@dots}, {}, {@fat=@showexec}, {@nodots}]}, 0x1, 0x269, &(0x7f0000000580)="$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")
r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), r1)
sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x24, r2, 0x6a513da061e1002b, 0x0, 0x100000, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r3 = syz_io_uring_setup(0x14d9, &(0x7f00000003c0)={0x0, 0x5121, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setsig(r6, 0xa, 0x13)
fcntl$setlease(r6, 0x400, 0x0)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={<r8=>0xffffffffffffffff}, 0x106, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000040)=[{0x1, 0x0, [0xcfed, 0x9, 0xf, 0x16, 0x1, 0x1001, 0xfffffffa, 0x6, 0x2c4c, 0x9, 0x8, 0x2, 0xfffffffd, 0x7, 0x5, 0x3]}], r8, 0x1, 0x1, 0x48}}, 0x20)
fcntl$setlease(r6, 0x400, 0x2)
read$rfkill(r6, &(0x7f00000000c0), 0x8)
syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0})
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00')
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r11, @ANYBLOB="08000300", @ANYRES32=r11], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x24000080)
sendmsg$NL802154_CMD_SET_CHANNEL(r1, 0x0, 0x4048811)
io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
syz_emit_ethernet(0x4e, &(0x7f00000004c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00)', 0x18, 0x6, 0xfe, @private1={0xfc, 0x1, '\x00', 0xbf}, @local, {[], {{0x1, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x2, 0x0, 0x0, {[@fastopen={0x22, 0x2}, @generic={0x2, 0x2}]}}}}}}}}, 0x0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r12, 0x0, 0xffffffffffffffff}, 0x18)
utimes(0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x1, 0x36, 0x5, 0x537}]})

33.27637124s ago: executing program 7 (id=574):
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x800000000006}, 0x18)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0xb, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', <r4=>0x0})
bind$packet(r3, &(0x7f00000001c0)={0x11, 0x11, r4, 0x1, 0xf, 0x6, @broadcast}, 0x14)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$binfmt_aout(r5, &(0x7f0000000340)=ANY=[], 0xff2e)
r6 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=<r7=>0x0)
timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$TCXONC(r5, 0x540a, 0x3)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newneigh={0x1c, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x20, 0xea, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4)
sendto$packet(r3, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0xbcff, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x3, r4}, 0x14)
vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0000}]})
close_range(r9, 0xffffffffffffffff, 0x0)

32.398054777s ago: executing program 7 (id=595):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c2103, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000440)=ANY=[], 0x10, 0xa19, &(0x7f0000001000)="$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")
lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trusted.'], 0x0, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = getpgrp(0x0)
kcmp(r4, r3, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r2)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x44)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'bridge0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x17, 0x4, 0x0, 0xe, 0x3, 0x0, 0x8, 0x0, 0x0, 0x4, [0x0, 0x0, 0x6, 0x4, 0x6, 0xffffffff, 0xfffffffa]}})

32.190307436s ago: executing program 7 (id=600):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x78)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000280), &(0x7f00000002c0)=r3}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r4}, 0x18)
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x3, 0xfd, 0x3, 0x200}})
r6 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000040)}, 0x0)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01')
timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x9c992000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

31.909158208s ago: executing program 7 (id=608):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="7eba00000000000000000000fffff10000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, 0x0, &(0x7f0000000080)}, 0x20)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
capget(&(0x7f0000000000)={0x19980330, r4}, &(0x7f0000000040)={0x7fff, 0x9, 0xff, 0x2, 0x8001, 0x5})
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c757466383d312c696f636861727365743d61736369692c73686f72746e616d653d77696e39352c73686f77657865632c6e66732c636865636b3d7374726963742c756e695f786c6174653d302c757466383d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c726f6469722c726f6469722c64656275672c757466383d302c726f6469722c71756965742c6572726f72733d72656d6f756e742d726f2c009c8a8fc4f74784ad79ec08fb556262ebc972ef94821f3565ef5f75f11e30ef1f72a065c510b17cae352940538b7b2c5d72f4627c25306b2479725add28f511a68f5f6f47f9facdd0cc574286d00ab52d6b9374b6a58eac694336ebe971f41860d01084c1a0fa6b51d80fa9f9d2c5a2e7a5284f93296217ef8f28e0a36e573296a0bfb38b94191f4b82873563f3759b5e193ecfab6ed7892542364757e47d656ad6a0fbb6e8bf138bddae620a3602991821d4844f628e6bdd8b62cca73744332f0185a54b"], 0x6, 0x2c1, &(0x7f0000001880)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x154, 0x0, 0x2, 0x5, 0x0, 0x0, {0x3}, [@CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x5}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x40}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7fff}, @CTA_EXPECT_NAT={0xa4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast1}}}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x800}, 0x40010)
arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000000))
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000040)=ANY=[], 0x14}], 0x1}, 0x4000000)

31.908668978s ago: executing program 35 (id=608):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="7eba00000000000000000000fffff10000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, 0x0, &(0x7f0000000080)}, 0x20)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
capget(&(0x7f0000000000)={0x19980330, r4}, &(0x7f0000000040)={0x7fff, 0x9, 0xff, 0x2, 0x8001, 0x5})
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f0000001880)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x154, 0x0, 0x2, 0x5, 0x0, 0x0, {0x3}, [@CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x5}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x40}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7fff}, @CTA_EXPECT_NAT={0xa4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast1}}}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x800}, 0x40010)
arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000000))
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000040)=ANY=[], 0x14}], 0x1}, 0x4000000)

19.95925271s ago: executing program 0 (id=767):
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r0 = socket$key(0xf, 0x3, 0x2) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 32)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x81, r3}, 0x38) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r4}, 0x10) (async)
mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x9, 0x32, 0xffffffffffffffff, 0x0) (async, rerun: 32)
capget(&(0x7f0000feaff9)={0x19980330}, &(0x7f0000000180)={0x0, 0x8, 0x0, 0x0, 0x80, 0xc11}) (async, rerun: 32)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_normal', 0x40, 0x112)
syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r6}, 0x18) (async)
io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6})
sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000dc0)={0x2, 0x18, 0x31, 0x0, 0x3, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_x_nat_t_port={0x1, 0x3, 0x4e21}]}, 0x18}}, 0x20000080)

19.859463434s ago: executing program 0 (id=770):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ff9}]})
r0 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil)
r1 = shmat(r0, &(0x7f0000caa000/0x3000)=nil, 0x7000)
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000001, 0x20031, 0xffffffffffffffff, 0xec785000)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x10000, 0x3, &(0x7f0000003000/0x10000)=nil)
shmdt(r1)
bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
syz_usb_connect(0x4, 0x0, 0x0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r4, 0x402, 0x8000001f)
r5 = open(&(0x7f0000000280)='.\x00', 0x181000, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000001000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000000100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='cachefiles_mark_active\x00', 0xffffffffffffffff, 0x0, 0x200000000004}, 0x18)
fcntl$notify(r5, 0x402, 0x8000003d)
close_range(r4, r5, 0x0)
sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbff}, 0x10}}, 0x4040014)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0xa1c0)
syz_open_dev$tty1(0xc, 0x4, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0}, 0x18)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x18)

17.751095763s ago: executing program 0 (id=797):
r0 = syz_io_uring_setup(0x4ace, &(0x7f0000000140)={0x0, 0x5e99, 0x3400, 0x1, 0x19b}, &(0x7f0000000040), &(0x7f0000000200))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000001040)=r1, 0x1)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=<r2=>0x0)
ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=r2)
capset(&(0x7f0000000080)={0x20071026, r2}, &(0x7f0000001080)={0x3, 0x200000, 0x1, 0x3458})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50)
syz_io_uring_setup(0x2c0d, &(0x7f0000000400)={0x0, 0xc890, 0x4000, 0x2}, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@minixdf}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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")
chdir(&(0x7f0000000400)='./file0\x00')
r3 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000080))
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x1402, 0x2, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x51)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r5, &(0x7f0000000180)='./bus\x00', 0x0)

17.59735569s ago: executing program 0 (id=801):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2351010, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xab101a, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x80, 0x11)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
umount2(&(0x7f0000000340)='./file0/file0\x00', 0x1)
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xc, &(0x7f0000000480)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000c000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c080}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r2], 0xb0}}, 0x40)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
close_range(r5, 0xffffffffffffffff, 0x0)
r6 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r6, &(0x7f0000000100)=@in4={0x21, 0x7, 0x2, 0x10, {0x2, 0x4e22, @multicast2}}, 0x24)
connect$rxrpc(r6, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x29}, 0xa5e1}}, 0x24)
r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x713800, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
write$cgroup_subtree(r7, &(0x7f0000000500)=ANY=[@ANYRES8=r1, @ANYRESDEC=0x0, @ANYRESDEC=r8], 0x9)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="144a50000000c45b"], &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0xb, 0x0, 0x99}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[0xffffffffffffffff]}, 0x94)

17.544014402s ago: executing program 0 (id=804):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
socket(0xa, 0x3, 0x3a)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>r0, {0x4}}, './file0\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vxcan0\x00', <r2=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="d3c31811", @ANYRES32=r1, @ANYBLOB, @ANYBLOB="0000000000000000b703000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1c, '\x00', r2, 0x25, r1, 0x8, &(0x7f0000000440)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0xe, 0x2, 0x1}, 0x10}, 0x94)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000080)={0x53, 0xffffffffffffffff, 0x5, 0x7, @buffer={0x0, 0x0, 0x0}, &(0x7f00000003c0)="0000c33930", 0xfffffffffffffffd, 0x80000800, 0x16, 0x0, 0x0})
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000700000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xfffffffd}]}}]}, 0x38}}, 0x4048000)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'geneve1\x00'})
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x2, 0x1, 0xffffffffffffffff})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbf7, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x3f, 0x2, 0x6}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0)

16.186765499s ago: executing program 0 (id=826):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01022dbd7000ffdbdf252100000009001f00706879310000000005002000000000000c0005"], 0x34}, 0x1, 0x0, 0x0, 0x34000800}, 0x0)

16.15516932s ago: executing program 36 (id=826):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01022dbd7000ffdbdf252100000009001f00706879310000000005002000000000000c0005"], 0x34}, 0x1, 0x0, 0x0, 0x34000800}, 0x0)

2.456217586s ago: executing program 6 (id=1036):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000ef3d00180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x1f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000300)='kfree\x00', r0}, 0x18)
r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$selinux_access(r1, &(0x7f00000002c0)={'system_u:object_r:gpg_agent_exec_t:s0', 0x20, 'unconfined', 0x20, 0x3}, 0x46)

2.37314654s ago: executing program 6 (id=1038):
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x100000c01, 0x61, 0x0, 0x0, 0x6e})
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, 0x0, 0x4c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18)
r4 = socket(0xa, 0x3, 0x3a)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESDEC=0x0, @ANYRES8=r4, @ANYBLOB="725bf64baf179c5118f9ee53ba50c88cf2b403b8c0d23f8c4635c8a652bc3a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000340), 0x4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004700)={'team0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0)
setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x6, r8}, 0xc)
setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000005c0)={{0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, {0xa, 0x0, 0x1, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}}, 0x5c)
setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x148}}, 0x40)
r9 = accept$nfc_llcp(r1, &(0x7f0000000000), &(0x7f0000000080)=0x60)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x9, &(0x7f0000000240)=[{0x2, 0x7}, {0xd, 0x7, 0x1, 0x40}, {0x28, 0x1, 0x1, 0x7f}, {0x7, 0x8, 0x2a, 0x9afe}, {0x101, 0x5, 0xfd, 0x8}, {0x3, 0x80, 0x4, 0x6}, {0x4, 0x3, 0x3, 0x83}, {0x0, 0x1, 0xf, 0x4}, {0x4, 0x8, 0x6, 0x7}]})
quotactl_fd$Q_GETNEXTQUOTA(r9, 0xffffffff80000900, 0xffffffffffffffff, &(0x7f00000000c0))

1.782740665s ago: executing program 3 (id=1049):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010329bd7000fcdbdf2524"], 0x2c}}, 0x0) (fail_nth: 1)

1.560309034s ago: executing program 3 (id=1050):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)

1.522963976s ago: executing program 3 (id=1052):
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xdc}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100036c00fc08000000110200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)

1.522361356s ago: executing program 1 (id=1053):
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xdc}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100036c00fc08000000110200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)

1.499157827s ago: executing program 3 (id=1054):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6bf}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r2, 0x209}, 0x14}, 0x1, 0x0, 0x0, 0x4008080}, 0x0)

1.477780757s ago: executing program 3 (id=1055):
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x80000000b49, 0x200000000002, 0x4, 0xa, 0x3}, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/reserved_size', 0x141a82, 0x0)
sendfile(r0, r0, 0x0, 0x3)
socket$kcm(0x10, 0x2, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000400)={[{@nogrpid}], [{@obj_role={'obj_role', 0x3d, 'CT\x00'}}]}, 0x1, 0x48d, &(0x7f0000001140)="$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")
r2 = syz_open_dev$usbfs(&(0x7f0000000900), 0x7f000000000000, 0x80000)
ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x3}, 0x18)
utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x4)
getsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f00000003c0), &(0x7f00000008c0)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TIOCL_BLANKSCREEN(r5, 0x4b67, &(0x7f0000000180))

1.470021198s ago: executing program 1 (id=1056):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x2, [@struct={0x4, 0x0, 0x0, 0x4, 0x1, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x48, 0x0, 0x5e, 0x4}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x77, 0x4}, @float={0xc, 0x0, 0x0, 0x10, 0x4}]}}, &(0x7f0000000400)=""/132, 0x52, 0x84, 0x0, 0xd, 0x10000}, 0x28)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10004, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x2}, 0x10)
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
fdatasync(r1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xb, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3f, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents(r3, &(0x7f0000001fc0)=""/171, 0xab)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20d00, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)

1.394668921s ago: executing program 3 (id=1057):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000100000000000000ab97da9256a81bf501daf8b40ed0eda1daa42ca8019c071f9cc4dfa07b436d3a6f93db10e3b9f900a03e2e64fa4384a17e3d52c6b36a8195bd4b3d35ee9d40dd52a4a720b277be01452250e3d6a3988f83c300d25662e49c8ee2c88f52a22068f219"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0xf)
fcntl$dupfd(r1, 0x0, r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r3 = socket$inet(0x2, 0x2, 0x1)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="184000000000000000000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r4}, 0x10)
sendmsg$inet(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)='\b', 0x1}, {&(0x7f0000000180)="960c00004500", 0x6}], 0x2, &(0x7f0000000080)=[@ip_tos_u8={{0x11, 0x0, 0x7}}], 0x18}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000280), 0x0)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x5)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x9)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a", 0x23}], 0x1}, 0x40)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000200000008b08b8ffbcdc0f000100"}}}]}, 0x48}}, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084)

1.337048233s ago: executing program 6 (id=1058):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000ef3d00180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x8, 0x0, 0x0, 0x1f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000300)='kfree\x00', r0}, 0x18)
r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$selinux_access(r1, &(0x7f00000002c0)={'system_u:object_r:gpg_agent_exec_t:s0', 0x20, 'unconfined', 0x20, 0x3}, 0x46)

1.264434046s ago: executing program 6 (id=1059):
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6001, 0x1)
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xa, @loopback}], 0x1c)
sendto$inet6(r2, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000080000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f28bd421850000008200000095"], 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, &(0x7f0000000780)})
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYRES64=r1, @ANYRESHEX=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x12, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=<r6=>0x0)
timer_settime(r6, 0x0, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r7 = syz_open_procfs(0x0, 0x0)
syncfs(r7)
munlock(&(0x7f00004bb000/0x3000)=nil, 0x3000)
munlockall()

1.222215868s ago: executing program 6 (id=1060):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000110000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='kfree\x00', r0}, 0x18)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_regs={0x12}})

1.161138921s ago: executing program 6 (id=1061):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ff9}]})
r0 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil)
r1 = shmat(r0, &(0x7f0000caa000/0x3000)=nil, 0x7000)
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000001, 0x20031, 0xffffffffffffffff, 0xec785000)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x10000, 0x3, &(0x7f0000003000/0x10000)=nil)
shmdt(r1)
bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
syz_usb_connect(0x4, 0x0, 0x0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r4, 0x402, 0x8000001f)
r5 = open(&(0x7f0000000280)='.\x00', 0x181000, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000000100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='cachefiles_mark_active\x00', 0xffffffffffffffff, 0x0, 0x200000000004}, 0x18)
fcntl$notify(r5, 0x402, 0x8000003d)
close_range(r4, r5, 0x0)
sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbff}, 0x10}}, 0x4040014)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0xa1c0)
syz_open_dev$tty1(0xc, 0x4, 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18)

1.160675421s ago: executing program 1 (id=1062):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8)
timer_create(0x2, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f0000000140)=<r1=>0x0)
timer_settime(r1, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0)
timer_delete(r1)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r2}, 0x18)
dup(0xffffffffffffffff)
r3 = socket$netlink(0x10, 0x3, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18)
r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', <r7=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000fcdbdf250100000008000140", @ANYRES32=r7, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400f9fffbff"], 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x200448c0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r10, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
syz_emit_ethernet(0x4e, &(0x7f0000000780)=ANY=[], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r8}, 0x10)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1f, 0x0, 0x0)

1.032796066s ago: executing program 9 (id=1065):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6bf}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r2, 0x209}, 0x14}, 0x1, 0x0, 0x0, 0x4008080}, 0x0)

986.067528ms ago: executing program 8 (id=1066):
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xdc}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100036c00fc08000000110200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)

968.867039ms ago: executing program 9 (id=1067):
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x80000000b49, 0x200000000002, 0x4, 0xa, 0x3}, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/reserved_size', 0x141a82, 0x0)
sendfile(r0, r0, 0x0, 0x3)
socket$kcm(0x10, 0x2, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000400)={[{@nogrpid}], [{@obj_role={'obj_role', 0x3d, 'CT\x00'}}]}, 0x1, 0x48d, &(0x7f0000001140)="$eJzs3M9vFOUbAPBnZtvyq9B++RIVRK0SY+OPlhZUDl40mnjAaKIHuFm3hRAKNbQmQhqpxuDFxJDoWT2a+Bd482LUk4lXvRsSolxATzWzO7PsLt2Wle1uoZ9Pst33nXm37/N0ZjrvzDttAJvWSPYliRiMiN8iYqhabWwwUn27cW2x/Pe1xXISy8tv/plU2l2/tlgumhaf25FXRtOI9OMk76TR/PkLp6dmZ2fO5fXxhTPvjs+fv/DMqTNTJ2dOzpydPHLk8KGJ55+bfLYjeWZ5Xd/3wdz+va8ev/xa+djld376Not3MF9fn0eTLU3vt20kS/yv5YrawrT69njbGWxsO+vKSV8PA6EtpYjINld/5fgfilLc3HhD8cpHPQ0OWFfZuWmVE9vSMnAPS6LXEQC9UZzos+vf4tWloceGcPXF6gVQlveN/FVd01dcqleujXauU/8jEXFs6Z8vs1esfh8CAKAjPi1/cTSeXmn8l8Z9de125XMowxHxv4jYHRH/j4g9dW3uj4gH1u4yra80Tw3dOv5Jr7SdVBuy8d8L+dxW4/ivFuZwKa/trOTfn5w4NTtzMP+ZjEb/lqw+UW2bT4EtNfTx/cu/ftaq//rxX/bK+i/GgnkcV/qabtBNTy1MVQalHXD1w4h9fSvln9RmArKk9kbEvva+9a6icOrJb/a3arR2/qvowDzT8tcRT1S3/1I05V9IVp+fHN8aszMHx4u94lY//3LpjVb931H+HZBt/+2N+39zk+Gkfr52vv0+Lv3+Sctrmv+6/w8kb1U+O5Ave39qYeHcRMRAcrRSb1g+efOzRb1on+U/emDl4393/pks/wcjItuJH4qIhyPikTz2RyPisYg4sEr+P77Uel1j/tsGe7H9pyvb//i26pLFcrVQ2/+btn/7hdLpH75bufev3r697X+4UhrNl1R+/63hdgO8k58dAAAA3C3SyjPwSTpWK6fp2Fj1Gf49sT2dnZtfeOrE3Htnp6vPyg9Hf1rc6Rqqux86kRT3PKv1yfxecbH+UH7f+PPStkp9rDw3O93j3GGz29Hi+M/8Uep1dMC6W2kebXKgB4EAXdd8/KeN1YuvdzMYoKtaPkezvbtxAN23xnN0abfiALrP/2uBzWul4/9iU91cANybnP9h83L8w+a16vE/2L04gO4rjv+tPY4D6Kq1/ki+dId/+69w1xWS2pLh2qrin0HUNY6096FujEJ/RHTkGw5siHTyQo9/MQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTIvwEAAP//p+3hnw==")
r2 = syz_open_dev$usbfs(&(0x7f0000000900), 0x7f000000000000, 0x80000)
ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x3}, 0x18)
utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x4)
getsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f00000003c0), &(0x7f00000008c0)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TIOCL_BLANKSCREEN(r5, 0x4b67, &(0x7f0000000180))

952.077959ms ago: executing program 8 (id=1068):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000001040)="$eJzs281rHOUfAPDvTF7a/vqS/Gp9aa0aLUJQTJq0ag9eFAWRioIe6jEm2xK6baSJYmuxqYgnQQp6Fo+if4E3EUQ9CV49eZJC0V7aeorM7Ey62WYTazaZ2P18YLPPM/PszvebeXv2eXYD6FpD2Z8kYkdE/BoRA43q0gZDjafrV89P3rh6fjKJhYXX/kjydteunp8sm5av215UhtOI9MOk2MhSs2fPnZyo12tnivro3Km3RmfPnnvinVMTJ2onaqfHjxw5fGjs6afGn+xInlle1/a9P7N/74tvXHp58tilN3/8Oot3R7G+OY9OGcoS/3Mh17ru0U5vrGI7m8pJb4WBcFt6IiLbXX35+T8QPXFz5w3ECx9UGhywrrJ705b2q+cXgDtYElVHAFSjvNFnn3/LxwZ1PTaFK882PgBleV8vHo01vZEWbfpaPt920lBEHJv/6/PsEes0DgEA0Ozjyc+O9kfEeze+einrewwsrknjnvz5t/zvrmIOZTAi/h8RuyPirojYExF3R+Rt742I+9YYz639n/TyGt9yRVn/75libmtp/6/s/cVgT1HbmefflxyfrtcOFv+T4ejbktXHVtjGt8//8km7dc39v+yRbb/sCxZxXO5tGaCbmpibyDulHXDlYsS+3uXyTxZnApKI2BsR+27vrXeVhenHvtzfrtHq+a+gA/NMC19k6c1n+c9HS/6lpHl+cvqW+cnRrVGvHRwtj4pb/fTzR6+22/6a8u+AK7XGc9P+b20ymDTP1852dvv/8vhP+5PX83nm/mLZuxNzc2fGIvqTo3l9yfLxm68t62X77PgfPrD8+b+7eE2W//0RkR3ED0TEgxHxUBH7wxHxSEQcWCHHH55bPf9IK9r/FyOmlr3+LR7/Lfv/9gs9J7//pt32/9n+P5yXhosl+fVvFcuFk10uWgNcy/8OAAAA/ivS/DvwSTqyWE7TkZHGd/j3xP/S+szs3OPHZ94+PdX4rvxg9KXlSNdAMR5an67XxpL54h0b46PjxVhxOV56qBg3/rRnW14fmZypT1WcO3S77W3O/8zvPVVHB6yzbcsuHe/f8ECACrTOo6dLqxdeCRcDuFP5vTZ0r1XO/3Sj4gA2nvs/dK/lzv8LLXVzAXBncv+H7uX8hy6Vfld1BECF3P+hK63ld/3rWNi6OcKoprBZd0peiCgL6aaIR2GdClVfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrj7wAAAP//KFzmgQ==") (fail_nth: 1)

704.80896ms ago: executing program 9 (id=1069):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000ef3d00180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x8, 0x0, 0x0, 0x1f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000300)='kfree\x00', r0}, 0x18)
r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$selinux_access(r1, &(0x7f00000002c0)={'system_u:object_r:gpg_agent_exec_t:s0', 0x20, 'unconfined', 0x20, 0x3}, 0x46)

657.199522ms ago: executing program 8 (id=1070):
r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000004c0)='kfree\x00', r2, 0x0, 0x4ab}, 0x18)
r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/201, 0xc9}], 0x1, 0x0, 0x1})
io_uring_enter(r3, 0x847ba, 0x2000, 0xe, 0x0, 0x0) (fail_nth: 4)

656.309542ms ago: executing program 9 (id=1071):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000110000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='kfree\x00', r0}, 0x18)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_regs={0x12}})

636.550913ms ago: executing program 9 (id=1072):
socket(0x28, 0x5, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00"/11], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r2}, 0x18)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, r3, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}}, 0x14}}, 0x0)

366.167844ms ago: executing program 8 (id=1073):
socket(0x28, 0x5, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00"/11], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
lsm_set_self_attr(0x66, &(0x7f0000000500)=ANY=[@ANYBLOB="6500000000000000030000000000000043"], 0x43, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r2}, 0x18)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, r4, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}}, 0x14}}, 0x0)

275.022888ms ago: executing program 1 (id=1074):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x557, &(0x7f0000000fc0)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xb}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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")
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1100000002000000040000000200000000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r2, &(0x7f00000002c0), &(0x7f0000000300)=@tcp6, 0x1}, 0x20)
r3 = open(&(0x7f00000001c0)='./file1\x00', 0x16f07e, 0x88)
fallocate(r3, 0x20, 0x8, 0x1101f0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x557, &(0x7f0000000fc0)="$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") (async)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xb}, 0x18) (async)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1100000002000000040000000200000000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r2, &(0x7f00000002c0), &(0x7f0000000300)=@tcp6, 0x1}, 0x20) (async)
open(&(0x7f00000001c0)='./file1\x00', 0x16f07e, 0x88) (async)
fallocate(r3, 0x20, 0x8, 0x1101f0) (async)

198.161991ms ago: executing program 9 (id=1075):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x78)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000280), &(0x7f00000002c0)=r3}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r4}, 0x18)
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x3, 0xfd, 0x3, 0x200}})
r6 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000040)}, 0x0)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01')
timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x9c992000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

65.353827ms ago: executing program 1 (id=1076):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14, 0x10, 0x4}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0)

64.659497ms ago: executing program 8 (id=1077):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xb00, 0x4e22, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0xd, 0x100, @void}}}}}}}, 0x0)

30.200158ms ago: executing program 1 (id=1078):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6bf}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r2, 0x209}, 0x14}, 0x1, 0x0, 0x0, 0x4008080}, 0x0)

0s ago: executing program 8 (id=1079):
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x80000000b49, 0x200000000002, 0x4, 0xa, 0x3}, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/reserved_size', 0x141a82, 0x0)
sendfile(r0, r0, 0x0, 0x3)
socket$kcm(0x10, 0x2, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000400)={[{@nogrpid}], [{@obj_role={'obj_role', 0x3d, 'CT\x00'}}]}, 0x1, 0x48d, &(0x7f0000001140)="$eJzs3M9vFOUbAPBnZtvyq9B++RIVRK0SY+OPlhZUDl40mnjAaKIHuFm3hRAKNbQmQhqpxuDFxJDoWT2a+Bd482LUk4lXvRsSolxATzWzO7PsLt2Wle1uoZ9Pst33nXm37/N0ZjrvzDttAJvWSPYliRiMiN8iYqhabWwwUn27cW2x/Pe1xXISy8tv/plU2l2/tlgumhaf25FXRtOI9OMk76TR/PkLp6dmZ2fO5fXxhTPvjs+fv/DMqTNTJ2dOzpydPHLk8KGJ55+bfLYjeWZ5Xd/3wdz+va8ev/xa+djld376Not3MF9fn0eTLU3vt20kS/yv5YrawrT69njbGWxsO+vKSV8PA6EtpYjINld/5fgfilLc3HhD8cpHPQ0OWFfZuWmVE9vSMnAPS6LXEQC9UZzos+vf4tWloceGcPXF6gVQlveN/FVd01dcqleujXauU/8jEXFs6Z8vs1esfh8CAKAjPi1/cTSeXmn8l8Z9de125XMowxHxv4jYHRH/j4g9dW3uj4gH1u4yra80Tw3dOv5Jr7SdVBuy8d8L+dxW4/ivFuZwKa/trOTfn5w4NTtzMP+ZjEb/lqw+UW2bT4EtNfTx/cu/ftaq//rxX/bK+i/GgnkcV/qabtBNTy1MVQalHXD1w4h9fSvln9RmArKk9kbEvva+9a6icOrJb/a3arR2/qvowDzT8tcRT1S3/1I05V9IVp+fHN8aszMHx4u94lY//3LpjVb931H+HZBt/+2N+39zk+Gkfr52vv0+Lv3+Sctrmv+6/w8kb1U+O5Ave39qYeHcRMRAcrRSb1g+efOzRb1on+U/emDl4393/pks/wcjItuJH4qIhyPikTz2RyPisYg4sEr+P77Uel1j/tsGe7H9pyvb//i26pLFcrVQ2/+btn/7hdLpH75bufev3r697X+4UhrNl1R+/63hdgO8k58dAAAA3C3SyjPwSTpWK6fp2Fj1Gf49sT2dnZtfeOrE3Htnp6vPyg9Hf1rc6Rqqux86kRT3PKv1yfxecbH+UH7f+PPStkp9rDw3O93j3GGz29Hi+M/8Uep1dMC6W2kebXKgB4EAXdd8/KeN1YuvdzMYoKtaPkezvbtxAN23xnN0abfiALrP/2uBzWul4/9iU91cANybnP9h83L8w+a16vE/2L04gO4rjv+tPY4D6Kq1/ki+dId/+69w1xWS2pLh2qrin0HUNY6096FujEJ/RHTkGw5siHTyQo9/MQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTIvwEAAP//p+3hnw==")
r2 = syz_open_dev$usbfs(&(0x7f0000000900), 0x7f000000000000, 0x80000)
ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x3}, 0x18)
utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x4)
getsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f00000003c0), &(0x7f00000008c0)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TIOCL_BLANKSCREEN(r5, 0x4b67, &(0x7f0000000180))

kernel console output (not intermixed with test programs):

967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5962 comm="syz.7.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faff599f749 code=0x7ffc0000
[   77.462239][ T5963] $Hÿ: entered promiscuous mode
[   77.471398][   T29] audit: type=1326 audit(1763793564.811:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5962 comm="syz.7.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faff599f749 code=0x7ffc0000
[   77.476496][ T5963] bond_slave_0: entered promiscuous mode
[   77.476600][ T5963] bond_slave_1: entered promiscuous mode
[   77.499876][   T29] audit: type=1326 audit(1763793564.811:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5962 comm="syz.7.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faff599f749 code=0x7ffc0000
[   77.534470][   T29] audit: type=1326 audit(1763793564.811:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5962 comm="syz.7.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faff599f749 code=0x7ffc0000
[   77.622513][ T5985] FAULT_INJECTION: forcing a failure.
[   77.622513][ T5985] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   77.635765][ T5985] CPU: 0 UID: 0 PID: 5985 Comm: syz.6.492 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   77.635800][ T5985] Tainted: [W]=WARN
[   77.635806][ T5985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   77.635885][ T5985] Call Trace:
[   77.635892][ T5985]  <TASK>
[   77.635900][ T5985]  __dump_stack+0x1d/0x30
[   77.635927][ T5985]  dump_stack_lvl+0xe8/0x140
[   77.635950][ T5985]  dump_stack+0x15/0x1b
[   77.635970][ T5985]  should_fail_ex+0x265/0x280
[   77.636031][ T5985]  should_fail+0xb/0x20
[   77.636061][ T5985]  should_fail_usercopy+0x1a/0x20
[   77.636084][ T5985]  _copy_from_user+0x1c/0xb0
[   77.636111][ T5985]  ___sys_sendmsg+0xc1/0x1d0
[   77.636223][ T5985]  __x64_sys_sendmsg+0xd4/0x160
[   77.636248][ T5985]  x64_sys_call+0x191e/0x3000
[   77.636273][ T5985]  do_syscall_64+0xd2/0x200
[   77.636359][ T5985]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   77.636442][ T5985]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   77.636481][ T5985]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.636506][ T5985] RIP: 0033:0x7f8b6299f749
[   77.636524][ T5985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   77.636545][ T5985] RSP: 002b:00007f8b613ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   77.636638][ T5985] RAX: ffffffffffffffda RBX: 00007f8b62bf5fa0 RCX: 00007f8b6299f749
[   77.636653][ T5985] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006
[   77.636687][ T5985] RBP: 00007f8b613ff090 R08: 0000000000000000 R09: 0000000000000000
[   77.636733][ T5985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   77.636748][ T5985] R13: 00007f8b62bf6038 R14: 00007f8b62bf5fa0 R15: 00007ffdb9eec6f8
[   77.636783][ T5985]  </TASK>
[   77.870487][ T5981] SELinux:  policydb version -1411311999 does not match my version range 15-35
[   77.879689][ T5981] SELinux: failed to load policy
[   77.954340][ T6000] FAULT_INJECTION: forcing a failure.
[   77.954340][ T6000] name failslab, interval 1, probability 0, space 0, times 0
[   77.967111][ T6000] CPU: 1 UID: 0 PID: 6000 Comm: syz.6.500 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   77.967167][ T6000] Tainted: [W]=WARN
[   77.967176][ T6000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   77.967191][ T6000] Call Trace:
[   77.967199][ T6000]  <TASK>
[   77.967295][ T6000]  __dump_stack+0x1d/0x30
[   77.967324][ T6000]  dump_stack_lvl+0xe8/0x140
[   77.967350][ T6000]  dump_stack+0x15/0x1b
[   77.967373][ T6000]  should_fail_ex+0x265/0x280
[   77.967415][ T6000]  ? p9_client_create+0x59/0xbc0
[   77.967463][ T6000]  should_failslab+0x8c/0xb0
[   77.967499][ T6000]  __kmalloc_cache_noprof+0x4c/0x4a0
[   77.967623][ T6000]  p9_client_create+0x59/0xbc0
[   77.967683][ T6000]  ? should_failslab+0x8c/0xb0
[   77.967718][ T6000]  ? __kmalloc_node_track_caller_noprof+0x399/0x580
[   77.967759][ T6000]  ? v9fs_session_init+0x78/0xde0
[   77.967868][ T6000]  v9fs_session_init+0xf7/0xde0
[   77.967907][ T6000]  ? avc_has_perm_noaudit+0x1b1/0x200
[   77.967925][ T6000]  ? should_fail_ex+0xdb/0x280
[   77.967977][ T6000]  ? v9fs_mount+0x51/0x5c0
[   77.968000][ T6000]  ? should_failslab+0x8c/0xb0
[   77.968203][ T6000]  ? __kmalloc_cache_noprof+0x249/0x4a0
[   77.968246][ T6000]  v9fs_mount+0x67/0x5c0
[   77.968293][ T6000]  ? selinux_capable+0x31/0x40
[   77.968321][ T6000]  ? __pfx_v9fs_mount+0x10/0x10
[   77.968348][ T6000]  legacy_get_tree+0x78/0xd0
[   77.968379][ T6000]  vfs_get_tree+0x57/0x1d0
[   77.968461][ T6000]  do_new_mount+0x24d/0x660
[   77.968490][ T6000]  ? security_capable+0x83/0x90
[   77.968635][ T6000]  path_mount+0x4a5/0xb70
[   77.968661][ T6000]  ? user_path_at+0x109/0x130
[   77.968681][ T6000]  __se_sys_mount+0x28c/0x2e0
[   77.968706][ T6000]  ? fput+0x8f/0xc0
[   77.968729][ T6000]  __x64_sys_mount+0x67/0x80
[   77.968834][ T6000]  x64_sys_call+0x2b51/0x3000
[   77.968863][ T6000]  do_syscall_64+0xd2/0x200
[   77.968886][ T6000]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   77.968913][ T6000]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   77.969018][ T6000]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.969042][ T6000] RIP: 0033:0x7f8b6299f749
[   77.969061][ T6000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   77.969121][ T6000] RSP: 002b:00007f8b613ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   77.969142][ T6000] RAX: ffffffffffffffda RBX: 00007f8b62bf5fa0 RCX: 00007f8b6299f749
[   77.969153][ T6000] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 0000000000000000
[   77.969164][ T6000] RBP: 00007f8b613ff090 R08: 0000200000000040 R09: 0000000000000000
[   77.969244][ T6000] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000002
[   77.969255][ T6000] R13: 00007f8b62bf6038 R14: 00007f8b62bf5fa0 R15: 00007ffdb9eec6f8
[   77.969273][ T6000]  </TASK>
[   77.980199][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.501'.
[   78.227294][ T6013] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[   78.263778][ T6013] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[   78.283696][ T6010] netlink: 12 bytes leftover after parsing attributes in process `syz.6.502'.
[   78.319305][ T6017] loop3: detected capacity change from 0 to 256
[   78.333701][ T6017] FAT-fs (loop3): Directory bread(block 64) failed
[   78.340313][ T6017] FAT-fs (loop3): Directory bread(block 65) failed
[   78.357035][ T6017] FAT-fs (loop3): Directory bread(block 66) failed
[   78.369275][ T6017] FAT-fs (loop3): Directory bread(block 67) failed
[   78.388392][ T6017] FAT-fs (loop3): Directory bread(block 68) failed
[   78.413365][ T6017] FAT-fs (loop3): Directory bread(block 69) failed
[   78.420007][ T6017] FAT-fs (loop3): Directory bread(block 70) failed
[   78.431605][ T6017] FAT-fs (loop3): Directory bread(block 71) failed
[   78.452540][ T6017] FAT-fs (loop3): Directory bread(block 72) failed
[   78.471124][ T6017] FAT-fs (loop3): Directory bread(block 73) failed
[   78.507117][ T6029] loop6: detected capacity change from 0 to 128
[   78.651502][ T6049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.516'.
[   78.992286][ T6074] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=6074 comm=syz.0.520
[   79.023193][ T6074] netlink: 232 bytes leftover after parsing attributes in process `syz.0.520'.
[   79.144912][ T6092] FAULT_INJECTION: forcing a failure.
[   79.144912][ T6092] name failslab, interval 1, probability 0, space 0, times 0
[   79.157686][ T6092] CPU: 0 UID: 0 PID: 6092 Comm: syz.3.524 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   79.157722][ T6092] Tainted: [W]=WARN
[   79.157728][ T6092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   79.157740][ T6092] Call Trace:
[   79.157745][ T6092]  <TASK>
[   79.157753][ T6092]  __dump_stack+0x1d/0x30
[   79.157902][ T6092]  dump_stack_lvl+0xe8/0x140
[   79.157928][ T6092]  dump_stack+0x15/0x1b
[   79.157951][ T6092]  should_fail_ex+0x265/0x280
[   79.158016][ T6092]  should_failslab+0x8c/0xb0
[   79.158053][ T6092]  __kmalloc_noprof+0xa5/0x570
[   79.158080][ T6092]  ? kernfs_fop_write_iter+0xe2/0x300
[   79.158160][ T6092]  ? selinux_file_permission+0x1e4/0x320
[   79.158199][ T6092]  kernfs_fop_write_iter+0xe2/0x300
[   79.158227][ T6092]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[   79.158273][ T6092]  vfs_write+0x52a/0x960
[   79.158308][ T6092]  ksys_write+0xda/0x1a0
[   79.158342][ T6092]  __x64_sys_write+0x40/0x50
[   79.158409][ T6092]  x64_sys_call+0x2802/0x3000
[   79.158436][ T6092]  do_syscall_64+0xd2/0x200
[   79.158463][ T6092]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   79.158587][ T6092]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   79.158631][ T6092]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.158656][ T6092] RIP: 0033:0x7f0da52cf749
[   79.158673][ T6092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   79.158720][ T6092] RSP: 002b:00007f0da3d2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   79.158742][ T6092] RAX: ffffffffffffffda RBX: 00007f0da5525fa0 RCX: 00007f0da52cf749
[   79.158781][ T6092] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000004
[   79.158793][ T6092] RBP: 00007f0da3d2f090 R08: 0000000000000000 R09: 0000000000000000
[   79.158804][ T6092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   79.158819][ T6092] R13: 00007f0da5526038 R14: 00007f0da5525fa0 R15: 00007ffcccc92488
[   79.158843][ T6092]  </TASK>
[   79.217789][ T6096] loop0: detected capacity change from 0 to 128
[   79.435085][ T6108] syzkaller0: entered promiscuous mode
[   79.440670][ T6108] syzkaller0: entered allmulticast mode
[   79.548128][ T6123] loop0: detected capacity change from 0 to 1024
[   79.684709][ T6123] EXT4-fs: inline encryption not supported
[   79.718932][ T6123] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.278220][ T6143] wg1 speed is unknown, defaulting to 1000
[   80.387283][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.538962][ T6163] loop0: detected capacity change from 0 to 128
[   80.621745][ T6167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.539'.
[   80.701869][ T6169] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=6169 comm=syz.0.540
[   80.729154][ T6171] program syz.1.541 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   80.764457][ T6169] netlink: 232 bytes leftover after parsing attributes in process `syz.0.540'.
[   80.942668][ T6165] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.006678][ T6165] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.051814][ T6186] veth0_to_team: entered promiscuous mode
[   81.061213][ T6186] netlink: 'syz.3.545': attribute type 1 has an invalid length.
[   81.069040][ T6186] netlink: 224 bytes leftover after parsing attributes in process `syz.3.545'.
[   81.091332][ T6165] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.102937][ T6190] netlink: 20 bytes leftover after parsing attributes in process `syz.0.546'.
[   81.156518][ T6165] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.223843][ T1767] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.242860][ T1767] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.252017][ T1767] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.274459][ T1767] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.316853][ T6193] loop6: detected capacity change from 0 to 256
[   81.348239][ T6193] FAT-fs (loop6): Directory bread(block 64) failed
[   81.356091][ T6193] FAT-fs (loop6): Directory bread(block 65) failed
[   81.362769][ T6193] FAT-fs (loop6): Directory bread(block 66) failed
[   81.376715][ T6193] FAT-fs (loop6): Directory bread(block 67) failed
[   81.385269][ T6193] FAT-fs (loop6): Directory bread(block 68) failed
[   81.391937][ T6193] FAT-fs (loop6): Directory bread(block 69) failed
[   81.398722][ T6193] FAT-fs (loop6): Directory bread(block 70) failed
[   81.405434][ T6193] FAT-fs (loop6): Directory bread(block 71) failed
[   81.412027][ T6193] FAT-fs (loop6): Directory bread(block 72) failed
[   81.418902][ T6193] FAT-fs (loop6): Directory bread(block 73) failed
[   81.706330][ T6202] wg1 speed is unknown, defaulting to 1000
[   81.815754][   T29] kauditd_printk_skb: 179 callbacks suppressed
[   81.815829][   T29] audit: type=1326 audit(1763793569.291:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.3.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0da52c65e7 code=0x7ffc0000
[   81.859009][   T29] audit: type=1326 audit(1763793569.321:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.3.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0da526b829 code=0x7ffc0000
[   81.882369][   T29] audit: type=1326 audit(1763793569.321:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.3.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0da52c65e7 code=0x7ffc0000
[   81.906095][   T29] audit: type=1326 audit(1763793569.321:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.3.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0da526b829 code=0x7ffc0000
[   81.929380][   T29] audit: type=1326 audit(1763793569.321:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.3.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f0da52cf749 code=0x7ffc0000
[   81.953154][   T29] audit: type=1326 audit(1763793569.331:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.3.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0da52c65e7 code=0x7ffc0000
[   81.976753][   T29] audit: type=1326 audit(1763793569.331:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.3.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0da526b829 code=0x7ffc0000
[   82.000066][   T29] audit: type=1326 audit(1763793569.331:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.3.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f0da52cf749 code=0x7ffc0000
[   82.028240][   T29] audit: type=1326 audit(1763793569.501:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.3.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0da52c65e7 code=0x7ffc0000
[   82.051632][   T29] audit: type=1326 audit(1763793569.501:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.3.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0da526b829 code=0x7ffc0000
[   82.088019][   T12] bio_check_eod: 95 callbacks suppressed
[   82.088057][   T12] kworker/u8:0: attempt to access beyond end of device
[   82.088057][   T12] loop6: rw=1, sector=1224, nr_sectors = 32 limit=256
[   82.108373][   T12] kworker/u8:0: attempt to access beyond end of device
[   82.108373][   T12] loop6: rw=1, sector=1288, nr_sectors = 32 limit=256
[   82.122596][   T12] kworker/u8:0: attempt to access beyond end of device
[   82.122596][   T12] loop6: rw=1, sector=1352, nr_sectors = 32 limit=256
[   82.136709][   T12] kworker/u8:0: attempt to access beyond end of device
[   82.136709][   T12] loop6: rw=1, sector=1416, nr_sectors = 32 limit=256
[   82.150499][   T12] kworker/u8:0: attempt to access beyond end of device
[   82.150499][   T12] loop6: rw=1, sector=1480, nr_sectors = 32 limit=256
[   82.164431][   T12] kworker/u8:0: attempt to access beyond end of device
[   82.164431][   T12] loop6: rw=1, sector=1544, nr_sectors = 32 limit=256
[   82.171438][ T6209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.551'.
[   82.180143][   T12] kworker/u8:0: attempt to access beyond end of device
[   82.180143][   T12] loop6: rw=1, sector=1608, nr_sectors = 32 limit=256
[   82.201973][   T12] kworker/u8:0: attempt to access beyond end of device
[   82.201973][   T12] loop6: rw=1, sector=1672, nr_sectors = 32 limit=256
[   82.215904][   T12] kworker/u8:0: attempt to access beyond end of device
[   82.215904][   T12] loop6: rw=1, sector=1736, nr_sectors = 32 limit=256
[   82.234493][   T12] kworker/u8:0: attempt to access beyond end of device
[   82.234493][   T12] loop6: rw=1, sector=1832, nr_sectors = 32 limit=256
[   82.276688][ T6212] loop6: detected capacity change from 0 to 512
[   82.330743][ T6212] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   82.349142][ T6214] loop7: detected capacity change from 0 to 1024
[   82.349827][ T6212] EXT4-fs (loop6): mount failed
[   82.360930][ T6214] EXT4-fs: inline encryption not supported
[   82.389387][ T6212] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   82.417175][  T293] Bluetooth: hci0: Frame reassembly failed (-84)
[   82.429314][ T6214] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.434303][ T6228] netlink: 'syz.1.555': attribute type 10 has an invalid length.
[   82.475777][ T6231] loop3: detected capacity change from 0 to 512
[   82.482438][ T6231] ext4: Unknown parameter 'obj_role'
[   82.490234][ T6231] loop3: detected capacity change from 0 to 128
[   82.526369][ T6231] xt_CT: No such helper "netbios-ns"
[   82.558293][ T6241] netlink: 68 bytes leftover after parsing attributes in process `syz.6.563'.
[   82.567519][ T6241] netlink: 32 bytes leftover after parsing attributes in process `syz.6.563'.
[   82.876469][ T6253] wg1 speed is unknown, defaulting to 1000
[   83.150004][ T6257] FAULT_INJECTION: forcing a failure.
[   83.150004][ T6257] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   83.163154][ T6257] CPU: 1 UID: 0 PID: 6257 Comm: syz.3.567 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   83.163185][ T6257] Tainted: [W]=WARN
[   83.163190][ T6257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   83.163304][ T6257] Call Trace:
[   83.163311][ T6257]  <TASK>
[   83.163319][ T6257]  __dump_stack+0x1d/0x30
[   83.163342][ T6257]  dump_stack_lvl+0xe8/0x140
[   83.163368][ T6257]  dump_stack+0x15/0x1b
[   83.163417][ T6257]  should_fail_ex+0x265/0x280
[   83.163459][ T6257]  should_fail+0xb/0x20
[   83.163479][ T6257]  should_fail_usercopy+0x1a/0x20
[   83.163512][ T6257]  _copy_from_user+0x1c/0xb0
[   83.163536][ T6257]  ___sys_sendmsg+0xc1/0x1d0
[   83.163622][ T6257]  __x64_sys_sendmsg+0xd4/0x160
[   83.163651][ T6257]  x64_sys_call+0x191e/0x3000
[   83.163676][ T6257]  do_syscall_64+0xd2/0x200
[   83.163705][ T6257]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   83.163741][ T6257]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   83.163790][ T6257]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.163816][ T6257] RIP: 0033:0x7f0da52cf749
[   83.163835][ T6257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   83.163901][ T6257] RSP: 002b:00007f0da3d2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   83.163922][ T6257] RAX: ffffffffffffffda RBX: 00007f0da5525fa0 RCX: 00007f0da52cf749
[   83.163942][ T6257] RDX: 0000000024000080 RSI: 0000200000000480 RDI: 000000000000000a
[   83.163957][ T6257] RBP: 00007f0da3d2f090 R08: 0000000000000000 R09: 0000000000000000
[   83.163972][ T6257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   83.164029][ T6257] R13: 00007f0da5526038 R14: 00007f0da5525fa0 R15: 00007ffcccc92488
[   83.164053][ T6257]  </TASK>
[   83.415172][ T5609] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.606480][ T6266] loop7: detected capacity change from 0 to 512
[   83.946640][ T6294] loop6: detected capacity change from 0 to 8192
[   83.961040][ T6300] loop3: detected capacity change from 0 to 512
[   83.968499][ T6300] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   83.980199][ T6300] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002]
[   83.988776][ T6300] System zones: 1-12
[   83.995447][ T6300] EXT4-fs (loop3): 1 truncate cleaned up
[   84.001849][ T6300] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.008772][ T6304] netlink: 'syz.0.580': attribute type 3 has an invalid length.
[   84.023592][ T6304] netlink: 'syz.0.580': attribute type 3 has an invalid length.
[   84.047315][ T6304] loop0: detected capacity change from 0 to 512
[   84.058327][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.077371][ T6304] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   84.097698][ T6304] EXT4-fs (loop0): orphan cleanup on readonly fs
[   84.103660][ T6311] C: renamed from team_slave_0
[   84.108307][ T6304] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.580: corrupted inode contents
[   84.123005][ T6311] netlink: 'syz.3.582': attribute type 3 has an invalid length.
[   84.131185][ T6311] netlink: 152 bytes leftover after parsing attributes in process `syz.3.582'.
[   84.140471][ T6311] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   84.158980][ T6304] EXT4-fs (loop0): Remounting filesystem read-only
[   84.165794][ T6304] EXT4-fs (loop0): 1 truncate cleaned up
[   84.171627][  T293] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   84.182695][  T293] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   84.197423][ T6313] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[   84.205753][ T6313] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[   84.218037][  T293] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[   84.230007][ T6304] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   84.256656][ T6319] netlink: 68 bytes leftover after parsing attributes in process `syz.3.585'.
[   84.265881][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.585'.
[   84.269194][ T6315] pim6reg: entered allmulticast mode
[   84.283496][ T6315] pim6reg: left allmulticast mode
[   84.292061][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.338345][ T6325] loop3: detected capacity change from 0 to 128
[   84.346148][ T6329] xt_TCPMSS: Only works on TCP SYN packets
[   84.352974][ T6325] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   84.353571][ T6327] loop0: detected capacity change from 0 to 2048
[   84.366185][ T6329] netlink: 'syz.6.590': attribute type 1 has an invalid length.
[   84.372582][ T6325] ext4 filesystem being mounted at /174/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   84.387464][ T6329] 8021q: adding VLAN 0 to HW filter on device bond1
[   84.425406][ T6329] FAULT_INJECTION: forcing a failure.
[   84.425406][ T6329] name failslab, interval 1, probability 0, space 0, times 0
[   84.438170][ T6329] CPU: 1 UID: 0 PID: 6329 Comm: syz.6.590 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   84.438215][ T6329] Tainted: [W]=WARN
[   84.438221][ T6329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   84.438235][ T6329] Call Trace:
[   84.438243][ T6329]  <TASK>
[   84.438250][ T6329]  __dump_stack+0x1d/0x30
[   84.438276][ T6329]  dump_stack_lvl+0xe8/0x140
[   84.438310][ T6329]  dump_stack+0x15/0x1b
[   84.438330][ T6329]  should_fail_ex+0x265/0x280
[   84.438426][ T6329]  ? igmpv3_add_delrec+0x89/0x2e0
[   84.438462][ T6329]  should_failslab+0x8c/0xb0
[   84.438494][ T6329]  __kmalloc_cache_noprof+0x4c/0x4a0
[   84.438551][ T6329]  ? __mod_timer+0x86/0x840
[   84.438583][ T6329]  igmpv3_add_delrec+0x89/0x2e0
[   84.438618][ T6329]  __igmp_group_dropped+0x409/0x460
[   84.438709][ T6329]  ? mod_timer+0x1f/0x30
[   84.438728][ T6329]  ? _raw_spin_unlock_irqrestore+0x2b/0x60
[   84.438762][ T6329]  __ip_mc_dec_group+0x194/0x3d0
[   84.438792][ T6329]  ip_mc_drop_socket+0x16c/0x1e0
[   84.438827][ T6329]  inet_release+0x31/0xf0
[   84.438854][ T6329]  sock_close+0x6b/0x150
[   84.438879][ T6329]  ? __pfx_sock_close+0x10/0x10
[   84.438901][ T6329]  __fput+0x29b/0x650
[   84.438921][ T6329]  ____fput+0x1c/0x30
[   84.438989][ T6329]  task_work_run+0x131/0x1a0
[   84.439070][ T6329]  exit_to_user_mode_loop+0xed/0x110
[   84.439099][ T6329]  do_syscall_64+0x1d6/0x200
[   84.439122][ T6329]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   84.439167][ T6329]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   84.439264][ T6329]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.439288][ T6329] RIP: 0033:0x7f8b6299f749
[   84.439305][ T6329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   84.439383][ T6329] RSP: 002b:00007f8b613ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[   84.439403][ T6329] RAX: 0000000000000000 RBX: 00007f8b62bf5fa0 RCX: 00007f8b6299f749
[   84.439415][ T6329] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 000000000000000b
[   84.439427][ T6329] RBP: 00007f8b613ff090 R08: 0000000000000000 R09: 0000000000000000
[   84.439439][ T6329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   84.439452][ T6329] R13: 00007f8b62bf6038 R14: 00007f8b62bf5fa0 R15: 00007ffdb9eec6f8
[   84.439513][ T6329]  </TASK>
[   84.454245][ T5370] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   84.463762][ T6327]  loop0: p1 < > p3 p4
[   84.468552][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[   84.483096][ T3323] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   84.488364][ T6327] loop0: p3 start 458752 is beyond EOD, 
[   84.531293][ T6334] loop6: detected capacity change from 0 to 512
[   84.535581][ T6327] truncated
[   84.535608][ T6327] loop0: p4 start 268435456 is beyond EOD, truncated
[   84.578859][  T293] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   84.599458][ T6334] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   84.639451][ T6338] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=6338 comm=syz.3.591
[   84.676804][  T293] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   84.780164][  T293] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   84.813925][ T6344] loop7: detected capacity change from 0 to 1764
[   84.826484][  T293] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   84.846541][ T6334] EXT4-fs (loop6): 1 truncate cleaned up
[   84.852695][ T6334] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.102403][ T6362] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6362 comm=syz.1.602
[   85.115026][ T6362] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6362 comm=syz.1.602
[   85.172925][  T293] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.258116][  T293] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.309942][ T6393] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[   85.318355][ T6393] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[   85.341149][ T5145] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.392789][  T293] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.417902][ T6383] wg1 speed is unknown, defaulting to 1000
[   85.457405][  T293] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.549419][ T6383] chnl_net:caif_netlink_parms(): no params data found
[   85.574982][  T293] bridge_slave_1: left allmulticast mode
[   85.580741][  T293] bridge_slave_1: left promiscuous mode
[   85.586572][  T293] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.596781][  T293] bridge_slave_0: left allmulticast mode
[   85.602854][  T293] bridge_slave_0: left promiscuous mode
[   85.608707][  T293] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.675105][ T6416] loop1: detected capacity change from 0 to 128
[   85.719029][  T293] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface
[   85.728491][  T293] bond_slave_0: left promiscuous mode
[   85.735809][  T293] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface
[   85.750598][  T293] bond_slave_1: left promiscuous mode
[   85.757472][  T293] $Hÿ (unregistering): Released all slaves
[   85.792753][ T6383] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.800043][ T6383] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.807871][ T6383] bridge_slave_0: entered allmulticast mode
[   85.818161][ T6383] bridge_slave_0: entered promiscuous mode
[   85.826589][ T6383] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.833856][ T6383] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.842239][ T6383] bridge_slave_1: entered allmulticast mode
[   85.850937][ T6383] bridge_slave_1: entered promiscuous mode
[   86.010854][ T6383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.062622][ T6425] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6425 comm=syz.1.621
[   86.108108][ T6383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.164064][ T6430] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=6430 comm=syz.1.621
[   86.233808][ T6383] team0: Port device team_slave_0 added
[   86.273943][ T6383] team0: Port device team_slave_1 added
[   86.309450][ T6383] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.316591][ T6383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.342832][ T6383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.370474][ T6383] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.377571][ T6383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.404189][ T6383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.442390][  T293] hsr_slave_0: left promiscuous mode
[   86.445967][ T6437] loop1: detected capacity change from 0 to 512
[   86.454169][  T293] hsr_slave_1: left promiscuous mode
[   86.460036][  T293] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   86.467518][  T293] batman_adv: batadv0: Removing interface: batadv_slave_0
[   86.467622][ T6435] loop0: detected capacity change from 0 to 8192
[   86.487532][  T293] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   86.491534][ T6437] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   86.495062][  T293] batman_adv: batadv0: Removing interface: batadv_slave_1
[   86.510101][ T6437] EXT4-fs (loop1): mount failed
[   86.517273][ T6435] __nla_validate_parse: 6 callbacks suppressed
[   86.517292][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'.
[   86.522258][ T6440] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[   86.545241][ T6440] FAT-fs (loop0): Filesystem has been set read-only
[   86.552011][  T293] veth1_macvtap: left promiscuous mode
[   86.558972][  T293] veth0_macvtap: left promiscuous mode
[   86.564772][  T293] veth1_vlan: left promiscuous mode
[   86.570142][  T293] veth0_vlan: left promiscuous mode
[   86.616226][ T6444] FAULT_INJECTION: forcing a failure.
[   86.616226][ T6444] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   86.629369][ T6444] CPU: 1 UID: 0 PID: 6444 Comm: syz.1.628 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   86.629443][ T6444] Tainted: [W]=WARN
[   86.629451][ T6444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   86.629467][ T6444] Call Trace:
[   86.629473][ T6444]  <TASK>
[   86.629480][ T6444]  __dump_stack+0x1d/0x30
[   86.629511][ T6444]  dump_stack_lvl+0xe8/0x140
[   86.629533][ T6444]  dump_stack+0x15/0x1b
[   86.629549][ T6444]  should_fail_ex+0x265/0x280
[   86.629646][ T6444]  should_fail+0xb/0x20
[   86.629666][ T6444]  should_fail_usercopy+0x1a/0x20
[   86.629691][ T6444]  _copy_from_user+0x1c/0xb0
[   86.629720][ T6444]  ___sys_sendmsg+0xc1/0x1d0
[   86.629786][ T6444]  __x64_sys_sendmsg+0xd4/0x160
[   86.629903][ T6444]  x64_sys_call+0x191e/0x3000
[   86.629932][ T6444]  do_syscall_64+0xd2/0x200
[   86.630015][ T6444]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   86.630101][ T6444]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   86.630142][ T6444]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   86.630233][ T6444] RIP: 0033:0x7ff6c54bf749
[   86.630252][ T6444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   86.630274][ T6444] RSP: 002b:00007ff6c3f27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   86.630316][ T6444] RAX: ffffffffffffffda RBX: 00007ff6c5715fa0 RCX: 00007ff6c54bf749
[   86.630381][ T6444] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[   86.630396][ T6444] RBP: 00007ff6c3f27090 R08: 0000000000000000 R09: 0000000000000000
[   86.630442][ T6444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   86.630453][ T6444] R13: 00007ff6c5716038 R14: 00007ff6c5715fa0 R15: 00007ffd737d0478
[   86.630471][ T6444]  </TASK>
[   86.830740][ T6446] xt_hashlimit: max too large, truncated to 1048576
[   86.838773][  T293] team0 (unregistering): Port device team_slave_1 removed
[   86.849568][  T293] team0 (unregistering): Port device team_slave_0 removed
[   86.936210][ T6421] wg1 speed is unknown, defaulting to 1000
[   86.979482][ T6451] loop1: detected capacity change from 0 to 128
[   87.103549][ T6383] hsr_slave_0: entered promiscuous mode
[   87.135808][ T6383] hsr_slave_1: entered promiscuous mode
[   87.151997][ T6383] debugfs: 'hsr0' already exists in 'hsr'
[   87.157812][ T6383] Cannot create hsr debugfs directory
[   87.176107][ T6454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.631'.
[   87.342838][   T29] kauditd_printk_skb: 322 callbacks suppressed
[   87.342855][   T29] audit: type=1326 audit(1763793574.811:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6463 comm="syz.3.634" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0da52cf749 code=0x0
[   87.428595][ T6475] netlink: 4 bytes leftover after parsing attributes in process `syz.6.635'.
[   87.437769][   T31] Bluetooth: hci0: Frame reassembly failed (-90)
[   87.445206][ T6474] netlink: 'syz.3.634': attribute type 10 has an invalid length.
[   87.457879][ T6474] dummy0: left allmulticast mode
[   87.466046][ T6474] dummy0: entered allmulticast mode
[   87.471919][ T6474] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   87.491432][ T6467] pim6reg: entered allmulticast mode
[   87.514897][ T6467] pim6reg: left allmulticast mode
[   87.555396][ T6467] netlink: 164 bytes leftover after parsing attributes in process `syz.6.635'.
[   87.615948][ T6488] loop6: detected capacity change from 0 to 512
[   87.630064][ T6488] ext4: Unknown parameter 'obj_role'
[   87.655704][ T6383] netdevsim netdevsim8 netdevsim0: renamed from eth0
[   87.707780][ T6383] netdevsim netdevsim8 netdevsim1: renamed from eth1
[   87.733530][ T6493] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1538 sclass=netlink_audit_socket pid=6493 comm=syz.1.637
[   87.747876][ T6383] netdevsim netdevsim8 netdevsim2: renamed from eth2
[   87.765186][ T6383] netdevsim netdevsim8 netdevsim3: renamed from eth3
[   87.847098][ T6383] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.861639][   T29] audit: type=1326 audit(1763793575.331:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6c54bf749 code=0x7ffc0000
[   87.885121][   T29] audit: type=1326 audit(1763793575.331:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6c54bf749 code=0x7ffc0000
[   87.892145][ T6383] 8021q: adding VLAN 0 to HW filter on device team0
[   87.920623][ T6523] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=6523 comm=syz.0.642
[   87.944126][   T29] audit: type=1326 audit(1763793575.331:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7ff6c54bf749 code=0x7ffc0000
[   87.966740][  T159] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.967442][   T29] audit: type=1326 audit(1763793575.331:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6c54bf749 code=0x7ffc0000
[   87.974455][  T159] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.986297][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.997884][   T29] audit: type=1326 audit(1763793575.331:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7ff6c54bf749 code=0x7ffc0000
[   88.005169][  T293] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.032446][ T6383] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   88.035571][   T29] audit: type=1326 audit(1763793575.331:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6c54bf749 code=0x7ffc0000
[   88.042774][ T6383] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   88.053099][   T29] audit: type=1326 audit(1763793575.331:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff6c54bf749 code=0x7ffc0000
[   88.110319][   T29] audit: type=1326 audit(1763793575.331:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6c54bf749 code=0x7ffc0000
[   88.133869][   T29] audit: type=1326 audit(1763793575.331:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7ff6c54bf749 code=0x7ffc0000
[   88.135700][ T6536] netlink: 232 bytes leftover after parsing attributes in process `syz.0.642'.
[   88.205667][ T6383] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.404156][ T6383] veth0_vlan: entered promiscuous mode
[   88.414768][ T6383] veth1_vlan: entered promiscuous mode
[   88.436450][ T6383] veth0_macvtap: entered promiscuous mode
[   88.444258][ T6383] veth1_macvtap: entered promiscuous mode
[   88.457493][ T6383] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.472148][ T6383] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.484498][   T31] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.493847][   T31] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.502781][   T31] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.516275][   T31] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.783612][ T6606] netlink: 32 bytes leftover after parsing attributes in process `syz.8.609'.
[   88.872671][ T6661] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22
[   88.881079][ T6661] netdevsim netdevsim8: Direct firmware load for . failed with error -22
[   88.970855][ T6668] netlink: 12 bytes leftover after parsing attributes in process `syz.8.645'.
[   88.983099][ T6668] netlink: 65536 bytes leftover after parsing attributes in process `syz.8.645'.
[   88.993048][ T6668] netlink: 4 bytes leftover after parsing attributes in process `syz.8.645'.
[   89.230976][ T6718] loop8: detected capacity change from 0 to 764
[   89.256065][ T6718] iso9660: Unknown parameter '000000000000000000070177777777777777777777700000000000037777777777'
[   89.484006][ T6732] loop0: detected capacity change from 0 to 512
[   89.494536][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[   89.497882][ T5370] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   89.514202][ T6732] EXT4-fs (loop0): too many log groups per flexible block group
[   89.529895][ T6732] EXT4-fs (loop0): failed to initialize mballoc (-12)
[   89.539540][ T6732] EXT4-fs (loop0): mount failed
[   89.579605][ T6738] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[   89.587909][ T6738] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[   89.680854][ T6748] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=6748 comm=syz.3.660
[   89.700755][ T6746] loop0: detected capacity change from 0 to 512
[   89.711020][ T6748] netlink: 232 bytes leftover after parsing attributes in process `syz.3.660'.
[   89.723762][ T6746] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   89.749010][ T6746] EXT4-fs (loop0): mount failed
[   89.894437][ T6778] loop1: detected capacity change from 0 to 128
[   89.926533][ T6778] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   89.959630][ T6778] ext4 filesystem being mounted at /142/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   89.996565][ T6787] loop0: detected capacity change from 0 to 256
[   90.299126][ T6820] loop6: detected capacity change from 0 to 512
[   90.355053][ T6820] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   90.383095][ T6828] loop0: detected capacity change from 0 to 1024
[   90.405725][ T6820] EXT4-fs (loop6): mount failed
[   90.446519][ T6828] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   90.529735][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.947681][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   91.090419][   T52] Bluetooth: hci0: Frame reassembly failed (-84)
[   91.097842][ T6909] netlink: 'syz.8.690': attribute type 10 has an invalid length.
[   91.110152][ T6909] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   91.169834][ T6917] loop1: detected capacity change from 0 to 1764
[   91.255709][ T6935] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[   91.264162][ T6935] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[   91.668748][ T6987] loop0: detected capacity change from 0 to 512
[   92.146085][ T6998] netlink: 'syz.1.701': attribute type 4 has an invalid length.
[   92.153841][ T6998] __nla_validate_parse: 1 callbacks suppressed
[   92.153859][ T6998] netlink: 152 bytes leftover after parsing attributes in process `syz.1.701'.
[   92.177319][ T6998] .`: renamed from bond0 (while UP)
[   92.440357][ T7008] bridge_slave_0: left allmulticast mode
[   92.446151][ T7008] bridge_slave_0: left promiscuous mode
[   92.451912][ T7008] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.461611][ T7008] bridge_slave_1: left allmulticast mode
[   92.467383][ T7008] bridge_slave_1: left promiscuous mode
[   92.473319][ T7008] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.482914][ T7008] bond0: (slave bond_slave_0): Releasing backup interface
[   92.493759][ T7008] bond0: (slave bond_slave_1): Releasing backup interface
[   92.505617][ T7008] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   92.513050][ T7008] batman_adv: batadv0: Removing interface: batadv_slave_0
[   92.521930][ T7008] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   92.529579][ T7008] batman_adv: batadv0: Removing interface: batadv_slave_1
[   92.538920][ T7013] 9pnet_fd: Insufficient options for proto=fd
[   92.540137][ T7008] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   92.549721][   T29] kauditd_printk_skb: 415 callbacks suppressed
[   92.549816][   T29] audit: type=1400 audit(1763793580.021:2679): avc:  denied  { create } for  pid=7007 comm="syz.6.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   92.561381][   T36] wg1 speed is unknown, defaulting to 1000
[   92.569437][   T29] audit: type=1400 audit(1763793580.041:2680): avc:  denied  { create } for  pid=7007 comm="syz.6.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   92.649458][ T7016] loop6: detected capacity change from 0 to 512
[   92.665029][ T7016] Quota error (device loop6): v2_read_file_info: Free block number 1 out of range (1, 6).
[   92.678082][ T7016] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   92.693864][ T7016] EXT4-fs (loop6): mount failed
[   92.741226][   T29] audit: type=1400 audit(1763793580.211:2681): avc:  denied  { create } for  pid=7020 comm="syz.6.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   92.762446][   T29] audit: type=1400 audit(1763793580.211:2682): avc:  denied  { connect } for  pid=7020 comm="syz.6.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   92.820635][   T29] audit: type=1400 audit(1763793580.291:2683): avc:  denied  { bind } for  pid=7022 comm="syz.6.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   92.823558][ T7023] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=7023 comm=syz.6.709
[   92.842760][   T29] audit: type=1400 audit(1763793580.291:2684): avc:  denied  { write } for  pid=7022 comm="syz.6.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   92.874507][   T29] audit: type=1400 audit(1763793580.331:2685): avc:  denied  { setopt } for  pid=7022 comm="syz.6.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   92.921319][   T29] audit: type=1326 audit(1763793580.391:2686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7024 comm="syz.6.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6299f749 code=0x7ffc0000
[   92.945663][   T29] audit: type=1326 audit(1763793580.391:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7024 comm="syz.6.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6299f749 code=0x7ffc0000
[   93.093517][ T5370] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   93.093867][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[   93.178073][ T7065] capability: warning: `syz.1.714' uses 32-bit capabilities (legacy support in use)
[   93.371568][ T7089] Driver unsupported XDP return value 0 on prog  (id 409) dev N/A, expect packet loss!
[   93.478453][ T7100] loop1: detected capacity change from 0 to 1024
[   93.497608][ T7100] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   93.526939][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.540029][  T159] Bluetooth: hci0: Frame reassembly failed (-90)
[   93.547415][ T7111] netlink: 'syz.0.722': attribute type 10 has an invalid length.
[   93.591941][ T7119] loop1: detected capacity change from 0 to 128
[   93.600971][ T7119] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   93.616571][ T7119] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   93.674183][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   93.701445][ T7137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.725'.
[   93.832233][ T7157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.726'.
[   93.846686][ T7157] pim6reg: entered allmulticast mode
[   93.854440][ T7157] pim6reg: left allmulticast mode
[   93.906367][ T7157] netlink: 164 bytes leftover after parsing attributes in process `syz.1.726'.
[   94.373487][ T7210] Falling back ldisc for ttyS3.
[   94.399482][ T7212] netlink: 'syz.8.731': attribute type 30 has an invalid length.
[   94.507862][ T7217] loop8: detected capacity change from 0 to 1024
[   94.515203][ T7217] EXT4-fs: inline encryption not supported
[   94.524860][ T7217] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   94.664995][ T7224] loop6: detected capacity change from 0 to 512
[   94.682689][ T7224] EXT4-fs: journaled quota format not specified
[   94.709618][ T7224] pim6reg1: entered promiscuous mode
[   94.715108][ T7224] pim6reg1: entered allmulticast mode
[   94.735494][ T7224] pim6reg1: left promiscuous mode
[   94.740675][ T7224] pim6reg1: left allmulticast mode
[   94.768440][ T7224] netlink: 12 bytes leftover after parsing attributes in process `syz.6.735'.
[   94.815264][ T7231] loop3: detected capacity change from 0 to 764
[   94.852126][ T7231] iso9660: Unknown parameter '184467440737095516150177777777777777777777701777777777777777777777'
[   94.893678][ T7235] netlink: 80 bytes leftover after parsing attributes in process `syz.6.738'.
[   94.939583][ T7238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.739'.
[   95.009945][ T7250] netlink: 56 bytes leftover after parsing attributes in process `syz.6.743'.
[   95.059075][ T7253] loop6: detected capacity change from 0 to 512
[   95.159631][ T7261] loop1: detected capacity change from 0 to 512
[   95.182581][ T7261] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.737: error while reading EA inode 32 err=-116
[   95.196861][ T7261] EXT4-fs (loop1): Remounting filesystem read-only
[   95.203722][ T7261] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[   95.214507][ T7261] EXT4-fs (loop1): 1 orphan inode deleted
[   95.221422][ T7261] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   95.237961][ T7253] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   95.253339][ T7253] EXT4-fs (loop6): mount failed
[   95.376804][ T6383] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.573410][ T5370] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   95.579697][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[   95.949682][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.467402][ T7411] syzkaller0: entered promiscuous mode
[   96.472955][ T7411] syzkaller0: entered allmulticast mode
[   96.543941][ T7415] loop0: detected capacity change from 0 to 512
[   96.550873][ T7415] EXT4-fs: Ignoring removed nobh option
[   96.565150][ T7415] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.752: corrupted inode contents
[   96.577366][ T7415] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #3: comm syz.0.752: mark_inode_dirty error
[   96.589046][ T7415] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.752: corrupted inode contents
[   96.601068][ T7415] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.752: mark_inode_dirty error
[   96.612556][ T7415] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.752: Failed to acquire dquot type 0
[   96.624317][ T7415] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.752: corrupted inode contents
[   96.637103][ T7415] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #16: comm syz.0.752: mark_inode_dirty error
[   96.648576][ T7415] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.752: corrupted inode contents
[   96.660510][ T7415] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.752: mark_inode_dirty error
[   96.671949][ T7415] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.752: corrupted inode contents
[   96.683955][ T7415] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem
[   96.692743][ T7415] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.752: corrupted inode contents
[   96.704698][ T7415] EXT4-fs error (device loop0): ext4_truncate:4637: inode #16: comm syz.0.752: mark_inode_dirty error
[   96.716230][ T7415] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem
[   96.725616][ T7415] EXT4-fs (loop0): 1 truncate cleaned up
[   96.731729][ T7415] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.744826][ T7415] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   96.766836][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.804892][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.753'.
[   96.947907][ T7439] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22
[   96.949629][ T7431] netem: incorrect gi model size
[   96.956335][ T7439] netdevsim netdevsim8: Direct firmware load for . failed with error -22
[   97.028372][ T7449] loop0: detected capacity change from 0 to 512
[   97.045566][ T7449] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   97.069444][ T7449] EXT4-fs (loop0): mount failed
[   97.078308][ T7453] loop3: detected capacity change from 0 to 512
[   97.117586][ T7453] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.132138][ T7453] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #2: comm syz.3.766: No space for directory leaf checksum. Please run e2fsck -D.
[   97.142722][ T7444] loop8: detected capacity change from 0 to 8192
[   97.147487][ T7453] EXT4-fs error (device loop3): ext4_readdir:224: inode #2: comm syz.3.766: path (unknown): directory fails checksum at offset 0
[   97.189948][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.199940][ T7444] IPv6: Can't replace route, no match found
[   97.241835][ T7468] lo: entered promiscuous mode
[   97.248205][ T7468] tunl0: entered promiscuous mode
[   97.254731][ T7468] gre0: entered promiscuous mode
[   97.271485][ T7468] gretap0: entered promiscuous mode
[   97.283992][ T7468] erspan0: entered promiscuous mode
[   97.296291][ T7468] ip_vti0: entered promiscuous mode
[   97.312856][ T7468] ip6_vti0: entered promiscuous mode
[   97.324530][ T7483] loop8: detected capacity change from 0 to 1024
[   97.336681][ T7483] EXT4-fs: inline encryption not supported
[   97.344132][ T7468] sit0: entered promiscuous mode
[   97.350785][ T7468] ip6tnl0: entered promiscuous mode
[   97.357394][ T7468] ip6gre0: entered promiscuous mode
[   97.365634][ T7483] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.368887][ T7468] ip6gretap0: entered promiscuous mode
[   97.386298][ T7468] bridge0: entered promiscuous mode
[   97.392949][ T7468] vcan0: entered promiscuous mode
[   97.400097][ T7468] bond0: entered promiscuous mode
[   97.405353][ T7468] bond_slave_0: entered promiscuous mode
[   97.411204][ T7468] bond_slave_1: entered promiscuous mode
[   97.417813][ T7468] dummy0: entered promiscuous mode
[   97.426432][ T7468] nlmon0: entered promiscuous mode
[   97.433407][ T7468] caif0: entered promiscuous mode
[   97.439035][ T7468] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   97.512090][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.6.776'.
[   97.529371][ T7514] bond2: option ad_user_port_key: invalid value (1136)
[   97.536480][ T7514] bond2: option ad_user_port_key: allowed values 0 - 1023
[   97.556398][   T29] kauditd_printk_skb: 763 callbacks suppressed
[   97.556487][   T29] audit: type=1326 audit(1763793585.031:3447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7518 comm="syz.3.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da52cf749 code=0x7ffc0000
[   97.586550][   T29] audit: type=1326 audit(1763793585.031:3448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7518 comm="syz.3.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da52cf749 code=0x7ffc0000
[   97.610736][   T29] audit: type=1326 audit(1763793585.031:3449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7518 comm="syz.3.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0da52cf749 code=0x7ffc0000
[   97.634512][   T29] audit: type=1326 audit(1763793585.031:3450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7518 comm="syz.3.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da52cf749 code=0x7ffc0000
[   97.657896][   T29] audit: type=1326 audit(1763793585.031:3451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7518 comm="syz.3.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da52cf749 code=0x7ffc0000
[   97.682065][   T29] audit: type=1326 audit(1763793585.031:3452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7518 comm="syz.3.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0da52cf749 code=0x7ffc0000
[   97.706102][   T29] audit: type=1326 audit(1763793585.031:3453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7518 comm="syz.3.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da52cf749 code=0x7ffc0000
[   97.729510][   T29] audit: type=1326 audit(1763793585.031:3454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7518 comm="syz.3.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da52cf749 code=0x7ffc0000
[   97.752994][   T29] audit: type=1326 audit(1763793585.031:3455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7518 comm="syz.3.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0da52cf749 code=0x7ffc0000
[   97.776349][   T29] audit: type=1326 audit(1763793585.031:3456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7518 comm="syz.3.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da52cf749 code=0x7ffc0000
[   97.801023][ T7514] bond2 (unregistering): Released all slaves
[   97.813066][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.777'.
[   98.100944][ T6383] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.126773][ T7572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   98.135388][ T7572] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   98.135793][ T7577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   98.152548][ T7577] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   98.162211][ T7577] FAULT_INJECTION: forcing a failure.
[   98.162211][ T7577] name failslab, interval 1, probability 0, space 0, times 0
[   98.174941][ T7577] CPU: 0 UID: 0 PID: 7577 Comm: syz.8.780 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   98.174981][ T7577] Tainted: [W]=WARN
[   98.174989][ T7577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   98.175005][ T7577] Call Trace:
[   98.175013][ T7577]  <TASK>
[   98.175060][ T7577]  __dump_stack+0x1d/0x30
[   98.175084][ T7577]  dump_stack_lvl+0xe8/0x140
[   98.175110][ T7577]  dump_stack+0x15/0x1b
[   98.175132][ T7577]  should_fail_ex+0x265/0x280
[   98.175274][ T7577]  should_failslab+0x8c/0xb0
[   98.175307][ T7577]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[   98.175347][ T7577]  ? __alloc_skb+0x101/0x320
[   98.175394][ T7577]  __alloc_skb+0x101/0x320
[   98.175513][ T7577]  ? kthread_insert_work+0x104/0x1f0
[   98.175543][ T7577]  ? __pfx_virtual_ncidev_close+0x10/0x10
[   98.175568][ T7577]  nfc_genl_device_removed+0x39/0x1d0
[   98.175695][ T7577]  nfc_unregister_device+0x1b/0x130
[   98.175721][ T7577]  nci_unregister_device+0x146/0x160
[   98.175751][ T7577]  ? __pfx_virtual_ncidev_close+0x10/0x10
[   98.175778][ T7577]  virtual_ncidev_close+0x2a/0x50
[   98.175832][ T7577]  __fput+0x29b/0x650
[   98.175930][ T7577]  ____fput+0x1c/0x30
[   98.175952][ T7577]  task_work_run+0x131/0x1a0
[   98.175989][ T7577]  exit_to_user_mode_loop+0xed/0x110
[   98.176044][ T7577]  do_syscall_64+0x1d6/0x200
[   98.176071][ T7577]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   98.176106][ T7577]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   98.176217][ T7577]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.176245][ T7577] RIP: 0033:0x7f77979ef749
[   98.176265][ T7577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   98.176288][ T7577] RSP: 002b:00007f7796457038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[   98.176345][ T7577] RAX: 0000000000000000 RBX: 00007f7797c45fa0 RCX: 00007f77979ef749
[   98.176361][ T7577] RDX: 0200000000000000 RSI: ffffffffffffffff RDI: 0000000000000005
[   98.176383][ T7577] RBP: 00007f7796457090 R08: 0000000000000000 R09: 0000000000000000
[   98.176397][ T7577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   98.176443][ T7577] R13: 00007f7797c46038 R14: 00007f7797c45fa0 R15: 00007ffc6a6e1da8
[   98.176467][ T7577]  </TASK>
[   98.500605][ T7603] program syz.8.783 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   98.951350][ T7653] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22
[   98.959751][ T7653] netdevsim netdevsim8: Direct firmware load for . failed with error -22
[   99.009108][ T7659] netlink: 4 bytes leftover after parsing attributes in process `syz.6.788'.
[   99.021434][ T7659] pim6reg: entered allmulticast mode
[   99.029450][ T7659] pim6reg: left allmulticast mode
[   99.076582][ T7659] netlink: 164 bytes leftover after parsing attributes in process `syz.6.788'.
[   99.109427][ T7668] loop6: detected capacity change from 0 to 1024
[   99.116319][ T7668] EXT4-fs: inline encryption not supported
[   99.129495][ T7668] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.238159][ T7675] netlink: 8 bytes leftover after parsing attributes in process `syz.8.792'.
[   99.326901][ T7683] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=7683 comm=syz.8.795
[   99.368939][ T7689] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22
[   99.377271][ T7689] netdevsim netdevsim8: Direct firmware load for . failed with error -22
[   99.377618][ T7687] loop1: detected capacity change from 0 to 512
[   99.390931][ T7691] capability: warning: `syz.0.797' uses deprecated v2 capabilities in a way that may be insecure
[   99.408241][ T7691] loop0: detected capacity change from 0 to 512
[   99.418893][ T7691] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.797: corrupted in-inode xattr: invalid ea_ino
[   99.432581][ T7691] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.797: couldn't read orphan inode 15 (err -117)
[   99.445338][ T7687] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   99.445442][ T7691] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.461440][ T7687] EXT4-fs (loop1): mount failed
[   99.490125][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.571521][ T7707] netlink: 4 bytes leftover after parsing attributes in process `syz.8.806'.
[   99.592038][ T7707] team0 (unregistering): Port device team_slave_0 removed
[   99.601957][ T7707] team0 (unregistering): Port device team_slave_1 removed
[   99.626309][ T7712] pim6reg: entered allmulticast mode
[   99.636811][ T7712] pim6reg: left allmulticast mode
[   99.672248][ T7718] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=7718 comm=syz.1.809
[   99.692869][ T7723] netlink: 164 bytes leftover after parsing attributes in process `syz.8.806'.
[   99.745793][ T7734] FAULT_INJECTION: forcing a failure.
[   99.745793][ T7734] name failslab, interval 1, probability 0, space 0, times 0
[   99.758725][ T7734] CPU: 1 UID: 0 PID: 7734 Comm: syz.8.810 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   99.758766][ T7734] Tainted: [W]=WARN
[   99.758804][ T7734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   99.758872][ T7734] Call Trace:
[   99.758879][ T7734]  <TASK>
[   99.758886][ T7734]  __dump_stack+0x1d/0x30
[   99.758910][ T7734]  dump_stack_lvl+0xe8/0x140
[   99.758936][ T7734]  dump_stack+0x15/0x1b
[   99.758960][ T7734]  should_fail_ex+0x265/0x280
[   99.759041][ T7734]  should_failslab+0x8c/0xb0
[   99.759080][ T7734]  kmem_cache_alloc_noprof+0x50/0x480
[   99.759118][ T7734]  ? security_file_alloc+0x32/0x100
[   99.759200][ T7734]  security_file_alloc+0x32/0x100
[   99.759232][ T7734]  init_file+0x5c/0x1d0
[   99.759346][ T7734]  alloc_empty_file+0x8b/0x200
[   99.759441][ T7734]  path_openat+0x68/0x2170
[   99.759470][ T7734]  ? _parse_integer_limit+0x170/0x190
[   99.759516][ T7734]  ? kstrtoull+0x111/0x140
[   99.759591][ T7734]  ? kstrtouint+0x76/0xc0
[   99.759634][ T7734]  do_filp_open+0x109/0x230
[   99.759666][ T7734]  do_sys_openat2+0xa6/0x110
[   99.759687][ T7734]  __x64_sys_openat+0xf2/0x120
[   99.759719][ T7734]  x64_sys_call+0x2eab/0x3000
[   99.759749][ T7734]  do_syscall_64+0xd2/0x200
[   99.759778][ T7734]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   99.759945][ T7734]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   99.759981][ T7734]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.760010][ T7734] RIP: 0033:0x7f77979ef749
[   99.760027][ T7734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   99.760051][ T7734] RSP: 002b:00007f7796457038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   99.760165][ T7734] RAX: ffffffffffffffda RBX: 00007f7797c45fa0 RCX: 00007f77979ef749
[   99.760183][ T7734] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c
[   99.760200][ T7734] RBP: 00007f7796457090 R08: 0000000000000000 R09: 0000000000000000
[   99.760216][ T7734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   99.760232][ T7734] R13: 00007f7797c46038 R14: 00007f7797c45fa0 R15: 00007ffc6a6e1da8
[   99.760257][ T7734]  </TASK>
[   99.988665][ T5145] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.068893][ T7768] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=7768 comm=syz.8.812
[  100.096540][ T7768] loop8: detected capacity change from 0 to 512
[  100.103724][ T7768] EXT4-fs: Ignoring removed nomblk_io_submit option
[  100.118830][ T7768] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  100.126838][ T7768] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102]
[  100.135061][ T7768] EXT4-fs (loop8): couldn't mount RDWR because of unsupported optional features (80)
[  100.144601][ T7768] EXT4-fs (loop8): Skipping orphan cleanup due to unknown ROCOMPAT features
[  100.154013][ T7768] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  100.167487][ T7768] EXT4-fs: Ignoring removed nomblk_io_submit option
[  100.174743][ T7768] EXT4-fs (loop8): couldn't mount RDWR because of unsupported optional features (80)
[  100.262567][ T6383] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.276090][ T7797] loop6: detected capacity change from 0 to 512
[  100.297640][ T7797] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  100.323602][ T7797] EXT4-fs (loop6): mount failed
[  100.437039][ T7821] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:0
[  100.521929][ T7836] loop6: detected capacity change from 0 to 1024
[  100.543582][ T7836] EXT4-fs: inline encryption not supported
[  100.588040][ T7848] netlink: 28 bytes leftover after parsing attributes in process `syz.8.823'.
[  100.597205][ T7848] netlink: 28 bytes leftover after parsing attributes in process `syz.8.823'.
[  100.607175][ T7836] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.693990][ T7859] wg1 speed is unknown, defaulting to 1000
[  101.096540][ T7977] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  101.104917][ T7977] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  101.159169][ T7903] wg1 speed is unknown, defaulting to 1000
[  101.254095][ T7903] chnl_net:caif_netlink_parms(): no params data found
[  101.304591][ T7985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.836'.
[  101.326961][ T7903] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.334085][ T7903] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.341936][ T7903] bridge_slave_0: entered allmulticast mode
[  101.348455][ T7903] bridge_slave_0: entered promiscuous mode
[  101.355476][ T7903] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.362615][ T7903] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.370103][ T7903] bridge_slave_1: entered allmulticast mode
[  101.376741][ T7903] bridge_slave_1: entered promiscuous mode
[  101.395659][ T7903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  101.406592][ T7903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  101.431077][ T7903] team0: Port device team_slave_0 added
[  101.443790][ T7903] team0: Port device team_slave_1 added
[  101.444845][ T5145] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.462706][ T7993] loop3: detected capacity change from 0 to 512
[  101.469720][ T7993] EXT4-fs (loop3): bad geometry: block count 143 exceeds size of device (128 blocks)
[  101.495885][ T7995] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=7995 comm=syz.6.838
[  101.510244][ T7903] batman_adv: batadv0: Adding interface: batadv_slave_0
[  101.517251][ T7903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  101.543312][ T7903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  101.715524][ T7903] batman_adv: batadv0: Adding interface: batadv_slave_1
[  101.722527][ T7903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  101.748551][ T7903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  101.868123][ T7999] wg1 speed is unknown, defaulting to 1000
[  101.876039][ T7903] hsr_slave_0: entered promiscuous mode
[  101.892405][ T7903] hsr_slave_1: entered promiscuous mode
[  101.898791][ T7903] debugfs: 'hsr0' already exists in 'hsr'
[  101.904603][ T7903] Cannot create hsr debugfs directory
[  102.114715][ T8012] wg1 speed is unknown, defaulting to 1000
[  102.122412][ T7903] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  102.170263][ T7903] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  102.209333][ T7903] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  102.245315][ T7903] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  102.378917][ T7903] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.435200][ T7903] 8021q: adding VLAN 0 to HW filter on device team0
[  102.446482][ T7970] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.453694][ T7970] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.475566][ T7966] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.482694][ T7966] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.549744][ T8031] syzkaller0: entered promiscuous mode
[  102.555321][ T8031] syzkaller0: entered allmulticast mode
[  102.585941][ T8034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.843'.
[  102.629067][ T8012] netlink: 'syz.6.845': attribute type 3 has an invalid length.
[  102.637738][ T8012] netlink: 'syz.6.845': attribute type 3 has an invalid length.
[  102.661439][ T8039] pim6reg: entered allmulticast mode
[  102.701956][ T7903] 8021q: adding VLAN 0 to HW filter on device batadv0
[  102.703858][ T8042] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=8042 comm=syz.8.851
[  102.762588][ T8042] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=8042 comm=syz.8.851
[  102.862131][ T8050] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22
[  102.870485][ T8050] netdevsim netdevsim8: Direct firmware load for . failed with error -22
[  102.888801][ T8051] loop6: detected capacity change from 0 to 764
[  102.930345][ T8005] pim6reg: left allmulticast mode
[  102.954383][   T29] kauditd_printk_skb: 753 callbacks suppressed
[  102.954405][   T29] audit: type=1326 audit(1763793590.371:4208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.6.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6299f749 code=0x7ffc0000
[  102.984126][   T29] audit: type=1326 audit(1763793590.371:4209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.6.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6299f749 code=0x7ffc0000
[  103.007526][   T29] audit: type=1326 audit(1763793590.371:4210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.6.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b6299f749 code=0x7ffc0000
[  103.030997][   T29] audit: type=1326 audit(1763793590.381:4211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.6.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6299f749 code=0x7ffc0000
[  103.054439][   T29] audit: type=1326 audit(1763793590.381:4212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.6.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8b6299f749 code=0x7ffc0000
[  103.077891][   T29] audit: type=1326 audit(1763793590.381:4213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.6.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6299f749 code=0x7ffc0000
[  103.101694][   T29] audit: type=1326 audit(1763793590.381:4214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.6.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b6299f749 code=0x7ffc0000
[  103.125157][   T29] audit: type=1326 audit(1763793590.381:4215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.6.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6299f749 code=0x7ffc0000
[  103.148623][   T29] audit: type=1326 audit(1763793590.381:4216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.6.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b6299f749 code=0x7ffc0000
[  103.172056][   T29] audit: type=1326 audit(1763793590.381:4217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.6.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6299f749 code=0x7ffc0000
[  103.313189][ T8005] netlink: 164 bytes leftover after parsing attributes in process `syz.3.843'.
[  103.365973][ T8069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=8069 comm=syz.6.857
[  103.380562][ T7903] veth0_vlan: entered promiscuous mode
[  103.400200][ T8071] loop1: detected capacity change from 0 to 764
[  103.405213][ T7903] veth1_vlan: entered promiscuous mode
[  103.420344][ T8069] loop6: detected capacity change from 0 to 512
[  103.427916][ T8069] EXT4-fs: Ignoring removed nomblk_io_submit option
[  103.437493][ T8069] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  103.445486][ T8069] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102]
[  103.454185][ T8071] iso9660: Unknown parameter '000000000000000000070177777777777777777777700000000000037777777777'
[  103.468273][ T8069] EXT4-fs (loop6): couldn't mount RDWR because of unsupported optional features (80)
[  103.477563][ T7903] veth0_macvtap: entered promiscuous mode
[  103.477942][ T8069] EXT4-fs (loop6): Skipping orphan cleanup due to unknown ROCOMPAT features
[  103.495027][ T7903] veth1_macvtap: entered promiscuous mode
[  103.512009][ T8058] wg1 speed is unknown, defaulting to 1000
[  103.523586][ T7903] batman_adv: batadv0: Interface activated: batadv_slave_0
[  103.541998][ T8069] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  103.555178][ T7903] batman_adv: batadv0: Interface activated: batadv_slave_1
[  103.620911][ T7969] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.629866][ T7969] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.656244][ T7969] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.690175][ T7969] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.923836][ T8083] syzkaller0: entered promiscuous mode
[  103.929450][ T8083] syzkaller0: entered allmulticast mode
[  103.973078][ T8092] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=8092 comm=syz.3.861
[  104.009933][ T8096] FAULT_INJECTION: forcing a failure.
[  104.009933][ T8096] name failslab, interval 1, probability 0, space 0, times 0
[  104.022733][ T8096] CPU: 1 UID: 0 PID: 8096 Comm: syz.8.862 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  104.022774][ T8096] Tainted: [W]=WARN
[  104.022781][ T8096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  104.022796][ T8096] Call Trace:
[  104.022802][ T8096]  <TASK>
[  104.022811][ T8096]  __dump_stack+0x1d/0x30
[  104.022838][ T8096]  dump_stack_lvl+0xe8/0x140
[  104.022862][ T8096]  dump_stack+0x15/0x1b
[  104.022882][ T8096]  should_fail_ex+0x265/0x280
[  104.022998][ T8096]  should_failslab+0x8c/0xb0
[  104.023066][ T8096]  kmem_cache_alloc_noprof+0x50/0x480
[  104.023096][ T8096]  ? __anon_vma_prepare+0xcd/0x2f0
[  104.023156][ T8096]  __anon_vma_prepare+0xcd/0x2f0
[  104.023182][ T8096]  do_wp_page+0x18ee/0x2510
[  104.023212][ T8096]  ? __rcu_read_lock+0x37/0x50
[  104.023247][ T8096]  ? css_rstat_updated+0xb7/0x240
[  104.023270][ T8096]  ? __rcu_read_lock+0x37/0x50
[  104.023407][ T8096]  handle_mm_fault+0x77d/0x2be0
[  104.023440][ T8096]  ? vma_start_read+0x141/0x1f0
[  104.023488][ T8096]  do_user_addr_fault+0x630/0x1080
[  104.023522][ T8096]  ? fpregs_assert_state_consistent+0xb4/0xe0
[  104.023555][ T8096]  exc_page_fault+0x62/0xa0
[  104.023639][ T8096]  asm_exc_page_fault+0x26/0x30
[  104.023659][ T8096] RIP: 0033:0x7f77978b0943
[  104.023677][ T8096] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c
[  104.023699][ T8096] RSP: 002b:00007f77964564a0 EFLAGS: 00010202
[  104.023717][ T8096] RAX: 0000000000000400 RBX: 00007f7796456540 RCX: 00007f778e037000
[  104.023729][ T8096] RDX: 00007f77964566e0 RSI: 0000000000000001 RDI: 00007f77964565e0
[  104.023775][ T8096] RBP: 00000000000000f9 R08: 0000000000000009 R09: 00000000000001a6
[  104.023840][ T8096] R10: 00000000000001c8 R11: 00007f7796456540 R12: 0000000000000001
[  104.023852][ T8096] R13: 00007f7797a8fc40 R14: 0000000000000020 R15: 00007f77964565e0
[  104.023950][ T8096]  </TASK>
[  104.215930][ T8096] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  104.232469][ T8098] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=8098 comm=syz.3.861
[  104.244958][ T8096] loop8: detected capacity change from 0 to 512
[  104.254748][ T8096] EXT4-fs error (device loop8): ext4_init_orphan_info:581: comm syz.8.862: inode #0: comm syz.8.862: iget: illegal inode #
[  104.268412][ T8096] EXT4-fs (loop8): get orphan inode failed
[  104.274709][ T8096] EXT4-fs (loop8): mount failed
[  104.316305][ T5145] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.328906][ T8110] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  104.337413][ T8110] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  104.417809][ T8123] loop6: detected capacity change from 0 to 512
[  104.437837][ T8130] FAULT_INJECTION: forcing a failure.
[  104.437837][ T8130] name failslab, interval 1, probability 0, space 0, times 0
[  104.450649][ T8130] CPU: 1 UID: 0 PID: 8130 Comm: syz.8.869 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  104.450691][ T8130] Tainted: [W]=WARN
[  104.450700][ T8130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  104.450769][ T8130] Call Trace:
[  104.450776][ T8130]  <TASK>
[  104.450784][ T8130]  __dump_stack+0x1d/0x30
[  104.450814][ T8130]  dump_stack_lvl+0xe8/0x140
[  104.450914][ T8130]  dump_stack+0x15/0x1b
[  104.450986][ T8130]  should_fail_ex+0x265/0x280
[  104.451030][ T8130]  should_failslab+0x8c/0xb0
[  104.451140][ T8130]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[  104.451181][ T8130]  ? __alloc_skb+0x101/0x320
[  104.451218][ T8130]  __alloc_skb+0x101/0x320
[  104.451317][ T8130]  netlink_alloc_large_skb+0xbf/0xf0
[  104.451357][ T8130]  netlink_sendmsg+0x3cf/0x6b0
[  104.451420][ T8130]  ? __pfx_netlink_sendmsg+0x10/0x10
[  104.451446][ T8130]  __sock_sendmsg+0x145/0x180
[  104.451488][ T8130]  ____sys_sendmsg+0x31e/0x4e0
[  104.451517][ T8130]  ___sys_sendmsg+0x17b/0x1d0
[  104.451570][ T8130]  __x64_sys_sendmsg+0xd4/0x160
[  104.451633][ T8130]  x64_sys_call+0x191e/0x3000
[  104.451662][ T8130]  do_syscall_64+0xd2/0x200
[  104.451689][ T8130]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  104.451770][ T8130]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.451797][ T8130] RIP: 0033:0x7f77979ef749
[  104.451815][ T8130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  104.451837][ T8130] RSP: 002b:00007f7796457038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  104.451890][ T8130] RAX: ffffffffffffffda RBX: 00007f7797c45fa0 RCX: 00007f77979ef749
[  104.451905][ T8130] RDX: 0000000000000040 RSI: 0000200000000600 RDI: 0000000000000008
[  104.451922][ T8130] RBP: 00007f7796457090 R08: 0000000000000000 R09: 0000000000000000
[  104.452011][ T8130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  104.452025][ T8130] R13: 00007f7797c46038 R14: 00007f7797c45fa0 R15: 00007ffc6a6e1da8
[  104.452051][ T8130]  </TASK>
[  104.736621][ T8123] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  104.751938][ T8123] EXT4-fs (loop6): mount failed
[  104.837257][ T8166] wg1 speed is unknown, defaulting to 1000
[  104.991949][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.8.873'.
[  105.116142][ T8197] loop8: detected capacity change from 0 to 764
[  105.143488][ T8197] iso9660: Unknown parameter '000000000000000000070177777777777777777777700000000000037777777777'
[  105.191141][ T8206] loop6: detected capacity change from 0 to 1024
[  105.317946][ T8223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.876'.
[  105.334150][ T8223] loop1: detected capacity change from 0 to 512
[  105.345417][ T8223] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.355199][ T8227] netlink: 'syz.6.877': attribute type 10 has an invalid length.
[  105.369863][ T8223] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.422030][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.473110][ T8244] netlink: 4 bytes leftover after parsing attributes in process `syz.6.882'.
[  105.639548][ T8261] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[  105.683732][ T8264] netlink: 8 bytes leftover after parsing attributes in process `syz.6.884'.
[  105.813589][ T8269] wg1 speed is unknown, defaulting to 1000
[  105.897670][ T8288] netlink: 4 bytes leftover after parsing attributes in process `syz.8.888'.
[  105.926087][ T8292] loop3: detected capacity change from 0 to 164
[  105.958827][ T8297] program syz.3.890 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  106.062172][ T8301] IPVS: persistence engine module ip_vs_pe_ not found
[  106.077994][ T8300] loop3: detected capacity change from 0 to 512
[  106.094949][ T8300] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  106.103090][ T8300] EXT4-fs (loop3): orphan cleanup on readonly fs
[  106.103452][ T8309] loop6: detected capacity change from 0 to 512
[  106.110988][ T8300] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents
[  106.127496][ T8300] EXT4-fs (loop3): Remounting filesystem read-only
[  106.134390][ T8300] EXT4-fs (loop3): 1 truncate cleaned up
[  106.139552][ T8309] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.140253][ T7969] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  106.155333][ T8309] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  106.163136][ T7969] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  106.184300][ T7969] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started
[  106.195383][ T8300] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  106.199037][ T8315] netlink: 4 bytes leftover after parsing attributes in process `syz.8.894'.
[  106.236209][ T5145] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.256234][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.392090][ T8328] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=8328 comm=syz.3.899
[  106.413689][ T8328] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=8328 comm=syz.3.899
[  106.426271][ T8326] loop1: detected capacity change from 0 to 512
[  106.433157][ T8326] EXT4-fs: test_dummy_encryption option not supported
[  106.541562][ T8336] wg1 speed is unknown, defaulting to 1000
[  106.568765][ T8345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.907'.
[  106.623103][   T36] IPVS: starting estimator thread 0...
[  106.713370][ T8356] IPVS: using max 1968 ests per chain, 98400 per kthread
[  106.988234][ T8389] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=8389 comm=syz.1.916
[  107.142218][ T8415] netlink: 8 bytes leftover after parsing attributes in process `syz.8.923'.
[  107.192531][ T8421] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  107.309213][ T8435] wg1 speed is unknown, defaulting to 1000
[  107.656820][ T8478] syzkaller0: entered promiscuous mode
[  107.662382][ T8478] syzkaller0: entered allmulticast mode
[  108.128050][   T29] kauditd_printk_skb: 625 callbacks suppressed
[  108.128068][   T29] audit: type=1400 audit(1763793595.601:4836): avc:  denied  { map } for  pid=8522 comm="syz.8.934" path="socket:[20163]" dev="sockfs" ino=20163 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  108.158718][   T29] audit: type=1400 audit(1763793595.601:4837): avc:  denied  { read accept } for  pid=8522 comm="syz.8.934" path="socket:[20163]" dev="sockfs" ino=20163 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  108.260072][   T29] audit: type=1326 audit(1763793595.731:4838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8537 comm="syz.8.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77979ef749 code=0x7ffc0000
[  108.283476][   T29] audit: type=1326 audit(1763793595.731:4839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8537 comm="syz.8.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77979ef749 code=0x7ffc0000
[  108.306927][   T29] audit: type=1326 audit(1763793595.731:4840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8537 comm="syz.8.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77979ef749 code=0x7ffc0000
[  108.330341][   T29] audit: type=1326 audit(1763793595.731:4841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8537 comm="syz.8.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77979ef749 code=0x7ffc0000
[  108.353765][   T29] audit: type=1326 audit(1763793595.731:4842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8537 comm="syz.8.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77979ef749 code=0x7ffc0000
[  108.377214][   T29] audit: type=1326 audit(1763793595.731:4843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8537 comm="syz.8.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77979ef749 code=0x7ffc0000
[  108.401111][   T29] audit: type=1326 audit(1763793595.731:4844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8537 comm="syz.8.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77979ef749 code=0x7ffc0000
[  108.424515][   T29] audit: type=1326 audit(1763793595.731:4845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8537 comm="syz.8.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77979ef749 code=0x7ffc0000
[  108.496200][ T8557] __nla_validate_parse: 1 callbacks suppressed
[  108.496245][ T8557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.937'.
[  108.561494][ T8561] wg1 speed is unknown, defaulting to 1000
[  108.614191][ T8562] wg1 speed is unknown, defaulting to 1000
[  109.119666][ T8574] loop8: detected capacity change from 0 to 512
[  109.169023][ T8575] loop9: detected capacity change from 0 to 764
[  109.177634][ T8577] netlink: 'syz.6.945': attribute type 13 has an invalid length.
[  109.195303][ T8574] EXT4-fs warning (device loop8): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  109.231451][ T8575] iso9660: Unknown parameter '000000000000000000070177777777777777777777700000000000037777777777'
[  109.261330][ T8574] EXT4-fs (loop8): mount failed
[  109.370230][ T8585] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=8585 comm=syz.3.946
[  109.490312][   T36] wg1 speed is unknown, defaulting to 1000
[  109.494083][ T7968] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.496468][   T36] syz: Port: 1 Link DOWN
[  109.506777][ T7968] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.616454][ T8601] FAULT_INJECTION: forcing a failure.
[  109.616454][ T8601] name failslab, interval 1, probability 0, space 0, times 0
[  109.629276][ T8601] CPU: 1 UID: 0 PID: 8601 Comm: syz.8.949 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  109.629319][ T8601] Tainted: [W]=WARN
[  109.629327][ T8601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  109.629340][ T8601] Call Trace:
[  109.629348][ T8601]  <TASK>
[  109.629358][ T8601]  __dump_stack+0x1d/0x30
[  109.629382][ T8601]  dump_stack_lvl+0xe8/0x140
[  109.629402][ T8601]  dump_stack+0x15/0x1b
[  109.629418][ T8601]  should_fail_ex+0x265/0x280
[  109.629452][ T8601]  ? hugetlb_reserve_pages+0x393/0xc00
[  109.629484][ T8601]  should_failslab+0x8c/0xb0
[  109.629517][ T8601]  __kmalloc_cache_noprof+0x4c/0x4a0
[  109.629554][ T8601]  hugetlb_reserve_pages+0x393/0xc00
[  109.629592][ T8601]  hugetlbfs_file_mmap+0x27e/0x340
[  109.629629][ T8601]  mmap_region+0xfa7/0x1620
[  109.629690][ T8601]  do_mmap+0x9b3/0xbe0
[  109.629718][ T8601]  __se_sys_remap_file_pages+0x537/0x5e0
[  109.629748][ T8601]  ? fput+0x8f/0xc0
[  109.629767][ T8601]  __x64_sys_remap_file_pages+0x67/0x80
[  109.629789][ T8601]  x64_sys_call+0x23b3/0x3000
[  109.629816][ T8601]  do_syscall_64+0xd2/0x200
[  109.629842][ T8601]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  109.629875][ T8601]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  109.629906][ T8601]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.629931][ T8601] RIP: 0033:0x7f77979ef749
[  109.629947][ T8601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  109.629965][ T8601] RSP: 002b:00007f7796457038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8
[  109.629983][ T8601] RAX: ffffffffffffffda RBX: 00007f7797c45fa0 RCX: 00007f77979ef749
[  109.629994][ T8601] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000800000
[  109.630005][ T8601] RBP: 00007f7796457090 R08: 0000000000010000 R09: 0000000000000000
[  109.630017][ T8601] R10: 0000000000000600 R11: 0000000000000246 R12: 0000000000000001
[  109.630031][ T8601] R13: 00007f7797c46038 R14: 00007f7797c45fa0 R15: 00007ffc6a6e1da8
[  109.630049][ T8601]  </TASK>
[  109.630056][ T8601] HugeTLB: unable to allocate vma specific lock
[  109.655330][ T7968] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.655444][ T7968] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.808110][ T8599] wg1 speed is unknown, defaulting to 1000
[  109.877607][ T8604] loop1: detected capacity change from 0 to 512
[  109.913750][ T8604] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.951: error while reading EA inode 32 err=-116
[  109.994819][ T8604] EXT4-fs (loop1): Remounting filesystem read-only
[  110.003274][ T8604] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  110.022759][ T8604] EXT4-fs (loop1): 1 orphan inode deleted
[  110.054510][ T8604] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.107864][ T8604] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.202384][ T8630] loop1: detected capacity change from 0 to 164
[  110.209817][ T8630] ISOFS: unable to read i-node block
[  110.218867][ T8630] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  110.292361][ T8641] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=8641 comm=syz.8.958
[  110.341466][ T8647] netlink: 4 bytes leftover after parsing attributes in process `syz.6.960'.
[  110.443743][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.6.962'.
[  110.560625][ T8680] FAULT_INJECTION: forcing a failure.
[  110.560625][ T8680] name failslab, interval 1, probability 0, space 0, times 0
[  110.573435][ T8680] CPU: 0 UID: 0 PID: 8680 Comm: syz.6.966 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  110.573474][ T8680] Tainted: [W]=WARN
[  110.573482][ T8680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  110.573546][ T8680] Call Trace:
[  110.573553][ T8680]  <TASK>
[  110.573561][ T8680]  __dump_stack+0x1d/0x30
[  110.573591][ T8680]  dump_stack_lvl+0xe8/0x140
[  110.573614][ T8680]  dump_stack+0x15/0x1b
[  110.573675][ T8680]  should_fail_ex+0x265/0x280
[  110.573713][ T8680]  should_failslab+0x8c/0xb0
[  110.573819][ T8680]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[  110.573858][ T8680]  ? __alloc_skb+0x101/0x320
[  110.574031][ T8680]  __alloc_skb+0x101/0x320
[  110.574067][ T8680]  alloc_skb_with_frags+0x7d/0x470
[  110.574111][ T8680]  ? __account_obj_stock+0x2cc/0x350
[  110.574193][ T8680]  ? crypto_aes_encrypt+0x1c7f/0x1ca0
[  110.574223][ T8680]  ? crypto_aes_encrypt+0x1c7f/0x1ca0
[  110.574252][ T8680]  tcp_send_rcvq+0xef/0x2b0
[  110.574280][ T8680]  tcp_sendmsg_locked+0x27d0/0x2c00
[  110.574377][ T8680]  ? crypto_cbcmac_digest_finup+0x6a/0xb0
[  110.574402][ T8680]  ? crypto_shash_finup+0x180/0x420
[  110.574435][ T8680]  ? crypto_aes_encrypt+0x1c7f/0x1ca0
[  110.574466][ T8680]  ? crypto_cipher_encrypt_one+0xa5/0x140
[  110.574502][ T8680]  ? __pfx_crypto_aes_encrypt+0x10/0x10
[  110.574567][ T8680]  ? __crypto_xor+0x6da/0x700
[  110.574592][ T8680]  ? skcipher_walk_done+0x159/0x3e0
[  110.574615][ T8680]  ? crypto_inc+0xe4/0x170
[  110.574637][ T8680]  tls_push_sg+0x155/0x590
[  110.574667][ T8680]  tls_tx_records+0x219/0x350
[  110.574729][ T8680]  tls_push_record+0x1540/0x1600
[  110.574772][ T8680]  bpf_exec_tx_verdict+0x85f/0xc90
[  110.574896][ T8680]  tls_sw_sendmsg+0x1098/0x1560
[  110.574960][ T8680]  ? selinux_socket_sendmsg+0x175/0x1b0
[  110.575072][ T8680]  ? __pfx_tls_sw_sendmsg+0x10/0x10
[  110.575107][ T8680]  inet6_sendmsg+0xc5/0xd0
[  110.575172][ T8680]  __sock_sendmsg+0x8b/0x180
[  110.575197][ T8680]  __sys_sendto+0x268/0x330
[  110.575313][ T8680]  __x64_sys_sendto+0x76/0x90
[  110.575350][ T8680]  x64_sys_call+0x2d14/0x3000
[  110.575394][ T8680]  do_syscall_64+0xd2/0x200
[  110.575415][ T8680]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  110.575442][ T8680]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  110.575484][ T8680]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.575504][ T8680] RIP: 0033:0x7f8b629a15dc
[  110.575519][ T8680] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[  110.575556][ T8680] RSP: 002b:00007f8b613fdec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  110.575578][ T8680] RAX: ffffffffffffffda RBX: 00007f8b613fdfc0 RCX: 00007f8b629a15dc
[  110.575593][ T8680] RDX: 0000000000000020 RSI: 00007f8b613fe010 RDI: 0000000000000005
[  110.575608][ T8680] RBP: 0000000000000000 R08: 00007f8b613fdf14 R09: 000000000000000c
[  110.575624][ T8680] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005
[  110.575635][ T8680] R13: 00007f8b613fdf68 R14: 00007f8b613fe010 R15: 0000000000000000
[  110.575654][ T8680]  </TASK>
[  110.961068][ T8697] 9pnet_fd: Insufficient options for proto=fd
[  111.020500][ T8707] FAULT_INJECTION: forcing a failure.
[  111.020500][ T8707] name failslab, interval 1, probability 0, space 0, times 0
[  111.033362][ T8707] CPU: 1 UID: 0 PID: 8707 Comm: syz.6.969 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  111.033468][ T8707] Tainted: [W]=WARN
[  111.033475][ T8707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  111.033488][ T8707] Call Trace:
[  111.033497][ T8707]  <TASK>
[  111.033506][ T8707]  __dump_stack+0x1d/0x30
[  111.033535][ T8707]  dump_stack_lvl+0xe8/0x140
[  111.033573][ T8707]  dump_stack+0x15/0x1b
[  111.033589][ T8707]  should_fail_ex+0x265/0x280
[  111.033628][ T8707]  should_failslab+0x8c/0xb0
[  111.033710][ T8707]  __kvmalloc_node_noprof+0x12e/0x670
[  111.033745][ T8707]  ? alloc_netdev_mqs+0x881/0xa50
[  111.033772][ T8707]  alloc_netdev_mqs+0x881/0xa50
[  111.033796][ T8707]  rtnl_create_link+0x239/0x710
[  111.033848][ T8707]  rtnl_newlink_create+0x14c/0x620
[  111.033876][ T8707]  ? security_capable+0x83/0x90
[  111.033928][ T8707]  ? netlink_ns_capable+0x86/0xa0
[  111.033957][ T8707]  rtnl_newlink+0xf29/0x12d0
[  111.034061][ T8707]  ? xas_load+0x413/0x430
[  111.034084][ T8707]  ? __rcu_read_unlock+0x4f/0x70
[  111.034118][ T8707]  ? xa_load+0xb1/0xe0
[  111.034167][ T8707]  ? __rcu_read_unlock+0x4f/0x70
[  111.034196][ T8707]  ? avc_has_perm_noaudit+0x1b1/0x200
[  111.034268][ T8707]  ? cred_has_capability+0x210/0x280
[  111.034352][ T8707]  ? selinux_capable+0x31/0x40
[  111.034381][ T8707]  ? security_capable+0x83/0x90
[  111.034423][ T8707]  ? ns_capable+0x7d/0xb0
[  111.034532][ T8707]  ? __pfx_rtnl_newlink+0x10/0x10
[  111.034563][ T8707]  rtnetlink_rcv_msg+0x5fe/0x6d0
[  111.034593][ T8707]  ? avc_has_perm_noaudit+0x1b1/0x200
[  111.034621][ T8707]  netlink_rcv_skb+0x123/0x220
[  111.034667][ T8707]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  111.034703][ T8707]  rtnetlink_rcv+0x1c/0x30
[  111.034790][ T8707]  netlink_unicast+0x5c0/0x690
[  111.034828][ T8707]  netlink_sendmsg+0x58b/0x6b0
[  111.034862][ T8707]  ? __pfx_netlink_sendmsg+0x10/0x10
[  111.034888][ T8707]  __sock_sendmsg+0x145/0x180
[  111.034917][ T8707]  ____sys_sendmsg+0x31e/0x4e0
[  111.034943][ T8707]  ___sys_sendmsg+0x17b/0x1d0
[  111.034992][ T8707]  __x64_sys_sendmsg+0xd4/0x160
[  111.035020][ T8707]  x64_sys_call+0x191e/0x3000
[  111.035048][ T8707]  do_syscall_64+0xd2/0x200
[  111.035068][ T8707]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  111.035175][ T8707]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  111.035236][ T8707]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.035259][ T8707] RIP: 0033:0x7f8b6299f749
[  111.035274][ T8707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  111.035293][ T8707] RSP: 002b:00007f8b613ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  111.035311][ T8707] RAX: ffffffffffffffda RBX: 00007f8b62bf5fa0 RCX: 00007f8b6299f749
[  111.035323][ T8707] RDX: 0000000008000002 RSI: 0000200000000080 RDI: 0000000000000003
[  111.035363][ T8707] RBP: 00007f8b613ff090 R08: 0000000000000000 R09: 0000000000000000
[  111.035377][ T8707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  111.035392][ T8707] R13: 00007f8b62bf6038 R14: 00007f8b62bf5fa0 R15: 00007ffdb9eec6f8
[  111.035417][ T8707]  </TASK>
[  111.546073][ T8741] wg1 speed is unknown, defaulting to 1000
[  111.593158][ T8770] loop1: detected capacity change from 0 to 764
[  111.628322][ T8770] iso9660: Unknown parameter '000000000000000000070177777777777777777777700000000000037777777777'
[  112.045792][ T8802] loop1: detected capacity change from 0 to 512
[  112.069056][ T8802] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  112.082191][ T8780] Set syz1 is full, maxelem 65536 reached
[  112.095728][ T8802] EXT4-fs (loop1): mount failed
[  112.279624][ T8839] netlink: 4 bytes leftover after parsing attributes in process `syz.8.990'.
[  112.392333][ T8844] loop8: detected capacity change from 0 to 764
[  112.399342][ T8844] iso9660: Unknown parameter '000000000000000000070177777777777777777777700000000000037777777777'
[  112.625311][ T8853] loop8: detected capacity change from 0 to 512
[  112.643290][ T8853] EXT4-fs warning (device loop8): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  112.658345][ T8853] EXT4-fs (loop8): mount failed
[  112.723916][ T8863] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  112.734028][ T8864] FAULT_INJECTION: forcing a failure.
[  112.734028][ T8864] name failslab, interval 1, probability 0, space 0, times 0
[  112.746785][ T8864] CPU: 0 UID: 0 PID: 8864 Comm: syz.8.998 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  112.746859][ T8864] Tainted: [W]=WARN
[  112.746864][ T8864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  112.746878][ T8864] Call Trace:
[  112.746883][ T8864]  <TASK>
[  112.746890][ T8864]  __dump_stack+0x1d/0x30
[  112.746909][ T8864]  dump_stack_lvl+0xe8/0x140
[  112.746937][ T8864]  dump_stack+0x15/0x1b
[  112.746952][ T8864]  should_fail_ex+0x265/0x280
[  112.746996][ T8864]  should_failslab+0x8c/0xb0
[  112.747033][ T8864]  __kmalloc_noprof+0xa5/0x570
[  112.747084][ T8864]  ? kernfs_fop_write_iter+0xe2/0x300
[  112.747156][ T8864]  ? selinux_file_permission+0x1e4/0x320
[  112.747185][ T8864]  kernfs_fop_write_iter+0xe2/0x300
[  112.747204][ T8864]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  112.747290][ T8864]  vfs_write+0x52a/0x960
[  112.747351][ T8864]  ksys_write+0xda/0x1a0
[  112.747373][ T8864]  __x64_sys_write+0x40/0x50
[  112.747395][ T8864]  x64_sys_call+0x2802/0x3000
[  112.747414][ T8864]  do_syscall_64+0xd2/0x200
[  112.747512][ T8864]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  112.747550][ T8864]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  112.747578][ T8864]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.747608][ T8864] RIP: 0033:0x7f77979ef749
[  112.747628][ T8864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  112.747645][ T8864] RSP: 002b:00007f7796457038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  112.747703][ T8864] RAX: ffffffffffffffda RBX: 00007f7797c45fa0 RCX: 00007f77979ef749
[  112.747714][ T8864] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000006
[  112.747732][ T8864] RBP: 00007f7796457090 R08: 0000000000000000 R09: 0000000000000000
[  112.747743][ T8864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  112.747759][ T8864] R13: 00007f7797c46038 R14: 00007f7797c45fa0 R15: 00007ffc6a6e1da8
[  112.747776][ T8864]  </TASK>
[  112.971755][ T8869] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  113.027194][ T8876] loop6: detected capacity change from 0 to 1024
[  113.034314][ T8876] journal_path: Non-blockdev passed as './file1'
[  113.040791][ T8876] EXT4-fs: error: could not find journal device path
[  113.077659][ T8884] netlink: 'syz.8.1003': attribute type 10 has an invalid length.
[  113.086415][ T8882] loop1: detected capacity change from 0 to 512
[  113.088114][ T7971] Bluetooth: hci0: Frame reassembly failed (-90)
[  113.110453][ T8885] loop3: detected capacity change from 0 to 764
[  113.127642][ T8882] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  113.142194][ T8885] iso9660: Unknown parameter '000000000000000000070177777777777777777777700000000000037777777777'
[  113.154394][ T8882] EXT4-fs (loop1): mount failed
[  113.379400][   T29] kauditd_printk_skb: 315 callbacks suppressed
[  113.379414][   T29] audit: type=1326 audit(1763793600.851:5157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8906 comm="syz.3.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da52cf749 code=0x7ffc0000
[  113.409414][   T29] audit: type=1326 audit(1763793600.851:5158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8906 comm="syz.3.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da52cf749 code=0x7ffc0000
[  113.433278][   T29] audit: type=1326 audit(1763793600.881:5159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8906 comm="syz.3.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0da52cf749 code=0x7ffc0000
[  113.457320][   T29] audit: type=1326 audit(1763793600.881:5160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8906 comm="syz.3.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da52cf749 code=0x7ffc0000
[  113.481762][   T29] audit: type=1326 audit(1763793600.881:5161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8906 comm="syz.3.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da52cf749 code=0x7ffc0000
[  113.505377][   T29] audit: type=1326 audit(1763793600.881:5162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8906 comm="syz.3.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0da52cf749 code=0x7ffc0000
[  113.529073][   T29] audit: type=1326 audit(1763793600.881:5163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8906 comm="syz.3.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da52cf749 code=0x7ffc0000
[  113.552798][   T29] audit: type=1326 audit(1763793600.881:5164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8906 comm="syz.3.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f0da52cf749 code=0x7ffc0000
[  113.576177][   T29] audit: type=1326 audit(1763793600.881:5165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8906 comm="syz.3.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da52cf749 code=0x7ffc0000
[  113.599620][   T29] audit: type=1326 audit(1763793600.881:5166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8906 comm="syz.3.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0da52cdf90 code=0x7ffc0000
[  113.663583][ T8915] loop3: detected capacity change from 0 to 512
[  113.671886][ T8915] EXT4-fs (loop3): 1 truncate cleaned up
[  113.678069][ T8915] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.712046][ T8918] IPv6: Can't replace route, no match found
[  113.754955][ T8923] xt_TCPMSS: Only works on TCP SYN packets
[  113.762003][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.799744][ T8932] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1020'.
[  113.826133][ T8934] loop9: detected capacity change from 0 to 512
[  113.845935][ T8934] EXT4-fs warning (device loop9): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  113.861110][ T8934] EXT4-fs (loop9): mount failed
[  114.143377][ T8945] wg1 speed is unknown, defaulting to 1000
[  114.393209][ T8951] loop3: detected capacity change from 0 to 512
[  114.427010][ T8951] ext4: Unknown parameter 'obj_role'
[  114.502509][ T8960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1031'.
[  114.524694][ T8962] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1032'.
[  114.539344][ T8964] loop1: detected capacity change from 0 to 512
[  114.556012][ T8964] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  114.574095][ T8964] EXT4-fs (loop1): mount failed
[  114.715566][ T8960] loop3: detected capacity change from 0 to 32768
[  114.805288][ T8982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1031'.
[  114.814388][ T8960]  loop3: p1 p2 p3 < > p4 < p5 p6 >
[  114.814489][ T8960] loop3: p1 start 460800 is beyond EOD, truncated
[  114.826744][ T8960] loop3: p2 size 83886080 extends beyond EOD, truncated
[  114.851905][ T8960] loop3: p5 start 460800 is beyond EOD, truncated
[  114.858578][ T8960] loop3: p6 size 83886080 extends beyond EOD, truncated
[  114.996501][ T8989] loop9: detected capacity change from 0 to 512
[  115.023451][ T8989] ext4: Unknown parameter 'obj_role'
[  115.035571][ T8978] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1038'.
[  115.105967][ T5370] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  115.112163][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[  115.126319][ T8998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1045'.
[  115.160836][ T9002] loop8: detected capacity change from 0 to 1024
[  115.167931][ T9002] EXT4-fs: inline encryption not supported
[  115.177050][ T8978] pim6reg: entered allmulticast mode
[  115.185029][ T9002] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.225118][ T8978] pim6reg: left allmulticast mode
[  115.290773][ T9012] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1038'.
[  115.315044][ T9014] FAULT_INJECTION: forcing a failure.
[  115.315044][ T9014] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  115.328291][ T9014] CPU: 1 UID: 0 PID: 9014 Comm: syz.3.1049 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  115.328328][ T9014] Tainted: [W]=WARN
[  115.328337][ T9014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  115.328353][ T9014] Call Trace:
[  115.328362][ T9014]  <TASK>
[  115.328371][ T9014]  __dump_stack+0x1d/0x30
[  115.328400][ T9014]  dump_stack_lvl+0xe8/0x140
[  115.328428][ T9014]  dump_stack+0x15/0x1b
[  115.328478][ T9014]  should_fail_ex+0x265/0x280
[  115.328519][ T9014]  should_fail+0xb/0x20
[  115.328539][ T9014]  should_fail_usercopy+0x1a/0x20
[  115.328644][ T9014]  _copy_from_user+0x1c/0xb0
[  115.328677][ T9014]  ___sys_sendmsg+0xc1/0x1d0
[  115.328720][ T9014]  __x64_sys_sendmsg+0xd4/0x160
[  115.328750][ T9014]  x64_sys_call+0x191e/0x3000
[  115.328776][ T9014]  do_syscall_64+0xd2/0x200
[  115.328920][ T9014]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  115.329030][ T9014]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  115.329074][ T9014]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.329102][ T9014] RIP: 0033:0x7f0da52cf749
[  115.329121][ T9014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  115.329183][ T9014] RSP: 002b:00007f0da3d2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  115.329207][ T9014] RAX: ffffffffffffffda RBX: 00007f0da5525fa0 RCX: 00007f0da52cf749
[  115.329222][ T9014] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006
[  115.329235][ T9014] RBP: 00007f0da3d2f090 R08: 0000000000000000 R09: 0000000000000000
[  115.329251][ T9014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  115.329265][ T9014] R13: 00007f0da5526038 R14: 00007f0da5525fa0 R15: 00007ffcccc92488
[  115.329297][ T9014]  </TASK>
[  115.626664][ T9027] loop3: detected capacity change from 0 to 512
[  115.636745][ T9027] ext4: Unknown parameter 'obj_role'
[  115.661954][ T9029] loop1: detected capacity change from 0 to 128
[  115.729892][ T9029] bio_check_eod: 31 callbacks suppressed
[  115.729907][ T9029] syz.1.1056: attempt to access beyond end of device
[  115.729907][ T9029] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128
[  115.749437][ T9029] syz.1.1056: attempt to access beyond end of device
[  115.749437][ T9029] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128
[  115.763868][ T9029] syz.1.1056: attempt to access beyond end of device
[  115.763868][ T9029] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128
[  115.777623][ T9029] syz.1.1056: attempt to access beyond end of device
[  115.777623][ T9029] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128
[  115.791369][ T9029] syz.1.1056: attempt to access beyond end of device
[  115.791369][ T9029] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128
[  115.800556][ T7970] Bluetooth: hci0: Frame reassembly failed (-84)
[  115.805382][ T9029] syz.1.1056: attempt to access beyond end of device
[  115.805382][ T9029] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128
[  115.826131][ T9034] netlink: 'syz.3.1057': attribute type 10 has an invalid length.
[  115.826829][ T9029] syz.1.1056: attempt to access beyond end of device
[  115.826829][ T9029] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128
[  115.848780][ T9029] syz.1.1056: attempt to access beyond end of device
[  115.848780][ T9029] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128
[  115.869556][ T9029] syz.1.1056: attempt to access beyond end of device
[  115.869556][ T9029] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128
[  115.892299][ T9029] syz.1.1056: attempt to access beyond end of device
[  115.892299][ T9029] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128
[  116.006636][ T9050] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.027863][ T6383] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.087236][ T9050] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.129559][ T9084] loop9: detected capacity change from 0 to 512
[  116.147577][ T9050] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.159394][ T9084] ext4: Unknown parameter 'obj_role'
[  116.166648][ T9089] FAULT_INJECTION: forcing a failure.
[  116.166648][ T9089] name failslab, interval 1, probability 0, space 0, times 0
[  116.179459][ T9089] CPU: 0 UID: 0 PID: 9089 Comm: syz.8.1068 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  116.179503][ T9089] Tainted: [W]=WARN
[  116.179509][ T9089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  116.179521][ T9089] Call Trace:
[  116.179528][ T9089]  <TASK>
[  116.179537][ T9089]  __dump_stack+0x1d/0x30
[  116.179604][ T9089]  dump_stack_lvl+0xe8/0x140
[  116.179630][ T9089]  dump_stack+0x15/0x1b
[  116.179653][ T9089]  should_fail_ex+0x265/0x280
[  116.179689][ T9089]  ? __se_sys_memfd_create+0x1cc/0x590
[  116.179721][ T9089]  should_failslab+0x8c/0xb0
[  116.179810][ T9089]  __kmalloc_cache_noprof+0x4c/0x4a0
[  116.179849][ T9089]  ? fput+0x8f/0xc0
[  116.179873][ T9089]  __se_sys_memfd_create+0x1cc/0x590
[  116.179910][ T9089]  __x64_sys_memfd_create+0x31/0x40
[  116.179939][ T9089]  x64_sys_call+0x2ac2/0x3000
[  116.179984][ T9089]  do_syscall_64+0xd2/0x200
[  116.180009][ T9089]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  116.180046][ T9089]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  116.180099][ T9089]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.180128][ T9089] RIP: 0033:0x7f77979ef749
[  116.180146][ T9089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  116.180164][ T9089] RSP: 002b:00007f7796456e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  116.180265][ T9089] RAX: ffffffffffffffda RBX: 000000000000046f RCX: 00007f77979ef749
[  116.180278][ T9089] RDX: 00007f7796456ef0 RSI: 0000000000000000 RDI: 00007f7797a74960
[  116.180290][ T9089] RBP: 0000200000001040 R08: 00007f7796456bb7 R09: 00007f7796456e40
[  116.180305][ T9089] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0
[  116.180321][ T9089] R13: 00007f7796456ef0 R14: 00007f7796456eb0 R15: 0000200000000200
[  116.180342][ T9089]  </TASK>
[  116.396964][ T9050] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.414277][ T9120] FAULT_INJECTION: forcing a failure.
[  116.414277][ T9120] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  116.427503][ T9120] CPU: 0 UID: 0 PID: 9120 Comm: syz.8.1070 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  116.427614][ T9120] Tainted: [W]=WARN
[  116.427622][ T9120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  116.427637][ T9120] Call Trace:
[  116.427646][ T9120]  <TASK>
[  116.427656][ T9120]  __dump_stack+0x1d/0x30
[  116.427712][ T9120]  dump_stack_lvl+0xe8/0x140
[  116.427739][ T9120]  dump_stack+0x15/0x1b
[  116.427762][ T9120]  should_fail_ex+0x265/0x280
[  116.427871][ T9120]  should_fail+0xb/0x20
[  116.427892][ T9120]  should_fail_usercopy+0x1a/0x20
[  116.427916][ T9120]  _copy_to_iter+0xd2/0xe70
[  116.427943][ T9120]  ? kernfs_fop_read_iter+0xd6/0x330
[  116.427969][ T9120]  ? sysfs_bin_attr_simple_read+0x3e/0x50
[  116.428070][ T9120]  ? __pfx_sysfs_bin_attr_simple_read+0x10/0x10
[  116.428116][ T9120]  ? sysfs_kf_bin_read+0x129/0x160
[  116.428150][ T9120]  kernfs_fop_read_iter+0x259/0x330
[  116.428198][ T9120]  ? __pfx_kernfs_fop_read_iter+0x10/0x10
[  116.428221][ T9120]  __io_read+0x442/0xc30
[  116.428310][ T9120]  ? __rcu_read_unlock+0x4f/0x70
[  116.428390][ T9120]  io_read+0x4a/0x190
[  116.428486][ T9120]  __io_issue_sqe+0xfe/0x2e0
[  116.428523][ T9120]  ? io_assign_file+0x1b6/0x200
[  116.428622][ T9120]  io_issue_sqe+0x56/0xa80
[  116.428661][ T9120]  ? io_prep_rwv+0xef/0x250
[  116.428737][ T9120]  io_submit_sqes+0x675/0x1060
[  116.428786][ T9120]  __se_sys_io_uring_enter+0x1c1/0x1b70
[  116.428899][ T9120]  ? 0xffffffff81000000
[  116.428990][ T9120]  ? __rcu_read_unlock+0x4f/0x70
[  116.429041][ T9120]  ? get_pid_task+0x96/0xd0
[  116.429065][ T9120]  ? proc_fail_nth_write+0x13b/0x160
[  116.429096][ T9120]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  116.429251][ T9120]  ? vfs_write+0x7e8/0x960
[  116.429278][ T9120]  ? __rcu_read_unlock+0x4f/0x70
[  116.429371][ T9120]  ? __fget_files+0x184/0x1c0
[  116.429470][ T9120]  ? fput+0x8f/0xc0
[  116.429494][ T9120]  __x64_sys_io_uring_enter+0x78/0x90
[  116.429537][ T9120]  x64_sys_call+0x2df0/0x3000
[  116.429567][ T9120]  do_syscall_64+0xd2/0x200
[  116.429650][ T9120]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  116.429686][ T9120]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  116.429821][ T9120]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.429850][ T9120] RIP: 0033:0x7f77979ef749
[  116.429869][ T9120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  116.429918][ T9120] RSP: 002b:00007f7796457038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  116.429942][ T9120] RAX: ffffffffffffffda RBX: 00007f7797c45fa0 RCX: 00007f77979ef749
[  116.429958][ T9120] RDX: 0000000000002000 RSI: 00000000000847ba RDI: 0000000000000007
[  116.429974][ T9120] RBP: 00007f7796457090 R08: 0000000000000000 R09: 0000000000000000
[  116.429989][ T9120] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001
[  116.430003][ T9120] R13: 00007f7797c46038 R14: 00007f7797c45fa0 R15: 00007ffc6a6e1da8
[  116.430106][ T9120]  </TASK>
[  116.509864][ T9127] wg1 speed is unknown, defaulting to 1000
[  116.756838][ T7970] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.765323][ T7970] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.803274][ T7970] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.857803][ T9141] loop1: detected capacity change from 0 to 1024
[  116.865502][ T7970] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.873900][ T9132] wg1 speed is unknown, defaulting to 1000
[  116.882125][ T9141] EXT4-fs: inline encryption not supported
[  116.888895][ T9141] EXT4-fs: Ignoring removed nobh option
[  116.894573][ T9141] EXT4-fs: Ignoring removed bh option
[  116.919331][ T9141] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.977507][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.110812][ T7966] ==================================================================
[  117.119046][ T7966] BUG: KCSAN: data-race in copy_process / free_pid
[  117.125579][ T7966] 
[  117.127905][ T7966] read-write to 0xffffffff8685ff98 of 4 bytes by task 3315 on cpu 0:
[  117.135994][ T7966]  free_pid+0x77/0x180
[  117.140073][ T7966]  free_pids+0x54/0xb0
[  117.144156][ T7966]  release_task+0x9a9/0xb60
[  117.148689][ T7966]  wait_consider_task+0x114a/0x1660
[  117.153905][ T7966]  __do_wait+0xfa/0x510
[  117.158071][ T7966]  do_wait+0xb7/0x250
[  117.162084][ T7966]  kernel_wait4+0x16b/0x1e0
[  117.166598][ T7966]  __x64_sys_wait4+0x91/0x120
[  117.171284][ T7966]  x64_sys_call+0x2a6a/0x3000
[  117.175987][ T7966]  do_syscall_64+0xd2/0x200
[  117.180506][ T7966]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.186593][ T7966] 
[  117.188927][ T7966] read to 0xffffffff8685ff98 of 4 bytes by task 7966 on cpu 1:
[  117.196498][ T7966]  copy_process+0x17fc/0x2000
[  117.201252][ T7966]  kernel_clone+0x16c/0x5c0
[  117.205786][ T7966]  user_mode_thread+0x7d/0xb0
[  117.210570][ T7966]  call_usermodehelper_exec_work+0x7a/0x160
[  117.216932][ T7966]  process_scheduled_works+0x4ce/0x9d0
[  117.222951][ T7966]  worker_thread+0x582/0x770
[  117.227647][ T7966]  kthread+0x489/0x510
[  117.232290][ T7966]  ret_from_fork+0x122/0x1b0
[  117.237086][ T7966]  ret_from_fork_asm+0x1a/0x30
[  117.241968][ T7966] 
[  117.246003][ T7966] value changed: 0x80000150 -> 0x8000014f
[  117.252010][ T7966] 
[  117.254957][ T7966] Reported by Kernel Concurrency Sanitizer on:
[  117.262346][ T7966] CPU: 1 UID: 0 PID: 7966 Comm: kworker/u8:59 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  117.277045][ T7966] Tainted: [W]=WARN
[  117.282245][ T7966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  117.294248][ T7966] Workqueue: events_unbound call_usermodehelper_exec_work
[  117.302871][ T7966] ==================================================================
[  117.327173][ T9177] loop8: detected capacity change from 0 to 512
[  117.335620][ T9177] ext4: Unknown parameter 'obj_role'
[  117.813361][ T5370] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  117.814734][   T44] Bluetooth: hci0: command 0x1003 tx timeout