last executing test programs:

5m45.228755093s ago: executing program 4 (id=99):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$eJzs3V9rW+UfAPDvSZP9636/djCGeiGDXTgZS9fWPxOEzUvR4UDvZ2izMpouo0nHWgduF+7GGxmCiAPxBXjv5fAN+CoGOhgyil6IUDnpSZe1Sf8tNbH5fOBsz5Nzkud58pzvyfOck/QEMLBOpv/kIl6OiK+SiJGWdfnIVp5c3W756e2pdEliZeXj35O4sO61kuz/4SzzUkT8/EXEmdzGcmuLS7OlSqU8n+XH6nM3xmqLS2evzZVmyjPl6xOTk+ffnJx45+23utbW1y//+e1HD98//+Wp5W9+fHzsfhIX42i2Lm1XF4q405o5Wfo7SxXi4roNx7tQWD9Jel0BdmUoi/NCpMeAkRjKoh7Y/z6PiBVgQCXiHwZUcxzQnNt3aR78n/HkvdUJ0Mb251fPjcShxtzoyHLy3Mwone+OdqH8tIyffntwP11i8/MQh7fIA+zInbsRcS6f33j8S7Lj3+6da5w83tz6Mgbt8wd66WE6/knuRGyI/9za+CfajH+G28Tubmwd/7nHXSimo3T8927b8e/aoWt0KMv9rzHmKyRXr1XK5yLi/xFxOgoH0/xm13POLz9a6bSudfyXLmn5zbFgVo/H+YPPP2e6VC+9SJtbPbkb8Urb8W+y1v9Jm/5P34/L2yzjRPnBq53Wbd3+vbXyQ8Rrbfv/2RWtZPPrk2ON/WGsuVds9Me9E790Kr/X7U/7/8jm7R9NWq/X1nZexveH/ip3Wrfb/f9A8kkjfSB77FapXp8fjziQfJgfXv/4xLPnNvPN7dP2nz7VPv432//Tyden22z/veP3Om7aD/0/vaP+33ni0Qeffdep/O31/xuN1Onske0c/7ZbwRd57wAAAAAAAKDf5CLiaCS54lo6lysWV7/fcTyO5CrVWv3M1erC9elo/FZ2NAq55pXukZbvQ4xn34dt5ifW5Scj4lhEfD10uJEvTlUr071uPAAAAAAAAAAAAAAAAAAAAPSJ4Q6//0/9OtTr2gF7rnFjg4O9rgXQC1ve8r8bd3oC+tKW8Q/sWzuPf2cGYL/w+Q+DS/zD4BL/MLi2G/+FkT2uCPCv8/kPg0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQFddvnQpXVaWn96eSvPTNxcXZqs3z06Xa7PFuYWp4lR1/kZxplqdqZSLU9W5rV6vUq3eGJ+IhVtj9XKtPlZbXLoyV124Xr9yba40U75SLvhjwwAAAAAAAAAAAAAAAAAAALBBbXFptlSplOclOiYuRF9UYy8buGpXT8/3Syskupro8YEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFr8EwAA//8DDjNQ")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f00000005c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})
renameat2(0xffffffffffffff9c, &(0x7f0000002f80)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x2)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20000, 0x12)
mknodat$null(r1, &(0x7f0000000180)='./file0\x00', 0x1, 0x103)

5m44.018448111s ago: executing program 4 (id=112):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702507aa71ea6e6cfde87b1a3167a37c34e401f8ff00000000bfa10000000000f107010000f8ffffffb702000004000000b7030000000000008500"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='rpcgss_createauth\x00', r3, 0x0, 0x3}, 0x18)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
r6 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8)
r8 = dup(r7)
r9 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0)
sendfile(r8, r9, 0x0, 0x8000fffffffe)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd70000000000021040000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r11}, 0x10)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
sendmsg$IPSET_CMD_TYPE(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x50, 0xd, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x2004c004}, 0x4000800)

5m43.100001535s ago: executing program 4 (id=118):
r0 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0xfffffffffffffde5)
syz_emit_ethernet(0xffffffffffffff84, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000240), 0x10)
sendmsg$can_bcm(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="050000000100"/16, @ANYRES64=r4, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB='\x00\x00\x00TL'], 0x38}, 0x300, 0x0, 0x0, 0x6108be0612f59833}, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0)
poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x200a}, {0xffffffffffffffff, 0x2020}], 0x2, 0xfffffffd)
lseek(r0, 0x2004, 0x0)

5m42.132791753s ago: executing program 4 (id=125):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)

5m40.961099458s ago: executing program 4 (id=135):
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000005c0), 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1a, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='mm_page_free\x00', r2, 0x0, 0x5}, 0x18)
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000540)={'gre0\x00', &(0x7f0000000640)={'sit0\x00', <r4=>0x0, 0x80, 0x20, 0xfffffffd, 0x3, {{0x36, 0x4, 0x1, 0x23, 0xd8, 0x66, 0x0, 0x41, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x13}, {[@timestamp_prespec={0x44, 0x3c, 0xd6, 0x3, 0x4, [{@multicast2, 0x10e65ea1}, {@loopback, 0x2}, {@multicast1, 0x37}, {@local, 0x8}, {@dev={0xac, 0x14, 0x14, 0x34}, 0xfff}, {@remote}, {@private=0xa010102, 0xc744}]}, @noop, @cipso={0x86, 0x53, 0x3, [{0x5, 0x3, "aa"}, {0x5, 0x12, "f6533656e317a17743e3ef9c2074ad93"}, {0x0, 0x8, "1261fbd5f31c"}, {0x6, 0x11, "a4105f8782cd54c6779a643a0e553b"}, {0x7, 0x10, "c77c43f3238613b742cece132211"}, {0x1, 0xf, "5048f56a60af0145b544c9cca3"}]}, @end, @timestamp_addr={0x44, 0x1c, 0x21, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x7}, {@local, 0x2}]}, @noop, @timestamp={0x44, 0x10, 0x75, 0x0, 0x5, [0x2, 0x3, 0x8]}, @ra={0x94, 0x4}]}}}}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x28)
pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
r6 = dup3(r3, 0xffffffffffffffff, 0x0)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0300000004000010040000000a986465c913e9000000001000002044731802708747338e4e14abc269abc73a09ce212c0602fb2dde3d060188bf988f1d09e3c01790922d479989a5b818f5231f1a403c31d4", @ANYRES32, @ANYBLOB="9cf8ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000100"/28], 0x50)
dup3(r1, r3, 0x0)
r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000800)={0x0, 0x3, 0x10}, 0xc)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000080)={0x8})
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f0000000300)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000340)='syzkaller\x00', 0x6, 0xdf, &(0x7f0000000380)=""/223, 0x41000, 0x0, '\x00', r4, @sk_msg=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0x9, 0x200, 0x40}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000840)=[r5, r6, r7, 0xffffffffffffffff, r8], &(0x7f0000000880)=[{0x2, 0x1, 0x9, 0xb}, {0x5, 0x2, 0xd, 0x7}, {0x2, 0x2, 0xa, 0x4}, {0x4, 0x3, 0xc, 0x6}], 0x10, 0x1f}, 0x94)
syz_emit_ethernet(0xfdef, 0x0, 0x0)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x1000001000000, 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0)
r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ca3000/0x2000)=nil, 0x2000, 0x0, 0x80010, 0xffffffffffffffff, 0x0)
r11 = mmap$IORING_OFF_SQES(&(0x7f00004b6000/0x4000)=nil, 0x4000, 0x8d348b7d2e649c4b, 0x1010, 0xffffffffffffffff, 0x10000000)
r12 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r10, r11, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x34, 0x0, @fd_index=0x8, 0x0, 0x0, 0x7, 0x8, 0x1, {0x0, r12, r1}})
socket$inet_sctp(0x2, 0x5, 0x84)
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000200)=@v1={0x1000000, [{0xffffffff, 0x6}]}, 0xc, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000001, 0x1010, r0, 0x1a651000)

5m40.802367221s ago: executing program 4 (id=137):
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x1000040, &(0x7f0000000040)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@nouser_xattr}, {@dax_inode}, {@noauto_da_alloc}, {@journal_async_commit}]}, 0x1, 0x599, &(0x7f0000000540)="$eJzs3T9sG2UbAPDnznHTP/m+9JO+T/pAHSpAKlJVJ+kfKEztiqhUqQMSC0SOG1Vx4ipOoIkike4VogMC1KVsMDCCGBgQCyMrC4gZqaIRSE0HMHJ8TtPULk6I4xL/ftLZ73t39vO+d35e+053cgB962j9IY14KiIuJhHDG5YNRLbwaGO91ZWl4v2VpWIStdqlX5JIIuLeylKxuX6SPR+KiOWI+H9EfJOPOJ6uv+W+ZqG6sDg1Xi6XZrP6yNz01ZHqwuKJK9Pjk6XJ0sypF186c/b0mbGTYxube7+2sZbfWl9v/Hjz3RvfvXL75qefHVkuvj+exLkYypZt7MdOamyTfJzbNP90N4L1UNLrBrAtuSzP66n0vxiOXJb1rdQ2Dg6Du9I8oItqgxE1oE8l8h/6VPN3QP34tznt5u+PO+cbByD1uKsrS8V3ohl/oHFuIvavHZsc/DV56Mikfrx5eDcbyp60fD0iRgcGHv38J9nnb/tGd6KBdNXX5xs76tH9n66PP9Fi/Blqnjv9m5rj32o2/q22iJ9rM/5d7DDG76//9FHb+NcH4+mW8ZP1+EmL+GlEvNlh/FuvfXm23bLaxxHHonX8puTx54dHLl8pl0Ybjy1jfHXsyMvt+x9xsE38xjnb/WtfMxv7vy9rU9ph/7/49vNnlh8T//lnH7//W23/AxHxXofx/3Pvk1fbLbtzPblb/xWw1f2fRD5udxj/hXNHf8iKzhoCAAAAAAAAAMAOSteuZUvSwno5TQuFxj28/42DablSnTt+uTI/M9G45u1w5NPmlVbDjXpSr49l1+M26yc31U/lsoC5A2v1QrFSnuhx3wEAAAAAAAAAAAAAAAAAAOBJcWjT/f+/5dbu/9/8d9XAXtX+L7+BvU7+Q/96OP+TnrUD2H2+/6Fv1eQ/9C/5D/1L/kP/kv/Qv+Q/9C/5D/1L/gMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChPtXurywV6/WJgYX5qcpbJyZK1anC9HyxUKzMXi1MViqT5VKhWJn+q/dLKpWrozEzf21krlSdG6kuLL4xXZmfaf6naCnf9R4BAAAAAAAAAAAAAAAAAADAP8/Q2pSkhYh8o56mhULEvyLicBLJ5Svl0mhE/Dsivs/lB+v1sV43GgAAAAAAAAAAAAAAAAAAAPaY6sLi1Hi5XJrtXmEgC9XFEJ0XBrayckQs72wz6u+45Vflsw3Y4023Nwq5J+Nz+OQXejgoAQAAAAAAAAAAAAAAAABAn3pw02+nr/ijuw0CAAAAAAAAAAAAAAAAAACAvpT+nEREfTo2/NzQ5qX7ktXc2nNEvH3r0gfXxufmZsfq8++uz5/7MJt/shftBzrVzNM0Iup5DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxQXVicGi+XS7PbLAx2sE6v+wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwHX8GAAD//xLkz18=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
fadvise64(r0, 0xffff, 0x5, 0x4)
socket$igmp(0x2, 0x3, 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x4, 0x4)
execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100fb2020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x18, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$getregset(0x4204, r4, 0x201, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x82000, &(0x7f0000000c00)={[{@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@grpjquota_path={'grpjquota', 0x3d, '.'}}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@grpquota}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000300)="$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")
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'geneve1\x00', <r7=>0x0})
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r9}, 0x18)
sendto$packet(r6, 0x0, 0x0, 0x4c001, &(0x7f00000002c0)={0x11, 0x9, r7, 0x1, 0xd, 0x6, @random="017b6cf172ea"}, 0x14)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r5)
r11 = gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x500, 0x0, 0x2000040}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008000300", @ANYRES32=0x0, @ANYBLOB="08001c00", @ANYRES32=r11], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)
r12 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x83)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r12, 0x40086602, 0x0)

5m25.804250535s ago: executing program 32 (id=137):
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x1000040, &(0x7f0000000040)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@nouser_xattr}, {@dax_inode}, {@noauto_da_alloc}, {@journal_async_commit}]}, 0x1, 0x599, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
fadvise64(r0, 0xffff, 0x5, 0x4)
socket$igmp(0x2, 0x3, 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x4, 0x4)
execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100fb2020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x18, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$getregset(0x4204, r4, 0x201, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x82000, &(0x7f0000000c00)={[{@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@grpjquota_path={'grpjquota', 0x3d, '.'}}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@grpquota}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000300)="$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")
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'geneve1\x00', <r7=>0x0})
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r9}, 0x18)
sendto$packet(r6, 0x0, 0x0, 0x4c001, &(0x7f00000002c0)={0x11, 0x9, r7, 0x1, 0xd, 0x6, @random="017b6cf172ea"}, 0x14)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r5)
r11 = gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x500, 0x0, 0x2000040}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008000300", @ANYRES32=0x0, @ANYBLOB="08001c00", @ANYRES32=r11], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)
r12 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x83)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r12, 0x40086602, 0x0)

1m40.255488815s ago: executing program 3 (id=3216):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
madvise(&(0x7f000008f000/0x4000)=nil, 0x4000, 0xa)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10)
r4 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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")
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000003c0)={0xf7, <r5=>0xffffffffffffffff, 'id1\x00'})
ioctl$FITHAW(r5, 0xc0045878)
r6 = fsmount(r4, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', r6, &(0x7f0000000140)='./file0\x00')
readlinkat(r6, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/204, 0xcc)

1m39.854394396s ago: executing program 3 (id=3217):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000004496d904c178e2bc3dba1d926feabaf543a6fd2e3ae0e39503c784d7054e8c6869d783083664d9381639238c5105000000000000003250655d7be30a7b371073dae8c6e1ec942e0e15abd05dff20f1f2936a9f5bd90ffe8280ec20daf6aa983af622ce6bd1cc5ac2201ef9e50c163846f40ba675c2dd4b712d93d27279", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x240b8, r0, 0x80e, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3}, 0x50)
r1 = socket$inet6(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000440), 0x22080, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
fcntl$getown(r1, 0x9)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x0, @local, @local, 0x7, 0x7, 0x202, 0x8}})
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffffff8500000010000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000001000/0x4000)=nil)
write$UHID_INPUT(r5, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006)
r6 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000240), &(0x7f0000000400)=0x4)
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00')
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x44080)

1m39.421577872s ago: executing program 3 (id=3219):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2, 0x0, 0x10000000000ac6}, 0x18)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4040095}, 0x8010)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)

1m39.221314158s ago: executing program 3 (id=3227):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000420000002c0012800b00011d3c18ed0eb926fb231616849f2de225001c0002800c00210008f31f00000000000090e6207fa20000"], 0x4c}, 0x1, 0xba01}, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f00000001c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@grpquota}, {@nobh}, {@abort}, {@lazytime}, {@usrquota}, {@resgid}, {@bh}]}, 0x1, 0x58d, &(0x7f00000005c0)="$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")
r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x2c00, 0x0)
read$rfkill(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
capget(&(0x7f0000000100)={0x19980330, r2}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c00)=ANY=[@ANYBLOB="58010000100013070000000000000000fe88000000000000000001fe8000000000000000000000000000414e210000080000001888a12ccb6c359ecc772d8800"/73, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000330000002001000000000000000000000000000200000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023500000a00000000000000000000001c0017000000000029bd700025bd700025bd700027bd7000cc0000004c0014007368613100"/272], 0x158}}, 0x1000)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000380)=0x90000, 0x4)
r6 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r6, 0x13)
get_robust_list(r6, &(0x7f0000000300)=&(0x7f00000002c0)={&(0x7f0000000140)={&(0x7f0000000000)}}, &(0x7f0000000340)=0x18)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r7, 0x0, 0x0)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
getsockopt(0xffffffffffffffff, 0x111, 0x3, 0x0, &(0x7f0000000080))
syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$FITRIM(r5, 0xc0185879, &(0x7f00000003c0)={0x7, 0x9, 0xc})

1m38.268794145s ago: executing program 3 (id=3240):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000009500000800940000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r1 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r1, &(0x7f0000000a00)=@file={0x1, './file1\x00'}, 0x6e)
listen(r1, 0x3)
r2 = syz_io_uring_setup(0x51e, &(0x7f0000000000)={0x0, 0x9e92, 0x10100}, &(0x7f0000000400)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r1, 0x0, 0x0, 0x0, 0x800})
io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0x0)
shutdown(r1, 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x2]}})
socket$packet(0x11, 0x2, 0x300)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
write$tun(r5, &(0x7f0000000340)=ANY=[], 0x4b)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x1, @any, 0x0, 0x2}, 0xe)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000001000000050005000100000008000400000000000500060000000000080003"], 0x34}}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="18022bbd7000fddbdf250400000008000214f501000005000600100000000500050002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40090}, 0x4008811)
bind$bt_l2cap(r7, &(0x7f0000000340)={0x1f, 0x1, @any, 0x0, 0x1}, 0xe)

1m37.534801984s ago: executing program 3 (id=3252):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r0, @ANYRESOCT], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='kfree\x00', r1}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800)

1m37.534587064s ago: executing program 33 (id=3252):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r0, @ANYRESOCT], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='kfree\x00', r1}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800)

2.526070005s ago: executing program 5 (id=4907):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000004496d904c178e2bc3dba1d926feabaf543a6fd2e3ae0e39503c784d7054e8c6869d783083664d9381639238c5105000000000000003250655d7be30a7b371073dae8c6e1ec942e0e15abd05dff20f1f2936a9f5bd90ffe8280ec20daf6aa983af622ce6bd1cc5ac2201ef9e50c163846f40ba675c2dd4b712d93d27279", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x240b8, r0, 0x80e, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3}, 0x50)
r1 = socket$inet6(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000002000000"], 0x48)
r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x22080, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
fcntl$getown(r1, 0x9)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x0, @local, @local, 0x7, 0x7, 0x202, 0x8}})
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffffff8500000010000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000001000/0x4000)=nil)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xc, {"a2e3ad214fc752f91b3e090987f70e06d038e7ff7fc6e5539b3264078b089b0e083f63090890e0878f0e1ac6e7049b334c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b313b0d3b6d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa3647f17b28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833fea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000240), &(0x7f0000000400)=0x4)
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00')
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080)

2.414807035s ago: executing program 5 (id=4911):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r0 = gettid()
timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'ip6gretap0\x00', 0x400})
readv(r1, &(0x7f0000001140)=[{&(0x7f0000000700)=""/206, 0x18}], 0x1)
mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000ffa000/0x1000)=nil)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_int(r4, &(0x7f0000000000)=0xffffffffffffeffe, 0x12)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})

2.303906753s ago: executing program 2 (id=4916):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x5}, 0x18)
r2 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd09000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a005000000000000000000002400000000000000000000000700000094040000441088000000000000000000000000000000000011000000000000000000000001"], 0x98}, 0x810)
socket$nl_route(0x10, 0x3, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)

2.290765725s ago: executing program 2 (id=4917):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000280), &(0x7f0000000380)=[0x0, 0x0], <r1=>0x0, 0x82, &(0x7f00000003c0), 0x0, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x95, 0x8, 0x8, &(0x7f0000000480)}}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b5181100", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'})
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000900c0000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000422000085000000060000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10)
sync()
sync()
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

2.057473813s ago: executing program 1 (id=4921):
r0 = syz_io_uring_complete(0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xf, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sync()
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000080))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
fchown(r2, r3, 0x0)
sync_file_range(r2, 0x5, 0x3, 0x4)
set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]})
sync()
close_range(r4, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

1.778828426s ago: executing program 1 (id=4923):
r0 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$pokeuser(0x6, r0, 0x39f, 0x4000000)

1.494245859s ago: executing program 1 (id=4925):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x700, &(0x7f0000000a40)="$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")
futimesat(r2, &(0x7f0000000000)='./file1\x00', 0x0)

1.394269357s ago: executing program 5 (id=4928):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a030700000000000000000700000008000a40000000000900020073797a31000000000900010073797a30001000000800054000000021640000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000003800038034000080080003400000000228000b80100001800c000100636f756e7465720014000180090001006c61737400000000040002801400"], 0xe8}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r1)
ioctl$EVIOCRMFF(r1, 0x40095505, 0x0)
r2 = fcntl$getown(0xffffffffffffffff, 0x9)
kcmp(0x0, r2, 0x0, r1, r1)
ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000340)={'\x00', 0x5, 0xc, 0x2, 0x7, 0x800000004, r2})
sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x5, 0x6, 0x101, 0x0, 0x0, {0xd, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x20000000)
openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
r3 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
r4 = socket$inet6(0xa, 0x3, 0xff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180400472a5cd100000000000000000018010000696c6c25000000000020e1a97b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0x20)
r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x4, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r7 = open$dir(0x0, 0x804000, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r7, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4)
r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x2}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)

1.174095245s ago: executing program 1 (id=4932):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000160a010800000000000000000500000a0900010073797a30000000000900020073797a3100000000140000001100010000001200000000000200000a"], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000b00)={'ip6gre0\x00', &(0x7f0000000a80)={'syztnl1\x00', <r4=>0x0, 0x2f, 0x57, 0x6, 0x8001, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x2, 0x3}})
sendmsg$xdp(r3, &(0x7f0000000f00)={&(0x7f0000000b40)={0x2c, 0x2, r4, 0x6}, 0x10, &(0x7f0000000e80)=[{&(0x7f0000000b80)="fb4427414b68d682fd79288b64026a575fe16887f822aa04771f86c488d3f0afb12830ad62b3216cae5a6133920c23e71a10c187e9eea7fd82e2173a40037c18882e5a2be2f71a40e5500b1165d4bb049cd8563ff3f18f9811886d61a78d05ca0f942a9ba7dd589406f2cfd485a046414e508d146959ed82c1e73fcdd2d2b096949fa94d4653daded63015a4a24721c6ba8842873ce2cd9356cda54828f3e6736d8e6e0266ade87d915a35d5b3c79e0d6e2258384715925212eec3192b71c83fd3bc8519d6e3a942dc87ac25a044ed117fe31aa8ac8cc132a66e80b519b9", 0xde}, {&(0x7f0000000c80)="958ed527a8593255e5cfb057cb1319a082809f5dac50a741dd52b93a43a494d71f0dea618b9d5a51a9734cfc9e78e644499f80f96509fac4022a53793a2594f31a1f72ba7616dbf2cda1032c6095ce", 0x4f}, {&(0x7f0000000d00)="54024a3df021b036c9ef8839fa243ff09322e063b7435d24f90ee59babee8e29e4cda0f6e5e74e2c4a0c", 0x2a}, {&(0x7f0000000d40)="01493946b5ae3886db1ed4", 0xb}, {&(0x7f0000000d80)="2087df2bca533d94c7e12ef40d0f04c348bdaebd2bd3a2db61fd311937e96bdba7924d5266ef2e0f45d3b4048dfe65f39800ae62d1a5c8899d39e2c8e81063ea3a705b591aa9020eb56b0c8d", 0x4c}, {&(0x7f0000000e00)="5c292857f6572ce0bdac8ba04816200b9f20a4efd392429b5c63bba31b159650d7d6562c5ea6dc158336df1ad9a8e48f419feb31c952210e44064f97cd567e377c973377daab7743441413d68c83aa3417907fdcb6f42403229e75900d0a7b79d2d05408ed257077f4dd01557b8bb7", 0x6f}], 0x6, 0x0, 0x0, 0x80}, 0x90)
syz_io_uring_setup(0x75fb, &(0x7f0000000540)={0x0, 0x8102, 0x400, 0x0, 0x1d8}, &(0x7f0000000380), &(0x7f0000000980))

1.035728476s ago: executing program 1 (id=4933):
r0 = syz_io_uring_complete(0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xf, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sync()
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000080))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
fchown(r2, r3, 0x0)
sync_file_range(r2, 0x5, 0x3, 0x4)
set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]})
sync()
close_range(r4, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

1.035110816s ago: executing program 2 (id=4934):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10)
sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000500)="d8000000180081064e81f789db4cb904021d080006007c09e8ee55a10a0015000400142603600e1208000f0000000401a8001600200008800000000000000100a0e408e802ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5d9001901df60e1b6649682e1cace81ed0bffece0b42a9ecbee5de6cc0000", 0xd8}], 0x1}, 0x0)

970.999391ms ago: executing program 2 (id=4935):
gettid()
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747"], 0xfdef) (fail_nth: 2)

689.164424ms ago: executing program 1 (id=4936):
r0 = gettid()
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40086610, &(0x7f0000000140)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, r1, 0x1b442342})
readv(r1, &(0x7f0000000100), 0x0)
read$ptp(r1, 0x0, 0x0)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

622.76051ms ago: executing program 2 (id=4937):
clock_gettime(0x1, &(0x7f0000000000))
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000440)='initcall_finish\x00', r2, 0x0, 0x6}, 0xd)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r3=>0x0})
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYRESOCT=r0, @ANYBLOB="1afebbeef40210ed154eff6f0b15c1114d052720ee3e3ae527a91ac15b4d073ad022bbc4f4bb342a2d0447624278be0a933a", @ANYBLOB="00000000000000001c001a800800028008000200080000003e"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000740)={'ip6gre0\x00', <r5=>r3, 0x2f, 0x0, 0x3, 0x3, 0x4f, @local, @local, 0x10, 0x7, 0x2, 0x8}})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r6 = dup(0xffffffffffffffff)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r6)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f00000001c0)={0x4, &(0x7f0000000180)=[{0xa3, 0x9, 0x0, 0x2}, {0x4569, 0x3, 0x6, 0xfffff001}, {0xfffe, 0x4, 0xff}, {0x0, 0x2, 0x40, 0x9}]}, 0x10)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000bc7ef9642d29ba564165605dca29708efdf9b15a5c10a126121b2751f642635bcd9a8bf7a928a5d054b0d2c54d519ea75c52f41ed6f2886973626b684c8bd9108c0b0b2ea7e556948f0367aff4fbcede3294f6e73d06ad16dc2d26725ff833b5f83b499918e6a6ec245b781d41aee9624c847e2f2312d6b9db45bad354fc1a3f20407ffe406483a0524937ee7559e4bf70136746b37fdfbbb152758d37ed8bcac41fb7243bdcd536249c7996e898b61927eaa5a8790054ba13d3ade593220f96027090a34aaf7ea92f41aab73e7a85eef87e956bb7c5c76a347264fd99359f4e57b0dcc2bcc188ea880a4b11a8bb81eb22b0ddfc689e3218cf310dcc61cab354149d9107d8a88b0aa5b5661555f00443aee5e714009e52cee5e88f008148ddbc0fa81bf938bed4a1ac778d5337cc0311d0772eeac3eab38426e8d1472ff514aa5379ed21551790cc10148410b4fc27582fd7106a8887a9a0b613dfe10aee77542d887208f5534f5dce4d43f258fc9ef975834e1917666e2aff1cebfc3ce2c1e8ff66bba1d9050000000000000078db7024bf321636bede8651e672ed4f01ba5da2c3f9042a8552bd3f2c9ad546ad0ea20b4d35fb0a15c6239f67c7747a40fe26a88adf727fd1b801b4e56fbffcad99ce68fe2af0d94fdc78d27268de435021dca51acaa7a9e0944bdf579c170db6405944b6791a7713ee54f650fdf71b57c3629fb185efce700620ef5744623be08ec935dd563e6ba0b461bda98b364acf3dcdafa9b0e68c21ea509212c2938aa09cc31aa4ee5bfb8e507181909f5854b13997af4888cd61c8aab5fdfd701a16d546e5a533cd9b985dcc582b67979551dcc750fc51f2c9b6814edeffc76a86ea9f58b7c66fa24540daf14c2163d064f8cf0b4878f81e6b8bc4dabc10dac82b39e033963a6d02434cb783a198829d1373790a85c0e01a362d89e80165d280283af3c2060000000000000034b12a73b0c53bfae5d2f6e55728052247adfe0966c6c5eca57918c4540c979a70a281ba00e408c9fe1b20fa208976dd6a56f9bd9a74d81447c9b265d8c23f0e983e0b1d2d62d1e57c9188e4882634476e62ab1b7415a58208eaaf166d14720092f79a6197fe8b4ea7d5485cc6b3630afed8d3403cfa4d7bf48efb371706e0e65901eea3743c98261cbb7a246cf62f99bbc918741d32539ec0754e7d7f08dd45aaf49623342eabf466e54d8da4346e73da54ba2e4b5e2ae2823864d4147b490e55c9509f75c8828500ac32cab11b0262e75fa9e39e3792d01e0b210fdfb686bfffdc677432f6332c1a27502b43997060acdf7784c79fed0325e06f6b64b6434ebf4730509bcf95b9a1d0ba7c469d55351cc1dce6c90f5872e7ad5eed5f850d9d1f928b4e0263b241e8fe03e5e66252c8a3bd320e8deee5b91c653b8f22f58cff36c2ba4d6774f14229939595d2beb998c9312212de00468fc488591aca07ab75fba4a318d3ee4581711927b77a7f14dbcd639892f8cb0000000000000080411736eb1ee86eec338197a56293c9cdb72e84155681553b896d58b62a96852320e74dc4c9b41d6f90d2353dc573a94a092a84209c12da57f8c78e161b0899eb1c8b694d26c5fbf7f65fefacdbf39151f335dddc3b179a13f6de93ffb338e94738c86e35e9fcc654e4d6618dc1201cbd16e1281df911e6c699da16fbbb7a2e5c77966c98d3e7edd58cabfe6bf1bb7f6329084e3e4a2a36da07bbac3ebc00472f55b7966f250109fcce0ad5d4526d20ef74d1a634d724", @ANYRES32=r5], &(0x7f0000000080)='GPL\x00', 0x4, 0xa2, &(0x7f00000002c0)=""/162, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004ffffffd47f5c6860037f0000"], 0x0, 0x26}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r9, 0x20, &(0x7f0000000100)={0x0, 0x0, <r10=>0x0, 0x0}}, 0x10)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="18027a0000000000000000003b00000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x1000, &(0x7f0000001c80)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10, r8}, 0x94)
r12 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r12, 0x84, 0x75, 0x0, 0x0)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r13}, 0x18)
r14 = inotify_init1(0x0)
inotify_add_watch(r14, &(0x7f0000000200)='.\x00', 0x1000080)
r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r15, @ANYRESDEC=r11], &(0x7f0000000240)='GPL\x00', 0x5c54aa5a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000380)='fscache_invalidate\x00', r11}, 0x18)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r16 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0xe, 0x7fff0000}]})
close_range(r16, 0xffffffffffffffff, 0x0)

622.249449ms ago: executing program 2 (id=4938):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r0 = gettid()
timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'ip6gretap0\x00', 0x400})
readv(r1, &(0x7f0000001140)=[{&(0x7f0000000700)=""/206, 0x18}], 0x1)
mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000ffa000/0x1000)=nil)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_int(r3, &(0x7f0000000000)=0xffffffffffffeffe, 0x12)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})

509.131399ms ago: executing program 0 (id=4941):
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
pipe2$9p(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15)
r4 = dup(r3)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])

496.59633ms ago: executing program 0 (id=4942):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xf, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sync()
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000080))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x1000)
fchown(r1, r2, 0x0)
sync_file_range(r1, 0x5, 0x3, 0x4)
set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]})

475.887921ms ago: executing program 0 (id=4943):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1fff}]})
r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000003c0)="ae", 0x1, r2)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', 0x0)

451.658403ms ago: executing program 0 (id=4944):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000160a010800000000000000000500000a0900010073797a30000000000900020073797a3100000000140000001100010000001200000000000200000a"], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000b00)={'ip6gre0\x00', &(0x7f0000000a80)={'syztnl1\x00', <r4=>0x0, 0x2f, 0x57, 0x6, 0x8001, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x2, 0x3}})
sendmsg$xdp(r3, &(0x7f0000000f00)={&(0x7f0000000b40)={0x2c, 0x2, r4, 0x6}, 0x10, &(0x7f0000000e80)=[{&(0x7f0000000b80)="fb4427414b68d682fd79288b64026a575fe16887f822aa04771f86c488d3f0afb12830ad62b3216cae5a6133920c23e71a10c187e9eea7fd82e2173a40037c18882e5a2be2f71a40e5500b1165d4bb049cd8563ff3f18f9811886d61a78d05ca0f942a9ba7dd589406f2cfd485a046414e508d146959ed82c1e73fcdd2d2b096949fa94d4653daded63015a4a24721c6ba8842873ce2cd9356cda54828f3e6736d8e6e0266ade87d915a35d5b3c79e0d6e2258384715925212eec3192b71c83fd3bc8519d6e3a942dc87ac25a044ed117fe31aa8ac8cc132a66e80b519b9", 0xde}, {&(0x7f0000000c80)="958ed527a8593255e5cfb057cb1319a082809f5dac50a741dd52b93a43a494d71f0dea618b9d5a51a9734cfc9e78e644499f80f96509fac4022a53793a2594f31a1f72ba7616dbf2cda1032c6095ce", 0x4f}, {&(0x7f0000000d00)="54024a3df021b036c9ef8839fa243ff09322e063b7435d24f90ee59babee8e29e4cda0f6e5e74e2c4a0c", 0x2a}, {&(0x7f0000000d40)="01493946b5ae3886db1ed4", 0xb}, {&(0x7f0000000d80)="2087df2bca533d94c7e12ef40d0f04c348bdaebd2bd3a2db61fd311937e96bdba7924d5266ef2e0f45d3b4048dfe65f39800ae62d1a5c8899d39e2c8e81063ea3a705b591aa9020eb56b0c8d", 0x4c}, {&(0x7f0000000e00)="5c292857f6572ce0bdac8ba04816200b9f20a4efd392429b5c63bba31b159650d7d6562c5ea6dc158336df1ad9a8e48f419feb31c952210e44064f97cd567e377c973377daab7743441413d68c83aa3417907fdcb6f42403229e75900d0a7b79d2d05408ed257077f4dd01557b8bb7", 0x6f}], 0x6, 0x0, 0x0, 0x80}, 0x90)
syz_io_uring_setup(0x75fb, &(0x7f0000000540)={0x0, 0x8102, 0x400, 0x0, 0x1d8}, &(0x7f0000000380), &(0x7f0000000980))

429.960125ms ago: executing program 0 (id=4945):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x101, 0x8, 0x40, 0x42, 0x1}, 0x50)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r4}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
connect$qrtr(0xffffffffffffffff, &(0x7f0000000000)={0x2a, 0x0, 0x2}, 0xc)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
fdatasync(r5)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"/1015], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10)
r7 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_AVC(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)={0x14, 0x453, 0x400, 0x70bd26, 0x25dfdbff, "ac5beb"}, 0x14}, 0x1, 0x0, 0x0, 0x7}, 0x14004880)
futimesat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={{}, {0x0, 0xea60}})
bind$qrtr(0xffffffffffffffff, &(0x7f00000000c0)={0x2a, 0x1}, 0xc)

371.480259ms ago: executing program 0 (id=4947):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x82, &(0x7f00000003c0)=[{}], 0x8, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x95, 0x8, 0x8, &(0x7f0000000480)}}, 0x10)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000900c0000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000422000085000000060000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10)
sync()
sync()
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000006f80)=@deltfilter={0x3c8, 0x2d, 0x0, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xa, 0x8}, {0x2, 0x10}, {0xfff3, 0xffec}}, [@filter_kind_options=@f_flow={{0x9}, {0x294, 0x2, [@TCA_FLOW_EMATCHES={0x270, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6c59}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0xd0, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x94, 0x3, 0x0, 0x0, {{0xa2, 0x0, 0xbc48}, "aea491bd18a6eb0e13ab08e3be5bc5525a8dbcd1830f143690980e6774c3bce2d6c9d5aaa9ba6c925b08035a48be042135484379840da23abb45b267cc9ec4933e38326102a9633c06c34e6eef009061dd674156f597e429e3408ed96c2ba48a4fecfd00080a02963c5248cc0347d1c70d26c96a0408ade00a1e53d01e06fb5afa819dd37b708ea3"}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x8, 0x2, 0x7}, {0x9, 0x4, 0x3, "921f58d1"}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xfbff, 0x8, 0x5}, {0x0, 0x3, 0x6}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xfff, 0x7, 0x140}, {{0x1, 0x1, 0x1}, {0x2, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x170, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xd414, 0x3, 0x9}, {0x5, 0x47b, 0xb, 0x7}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x0, 0x2, 0x6}, {0x4, 0x3, 0x2, "64c314"}}}, @TCF_EM_IPT={0x13c, 0x3, 0x0, 0x0, {{0x3a7, 0x9, 0xfffc}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_DATA={0x6b, 0x5, "a5b1708b9724f3e0c8f6a6d807b30fe623126a2bfc476f0918691267d24ebaf16c1c301d579d1d18c055d23fbebf79205eb9080eb796ed98d3f6388402fb5b190736d9308e2cb5c804a805cca028f7fdfde5752bf091ea0b9eb6a47aefb3a2b288bdfc81f2c2df"}, @TCA_EM_IPT_MATCH_DATA={0xb2, 0x5, "6ad5c2e643f07d7f0fc18a7cd7cc1fbd5359203a7600dbeb6fa8e30b338a554db4f7135c6aaa78c681a4f798eb9d4457962cba3274e070106fc1f47c2573f47abeaf94d4888063edbc3a6845205a64599bb17666a84922e74ee728598a90bc00adae25c691736d0402b5d3c1ef7053d5152e577cb0d17344fda52f5ff199f61e1c2f72e07e3c012108a72ba7271d888e0595ac01d8de976762441682210048d9a07b3f56a542d268fe6649d660db"}, @TCA_EM_IPT_NFPROTO={0x5}]}}]}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x8, 0x8, 0x2}, {0x1, 0x4}}}]}]}, @TCA_FLOW_XOR={0x8, 0x7, 0x10}, @TCA_FLOW_XOR={0x8, 0x7, 0x10}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x6}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x6}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_cgroup={{0xb}, {0xf0, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}]}, @TCA_CGROUP_POLICE={0xd4, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xffffffffffffffff, 0x1, 0x4, 0x1, {0x4, 0x1, 0x7fff, 0x9, 0x9581, 0xde}, {0x3, 0x1, 0x5, 0x0, 0x7000, 0xfffffffa}, 0x80000001, 0x1000, 0x8}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0xffff, 0x5, 0x7, {0x0, 0x2, 0x7, 0x80, 0x2, 0x2}, {0x6, 0x2, 0x8, 0x1000, 0x8, 0xd}, 0x5, 0x0, 0x4}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xa925}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x3, 0xfffffff9, 0x7, 0x7, {0x2e, 0x0, 0x2, 0x9, 0x9, 0x9}, {0xb, 0x2, 0x4, 0xfffb, 0x6, 0xa}, 0x1, 0x100, 0x3}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}]}, @TCA_CGROUP_ACT={0x4}]}}]}, 0x3c8}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
timerfd_create(0x0, 0x0)
syz_io_uring_setup(0x58f7, &(0x7f0000000880)={0x0, 0x0, 0x10100, 0x0, 0x104a}, &(0x7f0000000180), &(0x7f0000000240))

314.640824ms ago: executing program 6 (id=4949):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x700, &(0x7f0000000a40)="$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")
futimesat(r2, &(0x7f0000000000)='./file1\x00', 0x0)

283.882507ms ago: executing program 6 (id=4950):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
r1 = socket$kcm(0x29, 0x7, 0x0)
sendmsg$kcm(r1, &(0x7f0000000380)={&(0x7f0000000500)=@l2tp={0x2, 0x0, @private=0xa010100, 0x1}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000680)="5d3d7ee2acd53648ad26193609d972254e803f09081b5a68a3d76c1a834ab0146a83b7c34bc5bc72509fcc8ad76c60fc01485fb413afdc3790c09db246dd0b1281", 0x41}, {&(0x7f0000001240)="498034aa6d1552f93b92d72cc2574698f5f01f318aa7ac0cbe02036b3adc2873320d2942d88adf6e89da8a6a4bb3c26b38186324d19c525b388f6c8aa706accd44164f4362fec9d3e9ae82c38653fb489da2b4f2298e86dafbe442866ea49f737f67e2d2c7aada3e1025ce622b0723a997fa7c8d75d4e70bcde7040aaf57930691bc7b24073f354bbfe9782b6b1a5ad03522d28ed6f29cbc8ae268b406ffd9fdcebdee0fc5961dc90e7a92bbfae971c58d1f5040179889e6acaccf05757230b4", 0xc0}, {&(0x7f0000000700)="469c47f1aaeeb2d48fdf6967c60cdc7286c07f9bdaf5d900c080678567bab353a3b7e3c9622eb96acdc0b9f2a12a6b3806530ed0d6b250e27b2c29ae2103f6c29f2daf579e0235e263641834c6cbf654c326d12bbedeb32bafa08374148f5114c4e2418ee01aed526f54f7", 0x6b}], 0x3, &(0x7f0000002880)=[{0x88, 0x117, 0x7, "45b31a83e83019f84a5d34f5cecf364eb87e3f962b338e8532cb87ebdb226feccae91d5292a5c1c2dc3357d73c839286254d2b6134797af89f21e1650b8b5931aed1e18632e12e347dd29162369978af593a72b0f1f41ed8d3dc93e4527f683e2ef49345a75ece35ea815db92c1dacf5c35b852b79f731"}, {0xc0, 0x104, 0x8b1c, "c755f40015ec50f749c64cd32f03b39f335cec981e2ca4a5520c318bd8d45618548d8f7ee407fef266a51da487d3c3de285c003b3f398410bd7de33f6bc9ad75453e9ee2ace668716d274a66060d2772aa7740a0e3fbe19b013f01ea3f07359851d9792fdf8d7c30eabab89c4e5b122bcb01bcf20cba4fc1e5d8b0ebf47b353a1920c174562bda57f3a7b937e2656060f3429b63801d7e750279a4630a777a29036051dc78647cdbfa54f99377f5db55"}, {0xf8, 0x10b, 0x0, "c6ab628c197d6eaf2acd012d1a159f6cd53b299fd57886dcdaae220e5c5e73b7a42bcf253087077191cdb5cf8e2aeae53cda89f4dd200fef73a09e9a955148595cba992357d888a98165b8d135f1b5d2044c931c7d0d736dce8b087ac29d175fc706f2ef62c777e1e22428955f388008948f58e2d6bce1766bb4c150e13e71e457e9ac05c6a361fe957cc8517659444ab31013603d2fddb4c39257b0fbd9473956a907a908bd0e88ff81851afd0f981259e1b5474730848d719b66b189cb9699c176e4ade4baf9eb2cbebcca2d851c944ceb23782ed11992d4688f8167964356a7b498"}], 0x240}, 0xc0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6)
sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000400)="3bcbdb0fcfa026557d2ea2b0fa34b7b3ddf4e60fe678186210e935989ea66d3c5479ca82428e90b96b3635a98e39939ef5109511d949224164c044f18fb4d64db5c0404f01b99fba50263ee03e82a28fcd751660b0cab68a62a8b6eac29946c988fc747092d35e9352d8442feece96b4ee481cf95a8feb6ec3d6e5cff03f59eb97136d7cb400c1d0ed4ed9b83090abb113aa4e9260695700"/166, 0xa6}, {&(0x7f0000000980)="742f311a83a225186454bcfd09e48b60d703de616d0e6f11523b39000158bc", 0x1f}], 0x2}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001400)="1c2789bd018bf77308ae7ed990e4b63b8cf1cf4ae822f1f84abd5420339c722aa7f6d87f5926c484455c67b7a9259ac3f36154b6526320d83fe72e5f5370550de0307d8ad13d192e7d5c14f8b2367b1db7dbe02629646be253b07a1245dce1a721576750f3f574ce4ac91827528289ac", 0x70}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40090)
r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94)
r3 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0xa8200, 0x1)
sendto$inet(r3, &(0x7f0000001880)="e684a8eeec7a34ff68902b482de79b2c1e83d97a51aa2204fa09844107c4ce7f8271f856c4fbd81dcd2b438d7d430adf3e11a77fa17a14b5c333430fc7b676be95f1bc4ff02f7145eae7eb2f8e46f5e20e1c250a1286d234164a548e10a7310e20950aa8b40dff2976c9facbfc001f066ede9e8f86bae142ff312296da3045b36def1be9123f68416a30bfbe627f5375327a3f6d0066a1013846b0eb671fdf5fb7da7cb5727313c3b03776be903aedb7fb478bec511003c788d412877562cbf22825aefd8b5ca0648be5e0a992a3760b0f2e6dd076db52967602658c6d709d8830bcb68c8469a2ad0c6bb928859aed2705717cd94de3e4e8f3dcca414d894e57b0da693db56a285510d9848c4247bd456e9d49b11cd4c8e4f5a43bcfb5e2ea5402801144fa817903e3cc5a90597f40df4f926ecc216b34a8691ef9c1822063ea15c7275d34d8ef98445bc4478bd00c32ec1e951aff1a586d7444b97bd9dfb6195a73b23a77fbfcaa8d4cb3a0d9d5990b7cfa495ceca2f29bb1960bed45a7fefbadd83363e7d6d8548790a598f0a69b5e6e14292245f6dbbd925baa66c70a253093ced5dbcc5629f6c4cc2b9ba928e78fc82adde01f5b9a791b45ac443e3851e63600a91c50c67bc50022f15ffa6a4af7d0785c337b921e35dada99d42ae1d6dca2e348b7b5e93373b6977e684ea01c926cf4e02dcfd64e830fc0055d37bd2988796eccd46a1a1765a109ae93c57126a4032e62b1bc83f3d86c59702464e7857d2372fed550acef9f319dcb61c4085f716015ae44220ba887253a4dfc4cccf5cccba9a4ae23b23296689c6aaeea4d3d0ed133247c4da43c9d401e32abae1bcbf3b7940d8195341ac0fe9f8ce763750bd49d34ed03e59afff7b4128dbb65a7551c7c74500d57c5bfbfc7f423883050873d0d5558d5defc8c9b87cba06d4e666430502b641a52b63cc6a47e8b38adbcec344db8d8e7629f8a3f41195b3b43da360724d2d391ee1e8510421611a8445d3ec0c5d58f2fd732097bf623b9cb903f1db8e7eb616f72e4d489659a99fc547d570856e251481d56ea6bb96683e6882d00d36de8a953a0e299feba857f9698257425d0055b1ee56ee2a039b49024f691634ecab12bee0e5de87ebd4d0202c8daf395ab914375b0a24365a1962939d16191902d16a233aec5b8b5f3de62d3963af4fb3d4782f291089b267333ddb73839a4ede83b70d9e675fa4d77c4aa74f26b61399000452a565d1810643a6f42c94eca0d55ae78e8845f9de2c30fa2e63aa587a4aeeb4172788c6d28ddc0b5a6a9943b9c0534b28cadcd94d0f74c132b3e5b99504fe6466335aa24b00a5dfa651863d647a7fff34fe35f4a178cf4b93411dce6b3026d2ebf33e0ba36a74d04574f4359ec99f8397705af86910c9cbca9712b9e8ccc110ea6664ea167e50f0160067aadead62cbe1d9f474caf37e5022d0e6fbcc8fe4ac9c9ae3b5bb54466c9bdceea0cab257a21ace46033e3c22a148b8f408833c727e4a7802c92c25957222ce49eb79678f448f85ee416fafd1ffe77daedf4fd840e447109fd48c776f83b9990c0c36d690a1ced0ca96d3c2f21c7a3295edea81c4aed2d5cd94e66a6e7e90f5c78e984ac8fd695d645fc4aad309b334b29bf2a2304f39bf32de6c21c110befb33072524d53996425ab23d6c5486fa0f4e6a20cd029b0ff30ea6bd5ef29f8c146094f50e55d68dc984f6b225097455edb2338737c9502d8e9e256fe2919af1edc66f96328527b8685f3a0812bcbd634a7d7806641f2cd1873914b0e5cac090a0fd65befb8312b605da21445e57048ae1df3aefaa3ae1421bd29878dc8932045084576e09bd2dbb7e8344b9ecc560e0e1b0dabd181b5a9f8deeddc29067cf6a4cbacf9701f2896578b55b5f75df25376aa3ba60d78c93d664f494fd061810586a5dac161e52d61e554a3fc024df58ed3bf04e59472c529015bef49a6f1c046bd348cada8594839fb8a44580cb4a9eab1e94f0d9516ef0487381aab9de0d76a6c94dcb9ed41c637a260ace3d9a07ee4a22aa82bb099cf452b6cc0d29609a200a8da99d48b48410396752a37e399999eea2da742e0512a87be39b15fd05cbfda0faca5318d22f47e873887c51a0dcc00eac4630aa74e69c5f313f21c7e42e1717fc9e274859af47f7be60862435a6fd84866a827aad6fe94600b81531fa3dfd56012f33b56fa96fef7800741138281c83122eef9794eca920f97a26af3ecd0ad5e5175f944c9ba2cafa8647fe8c6c22668cf6939c6812ecffca52cbc9a065f525af057267d3a36e7dcad9bf887b563ae14f561a3c0abaff70f20af58406917b35dbecbb00b0e94710d628ed20cd1054bd5febdc074cf3eefb9271d07b163d6d5ce4fa0e585895fe8636b4e14a9bddf4f445a88d93efb8538419fa97459d2dc187562ee1695bab5bc52d5d9fd01b8d0452906b841f1d6356f5f70c391deca83a8fa63162cef7028c05e0436fb0d01f8f225386ccf5591169072b51e49e12b19bcb31b36b657fbe8cdea9f36c8e1c6b28166656bef44af4bf3af6651dd516c52301e51b6f90c073eda2db076a3a3b6e93db0844a67b7ecfd6fe7dad6066b2d31a0a4971b5221cbc9511702382496bec2045436d2db3b3697d29f41f473db94d0cd353e2b59f1f7ad8e2c9fba72a10a4f0e704e9f52c92b4e57a4063429c01ad5a9b6596c423e928766df446b4e24967725cf6b699c31c0b88c4ffb3eb8d989c7a91682f72de09d66967b0edc1465a3b74c8009f6ae5e4fc6c537acbb1e762ac265f41e1beabf6b5c6a8ce49bacc14e61b0d87a4882895ae4b717411e80eec1fe8d79b5b4609b390f30faa4c9cf4687b534924a70ab43df74aff878b0d4dbe46b658701f259111bc9b8f11e98f8ea6010bbe65c46e6502740133aab71ccd283c75a5cff3af73786b2e268da9e3476eb0b3d5ec694964a368efc14de1046006291f8ea55b5d789ac6a84a76f9ff114372d1c6408a2c3a18a91bd640a1eb666772f41ce37aa57762fb513b8a7a337ce4b6c1834de65d52ff08c0d9aaef2d91681e0af206489f54d5f2a46d8ab4748ab42e307cba552e590092596fe81ae5e3af443d6764465ae66ebed6735b47a267e9caf307880bcbdae0e6c623ba7cb761bc4f6123dd73073e99536a373d3a542d3d9d9d65b56c2dc956f636c8b3c3ddc16d801be6ea32a53911dccf119a6142b51f30dd48b37762830d929c95717ab7a331c5d83843330f635a3c7d81a468d5991ba33afbf10db305597540a589a93f1cac679861ed472dca106e493e814a87384a2c9f06114412bcd6df511522c6c7cfffa9406a174f3830772f6ec014bd91d47f955b63157250b699f3cdc3ac5b8811d2df4e1379abefabe89587c5c9bd2ff7d18f996a73927ef07c12365790a84f4a4207b8b69ebd771dd6dcbb9be10519690ffbf90336acb41e24ace1220afb2b275dce2879ee6f874b1595a3c9936a6441dfcf9980c481fa0e5fdbe8ca8292756bb4e6ae46ea3daadb45b9c9902f51a6c816ad26661dc2af99f37eddba9a8fc665da9829030c898006f1cd542b0f78a62738efed02ad7405b1449aa1bed585eedb4199c2457836456c5966fa4d8342b111eea68dd8d7ae28f45fc69ff84d5650384542028cedbfa9b9cb202e0eef44754402b7651006657fb3785bdfbd407949634833043a61575dc65dc9defb61bfbb204b42f2650112037627b22ef65b11fb502b35eddb723b1372732582efbd2bea3e12de9da3d7d810e21ff9d9227ce67a58345735596e1315f75b9a38c40173efbe0af5eda52fd8222a86c6adf97ce5752f921f8aae6e94255ed4ccf7581bfa0c6eaa2f8479041aa99fe4316bf47b7ed0cbc4c3ec8d0b6a096d09b1076344c61f5a128669ec3d479099e40693747f5cf30ee611af2cbebd27858c97dc586f0f0a7a840b04d3683ae280a94b3d3c35f55c557b76474158f86a64701b1dfd0687edc89634915a41340126432f9ab4ca3aa47d514fda6b5bdeecb247b9fdcd22a1839dd5e2b7c7e90b7900aff1f8d1d2cd15d2d41eae4f52bbae8190377d7a1e833e68a4258bc7a1c3da5b58ea5f50662962ecf6237b35a810755da2a533c35f20bb17036621ded935406cf7b3db1c98ec488695bb407afaf5a2214059286a7cf41ec484c35d469d70cfecc6acbf6b8ad943ef674b5ff4e458189959f596b2b71ec9f4c4ed729010cf4abf52a29093b3a40bdf3de8330e24f3b692257bf735a1ab76b25b5e3e502f7a6a758f3018a81b94106161db3d0899b46577769fa2747998b5f30adf24e5d962cb4c227db9d7539a366848bc84f342ef7608264d14c0a6aa472c1514f71bd352f6ba3058e5a09f7bf3a2bf348b8b97fc1f56e01cbfba166102bb1a77b5e82e0b68d0212564985ce9076e25fef5c44169126acdf41d084a88e44eb2b1214bc3587cf32c31f652f00d6e8ff2766b03fde72033b25337e293273b419383fc52e3c104d514329d8129af68f06905e31f8e72ef0b8d15c2ca610e304b3e0adb56e06aa91a8d201678d3b667570798fdbe9deb372db6a5a8112b46098f2259a06116f7de404b78ebe1d4a26ee52aa2b8f4cb2441bde4e5825dcf9dd22ebdcb9c1ae635d5c68c0eae641c2bf3ab0990a79c633561b61fc7f41a2bfb521b575f705ce0bbeeec3e24992f69feb84802857d8379fec1a01919d5c5d15ff8e097dd35890dec8f6a399241804f87660bfff1920285ecbff06b47cc3a66bed606291920c8c33886036d73812f07097fe8ccc9a474955580f5780d8dd3a767639b693ad25dff33f9bbb60b3052fda6de5fb50a027a343dbcfd1e3a3efcdaedd5f4c483c0bc380f1d63634d08021d37948c917def5821c0735c9f120fb032bd4d3ed320cdcc1b07738f0d85f7958776e10459ec5a2e128eec4941fa9a350c121f0b8c93509f727846801815f60e3a8e32ffa2ad8f58819c4570e58f4c4b128fc9724b4c71922a0b813971bff21b4a082467d9fe4687008867262fb4691b682ae0786e66d7450d33123862cf238ef36feab956b75464b4f94548e1c4e7403e23e38d3575159e52c4be1442b9bd8979dd3f36d8cadb5a7cb48eb4d620c7e32bb639c15a3e51b17ce0623f3073efd7ce871037e15621ca7d28a00c930ff80ab7ccfc7ac7e1af7de76091b36321e4d17dddcfac57fe2e254d753c2008cacbe6fd44d2f364bc15e5cd2ae7fd55f3dade68de808539400f68a85755fd7013072e731ff2bf0457661d539a90a47203aa6ca94a1b632dc8e51f353d7241832a8e421e6bc593c58b282d768f72187b484d8a326a921171e7975e86a2bbf8e35ff8893565dfd673aef06319966169b3831075fa7b7022782e6c001509171e5f347a63297a435262a55526f1b992e456363d4cd1df81f8016c1575303450d8de0ad05ec50cff0d0307286b5c834990b1cdb6bbf2ad190e2ffe79e0b29472a2f9d5077d274c0becf264d5b190528b0ab38494e40f2f51435201cab4e6ee9671f7249e1bd31092778761b302766c14ee213c2f61f970050ef04575296ca900bacd48f7b63166ce57898d873c11ccef75b24a5b0b6e6340d2f4f6be9bc27d2b4335223e418d3ee4a9ae5a18d2a13e5ab37101421e27e308cf78a8cbfb62e49018b20fe741c40cd5849e0026e4533ef9285cc37d8bf8fcbb8aadc7f55c5b338c9042ba352868086f56954293df5d94161f35eb5205c0c9e27144630722339ce2f08bc343532337ba535345fa87179898249456ca01ea1a8ead4eccd367b5edf2e4e", 0x1000, 0xc053, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x5c, 0x30, 0xb, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000)
r6 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000780), 0xa4100, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000880)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000000c80)={r8, 0x8, 0x0, [0xa65f, 0x0, 0xffffffff, 0x100, 0x6], [0x4, 0x80000000, 0x7, 0x80000001, 0x10, 0x2, 0x7e0, 0x80000001, 0x3ff, 0x5, 0x8, 0xffffffff, 0xfffffffffffffff9, 0xffff, 0x2, 0x7, 0x101, 0x0, 0x7, 0x2, 0x1000, 0xff, 0xfe, 0x9, 0x7, 0x6d0, 0x1943c000, 0x3fffc00000000000, 0x8, 0x6, 0x8, 0xc1, 0x8000, 0x5, 0x903, 0x2, 0xba6, 0x6, 0x6, 0x6, 0x6, 0x6, 0x8, 0x8, 0x8, 0x10000000, 0xb47a, 0xfffffffffffffffb, 0x9, 0xfffffffffffffff9, 0x3, 0x200000, 0x8, 0x2, 0x7fff, 0x0, 0xffff, 0x5, 0x100000002000, 0x3, 0xffffffff, 0x1, 0xffffffffffffffff, 0x7fffffffffffffff, 0x0, 0x4, 0x4, 0x0, 0x3, 0x80000001, 0x3, 0x6, 0x834, 0xffff, 0x6, 0x5b, 0x1, 0x7ff, 0xb, 0xffffffffffffffff, 0x3ff, 0x80000000, 0xfffffffffffffff8, 0x1, 0x0, 0x1, 0x0, 0x5, 0x5530, 0xff, 0x9, 0x6cae, 0x1, 0x68, 0xf0, 0x1, 0x10000, 0x5, 0x1, 0x4, 0x1, 0x9, 0x4, 0x2, 0xb, 0x9, 0x3, 0x4, 0x7, 0x2, 0x6, 0x553, 0xf2d5, 0xffffffffffffff7e, 0xffffffffffffffff, 0xd585, 0x7fffffff, 0x2, 0x1, 0x8001, 0x9]})
ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000a40)={<r9=>0x0, 0x0, 0x200, 0x1})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000e40)={<r10=>0x0, 0x800, 0x2, 0xc22264649a08ca40})
ioctl$BTRFS_IOC_BALANCE_V2(r6, 0xc4009420, &(0x7f0000001480)={0x12, 0x2, {0x3, @usage=0xafd, r8, 0x8, 0x0, 0x9, 0x6, 0x10000, 0x40, @struct={0xc503, 0x6}, 0x0, 0x5, [0x2, 0xa, 0x0, 0x2, 0x2, 0x5f03]}, {0x6, @struct={0x2000000, 0xd8}, r9, 0x2, 0x7, 0x4, 0xfffffffffffffff7, 0x1, 0x72, @usage=0x1, 0x80000000, 0xe91, [0x5, 0x80, 0x9, 0x15ae, 0x7fffffff, 0x6]}, {0x3, @struct={0x1, 0x9}, r10, 0x7, 0x8, 0xfffffffffffffffb, 0x8, 0x2, 0x10, @struct={0xfaa0}, 0x1, 0x3, [0x0, 0xa00000000000000, 0xffffffffffffff89, 0xffffffff00000000, 0x0, 0x4]}, {0xfffffffffffffffb, 0x80000001, 0x2}})

247.17528ms ago: executing program 6 (id=4951):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x0)

234.841561ms ago: executing program 6 (id=4952):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x4}, 0x18)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000003"], 0x64}}, 0x0)

218.963692ms ago: executing program 6 (id=4953):
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
pipe2$9p(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15)
r4 = dup(r3)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])

203.086224ms ago: executing program 6 (id=4954):
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000040)=@ethtool_coalesce={0x17, 0x9, 0xf, 0x1, 0xd5, 0x9, 0x101, 0xd, 0xb05, 0x0, 0x0, 0x100, 0xebfa, 0xc3e9, 0x1, 0x98, 0x7, 0xed, 0x2, 0xffffff7f, 0x6, 0x5, 0x3}})
r1 = getpid()
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="18020000010000000000000003000000850000004100000018000000020000000000000004000000950000000000000061f0663e91c671706bad113e1ff3841e17a99c19e5d16979301ebb0c7d320359d232ce1e6c61a3a24dc7c73d5afe406516f691d123ebfa99ccc53ac45dc31c5373957969da704f2840f2fd4ff7210376be0cafb254bca8ebb72b6727265e3522ee50dc85eb4d46c65a507cd64cbe01dc0a517e523e4130964444a018aa4f74af285d8db7bf68232367cc500f0ecbdd258fba4db7076a"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50)
r3 = syz_pidfd_open(r1, 0x0)
r4 = pidfd_getfd(r3, r3, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x1}, 0x8)
setns(r4, 0x66020000)
mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0)
syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000380)={<r6=>0x0, 0x8, 0x7c})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000780)={r6, 0x8, 0x40})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")

51.106736ms ago: executing program 5 (id=4955):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10)
sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000500)="d8000000180081064e81f789db4cb904021d080006007c09e8ee55a10a0015000400142603600e1208000f0000000401a8001600200008800000000000000100a0e408e802ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5d9001901df60e1b6649682e1cace81ed0bffece0b42a9ecbee5de6cc0000", 0xd8}], 0x1}, 0x0)

22.616068ms ago: executing program 5 (id=4956):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000160a010800000000000000000500000a0900010073797a30000000000900020073797a3100000000140000001100010000001200000000000200000a"], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000b00)={'ip6gre0\x00', &(0x7f0000000a80)={'syztnl1\x00', <r4=>0x0, 0x2f, 0x57, 0x6, 0x8001, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x2, 0x3}})
sendmsg$xdp(r3, &(0x7f0000000f00)={&(0x7f0000000b40)={0x2c, 0x2, r4, 0x6}, 0x10, &(0x7f0000000e80)=[{&(0x7f0000000b80)="fb4427414b68d682fd79288b64026a575fe16887f822aa04771f86c488d3f0afb12830ad62b3216cae5a6133920c23e71a10c187e9eea7fd82e2173a40037c18882e5a2be2f71a40e5500b1165d4bb049cd8563ff3f18f9811886d61a78d05ca0f942a9ba7dd589406f2cfd485a046414e508d146959ed82c1e73fcdd2d2b096949fa94d4653daded63015a4a24721c6ba8842873ce2cd9356cda54828f3e6736d8e6e0266ade87d915a35d5b3c79e0d6e2258384715925212eec3192b71c83fd3bc8519d6e3a942dc87ac25a044ed117fe31aa8ac8cc132a66e80b519b9", 0xde}, {&(0x7f0000000c80)="958ed527a8593255e5cfb057cb1319a082809f5dac50a741dd52b93a43a494d71f0dea618b9d5a51a9734cfc9e78e644499f80f96509fac4022a53793a2594f31a1f72ba7616dbf2cda1032c6095ce", 0x4f}, {&(0x7f0000000d00)="54024a3df021b036c9ef8839fa243ff09322e063b7435d24f90ee59babee8e29e4cda0f6e5e74e2c4a0c", 0x2a}, {&(0x7f0000000d40)="01493946b5ae3886db1ed4", 0xb}, {&(0x7f0000000d80)="2087df2bca533d94c7e12ef40d0f04c348bdaebd2bd3a2db61fd311937e96bdba7924d5266ef2e0f45d3b4048dfe65f39800ae62d1a5c8899d39e2c8e81063ea3a705b591aa9020eb56b0c8d", 0x4c}, {&(0x7f0000000e00)="5c292857f6572ce0bdac8ba04816200b9f20a4efd392429b5c63bba31b159650d7d6562c5ea6dc158336df1ad9a8e48f419feb31c952210e44064f97cd567e377c973377daab7743441413d68c83aa3417907fdcb6f42403229e75900d0a7b79d2d05408ed257077f4dd01557b8bb7", 0x6f}], 0x6, 0x0, 0x0, 0x80}, 0x90)
syz_io_uring_setup(0x75fb, &(0x7f0000000540)={0x0, 0x8102, 0x400, 0x0, 0x1d8}, &(0x7f0000000380), &(0x7f0000000980))

0s ago: executing program 5 (id=4957):
socket$inet6(0xa, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000680)={0x0, 'netdevsim0\x00', {0x4}, 0xff}) (async)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000680)={0x0, 'netdevsim0\x00', {0x4}, 0xff})
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(r1, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) (async)
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="4ef5220b31409640130c21ec239950d47f40572b0828588f12a26e", 0x1b}], 0x1, 0x0, 0x0, 0x40480a5}}], 0x1, 0x0)
recvmmsg(r2, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/51, 0x33}, {&(0x7f0000000580)=""/179, 0xb3}, {&(0x7f0000000100)}, {&(0x7f0000000640)=""/141, 0x8d}, {&(0x7f0000000180)=""/64, 0x40}, {&(0x7f00000003c0)=""/68, 0x44}, {&(0x7f0000000480)=""/112, 0x70}], 0x7, &(0x7f00000001c0)=""/33, 0x21}, 0xa}, {{0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000780)=""/163, 0xa3}, 0x400}, {{&(0x7f0000000840)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000900)=[{&(0x7f00000008c0)=""/38, 0x26}], 0x1}, 0x80000001}], 0x3, 0x0, 0x0) (async)
recvmmsg(r2, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/51, 0x33}, {&(0x7f0000000580)=""/179, 0xb3}, {&(0x7f0000000100)}, {&(0x7f0000000640)=""/141, 0x8d}, {&(0x7f0000000180)=""/64, 0x40}, {&(0x7f00000003c0)=""/68, 0x44}, {&(0x7f0000000480)=""/112, 0x70}], 0x7, &(0x7f00000001c0)=""/33, 0x21}, 0xa}, {{0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000780)=""/163, 0xa3}, 0x400}, {{&(0x7f0000000840)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000900)=[{&(0x7f00000008c0)=""/38, 0x26}], 0x1}, 0x80000001}], 0x3, 0x0, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) (async)
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffbffff, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
add_key(&(0x7f0000000800)='asymmetric\x00', 0x0, &(0x7f0000000840)='\x00', 0x1, 0xffffffffffffffff) (async)
add_key(&(0x7f0000000800)='asymmetric\x00', 0x0, &(0x7f0000000840)='\x00', 0x1, 0xffffffffffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r6, 0x5609, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00')

kernel console output (not intermixed with test programs):

evice loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  330.806457][T16618] EXT4-fs (loop2): Remounting filesystem read-only
[  331.001597][T16651] loop1: detected capacity change from 0 to 164
[  331.023355][T16651] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  331.040460][T16651] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  331.082845][T16651] Symlink component flag not implemented
[  331.088609][T16651] Symlink component flag not implemented
[  331.118099][T16651] Symlink component flag not implemented (7)
[  331.124104][T16651] Symlink component flag not implemented (116)
[  331.166488][T14296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.703931][T16684] lo speed is unknown, defaulting to 1000
[  332.182868][T16709] loop2: detected capacity change from 0 to 164
[  332.190546][T16709] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  332.201193][T16709] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  332.209992][T16709] Symlink component flag not implemented
[  332.215651][T16709] Symlink component flag not implemented
[  332.222412][T16709] Symlink component flag not implemented (7)
[  332.228514][T16709] Symlink component flag not implemented (116)
[  332.237968][T16711] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3955'.
[  332.314630][T16720] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3958'.
[  332.314671][T16725] tipc: Started in network mode
[  332.328629][T16725] tipc: Node identity ac14140f, cluster identity 4711
[  332.335715][T16725] tipc: New replicast peer: 255.255.255.83
[  332.341598][T16725] tipc: Enabled bearer <udp:ree>, priority 10
[  332.448592][T16728] 9pnet_fd: Insufficient options for proto=fd
[  332.599767][T16741] loop2: detected capacity change from 0 to 128
[  332.631542][T16742] lo speed is unknown, defaulting to 1000
[  332.653586][T16741] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3967'.
[  332.662750][T16741] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3967'.
[  332.872059][T16755] loop2: detected capacity change from 0 to 164
[  332.886644][T16755] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  332.911625][T16755] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  332.921186][T16755] Symlink component flag not implemented
[  332.926848][T16755] Symlink component flag not implemented
[  332.945892][T16755] Symlink component flag not implemented (7)
[  332.951973][T16755] Symlink component flag not implemented (116)
[  333.055654][T16762] tipc: Started in network mode
[  333.060611][T16762] tipc: Node identity ac14140f, cluster identity 4711
[  333.067690][T16762] tipc: New replicast peer: 255.255.255.83
[  333.073560][T16762] tipc: Enabled bearer <udp:ree>, priority 10
[  333.097409][T16762] 9pnet_fd: Insufficient options for proto=fd
[  333.259586][T16771] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3978'.
[  333.269003][T16771] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3978'.
[  333.396656][T16777] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3980'.
[  333.477880][   T23] tipc: Node number set to 2886997007
[  333.502127][T16796] loop5: detected capacity change from 0 to 164
[  333.510683][T16796] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  333.519602][T16796] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  333.528976][T16796] Symlink component flag not implemented
[  333.534672][T16796] Symlink component flag not implemented
[  333.541962][T16796] Symlink component flag not implemented (7)
[  333.547962][T16796] Symlink component flag not implemented (116)
[  333.655937][T16803] loop2: detected capacity change from 0 to 128
[  333.731586][T16803] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3990'.
[  333.740705][T16803] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3990'.
[  333.751794][   T29] kauditd_printk_skb: 98 callbacks suppressed
[  333.751965][   T29] audit: type=1326 audit(333.714:9648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16809 comm="syz.5.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5923ebe9 code=0x7ffc0000
[  333.781282][   T29] audit: type=1326 audit(333.714:9649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16809 comm="syz.5.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5923ebe9 code=0x7ffc0000
[  333.804431][   T29] audit: type=1326 audit(333.714:9650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16809 comm="syz.5.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c5923ebe9 code=0x7ffc0000
[  333.827487][   T29] audit: type=1326 audit(333.714:9651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16809 comm="syz.5.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5923ebe9 code=0x7ffc0000
[  333.850413][   T29] audit: type=1326 audit(333.714:9652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16809 comm="syz.5.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5923ebe9 code=0x7ffc0000
[  333.873570][   T29] audit: type=1326 audit(333.714:9653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16809 comm="syz.5.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c5923ebe9 code=0x7ffc0000
[  333.896457][   T29] audit: type=1326 audit(333.714:9654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16809 comm="syz.5.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5923ebe9 code=0x7ffc0000
[  333.919460][   T29] audit: type=1326 audit(333.714:9655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16809 comm="syz.5.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c5923ebe9 code=0x7ffc0000
[  333.942402][   T29] audit: type=1326 audit(333.714:9656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16809 comm="syz.5.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5923ebe9 code=0x7ffc0000
[  333.965321][   T29] audit: type=1326 audit(333.714:9657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16809 comm="syz.5.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5923ebe9 code=0x7ffc0000
[  334.005697][ T3410] kernel write not supported for file /433/attr/exec (pid: 3410 comm: kworker/0:4)
[  334.106322][T16837] loop1: detected capacity change from 0 to 164
[  334.118656][T16837] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  334.127540][T16837] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  334.143229][T16837] Symlink component flag not implemented
[  334.143253][T16840] loop6: detected capacity change from 0 to 164
[  334.148975][T16837] Symlink component flag not implemented
[  334.149152][T16837] Symlink component flag not implemented (7)
[  334.166965][T16837] Symlink component flag not implemented (116)
[  334.167312][T16840] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  334.197851][ T3410] tipc: Node number set to 2886997007
[  334.212450][T16840] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  334.241213][T16840] Symlink component flag not implemented
[  334.246865][T16840] Symlink component flag not implemented
[  334.276234][T16840] Symlink component flag not implemented (7)
[  334.282293][T16840] Symlink component flag not implemented (116)
[  334.348802][T16854] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4009'.
[  334.389208][    T9] kernel write not supported for file /709/attr/exec (pid: 9 comm: kworker/0:0)
[  334.399932][T16853] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4010'.
[  334.399962][T16853] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4010'.
[  334.522601][T16861] lo speed is unknown, defaulting to 1000
[  334.557349][ T3396] kernel write not supported for file /378/attr/exec (pid: 3396 comm: kworker/1:4)
[  334.630043][T16886] 9pnet_fd: Insufficient options for proto=fd
[  334.750568][T16897] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4028'.
[  334.759625][T16897] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4028'.
[  334.794289][T16895] loop6: detected capacity change from 0 to 512
[  334.814050][T16895] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2
[  334.822437][T16895] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2
[  334.831517][T16895] EXT4-fs (loop6): 1 truncate cleaned up
[  334.837701][T16895] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  334.854212][T16895] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  334.873261][T16895] EXT4-fs (loop6): Remounting filesystem read-only
[  334.907692][T16905] loop1: detected capacity change from 0 to 164
[  334.937962][T16905] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  334.972572][T16905] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  334.982294][T16905] Symlink component flag not implemented
[  334.988143][T16905] Symlink component flag not implemented
[  334.995419][T16905] Symlink component flag not implemented (7)
[  335.001466][T16905] Symlink component flag not implemented (116)
[  335.038737][    T9] kernel write not supported for file /429/attr/exec (pid: 9 comm: kworker/0:0)
[  335.052659][T16913] tipc: Enabling of bearer <udp:ree> rejected, already enabled
[  335.118157][T14601] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  335.169290][T16921] 9pnet_fd: Insufficient options for proto=fd
[  335.169459][T16926] 9pnet: Could not find request transport: fd0x0000000000000007
[  335.211499][T16935] 9pnet_fd: Insufficient options for proto=fd
[  335.237962][T16937] loop6: detected capacity change from 0 to 164
[  335.245148][T16937] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  335.254545][T16937] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  335.263801][T16937] Symlink component flag not implemented
[  335.269499][T16937] Symlink component flag not implemented
[  335.275233][T16937] Symlink component flag not implemented (7)
[  335.281251][T16937] Symlink component flag not implemented (116)
[  335.323500][T16947] tipc: Enabling of bearer <udp:ree> rejected, already enabled
[  335.390070][T16961] 9pnet_fd: Insufficient options for proto=fd
[  335.432133][T16955] 9pnet_fd: Insufficient options for proto=fd
[  335.478260][T16972] loop1: detected capacity change from 0 to 164
[  335.495582][T16972] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  335.504280][T16972] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  335.544220][T16972] Symlink component flag not implemented
[  335.549908][T16972] Symlink component flag not implemented
[  335.566571][T16972] Symlink component flag not implemented (7)
[  335.572626][T16972] Symlink component flag not implemented (116)
[  335.687156][T16963] loop5: detected capacity change from 0 to 512
[  335.710084][T16963] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  335.719904][T16963] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2
[  335.731541][T16963] EXT4-fs (loop5): 1 truncate cleaned up
[  335.742249][T16963] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  335.763535][T16951] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  335.779323][T16951] EXT4-fs (loop5): Remounting filesystem read-only
[  335.803287][T16997] 9pnet_fd: Insufficient options for proto=fd
[  335.901288][T17000] lo speed is unknown, defaulting to 1000
[  336.020443][T14090] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  336.063985][T17005] 9pnet: Could not find request transport: fd0x0000000000000007
[  336.416211][T17037] loop5: detected capacity change from 0 to 164
[  336.423377][T17037] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  336.433582][T17037] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  336.441958][T17037] Symlink component flag not implemented
[  336.447663][T17037] Symlink component flag not implemented
[  336.454415][T17037] Symlink component flag not implemented (7)
[  336.460447][T17037] Symlink component flag not implemented (116)
[  336.782283][T17076] loop2: detected capacity change from 0 to 164
[  336.792269][T17076] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  336.796235][T17080] FAULT_INJECTION: forcing a failure.
[  336.796235][T17080] name failslab, interval 1, probability 0, space 0, times 0
[  336.802443][T17076] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  336.813264][T17080] CPU: 0 UID: 0 PID: 17080 Comm: syz.6.4102 Tainted: G        W           6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(voluntary) 
[  336.813303][T17080] Tainted: [W]=WARN
[  336.813311][T17080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  336.813325][T17080] Call Trace:
[  336.813333][T17080]  <TASK>
[  336.813342][T17080]  __dump_stack+0x1d/0x30
[  336.813365][T17080]  dump_stack_lvl+0xe8/0x140
[  336.813437][T17080]  dump_stack+0x15/0x1b
[  336.813454][T17080]  should_fail_ex+0x265/0x280
[  336.813489][T17080]  should_failslab+0x8c/0xb0
[  336.813515][T17080]  __kmalloc_cache_node_noprof+0x54/0x320
[  336.813622][T17080]  ? __get_vm_area_node+0x106/0x1d0
[  336.813656][T17080]  __get_vm_area_node+0x106/0x1d0
[  336.813689][T17080]  __vmalloc_node_range_noprof+0x273/0xe00
[  336.813724][T17080]  ? ip_set_sockfn_get+0x10a/0x6b0
[  336.813874][T17080]  ? avc_has_perm_noaudit+0x1b1/0x200
[  336.813901][T17080]  ? cred_has_capability+0x210/0x280
[  336.813952][T17080]  ? selinux_capable+0x31/0x40
[  336.813978][T17080]  ? ip_set_sockfn_get+0x10a/0x6b0
[  336.814077][T17080]  vmalloc_noprof+0x82/0xc0
[  336.814181][T17080]  ? ip_set_sockfn_get+0x10a/0x6b0
[  336.814290][T17080]  ip_set_sockfn_get+0x10a/0x6b0
[  336.814392][T17080]  nf_getsockopt+0x190/0x1b0
[  336.814420][T17080]  ip_getsockopt+0x137/0x180
[  336.814462][T17080]  raw_getsockopt+0xb0/0x190
[  336.814495][T17080]  sock_common_getsockopt+0x60/0x70
[  336.814524][T17080]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  336.814567][T17080]  do_sock_getsockopt+0x200/0x240
[  336.814603][T17080]  __x64_sys_getsockopt+0x11e/0x1a0
[  336.814640][T17080]  x64_sys_call+0x2bc6/0x2ff0
[  336.814665][T17080]  do_syscall_64+0xd2/0x200
[  336.814712][T17080]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  336.814739][T17080]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  336.814806][T17080]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.814891][T17080] RIP: 0033:0x7f8451a7ebe9
[  336.814908][T17080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  336.814929][T17080] RSP: 002b:00007f84504e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  336.814973][T17080] RAX: ffffffffffffffda RBX: 00007f8451ca5fa0 RCX: 00007f8451a7ebe9
[  336.814986][T17080] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000000000003
[  336.815000][T17080] RBP: 00007f84504e7090 R08: 0000200000000080 R09: 0000000000000000
[  336.815014][T17080] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  336.815027][T17080] R13: 00007f8451ca6038 R14: 00007f8451ca5fa0 R15: 00007ffff315da08
[  336.815054][T17080]  </TASK>
[  336.815063][T17080] syz.6.4102: vmalloc error: size 5, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null)
[  336.825307][T17076] Symlink component flag not implemented
[  336.835101][T17080] ,cpuset=/,mems_allowed=0
[  336.838980][T17076] Symlink component flag not implemented
[  336.849015][T17080] CPU: 0 UID: 0 PID: 17080 Comm: syz.6.4102 Tainted: G        W           6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(voluntary) 
[  336.849128][T17080] Tainted: [W]=WARN
[  336.849136][T17080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  336.849150][T17080] Call Trace:
[  336.849157][T17080]  <TASK>
[  336.849166][T17080]  __dump_stack+0x1d/0x30
[  336.849193][T17080]  dump_stack_lvl+0xe8/0x140
[  336.849214][T17080]  dump_stack+0x15/0x1b
[  336.849232][T17080]  warn_alloc+0x12b/0x1a0
[  336.849271][T17080]  __vmalloc_node_range_noprof+0x297/0xe00
[  336.849443][T17080]  ? avc_has_perm_noaudit+0x1b1/0x200
[  336.849470][T17080]  ? cred_has_capability+0x210/0x280
[  336.849510][T17080]  ? selinux_capable+0x31/0x40
[  336.849541][T17080]  ? ip_set_sockfn_get+0x10a/0x6b0
[  336.849602][T17080]  vmalloc_noprof+0x82/0xc0
[  336.849634][T17080]  ? ip_set_sockfn_get+0x10a/0x6b0
[  336.849684][T17080]  ip_set_sockfn_get+0x10a/0x6b0
[  336.849719][T17080]  nf_getsockopt+0x190/0x1b0
[  336.849798][T17080]  ip_getsockopt+0x137/0x180
[  336.849830][T17080]  raw_getsockopt+0xb0/0x190
[  336.849896][T17080]  sock_common_getsockopt+0x60/0x70
[  336.849924][T17080]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  336.849952][T17080]  do_sock_getsockopt+0x200/0x240
[  336.849988][T17080]  __x64_sys_getsockopt+0x11e/0x1a0
[  336.850034][T17080]  x64_sys_call+0x2bc6/0x2ff0
[  336.850062][T17080]  do_syscall_64+0xd2/0x200
[  336.850103][T17080]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  336.850129][T17080]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  336.850152][T17080]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.850175][T17080] RIP: 0033:0x7f8451a7ebe9
[  336.850197][T17080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  336.850217][T17080] RSP: 002b:00007f84504e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  336.850237][T17080] RAX: ffffffffffffffda RBX: 00007f8451ca5fa0 RCX: 00007f8451a7ebe9
[  336.850251][T17080] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000000000003
[  336.850265][T17080] RBP: 00007f84504e7090 R08: 0000200000000080 R09: 0000000000000000
[  336.850280][T17080] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  336.850293][T17080] R13: 00007f8451ca6038 R14: 00007f8451ca5fa0 R15: 00007ffff315da08
[  336.850314][T17080]  </TASK>
[  336.850348][T17080] Mem-Info:
[  336.854620][T17076] Symlink component flag not implemented (7)
[  336.855172][T17080] active_anon:17857 inactive_anon:10 isolated_anon:0
[  336.855172][T17080]  active_file:21002 inactive_file:3200 isolated_file:0
[  336.855172][T17080]  unevictable:0 dirty:23 writeback:25
[  336.855172][T17080]  slab_reclaimable:3492 slab_unreclaimable:28184
[  336.855172][T17080]  mapped:29526 shmem:311 pagetables:1034
[  336.855172][T17080]  sec_pagetables:0 bounce:0
[  336.855172][T17080]  kernel_misc_reclaimable:0
[  336.855172][T17080]  free:1817187 free_pcp:40928 free_cma:0
[  336.859552][T17076] Symlink component flag not implemented (116)
[  336.874245][T17082] loop1: detected capacity change from 0 to 164
[  336.877591][T17080] Node 0 active_anon:71544kB inactive_anon:40kB active_file:84008kB inactive_file:12800kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118104kB dirty:92kB writeback:100kB shmem:1360kB kernel_stack:3152kB pagetables:4136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  336.890044][T17082] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  336.893621][T17080] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  336.914038][T17082] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  336.915329][T17080] lowmem_reserve[]: 0 2883 7862
[  336.920761][T17082] Symlink component flag not implemented
[  336.925237][T17080]  7862
[  336.925254][T17080] Node 0 DMA32 free:2949328kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952860kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB
[  336.929809][T17082] Symlink component flag not implemented
[  336.934884][T17080] lowmem_reserve[]: 0 0 4978 4978
[  336.934919][T17080] Node 0 Normal free:4304060kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:71544kB inactive_anon:40kB active_file:84008kB inactive_file:12800kB unevictable:0kB writepending:76kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:160176kB local_pcp:70108kB free_cma:0kB
[  336.941442][T17082] Symlink component flag not implemented (7)
[  336.944451][T17080] lowmem_reserve[]:
[  336.949085][T17082] Symlink component flag not implemented (116)
[  337.575647][T17080]  0 0 0 0
[  337.578702][T17080] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  337.591438][T17080] Node 0 DMA32: 4*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949328kB
[  337.607747][T17080] Node 0 Normal: 1056*4kB (UM) 883*8kB (UME) 2126*16kB (UME) 1190*32kB (UME) 732*64kB (UME) 375*128kB (UME) 239*256kB (UM) 137*512kB (UM) 81*1024kB (UM) 26*2048kB (UM) 944*4096kB (UME) = 4312376kB
[  337.627506][T17080] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  337.636967][T17080] 24556 total pagecache pages
[  337.641646][T17080] 11 pages in swap cache
[  337.645861][T17080] Free swap  = 124796kB
[  337.650387][T17080] Total swap = 124996kB
[  337.654636][T17080] 2097051 pages RAM
[  337.658438][T17080] 0 pages HighMem/MovableOnly
[  337.663091][T17080] 80436 pages reserved
[  337.691990][T17086] bond1: entered promiscuous mode
[  337.697109][T17086] bond1: entered allmulticast mode
[  337.702534][T17086] 8021q: adding VLAN 0 to HW filter on device bond1
[  337.716122][T17086] bond1 (unregistering): Released all slaves
[  337.744998][T17093] batman_adv: batadv0: Adding interface: dummy0
[  337.751468][T17093] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  337.787683][T17093] batman_adv: batadv0: Interface activated: dummy0
[  337.816161][T17086] batadv0: mtu less than device minimum
[  337.822216][T17086] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-208)
[  337.833083][T17086] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-208)
[  337.843745][T17086] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-208)
[  337.854689][T17086] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-208)
[  337.865433][T17086] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-208)
[  337.876161][T17086] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-208)
[  337.887039][T17086] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-208)
[  337.897895][T17086] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-208)
[  337.908596][T17086] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-208)
[  337.993618][T17112] lo speed is unknown, defaulting to 1000
[  338.150180][T17132] loop1: detected capacity change from 0 to 1024
[  338.159233][T17132] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  338.174609][T17132] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.4123: Allocating blocks 497-513 which overlap fs metadata
[  338.190447][T17132] EXT4-fs (loop1): pa ffff888106e349a0: logic 256, phys. 369, len 9
[  338.198647][T17132] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[  338.209883][T17132] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt.
[  338.234020][T12988] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.310929][T17142] loop1: detected capacity change from 0 to 512
[  338.330063][T17142] EXT4-fs (loop1): too many log groups per flexible block group
[  338.337949][T17142] EXT4-fs (loop1): failed to initialize mballoc (-12)
[  338.345022][T17142] EXT4-fs (loop1): mount failed
[  338.440771][T17149] loop5: detected capacity change from 0 to 512
[  338.458780][T17149] EXT4-fs (loop5): too many log groups per flexible block group
[  338.466483][T17149] EXT4-fs (loop5): failed to initialize mballoc (-12)
[  338.473393][T17149] EXT4-fs (loop5): mount failed
[  338.861548][   T29] kauditd_printk_skb: 543 callbacks suppressed
[  338.861563][   T29] audit: type=1326 audit(338.834:10201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17158 comm="syz.2.4132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46d021ebe9 code=0x7ffc0000
[  338.904537][   T29] audit: type=1326 audit(338.834:10202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17158 comm="syz.2.4132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46d021ebe9 code=0x7ffc0000
[  338.927698][   T29] audit: type=1326 audit(338.834:10203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17158 comm="syz.2.4132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f46d021ebe9 code=0x7ffc0000
[  338.950666][   T29] audit: type=1326 audit(338.834:10204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17158 comm="syz.2.4132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46d021ebe9 code=0x7ffc0000
[  338.973666][   T29] audit: type=1326 audit(338.834:10205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17158 comm="syz.2.4132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f46d021ebe9 code=0x7ffc0000
[  338.996650][   T29] audit: type=1326 audit(338.834:10206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17158 comm="syz.2.4132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46d021ebe9 code=0x7ffc0000
[  339.019684][   T29] audit: type=1326 audit(338.834:10207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17158 comm="syz.2.4132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f46d021ebe9 code=0x7ffc0000
[  339.042680][   T29] audit: type=1326 audit(338.834:10208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17158 comm="syz.2.4132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46d021ebe9 code=0x7ffc0000
[  339.205257][T17176] __nla_validate_parse: 5 callbacks suppressed
[  339.205338][T17176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4139'.
[  339.237497][T17175] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4135'.
[  339.246677][T17175] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4135'.
[  339.287997][   T29] audit: type=1326 audit(339.254:10209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17178 comm="syz.6.4140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8451a7ebe9 code=0x7ffc0000
[  339.311007][   T29] audit: type=1326 audit(339.254:10210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17178 comm="syz.6.4140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8451a7ebe9 code=0x7ffc0000
[  339.317261][T17183] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4142'.
[  339.390123][T17192] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4145'.
[  339.422600][T17192] serio: Serial port ptm1
[  339.641816][T17207] lo speed is unknown, defaulting to 1000
[  339.731575][T17214] loop5: detected capacity change from 0 to 164
[  339.738613][T17214] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  339.747406][T17214] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  339.755989][T17214] Symlink component flag not implemented
[  339.761666][T17214] Symlink component flag not implemented
[  339.767415][T17214] Symlink component flag not implemented (7)
[  339.773529][T17214] Symlink component flag not implemented (116)
[  339.853018][T17220] loop6: detected capacity change from 0 to 164
[  339.860286][T17220] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  339.870167][T17220] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  339.880449][T17220] Symlink component flag not implemented
[  339.886162][T17220] Symlink component flag not implemented
[  339.896073][T17220] Symlink component flag not implemented (7)
[  339.902197][T17220] Symlink component flag not implemented (116)
[  339.931900][T17224] loop5: detected capacity change from 0 to 1024
[  339.951059][T17224] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  339.991873][T14090] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  340.094737][T17242] loop2: detected capacity change from 0 to 164
[  340.102096][T17242] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  340.110556][T17243] loop5: detected capacity change from 0 to 164
[  340.117277][T17242] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  340.136615][T17243] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  340.147712][T17242] Symlink component flag not implemented
[  340.153452][T17242] Symlink component flag not implemented
[  340.160860][T17242] Symlink component flag not implemented (7)
[  340.166855][T17242] Symlink component flag not implemented (116)
[  340.168804][T17243] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  340.191478][T17243] Symlink component flag not implemented
[  340.197152][T17243] Symlink component flag not implemented
[  340.219965][T17247] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4165'.
[  340.234065][T17243] Symlink component flag not implemented (7)
[  340.240162][T17243] Symlink component flag not implemented (116)
[  340.312249][T17248] lo speed is unknown, defaulting to 1000
[  340.462913][T17272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4172'.
[  340.474842][T17273] loop6: detected capacity change from 0 to 164
[  340.483195][T17273] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  340.492445][T17273] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  340.500833][T17273] Symlink component flag not implemented
[  340.506487][T17273] Symlink component flag not implemented
[  340.512219][T17273] Symlink component flag not implemented (7)
[  340.518228][T17273] Symlink component flag not implemented (116)
[  340.759014][T17282] loop2: detected capacity change from 0 to 512
[  340.783146][T17282] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  340.811604][T17282] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  340.844533][T17282] EXT4-fs (loop2): 1 truncate cleaned up
[  340.850894][T17282] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  340.866927][T17282] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  340.881896][T17282] EXT4-fs (loop2): Remounting filesystem read-only
[  340.941989][T14296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  341.242845][T17307] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4189'.
[  341.271530][T17307] serio: Serial port ptm0
[  341.457764][T17309] lo speed is unknown, defaulting to 1000
[  341.496388][T17318] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4192'.
[  341.567277][T17321] netlink: 'syz.0.4193': attribute type 21 has an invalid length.
[  341.575224][T17321] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4193'.
[  341.698736][T17334] lo speed is unknown, defaulting to 1000
[  342.421711][T17370] FAULT_INJECTION: forcing a failure.
[  342.421711][T17370] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  342.435008][T17370] CPU: 1 UID: 0 PID: 17370 Comm: syz.5.4211 Tainted: G        W           6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(voluntary) 
[  342.435123][T17370] Tainted: [W]=WARN
[  342.435131][T17370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  342.435143][T17370] Call Trace:
[  342.435224][T17370]  <TASK>
[  342.435231][T17370]  __dump_stack+0x1d/0x30
[  342.435263][T17370]  dump_stack_lvl+0xe8/0x140
[  342.435324][T17370]  dump_stack+0x15/0x1b
[  342.435343][T17370]  should_fail_ex+0x265/0x280
[  342.435374][T17370]  should_fail+0xb/0x20
[  342.435403][T17370]  should_fail_usercopy+0x1a/0x20
[  342.435428][T17370]  _copy_to_user+0x20/0xa0
[  342.435452][T17370]  simple_read_from_buffer+0xb5/0x130
[  342.435475][T17370]  proc_fail_nth_read+0x10e/0x150
[  342.435502][T17370]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  342.435565][T17370]  vfs_read+0x1a0/0x6f0
[  342.435584][T17370]  ? __rcu_read_unlock+0x4f/0x70
[  342.435608][T17370]  ? __fget_files+0x184/0x1c0
[  342.435634][T17370]  ksys_read+0xda/0x1a0
[  342.435692][T17370]  __x64_sys_read+0x40/0x50
[  342.435718][T17370]  x64_sys_call+0x27bc/0x2ff0
[  342.435741][T17370]  do_syscall_64+0xd2/0x200
[  342.435764][T17370]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  342.435820][T17370]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  342.435845][T17370]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.435867][T17370] RIP: 0033:0x7f5c5923d5fc
[  342.435883][T17370] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  342.435900][T17370] RSP: 002b:00007f5c57ca7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  342.435951][T17370] RAX: ffffffffffffffda RBX: 00007f5c59465fa0 RCX: 00007f5c5923d5fc
[  342.435963][T17370] RDX: 000000000000000f RSI: 00007f5c57ca70a0 RDI: 0000000000000006
[  342.435976][T17370] RBP: 00007f5c57ca7090 R08: 0000000000000000 R09: 0000000000000000
[  342.436049][T17370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  342.436064][T17370] R13: 00007f5c59466038 R14: 00007f5c59465fa0 R15: 00007ffd4f618758
[  342.436084][T17370]  </TASK>
[  342.441946][T17372] lo speed is unknown, defaulting to 1000
[  342.939240][T17389] loop2: detected capacity change from 0 to 164
[  342.955107][T17389] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  342.965785][T17389] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  342.976748][T17389] Symlink component flag not implemented
[  342.982487][T17389] Symlink component flag not implemented
[  342.988784][T17389] Symlink component flag not implemented (7)
[  342.994779][T17389] Symlink component flag not implemented (116)
[  343.072397][T17399] lo speed is unknown, defaulting to 1000
[  343.119206][T17407] netlink: 'syz.6.4225': attribute type 3 has an invalid length.
[  343.131477][T17407] sd 0:0:1:0: device reset
[  343.138558][    T9] hid-generic 0000:0D17:0000.0002: item fetching failed at offset 0/2
[  343.147045][    T9] hid-generic 0000:0D17:0000.0002: probe with driver hid-generic failed with error -22
[  343.170343][T17411] FAULT_INJECTION: forcing a failure.
[  343.170343][T17411] name failslab, interval 1, probability 0, space 0, times 0
[  343.183106][T17411] CPU: 0 UID: 0 PID: 17411 Comm: syz.6.4226 Tainted: G        W           6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(voluntary) 
[  343.183179][T17411] Tainted: [W]=WARN
[  343.183187][T17411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  343.183202][T17411] Call Trace:
[  343.183209][T17411]  <TASK>
[  343.183217][T17411]  __dump_stack+0x1d/0x30
[  343.183241][T17411]  dump_stack_lvl+0xe8/0x140
[  343.183263][T17411]  dump_stack+0x15/0x1b
[  343.183288][T17411]  should_fail_ex+0x265/0x280
[  343.183320][T17411]  should_failslab+0x8c/0xb0
[  343.183426][T17411]  __kvmalloc_node_noprof+0x123/0x4e0
[  343.183456][T17411]  ? snd_seq_pool_init+0x50/0x210
[  343.183517][T17411]  snd_seq_pool_init+0x50/0x210
[  343.183600][T17411]  ? _raw_spin_unlock_irq+0x26/0x50
[  343.183632][T17411]  snd_seq_ioctl_set_client_pool+0x17f/0x310
[  343.183654][T17411]  snd_seq_ioctl+0x17d/0x2e0
[  343.183671][T17411]  ? __pfx_snd_seq_ioctl+0x10/0x10
[  343.183700][T17411]  __se_sys_ioctl+0xcb/0x140
[  343.183727][T17411]  __x64_sys_ioctl+0x43/0x50
[  343.183745][T17411]  x64_sys_call+0x1816/0x2ff0
[  343.183835][T17411]  do_syscall_64+0xd2/0x200
[  343.183849][T17411]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  343.183863][T17411]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  343.183875][T17411]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  343.183981][T17411] RIP: 0033:0x7f8451a7ebe9
[  343.184091][T17411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  343.184102][T17411] RSP: 002b:00007f84504e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  343.184114][T17411] RAX: ffffffffffffffda RBX: 00007f8451ca5fa0 RCX: 00007f8451a7ebe9
[  343.184122][T17411] RDX: 0000200000001140 RSI: 000000004058534c RDI: 0000000000000003
[  343.184129][T17411] RBP: 00007f84504e7090 R08: 0000000000000000 R09: 0000000000000000
[  343.184136][T17411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  343.184171][T17411] R13: 00007f8451ca6038 R14: 00007f8451ca5fa0 R15: 00007ffff315da08
[  343.184182][T17411]  </TASK>
[  343.430163][T17418] bridge0: entered promiscuous mode
[  343.435619][T17418] macvtap1: entered allmulticast mode
[  343.441155][T17418] bridge0: entered allmulticast mode
[  343.448454][T17418] bridge0: port 3(macvtap1) entered blocking state
[  343.455005][T17418] bridge0: port 3(macvtap1) entered disabled state
[  343.462857][T17418] bridge0: left allmulticast mode
[  343.467943][T17418] bridge0: left promiscuous mode
[  343.475261][T17419] loop2: detected capacity change from 0 to 164
[  343.488620][T17419] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  343.499911][T17419] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  343.509083][T17419] Symlink component flag not implemented
[  343.514760][T17419] Symlink component flag not implemented
[  343.521871][T17419] Symlink component flag not implemented (7)
[  343.528093][T17419] Symlink component flag not implemented (116)
[  343.691884][T17440] loop6: detected capacity change from 0 to 164
[  343.692169][T17439] lo speed is unknown, defaulting to 1000
[  343.708997][T17440] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  343.738220][T17440] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  343.746932][T17440] Symlink component flag not implemented
[  343.752609][T17440] Symlink component flag not implemented
[  343.759531][T17440] Symlink component flag not implemented (7)
[  343.765540][T17440] Symlink component flag not implemented (116)
[  343.821364][T17445] net_ratelimit: 10 callbacks suppressed
[  343.821378][T17445] veth0: mtu less than device minimum
[  343.912444][   T29] kauditd_printk_skb: 135 callbacks suppressed
[  343.912461][   T29] audit: type=1326 audit(343.884:10346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17452 comm="syz.1.4246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87442ebe9 code=0x7ffc0000
[  343.945707][   T29] audit: type=1326 audit(343.884:10347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17452 comm="syz.1.4246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87442ebe9 code=0x7ffc0000
[  343.968900][   T29] audit: type=1326 audit(343.914:10348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17452 comm="syz.1.4246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fc87442ebe9 code=0x7ffc0000
[  344.000532][   T29] audit: type=1326 audit(343.914:10349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17452 comm="syz.1.4246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87442ebe9 code=0x7ffc0000
[  344.024050][   T29] audit: type=1326 audit(343.914:10350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17452 comm="syz.1.4246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87442ebe9 code=0x7ffc0000
[  344.074260][   T29] audit: type=1326 audit(344.014:10351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17452 comm="syz.1.4246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fc87442ebe9 code=0x7ffc0000
[  344.097377][   T29] audit: type=1326 audit(344.014:10352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17452 comm="syz.1.4246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87442ebe9 code=0x7ffc0000
[  344.120487][   T29] audit: type=1326 audit(344.014:10353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17452 comm="syz.1.4246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87442ebe9 code=0x7ffc0000
[  344.143555][   T29] audit: type=1326 audit(344.014:10354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17452 comm="syz.1.4246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fc87442ebe9 code=0x7ffc0000
[  344.166571][   T29] audit: type=1326 audit(344.024:10355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17452 comm="syz.1.4246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87442ebe9 code=0x7ffc0000
[  344.248754][T17469] loop6: detected capacity change from 0 to 164
[  344.266523][T17469] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  344.275646][T17469] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  344.284982][T17469] Symlink component flag not implemented
[  344.290674][T17469] Symlink component flag not implemented
[  344.306638][T17469] Symlink component flag not implemented (7)
[  344.312785][T17469] Symlink component flag not implemented (116)
[  344.359218][T17475] __nla_validate_parse: 6 callbacks suppressed
[  344.359231][T17475] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4253'.
[  345.440445][T17505] lo speed is unknown, defaulting to 1000
[  345.536930][T17511] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4265'.
[  345.556869][T17511] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  345.566696][T17512] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4263'.
[  345.657279][T17511] batman_adv: batadv0: Removing interface: batadv_slave_1
[  345.700931][T17517] netlink: 'syz.2.4267': attribute type 21 has an invalid length.
[  345.737946][T17517] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4267'.
[  345.747042][T17517] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4267'.
[  346.210245][T17541] lo speed is unknown, defaulting to 1000
[  346.220447][T17542] loop5: detected capacity change from 0 to 164
[  346.235578][T17542] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  346.252483][T17536] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  346.261782][T17536] Symlink component flag not implemented
[  346.267429][T17536] Symlink component flag not implemented
[  346.274219][T17536] Symlink component flag not implemented (7)
[  346.280277][T17536] Symlink component flag not implemented (116)
[  346.286706][T17539] lo speed is unknown, defaulting to 1000
[  346.441700][T17547] lo speed is unknown, defaulting to 1000
[  346.659387][T17553] lo speed is unknown, defaulting to 1000
[  346.761978][T17569] lo speed is unknown, defaulting to 1000
[  347.135059][T17575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4288'.
[  347.751437][T17610] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4300'.
[  348.052040][T17613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4301'.
[  348.130091][T17622] lo speed is unknown, defaulting to 1000
[  348.141505][T17616] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4302'.
[  348.251432][T17636] netlink: 'syz.1.4310': attribute type 21 has an invalid length.
[  348.259995][T17636] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4310'.
[  348.373285][T17647] loop2: detected capacity change from 0 to 128
[  348.411143][T17650] netlink: 'syz.0.4316': attribute type 21 has an invalid length.
[  348.519706][T17663] netlink: 'syz.2.4322': attribute type 21 has an invalid length.
[  348.571339][T17666] loop2: detected capacity change from 0 to 8192
[  348.578739][T17666] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  349.125893][T17686] team0 (unregistering): Port device team_slave_0 removed
[  349.140304][T17686] team0 (unregistering): Port device team_slave_1 removed
[  349.170513][T17687] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  349.177952][T17687] batadv0: mtu less than device minimum
[  349.183948][T17687] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-208)
[  349.194846][T17687] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-208)
[  349.205520][T17687] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-208)
[  349.216232][T17687] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-208)
[  349.226895][T17687] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-208)
[  349.237574][T17687] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-208)
[  349.248299][T17687] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-208)
[  349.258866][T17687] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-208)
[  349.269733][T17687] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-208)
[  349.283860][T17687] batman_adv: batadv0: Removing interface: batadv_slave_0
[  349.296350][T17687] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  349.310837][T17687] batman_adv: batadv0: Removing interface: batadv_slave_1
[  349.319141][T17687] batman_adv: batadv0: Interface deactivated: dummy0
[  349.325827][T17687] batman_adv: batadv0: Removing interface: dummy0
[  349.516305][T17695] lo speed is unknown, defaulting to 1000
[  349.533934][T17705] loop1: detected capacity change from 0 to 164
[  349.541625][T17704] loop6: detected capacity change from 0 to 128
[  349.545538][T17705] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  349.562743][T17705] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  349.572970][T17705] Symlink component flag not implemented
[  349.578691][T17705] Symlink component flag not implemented
[  349.584845][T17705] Symlink component flag not implemented (7)
[  349.591218][T17705] Symlink component flag not implemented (116)
[  349.596217][T17704] __nla_validate_parse: 13 callbacks suppressed
[  349.596235][T17704] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4338'.
[  349.612838][T17704] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4338'.
[  349.618333][T17708] netlink: 'syz.2.4339': attribute type 21 has an invalid length.
[  349.630773][T17708] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4339'.
[  349.639956][T17708] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4339'.
[  349.700014][   T29] kauditd_printk_skb: 124 callbacks suppressed
[  349.700031][   T29] audit: type=1326 audit(349.674:10480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17709 comm="syz.6.4340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8451a7ebe9 code=0x7ffc0000
[  349.729380][   T29] audit: type=1326 audit(349.674:10481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17709 comm="syz.6.4340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8451a7ebe9 code=0x7ffc0000
[  349.752484][   T29] audit: type=1326 audit(349.674:10482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17709 comm="syz.6.4340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8451a7ebe9 code=0x7ffc0000
[  349.775707][   T29] audit: type=1326 audit(349.674:10483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17709 comm="syz.6.4340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8451a7ebe9 code=0x7ffc0000
[  349.798924][   T29] audit: type=1326 audit(349.674:10484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17709 comm="syz.6.4340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8451a7ebe9 code=0x7ffc0000
[  349.821990][   T29] audit: type=1326 audit(349.674:10485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17709 comm="syz.6.4340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f8451a7ebe9 code=0x7ffc0000
[  349.839130][T17720] loop6: detected capacity change from 0 to 8192
[  349.844980][   T29] audit: type=1326 audit(349.674:10486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17709 comm="syz.6.4340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8451a7ebe9 code=0x7ffc0000
[  349.874259][   T29] audit: type=1326 audit(349.674:10487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17709 comm="syz.6.4340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8451a7ebe9 code=0x7ffc0000
[  349.897262][   T29] audit: type=1326 audit(349.674:10488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17709 comm="syz.6.4340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f8451a7ebe9 code=0x7ffc0000
[  349.900007][T17720] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  349.921402][   T29] audit: type=1326 audit(349.674:10489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17709 comm="syz.6.4340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8451a7ebe9 code=0x7ffc0000
[  350.370773][T17740] netlink: 'syz.5.4352': attribute type 21 has an invalid length.
[  350.441308][T17740] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4352'.
[  350.450468][T17740] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4352'.
[  350.541954][T17747] loop1: detected capacity change from 0 to 164
[  350.590313][T17747] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  350.654224][T17746] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4351'.
[  350.663245][T17746] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4351'.
[  350.677416][T17743] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  350.691362][T17743] Symlink component flag not implemented
[  350.697036][T17743] Symlink component flag not implemented
[  350.707944][T17752] serio: Serial port ptm0
[  350.721594][T17743] Symlink component flag not implemented (7)
[  350.727764][T17743] Symlink component flag not implemented (116)
[  350.780233][T17752] lo speed is unknown, defaulting to 1000
[  350.837658][T17758] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4357'.
[  350.869851][T17755] serio: Serial port ptm1
[  350.977028][T17775] loop5: detected capacity change from 0 to 512
[  351.054294][T17775] EXT4-fs (loop5): too many log groups per flexible block group
[  351.062212][T17775] EXT4-fs (loop5): failed to initialize mballoc (-12)
[  351.070441][T17775] EXT4-fs (loop5): mount failed
[  351.169646][T17782] lo speed is unknown, defaulting to 1000
[  351.904765][T17798] loop1: detected capacity change from 0 to 8192
[  351.928911][T17798] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  352.325081][T17805] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4371'.
[  352.605136][T17814] netlink: 'syz.5.4374': attribute type 21 has an invalid length.
[  352.631109][T17816] FAULT_INJECTION: forcing a failure.
[  352.631109][T17816] name failslab, interval 1, probability 0, space 0, times 0
[  352.643806][T17816] CPU: 1 UID: 0 PID: 17816 Comm: syz.5.4375 Tainted: G        W           6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(voluntary) 
[  352.643869][T17816] Tainted: [W]=WARN
[  352.643876][T17816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  352.643887][T17816] Call Trace:
[  352.643895][T17816]  <TASK>
[  352.643903][T17816]  __dump_stack+0x1d/0x30
[  352.643944][T17816]  dump_stack_lvl+0xe8/0x140
[  352.643967][T17816]  dump_stack+0x15/0x1b
[  352.643986][T17816]  should_fail_ex+0x265/0x280
[  352.644058][T17816]  should_failslab+0x8c/0xb0
[  352.644103][T17816]  __kmalloc_noprof+0xa5/0x3e0
[  352.644134][T17816]  ? tcp_sigpool_alloc_ahash+0x80/0x660
[  352.644259][T17816]  tcp_sigpool_alloc_ahash+0x80/0x660
[  352.644341][T17816]  tcp_md5_alloc_sigpool+0x1b/0x60
[  352.644373][T17816]  tcp_md5_do_add+0x7f/0x1c0
[  352.644397][T17816]  tcp_v6_parse_md5_keys+0x429/0x450
[  352.644436][T17816]  do_tcp_setsockopt+0xf24/0x1670
[  352.644472][T17816]  ? selinux_socket_setsockopt+0x1ad/0x1e0
[  352.644503][T17816]  tcp_setsockopt+0x51/0xb0
[  352.644531][T17816]  sock_common_setsockopt+0x66/0x80
[  352.644624][T17816]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  352.644652][T17816]  __sys_setsockopt+0x181/0x200
[  352.644722][T17816]  __x64_sys_setsockopt+0x64/0x80
[  352.644801][T17816]  x64_sys_call+0x20ec/0x2ff0
[  352.644854][T17816]  do_syscall_64+0xd2/0x200
[  352.644880][T17816]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  352.644965][T17816]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  352.644989][T17816]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.645009][T17816] RIP: 0033:0x7f5c5923ebe9
[  352.645023][T17816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  352.645116][T17816] RSP: 002b:00007f5c57ca7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  352.645188][T17816] RAX: ffffffffffffffda RBX: 00007f5c59465fa0 RCX: 00007f5c5923ebe9
[  352.645202][T17816] RDX: 000000000000000e RSI: 0000000000000006 RDI: 0000000000000003
[  352.645215][T17816] RBP: 00007f5c57ca7090 R08: 00000000000000d8 R09: 0000000000000000
[  352.645230][T17816] R10: 0000200000001180 R11: 0000000000000246 R12: 0000000000000001
[  352.645281][T17816] R13: 00007f5c59466038 R14: 00007f5c59465fa0 R15: 00007ffd4f618758
[  352.645302][T17816]  </TASK>
[  352.983115][T17829] loop2: detected capacity change from 0 to 512
[  353.001054][T17829] EXT4-fs (loop2): too many log groups per flexible block group
[  353.008858][T17829] EXT4-fs (loop2): failed to initialize mballoc (-12)
[  353.017324][T17831] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  353.017973][T17829] EXT4-fs (loop2): mount failed
[  353.030490][T17831] batman_adv: batadv0: Removing interface: batadv_slave_1
[  353.317724][T17857] FAULT_INJECTION: forcing a failure.
[  353.317724][T17857] name failslab, interval 1, probability 0, space 0, times 0
[  353.330459][T17857] CPU: 0 UID: 0 PID: 17857 Comm: syz.1.4390 Tainted: G        W           6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(voluntary) 
[  353.330500][T17857] Tainted: [W]=WARN
[  353.330508][T17857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  353.330521][T17857] Call Trace:
[  353.330529][T17857]  <TASK>
[  353.330605][T17857]  __dump_stack+0x1d/0x30
[  353.330625][T17857]  dump_stack_lvl+0xe8/0x140
[  353.330645][T17857]  dump_stack+0x15/0x1b
[  353.330663][T17857]  should_fail_ex+0x265/0x280
[  353.330700][T17857]  should_failslab+0x8c/0xb0
[  353.330801][T17857]  kmem_cache_alloc_noprof+0x50/0x310
[  353.330833][T17857]  ? getname_flags+0x80/0x3b0
[  353.330908][T17857]  getname_flags+0x80/0x3b0
[  353.330939][T17857]  path_setxattrat+0x223/0x310
[  353.330983][T17857]  __x64_sys_lsetxattr+0x71/0x90
[  353.331007][T17857]  x64_sys_call+0x2877/0x2ff0
[  353.331081][T17857]  do_syscall_64+0xd2/0x200
[  353.331106][T17857]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  353.331174][T17857]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  353.331196][T17857]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.331218][T17857] RIP: 0033:0x7fc87442ebe9
[  353.331234][T17857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  353.331253][T17857] RSP: 002b:00007fc872e97038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
[  353.331281][T17857] RAX: ffffffffffffffda RBX: 00007fc874655fa0 RCX: 00007fc87442ebe9
[  353.331296][T17857] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000200000000000
[  353.331309][T17857] RBP: 00007fc872e97090 R08: 0000000000000000 R09: 0000000000000000
[  353.331323][T17857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  353.331338][T17857] R13: 00007fc874656038 R14: 00007fc874655fa0 R15: 00007ffc927cf0f8
[  353.331360][T17857]  </TASK>
[  353.542678][T17862] netlink: 'syz.1.4392': attribute type 21 has an invalid length.
[  353.594022][T17869] loop1: detected capacity change from 0 to 164
[  353.601235][T17869] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  353.611495][T17869] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  353.620039][T17869] Symlink component flag not implemented
[  353.625714][T17869] Symlink component flag not implemented
[  353.631478][T17869] Symlink component flag not implemented (7)
[  353.637464][T17869] Symlink component flag not implemented (116)
[  353.795582][T17872] lo speed is unknown, defaulting to 1000
[  353.882037][T17888] SELinux:  Context system_u:object_r:tun_tap_device_t:s0 is not valid (left unmapped).
[  353.995337][T17896] netlink: 'syz.6.4404': attribute type 21 has an invalid length.
[  354.099898][T17908] FAULT_INJECTION: forcing a failure.
[  354.099898][T17908] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  354.113017][T17908] CPU: 1 UID: 0 PID: 17908 Comm: syz.0.4410 Tainted: G        W           6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(voluntary) 
[  354.113052][T17908] Tainted: [W]=WARN
[  354.113058][T17908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  354.113092][T17908] Call Trace:
[  354.113098][T17908]  <TASK>
[  354.113106][T17908]  __dump_stack+0x1d/0x30
[  354.113128][T17908]  dump_stack_lvl+0xe8/0x140
[  354.113151][T17908]  dump_stack+0x15/0x1b
[  354.113171][T17908]  should_fail_ex+0x265/0x280
[  354.113239][T17908]  should_fail+0xb/0x20
[  354.113272][T17908]  should_fail_usercopy+0x1a/0x20
[  354.113294][T17908]  _copy_from_user+0x1c/0xb0
[  354.113401][T17908]  ___sys_sendmsg+0xc1/0x1d0
[  354.113457][T17908]  __x64_sys_sendmsg+0xd4/0x160
[  354.113568][T17908]  x64_sys_call+0x191e/0x2ff0
[  354.113591][T17908]  do_syscall_64+0xd2/0x200
[  354.113618][T17908]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  354.113652][T17908]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  354.113678][T17908]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.113711][T17908] RIP: 0033:0x7f7736c2ebe9
[  354.113724][T17908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  354.113742][T17908] RSP: 002b:00007f7735697038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  354.113760][T17908] RAX: ffffffffffffffda RBX: 00007f7736e55fa0 RCX: 00007f7736c2ebe9
[  354.113774][T17908] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  354.113790][T17908] RBP: 00007f7735697090 R08: 0000000000000000 R09: 0000000000000000
[  354.113803][T17908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  354.113854][T17908] R13: 00007f7736e56038 R14: 00007f7736e55fa0 R15: 00007fff35422838
[  354.113872][T17908]  </TASK>
[  354.360844][T17920] netlink: 'syz.5.4415': attribute type 21 has an invalid length.
[  354.744676][   T29] kauditd_printk_skb: 240 callbacks suppressed
[  354.744687][   T29] audit: type=1400 audit(354.714:10730): avc:  denied  { setopt } for  pid=17939 comm="syz.1.4422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  354.796324][   T29] audit: type=1400 audit(354.764:10731): avc:  denied  { getopt } for  pid=17939 comm="syz.1.4422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  354.888311][   T29] audit: type=1400 audit(354.854:10732): avc:  denied  { getopt } for  pid=17943 comm="syz.5.4423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  355.056155][T17964] __nla_validate_parse: 13 callbacks suppressed
[  355.056172][T17964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4429'.
[  355.141240][T17966] lo speed is unknown, defaulting to 1000
[  355.410234][T17984] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  355.410234][T17984]    program syz.6.4436 not setting count and/or reply_len properly
[  355.531693][T17994] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4440'.
[  355.992593][T18006] lo speed is unknown, defaulting to 1000
[  356.417965][   T29] audit: type=1326 audit(356.384:10733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18011 comm="syz.6.4446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8451a7ebe9 code=0x7ffc0000
[  356.456264][   T29] audit: type=1326 audit(356.414:10734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18011 comm="syz.6.4446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f8451a7ebe9 code=0x7ffc0000
[  356.479468][   T29] audit: type=1326 audit(356.414:10735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18011 comm="syz.6.4446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8451a7ebe9 code=0x7ffc0000
[  356.502675][   T29] audit: type=1326 audit(356.414:10736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18011 comm="syz.6.4446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8451a7ebe9 code=0x7ffc0000
[  356.508642][T18015] loop6: detected capacity change from 0 to 164
[  356.525713][   T29] audit: type=1326 audit(356.414:10737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18011 comm="syz.6.4446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f8451a7ebe9 code=0x7ffc0000
[  356.525745][   T29] audit: type=1326 audit(356.414:10738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18011 comm="syz.6.4446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8451a7ebe9 code=0x7ffc0000
[  356.578031][   T29] audit: type=1326 audit(356.414:10739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18011 comm="syz.6.4446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f8451a7ebe9 code=0x7ffc0000
[  356.609258][T18015] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  356.626487][T18015] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  356.635249][T18015] Symlink component flag not implemented
[  356.641020][T18015] Symlink component flag not implemented
[  356.646782][T18015] Symlink component flag not implemented (7)
[  356.652782][T18015] Symlink component flag not implemented (116)
[  356.705941][T18017] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4445'.
[  356.727353][T18029] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4452'.
[  356.745470][T18031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4453'.
[  356.754528][T18031] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4453'.
[  356.998081][T18048] loop1: detected capacity change from 0 to 512
[  357.006647][T18048] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  357.015155][T18048] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  357.023724][T18048] EXT4-fs (loop1): 1 truncate cleaned up
[  357.029893][T18048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  357.045253][T18048] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  357.061365][T18048] EXT4-fs (loop1): Remounting filesystem read-only
[  357.314649][T12988] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  357.332426][T18059] loop1: detected capacity change from 0 to 128
[  357.383718][T18059] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4461'.
[  357.392777][T18059] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4461'.
[  357.465027][T18063] loop1: detected capacity change from 0 to 164
[  357.472397][T18063] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  357.481320][T18063] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  357.489803][T18063] Symlink component flag not implemented
[  357.495476][T18063] Symlink component flag not implemented
[  357.501577][T18063] Symlink component flag not implemented (7)
[  357.507563][T18063] Symlink component flag not implemented (116)
[  357.594038][T18069] loop1: detected capacity change from 0 to 164
[  357.616498][T18069] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  357.632517][T18065] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  357.641750][T18065] Symlink component flag not implemented
[  357.647431][T18065] Symlink component flag not implemented
[  357.654209][T18065] Symlink component flag not implemented (7)
[  357.660255][T18065] Symlink component flag not implemented (116)
[  357.744001][T18085] loop5: detected capacity change from 0 to 128
[  357.800862][T18085] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4472'.
[  357.804414][T18092] loop1: detected capacity change from 0 to 164
[  357.810247][T18085] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4472'.
[  357.826099][T18092] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  357.834571][T18093] loop6: detected capacity change from 0 to 164
[  357.838664][T18092] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  357.851626][T18092] Symlink component flag not implemented
[  357.857272][T18092] Symlink component flag not implemented
[  357.864469][T18093] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  357.874327][T18092] Symlink component flag not implemented (7)
[  357.880425][T18092] Symlink component flag not implemented (116)
[  357.890179][T18093] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  357.909887][T18093] Symlink component flag not implemented
[  357.915578][T18093] Symlink component flag not implemented
[  357.921463][T18093] Symlink component flag not implemented (7)
[  357.927462][T18093] Symlink component flag not implemented (116)
[  358.043332][T18115] serio: Serial port ptm1
[  358.079369][T18125] loop5: detected capacity change from 0 to 128
[  358.231332][T18148] loop6: detected capacity change from 0 to 164
[  358.238703][T18148] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  358.248438][T18148] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  358.257022][T18148] Symlink component flag not implemented
[  358.262783][T18148] Symlink component flag not implemented
[  358.269056][T18148] Symlink component flag not implemented (7)
[  358.275054][T18148] Symlink component flag not implemented (116)
[  358.573097][T18181] loop5: detected capacity change from 0 to 164
[  358.580631][T18181] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  358.589355][T18181] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  358.598680][T18181] Symlink component flag not implemented
[  358.604339][T18181] Symlink component flag not implemented
[  358.610134][T18181] Symlink component flag not implemented (7)
[  358.616155][T18181] Symlink component flag not implemented (116)
[  358.931918][T18203] loop1: detected capacity change from 0 to 164
[  358.939438][T18203] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  358.948348][T18203] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  358.956881][T18203] Symlink component flag not implemented
[  358.962654][T18203] Symlink component flag not implemented
[  358.970542][T18203] Symlink component flag not implemented (7)
[  358.976564][T18203] Symlink component flag not implemented (116)
[  359.060473][T18217] netlink: 'syz.1.4523': attribute type 21 has an invalid length.
[  359.108510][T18220] lo speed is unknown, defaulting to 1000
[  359.175311][T18227] serio: Serial port ptm0
[  359.492456][T18239] loop6: detected capacity change from 0 to 512
[  359.502776][T18239] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2
[  359.511553][T18239] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2
[  359.521940][T18239] EXT4-fs (loop6): 1 truncate cleaned up
[  359.529181][T18239] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  359.545021][T18239] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  359.575507][T18239] EXT4-fs (loop6): Remounting filesystem read-only
[  359.655832][T14601] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  359.993965][T18260] netlink: 'syz.2.4537': attribute type 21 has an invalid length.
[  360.005535][   T29] kauditd_printk_skb: 201 callbacks suppressed
[  360.005549][   T29] audit: type=1326 audit(359.974:10941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18261 comm="syz.0.4538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7736c2ebe9 code=0x7ffc0000
[  360.032363][T18264] lo speed is unknown, defaulting to 1000
[  360.049264][   T29] audit: type=1326 audit(360.014:10942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18261 comm="syz.0.4538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f7736c2ebe9 code=0x7ffc0000
[  360.072375][   T29] audit: type=1326 audit(360.014:10943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18261 comm="syz.0.4538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7736c2ebe9 code=0x7ffc0000
[  360.095451][   T29] audit: type=1326 audit(360.014:10944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18261 comm="syz.0.4538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f7736c2ebe9 code=0x7ffc0000
[  360.118526][   T29] audit: type=1326 audit(360.014:10945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18261 comm="syz.0.4538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7736c2ebe9 code=0x7ffc0000
[  360.141542][   T29] audit: type=1326 audit(360.014:10946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18261 comm="syz.0.4538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f7736c2ebe9 code=0x7ffc0000
[  360.164539][   T29] audit: type=1326 audit(360.014:10947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18261 comm="syz.0.4538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7736c2ebe9 code=0x7ffc0000
[  360.261683][T18273] __nla_validate_parse: 18 callbacks suppressed
[  360.261701][T18273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4541'.
[  360.473160][T18279] loop1: detected capacity change from 0 to 512
[  360.482804][T18279] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  360.491168][T18279] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  360.500876][T18279] EXT4-fs (loop1): 1 truncate cleaned up
[  360.507356][T18279] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  360.522527][T18279] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  360.537509][T18279] EXT4-fs (loop1): Remounting filesystem read-only
[  360.595211][T18285] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4546'.
[  360.600459][T18282] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4545'.
[  360.617113][   T29] audit: type=1107 audit(360.584:10948): pid=18281 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='¬[ë'
[  360.659690][T18289] loop5: detected capacity change from 0 to 164
[  360.666924][T12988] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  360.682099][T18289] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  360.684539][T18285] serio: Serial port ptm0
[  360.695622][T18289] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  360.709354][T18289] Symlink component flag not implemented
[  360.715212][T18289] Symlink component flag not implemented
[  360.721406][T18289] Symlink component flag not implemented (7)
[  360.727485][T18289] Symlink component flag not implemented (116)
[  360.747152][   T29] audit: type=1326 audit(360.714:10949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18294 comm="syz.5.4550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5923ebe9 code=0x7ffc0000
[  360.771411][   T29] audit: type=1326 audit(360.714:10950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18294 comm="syz.5.4550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5923ebe9 code=0x7ffc0000
[  360.803150][T18299] loop5: detected capacity change from 0 to 164
[  360.810657][T18299] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  360.819531][T18299] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  360.827969][T18299] Symlink component flag not implemented
[  360.833609][T18299] Symlink component flag not implemented
[  360.839353][T18299] Symlink component flag not implemented (7)
[  360.845318][T18299] Symlink component flag not implemented (116)
[  360.944206][T18306] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4554'.
[  361.452432][T18316] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4557'.
[  361.476250][T18320] loop6: detected capacity change from 0 to 128
[  361.530947][T18320] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4558'.
[  361.539982][T18320] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4558'.
[  361.680233][T18331] loop6: detected capacity change from 0 to 164
[  361.687392][T18331] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  361.696985][T18331] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  361.709389][T18331] Symlink component flag not implemented
[  361.715046][T18331] Symlink component flag not implemented
[  361.721090][T18331] Symlink component flag not implemented (7)
[  361.727077][T18331] Symlink component flag not implemented (116)
[  361.733683][T18322] loop1: detected capacity change from 0 to 512
[  361.749956][T18322] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  361.763118][T18322] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  361.773530][T18322] EXT4-fs (loop1): 1 truncate cleaned up
[  361.780040][T18322] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  361.793914][T18322] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  361.808631][T18322] EXT4-fs (loop1): Remounting filesystem read-only
[  361.838251][T18339] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4565'.
[  361.890417][T12988] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  362.043574][T18358] netlink: 'syz.0.4574': attribute type 21 has an invalid length.
[  362.053902][T18361] loop1: detected capacity change from 0 to 164
[  362.061254][T18361] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  362.069583][T18358] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4574'.
[  362.070113][T18361] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  362.078770][T18358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4574'.
[  362.096866][T18361] Symlink component flag not implemented
[  362.102583][T18361] Symlink component flag not implemented
[  362.108623][T18361] Symlink component flag not implemented (7)
[  362.114787][T18361] Symlink component flag not implemented (116)
[  362.397916][T18378] lo speed is unknown, defaulting to 1000
[  363.132673][T18398] netlink: 'syz.5.4586': attribute type 21 has an invalid length.
[  363.156715][T18402] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  363.180591][T18402] batman_adv: batadv0: Removing interface: batadv_slave_1
[  363.225857][T18411] loop6: detected capacity change from 0 to 164
[  363.233215][T18411] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  363.244038][T18411] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  363.252704][T18411] Symlink component flag not implemented
[  363.258445][T18411] Symlink component flag not implemented
[  363.264894][T18411] Symlink component flag not implemented (7)
[  363.270936][T18411] Symlink component flag not implemented (116)
[  363.579760][T18442] lo speed is unknown, defaulting to 1000
[  363.764845][T18448] loop6: detected capacity change from 0 to 164
[  363.775513][T18448] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  363.811441][T18448] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  363.828886][T18448] Symlink component flag not implemented
[  363.834568][T18448] Symlink component flag not implemented
[  363.856682][T18448] Symlink component flag not implemented (7)
[  363.862851][T18448] Symlink component flag not implemented (116)
[  364.256898][T18481] netlink: 'syz.2.4619': attribute type 8 has an invalid length.
[  364.329965][T18489] loop1: detected capacity change from 0 to 164
[  364.347731][T18489] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  364.357427][T18489] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  364.366811][T18489] Symlink component flag not implemented
[  364.372493][T18489] Symlink component flag not implemented
[  364.379037][T18489] Symlink component flag not implemented (7)
[  364.385120][T18489] Symlink component flag not implemented (116)
[  364.464634][T18501] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  364.506645][T18501] batman_adv: batadv0: Removing interface: batadv_slave_1
[  364.556361][T18509] FAULT_INJECTION: forcing a failure.
[  364.556361][T18509] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  364.569565][T18509] CPU: 1 UID: 0 PID: 18509 Comm: syz.1.4627 Tainted: G        W           6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(voluntary) 
[  364.569627][T18509] Tainted: [W]=WARN
[  364.569636][T18509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  364.569650][T18509] Call Trace:
[  364.569656][T18509]  <TASK>
[  364.569716][T18509]  __dump_stack+0x1d/0x30
[  364.569740][T18509]  dump_stack_lvl+0xe8/0x140
[  364.569763][T18509]  dump_stack+0x15/0x1b
[  364.569783][T18509]  should_fail_ex+0x265/0x280
[  364.569822][T18509]  should_fail+0xb/0x20
[  364.569855][T18509]  should_fail_usercopy+0x1a/0x20
[  364.569894][T18509]  _copy_from_user+0x1c/0xb0
[  364.569922][T18509]  bpf_test_init+0xdf/0x160
[  364.569953][T18509]  bpf_prog_test_run_xdp+0x274/0x910
[  364.570016][T18509]  ? kstrtouint+0x76/0xc0
[  364.570075][T18509]  ? __rcu_read_unlock+0x4f/0x70
[  364.570106][T18509]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  364.570138][T18509]  bpf_prog_test_run+0x227/0x390
[  364.570229][T18509]  __sys_bpf+0x4b9/0x7b0
[  364.570262][T18509]  __x64_sys_bpf+0x41/0x50
[  364.570287][T18509]  x64_sys_call+0x2aea/0x2ff0
[  364.570382][T18509]  do_syscall_64+0xd2/0x200
[  364.570405][T18509]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  364.570430][T18509]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  364.570475][T18509]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.570498][T18509] RIP: 0033:0x7fc87442ebe9
[  364.570513][T18509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  364.570544][T18509] RSP: 002b:00007fc872e97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  364.570556][T18509] RAX: ffffffffffffffda RBX: 00007fc874655fa0 RCX: 00007fc87442ebe9
[  364.570564][T18509] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  364.570571][T18509] RBP: 00007fc872e97090 R08: 0000000000000000 R09: 0000000000000000
[  364.570579][T18509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  364.570586][T18509] R13: 00007fc874656038 R14: 00007fc874655fa0 R15: 00007ffc927cf0f8
[  364.570649][T18509]  </TASK>
[  365.031736][T18518] lo speed is unknown, defaulting to 1000
[  365.255745][T18522] 9pnet_fd: Insufficient options for proto=fd
[  365.309113][T18524] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  365.352799][   T29] kauditd_printk_skb: 146 callbacks suppressed
[  365.352813][   T29] audit: type=1400 audit(365.324:11097): avc:  denied  { listen } for  pid=18523 comm=ACED scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  365.387964][   T29] audit: type=1326 audit(365.354:11098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18525 comm="syz.2.4633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46d021ebe9 code=0x7ffc0000
[  365.410982][   T29] audit: type=1326 audit(365.354:11099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18525 comm="syz.2.4633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46d021ebe9 code=0x7ffc0000
[  365.434210][   T29] audit: type=1326 audit(365.354:11100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18525 comm="syz.2.4633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f46d021ebe9 code=0x7ffc0000
[  365.457595][   T29] audit: type=1326 audit(365.354:11101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18525 comm="syz.2.4633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46d021ebe9 code=0x7ffc0000
[  365.480699][   T29] audit: type=1326 audit(365.354:11102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18525 comm="syz.2.4633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46d021ebe9 code=0x7ffc0000
[  365.503677][   T29] audit: type=1326 audit(365.354:11103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18525 comm="syz.2.4633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f46d021ebe9 code=0x7ffc0000
[  365.526710][   T29] audit: type=1326 audit(365.354:11104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18525 comm="syz.2.4633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46d021ebe9 code=0x7ffc0000
[  365.549832][   T29] audit: type=1326 audit(365.354:11105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18525 comm="syz.2.4633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f46d021ebe9 code=0x7ffc0000
[  365.572711][   T29] audit: type=1326 audit(365.354:11106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18525 comm="syz.2.4633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46d021ebe9 code=0x7ffc0000
[  365.614306][ T1103] hid_parser_main: 39 callbacks suppressed
[  365.614325][ T1103] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  365.627667][ T1103] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  365.635259][ T1103] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  365.642695][ T1103] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  365.650259][ T1103] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  365.657666][ T1103] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  365.665075][T18538] lo speed is unknown, defaulting to 1000
[  365.670874][ T1103] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  365.678322][ T1103] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  365.683920][T18541] FAULT_INJECTION: forcing a failure.
[  365.683920][T18541] name failslab, interval 1, probability 0, space 0, times 0
[  365.685708][ T1103] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  365.698343][T18541] CPU: 0 UID: 0 PID: 18541 Comm: syz.6.4639 Tainted: G        W           6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(voluntary) 
[  365.698380][T18541] Tainted: [W]=WARN
[  365.698388][T18541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  365.698401][T18541] Call Trace:
[  365.698410][T18541]  <TASK>
[  365.698419][T18541]  __dump_stack+0x1d/0x30
[  365.698476][T18541]  dump_stack_lvl+0xe8/0x140
[  365.698561][T18541]  dump_stack+0x15/0x1b
[  365.698578][T18541]  should_fail_ex+0x265/0x280
[  365.698614][T18541]  ? nd_alloc_stack+0x50/0xa0
[  365.698644][T18541]  should_failslab+0x8c/0xb0
[  365.698717][T18541]  __kmalloc_cache_noprof+0x4c/0x320
[  365.698748][T18541]  ? __pfx_shmem_get_link+0x10/0x10
[  365.698777][T18541]  nd_alloc_stack+0x50/0xa0
[  365.698850][T18541]  pick_link+0x78e/0x830
[  365.698878][T18541]  ? __d_lookup_rcu+0x248/0x2a0
[  365.698912][T18541]  step_into+0x7b6/0x820
[  365.699015][T18541]  ? inode_permission+0x106/0x310
[  365.699046][T18541]  link_path_walk+0x571/0x900
[  365.699078][T18541]  path_lookupat+0x63/0x2a0
[  365.699121][T18541]  filename_lookup+0x147/0x340
[  365.699199][T18541]  ? __pfx_shmem_put_link+0x10/0x10
[  365.699226][T18541]  ? __pfx_shmem_put_link+0x10/0x10
[  365.699257][T18541]  user_path_at+0x3e/0x130
[  365.699291][T18541]  __se_sys_mount+0x25b/0x2e0
[  365.699382][T18541]  ? fput+0x8f/0xc0
[  365.699521][T18541]  __x64_sys_mount+0x67/0x80
[  365.699545][T18541]  x64_sys_call+0x2b4d/0x2ff0
[  365.699569][T18541]  do_syscall_64+0xd2/0x200
[  365.699594][T18541]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  365.699620][T18541]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  365.699702][T18541]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.699789][T18541] RIP: 0033:0x7f8451a7ebe9
[  365.699807][T18541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  365.699827][T18541] RSP: 002b:00007f84504e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  365.699847][T18541] RAX: ffffffffffffffda RBX: 00007f8451ca5fa0 RCX: 00007f8451a7ebe9
[  365.699861][T18541] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000000
[  365.699875][T18541] RBP: 00007f84504e7090 R08: 0000000000000000 R09: 0000000000000000
[  365.699911][T18541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  365.699925][T18541] R13: 00007f8451ca6038 R14: 00007f8451ca5fa0 R15: 00007ffff315da08
[  365.699949][T18541]  </TASK>
[  365.945132][ T1103] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  366.022145][ T1103] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  366.045795][T18554] netlink: 'syz.5.4643': attribute type 21 has an invalid length.
[  366.067602][T18554] __nla_validate_parse: 10 callbacks suppressed
[  366.067620][T18554] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4643'.
[  366.083090][T18554] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4643'.
[  366.128483][T18558] netlink: 'syz.0.4642': attribute type 21 has an invalid length.
[  366.136424][T18558] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4642'.
[  366.145489][T18558] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4642'.
[  366.156919][T18559] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4644'.
[  366.212336][T18557] lo speed is unknown, defaulting to 1000
[  366.249056][T18570] loop5: detected capacity change from 0 to 164
[  366.256493][T18570] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  366.284284][T18570] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  366.298273][T18571] 9pnet_fd: Insufficient options for proto=fd
[  366.305694][T18570] Symlink component flag not implemented
[  366.311390][T18570] Symlink component flag not implemented
[  366.317110][T18570] Symlink component flag not implemented (7)
[  366.323175][T18570] Symlink component flag not implemented (116)
[  366.821522][T18603] 9pnet_fd: Insufficient options for proto=fd
[  366.899903][T18613] netlink: 'syz.5.4660': attribute type 21 has an invalid length.
[  366.908706][T18613] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4660'.
[  366.917769][T18613] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4660'.
[  367.016540][T18620] netlink: 'syz.5.4663': attribute type 21 has an invalid length.
[  367.024538][T18620] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4663'.
[  367.033721][T18620] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4663'.
[  367.065372][T18623] loop2: detected capacity change from 0 to 164
[  367.079863][T18623] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  367.110394][T18611] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  367.156752][T18611] Symlink component flag not implemented
[  367.162464][T18611] Symlink component flag not implemented
[  367.188196][T18611] Symlink component flag not implemented (7)
[  367.194217][T18611] Symlink component flag not implemented (116)
[  367.316021][T18637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4669'.
[  367.476620][T18643] lo speed is unknown, defaulting to 1000
[  367.546789][T18642] lo speed is unknown, defaulting to 1000
[  368.175048][T18676] loop1: detected capacity change from 0 to 8192
[  368.188402][T18676] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  368.429387][T18687] lo speed is unknown, defaulting to 1000
[  368.889489][T18708] loop2: detected capacity change from 0 to 512
[  368.909643][T18708] EXT4-fs (loop2): too many log groups per flexible block group
[  368.917381][T18708] EXT4-fs (loop2): failed to initialize mballoc (-12)
[  369.017390][T18708] EXT4-fs (loop2): mount failed
[  369.171617][T18719] loop5: detected capacity change from 0 to 164
[  369.192409][T18719] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  369.192885][T18719] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  369.193080][T18719] Symlink component flag not implemented
[  369.193167][T18719] Symlink component flag not implemented
[  369.193208][T18719] Symlink component flag not implemented (7)
[  369.193217][T18719] Symlink component flag not implemented (116)
[  369.211100][T18707] loop6: detected capacity change from 0 to 512
[  369.224140][T18707] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2
[  369.258878][T18707] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2
[  369.267730][T18707] EXT4-fs (loop6): 1 truncate cleaned up
[  369.268152][T18707] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  369.270431][T18707] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  369.270809][T18707] EXT4-fs (loop6): Remounting filesystem read-only
[  369.362567][T18732] loop1: detected capacity change from 0 to 164
[  369.369999][T18732] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  369.378892][T18732] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  369.387276][T18732] Symlink component flag not implemented
[  369.393032][T18732] Symlink component flag not implemented
[  369.398946][T18732] Symlink component flag not implemented (7)
[  369.404933][T18732] Symlink component flag not implemented (116)
[  369.478159][T14601] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  369.504425][T18737] loop1: detected capacity change from 0 to 8192
[  369.511970][T18737] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  369.991880][T18749] lo speed is unknown, defaulting to 1000
[  370.212755][T18758] loop2: detected capacity change from 0 to 164
[  370.262705][T18758] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  370.301732][T18758] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  370.447606][T18758] Symlink component flag not implemented
[  370.453337][T18758] Symlink component flag not implemented
[  370.527620][T18758] Symlink component flag not implemented (7)
[  370.533727][T18758] Symlink component flag not implemented (116)
[  370.678709][   T29] kauditd_printk_skb: 67 callbacks suppressed
[  370.678724][   T29] audit: type=1326 audit(370.654:11174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18772 comm="syz.1.4715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87442ebe9 code=0x7ffc0000
[  370.678751][   T29] audit: type=1326 audit(370.654:11175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18772 comm="syz.1.4715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87442ebe9 code=0x7ffc0000
[  370.679174][   T29] audit: type=1326 audit(370.654:11176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18772 comm="syz.1.4715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc87442ebe9 code=0x7ffc0000
[  370.679257][   T29] audit: type=1326 audit(370.654:11177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18772 comm="syz.1.4715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87442ebe9 code=0x7ffc0000
[  370.685601][   T29] audit: type=1326 audit(370.654:11178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18772 comm="syz.1.4715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fc87442ebe9 code=0x7ffc0000
[  370.685712][   T29] audit: type=1326 audit(370.654:11179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18772 comm="syz.1.4715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87442ebe9 code=0x7ffc0000
[  370.685741][   T29] audit: type=1326 audit(370.654:11180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18772 comm="syz.1.4715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7fc87442ebe9 code=0x7ffc0000
[  370.685837][   T29] audit: type=1326 audit(370.654:11181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18772 comm="syz.1.4715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87442ebe9 code=0x7ffc0000
[  370.685927][   T29] audit: type=1326 audit(370.654:11182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18772 comm="syz.1.4715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fc87442ebe9 code=0x7ffc0000
[  370.685954][   T29] audit: type=1326 audit(370.654:11183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18772 comm="syz.1.4715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87442ebe9 code=0x7ffc0000
[  370.894606][T18771] loop6: detected capacity change from 0 to 512
[  370.931530][T18783] lo speed is unknown, defaulting to 1000
[  370.942961][T18771] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2
[  370.989844][T18771] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2
[  371.001987][T18771] EXT4-fs (loop6): 1 truncate cleaned up
[  371.015715][T18771] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  371.030846][T18790] loop5: detected capacity change from 0 to 164
[  371.041939][T18790] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  371.051599][T18768] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  371.066538][T18790] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  371.075840][T18790] Symlink component flag not implemented
[  371.081573][T18790] Symlink component flag not implemented
[  371.087363][T18790] Symlink component flag not implemented (7)
[  371.093358][T18790] Symlink component flag not implemented (116)
[  371.100640][T18768] EXT4-fs (loop6): Remounting filesystem read-only
[  371.173300][T18794] __nla_validate_parse: 4 callbacks suppressed
[  371.173318][T18794] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4723'.
[  371.209476][T14601] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  371.235708][T18794] serio: Serial port ptm0
[  371.762712][T18819] loop2: detected capacity change from 0 to 512
[  371.779973][T18819] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  371.788903][T18819] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  371.798053][T18819] EXT4-fs (loop2): 1 truncate cleaned up
[  371.804240][T18819] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  371.821970][T18819] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  371.840170][T18819] EXT4-fs (loop2): Remounting filesystem read-only
[  371.956843][T14296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  372.043141][T18834] 9pnet_fd: Insufficient options for proto=fd
[  372.186933][T18849] netlink: 'syz.5.4743': attribute type 21 has an invalid length.
[  372.203966][T18849] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4743'.
[  372.213134][T18849] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4743'.
[  372.245890][T18852] loop1: detected capacity change from 0 to 164
[  372.258876][T18853] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4745'.
[  372.269301][T18852] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  372.280957][T18852] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  372.290433][T18852] Symlink component flag not implemented
[  372.296293][T18852] Symlink component flag not implemented
[  372.316752][T18852] Symlink component flag not implemented (7)
[  372.322811][T18852] Symlink component flag not implemented (116)
[  372.330362][T18857] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4747'.
[  372.381681][T18863] 9pnet_fd: Insufficient options for proto=fd
[  373.340167][T18897] loop5: detected capacity change from 0 to 512
[  373.388606][T18897] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  373.409464][T18911] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4761'.
[  373.433839][T18904] 9pnet_fd: Insufficient options for proto=fd
[  373.441087][T18897] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2
[  373.509338][T18897] EXT4-fs (loop5): 1 truncate cleaned up
[  373.515625][T18897] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  373.527087][T18918] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4764'.
[  373.537628][T18892] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  373.555473][T18892] EXT4-fs (loop5): Remounting filesystem read-only
[  373.559910][T18920] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4765'.
[  373.597560][T18913] serio: Serial port ptm1
[  373.634989][T14090] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  374.352073][T18943] loop2: detected capacity change from 0 to 164
[  374.359563][T18943] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  374.368778][T18943] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  374.377365][T18943] Symlink component flag not implemented
[  374.383045][T18943] Symlink component flag not implemented
[  374.388811][T18943] Symlink component flag not implemented (7)
[  374.394793][T18943] Symlink component flag not implemented (116)
[  374.440369][T18948] 9pnet_fd: Insufficient options for proto=fd
[  374.523665][T18957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4776'.
[  374.759216][T18966] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4781'.
[  375.077302][T18979] netlink: 'syz.1.4786': attribute type 21 has an invalid length.
[  375.190073][T18989] loop1: detected capacity change from 0 to 164
[  375.197526][T18989] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  375.207226][T18989] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  375.216416][T18989] Symlink component flag not implemented
[  375.222166][T18989] Symlink component flag not implemented
[  375.228213][T18989] Symlink component flag not implemented (7)
[  375.234217][T18989] Symlink component flag not implemented (116)
[  375.343853][T19007] netlink: 'syz.2.4798': attribute type 21 has an invalid length.
[  375.462865][T19017] loop2: detected capacity change from 0 to 512
[  375.551444][T19017] EXT4-fs (loop2): too many log groups per flexible block group
[  375.559256][T19017] EXT4-fs (loop2): failed to initialize mballoc (-12)
[  375.560370][T19017] EXT4-fs (loop2): mount failed
[  375.650634][T19024] lo speed is unknown, defaulting to 1000
[  375.697330][T19024] loop6: detected capacity change from 0 to 512
[  375.704123][T19024] EXT4-fs: Ignoring removed mblk_io_submit option
[  375.710561][T19024] EXT4-fs: Ignoring removed bh option
[  375.779164][T19024] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  375.791137][T19024] EXT4-fs (loop6): 1 truncate cleaned up
[  375.797746][T19024] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  375.932616][   T29] kauditd_printk_skb: 183 callbacks suppressed
[  375.932629][   T29] audit: type=1326 audit(375.904:11367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19033 comm="syz.1.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87442ebe9 code=0x7ffc0000
[  375.969709][   T29] audit: type=1326 audit(375.934:11368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19033 comm="syz.1.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87442ebe9 code=0x7ffc0000
[  375.992733][   T29] audit: type=1326 audit(375.934:11369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19033 comm="syz.1.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fc87442ebe9 code=0x7ffc0000
[  376.015940][   T29] audit: type=1326 audit(375.934:11370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19033 comm="syz.1.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87442ebe9 code=0x7ffc0000
[  376.026283][T19038] loop1: detected capacity change from 0 to 1024
[  376.038965][   T29] audit: type=1326 audit(375.934:11371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19033 comm="syz.1.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87442ebe9 code=0x7ffc0000
[  376.038996][   T29] audit: type=1326 audit(375.934:11372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19033 comm="syz.1.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fc87442ebe9 code=0x7ffc0000
[  376.047955][T19038] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  376.068426][   T29] audit: type=1326 audit(375.934:11373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19033 comm="syz.1.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87442ebe9 code=0x7ffc0000
[  376.114090][T19038] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #3: block 1: comm syz.1.4808: lblock 1 mapped to illegal pblock 1 (length 1)
[  376.124761][   T29] audit: type=1326 audit(375.934:11374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19033 comm="syz.1.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87442ebe9 code=0x7ffc0000
[  376.124806][   T29] audit: type=1326 audit(375.934:11375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19033 comm="syz.1.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fc87442ebe9 code=0x7ffc0000
[  376.124831][   T29] audit: type=1326 audit(375.934:11376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19033 comm="syz.1.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87442ebe9 code=0x7ffc0000
[  376.139717][T19038] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.4808: Failed to acquire dquot type 0
[  376.219256][T19038] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.4808: Freeing blocks not in datazone - block = 0, count = 4096
[  376.232768][T19038] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.4808: Invalid inode bitmap blk 0 in block_group 0
[  376.246304][   T51] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  376.262817][T19038] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem
[  376.272717][   T51] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0
[  376.303319][T19038] EXT4-fs (loop1): 1 orphan inode deleted
[  376.310376][T19038] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  376.333646][T14601] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.343637][T19044] __nla_validate_parse: 8 callbacks suppressed
[  376.343653][T19044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4810'.
[  376.361363][T12988] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.454495][T19058] 9pnet_fd: Insufficient options for proto=fd
[  376.537179][T19050] loop6: detected capacity change from 0 to 512
[  376.545366][T19050] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2
[  376.554198][T19050] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2
[  376.563314][T19050] EXT4-fs (loop6): 1 truncate cleaned up
[  376.569461][T19050] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  376.578068][T19059] lo speed is unknown, defaulting to 1000
[  376.585210][T19050] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  376.603658][T19050] EXT4-fs (loop6): Remounting filesystem read-only
[  376.664966][T14601] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.790813][T19074] loop6: detected capacity change from 0 to 164
[  376.798417][T19074] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  376.807135][T19074] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  376.824322][T19074] Symlink component flag not implemented
[  376.830011][T19074] Symlink component flag not implemented
[  376.835731][T19074] Symlink component flag not implemented (7)
[  376.841750][T19074] Symlink component flag not implemented (116)
[  376.865173][T19078] SELinux:  Context system_u:object_r:traceroute_exec_t:s0 is not valid (left unmapped).
[  376.890509][T19079] loop5: detected capacity change from 0 to 512
[  376.912300][T19079] EXT4-fs (loop5): too many log groups per flexible block group
[  376.920131][T19079] EXT4-fs (loop5): failed to initialize mballoc (-12)
[  376.927308][T19079] EXT4-fs (loop5): mount failed
[  376.947406][T19085] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4823'.
[  377.453938][T19111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4834'.
[  377.495361][T19116] netlink: 'syz.1.4835': attribute type 21 has an invalid length.
[  377.503458][T19116] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4835'.
[  377.512720][T19116] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4835'.
[  377.587409][T19119] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4836'.
[  377.821404][T19121] lo speed is unknown, defaulting to 1000
[  377.874302][T19126] lo speed is unknown, defaulting to 1000
[  378.023548][T19130] loop2: detected capacity change from 0 to 8192
[  378.032396][T19130] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  378.167260][T19145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4845'.
[  378.443647][T19157] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4849'.
[  378.487295][T19161] lo speed is unknown, defaulting to 1000
[  378.931953][T19195] loop6: detected capacity change from 0 to 164
[  378.959884][T19195] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  378.997946][T19192] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  379.024386][T19192] Symlink component flag not implemented
[  379.030206][T19192] Symlink component flag not implemented
[  379.036939][T19192] Symlink component flag not implemented (7)
[  379.043049][T19192] Symlink component flag not implemented (116)
[  379.150447][T19203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4861'.
[  379.242719][T19204] lo speed is unknown, defaulting to 1000
[  379.727673][T19227] loop5: detected capacity change from 0 to 164
[  379.734800][T19227] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  379.744023][T19227] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  379.752526][T19227] Symlink component flag not implemented
[  379.758247][T19227] Symlink component flag not implemented
[  379.764058][T19227] Symlink component flag not implemented (7)
[  379.770163][T19227] Symlink component flag not implemented (116)
[  379.976968][T19247] netlink: 'syz.0.4880': attribute type 21 has an invalid length.
[  379.985072][T19247] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4880'.
[  380.010331][T19250] FAULT_INJECTION: forcing a failure.
[  380.010331][T19250] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  380.023538][T19250] CPU: 0 UID: 0 PID: 19250 Comm: syz.2.4879 Tainted: G        W           6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(voluntary) 
[  380.023667][T19250] Tainted: [W]=WARN
[  380.023675][T19250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  380.023694][T19250] Call Trace:
[  380.023702][T19250]  <TASK>
[  380.023711][T19250]  __dump_stack+0x1d/0x30
[  380.023734][T19250]  dump_stack_lvl+0xe8/0x140
[  380.023756][T19250]  dump_stack+0x15/0x1b
[  380.023882][T19250]  should_fail_ex+0x265/0x280
[  380.023975][T19250]  should_fail+0xb/0x20
[  380.024062][T19250]  should_fail_usercopy+0x1a/0x20
[  380.024083][T19250]  _copy_from_user+0x1c/0xb0
[  380.024256][T19250]  sctp_setsockopt+0x154/0xe30
[  380.024354][T19250]  sock_common_setsockopt+0x66/0x80
[  380.024369][T19250]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  380.024384][T19250]  __sys_setsockopt+0x181/0x200
[  380.024433][T19250]  __x64_sys_setsockopt+0x64/0x80
[  380.024450][T19250]  x64_sys_call+0x20ec/0x2ff0
[  380.024463][T19250]  do_syscall_64+0xd2/0x200
[  380.024528][T19250]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  380.024550][T19250]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  380.024563][T19250]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  380.024603][T19250] RIP: 0033:0x7f46d021ebe9
[  380.024612][T19250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  380.024623][T19250] RSP: 002b:00007f46cec66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  380.024636][T19250] RAX: ffffffffffffffda RBX: 00007f46d0446090 RCX: 00007f46d021ebe9
[  380.024716][T19250] RDX: 000000000000007c RSI: 0000000000000084 RDI: 0000000000000003
[  380.024723][T19250] RBP: 00007f46cec66090 R08: 0000000000000008 R09: 0000000000000000
[  380.024731][T19250] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001
[  380.024738][T19250] R13: 00007f46d0446128 R14: 00007f46d0446090 R15: 00007ffef6958428
[  380.024749][T19250]  </TASK>
[  380.489618][T19277] lo speed is unknown, defaulting to 1000
[  380.578902][T19294] loop6: detected capacity change from 0 to 164
[  380.586030][T19294] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  380.594817][T19294] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  380.603317][T19294] Symlink component flag not implemented
[  380.608961][T19294] Symlink component flag not implemented
[  380.614765][T19294] Symlink component flag not implemented (7)
[  380.620888][T19294] Symlink component flag not implemented (116)
[  380.629390][T19295] loop1: detected capacity change from 0 to 164
[  380.638513][T19295] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  380.650342][T19295] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  380.659069][T19295] Symlink component flag not implemented
[  380.664728][T19295] Symlink component flag not implemented
[  380.679465][T19295] Symlink component flag not implemented (7)
[  380.685468][T19295] Symlink component flag not implemented (116)
[  380.746974][T19307] netlink: 'syz.1.4906': attribute type 21 has an invalid length.
[  380.874676][T19322] loop1: detected capacity change from 0 to 164
[  380.882104][T19322] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  380.891760][T19322] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  380.900250][T19322] Symlink component flag not implemented
[  380.905927][T19322] Symlink component flag not implemented
[  380.911767][T19322] Symlink component flag not implemented (7)
[  380.917774][T19322] Symlink component flag not implemented (116)
[  381.007912][T19335] loop1: detected capacity change from 0 to 164
[  381.019333][T19335] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  381.028416][T19335] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  381.037288][T19335] Symlink component flag not implemented
[  381.043000][T19335] Symlink component flag not implemented
[  381.050141][T19335] Symlink component flag not implemented (7)
[  381.056235][T19335] Symlink component flag not implemented (116)
[  381.217782][   T29] kauditd_printk_skb: 258 callbacks suppressed
[  381.224018][   T29] audit: type=1326 audit(381.184:11632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19344 comm="syz.0.4920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7736c2ebe9 code=0x7ffc0000
[  381.247102][   T29] audit: type=1326 audit(381.194:11633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19344 comm="syz.0.4920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7736c2ebe9 code=0x7ffc0000
[  381.288147][   T29] audit: type=1326 audit(381.224:11634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19344 comm="syz.0.4920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f7736c2ebe9 code=0x7ffc0000
[  381.311331][   T29] audit: type=1326 audit(381.224:11635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19344 comm="syz.0.4920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7736c2ebe9 code=0x7ffc0000
[  381.334794][   T29] audit: type=1326 audit(381.224:11636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19344 comm="syz.0.4920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7736c2ebe9 code=0x7ffc0000
[  381.357767][   T29] audit: type=1326 audit(381.244:11637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19344 comm="syz.0.4920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f7736c2ebe9 code=0x7ffc0000
[  381.380831][   T29] audit: type=1326 audit(381.244:11638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19344 comm="syz.0.4920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7736c2ebe9 code=0x7ffc0000
[  381.403795][   T29] audit: type=1326 audit(381.244:11639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19344 comm="syz.0.4920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f7736c2ebe9 code=0x7ffc0000
[  381.426747][   T29] audit: type=1326 audit(381.244:11640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19344 comm="syz.0.4920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7736c2ebe9 code=0x7ffc0000
[  381.531625][T19360] FAULT_INJECTION: forcing a failure.
[  381.531625][T19360] name failslab, interval 1, probability 0, space 0, times 0
[  381.544471][T19360] CPU: 0 UID: 0 PID: 19360 Comm: +}[@ Tainted: G        W           6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(voluntary) 
[  381.544517][T19360] Tainted: [W]=WARN
[  381.544524][T19360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  381.544538][T19360] Call Trace:
[  381.544568][T19360]  <TASK>
[  381.544639][T19360]  __dump_stack+0x1d/0x30
[  381.544663][T19360]  dump_stack_lvl+0xe8/0x140
[  381.544686][T19360]  dump_stack+0x15/0x1b
[  381.544704][T19360]  should_fail_ex+0x265/0x280
[  381.544809][T19360]  ? io_getxattr_prep+0x129/0x200
[  381.544841][T19360]  should_failslab+0x8c/0xb0
[  381.544869][T19360]  __kmalloc_cache_noprof+0x4c/0x320
[  381.544975][T19360]  ? __io_alloc_req_refill+0x12e/0x1d0
[  381.545001][T19360]  io_getxattr_prep+0x129/0x200
[  381.545027][T19360]  io_submit_sqes+0x5de/0x1050
[  381.545084][T19360]  __se_sys_io_uring_enter+0x1c1/0x1b70
[  381.545130][T19360]  ? 0xffffffff81000000
[  381.545143][T19360]  ? __rcu_read_unlock+0x4f/0x70
[  381.545162][T19360]  ? get_pid_task+0x96/0xd0
[  381.545195][T19360]  ? proc_fail_nth_write+0x13b/0x160
[  381.545275][T19360]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  381.545301][T19360]  ? vfs_write+0x75e/0x8e0
[  381.545325][T19360]  ? __rcu_read_unlock+0x4f/0x70
[  381.545453][T19360]  ? __fget_files+0x184/0x1c0
[  381.545476][T19360]  ? fput+0x8f/0xc0
[  381.545511][T19360]  __x64_sys_io_uring_enter+0x78/0x90
[  381.545685][T19360]  x64_sys_call+0x2de1/0x2ff0
[  381.545710][T19360]  do_syscall_64+0xd2/0x200
[  381.545738][T19360]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  381.545760][T19360]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.545837][T19360] RIP: 0033:0x7f7736c2ebe9
[  381.545854][T19360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  381.545936][T19360] RSP: 002b:00007f7735697038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  381.545958][T19360] RAX: ffffffffffffffda RBX: 00007f7736e55fa0 RCX: 00007f7736c2ebe9
[  381.545970][T19360] RDX: 0000000000000002 RSI: 00000000000047bc RDI: 0000000000000003
[  381.545982][T19360] RBP: 00007f7735697090 R08: 0000000000000000 R09: 0000000000000000
[  381.546047][T19360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  381.546062][T19360] R13: 00007f7736e56038 R14: 00007f7736e55fa0 R15: 00007fff35422838
[  381.546083][T19360]  </TASK>
[  381.792401][   T29] audit: type=1326 audit(381.324:11641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19346 comm="syz.1.4921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87442ebe9 code=0x7ffc0000
[  381.836247][T19362] loop1: detected capacity change from 0 to 164
[  381.898528][T19362] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  381.907256][T19362] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  381.955519][T19362] Symlink component flag not implemented
[  381.961580][T19362] Symlink component flag not implemented
[  381.987914][T19362] Symlink component flag not implemented (7)
[  381.993964][T19362] Symlink component flag not implemented (116)
[  382.126481][T19376] lo speed is unknown, defaulting to 1000
[  382.143931][T19367] lo speed is unknown, defaulting to 1000
[  382.243196][T19385] netlink: 'syz.2.4934': attribute type 21 has an invalid length.
[  382.257890][T19385] __nla_validate_parse: 4 callbacks suppressed
[  382.257916][T19385] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4934'.
[  382.273213][T19385] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4934'.
[  382.325994][T19390] FAULT_INJECTION: forcing a failure.
[  382.325994][T19390] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  382.339326][T19390] CPU: 0 UID: 0 PID: 19390 Comm: syz.2.4935 Tainted: G        W           6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(voluntary) 
[  382.339361][T19390] Tainted: [W]=WARN
[  382.339369][T19390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  382.339383][T19390] Call Trace:
[  382.339390][T19390]  <TASK>
[  382.339421][T19390]  __dump_stack+0x1d/0x30
[  382.339444][T19390]  dump_stack_lvl+0xe8/0x140
[  382.339463][T19390]  dump_stack+0x15/0x1b
[  382.339479][T19390]  should_fail_ex+0x265/0x280
[  382.339573][T19390]  should_fail+0xb/0x20
[  382.339621][T19390]  should_fail_usercopy+0x1a/0x20
[  382.339696][T19390]  _copy_from_iter+0xcf/0xe40
[  382.339717][T19390]  ? mntput_no_expire+0x6f/0x460
[  382.339787][T19390]  ? mntput+0x4b/0x80
[  382.339822][T19390]  tun_get_user+0x3d0/0x2680
[  382.339852][T19390]  ? _parse_integer_limit+0x170/0x190
[  382.339886][T19390]  ? ref_tracker_alloc+0x1f2/0x2f0
[  382.339969][T19390]  ? selinux_file_permission+0x1e4/0x320
[  382.340051][T19390]  tun_chr_write_iter+0x15e/0x210
[  382.340082][T19390]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  382.340113][T19390]  vfs_write+0x4a0/0x8e0
[  382.340211][T19390]  ksys_write+0xda/0x1a0
[  382.340236][T19390]  __x64_sys_write+0x40/0x50
[  382.340262][T19390]  x64_sys_call+0x27fe/0x2ff0
[  382.340329][T19390]  do_syscall_64+0xd2/0x200
[  382.340351][T19390]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  382.340376][T19390]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  382.340401][T19390]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  382.340425][T19390] RIP: 0033:0x7f46d021ebe9
[  382.340459][T19390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  382.340479][T19390] RSP: 002b:00007f46cec87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  382.340501][T19390] RAX: ffffffffffffffda RBX: 00007f46d0445fa0 RCX: 00007f46d021ebe9
[  382.340517][T19390] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000003
[  382.340586][T19390] RBP: 00007f46cec87090 R08: 0000000000000000 R09: 0000000000000000
[  382.340598][T19390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  382.340610][T19390] R13: 00007f46d0446038 R14: 00007f46d0445fa0 R15: 00007ffef6958428
[  382.340629][T19390]  </TASK>
[  382.873078][T19413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4945'.
[  382.923692][T19423] loop6: detected capacity change from 0 to 164
[  382.932058][T19423] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  382.941987][T19423] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  382.951184][T19423] Symlink component flag not implemented
[  382.957104][T19423] Symlink component flag not implemented
[  382.963219][T19423] Symlink component flag not implemented (7)
[  382.969260][T19423] Symlink component flag not implemented (116)
[  383.154775][T19434] lo speed is unknown, defaulting to 1000
[  383.174296][T19436] netlink: 'syz.5.4955': attribute type 21 has an invalid length.
[  383.202410][T19436] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4955'.
[  383.211538][T19436] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4955'.
[  383.420127][T19445] ==================================================================
[  383.428241][T19445] BUG: KCSAN: data-race in call_rcu / mas_state_walk
[  383.436381][T19445] 
[  383.438708][T19445] write to 0xffff888103f04910 of 8 bytes by task 19442 on cpu 1:
[  383.446452][T19445]  call_rcu+0x44/0x3f0
[  383.450539][T19445]  mas_wmb_replace+0xf7a/0x14a0
[  383.455401][T19445]  mas_wr_store_entry+0x1773/0x2b50
[  383.460610][T19445]  mas_store_prealloc+0x74d/0x9e0
[  383.465643][T19445]  vma_iter_store_new+0x1c5/0x200
[  383.470674][T19445]  vma_complete+0x125/0x580
[  383.475190][T19445]  __split_vma+0x591/0x650
[  383.479661][T19445]  vma_modify+0x21e/0xc80
[  383.483986][T19445]  vma_modify_flags+0x101/0x130
[  383.488851][T19445]  mprotect_fixup+0x2cc/0x570
[  383.493519][T19445]  do_mprotect_pkey+0x6d6/0x980
[  383.498363][T19445]  __x64_sys_mprotect+0x48/0x60
[  383.503211][T19445]  x64_sys_call+0x274e/0x2ff0
[  383.507883][T19445]  do_syscall_64+0xd2/0x200
[  383.512900][T19445]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  383.518784][T19445] 
[  383.521091][T19445] read to 0xffff888103f04910 of 8 bytes by task 19445 on cpu 0:
[  383.528710][T19445]  mas_state_walk+0x2f5/0x650
[  383.533381][T19445]  mas_walk+0x60/0x150
[  383.537445][T19445]  lock_vma_under_rcu+0x8d/0x160
[  383.542382][T19445]  do_user_addr_fault+0x233/0x1090
[  383.547492][T19445]  exc_page_fault+0x62/0xa0
[  383.551983][T19445]  asm_exc_page_fault+0x26/0x30
[  383.556823][T19445] 
[  383.559129][T19445] value changed: 0x00007f5c57c45fff -> 0xffffffff85640c50
[  383.566219][T19445] 
[  383.568525][T19445] Reported by Kernel Concurrency Sanitizer on:
[  383.574667][T19445] CPU: 0 UID: 0 PID: 19445 Comm: syz.5.4957 Tainted: G        W           6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(voluntary) 
[  383.588378][T19445] Tainted: [W]=WARN
[  383.592166][T19445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  383.602211][T19445] ==================================================================