last executing test programs:

6m45.469274892s ago: executing program 1 (id=2):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x6c000000, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff"], 0x80}}, 0x0)
sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0)

6m43.956435182s ago: executing program 1 (id=13):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f00000007c0)=@hci={0x1f, 0x5863, 0x31}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000340)="b8b28225cc772f31e7e8c7c98100", 0xe}], 0x1}, 0x44000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000140)={0x0, 0xffff, 0x1, [0x2]}, 0xa)
mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setitimer(0x1, 0x0, 0x0)
pipe2(&(0x7f00000006c0)={<r4=>0xffffffffffffffff}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc)
r6 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2000000}, 0xc)
close_range(r4, 0xffffffffffffffff, 0x0)
r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20c00, 0x0)
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x7800, 0x8, 0x10000, 0x5, {{0x5, 0x4, 0x3, 0x34, 0x14, 0x64, 0x0, 0x5, 0x4, 0x0, @remote, @multicast2}}}})
r9 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'sit0\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0xc, 0x1, [{0x3, 0x0, 0x1}, {0x8}]}}, @NHA_OIF={0x8, 0x5, r10}]}, 0x38}}, 0x0)
sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a00)={0x1f4, 0x12, 0x800, 0x70bd2b, 0x25dfdbfd, {0x26, 0x0, 0x0, 0x0, {0x4e21, 0x4e24, [0x3, 0x5, 0x1, 0x5], [0xf2db, 0x6, 0x1, 0x3], r10, [0x8000, 0x6]}, 0x6, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x20, 0x1, "c71e2f2676ffc4e362db75a6546af646947a9278173ae7d5f9d3b924"}, @INET_DIAG_REQ_BYTECODE={0x3d, 0x1, "19a6ccfe2d65017407a689f4f55414452986ac9aeab3f91469399f6c8cb7aec226700bba6a110a8757bbc005ba695c5eb4c90b048421ff5bf1"}, @INET_DIAG_REQ_BYTECODE={0xc6, 0x1, "9ae07e2e2057032209a892d2ac06188f752295da5aaca14c0dc59326772c0f77ae2c9a8ec72cb43eb084e968fa4d6e03ecf8489c38e90c62212ca2e4a749564e1670f571bc4b792a910259e52e306d0b49c4016aa6a06a12d2f477b7230233fa670b83d1506cedde9bd44e2b04edfee85a16b0e208a135e0d0400dcf2d376283b6ee7b53128ac99f68c46f4cd69a258c6100b11ba54714578a302eaf315fa45803383798077d2c1cdf3e63b4303c733ee38eeeea5ba6b46f89f3b33859376fce75d9"}, @INET_DIAG_REQ_BYTECODE={0x52, 0x1, "41887ec91ee1f9aa3173dbdef3074a3aabf1666bcc8019c2b06d76c7612c26680c01d4cd3122b03fc86f1a36e83eb09a1f055b5197fbe7ccdcf18054a5718af4c8b84b5cda51c4e26124b61e92a9"}, @INET_DIAG_REQ_BYTECODE={0x2b, 0x1, "100cff45e53cb89fcc85e77b70bfd31c73201b3d829783efdcf8a055e860fb599881c50bad17d0"}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x404c804}, 0x24008001)
ioctl$RTC_WKALM_SET(r7, 0x4028700f, &(0x7f0000000040)={0x0, 0x8, {0x2f, 0x5, 0x10, 0x1c, 0x9, 0x1000, 0x4, 0x8a, 0xffffffffffffffff}})

6m43.755592365s ago: executing program 1 (id=15):
sendmsg$key(0xffffffffffffffff, 0x0, 0x40000)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x400c84, &(0x7f0000000000)={[{@sysvgroups}]}, 0x1, 0x796, &(0x7f0000000800)="$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")
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x10)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
creat(&(0x7f00000004c0)='./bus\x00', 0x20)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r2 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0)
preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0)

6m43.600378308s ago: executing program 1 (id=18):
syz_read_part_table(0x60d, &(0x7f0000002200)="$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")
r0 = open(&(0x7f0000000080)='./file0\x00', 0x204800, 0x50)
mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x100, 0x1)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000bcc6000000000000", @ANYRES32=r0, @ANYBLOB="000000000000000000000000000000000000560f", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="05000000040000000200"/28], 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2d, &(0x7f0000000340)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x84, 0x8, 0x8, &(0x7f0000000400)}}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x452, 0x1, 0x7, 0x22, r1, 0x800, '\x00', r2, r0, 0x2, 0x4, 0x4, 0x5}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4)
r6 = dup2(r5, r5)
ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8})
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil)
brk(0x200000ffc000)
r7 = fsopen(&(0x7f00000000c0)='iso9660\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r9, 0x0, 0x2}, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r11, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000d3041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48)
close_range(r10, 0xffffffffffffffff, 0x0)
getdents64(r0, &(0x7f0000000100)=""/166, 0xa6)

6m42.709742666s ago: executing program 32 (id=28):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/consoles\x00', 0x0, 0x0)
r1 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x9f4b, 0x800, 0x1, 0x144}, &(0x7f00000001c0)=<r2=>0x0, &(0x7f0000000240)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0x7, &(0x7f00000000c0)=""/207, 0xcf, 0x10, 0x1})
io_uring_enter(r1, 0xfd0, 0x4c0, 0x43, 0x0, 0xf5)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$tipc(r4, &(0x7f0000000080)={&(0x7f0000000ec0)=@id={0x1e, 0x3, 0x1, {0x4e21, 0x3}}, 0x10, 0x0}, 0x10)
r5 = io_uring_setup(0x1694, &(0x7f0000000080))
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000030000006102000002"], 0x48)
bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0x2, 0x2}, 0x6)
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
pipe2(&(0x7f0000000040)={<r7=>0xffffffffffffffff}, 0x0)
close_range(r7, 0xffffffffffffffff, 0x0)
mknodat$loop(r7, &(0x7f0000003280)='./bus\x00', 0x400, 0x0)
r8 = socket$phonet_pipe(0x23, 0x5, 0x2)
syz_emit_ethernet(0x3e, &(0x7f0000000800)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000300000000000889078ac1e005c088ab5ff62d2250000e0000001e0000002"], 0x0)
connect$phonet_pipe(r8, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10)

6m42.49106668s ago: executing program 1 (id=32):
sendmsg$key(0xffffffffffffffff, 0x0, 0x40000)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x400c84, &(0x7f0000000000)={[{@sysvgroups}]}, 0x1, 0x796, &(0x7f0000000800)="$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")
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
creat(&(0x7f00000004c0)='./bus\x00', 0x20)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r2 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0)
preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0)

6m42.47033658s ago: executing program 33 (id=32):
sendmsg$key(0xffffffffffffffff, 0x0, 0x40000)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x400c84, &(0x7f0000000000)={[{@sysvgroups}]}, 0x1, 0x796, &(0x7f0000000800)="$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")
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
creat(&(0x7f00000004c0)='./bus\x00', 0x20)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r2 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0)
preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0)

3m31.929254843s ago: executing program 6 (id=3801):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10)
ioprio_set$pid(0x2, 0x0, 0x0) (fail_nth: 3)

3m31.656701128s ago: executing program 6 (id=3804):
bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYRES8, @ANYBLOB="de04ec89d7efb03accc8056f361783b4c05481275a0a13f90201abdf9dd86780fe592c499155fb2f05b1af75ea38fcd91e01f33dd36cc1570fb7b5f1cf2ca3699419a302dacd6f24fade3a5bcdb8c4069312672f63ecbe217fbd678e0ba8179f708df87b65c8c31706edb274cf2a75bdde96bae40d2cfc35bd1e6c25bf32f8c27852b9cc0c14d802abfe68895cbb9bbdbdf749b3e116802a577795a8a1eba6934faeec925e870d01be8f0e5c541448ae1392e3b42482c439f8b200be5a0bf69b0061", @ANYRES64, @ANYBLOB], 0x48)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x9, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="180000000000000000000000000001b5181100", @ANYBLOB="92f261e0d5e99f9b7f645859b20ec71ae658af263976442113f12d2404c3e3fbb4b634a898da3d4104ef847c615c4e442e740ace2b9cb4f72b395ad6ed529a", @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4000, 0x0, 0x865d, 0xfd, "ffff00"})
syz_open_pts(r1, 0x0)
io_setup(0x7, &(0x7f0000000000)=<r2=>0x0)
r3 = eventfd(0x10)
io_submit(r2, 0x1, &(0x7f00000006c0)=[&(0x7f0000000080)={0x1000000, 0x3e00, 0x0, 0x0, 0x4, r1, &(0x7f0000000400)='\x00', 0x1, 0xceaa, 0x0, 0x5, r3}])
close_range(r1, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
syz_clone(0x40800045, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r5, 0x402, 0x5)
r6 = open(&(0x7f0000000100)='./file0\x00', 0x301180, 0x8)
r7 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4)
setsockopt$inet6_int(r7, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @local, 0xe}, 0x1c)
fcntl$notify(r6, 0x402, 0x8000001f)
r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
unshare(0x2040600)
fcntl$notify(r8, 0x402, 0x8000003d)
mkdir(&(0x7f0000000000)='./file0\x00', 0x20)

3m31.256979556s ago: executing program 6 (id=3813):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000040)='btrfs_sync_fs\x00', r1, 0x0, 0x100}, 0xfffffffffffffe40)
pipe(&(0x7f0000000140))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x28)
fcntl$lock(r6, 0x24, &(0x7f0000001080)={0x1, 0x2, 0x7, 0xfffffffffffffffd})
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'})
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x22040881, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
shutdown(r2, 0x1)

3m31.188255357s ago: executing program 6 (id=3816):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x220, &(0x7f0000000440)="$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")
open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2)
creat(&(0x7f00000002c0)='./bus\x00', 0x20)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000000010007", @ANYRES16=r2], 0x34}}, 0xa0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @loopback}, 0x4}}, 0x2e)
syz_emit_ethernet(0x4c, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c200000e06000000ee5586dd6001010000161100fe80000000000000140900000000000000000100000e2200169078020700000000000030b08e774e70"], 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000500d283a83d1f3d0021236e8704000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='netfs_read\x00', r8, 0x0, 0x8}, 0x18)
r9 = openat$cgroup_procs(r6, &(0x7f0000000280)='tasks\x00', 0x2, 0x0)
r10 = syz_clone(0x4000, &(0x7f0000001000), 0x0, 0x0, 0x0, 0x0)
write$cgroup_pid(r9, &(0x7f0000000400)=r10, 0x12)

3m31.033975061s ago: executing program 6 (id=3818):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x22, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000880}, 0x20040040)

3m30.863873354s ago: executing program 6 (id=3821):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}, 0x100002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async)
r2 = socket$kcm(0x2, 0x5, 0x84)
r3 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000500)=""/18, 0x12, 0x3, 0x4, 0x0, 0x0, 0xc04}}, 0x120)
readv(r4, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000100000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r6}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000001000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '}\x00', 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0)
r7 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0)
write$binfmt_elf64(r7, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"/1695], 0x69f)
sendmsg$inet(r2, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x400c824) (async)
setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, 0x0, 0x0) (async, rerun: 32)
quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000302, 0x0, 0x0) (async, rerun: 32)
r8 = syz_open_dev$usbmon(0x0, 0x0, 0x0)
mmap$usbmon(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13, r8, 0x0) (async, rerun: 64)
r9 = syz_open_dev$usbfs(&(0x7f0000000380), 0x204, 0x2) (rerun: 64)
ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) (async)
syz_emit_ethernet(0x1e, &(0x7f0000000300)=ANY=[@ANYBLOB="c0a7765b3a48117c110000000002000019608bdc808f7612a3966dbb556aa4b4e583156a6f4767bdd34b374cf37bb73b2f5180e4e8962c4d5b36dc8ae33400a1b19e8fe5830c78583da798cf93182f8ee8896d964aad9c37b3080153b6b2eff3cf00a327ee13ecc24b69ff6d469dfdd06153fd47f2b131decc"], &(0x7f00000002c0)={0x0, 0x3, [0x165, 0xc74, 0x66d, 0x920]})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r10, 0x0, 0xfffffffffffffffd}, 0x18)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000080000000400000002"], 0x50)

3m30.715777696s ago: executing program 34 (id=3821):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}, 0x100002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async)
r2 = socket$kcm(0x2, 0x5, 0x84)
r3 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000500)=""/18, 0x12, 0x3, 0x4, 0x0, 0x0, 0xc04}}, 0x120)
readv(r4, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000100000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r6}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000001000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '}\x00', 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0)
r7 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0)
write$binfmt_elf64(r7, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"/1695], 0x69f)
sendmsg$inet(r2, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x400c824) (async)
setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, 0x0, 0x0) (async, rerun: 32)
quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000302, 0x0, 0x0) (async, rerun: 32)
r8 = syz_open_dev$usbmon(0x0, 0x0, 0x0)
mmap$usbmon(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13, r8, 0x0) (async, rerun: 64)
r9 = syz_open_dev$usbfs(&(0x7f0000000380), 0x204, 0x2) (rerun: 64)
ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) (async)
syz_emit_ethernet(0x1e, &(0x7f0000000300)=ANY=[@ANYBLOB="c0a7765b3a48117c110000000002000019608bdc808f7612a3966dbb556aa4b4e583156a6f4767bdd34b374cf37bb73b2f5180e4e8962c4d5b36dc8ae33400a1b19e8fe5830c78583da798cf93182f8ee8896d964aad9c37b3080153b6b2eff3cf00a327ee13ecc24b69ff6d469dfdd06153fd47f2b131decc"], &(0x7f00000002c0)={0x0, 0x3, [0x165, 0xc74, 0x66d, 0x920]})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r10, 0x0, 0xfffffffffffffffd}, 0x18)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000080000000400000002"], 0x50)

2m5.551275727s ago: executing program 5 (id=4623):
socket$nl_route(0x10, 0x3, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x0)
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8919, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
socket(0x10, 0x803, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1)
capset(0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r3 = gettid()
open(0x0, 0x4ca6c2, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
ioctl$TIOCL_SETVESABLANK(r2, 0x541c, 0x0)

2m5.35692697s ago: executing program 5 (id=4626):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, 0x0, &(0x7f0000000880)=r1}, 0x20)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents64(r2, 0x0, 0x0)

2m5.305115472s ago: executing program 5 (id=4627):
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {<r1=>0xffffffffffffffff, <r2=>0xee00}}, './file0\x00'})
setgroups(0x3, &(0x7f0000000040)=[r2, 0xffffffffffffffff, 0x0])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, <r5=>r2}}, './file0\x00'})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x4, 0x6, 0x1, 0x10, r0, 0x5, '\x00', 0x0, r3, 0x4, 0x4, 0x0, 0x8}, 0x50)
stat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r7=>0x0, <r8=>0x0})
getgroups(0x9, &(0x7f0000000200)=[r2, <r9=>r5, <r10=>r5, r5, r8, r5, r2, r5, <r11=>r5])
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000240)={{0x0, r1, r11, r7, r10, 0x20, 0x3}, 0x7ff, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0xb})
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x3, 0x1, 0x2, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_FILTER={0x44, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x22}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x40c}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xa2}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x40}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x105}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x92}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4)
mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='mm_migrate_pages\x00', r0, 0x0, 0xfff}, 0x18)
setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000480)=0xf8, 0x1)
recvmsg$inet_nvme(r0, &(0x7f00000006c0)={&(0x7f00000004c0)=@nl, 0x80, &(0x7f0000000640)=[{&(0x7f0000000540)=""/228, 0xe4}], 0x1, &(0x7f0000000680)=""/14, 0xe}, 0x1)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000700)={{0x1, 0x1, 0x18, <r12=>r0, {r4, <r13=>r9}}, './file0\x00'})
setgroups(0x6, &(0x7f0000000740)=[r11, r9, r13, r9, 0xee00, r10])
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000007c0)={<r14=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000840)={0x10, 0x30, 0xfa00, {&(0x7f0000000780), 0x2, {0xa, 0x4e21, 0x9, @private0, 0x200}, r14}}, 0x38)
getsockopt$netlink(r12, 0x10e, 0x3, &(0x7f0000000880)=""/126, &(0x7f0000000900)=0x7e)
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r12)
sendmsg$NL80211_CMD_CONNECT(r12, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x20, r15, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x24000000)
ioctl$BTRFS_IOC_RM_DEV(r12, 0x5000940b, &(0x7f0000000a80)={{r6}, "1a83700efb06a82f96756352b97c93092458c456b88255b6fc3ac28d785959eefb04ebb9c7151df98c3746b24caaf9073d6a883bcd71eb74277b8eb980ff2fdfe1b473e26146d536e4bcb9b6ec583947a065847aec78d5f1e67d00001f39892974a5da2fdde9266538ba3909e27d8b6f2e88378b641fd6f0b1d1e89bf4ae090cad5df520293297f753594370d9669daccd2677517f89e7823eb08ff95fe62252ac4c402b7f0854933c977f9f43f55453ef0948c72a6e5c10d47a6a9921e4c65f2ec51ddf8ded2d31e9e18042838725cf0f7831c993da66d0b517ff4367dd8f67ec8900e8ae19ae9fa8b551f066ad90950961a8e285f491ad5b2767e58abeb247df6c1c7410517872e76e103b6fd163135c5cf8f82603cc3d59c4ebf770f94d77bba26dc893627471a10d26233d5a093e9664a5f7cc97670aa0cc55a13723cff324d06c5d4bb149d58e363c8a544041c28d643c5695d51c78364d8457432679c6e890719735148efd93b4edfe28b551749981f062af105fe6b2523c0749fabf9930b062c36fc18c10e6cfa74b10b3a0c23217a7e227f9820aa54274e1eb92f29530e0baa4c268b5940b50d2712dea1d85a19183c5117a906a44783123239a31fd8a1451f29d5ffef40a9e24cd65e3cf99f368e27f1f5e01d1473ee0d7801143108eb96757788c1fc7f42f3c7deabf7e9337f4d61d1154367d0b9e2ac4713a797b7593b53dd91fbb0a42b88713ec83541ddc4aeac668f34a67055c985a2a639cdd7e6c63c685b10a0f451d1ce5e65720702766ec1c911fe53f8638b3bf56c55d0a818afb868c7bbbabb099047afdb7dcc49b153cc16d411fda8d4fcd88b36e0b5c46fd72385d3e05b3ed9a9f3dd4d72f9d1fade62a198aca8a385642665782a34c78853ab878cc0aec1df90488b14302fc04b8ec30345a35b48b7488274b3f928177a5f90929fd3066c75ff9603925da93fbb45ba61d97599b110c50f2abb713922b7bc060af38e0c9247d8113a1af0a6085c19fb5127450afc5f339197c6eef7cf7e9890bb1b656552b8bafb93e1dbd1037060ae6e0600e5d7884289b630c112bdf781f552665e773148a3d6dbac68e6984bd5be0ab35308f84ad52a9f8b3e382e2f92978b395243449859e1ce25033ab56b036f7a0ec82bf27456184c375bf0cf9284f9b3640bf8ef4d829196ce75b666c2a6d807a1d2817d3177e8e39afffbc31b88a4d13e5b306499e8a3c5a178267b83ef6993b297c5f77d9911036224fea408c757a8d8dfc6c985f797fc160c03ab11e7c074fe0d6aab8729a3cab813727cc701638e27e30c4eac8ffdc688c0220e6b3fc8fdf457567b34bb63d87b2ecc3236c4b90baab95ed50ff0a79a8fc2bad131bde70700e1e931b6085ca0e60483a10e8840f779e84367e6c3f4acc1c3022939ecbb10534c1fb979f6c9b4c30b2edf1f1abcd4f96f41aae4bf656868191b3bc633d31d0b7cf2beb46ad6007ebc4187ed5b0f83faa2a3b2da97bb78cc84cd7ebc57949d7b5676b73295d1e2d2560c264bd07af83c0b377ee64c24b434208f701d04661ef6dbdca2c1e9c9b54e662d0fa216746a036286bcf5b2b6b128dccdb071b7ef3405e4db863e2f9b5a0f7f500d41c057c4b4539c17d94be7768579276512ca9069972cd83a44c1ecf451e6b42c5aca509820a8c8744bded97f38845d23c093283790158bd13b751b34a73e8491e59eb59cde4f8630153898b14b6500b700a97641b8536cd43926561fb4b49a4324ed3573c7afa3c8c1fe9370e105c4df3fd18b969ac5210ab07948b8a5f9ea8c88da8f4ae359a885a9100a6c027c4ada14c97c864a8320626ff3da10d9a13bc2f7cc3ed69b080f4a96c5a4e0f124c49da1d8bc26c8f59ef2f67c2f8267c4544c074d02aff2d0a93f722e39b3cea3697c86fa4e80f921d2bfb17002657556de86f21266cc6d6e0d254698c5661e24fe68e5501137cd0c5ad192204241ef610afd4309431886592973e01fedb06d3a24bb00a14a668cd046107de1982ed28648c9ea1c7e0465801c15bce668ab7a185d76c322d2027ab215f9fc34b2647f245768ac65745692c08a25b9ef3accaccdba18815f327834944703c9363c0ad64a19098e58424f217f1cf2cbc1227c1bc86fac2af5523371325b3ae275b95b8453729bd0935fa3799703dd8abe3fc178c7f855bc41c873a249c4ed411ce8759adeae81aeddc5274fa9682063078e59d394727d80dec34fc87439b552e3768ae584c5c315f2c0260f1c6d85c6fb28e15579fd9e38c26d65fc128a23263be2fcceed82788743df47f04adcc77f16d87a8e808294bad52f6249602cb1802ca944225fbcdbc3e4d40bda60bf35694da91ec6bcdfc744d7a6be7f0d105c19b202b0066950709b8b998661c44f3c6c9295dc4f61f665ce402b74d04232ddff769ba7019717ff8d379cd564f16f1bbca2e5eb413ce4c9209b998a3b6e56b84545493a3bfcdafbe8d913e6cbd0bc105fb0bcb173fdaf3bd41ec1e97bf9a961b4a8c57452dff4ba767b8d82dc49b6a709cbf4f1dfe187433ef8daefb905784f4295e2e6f00d69ddf471eea6c32889ea15d9ce33ea9b85af2b152f7d7abc7d9156b917431e7dd7a76ac6529aff6c3d0bb3f6646790ba53f5a4a1896afb30172dff0fa3cedb4ff67668b80d40cf94a8333320a7e57919c7973203da29cb10ad3cbb4927b21bca537a60f9abca7a48bab387251daa68e6fd5eb4800bad016953b5b198c000d31af8e7145787a98f183c828a5375c1636fe5e77aea0c92a84473f0ac7f081b231df8f878251c98d2dd678976b4dca9dc00000d4fae6f59e1cfc2f14bfee4d54c5c3a27c263a42fd364e236d832f5a67460b7dbad234fa0b711f12a01e7df8f37ccb7994852133779880f66481d544f8cb046b7ed588e0834f233a2dbcc306416275a23a8a35f6da0432b322e8d629fb4aa15eb3d26fa234b1a3c531051d4947df3a504077d6440fc97af39628935331b7e29f2acccf9d3dd5aa72f717d41f8bb03463498f444f3020f0da1dc3ed12c96d395b2b8313baf9a9481e9402ba632c4179b7675072b19c33341003439a30b469e47e4593439643eb40e0da6fdbff33f2eba134184b61ac96eff2aa0ea8a257ac0b921a971bd73bc194b62ce6d5044bee5d86d2b4a21fcdd850be31784e986abb5b2b3cd979756090f9ef7a61ff8ff0988ebd3f223ba49ba91053c4ee51dbb922c138f0f6912132cf3c0fbf8daf30c1fc4d1435746a9a165064e5dcc97b42ef13e2285e973c6e379ac660edcd3b455d6a4afd3ff7a2de2f9a41df055c1a771a0faf07abf422d9adc06fb708777c79e9c8fa60ec4410db5f4072a9c13cd1358922d3f8922c956d04aa60963e237fd88030038907e3a4fd61d83f1a0eb766f21da4256853d63d40df87a4e4047cf15c129f0b18a24a6e7fed8147ea7c31e5f80de49b6c69b9474a5d630d4a7c95b8cc1792e45a2aaabdf38d07bbfc1f40b6540bd83245eb4caefa15ad09cfe2a44a96565614711e9a6b27d18545c7e936652c96e768d0a70f563fd1d7ab1b73c3f370540ff2023ad795201aeb3b3261cb3ba51e5f6d790540dd0bba31e46b6d51ef5e0d69b1327d69712a13b69765b5f7eac566bf5bc5c3d63d951f5e906faccd4b2e73cea26aabb060ca9c0e125dcb3b98d9065e6b1ef826ed40fa2cca559ef4aa6f3cdeb22b2ee636200ffbe3dc3a38d1e3bff446b432203e1c4c7f5312c73e35c4b2559c687db3600d0685a0c517136778a4859c825f8fc3284d85126cd7d2bea85593465ff289cc1844123ac7cddaa6eda7b4febeea11eca230904679ef997a2dd84835dbe33ffe5714d857a3720fe9e984f9310e26fa47fac83879b313f35f41053f3c7bd42f9cdf1a05872692cfb6140390b13ff5315564d01aa4d9caa39a926d0f9ecf201ac1f27206e8ae5f0ef4a8da388e38957e6ed90b5bcb15a23dcb6e980900a29251a189a2aa238f7915f3470b18fcccc99941aceca76cc44c8afc35b3c3462d7965f60a6d6f1dc1e7fb65b5e9cff9df432426c15a96fd8dbecbcb8871941baa4133ca88ea0b808e44efcf6391fe16a322c00869ef4b0ba36ae96892e00d097c299cbb546cb1652fdc438025d7957dfbffba2297a7cce58e925359c5e3ee83db79016ef3c28e6417c8f149d8b7049bf254156279d9b3ca423e49548fb5a114eb02fbed4ce2a33a07b6c0cf044fab40c70879ad0201746e96c7f2e86a1a878339f2cbf8a9d20753886a79e67de52aa89051126f7c66bfea8ca3842cc8b30ea8548a64b142e61804200baf9ca776097c078868641f567f50644417da0b3abe93b9e25371fce0c758eb565891d647ca4eebef404cb736ab790633c4ab499d1f8a1a6635c11332316f55fbb2b6921d1c94ed3dd0a4c8e2188b9085db6bbac5dcd134b6d94540ac96c85f59fa70e9e8df0d21ea1e3f85bacf76ede0344edccd4230940d93ea1c2087b0c09b55afce513bd3cc536631dbb3fc2012fd2871f4f37aff28ab6084bfa6ba2ab1c92b2c5f234e0d7b026642691f8de4030c726086b66a30c9d98a357175bd90057a0f2c1484fc56460c41173acb36b60146eb858159ec13be7b6886b388a23986aa2f6b8cf0b60ae2c9b5f3452ee5732a5a28213b102c8a9a191e2bb48fa186b7664a71d47db2cc93667606e2d32d91f4ba86dc74eface55f4786c079f7ad23c3732d015f056ccdbab32a4d3a345a7a6bdfb59a97168446231b8b1f67bcbed20bd5e9d8afd94f5f804cbc9a922dd60a39f9954423a2bcebb507ffc217cecac7ea9f798346f3531467b325b2519c78ac6a9c246909f2e8829f738ba7e12fdd5ef003d37b5af5c90efa2e4e40d6c38d4bfc4a978b639297684d3249719f4ad0bd080d62dd5bc3ed59434dd121df56a447e87c94b49ef33ff94eaeccef2d749f1b29f2dbd6f284cd0e5389e2f424bd8160fbefe3a20c228d787fe3c89683eb31669345c7105d17d7e713799e002e806e30ccda03f44f7a739183e437a8b6d392fd3b1ca401d940ab1fdeb07b97046759e4c401bad92776919dcf8e54c3e9860d3447b58a8a2c203074edd9f489c2ed6544ebb55c981be788a6c085abd3204187e3e5e5c53280c1be1498358b088626a74a768f02b28cbd82a4e9e4fdfe80ab32f715e9953dba2d1ec4731d6b1e19971f2f0b027a85be04860cf7ba25219318f46302c22efbb1d441d471e0bf42dd8da9e391b5ae1d197a7fe4752fef62720733e247ae0129a97f2785a61dd61253b7d56142e4791da2379421101c9312ce751e04a0e3ed7d9c7d0161e36ced52a9fceb8dfc5e41b8a335b5611be774fe14ac6d41fb519eb1f448f55acce615a3497f0c4363bbb7bb04d816ff9374fd5da7e8aa1ff9f70662189d87ee93ea26a0c843b89509ae7d2ab8447074f969e5ed0dc1f85e5fd42ece5d23ccd8aa11a68e8f1f3c0f7b333b0ce41934eeef5560a8126427ecee1a21e888d1f16a6f7579f10206b5b23e0e070143ad4c592eb6613f9727ad5fb1c001d62f3e8a160b60eadfd1ae3c27b19bc60a2d67127e0bfadee415c7bae3a23903d98a2ad240c022085f56ed936042b85dc511351a64f0fd0026ff9c5fb5b97b8d5df668d9ff3032ca828f49126ddcdcf224cc656adc8ca5e0eee11e7fc000bc68bf10f64bfbd535cfe4af462189a0c54df6708500a0d46f13cf81875bdb90cfd99bad6c44af8f69274ac2a2f76a8c93dc01448bb1428c1657b4ee193d1550c599127ff2315a4d6495ddb44b30939c"})
sendmsg$TIPC_NL_KEY_SET(r12, &(0x7f0000001b40)={&(0x7f0000001a80), 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x14, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48041}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000001bc0)={'wlan1\x00', <r16=>0x0})
sendmsg$NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x1c, r15, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r16}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8801)
r17 = semget$private(0x0, 0x2, 0x2)
semctl$GETZCNT(r17, 0x3, 0xf, &(0x7f0000001cc0)=""/128)
io_setup(0xffffffff, &(0x7f0000001d40))
r18 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r18, 0x0, 0xca, &(0x7f0000001d80)={0xffffffffffffffff, 0x8, 0x7, 0x7fffffff, @vifc_lcl_addr=@private=0xa010102, @empty}, 0x10)
semctl$GETNCNT(r17, 0x2, 0xe, &(0x7f0000001dc0)=""/101)
shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000001e40)=""/151)

2m5.258142592s ago: executing program 5 (id=4629):
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@discard}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@discard}]}, 0x1, 0x609, &(0x7f0000000f80)="$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")
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000200001"], 0x24}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x13, &(0x7f0000000340)=@raw=[@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x4, 0xb, 0x0, 0xffffffffffffffc0, 0xffffffffffffffef}, @alu={0x4, 0x1, 0x4, 0xa, 0x0, 0xfffffffffffffffe, 0x8}], &(0x7f0000000200)='syzkaller\x00', 0x1, 0xc4, &(0x7f0000000580)=""/196, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x400b, 0x7f, 0xfffffff8}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000900)=[r2, r2, r2, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000440)=[{0x0, 0x1, 0x8, 0xa}, {0x5, 0x3, 0x3, 0x9}, {0x6, 0x4, 0xf, 0x9}, {0x1, 0x2, 0x5}, {0x2, 0x1, 0xd, 0xb}, {0x0, 0x4, 0x1, 0x3}], 0x10, 0xfffffc01}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r3}, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYRESHEX=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r6, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r7, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
clock_gettime(0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='netlink_extack\x00', 0xffffffffffffffff, 0x0, 0x100000000}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
process_mrelease(0xffffffffffffffff, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
getpeername(0xffffffffffffffff, &(0x7f00000004c0)=@alg, &(0x7f0000000080)=0x80)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r9}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYRESDEC=r5, @ANYRES32=0x0, @ANYBLOB="0344020000000000140012800b0001006d616373656300000400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

2m4.671062494s ago: executing program 5 (id=4641):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10)
fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0)

2m4.3484703s ago: executing program 5 (id=4645):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400), &(0x7f00000004c0)=r1}, 0x20)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x9)
r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x7fffffffffffffff)

2m4.302843311s ago: executing program 35 (id=4645):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400), &(0x7f00000004c0)=r1}, 0x20)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x9)
r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x7fffffffffffffff)

1m50.294123453s ago: executing program 8 (id=4903):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x0, @empty}}}, 0x118)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r1, 0x2}}, 0x18)

1m50.276655983s ago: executing program 8 (id=4905):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB="00000099dcabe400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
close(0x3)
syz_read_part_table(0x5d4, &(0x7f0000000640)="$eJzs07FrG2cUAPB3Z6XnQFOZUFpolkBCJ6UBdWiHaChGEVpqE9LSoXPAQ1oIdMgglCqZ0/QfaEmrQvEiuns0ccC4oM1oNFo71HQRHq5IdzZuwRQKsrH5/Ya7j/c9fe8d31NwriVRnT0XI8+Ogq9Pyn5Svjf7xfuz9ebd9vXVT+7dn56x9Y9zI+JyRJSn/lbGV7Jit53Vhy+3l/fXl3ZuRDrbGiweq/Jwr189ueuD/Eo+9T8+mAtl0HiVPX32qPX8cWNtt9UZf/jgVvPad82vvv/opzvdz9+980UxW7GRzq1+tahfWXvzcIDzg7wwqR/+lWrJsR/98c58muHUDRpZzO6/GxGtzvjHt3uj3uTT93/95nbt6miz+6K897+Ss+4UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC46AaNV9Wnzx5lzx831nZbnSQe3Gpem+Slt2IhIr6OiI10cU71L5erxrfR6oxvDj/+5fd85c8frnxwaWs4qb8ud2tJpLNFkf7GXJrh1JXz15rOX6XVGUfSG/UmSVTidu3qaLP7IpmlpWfdJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwfjTvtq+vpvfuRyTxZUQsp0v9aTzPiv33Zs+Fo/yVMt7O6sOX28v760s7NypbN39eLeMbacSTiHi4168WkXwh4lKxrPyreDLnj+M//R0AAP//dHCCVA==")
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xff}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
mount$9p_fd(0x0, 0x0, 0x0, 0x80, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000380)={0x0, 0x6, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
close_range(r2, 0xffffffffffffffff, 0x200000000000000)

1m50.030260358s ago: executing program 8 (id=4911):
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
socket(0x10, 0x803, 0x0)
socket$unix(0x1, 0x1, 0x0)
ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), 0x0, 0x835, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket(0x10, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10)
sendto$inet6(r4, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804)

1m49.90743991s ago: executing program 8 (id=4913):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000480)={[{@debug}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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")
r2 = syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00'}, 0x10)
utimensat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r4)
ptrace$peeksig(0x4209, r2, &(0x7f0000000140), &(0x7f0000002200))
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
memfd_create(&(0x7f0000000380)='kfree\x00', 0x3)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5, 0x0, 0xb}, 0x18)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r6, 0x80047210, &(0x7f00000001c0))
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x3c, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x80, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x3c}}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f00000000010000000000", 0x1b)
pwritev2(r3, &(0x7f0000000240)=[{}], 0x1, 0x7c00, 0x3000, 0x3)
r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r8, 0x0)
unshare(0x2c020400)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000070000000800000022"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m49.059330457s ago: executing program 8 (id=4922):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB="00000099dcabe400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
close(0x3)
syz_read_part_table(0x5d4, &(0x7f0000000640)="$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")
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xff}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
mount$9p_fd(0x0, 0x0, 0x0, 0x80, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000380)={0x0, 0x6, 0x1})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
close_range(r2, 0xffffffffffffffff, 0x200000000000000)

1m48.558191276s ago: executing program 8 (id=4930):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x5, 0xfd, 0x7ffc1ffb}]})
acct(0x0)

1m48.465918948s ago: executing program 36 (id=4930):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x5, 0xfd, 0x7ffc1ffb}]})
acct(0x0)

57.879420918s ago: executing program 9 (id=5867):
bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYRES8, @ANYBLOB="de04ec89d7efb03accc8056f361783b4c05481275a0a13f90201abdf9dd86780fe592c499155fb2f05b1af75ea38fcd91e01f33dd36cc1570fb7b5f1cf2ca3699419a302dacd6f24fade3a5bcdb8c4069312672f63ecbe217fbd678e0ba8179f708df87b65c8c31706edb274cf2a75bdde96bae40d2cfc35bd1e6c25bf32f8c27852b9cc0c14d802abfe68895cbb9bbdbdf749b3e116802a577795a8a1eba6934faeec925e870d01be8f0e5c541448ae1392e3b42482c439f8b200be5a0bf69b0061", @ANYRES64, @ANYBLOB], 0x48)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x9, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYBLOB="92f261e0d5e99f9b7f645859b20ec71ae658af263976442113f12d2404c3e3fbb4b634a898da3d4104ef847c615c4e442e740ace2b9cb4f72b395ad6ed529a", @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4000, 0x0, 0x865d, 0xfd, "ffff00"})
syz_open_pts(r1, 0x0)
io_setup(0x7, &(0x7f0000000000)=<r2=>0x0)
r3 = eventfd(0x10)
io_submit(r2, 0x1, &(0x7f00000006c0)=[&(0x7f0000000080)={0x1000000, 0x3e00, 0x0, 0x0, 0x4, r1, &(0x7f0000000400)='\x00', 0x1, 0xceaa, 0x0, 0x5, r3}])
close_range(r1, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
syz_clone(0x40800045, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r5, 0x402, 0x5)
r6 = open(&(0x7f0000000100)='./file0\x00', 0x301180, 0x8)
r7 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4)
setsockopt$inet6_int(r7, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @local, 0xe}, 0x1c)
fcntl$notify(r6, 0x402, 0x8000001f)
r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
unshare(0x2040600)
fcntl$notify(r8, 0x402, 0x8000003d)
mkdir(&(0x7f0000000000)='./file0\x00', 0x20)
execveat(r5, 0x0, 0x0, 0x0, 0x100)
sendmsg$inet(r6, &(0x7f0000000b00)={&(0x7f0000000200)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000940)=[{&(0x7f00000004c0)="6b63ca2f9a3c03a2aa48", 0xa}, {&(0x7f0000000500)="60af7d97024a5afa10a0a6d7f14387cee31ebb0d30c896bc336c80c4bbd055a454b953c5807baf9ef6a50a378889838e125097f31aeffb5c1be920accdaa6ae5705e488ddb32f6533f265376d1f4c833bb65e455f7419bcd6203e3ce344eeb9b61837a55a48ee9dec748fdb204334ec1fe353603", 0x74}, {&(0x7f0000000580)="25bf4fa838119329343624b929bc23513f4e0cd81fedce04ac2c2a3dcdf76f64d78bdc3c45", 0x25}, {&(0x7f0000000700)="2ef3438ec0ec1953496f66e21d51087a6070be5008beab0722b1181abd3eaa4484e077bf079884638c594dfd2989ac3d47ba63a455c33454d092a7a63051055e115e84c8b1bb", 0x46}, {&(0x7f0000000780)="3d6f5a5d802a96d9b55e2a5d1f3e5ed4b92dd1cc861796011287bec6212d0e4eeb943eba3405797869d042514d75c4e62d647d409f769284f9193cccad203a9286dfce7133c6933fb468ceb51944d2ee067de5012ef63ea0e6314c894c9b5f58d85c6e44e3cd6e2a7a0e4adb188661635bbdd05e5eb6", 0x76}, {&(0x7f0000000800)="508805f5f090afd2b9280b5cdb0d4590f40a4c6ca507b17e615bbc7ae316b16ce1bdf0b4349a5d59a5da31f52afc9f32471165f5032345c297080590d15190ebb64252ae5a2eb57f2f0dec864603b3afb8ff5f15906d0c9d35e65dccf0fe1f6ba746da8c4dbd57b9a43209b99bc52da48d446a717ef5c1d4e6292f20dceb649b3134991df7f0b9b5e89ee8cc1e6761f52db9179d56b1bef09314e8465ff2ded667625dace03d930abc7670f2abd7e5a94a9952ef556433081551620b7354855088bd1055faa2ee23fb5beca477016fc03f67999387c36942e7", 0xd9}, {&(0x7f0000000900)="1d20156ce3dc444afd4a66ab073a969ac0b73436ca5ec1cd6deeca71a3649a9e331fb70de72925e4fbb18b2cc6c4acd84f8b7b58e274b9d4b22cc46a650c1d0c", 0x40}], 0x7, &(0x7f0000000a80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @multicast2}}}], 0x58}, 0x804)
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x80, 0x0)

57.619380653s ago: executing program 9 (id=5876):
r0 = accept(0xffffffffffffffff, &(0x7f0000000580)=@ax25={{}, [@netrom, @null, @null, @remote, @rose, @default, @netrom, @bcast]}, &(0x7f0000000600)=0x80)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000640), 0x4)
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9001}, 0x94)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000180)={[{@errors_remount}, {@max_dir_size_kb}]}, 0x1, 0x4f2, &(0x7f0000000c80)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x10, 0x8, 0x14}, 0x2c)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x68, 0x30, 0x829, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
r5 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0x8000c61)
r6 = socket$caif_stream(0x25, 0x1, 0x0)
sendmmsg$inet(r6, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x1000000}], 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000400001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300009ea100008500000006000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x18)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r8 = io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

57.500026186s ago: executing program 9 (id=5879):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = gettid()
open(0x0, 0x4ca6c2, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, 0x0)

57.193122292s ago: executing program 9 (id=5884):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
fallocate(r6, 0x0, 0xffff, 0x8009)
write$cgroup_int(r6, &(0x7f0000000380)=0x3f, 0x12)
fchdir(r5)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(r7, &(0x7f00000000c0)='task\x00')
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r8, 0x0, 0xf7}, 0x18)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r9, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x80000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)

56.984027166s ago: executing program 9 (id=5885):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="5c3daa000000000010711011902c24ae009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x14020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x95, 0x5}, 0x100202, 0x0, 0xfffffffb, 0x0, 0x40, 0xfffffffa, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000280)=0x6e)
connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file1\x00'}, 0x6e)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x21880, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x52}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r4}, &(0x7f0000000800), &(0x7f0000000840)=r5}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r6}, 0x10)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940))
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
socket$isdn_base(0x22, 0x3, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x1400e, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = socket(0x10, 0x3, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000380)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r9, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000300)={'batadv0\x00', &(0x7f00000002c0)=@ethtool_sset_info={0x37, 0xe701, 0x1ffffff7f}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000006c0)='f2fs_lookup_end\x00', r7, 0x0, 0x6}, 0x18)
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d"], 0x52)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210002, &(0x7f00000004c0)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val}, {@nolazytime}, {@nombcache}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@commit={'commit', 0x3d, 0x220}}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000400)={'vxcan1\x00'})

56.566320804s ago: executing program 9 (id=5890):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map, 0x13, 0x0, 0x6, &(0x7f0000000400), 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0}, 0x40)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xd0ffffff}, 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)

56.566056144s ago: executing program 37 (id=5890):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map, 0x13, 0x0, 0x6, &(0x7f0000000400), 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0}, 0x40)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xd0ffffff}, 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)

5.076414372s ago: executing program 2 (id=6720):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'wg2\x00'})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket(0xf, 0x6, 0x9d)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x18)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r4, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

4.925744745s ago: executing program 2 (id=6723):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10)
msgsnd(0x0, 0x0, 0x0, 0x800)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x0, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:Di', 0x0)
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000440)={[{@resuid}, {@errors_remount}]}, 0x1, 0x519, &(0x7f00000009c0)="$eJzs3cFvI1cZAPBvJvE2u5tiFxAqlSgVLcpWsHbS0DZCCMoFTpWA5b6ExImi2HEUO2UTVZCK/wAhgcSJExck/gCkqgfEGVWqBBfEAQECIdjCAQnoII/HJevYSaBJnI1/P+mt35sZz/e9ifw8M56dCWBiPRURL0XEVEQ8GxHlYnpalDjole5yb99/daVbksiyO39JIimm9dfVbU9HxM3ibTMR8ZUvRnw9ORq3vbe/udxo1HeKdq3T3K619/ZvbzSX1+vr9a3FxYUXll5cen5pPiu8p35W+pUffeGzr3/yG7+9+6db3+ym9ZkPRSkG+nGWel0v5duir7uNds4j2BhMFf0pjTsRAABOpbuP//6I+Fi+/1+OqXxvbsDUODIDAAAAzkr2udn4VxKRAQAAAFdWGhGzkaTV4lqA2UjTa8W5gQ/GjbTRanc+sdba3VrtzouoRCld22jU54trhStRSrrtheIa2377uYH2YkQ8FhHfLV/P29WVVmN1zOc+AAAAYFLcHDj+/3s5zesnG/L/BAAAAIDLqzKyAQAAAFwVDvkBAADg6hs8/n99THkAAAAA5+JLL7/cLVn/+derr+ztbrZeub1ab29Wm7sr1ZXWznZ1vdVaz+/Z1zxpfY1Wa/tTsbV7r9aptzu19t7+3WZrd6tzd+OBR2ADAAAAF+ixj77xqyQiDj59PS9R3AcQ4AG/H3cCwFmaGncCwNi4izdMrlK/cm28eQDjk5ww38U7AADw8Jv78NHf//unAkpjzQw4b671AYDJ4/d/mFwlVwDCREsj4n296iOjlhn5+/8vThslyyLeLB+e4vwiAABcrNm8JGm1OA6YjTStViMejUgrUUrWNhr1+eL44Jfl0iPd9kL+zuTEa4YBAAAAAAAAAAAAAAAAAAAAAAAAgJ4sSyIDAAAArrSI9I9Jfjf/iLnyM7OD5weuJf8oxx+Kxg/ufO/ecqezs9Cd/tf8WV7XIqLz/TulfPpzIx8fBgAAAJy15GDkrN5xevG6cKFZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB3r7/6kq/XGTcP38+IirD4k/HTP46E6WIuPG3JKYPvS+JiKkziH/wWkQ8Pix+Eu9kWVYpshgW//o5x6/km2Z4/DQibp5BfJhkb3THn5eGff7SeCp/Hf75my7KezV6/EuLyI/n49yw8efRI2trDo3xxFs/qY2M/1rEE9PDx5/++JuMiP/0kbX9M8uyozG+9tX9/VHxsx9GzA39/kkeiFXrNLdr7b392xvN5fX6en1rcXHhhaUXl55fmq+tbTTqxb9DY3znIz9957j+3xgS/ze/7o2/x/X/mVErHfDvt+7d/0CvWhoW/9bTQ79/Z2JE/LT47vt4Ue/On+vXD3r1w5788ZtPHtf/1RHb/6S//61T9v/ZL3/7d6dcFAC4AO29/c3lRqO+c0xl5hTLPIyVn81cijT+x0r2rd5f7rLk8/9Wunur/53S79UlSOxQJbuwWFNxSbr8bmWswxIAAHAOfv7uTv+4MwEAAAAAAAAAAAAAAAAAAIDJdRG3ExuMeTCergIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHOs/AQAA//9GB9/T")
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x2f, 0x9, 0x2, 0x2, 0x42, @loopback, @empty, 0x40, 0x10, 0x8, 0x7}})
openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x4000)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r2, 0x0, 0x100000000}, 0x18)
mkdirat(0xffffffffffffff9c, 0x0, 0x10c)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af9cc9e5ef6bda9df2c3af36effff9af2551ce935b0f327cb3f011a2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7511d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1525320e716660000000000b02b001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d3294000000000000000000000000000000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10738d3c9f7a98eccb26f7e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe977076ce7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d1a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1c77a211bfa02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc084075ad10727522934a87a4ddcdb112754ca5bdec0ead14b6c0f19a4b126bbe0c2b8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcb1a47a87baf63e4edf11c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c158ae8f44bfbfa7c2730302b66a99f66705b71e6205e7cbf36435e1eabb9a63fcd604d5cc27e1317ad94cf438d7187a2fe4e06fa6cbf84ef1efa82cb2c4af6bd1370616cdbe2b98fd89b79824ba089df1f81e6fcef073059f5f1d6a221d791839d7826ed1759c2153532c393fd1bd7be2e7f5abf2f0800000000ea46c07adee10d0f2bc85cf37182256e4fd8f56942726efc07180eaa5421d697665c8bacd39cdb392e6153af80bc1a69e3bfab032e78c9a96eab13be845a0d44ef2a4ab414ac2e4802a3b5d3aa2a4a4fc259206d97d0cc1602d6b45ff414c53fc9f5f68438f0423e168a97923ca0464b40b2f797841fb2bb2e5ad9feff37220ab7c34f4c382c247e7735adb55c209f7c0f8880733dbd3f5a095cc6a2"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
close(0x4)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=<r5=>0x0)
timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)

2.888464744s ago: executing program 0 (id=6753):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10)
r2 = socket(0x10, 0x3, 0x9)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x7fffffffffffffff)

2.114316729s ago: executing program 4 (id=6762):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000002a80)={[{@nodiscard}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0xffffffffffffffff}}, {@nobh}, {@data_err_ignore}, {@dax}, {@nolazytime}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xeb}}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}, {@jqfmt_vfsv1}, {@dioread_nolock}, {@dioread_lock}, {@journal_dev={'journal_dev', 0x3d, 0x8}}], [{@appraise}, {@audit}, {@context={'context', 0x3d, 'user_u'}}, {@uid_gt}]}, 0x1, 0x55f, &(0x7f0000000580)="$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")
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$tipc(0x1e, 0x5, 0x0)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000080)={0x1, 'xfrm0\x00', {}, 0x40})
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000002980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000002c00)=ANY=[@ANYBLOB="3400000825d6eb274ac664d101d0d9c3cbcf00840779087a081108cf7a1db3f5d15a1c06164a81487a82bb27b0facd8f6dc5f56c8db2635d6efd062902752ddfbe50", @ANYRES16=0x0, @ANYBLOB="08002abd7000ffdbdf25030000000c000300000000000000000014000c0000000000000000000000ffffac1414aa"], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0xeab92098a5aa9add)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file1\x00', 0x100c404, &(0x7f00000013c0)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c7569643db654083b36140fc5db7c42dcef72458ce2c74b8703098dabdba0b2b975d1a77753110903c9c57d736d1173a2df5a6b944c508380a490e661d78662f32f6704ce68a9365529412a380fcb4966245ad469841a90be", @ANYRESHEX=0xee00, @ANYBLOB=',dots,dots,dots,flush,nodots,dos1xfloppy,dots,dots,nodots,check=relaxed,dots,check=strict,dots,showexec,nodots,dots,nodots,dots,\x00'], 0xfd, 0x1f0, &(0x7f0000000240)="$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")
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002940), r0)
sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000002a00)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000029c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="a0054fe7966e7e388f0000", @ANYRES16=r6, @ANYBLOB="08002bbd7000fbdbdf2504000000050005000200000014000100fe880000000000000000000000000b010800030002000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20004004)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000480)={'ipvlan0\x00', 0x2000})
ioctl$TUNSETCARRIER(r7, 0x400454e2, &(0x7f0000000000)=0x3d)
r8 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r8, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000)
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00')
r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0)
sendfile(r10, r10, 0x0, 0x3fffff)
pread64(r5, &(0x7f0000001900)=""/4079, 0xfef, 0x66)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="3300d03e0c00000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
writev(r4, &(0x7f0000000140)=[{&(0x7f00000012c0)="c194867f7a2dbd41e91effec1f20081c750d60b76ab9df33fd83d5e830e94a3e14615d1cb7f0bb25330c9b5c0be2131fd173cb8e68596ffad8881624006a691f9cbd1c7dcbace5f0a6a189a5547f44459d5a9ec6017a4f1df7320e14d7fd823bb50257dddbc577bd835b9594ace4e4fb5e740dd5ed74673c050bd1ed64157f72a9b012cbc8fce96c683237909bd0465e9192e33a55b542783fe8a375b327874918e453628bc888e1db325eda7eb4d03c80e8dfa385fc92da33592e1f5c0e10f27c4176", 0xc3}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.021589091s ago: executing program 0 (id=6764):
bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYRES8, @ANYBLOB="de04ec89d7efb03accc8056f361783b4c05481275a0a13f90201abdf9dd86780fe592c499155fb2f05b1af75ea38fcd91e01f33dd36cc1570fb7b5f1cf2ca3699419a302dacd6f24fade3a5bcdb8c4069312672f63ecbe217fbd678e0ba8179f708df87b65c8c31706edb274cf2a75bdde96bae40d2cfc35bd1e6c25bf32f8c27852b9cc0c14d802abfe68895cbb9bbdbdf749b3e116802a577795a8a1eba6934faeec925e870d01be8f0e5c541448ae1392e3b42482c439f8b200be5a0bf69b0061", @ANYRES64, @ANYBLOB], 0x48)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x9, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYBLOB="92f261e0d5e99f9b7f645859b20ec71ae658af263976442113f12d2404c3e3fbb4b634a898da3d4104ef847c615c4e442e740ace2b9cb4f72b395ad6ed529a", @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4000, 0x0, 0x865d, 0xfd, "ffff00"})
syz_open_pts(r1, 0x0)
io_setup(0x7, &(0x7f0000000000)=<r2=>0x0)
r3 = eventfd(0x10)
io_submit(r2, 0x1, &(0x7f00000006c0)=[&(0x7f0000000080)={0x1000000, 0x3e00, 0x0, 0x0, 0x4, r1, &(0x7f0000000400)='\x00', 0x1, 0xceaa, 0x0, 0x5, r3}])
close_range(r1, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
syz_clone(0x40800045, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r5, 0x402, 0x5)
r6 = open(&(0x7f0000000100)='./file0\x00', 0x301180, 0x8)
r7 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4)
setsockopt$inet6_int(r7, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @local, 0xe}, 0x1c)
fcntl$notify(r6, 0x402, 0x8000001f)
r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
unshare(0x2040600)
fcntl$notify(r8, 0x402, 0x8000003d)
mkdir(&(0x7f0000000000)='./file0\x00', 0x20)
execveat(r5, 0x0, 0x0, 0x0, 0x100)
sendmsg$inet(r6, &(0x7f0000000b00)={&(0x7f0000000200)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000940)=[{&(0x7f00000004c0)="6b63ca2f9a3c03a2aa48", 0xa}, {0x0}, {&(0x7f0000000580)="25bf4fa838119329343624b929bc23513f4e0cd81fedce04ac2c2a3dcdf76f64d78bdc3c45", 0x25}, {&(0x7f00000005c0)="d9a22eaf60bff9cee95a812c2e747594e40594bc00bcb19891c1f695e42d754320536a19cb072b594f5248e26d1bdb08e22b2ac96a06db7af1d4c8ae082331cfbd3c34ba9253f40109619375334bae3330a78addb6052e3e26e29ed5da524debbeb11eb314f77dc9d8fa144161335594318caf998bac38fa211ceaec3e2bfcdeff0478f2824be7ba4ace1bbe4d4d8f13dafb72c19f4d5147d8ef76a2d6cb6f1fc64f3a7766c590bf9b8f9dc816978fc39645ff05bb36d741f045df510f268c4a96c421dd24ef", 0xc6}, {&(0x7f0000000700)="2ef3438ec0ec1953496f66e21d51087a6070be5008beab0722b1181abd3eaa4484e077bf079884638c594dfd2989ac3d47ba63a455c33454d092a7a63051055e115e84c8b1bb", 0x46}, {&(0x7f0000000780)="3d6f5a5d802a96d9b55e2a5d1f3e5ed4b92dd1cc861796011287bec6212d0e4eeb943eba3405797869d042514d75c4e62d647d409f769284f9193cccad203a9286dfce7133c6933fb468ceb51944d2ee067de5012ef63ea0e6314c894c9b5f58d85c6e44e3cd6e2a7a0e4adb188661635bbdd05e5eb6", 0x76}, {&(0x7f0000000800)="508805f5f090afd2b9280b5cdb0d4590f40a4c6ca507b17e615bbc7ae316b16ce1bdf0b4349a5d59a5da31f52afc9f32471165f5032345c297080590d15190ebb64252ae5a2eb57f2f0dec864603b3afb8ff5f15906d0c9d35e65dccf0fe1f6ba746da8c4dbd57b9a43209b99bc52da48d446a717ef5c1d4e6292f20dceb649b3134991df7f0b9b5e89ee8cc1e6761f52db9179d56b1bef09314e8465ff2ded667625dace03d930abc7670f2abd7e5a94a9952ef556433081551620b7354855088bd1055faa2ee23fb5beca477016fc03f67999387c36942e7", 0xd9}, {&(0x7f0000000900)="1d20156ce3dc444afd4a66ab073a969ac0b73436ca5ec1cd6deeca71a3649a9e331fb70de72925e4fbb18b2cc6c4acd84f8b7b58e274b9d4b22cc46a650c1d0c", 0x40}], 0x8, &(0x7f0000000a80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @multicast2}}}], 0x58}, 0x804)
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x80, 0x0)

1.795526755s ago: executing program 4 (id=6766):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
readlink(0x0, 0x0, 0x0)

1.794763185s ago: executing program 2 (id=6767):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
mlock2(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0)
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x34)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = socket(0x10, 0x3, 0x9)
connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000005a07051000f12cc9014000000000000000000a00000aa3a8a3af137cf0bd00000000001a001c59277d0bfa482e5438b094e0fd4cbef45a748ec679378a30f164523b0cb00d22128556f4c63d399903a3f8e5e2bced0f65509b32120b1e51863e04360493ab5225da52f9d9bed77b9f345112abd1b41dfc190b88b0b50b6102a5a5e2554d777a24e190f4f1e0e3860d9749332d0da5a92fdde6869ddcd4ac67537652bc2d047b"], 0x28}}, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, 0x0, 0x0)
close(0xffffffffffffffff)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
add_key(&(0x7f0000000040)='syzkaller\x00', 0x0, &(0x7f0000000200)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
open(0x0, 0x10d8c1, 0x170)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1200004, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x1cb)
writev(r6, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1)
preadv(r6, &(0x7f0000000400)=[{0x0}, {&(0x7f0000003200)=""/4096, 0x1000}], 0x2, 0x6, 0x800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x34, r8, 0x1, 0x0, 0x10, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0x34}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000080000000100000f080102200e000000000000000300000000000000000000002e"], 0x0, 0x3a}, 0x20)

1.703377567s ago: executing program 4 (id=6769):
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r2 = dup3(r1, r0, 0x0)
recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1, 0x0, 0xfffffffffffffc88}, 0xffffffff}], 0x1, 0x40000001, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

1.694651038s ago: executing program 2 (id=6770):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040400000004000000050000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x104, 0x3})
ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000180)={0x5, 0x2, 0xf, 0x100fe74, 0x8, "2c277bd72c6157ca4381fbdd4a7c9d6a6f0da7", 0x5, 0x91})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
getpeername$l2tp(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f00000003c0)=0x10)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
r4 = syz_clone(0x80200, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0700000004000000000100000100", @ANYRES32, @ANYBLOB="0090789ec08099f7da7788c006035de35c7ff5ecefc26dc1ed8e4becc9ff16d2ffff0968a372a4210b2949a94cfef73dec7ed54eb65a4cc79d69314fb6ac31dd0497ad41419f0891c1144e690307ccedb1a7611f14136ec1ddbd6f985bcc5bae2976f55a7e62", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
time(0x0)
r5 = semget$private(0x0, 0x4000000009, 0x0)
semop(r5, &(0x7f0000000140)=[{0x0, 0x2, 0x800}], 0x1)
semtimedop(r5, &(0x7f0000000000)=[{0x4, 0x2}, {0x2, 0xfb7d, 0x1000}], 0x2, 0x0)
fstatfs(0xffffffffffffffff, &(0x7f00000007c0)=""/205)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810)

1.632716928s ago: executing program 0 (id=6771):
r0 = socket(0x10, 0x3, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000013c0)=ANY=[@ANYBLOB="1400000053"], 0x28}, 0x1, 0x0, 0x0, 0x64049}, 0x40000)

1.510892951s ago: executing program 0 (id=6775):
bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYRES8, @ANYBLOB="de04ec89d7efb03accc8056f361783b4c05481275a0a13f90201abdf9dd86780fe592c499155fb2f05b1af75ea38fcd91e01f33dd36cc1570fb7b5f1cf2ca3699419a302dacd6f24fade3a5bcdb8c4069312672f63ecbe217fbd678e0ba8179f708df87b65c8c31706edb274cf2a75bdde96bae40d2cfc35bd1e6c25bf32f8c27852b9cc0c14d802abfe68895cbb9bbdbdf749b3e116802a577795a8a1eba6934faeec925e870d01be8f0e5c541448ae1392e3b42482c439f8b200be5a0bf69b0061", @ANYRES64, @ANYBLOB], 0x48)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x9, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYBLOB="92f261e0d5e99f9b7f645859b20ec71ae658af263976442113f12d2404c3e3fbb4b634a898da3d4104ef847c615c4e442e740ace2b9cb4f72b395ad6ed529a", @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4000, 0x0, 0x865d, 0xfd, "ffff00"})
syz_open_pts(r1, 0x0)
io_setup(0x7, &(0x7f0000000000)=<r2=>0x0)
r3 = eventfd(0x10)
io_submit(r2, 0x1, &(0x7f00000006c0)=[&(0x7f0000000080)={0x1000000, 0x3e00, 0x0, 0x0, 0x4, r1, &(0x7f0000000400)='\x00', 0x1, 0xceaa, 0x0, 0x5, r3}])
close_range(r1, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
syz_clone(0x40800045, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r5, 0x402, 0x5)
r6 = open(&(0x7f0000000100)='./file0\x00', 0x301180, 0x8)
r7 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4)
setsockopt$inet6_int(r7, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @local, 0xe}, 0x1c)
fcntl$notify(r6, 0x402, 0x8000001f)
r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
unshare(0x2040600)
fcntl$notify(r8, 0x402, 0x8000003d)
mkdir(&(0x7f0000000000)='./file0\x00', 0x20)
execveat(r5, 0x0, 0x0, 0x0, 0x100)
sendmsg$inet(r6, &(0x7f0000000b00)={&(0x7f0000000200)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000940)=[{&(0x7f00000004c0)="6b63ca2f9a3c03a2aa48", 0xa}, {&(0x7f0000000500)}, {&(0x7f0000000580)="25bf4fa838119329343624b929bc23513f4e0cd81fedce04ac2c2a3dcdf76f64d78bdc3c45", 0x25}, {&(0x7f00000005c0)="d9a22eaf60bff9cee95a812c2e747594e40594bc00bcb19891c1f695e42d754320536a19cb072b594f5248e26d1bdb08e22b2ac96a06db7af1d4c8ae082331cfbd3c34ba9253f40109619375334bae3330a78addb6052e3e26e29ed5da524debbeb11eb314f77dc9d8fa144161335594318caf998bac38fa211ceaec3e2bfcdeff0478f2824be7ba4ace1bbe4d4d8f13dafb72c19f4d5147d8ef76a2d6cb6f1fc64f3a7766c590bf9b8f9dc816978fc39645ff05bb36d741f045df510f268c4a96c421dd24ef", 0xc6}, {&(0x7f0000000700)="2ef3438ec0ec1953496f66e21d51087a6070be5008beab0722b1181abd3eaa4484e077bf079884638c594dfd2989ac3d47ba63a455c33454d092a7a63051055e115e84c8b1bb", 0x46}, {&(0x7f0000000780)="3d6f5a5d802a96d9b55e2a5d1f3e5ed4b92dd1cc861796011287bec6212d0e4eeb943eba3405797869d042514d75c4e62d647d409f769284f9193cccad203a9286dfce7133c6933fb468ceb51944d2ee067de5012ef63ea0e6314c894c9b5f58d85c6e44e3cd6e2a7a0e4adb188661635bbdd05e5eb6", 0x76}, {&(0x7f0000000800)="508805f5f090afd2b9280b5cdb0d4590f40a4c6ca507b17e615bbc7ae316b16ce1bdf0b4349a5d59a5da31f52afc9f32471165f5032345c297080590d15190ebb64252ae5a2eb57f2f0dec864603b3afb8ff5f15906d0c9d35e65dccf0fe1f6ba746da8c4dbd57b9a43209b99bc52da48d446a717ef5c1d4e6292f20dceb649b3134991df7f0b9b5e89ee8cc1e6761f52db9179d56b1bef09314e8465ff2ded667625dace03d930abc7670f2abd7e5a94a9952ef556433081551620b7354855088bd1055faa2ee23fb5beca477016fc03f67999387c36942e7", 0xd9}, {&(0x7f0000000900)="1d20156ce3dc444afd4a66ab073a969ac0b73436ca5ec1cd6deeca71a3649a9e331fb70de72925e4fbb18b2cc6c4acd84f8b7b58e274b9d4b22cc46a650c1d0c", 0x40}], 0x8, &(0x7f0000000a80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @multicast2}}}], 0x58}, 0x804)
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x80, 0x0)

1.502604701s ago: executing program 4 (id=6776):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
setreuid(0x0, 0xee00)

1.470832501s ago: executing program 4 (id=6777):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001200)={[{@nodiscard}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xeb}}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x55f, &(0x7f0000000580)="$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")
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000300)=ANY=[@ANYBLOB="e8d98bddf3bfea5bb7dc349d62719b1fded80e838df5d27390e6e5c435dc6fce26cc9135e26e3df04b585c7b551eb3530b0373c4cf29681a22c60176fcaa5c9edf7dbabb", @ANYRES32=r0, @ANYRESDEC, @ANYRES8=r1, @ANYRESHEX, @ANYRES16=r2], 0xfe37, 0x0)

1.235520176s ago: executing program 4 (id=6779):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040))
ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)
read(r0, 0x0, 0x5d)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000000)={[{@nodiscard}, {@noinit_itable}, {@barrier_val={'barrier', 0x3d, 0x40}}, {@grpjquota}, {@errors_remount}, {@init_itable}]}, 0x1, 0x4c5, &(0x7f0000000540)="$eJzs3d1rW+cZAPBHUuzYjrd8bIwkgyWQQfZBLH8wYm+DsattF4GxwG42yDxbcVPLlrHkNDa5cNq7XPSitLRQetH7/gW9aa4aCqXXLb0tvSgpbepCWyio6Ehy/CE5aupIjc/vByd6z3sUPe8r8bw+es85OgGk1tnaP5mI4Yh4LyKO1le3P+Fs/WHj/s2Z2pKJavXyZ5nkebX15lOb/+9IRKxHxEBE/OtvEf/P7I5bXl2bny4WC8uN9XxlYSlfXl27cG1heq4wV1gcm7w4NTU5OjE+tW99vf3807cvvfmP/je+eu7e3RfefqvWrOHGtq392E/1rvfF8S11hyLiz48jWA/kGv0Z7HVDeCS1z+9nEXEuyf+jkUs+TSANqtVq9dvq4Xab16vAgZVN9oEz2ZGIqJez2ZGR+j78z2MoWyyVK7+/WlpZnK3vKx+LvuzVa8XCaOO7wrHoy9TWx5Lyg/XxHesTEck+8Iu5wWR9ZKZUnO3uUAfscGRH/n+Zq+c/kBK+8kN6yX9IL/kP6SX/Ib3kP6SX/If0kv+QXvIf0kv+Q3rJf0ivvfK/v4vtALrqn5cu1ZZq8/r32eurK/Ol6xdmC+X5kYWVmZGZ0vLSyFypNJdcs7PwsNcrlkpLY3+IlRv5SqFcyZdX164slFYWK1eS6/qvFPq60iugE8fP3PkgExHrfxxMltjyJ1+uwsFWrWai19cgA72R6/UABPSMqX9Ir+/xHb/tj4QBT7YWP9G7zUDr6r/E0uNoDdAN2V43AOiZ86cc/4O0Mv8P6WX+H9LLPj7wiPP/Yf4fnlzm/yG9htvc/+snW+7dNRoRP42I93N9h5v3+gIOguwnmcb+//mjvx7eubU/83VyiKA/Ip559fLLN6YrleWxWv3nm/WVVxr1471oP9CpZp428xgASK+N+zdnmks343761/pJCLvjH2rMTQ4kxyiHNjLbzlXI7NO5C+u3IuJkq/iZxv3O60c+hjZyu+KfaDxm6i+RtPdQct/07sQ/tSX+r7bEP/2D3xVIhzu18We0Vf5lk5yOzfzbPv4M79O5E+3Hv+zm+JdrM/6d6TDGU689+3Hb+LciTreM34w3kMTaGb/WtvMdxr/333//ot226uv112kVv6lWylcWlvLl1bULye/IzRUWxyYvTk1Njk6MT+WTOep8c6Z6tz+dfPfuXv0fahO/3t8PW/a/VvfbDvv/zS/f+c/ZPeL/5lzrz/9E8tj6/R+MiN91GP+L8Y/+125bLf5sm/5n94hfq5voMH75pb+7dhgAfkTKq2vz08ViYVlBQUFhs/CwkWO9OwMU8Ng8SPpetwQAAAAAAAAAAADoVDdOJ+51HwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoLvAgAA//+tldf6")
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ifreq(r2, 0x8948, &(0x7f0000000100)={'bridge0\x00', @ifru_settings={0x7fffffff, 0x40, @fr=&(0x7f00000000c0)={0x3, 0x6, 0x2, 0x81, 0x7f, 0x101, 0x4}}})
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001b80), &(0x7f0000001bc0)=0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2d, 0x0, 0x0, 0x6}]}, 0xfffffffffffffeea)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(0xffffffffffffffff, 0x47bc, 0xfac7, 0x0, 0x0, 0x0)

1.234808846s ago: executing program 7 (id=6780):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
readlink(0x0, 0x0, 0x0)

1.203899637s ago: executing program 7 (id=6781):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
mlock2(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0)
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x34)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = socket(0x10, 0x3, 0x9)
connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000005a07051000f12cc9014000000000000000000a00000aa3a8a3af137cf0bd00000000001a001c59277d0bfa482e5438b094e0fd4cbef45a748ec679378a30f164523b0cb00d22128556f4c63d399903a3f8e5e2bced0f65509b32120b1e51863e04360493ab5225da52f9d9bed77b9f345112abd1b41dfc190b88b0b50b6102a5a5e2554d777a24e190f4f1e0e3860d9749332d0da5a92fdde6869ddcd4ac67537652bc2d047b"], 0x28}}, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, 0x0, 0x0)
close(0xffffffffffffffff)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
add_key(&(0x7f0000000040)='syzkaller\x00', 0x0, &(0x7f0000000200)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
open(0x0, 0x10d8c1, 0x170)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1200004, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x1cb)
writev(r6, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1)
preadv(r6, &(0x7f0000000400)=[{0x0}, {&(0x7f0000003200)=""/4096, 0x1000}], 0x2, 0x6, 0x800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x34, r8, 0x1, 0x0, 0x10, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0x34}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000080000000100000f080102200e000000000000000300000000000000000000002e"], 0x0, 0x3a}, 0x20)

1.117935159s ago: executing program 0 (id=6782):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18)
ppoll(0x0, 0x0, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)={[0x882f]}, 0x8)

731.507426ms ago: executing program 7 (id=6783):
bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYRES8, @ANYBLOB="de04ec89d7efb03accc8056f361783b4c05481275a0a13f90201abdf9dd86780fe592c499155fb2f05b1af75ea38fcd91e01f33dd36cc1570fb7b5f1cf2ca3699419a302dacd6f24fade3a5bcdb8c4069312672f63ecbe217fbd678e0ba8179f708df87b65c8c31706edb274cf2a75bdde96bae40d2cfc35bd1e6c25bf32f8c27852b9cc0c14d802abfe68895cbb9bbdbdf749b3e116802a577795a8a1eba6934faeec925e870d01be8f0e5c541448ae1392e3b42482c439f8b200be5a0bf69b0061", @ANYRES64, @ANYBLOB], 0x48)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x9, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="180000000000000000000000000001", @ANYBLOB="92f261e0d5e99f9b7f645859b20ec71ae658af263976442113f12d2404c3e3fbb4b634a898da3d4104ef847c615c4e442e740ace2b9cb4f72b395ad6ed529a", @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000c3bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095aee6a880117148859f3baf2ea80c3341b42b631928abcaf197e55b2df1744773fe8cc350492d5ba81e7d26831e2d84163eded4fcbc98fa0d69caf1aa8c306a92b9cb5a284e222be9caa9a670199f18a9a2b913bf2aa9452f39e31f8618bfcb52b3d5ce530c588f04fd7b88dfc2d32f7623dac845f7e8a414ae5d305e560a2f92440b172b4b6f3377b13a7032b5b507d96d7d071cc169699522c46ee2e7b34c10b2cda5d27304e3bc5da2d57069741360ff4a9428f40b7f4a85"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4000, 0x0, 0x865d, 0xfd, "ffff00"})
syz_open_pts(r1, 0x0)
io_setup(0x7, &(0x7f0000000000)=<r2=>0x0)
r3 = eventfd(0x10)
io_submit(r2, 0x1, &(0x7f00000006c0)=[&(0x7f0000000080)={0x1000000, 0x3e00, 0x0, 0x0, 0x4, r1, &(0x7f0000000400)='\x00', 0x1, 0xceaa, 0x0, 0x5, r3}])
close_range(r1, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
syz_clone(0x40800045, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r5, 0x402, 0x5)
r6 = open(&(0x7f0000000100)='./file0\x00', 0x301180, 0x8)
r7 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4)
setsockopt$inet6_int(r7, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @local, 0xe}, 0x1c)
fcntl$notify(r6, 0x402, 0x8000001f)
r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
unshare(0x2040600)
fcntl$notify(r8, 0x402, 0x8000003d)
mkdir(&(0x7f0000000000)='./file0\x00', 0x20)
sendmsg$inet(r6, &(0x7f0000000b00)={&(0x7f0000000200)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000940)=[{&(0x7f00000004c0)="6b63ca2f9a3c03a2aa48", 0xa}, {&(0x7f0000000500)="60af7d97024a5afa10a0a6d7f14387cee31ebb0d30c896bc336c80c4bbd055a454b953c5807baf9ef6a50a378889838e125097f31aeffb5c1be920accdaa6ae5705e488ddb32f6533f265376d1f4c833bb65e455f7419bcd6203e3ce344eeb9b61837a55a48ee9dec748fdb204334ec1fe353603", 0x74}, {&(0x7f0000000580)="25bf4fa838119329343624b929bc23513f4e0cd81fedce04ac2c2a3dcdf76f64d78bdc3c45", 0x25}, {&(0x7f00000005c0)="d9a22eaf60bff9cee95a812c2e747594e40594bc00bcb19891c1f695e42d754320536a19cb072b594f5248e26d1bdb08e22b2ac96a06db7af1d4c8ae082331cfbd3c34ba9253f40109619375334bae3330a78addb6052e3e26e29ed5da524debbeb11eb314f77dc9d8fa144161335594318caf998bac38fa211ceaec3e2bfcdeff0478f2824be7ba4ace1bbe4d4d8f13dafb72c19f4d5147d8ef76a2d6cb6f1fc64f3a7766c590bf9b8f9dc816978fc39645ff05bb36d741f045df510f268c4a96c421dd24ef", 0xc6}, {&(0x7f0000000700)="2ef3438ec0ec1953496f66e21d51087a6070be5008beab0722b1181abd3eaa4484e077bf079884638c594dfd2989ac3d47ba63a455c33454d092a7a63051055e115e84c8b1bb", 0x46}, {&(0x7f0000000780)="3d6f5a5d802a96d9b55e2a5d1f3e5ed4b92dd1cc861796011287bec6212d0e4eeb943eba3405797869d042514d75c4e62d647d409f769284f9193cccad203a9286dfce7133c6933fb468ceb51944d2ee067de5012ef63ea0e6314c894c9b5f58d85c6e44e3cd6e2a7a0e4adb188661635bbdd05e5eb6", 0x76}, {&(0x7f0000000800)="508805f5f090afd2b9280b5cdb0d4590f40a4c6ca507b17e615bbc7ae316b16ce1bdf0b4349a5d59a5da31f52afc9f32471165f5032345c297080590d15190ebb64252ae5a2eb57f2f0dec864603b3afb8ff5f15906d0c9d35e65dccf0fe1f6ba746da8c4dbd57b9a43209b99bc52da48d446a717ef5c1d4e6292f20dceb649b3134991df7f0b9b5e89ee8cc1e6761f52db9179d56b1bef09314e8465ff2ded667625dace03d930abc7670f2abd7e5a94a9952ef556433081551620b7354855088bd1055faa2ee23fb5beca477016fc03f67999387c36942e7", 0xd9}, {&(0x7f0000000900)="1d20156ce3dc444afd4a66ab073a969ac0b73436ca5ec1cd6deeca71a3649a9e331fb70de72925e4fbb18b2cc6c4acd84f8b7b58e274b9d4b22cc46a650c1d0c", 0x40}], 0x8, &(0x7f0000000a80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @remote}}}, @ip_tos_u8={{0x71, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @multicast2}}}], 0x58}, 0x804)

642.171978ms ago: executing program 3 (id=6784):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00'}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xd1cb3ed8a708bab1, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10)
syz_io_uring_setup(0x42c8, &(0x7f0000000300)={0x0, 0x125a, 0x40, 0xffffffff, 0x16f}, &(0x7f0000000040), &(0x7f00000002c0))

556.982709ms ago: executing program 3 (id=6785):
r0 = socket(0x10, 0x3, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000013c0)=ANY=[@ANYBLOB="1400000053045087"], 0x28}, 0x1, 0x0, 0x0, 0x64049}, 0x40000)

491.347971ms ago: executing program 3 (id=6786):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24004000)
connect$pppoe(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x4)
fcntl$notify(r2, 0x402, 0x8000003d)
close_range(r1, r2, 0x0)

441.021431ms ago: executing program 3 (id=6787):
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r2 = dup3(r1, r0, 0x0)
recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1, 0x0, 0xfffffffffffffc88}, 0xffffffff}], 0x1, 0x40000001, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001080)={0x0, r4}, 0x18)

399.174172ms ago: executing program 7 (id=6788):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
setreuid(0x0, 0xee00)

367.944243ms ago: executing program 7 (id=6789):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10)
syz_io_uring_setup(0x42c8, &(0x7f0000000300)={0x0, 0x125a, 0x40, 0xffffffff, 0x16f}, &(0x7f0000000040), &(0x7f00000002c0))

258.653115ms ago: executing program 7 (id=6790):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680))
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT')
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket(0x10, 0x3, 0x9)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800"], 0x48)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10)
sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)=ANY=[@ANYBLOB="14000000530401"], 0x28}, 0x1, 0x0, 0x0, 0x2404d}, 0x40000)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x800, 0x4, 0x80, 0x2, 0x46b}, 0x4, 0x0, 0x9, 0x7, 0x7, 0x1, 0x2, 0x17, 0x7, 0x6, {0xa, 0x2, 0x3, 0xfffffffd, 0x5, 0xc}}}}]}, 0x78}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r4, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfff2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004080}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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")
r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r10 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r10, &(0x7f0000004200)='t', 0x1)
sendfile(r10, r9, 0x0, 0x3ffff)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r10, r9, 0x0, 0x7ffff000)

226.767496ms ago: executing program 3 (id=6791):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000002200)={0x2, 0x0, 0x14, 0xc, 0x12a, &(0x7f0000001e00)="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"})
r1 = socket$unix(0x1, 0x0, 0x0)
bind$unix(r1, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0)
ioctl$SG_IO(r2, 0x2285, &(0x7f00000016c0)={0x0, 0xfffffffffffffffb, 0x2c, 0x2, @scatter={0x6, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/218, 0xda}, {&(0x7f00000002c0)=""/220, 0xdc}, {&(0x7f00000003c0)=""/82, 0x52}, {&(0x7f0000000440)=""/197, 0xc5}, {&(0x7f0000000540)=""/67, 0x43}, {&(0x7f0000000100)=""/38, 0x26}]}, &(0x7f0000000640)="ef074b550fe7d3f556870dc2b791606e1de507666c8530b331f41424b74fc436ef6d2407f571f363e24c1b93", &(0x7f0000000680)=""/4096, 0x1be, 0x1, 0xffffffffffffffff, &(0x7f0000001680)})
socket$nl_route(0x10, 0x3, 0x0)
syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%-5lx  \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r5, <r6=>0xffffffffffffffff}, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x17, 0x18, &(0x7f0000001740)=ANY=[@ANYRES64=r6, @ANYRES16=r4, @ANYBLOB="00000800000085000000a500552c7df000002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095bb682dd8fb67c603acf2fa9c2b50a35a2086b0e0504ca706102a3a4351497ee98406532618b0b646b402e688f744008dc3160952a2cbe3a60ef20e61c280e3d13957ebef2ed957fcb2c845d3cb173825fea18d04b0d0dd0bec4c643927b6d1f762b501788c6d535a3a3aeba14a1527dd8ab64205c4bb849f48f54355462f95c7e1990fcca652"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r7}, 0x10)
rt_sigpending(0x0, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
syz_emit_ethernet(0x66, 0x0, 0x0)
mlock(&(0x7f0000944000/0x3000)=nil, 0x3000)
close(r8)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

215.681756ms ago: executing program 0 (id=6792):
bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYRES8, @ANYBLOB="de04ec89d7efb03accc8056f361783b4c05481275a0a13f90201abdf9dd86780fe592c499155fb2f05b1af75ea38fcd91e01f33dd36cc1570fb7b5f1cf2ca3699419a302dacd6f24fade3a5bcdb8c4069312672f63ecbe217fbd678e0ba8179f708df87b65c8c31706edb274cf2a75bdde96bae40d2cfc35bd1e6c25bf32f8c27852b9cc0c14d802abfe68895cbb9bbdbdf749b3e116802a577795a8a1eba6934faeec925e870d01be8f0e5c541448ae1392e3b42482c439f8b200be5a0bf69b0061", @ANYRES64, @ANYBLOB], 0x48)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x9, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYBLOB="92f261e0d5e99f9b7f645859b20ec71ae658af263976442113f12d2404c3e3fbb4b634a898da3d4104ef847c615c4e442e740ace2b9cb4f72b395ad6ed529a", @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4000, 0x0, 0x865d, 0xfd, "ffff00"})
syz_open_pts(r1, 0x0)
io_setup(0x7, &(0x7f0000000000)=<r2=>0x0)
r3 = eventfd(0x10)
io_submit(r2, 0x1, &(0x7f00000006c0)=[&(0x7f0000000080)={0x1000000, 0x3e00, 0x0, 0x0, 0x4, r1, &(0x7f0000000400)='\x00', 0x1, 0xceaa, 0x0, 0x5, r3}])
close_range(r1, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
syz_clone(0x40800045, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r5, 0x402, 0x5)
r6 = open(&(0x7f0000000100)='./file0\x00', 0x301180, 0x8)
r7 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4)
setsockopt$inet6_int(r7, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @local, 0xe}, 0x1c)
fcntl$notify(r6, 0x402, 0x8000001f)
r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
unshare(0x2040600)
fcntl$notify(r8, 0x402, 0x8000003d)
mkdir(&(0x7f0000000000)='./file0\x00', 0x20)
execveat(r5, 0x0, 0x0, 0x0, 0x100)
sendmsg$inet(r6, &(0x7f0000000b00)={&(0x7f0000000200)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000940)=[{&(0x7f00000004c0)="6b63ca2f9a3c03a2aa48", 0xa}, {&(0x7f0000000500)="60af7d97024a5afa10a0a6d7f14387cee31ebb0d30c896bc336c80c4bbd055a454b953c5807baf9ef6a50a378889838e125097f31aeffb5c1be9", 0x3a}, {&(0x7f0000000580)="25bf4fa838119329343624b929bc23513f4e0cd81fedce04ac2c2a3dcdf76f64d78bdc3c45", 0x25}, {&(0x7f00000005c0)="d9a22eaf60bff9cee95a812c2e747594e40594bc00bcb19891c1f695e42d754320536a19cb072b594f5248e26d1bdb08e22b2ac96a06db7af1d4c8ae082331cfbd3c34ba9253f40109619375334bae3330a78addb6052e3e26e29ed5da524debbeb11eb314f77dc9d8fa144161335594318caf998bac38fa211ceaec3e2bfcdeff0478f2824be7ba4ace1bbe4d4d8f13dafb72c19f4d5147d8ef76a2d6cb6f1fc64f3a7766c590bf9b8f9dc816978fc39645ff05bb36d741f045df510f268c4a96c421dd24ef", 0xc6}, {&(0x7f0000000700)="2ef3438ec0ec1953496f66e21d51087a6070be5008beab0722b1181abd3eaa4484e077bf079884638c594dfd2989ac3d47ba63a455c33454d092a7a63051055e115e84c8b1bb", 0x46}, {&(0x7f0000000780)="3d6f5a5d802a96d9b55e2a5d1f3e5ed4b92dd1cc861796011287bec6212d0e4eeb943eba3405797869d042514d75c4e62d647d409f769284f9193cccad203a9286dfce7133c6933fb468ceb51944d2ee067de5012ef63ea0e6314c894c9b5f58d85c6e44e3cd6e2a7a0e4adb188661635bbdd05e5eb6", 0x76}, {&(0x7f0000000800)="508805f5f090afd2b9280b5cdb0d4590f40a4c6ca507b17e615bbc7ae316b16ce1bdf0b4349a5d59a5da31f52afc9f32471165f5032345c297080590d15190ebb64252ae5a2eb57f2f0dec864603b3afb8ff5f15906d0c9d35e65dccf0fe1f6ba746da8c4dbd57b9a43209b99bc52da48d446a717ef5c1d4e6292f20dceb649b3134991df7f0b9b5e89ee8cc1e6761f52db9179d56b1bef09314e8465ff2ded667625dace03d930abc7670f2abd7e5a94a9952ef556433081551620b7354855088bd1055faa2ee23fb5beca477016fc03f67999387c36942e7", 0xd9}, {&(0x7f0000000900)="1d20156ce3dc444afd4a66ab073a969ac0b73436ca5ec1cd6deeca71a3649a9e331fb70de72925e4fbb18b2cc6c4acd84f8b7b58e274b9d4b22cc46a650c1d0c", 0x40}], 0x8, &(0x7f0000000a80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @multicast2}}}], 0x58}, 0x804)
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x80, 0x0)

119.247708ms ago: executing program 2 (id=6793):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24004000)
connect$pppoe(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x4)
fcntl$notify(r2, 0x402, 0x8000003d)
close_range(r1, r2, 0x0)

42.310919ms ago: executing program 3 (id=6794):
r0 = accept(0xffffffffffffffff, &(0x7f0000000580)=@ax25={{}, [@netrom, @null, @null, @remote, @rose, @default, @netrom, @bcast]}, &(0x7f0000000600)=0x80)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000640), 0x4)
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9001}, 0x94)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000180)={[{@errors_remount}, {@max_dir_size_kb}]}, 0x1, 0x4f2, &(0x7f0000000c80)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x10, 0x8, 0x14}, 0x2c)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x68, 0x30, 0x829, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x42, 0x0)
pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0x8000c61)
r6 = socket$caif_stream(0x25, 0x1, 0x0)
sendmmsg$inet(r6, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x1000000}], 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000400001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300009ea100008500000006000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x18)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r8 = io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1)

0s ago: executing program 2 (id=6795):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400), &(0x7f00000004c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000015850000001700000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18)
r5 = socket(0x10, 0x3, 0x9)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x7fffffffffffffff)

kernel console output (not intermixed with test programs):

c: Node identity aaaaaaaaaa3, cluster identity 4711
[  390.804210][T22308] tipc: Enabled bearer <eth:ipvlan0>, priority 10
[  390.871773][T22310] FAULT_INJECTION: forcing a failure.
[  390.871773][T22310] name failslab, interval 1, probability 0, space 0, times 0
[  390.884462][T22310] CPU: 0 UID: 0 PID: 22310 Comm: syz.0.5947 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  390.884516][T22310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  390.884526][T22310] Call Trace:
[  390.884533][T22310]  <TASK>
[  390.884540][T22310]  __dump_stack+0x1d/0x30
[  390.884558][T22310]  dump_stack_lvl+0xe8/0x140
[  390.884616][T22310]  dump_stack+0x15/0x1b
[  390.884684][T22310]  should_fail_ex+0x265/0x280
[  390.884705][T22310]  should_failslab+0x8c/0xb0
[  390.884726][T22310]  kmem_cache_alloc_node_noprof+0x57/0x320
[  390.884752][T22310]  ? __alloc_skb+0x101/0x320
[  390.884818][T22310]  __alloc_skb+0x101/0x320
[  390.884857][T22310]  netlink_alloc_large_skb+0xba/0xf0
[  390.884915][T22310]  netlink_sendmsg+0x3cf/0x6b0
[  390.884947][T22310]  ? __pfx_netlink_sendmsg+0x10/0x10
[  390.885028][T22310]  __sock_sendmsg+0x142/0x180
[  390.885138][T22310]  ____sys_sendmsg+0x31e/0x4e0
[  390.885165][T22310]  ___sys_sendmsg+0x17b/0x1d0
[  390.885246][T22310]  __x64_sys_sendmsg+0xd4/0x160
[  390.885275][T22310]  x64_sys_call+0x191e/0x2ff0
[  390.885401][T22310]  do_syscall_64+0xd2/0x200
[  390.885428][T22310]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  390.885537][T22310]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  390.885585][T22310]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  390.885609][T22310] RIP: 0033:0x7ff0e99cebe9
[  390.885625][T22310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  390.885721][T22310] RSP: 002b:00007ff0e8437038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  390.885824][T22310] RAX: ffffffffffffffda RBX: 00007ff0e9c05fa0 RCX: 00007ff0e99cebe9
[  390.885898][T22310] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009
[  390.885914][T22310] RBP: 00007ff0e8437090 R08: 0000000000000000 R09: 0000000000000000
[  390.885926][T22310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  390.885936][T22310] R13: 00007ff0e9c06038 R14: 00007ff0e9c05fa0 R15: 00007ffecc760e78
[  390.885961][T22310]  </TASK>
[  391.117690][T22312] netlink: 'syz.0.5948': attribute type 13 has an invalid length.
[  391.132366][T22314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5949'.
[  391.150576][T22318] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=22318 comm=syz.0.5950
[  391.373067][T22325] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  391.404341][T22327] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5954'.
[  391.414520][T22327] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  391.444224][T22327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5954'.
[  391.521922][T22336] syzkaller0: refused to change device tx_queue_len
[  391.731978][T22347] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=22347 comm=syz.3.5961
[  391.754077][T22347] loop3: detected capacity change from 0 to 1024
[  391.777327][T22347] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  391.789529][T22347] ext4 filesystem being mounted at /581/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  391.803889][T22347] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.5961: lblock 0 mapped to illegal pblock 0 (length 6)
[  391.819372][T22347] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.5961: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  391.854590][T12107] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  391.890414][T22351] program syz.3.5962 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  391.915582][ T3614] tipc: Node number set to 10136234
[  391.924467][T22353] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=22353 comm=syz.3.5963
[  391.960055][T22353] loop3: detected capacity change from 0 to 1024
[  391.966984][T22355] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  391.988034][T22353] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  392.000691][T22353] ext4 filesystem being mounted at /583/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  392.017875][T22353] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.5963: lblock 0 mapped to illegal pblock 0 (length 6)
[  392.041883][T22353] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.5963: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  392.075304][T22361] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=22361 comm=syz.2.5966
[  392.105584][T12107] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  392.112461][T22363] syzkaller0: refused to change device tx_queue_len
[  392.154827][T22369] wg2: left promiscuous mode
[  392.159589][T22369] wg2: left allmulticast mode
[  392.193496][T22375] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5971'.
[  392.194533][T22369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5970'.
[  392.203255][T22375] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  392.245600][T22375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5971'.
[  392.313272][T22379] usb usb1: usbfs: process 22379 (syz.3.5972) did not claim interface 4 before use
[  392.369727][T22389] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  392.407897][T22395] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=22395 comm=syz.0.5978
[  392.480717][T22401] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=22401 comm=syz.0.5981
[  392.572462][T22407] loop7: detected capacity change from 0 to 512
[  392.590719][T22407] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  392.595377][T22409] loop3: detected capacity change from 0 to 256
[  392.607783][T22407] EXT4-fs error (device loop7): __ext4_iget:5464: inode #13: block 512: comm syz.7.5984: invalid block
[  392.628357][T22407] EXT4-fs (loop7): Remounting filesystem read-only
[  392.643169][T22407] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  392.726879][T15426] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  392.755470][T22423] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=22423 comm=syz.3.5991
[  392.785859][T22425] loop7: detected capacity change from 0 to 128
[  392.794914][T22423] loop3: detected capacity change from 0 to 1024
[  392.807277][T22423] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  392.819771][T22423] ext4 filesystem being mounted at /592/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  392.832247][T22423] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.5991: lblock 0 mapped to illegal pblock 0 (length 6)
[  392.846657][T22423] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.5991: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  392.917260][T12107] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  392.952747][T22436] syzkaller0: refused to change device tx_queue_len
[  393.075284][T22444] loop3: detected capacity change from 0 to 512
[  393.102393][T22444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  393.130254][T22451] netlink: 'syz.4.6001': attribute type 13 has an invalid length.
[  393.141463][T22444] ext4 filesystem being mounted at /595/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  393.279831][T12107] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  393.283124][T22451] bridge0: port 2(bridge_slave_1) entered disabled state
[  393.296078][T22451] bridge0: port 1(bridge_slave_0) entered disabled state
[  393.437787][   T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  393.447803][   T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  393.456942][   T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  393.466126][   T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  393.538028][T22483] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=22483 comm=syz.3.6012
[  393.559328][T22483] loop3: detected capacity change from 0 to 1024
[  393.577242][T22483] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  393.591483][T22483] ext4 filesystem being mounted at /599/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  393.606096][T22483] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.6012: lblock 0 mapped to illegal pblock 0 (length 6)
[  393.628480][T22483] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.6012: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  393.642344][T22495] syzkaller0: refused to change device tx_queue_len
[  393.677440][T12107] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  393.846576][T22505] program syz.7.6019 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  393.869917][T22510] netlink: 'syz.2.6021': attribute type 13 has an invalid length.
[  393.968361][T22510] bridge0: port 2(bridge_slave_1) entered disabled state
[  393.975730][T22510] bridge0: port 1(bridge_slave_0) entered disabled state
[  394.146571][ T5486] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  394.159834][ T5486] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  394.181121][ T5486] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  394.203090][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  394.380356][T22501] chnl_net:caif_netlink_parms(): no params data found
[  394.471144][T22501] bridge0: port 1(bridge_slave_0) entered blocking state
[  394.478340][T22501] bridge0: port 1(bridge_slave_0) entered disabled state
[  394.486228][T22501] bridge_slave_0: entered allmulticast mode
[  394.492918][T22501] bridge_slave_0: entered promiscuous mode
[  394.500033][T22501] bridge0: port 2(bridge_slave_1) entered blocking state
[  394.507186][T22501] bridge0: port 2(bridge_slave_1) entered disabled state
[  394.514885][T22501] bridge_slave_1: entered allmulticast mode
[  394.521465][T22501] bridge_slave_1: entered promiscuous mode
[  394.548424][T22501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  394.562365][T22501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  394.571731][T22561] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  394.616168][T22501] team0: Port device team_slave_0 added
[  394.630422][T22501] team0: Port device team_slave_1 added
[  394.674759][T22501] batman_adv: batadv0: Adding interface: batadv_slave_0
[  394.679557][T22573] loop7: detected capacity change from 0 to 512
[  394.682052][T22501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  394.714140][T22501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  394.717060][T22573] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  394.727750][T22501] batman_adv: batadv0: Adding interface: batadv_slave_1
[  394.733836][T22573] EXT4-fs error (device loop7): __ext4_iget:5464: inode #13: block 512: comm syz.7.6037: invalid block
[  394.739686][T22501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  394.752222][T22573] EXT4-fs (loop7): Remounting filesystem read-only
[  394.776838][T22501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  394.784185][T22573] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  394.859278][   T29] kauditd_printk_skb: 1092 callbacks suppressed
[  394.859294][   T29] audit: type=1326 audit(1757223411.690:28108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22581 comm="syz.0.6040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e99cebe9 code=0x7ffc0000
[  394.894269][T22582] program syz.0.6040 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  394.914144][T15426] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  394.918537][   T29] audit: type=1326 audit(1757223411.720:28109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22581 comm="syz.0.6040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e99cebe9 code=0x7ffc0000
[  394.946881][   T29] audit: type=1326 audit(1757223411.720:28110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22581 comm="syz.0.6040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7ff0e99cebe9 code=0x7ffc0000
[  394.970769][   T29] audit: type=1326 audit(1757223411.720:28111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22581 comm="syz.0.6040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e99cebe9 code=0x7ffc0000
[  394.994429][   T29] audit: type=1326 audit(1757223411.720:28112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22581 comm="syz.0.6040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e99cebe9 code=0x7ffc0000
[  395.018063][   T29] audit: type=1326 audit(1757223411.720:28113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22581 comm="syz.0.6040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff0e99cebe9 code=0x7ffc0000
[  395.041662][   T29] audit: type=1326 audit(1757223411.720:28114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22581 comm="syz.0.6040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e99cebe9 code=0x7ffc0000
[  395.065273][   T29] audit: type=1326 audit(1757223411.720:28115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22581 comm="syz.0.6040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e99cebe9 code=0x7ffc0000
[  395.088918][   T29] audit: type=1326 audit(1757223411.720:28116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22581 comm="syz.0.6040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff0e99cebe9 code=0x7ffc0000
[  395.112491][   T29] audit: type=1326 audit(1757223411.720:28117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22581 comm="syz.0.6040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e99cebe9 code=0x7ffc0000
[  395.171609][T22588] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  395.183356][T22501] hsr_slave_0: entered promiscuous mode
[  395.190395][T22501] hsr_slave_1: entered promiscuous mode
[  395.202813][T22501] debugfs: 'hsr0' already exists in 'hsr'
[  395.208652][T22501] Cannot create hsr debugfs directory
[  395.272741][T22596] FAULT_INJECTION: forcing a failure.
[  395.272741][T22596] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  395.286093][T22596] CPU: 1 UID: 0 PID: 22596 Comm: syz.4.6045 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  395.286126][T22596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  395.286143][T22596] Call Trace:
[  395.286150][T22596]  <TASK>
[  395.286159][T22596]  __dump_stack+0x1d/0x30
[  395.286180][T22596]  dump_stack_lvl+0xe8/0x140
[  395.286199][T22596]  dump_stack+0x15/0x1b
[  395.286271][T22596]  should_fail_ex+0x265/0x280
[  395.286301][T22596]  should_fail+0xb/0x20
[  395.286328][T22596]  should_fail_usercopy+0x1a/0x20
[  395.286417][T22596]  _copy_from_iter+0xd2/0xe80
[  395.286454][T22596]  ? __build_skb_around+0x1a0/0x200
[  395.286485][T22596]  ? __alloc_skb+0x223/0x320
[  395.286558][T22596]  netlink_sendmsg+0x471/0x6b0
[  395.286583][T22596]  ? __pfx_netlink_sendmsg+0x10/0x10
[  395.286682][T22596]  __sock_sendmsg+0x142/0x180
[  395.286760][T22596]  ____sys_sendmsg+0x31e/0x4e0
[  395.286787][T22596]  ___sys_sendmsg+0x17b/0x1d0
[  395.286896][T22596]  __x64_sys_sendmsg+0xd4/0x160
[  395.286925][T22596]  x64_sys_call+0x191e/0x2ff0
[  395.286944][T22596]  do_syscall_64+0xd2/0x200
[  395.287034][T22596]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  395.287056][T22596]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  395.287137][T22596]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  395.287201][T22596] RIP: 0033:0x7f2bc08aebe9
[  395.287214][T22596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  395.287231][T22596] RSP: 002b:00007f2bbf317038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  395.287247][T22596] RAX: ffffffffffffffda RBX: 00007f2bc0ae5fa0 RCX: 00007f2bc08aebe9
[  395.287262][T22596] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000006
[  395.287282][T22596] RBP: 00007f2bbf317090 R08: 0000000000000000 R09: 0000000000000000
[  395.287292][T22596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  395.287303][T22596] R13: 00007f2bc0ae6038 R14: 00007f2bc0ae5fa0 R15: 00007ffeb03b9998
[  395.287322][T22596]  </TASK>
[  395.500424][T22598] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  395.715175][T22501] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  395.736249][T22501] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  395.755991][T22501] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  395.771452][T22501] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  395.862526][T22501] 8021q: adding VLAN 0 to HW filter on device bond0
[  395.893888][T22501] 8021q: adding VLAN 0 to HW filter on device team0
[  395.907698][ T5468] bridge0: port 1(bridge_slave_0) entered blocking state
[  395.914812][ T5468] bridge0: port 1(bridge_slave_0) entered forwarding state
[  395.930223][ T5468] bridge0: port 2(bridge_slave_1) entered blocking state
[  395.937479][ T5468] bridge0: port 2(bridge_slave_1) entered forwarding state
[  395.949074][T22632] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  396.038999][T22501] 8021q: adding VLAN 0 to HW filter on device batadv0
[  396.106662][T22501] veth0_vlan: entered promiscuous mode
[  396.114543][T22501] veth1_vlan: entered promiscuous mode
[  396.129791][T22501] veth0_macvtap: entered promiscuous mode
[  396.137784][T22501] veth1_macvtap: entered promiscuous mode
[  396.149395][T22501] batman_adv: batadv0: Interface activated: batadv_slave_0
[  396.161713][T22501] batman_adv: batadv0: Interface activated: batadv_slave_1
[  396.173450][ T5468] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  396.182876][ T5468] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  396.191953][ T5468] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  396.202181][ T5468] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  396.468904][T22670] __nla_validate_parse: 10 callbacks suppressed
[  396.468925][T22670] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6063'.
[  396.530329][T22677] loop3: detected capacity change from 0 to 512
[  396.555085][T22677] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  396.568242][T22677] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  396.579928][ T3384] IPVS: starting estimator thread 0...
[  396.621207][T22501] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  396.640327][T22685] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6066'.
[  396.663510][T22687] loop4: detected capacity change from 0 to 512
[  396.670054][T22682] IPVS: using max 2400 ests per chain, 120000 per kthread
[  396.672635][T22689] program syz.7.6068 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  396.697519][T22687] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.6067: corrupted inode contents
[  396.711429][T22687] EXT4-fs (loop4): Remounting filesystem read-only
[  396.719631][T22687] EXT4-fs (loop4): 1 truncate cleaned up
[  396.727151][T22687] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  396.740996][T22687] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  396.759437][T22695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6069'.
[  396.771379][T22695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6069'.
[  396.787335][T22702] loop7: detected capacity change from 0 to 16384
[  396.850550][T22705] netlink: 'syz.2.6072': attribute type 13 has an invalid length.
[  396.903632][T22710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6073'.
[  396.935679][T22706] loop7: detected capacity change from 16384 to 16383
[  397.005714][T22716] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6074'.
[  397.141998][T22729] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  397.293501][T22739] syzkaller0: refused to change device tx_queue_len
[  397.805289][T22762] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6091'.
[  397.834242][T22762] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  397.909737][T22762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6091'.
[  398.028221][T22768] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  399.078373][T22794] loop7: detected capacity change from 0 to 512
[  399.108338][T22794] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.6101: corrupted inode contents
[  399.139148][T22794] EXT4-fs (loop7): Remounting filesystem read-only
[  399.163504][T22794] EXT4-fs (loop7): 1 truncate cleaned up
[  399.182745][T22794] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  399.226428][T22794] ext4 filesystem being mounted at /447/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  399.397578][T15426] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  399.457694][T22798] loop7: detected capacity change from 0 to 512
[  399.486471][T22798] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  399.503524][T22798] EXT4-fs error (device loop7): __ext4_iget:5464: inode #13: block 512: comm syz.7.6102: invalid block
[  399.525859][T22798] EXT4-fs (loop7): Remounting filesystem read-only
[  399.533595][T22798] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  399.671422][T22091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  399.722778][T22801] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6103'.
[  399.741834][T15426] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  399.751042][T22801] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  399.803308][T22806] loop3: detected capacity change from 0 to 512
[  399.815218][T22801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6103'.
[  399.838096][T22806] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.6106: corrupted inode contents
[  399.860779][T22814] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=22814 comm=syz.7.6107
[  399.874350][T22806] EXT4-fs (loop3): Remounting filesystem read-only
[  399.886163][T22806] __quota_error: 532 callbacks suppressed
[  399.886180][T22806] Quota error (device loop3): write_blk: dquota write failed
[  399.886732][   T29] audit: type=1326 audit(1757223416.720:28646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22811 comm="syz.7.6107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232dd5ebe9 code=0x7ffc0000
[  399.892198][T22806] Quota error (device loop3): qtree_write_dquot: Error -30 occurred while creating quota
[  399.899883][   T29] audit: type=1326 audit(1757223416.740:28647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22811 comm="syz.7.6107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f232dd5ebe9 code=0x7ffc0000
[  399.956583][   T29] audit: type=1326 audit(1757223416.740:28648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22811 comm="syz.7.6107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232dd5ebe9 code=0x7ffc0000
[  399.957348][T22814] loop7: detected capacity change from 0 to 1024
[  399.980218][   T29] audit: type=1326 audit(1757223416.740:28649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22811 comm="syz.7.6107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232dd5ebe9 code=0x7ffc0000
[  399.980436][   T29] audit: type=1326 audit(1757223416.760:28650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22811 comm="syz.7.6107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f232dd5ebe9 code=0x7ffc0000
[  400.010430][T22806] EXT4-fs (loop3): 1 truncate cleaned up
[  400.033920][   T29] audit: type=1326 audit(1757223416.760:28651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22811 comm="syz.7.6107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232dd5ebe9 code=0x7ffc0000
[  400.063305][   T29] audit: type=1326 audit(1757223416.760:28652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22811 comm="syz.7.6107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232dd5ebe9 code=0x7ffc0000
[  400.087170][   T29] audit: type=1326 audit(1757223416.770:28653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22811 comm="syz.7.6107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f232dd5ebe9 code=0x7ffc0000
[  400.087770][T22806] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  400.123373][T22806] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  400.145207][T22814] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  400.158300][T22814] ext4 filesystem being mounted at /450/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  400.296527][T22832] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=22832 comm=syz.4.6113
[  400.318148][T22829] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  400.326187][T22829] batman_adv: batadv0: Removing interface: batadv_slave_0
[  400.333800][T22832] loop4: detected capacity change from 0 to 1024
[  400.344873][T22829] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  400.353003][T22829] batman_adv: batadv0: Removing interface: batadv_slave_1
[  400.363192][T22832] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  400.386328][T22832] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.6113: lblock 0 mapped to illegal pblock 0 (length 6)
[  400.400047][T22832] EXT4-fs error (device loop4): ext4_ext_remove_space:2955: inode #15: comm syz.4.6113: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  400.455026][T22838] netlink: 'syz.4.6114': attribute type 13 has an invalid length.
[  400.503346][T22843] loop4: detected capacity change from 0 to 128
[  400.516190][T22843] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  400.650154][T22854] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=22854 comm=syz.7.6121
[  400.718099][T22854] loop7: detected capacity change from 0 to 1024
[  400.733695][T22859] loop3: detected capacity change from 0 to 512
[  400.748075][T22859] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.6123: corrupted inode contents
[  400.760904][T22854] ext4 filesystem being mounted at /453/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  400.778032][T22859] EXT4-fs (loop3): Remounting filesystem read-only
[  400.803681][T22859] EXT4-fs (loop3): 1 truncate cleaned up
[  400.829588][T22859] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  400.896772][T22872] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=22872 comm=syz.7.6126
[  400.919162][T22872] loop7: detected capacity change from 0 to 1024
[  400.955149][T22872] ext4 filesystem being mounted at /455/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  400.970174][T22872] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: comm syz.7.6126: lblock 0 mapped to illegal pblock 0 (length 6)
[  400.988610][T22872] EXT4-fs error (device loop7): ext4_ext_remove_space:2955: inode #15: comm syz.7.6126: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  401.077029][T22882] netlink: 'syz.7.6129': attribute type 13 has an invalid length.
[  401.100857][T22884] loop3: detected capacity change from 0 to 512
[  401.113215][T22884] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  401.123654][T22884] EXT4-fs error (device loop3): __ext4_iget:5464: inode #13: block 512: comm syz.3.6130: invalid block
[  401.134253][T22889] syzkaller0: refused to change device tx_queue_len
[  401.135135][T22884] EXT4-fs (loop3): Remounting filesystem read-only
[  401.375411][T22908] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=22908 comm=syz.0.6139
[  401.458312][T22914] wg2: left promiscuous mode
[  401.463172][T22914] wg2: left allmulticast mode
[  401.493855][T22914] __nla_validate_parse: 3 callbacks suppressed
[  401.493914][T22914] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6141'.
[  401.535552][T22920] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=22920 comm=syz.7.6142
[  401.562282][T22920] loop7: detected capacity change from 0 to 1024
[  401.574103][T22922] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6143'.
[  401.589314][T22920] ext4 filesystem being mounted at /460/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  401.613604][T22920] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: comm syz.7.6142: lblock 0 mapped to illegal pblock 0 (length 6)
[  401.629566][T22920] EXT4-fs error (device loop7): ext4_ext_remove_space:2955: inode #15: comm syz.7.6142: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  401.691118][T22936] loop7: detected capacity change from 0 to 512
[  401.707839][T22936] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.6148: corrupted inode contents
[  401.726047][T22936] EXT4-fs (loop7): Remounting filesystem read-only
[  401.733377][T22936] EXT4-fs (loop7): 1 truncate cleaned up
[  401.739672][T22936] ext4 filesystem being mounted at /461/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  401.863830][T22950] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=22950 comm=syz.2.6151
[  401.868963][T22948] loop4: detected capacity change from 0 to 512
[  401.899769][T22948] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  401.921467][T20608] IPVS: starting estimator thread 0...
[  401.947000][T20614] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=20614 comm=kworker/0:11
[  401.966786][T22965] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6157'.
[  402.018202][T22961] IPVS: using max 2016 ests per chain, 100800 per kthread
[  402.141159][T22976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6160'.
[  402.207830][T22981] syzkaller0: entered promiscuous mode
[  402.207855][T22981] syzkaller0: entered allmulticast mode
[  402.618594][T22990] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6165'.
[  402.618619][T22990] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  402.640855][T22990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6165'.
[  402.937668][T23013] syzkaller0: refused to change device tx_queue_len
[  403.081785][T23019] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6176'.
[  403.111807][T23019] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  403.158197][T23020] loop4: detected capacity change from 0 to 2048
[  403.180930][T23024] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6177'.
[  403.204209][T23019] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6176'.
[  403.252907][T23031] loop3: detected capacity change from 0 to 164
[  403.281074][T23031] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  403.296437][T23033] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=23033 comm=syz.7.6179
[  403.317181][T23031] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  403.349132][T23033] loop7: detected capacity change from 0 to 1024
[  403.388374][T23033] ext4 filesystem being mounted at /467/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  403.408170][T23033] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: comm syz.7.6179: lblock 0 mapped to illegal pblock 0 (length 6)
[  403.439112][T23033] EXT4-fs error (device loop7): ext4_ext_remove_space:2955: inode #15: comm syz.7.6179: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  403.734757][T23016] syz.4.6175 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  403.749151][T23016] CPU: 0 UID: 0 PID: 23016 Comm: syz.4.6175 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  403.749188][T23016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  403.749207][T23016] Call Trace:
[  403.749215][T23016]  <TASK>
[  403.749226][T23016]  __dump_stack+0x1d/0x30
[  403.749281][T23016]  dump_stack_lvl+0xe8/0x140
[  403.749302][T23016]  dump_stack+0x15/0x1b
[  403.749344][T23016]  dump_header+0x81/0x220
[  403.749386][T23016]  oom_kill_process+0x342/0x400
[  403.749420][T23016]  out_of_memory+0x979/0xb80
[  403.749511][T23016]  try_charge_memcg+0x5e6/0x9e0
[  403.749554][T23016]  obj_cgroup_charge_pages+0xa6/0x150
[  403.749653][T23016]  __memcg_kmem_charge_page+0x9f/0x170
[  403.749761][T23016]  __alloc_frozen_pages_noprof+0x188/0x360
[  403.749804][T23016]  alloc_pages_mpol+0xb3/0x250
[  403.749869][T23016]  alloc_pages_noprof+0x90/0x130
[  403.749901][T23016]  __vmalloc_node_range_noprof+0x6f2/0xe00
[  403.749965][T23016]  __kvmalloc_node_noprof+0x30f/0x4e0
[  403.750033][T23016]  ? ip_set_alloc+0x1f/0x30
[  403.750107][T23016]  ? ip_set_alloc+0x1f/0x30
[  403.750135][T23016]  ? __kmalloc_cache_noprof+0x189/0x320
[  403.750175][T23016]  ip_set_alloc+0x1f/0x30
[  403.750197][T23016]  hash_netiface_create+0x282/0x740
[  403.750294][T23016]  ? __pfx_hash_netiface_create+0x10/0x10
[  403.750321][T23016]  ip_set_create+0x3c9/0x960
[  403.750367][T23016]  ? __nla_parse+0x40/0x60
[  403.750472][T23016]  nfnetlink_rcv_msg+0x4c3/0x590
[  403.750527][T23016]  netlink_rcv_skb+0x123/0x220
[  403.750626][T23016]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  403.750684][T23016]  nfnetlink_rcv+0x16b/0x1690
[  403.750733][T23016]  ? __list_del_entry_valid_or_report+0x65/0x130
[  403.750822][T23016]  ? __rmqueue_pcplist+0x9d2/0xbd0
[  403.750867][T23016]  ? should_fail_ex+0x30/0x280
[  403.751037][T23016]  ? selinux_nlmsg_lookup+0x99/0x890
[  403.751080][T23016]  ? __rcu_read_unlock+0x34/0x70
[  403.751131][T23016]  ? __netlink_lookup+0x266/0x2a0
[  403.751171][T23016]  netlink_unicast+0x5bd/0x690
[  403.751234][T23016]  netlink_sendmsg+0x58b/0x6b0
[  403.751263][T23016]  ? __pfx_netlink_sendmsg+0x10/0x10
[  403.751415][T23016]  __sock_sendmsg+0x142/0x180
[  403.751450][T23016]  ____sys_sendmsg+0x31e/0x4e0
[  403.751485][T23016]  ___sys_sendmsg+0x17b/0x1d0
[  403.751612][T23016]  __x64_sys_sendmsg+0xd4/0x160
[  403.751643][T23016]  x64_sys_call+0x191e/0x2ff0
[  403.751671][T23016]  do_syscall_64+0xd2/0x200
[  403.751767][T23016]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  403.751797][T23016]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  403.751873][T23016]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.751902][T23016] RIP: 0033:0x7f2bc08aebe9
[  403.751922][T23016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  403.751996][T23016] RSP: 002b:00007f2bbf317038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  403.752038][T23016] RAX: ffffffffffffffda RBX: 00007f2bc0ae5fa0 RCX: 00007f2bc08aebe9
[  403.752051][T23016] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003
[  403.752063][T23016] RBP: 00007f2bc0931e19 R08: 0000000000000000 R09: 0000000000000000
[  403.752082][T23016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  403.752160][T23016] R13: 00007f2bc0ae6038 R14: 00007f2bc0ae5fa0 R15: 00007ffeb03b9998
[  403.752187][T23016]  </TASK>
[  403.752219][T23016] memory: usage 307200kB, limit 307200kB, failcnt 313
[  403.888452][T23055] loop3: detected capacity change from 0 to 128
[  403.892065][T23016] memory+swap: usage 308568kB, limit 9007199254740988kB, failcnt 0
[  403.892084][T23016] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0
[  403.910712][T23055] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  403.913505][T23016] Memory cgroup stats for /syz4:
[  403.935848][T23016] cache 8192
[  404.121672][T23016] rss 0
[  404.124447][T23016] shmem 0
[  404.127401][T23016] mapped_file 0
[  404.130907][T23016] dirty 0
[  404.133847][T23016] writeback 0
[  404.137185][T23016] workingset_refault_anon 69
[  404.141774][T23016] workingset_refault_file 1
[  404.146293][T23016] swap 1400832
[  404.149685][T23016] swapcached 28672
[  404.153448][T23016] pgpgin 7406
[  404.156760][T23016] pgpgout 7396
[  404.160130][T23016] pgfault 9413
[  404.163497][T23016] pgmajfault 38
[  404.167090][T23016] inactive_anon 4096
[  404.171057][T23016] active_anon 24576
[  404.174864][T23016] inactive_file 0
[  404.178547][T23016] active_file 12288
[  404.182360][T23016] unevictable 0
[  404.185862][T23016] hierarchical_memory_limit 314572800
[  404.191274][T23016] hierarchical_memsw_limit 9223372036854771712
[  404.197657][T23016] total_cache 8192
[  404.201382][T23016] total_rss 0
[  404.204687][T23016] total_shmem 0
[  404.208224][T23016] total_mapped_file 0
[  404.212210][T23016] total_dirty 0
[  404.215721][T23016] total_writeback 0
[  404.219570][T23016] total_workingset_refault_anon 69
[  404.224680][T23016] total_workingset_refault_file 1
[  404.229808][T23016] total_swap 1400832
[  404.233718][T23016] total_swapcached 28672
[  404.237975][T23016] total_pgpgin 7406
[  404.241792][T23016] total_pgpgout 7396
[  404.245699][T23016] total_pgfault 9413
[  404.249593][T23016] total_pgmajfault 38
[  404.253669][T23016] total_inactive_anon 4096
[  404.258130][T23016] total_active_anon 24576
[  404.262500][T23016] total_inactive_file 0
[  404.266736][T23016] total_active_file 12288
[  404.271281][T23016] total_unevictable 0
[  404.275262][T23016] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.6175,pid=23015,uid=0
[  404.290223][T23016] Memory cgroup out of memory: Killed process 23015 (syz.4.6175) total-vm:93960kB, anon-rss:1008kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  404.318013][T23056] syzkaller0: refused to change device tx_queue_len
[  404.381160][T23063] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6189'.
[  404.598875][T23084] loop7: detected capacity change from 0 to 512
[  404.623041][T23089] netlink: 'syz.3.6199': attribute type 13 has an invalid length.
[  404.633277][T23084] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.6197: corrupted inode contents
[  404.652976][T23084] EXT4-fs (loop7): Remounting filesystem read-only
[  404.660429][T23084] EXT4-fs (loop7): 1 truncate cleaned up
[  404.673631][T23084] ext4 filesystem being mounted at /471/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  404.701832][T23089] bridge0: port 2(bridge_slave_1) entered disabled state
[  404.709145][T23089] bridge0: port 1(bridge_slave_0) entered disabled state
[  404.804892][ T5468] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  404.837752][ T5468] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  404.854217][ T5468] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  404.871762][ T5468] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  404.964668][   T29] kauditd_printk_skb: 1062 callbacks suppressed
[  404.964687][   T29] audit: type=1326 audit(1757223677.795:29710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23112 comm="syz.0.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e99cebe9 code=0x7ffc0000
[  404.994883][   T29] audit: type=1326 audit(1757223677.795:29711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23112 comm="syz.0.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e99cebe9 code=0x7ffc0000
[  405.018624][   T29] audit: type=1326 audit(1757223677.795:29712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23112 comm="syz.0.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0e99cebe9 code=0x7ffc0000
[  405.042411][   T29] audit: type=1326 audit(1757223677.795:29713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23112 comm="syz.0.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e99cebe9 code=0x7ffc0000
[  405.066245][   T29] audit: type=1326 audit(1757223677.795:29714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23112 comm="syz.0.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0e99cebe9 code=0x7ffc0000
[  405.090069][   T29] audit: type=1326 audit(1757223677.795:29715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23112 comm="syz.0.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e99cebe9 code=0x7ffc0000
[  405.113865][   T29] audit: type=1326 audit(1757223677.795:29716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23112 comm="syz.0.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0e99cebe9 code=0x7ffc0000
[  405.137677][   T29] audit: type=1326 audit(1757223677.835:29717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23112 comm="syz.0.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e99cebe9 code=0x7ffc0000
[  405.161604][   T29] audit: type=1326 audit(1757223677.835:29718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23112 comm="syz.0.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e99cebe9 code=0x7ffc0000
[  405.185264][   T29] audit: type=1326 audit(1757223677.835:29719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23112 comm="syz.0.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff0e99cebe9 code=0x7ffc0000
[  405.587311][T20614] IPVS: starting estimator thread 0...
[  405.629100][T23126] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  405.675585][T23124] IPVS: using max 1968 ests per chain, 98400 per kthread
[  406.413714][T23157] loop3: detected capacity change from 0 to 512
[  406.427844][T23157] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  406.528128][T23165] __nla_validate_parse: 5 callbacks suppressed
[  406.528142][T23165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6223'.
[  406.976156][T23178] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6228'.
[  406.985309][T23178] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  407.010827][T23178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6228'.
[  407.059753][T23182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6229'.
[  407.627914][T23192] loop4: detected capacity change from 0 to 128
[  407.640183][T23192] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  407.641008][T23194] loop7: detected capacity change from 0 to 512
[  407.668352][T23194] ext4 filesystem being mounted at /473/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  407.672596][T23198] syzkaller0: refused to change device tx_queue_len
[  407.763584][T23206] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=23206 comm=syz.3.6237
[  407.784739][T23206] loop3: detected capacity change from 0 to 1024
[  407.797466][T23206] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  407.813701][T23206] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.6237: lblock 0 mapped to illegal pblock 0 (length 6)
[  407.828443][T23206] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.6237: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  407.904808][T23212] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6239'.
[  407.988043][T23222] syzkaller0: refused to change device tx_queue_len
[  408.000935][T23224] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=23224 comm=syz.4.6244
[  408.035822][T23224] loop4: detected capacity change from 0 to 1024
[  408.058645][T23224] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  408.135745][T23230] netlink: 'syz.3.6246': attribute type 13 has an invalid length.
[  408.145328][T23232] loop4: detected capacity change from 0 to 512
[  408.168633][T23232] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  408.241881][T23239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6249'.
[  408.307603][T23245] loop4: detected capacity change from 0 to 128
[  408.338112][T23245] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  408.568485][T23256] netlink: 'syz.3.6256': attribute type 13 has an invalid length.
[  408.715530][T23263] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=23263 comm=syz.3.6259
[  408.747414][T23263] loop3: detected capacity change from 0 to 1024
[  408.762747][T23267] loop7: detected capacity change from 0 to 512
[  408.771294][T23263] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  408.783790][T23263] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.6259: lblock 0 mapped to illegal pblock 0 (length 6)
[  408.797600][T23263] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.6259: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  408.817623][T23267] ext4 filesystem being mounted at /477/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  408.928942][T23278] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=23278 comm=syz.7.6264
[  408.977032][T23278] loop7: detected capacity change from 0 to 1024
[  408.997069][T23281] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6265'.
[  409.006128][T23281] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  409.017830][T23278] ext4 filesystem being mounted at /479/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  409.062998][T23281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6265'.
[  409.316278][T23304] netlink: 'syz.4.6272': attribute type 13 has an invalid length.
[  409.457593][T23307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6273'.
[  409.645989][T23315] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6275'.
[  409.837174][T23321] netlink: 'syz.4.6276': attribute type 13 has an invalid length.
[  410.012196][T23329] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  410.043873][   T29] kauditd_printk_skb: 530 callbacks suppressed
[  410.043888][   T29] audit: type=1326 audit(1757223682.875:30250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23327 comm="syz.4.6279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc08aebe9 code=0x7ffc0000
[  410.100716][   T29] audit: type=1326 audit(1757223682.875:30251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23327 comm="syz.4.6279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2bc08ad550 code=0x7ffc0000
[  410.124828][   T29] audit: type=1326 audit(1757223682.875:30252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23327 comm="syz.4.6279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc08aebe9 code=0x7ffc0000
[  410.148481][   T29] audit: type=1326 audit(1757223682.875:30253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23327 comm="syz.4.6279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2bc08ad550 code=0x7ffc0000
[  410.172346][   T29] audit: type=1326 audit(1757223682.875:30254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23327 comm="syz.4.6279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc08aebe9 code=0x7ffc0000
[  410.196115][   T29] audit: type=1326 audit(1757223682.875:30255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23327 comm="syz.4.6279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f2bc08aebe9 code=0x7ffc0000
[  410.220005][   T29] audit: type=1326 audit(1757223682.875:30256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23327 comm="syz.4.6279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc08aebe9 code=0x7ffc0000
[  410.243718][   T29] audit: type=1326 audit(1757223682.875:30257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23327 comm="syz.4.6279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2bc08aebe9 code=0x7ffc0000
[  410.267268][   T29] audit: type=1326 audit(1757223682.875:30258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23327 comm="syz.4.6279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc08aebe9 code=0x7ffc0000
[  410.290905][   T29] audit: type=1326 audit(1757223682.885:30259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23327 comm="syz.4.6279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc08aebe9 code=0x7ffc0000
[  410.421518][T23346] loop3: detected capacity change from 0 to 512
[  410.446193][T23346] EXT4-fs (loop3): too many log groups per flexible block group
[  410.454011][T23346] EXT4-fs (loop3): failed to initialize mballoc (-12)
[  410.474875][T23346] EXT4-fs (loop3): mount failed
[  410.587843][T23364] syzkaller0: refused to change device tx_queue_len
[  411.412201][T23388] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=23388 comm=syz.7.6299
[  411.476541][T23388] loop7: detected capacity change from 0 to 1024
[  411.519979][T23388] EXT4-fs mount: 40 callbacks suppressed
[  411.519999][T23388] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  411.614275][T23388] ext4 filesystem being mounted at /484/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  411.643666][T23388] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: comm syz.7.6299: lblock 0 mapped to illegal pblock 0 (length 6)
[  411.697543][T23388] EXT4-fs error (device loop7): ext4_ext_remove_space:2955: inode #15: comm syz.7.6299: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  411.715945][T23395] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  411.820031][T15426] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  411.994206][T23409] __nla_validate_parse: 3 callbacks suppressed
[  411.994221][T23409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6305'.
[  412.051509][T23411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6305'.
[  412.228074][T23424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6309'.
[  412.270981][T23427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6311'.
[  412.342205][T23430] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  412.393874][T23434] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=23434 comm=syz.0.6315
[  412.746657][T23446] syzkaller0: refused to change device tx_queue_len
[  413.115056][T23460] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6324'.
[  413.164633][T23471] netlink: 'syz.7.6329': attribute type 13 has an invalid length.
[  413.175461][T23474] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  413.315155][T23491] loop7: detected capacity change from 0 to 512
[  413.396424][T23491] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  413.412466][T23491] ext4 filesystem being mounted at /496/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  413.526570][T15426] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  413.572678][T23503] loop3: detected capacity change from 0 to 512
[  413.588537][T23503] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.6341: corrupted inode contents
[  413.632350][T23504] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6340'.
[  413.645982][T23503] EXT4-fs (loop3): Remounting filesystem read-only
[  413.677885][T23503] EXT4-fs (loop3): 1 truncate cleaned up
[  413.708920][T23503] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  413.730600][T23515] netlink: 'syz.4.6344': attribute type 13 has an invalid length.
[  413.742005][T23503] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  413.780479][T23519] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  413.858194][T23523] loop4: detected capacity change from 0 to 128
[  413.895271][T22501] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  413.944016][T23526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6348'.
[  414.038571][T23531] loop3: detected capacity change from 0 to 512
[  414.068133][T23531] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  414.100786][T23531] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  414.182678][T22501] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  414.209311][T23541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6353'.
[  414.261988][T23551] netlink: 'syz.3.6356': attribute type 13 has an invalid length.
[  414.274177][T23553] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=23553 comm=syz.4.6357
[  414.329157][T23553] loop4: detected capacity change from 0 to 1024
[  414.357630][T23553] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  414.370006][T23553] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  414.383784][T23553] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.6357: lblock 0 mapped to illegal pblock 0 (length 6)
[  414.398097][T23553] EXT4-fs error (device loop4): ext4_ext_remove_space:2955: inode #15: comm syz.4.6357: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  414.439173][T22091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  414.523633][T23563] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23563 comm=syz.3.6359
[  414.536256][T23563] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23563 comm=syz.3.6359
[  414.685081][T23568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6362'.
[  414.908337][T23574] FAULT_INJECTION: forcing a failure.
[  414.908337][T23574] name failslab, interval 1, probability 0, space 0, times 0
[  414.921054][T23574] CPU: 1 UID: 0 PID: 23574 Comm: syz.0.6365 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  414.921100][T23574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  414.921117][T23574] Call Trace:
[  414.921126][T23574]  <TASK>
[  414.921135][T23574]  __dump_stack+0x1d/0x30
[  414.921161][T23574]  dump_stack_lvl+0xe8/0x140
[  414.921184][T23574]  dump_stack+0x15/0x1b
[  414.921200][T23574]  should_fail_ex+0x265/0x280
[  414.921223][T23574]  should_failslab+0x8c/0xb0
[  414.921283][T23574]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[  414.921314][T23574]  ? sidtab_sid2str_get+0xa0/0x130
[  414.921362][T23574]  kmemdup_noprof+0x2b/0x70
[  414.921395][T23574]  sidtab_sid2str_get+0xa0/0x130
[  414.921492][T23574]  security_sid_to_context_core+0x1eb/0x2e0
[  414.921520][T23574]  security_sid_to_context+0x27/0x40
[  414.921545][T23574]  selinux_lsmprop_to_secctx+0x67/0xf0
[  414.921572][T23574]  security_lsmprop_to_secctx+0x43/0x80
[  414.921611][T23574]  audit_log_task_context+0x77/0x190
[  414.921652][T23574]  audit_log_task+0xf4/0x250
[  414.921719][T23574]  audit_seccomp+0x61/0x100
[  414.921744][T23574]  ? __seccomp_filter+0x68c/0x10d0
[  414.921820][T23574]  __seccomp_filter+0x69d/0x10d0
[  414.921848][T23574]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  414.921929][T23574]  ? vfs_write+0x7e8/0x960
[  414.921965][T23574]  __secure_computing+0x82/0x150
[  414.921991][T23574]  syscall_trace_enter+0xcf/0x1e0
[  414.922023][T23574]  do_syscall_64+0xac/0x200
[  414.922105][T23574]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  414.922177][T23574]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  414.922215][T23574]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.922241][T23574] RIP: 0033:0x7ff0e99cebe9
[  414.922285][T23574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  414.922308][T23574] RSP: 002b:00007ff0e8437038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  414.922330][T23574] RAX: ffffffffffffffda RBX: 00007ff0e9c05fa0 RCX: 00007ff0e99cebe9
[  414.922384][T23574] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006
[  414.922399][T23574] RBP: 00007ff0e8437090 R08: 0000000000000000 R09: 0000000000000000
[  414.922413][T23574] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000001
[  414.922429][T23574] R13: 00007ff0e9c06038 R14: 00007ff0e9c05fa0 R15: 00007ffecc760e78
[  414.922452][T23574]  </TASK>
[  415.166026][   T29] kauditd_printk_skb: 486 callbacks suppressed
[  415.166048][   T29] audit: type=1326 audit(1757223687.745:30743): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=23573 comm="syz.0.6365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7ff0e99cebe9 code=0x7ffc0000
[  415.193359][   T29] audit: type=1326 audit(1757223687.995:30744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23573 comm="syz.0.6365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff0e99cd5fc code=0x7ffc0000
[  415.216778][   T29] audit: type=1326 audit(1757223687.995:30745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23573 comm="syz.0.6365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff0e99cd69f code=0x7ffc0000
[  415.240289][   T29] audit: type=1326 audit(1757223687.995:30746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23573 comm="syz.0.6365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff0e99cd84a code=0x7ffc0000
[  415.263751][   T29] audit: type=1326 audit(1757223687.995:30747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23573 comm="syz.0.6365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e99cebe9 code=0x7ffc0000
[  415.287452][   T29] audit: type=1326 audit(1757223687.995:30748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23573 comm="syz.0.6365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e99cebe9 code=0x7ffc0000
[  415.313030][   T29] audit: type=1326 audit(1757223688.125:30749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23556 comm="syz.3.6359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2029cebe9 code=0x7fc00000
[  415.336725][   T29] audit: type=1326 audit(1757223688.125:30750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23556 comm="syz.3.6359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe2029cebe9 code=0x7fc00000
[  415.336910][T23576] loop7: detected capacity change from 0 to 512
[  415.360265][   T29] audit: type=1326 audit(1757223688.125:30751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23556 comm="syz.3.6359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2029cebe9 code=0x7fc00000
[  415.390166][   T29] audit: type=1326 audit(1757223688.125:30752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23556 comm="syz.3.6359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2029cebe9 code=0x7fc00000
[  415.429025][T23576] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  415.449729][T23576] ext4 filesystem being mounted at /501/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  415.452491][T23583] netlink: 'syz.2.6368': attribute type 13 has an invalid length.
[  415.539803][T15426] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  415.592090][T23595] loop7: detected capacity change from 0 to 512
[  415.643181][T23595] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.6373: corrupted inode contents
[  415.666779][T23595] EXT4-fs (loop7): Remounting filesystem read-only
[  415.682467][T23595] EXT4-fs (loop7): 1 truncate cleaned up
[  415.689066][T23595] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  415.701919][T23595] ext4 filesystem being mounted at /503/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  415.736230][T23608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6378'.
[  415.777428][T23618] netlink: 'syz.2.6382': attribute type 13 has an invalid length.
[  415.789606][T23620] loop4: detected capacity change from 0 to 512
[  415.816533][T23620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  415.832448][T23620] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  415.882172][T22091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  415.995323][T23633] syzkaller0: refused to change device tx_queue_len
[  416.067960][T23637] loop4: detected capacity change from 0 to 512
[  416.077097][T23637] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.6389: corrupted inode contents
[  416.089641][T23637] EXT4-fs (loop4): Remounting filesystem read-only
[  416.096899][T23637] EXT4-fs (loop4): 1 truncate cleaned up
[  416.103143][T23637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  416.115958][T23637] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  416.307528][T23643] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  416.779017][T23667] syzkaller0: refused to change device tx_queue_len
[  417.185089][T23683] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=23683 comm=syz.3.6404
[  417.206857][T23683] loop3: detected capacity change from 0 to 1024
[  417.216994][T23683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  417.229130][T23683] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  417.242734][T23683] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.6404: lblock 0 mapped to illegal pblock 0 (length 6)
[  417.256378][T23683] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.6404: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  417.289991][T22501] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  417.328868][T23687] __nla_validate_parse: 3 callbacks suppressed
[  417.328904][T23687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6405'.
[  417.416644][T23692] loop3: detected capacity change from 0 to 512
[  417.427816][T23692] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  417.440422][T23692] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  418.217835][T22501] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  418.309859][T23706] loop3: detected capacity change from 0 to 512
[  418.339365][T23706] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  418.353342][T23706] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  418.380796][T23706] FAULT_INJECTION: forcing a failure.
[  418.380796][T23706] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  418.394162][T23706] CPU: 0 UID: 0 PID: 23706 Comm: syz.3.6410 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  418.394197][T23706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  418.394210][T23706] Call Trace:
[  418.394216][T23706]  <TASK>
[  418.394224][T23706]  __dump_stack+0x1d/0x30
[  418.394244][T23706]  dump_stack_lvl+0xe8/0x140
[  418.394266][T23706]  dump_stack+0x15/0x1b
[  418.394353][T23706]  should_fail_ex+0x265/0x280
[  418.394378][T23706]  should_fail+0xb/0x20
[  418.394467][T23706]  should_fail_usercopy+0x1a/0x20
[  418.394542][T23706]  _copy_to_user+0x20/0xa0
[  418.394573][T23706]  simple_read_from_buffer+0xb5/0x130
[  418.394676][T23706]  proc_fail_nth_read+0x10e/0x150
[  418.394710][T23706]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  418.394817][T23706]  vfs_read+0x1a8/0x770
[  418.394843][T23706]  ? __rcu_read_unlock+0x4f/0x70
[  418.394868][T23706]  ? __fget_files+0x184/0x1c0
[  418.394972][T23706]  ksys_read+0xda/0x1a0
[  418.395002][T23706]  __x64_sys_read+0x40/0x50
[  418.395023][T23706]  x64_sys_call+0x27bc/0x2ff0
[  418.395043][T23706]  do_syscall_64+0xd2/0x200
[  418.395099][T23706]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  418.395129][T23706]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  418.395179][T23706]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.395236][T23706] RIP: 0033:0x7fe2029cd5fc
[  418.395256][T23706] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  418.395343][T23706] RSP: 002b:00007fe2013fd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  418.395364][T23706] RAX: ffffffffffffffda RBX: 00007fe202c06090 RCX: 00007fe2029cd5fc
[  418.395439][T23706] RDX: 000000000000000f RSI: 00007fe2013fd0a0 RDI: 000000000000000f
[  418.395456][T23706] RBP: 00007fe2013fd090 R08: 0000000000000000 R09: 0000000000000000
[  418.395470][T23706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  418.395501][T23706] R13: 00007fe202c06128 R14: 00007fe202c06090 R15: 00007ffc06370738
[  418.395527][T23706]  </TASK>
[  418.618309][T15426] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  418.627792][T22501] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  418.697434][T23714] syzkaller0: refused to change device tx_queue_len
[  418.719174][T23717] loop7: detected capacity change from 0 to 512
[  418.733338][T23716] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=23716 comm=syz.3.6414
[  418.748833][T23717] EXT4-fs error (device loop7): ext4_iget_extra_inode:5104: inode #15: comm syz.7.6412: corrupted in-inode xattr: overlapping e_value 
[  418.764032][T23717] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.6412: couldn't read orphan inode 15 (err -117)
[  418.786302][T23716] loop3: detected capacity change from 0 to 1024
[  418.806531][T23717] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  418.829005][T23716] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  418.841319][T23716] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  418.855004][T23716] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.6414: lblock 0 mapped to illegal pblock 0 (length 6)
[  418.857502][T23720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6415'.
[  418.869259][T23716] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.6414: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  418.911593][T22501] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  419.074725][T22091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  419.168449][T15426] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  419.263825][T23749] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6424'.
[  419.276441][T23749] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  419.325115][T23749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6424'.
[  419.402514][T23756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6425'.
[  419.443766][T23762] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=23762 comm=syz.7.6427
[  419.468327][T23762] loop7: detected capacity change from 0 to 1024
[  419.509634][T23762] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  419.522639][T23762] ext4 filesystem being mounted at /506/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  419.535464][T23762] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: comm syz.7.6427: lblock 0 mapped to illegal pblock 0 (length 6)
[  419.549477][T23762] EXT4-fs error (device loop7): ext4_ext_remove_space:2955: inode #15: comm syz.7.6427: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  419.584478][T15426] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  419.593736][T23769] loop3: detected capacity change from 0 to 512
[  419.607811][T23769] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.6429: corrupted inode contents
[  419.620078][T23769] EXT4-fs (loop3): Remounting filesystem read-only
[  419.628124][T23769] EXT4-fs (loop3): 1 truncate cleaned up
[  419.640070][T23769] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  419.655677][T23769] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  419.832503][T23785] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6443'.
[  419.842062][T23785] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  419.878133][T23785] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6443'.
[  420.046332][T23795] FAULT_INJECTION: forcing a failure.
[  420.046332][T23795] name failslab, interval 1, probability 0, space 0, times 0
[  420.059109][T23795] CPU: 1 UID: 0 PID: 23795 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) 
[  420.059143][T23795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  420.059159][T23795] Call Trace:
[  420.059168][T23795]  <TASK>
[  420.059175][T23795]  __dump_stack+0x1d/0x30
[  420.059196][T23795]  dump_stack_lvl+0xe8/0x140
[  420.059215][T23795]  dump_stack+0x15/0x1b
[  420.059232][T23795]  should_fail_ex+0x265/0x280
[  420.059260][T23795]  should_failslab+0x8c/0xb0
[  420.059290][T23795]  kmem_cache_alloc_noprof+0x50/0x310
[  420.059327][T23795]  ? mas_alloc_nodes+0x265/0x520
[  420.059370][T23795]  mas_alloc_nodes+0x265/0x520
[  420.059405][T23795]  mas_preallocate+0x33e/0x520
[  420.059449][T23795]  mmap_region+0xbdd/0x1630
[  420.059514][T23795]  do_mmap+0x9b3/0xbe0
[  420.059558][T23795]  vm_mmap_pgoff+0x17a/0x2e0
[  420.059595][T23795]  ksys_mmap_pgoff+0xc2/0x310
[  420.059618][T23795]  ? __x64_sys_mmap+0x49/0x70
[  420.059648][T23795]  x64_sys_call+0x14a3/0x2ff0
[  420.059674][T23795]  do_syscall_64+0xd2/0x200
[  420.059704][T23795]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  420.059728][T23795]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  420.059764][T23795]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  420.059792][T23795] RIP: 0033:0x7f2bc08aec23
[  420.059811][T23795] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7
[  420.059834][T23795] RSP: 002b:00007f2bbf316e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  420.059858][T23795] RAX: ffffffffffffffda RBX: 00000000000002be RCX: 00007f2bc08aec23
[  420.059874][T23795] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000
[  420.059889][T23795] RBP: 00002000000006c2 R08: 00000000ffffffff R09: 0000000000000000
[  420.059900][T23795] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004
[  420.059912][T23795] R13: 00007f2bbf316ef0 R14: 00007f2bbf316eb0 R15: 0000200000000b00
[  420.059931][T23795]  </TASK>
[  420.275892][T23797] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6437'.
[  420.277071][   T29] kauditd_printk_skb: 507 callbacks suppressed
[  420.277089][   T29] audit: type=1326 audit(1757223693.115:31254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23798 comm="syz.0.6438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e99cebe9 code=0x7ffc0000
[  420.285086][T23797] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  420.314824][   T29] audit: type=1326 audit(1757223693.125:31255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23798 comm="syz.0.6438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7ff0e99cebe9 code=0x7ffc0000
[  420.348021][   T29] audit: type=1326 audit(1757223693.125:31256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23798 comm="syz.0.6438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e99cebe9 code=0x7ffc0000
[  420.365457][T23799] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=23799 comm=syz.0.6438
[  420.371828][   T29] audit: type=1326 audit(1757223693.125:31257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23798 comm="syz.0.6438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e99cebe9 code=0x7ffc0000
[  420.407932][   T29] audit: type=1326 audit(1757223693.125:31258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23798 comm="syz.0.6438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff0e99cebe9 code=0x7ffc0000
[  420.408479][T23802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6437'.
[  420.431496][   T29] audit: type=1326 audit(1757223693.125:31259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23798 comm="syz.0.6438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e99cebe9 code=0x7ffc0000
[  420.463989][   T29] audit: type=1326 audit(1757223693.125:31260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23798 comm="syz.0.6438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e99cebe9 code=0x7ffc0000
[  420.487672][   T29] audit: type=1326 audit(1757223693.125:31261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23798 comm="syz.0.6438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0e99cebe9 code=0x7ffc0000
[  420.511273][   T29] audit: type=1326 audit(1757223693.125:31262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23798 comm="syz.0.6438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e99cebe9 code=0x7ffc0000
[  420.535202][   T29] audit: type=1326 audit(1757223693.125:31263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23798 comm="syz.0.6438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e99cebe9 code=0x7ffc0000
[  420.633162][T23808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6441'.
[  421.032604][T23833] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=23833 comm=syz.7.6450
[  421.053215][T23833] loop7: detected capacity change from 0 to 1024
[  421.067347][T23833] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  421.079900][T23833] ext4 filesystem being mounted at /518/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  421.100136][T23833] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: comm syz.7.6450: lblock 0 mapped to illegal pblock 0 (length 6)
[  421.114018][T23833] EXT4-fs error (device loop7): ext4_ext_remove_space:2955: inode #15: comm syz.7.6450: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  421.146105][T15426] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  421.691979][T23856] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=23856 comm=syz.2.6457
[  421.805102][T23862] syzkaller0: refused to change device tx_queue_len
[  421.828034][T23864] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=23864 comm=syz.4.6461
[  421.861002][T23864] loop4: detected capacity change from 0 to 1024
[  421.889154][T23864] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  421.907636][T23866] netlink: 'syz.2.6462': attribute type 13 has an invalid length.
[  421.916358][T23864] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  421.929344][T23864] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.6461: lblock 0 mapped to illegal pblock 0 (length 6)
[  421.943289][T23864] EXT4-fs error (device loop4): ext4_ext_remove_space:2955: inode #15: comm syz.4.6461: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  421.981348][T22091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  422.273496][T23881] loop7: detected capacity change from 0 to 164
[  422.303228][T23881] syz.7.6466: attempt to access beyond end of device
[  422.303228][T23881] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  422.317285][T23881] syz.7.6466: attempt to access beyond end of device
[  422.317285][T23881] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164
[  422.602732][T22501] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  422.659429][T23903] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  422.677048][T23905] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=23905 comm=syz.7.6474
[  422.701240][T23905] loop7: detected capacity change from 0 to 1024
[  422.732589][T23905] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  422.746595][T23905] ext4 filesystem being mounted at /524/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  422.765141][T23905] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: comm syz.7.6474: lblock 0 mapped to illegal pblock 0 (length 6)
[  422.809246][T23905] EXT4-fs error (device loop7): ext4_ext_remove_space:2955: inode #15: comm syz.7.6474: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  422.833732][T23916] pim6reg: entered allmulticast mode
[  422.849221][T23916] pim6reg: left allmulticast mode
[  422.901777][T15426] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  423.380439][T23945] loop4: detected capacity change from 0 to 512
[  423.404432][T23945] EXT4-fs: Ignoring removed nobh option
[  423.435919][T23945] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  423.476679][T23945] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.6488: iget: bad i_size value: 38620345925642
[  423.508924][T23945] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.6488: couldn't read orphan inode 15 (err -117)
[  423.565018][T23954] __nla_validate_parse: 1 callbacks suppressed
[  423.565036][T23954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6491'.
[  423.597199][T23945] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  423.612547][T23958] netlink: 'syz.2.6492': attribute type 13 has an invalid length.
[  423.630083][T23960] loop3: detected capacity change from 0 to 512
[  423.660320][T23960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  423.680420][T22091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  423.695442][T23960] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  423.738567][T23968] bond1: entered promiscuous mode
[  423.743713][T23968] bond1: entered allmulticast mode
[  423.749973][T23968] 8021q: adding VLAN 0 to HW filter on device bond1
[  423.759045][T23968] bond1 (unregistering): Released all slaves
[  423.828575][T22501] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  423.853568][T23979] syzkaller0: refused to change device tx_queue_len
[  424.035459][T23993] netlink: 'syz.3.6505': attribute type 13 has an invalid length.
[  424.043523][T23999] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  424.069730][T23996] loop7: detected capacity change from 0 to 512
[  424.083289][T24003] loop4: detected capacity change from 0 to 512
[  424.090574][T23996] EXT4-fs: Ignoring removed nobh option
[  424.098967][T23996] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  424.109493][T23996] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.6506: iget: bad i_size value: 38620345925642
[  424.123268][T23996] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.6506: couldn't read orphan inode 15 (err -117)
[  424.136495][T24003] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  424.143196][T23996] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  424.153857][T24003] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  424.186288][T15426] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  424.197729][T22091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  424.595047][T24034] netlink: 'syz.2.6519': attribute type 13 has an invalid length.
[  424.828085][T24041] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=24041 comm=syz.2.6522
[  424.889740][T24043] netlink: 248 bytes leftover after parsing attributes in process `syz.2.6523'.
[  425.243232][T24057] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=24057 comm=syz.0.6529
[  425.276780][T24059] loop3: detected capacity change from 0 to 512
[  425.287258][   T29] kauditd_printk_skb: 646 callbacks suppressed
[  425.287276][   T29] audit: type=1326 audit(1757223698.125:31910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24060 comm="syz.2.6531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033bb4ebe9 code=0x7ffc0000
[  425.317194][   T29] audit: type=1326 audit(1757223698.125:31911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24060 comm="syz.2.6531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033bb4ebe9 code=0x7ffc0000
[  425.349011][T24059] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.6530: corrupted inode contents
[  425.376162][   T29] audit: type=1326 audit(1757223698.125:31912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24060 comm="syz.2.6531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f033bb4ebe9 code=0x7ffc0000
[  425.399995][   T29] audit: type=1326 audit(1757223698.125:31913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24060 comm="syz.2.6531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033bb4ebe9 code=0x7ffc0000
[  425.405193][T24059] EXT4-fs (loop3): Remounting filesystem read-only
[  425.424162][   T29] audit: type=1326 audit(1757223698.125:31914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24060 comm="syz.2.6531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033bb4ebe9 code=0x7ffc0000
[  425.431753][T24059] Quota error (device loop3): write_blk: dquota write failed
[  425.454121][   T29] audit: type=1326 audit(1757223698.175:31915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24056 comm="syz.0.6529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff0e99cec77 code=0x7ffc0000
[  425.461338][T24059] Quota error (device loop3): qtree_write_dquot: Error -30 occurred while creating quota
[  425.484803][   T29] audit: type=1326 audit(1757223698.175:31916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24056 comm="syz.0.6529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff0e99cd550 code=0x7ffc0000
[  425.484838][   T29] audit: type=1326 audit(1757223698.175:31917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24056 comm="syz.0.6529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff0e99cd84a code=0x7ffc0000
[  425.521625][T24059] EXT4-fs (loop3): 1 truncate cleaned up
[  425.550219][T24059] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  425.563447][T24059] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  425.595330][T24076] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6536'.
[  425.614974][T24076] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  425.618403][T24068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6533'.
[  425.665630][T24076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6536'.
[  425.718747][T22501] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  425.767431][T24087] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  426.240041][T24101] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=24101 comm=syz.3.6543
[  426.290900][T24101] loop3: detected capacity change from 0 to 1024
[  426.307228][T24101] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  426.336872][T24101] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  426.401085][T24101] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.6543: lblock 0 mapped to illegal pblock 0 (length 6)
[  426.427189][T24101] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.6543: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  426.442973][T24105] syzkaller0: refused to change device tx_queue_len
[  426.499246][T22501] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  426.520670][T24110] loop7: detected capacity change from 0 to 512
[  426.555060][T24113] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=24113 comm=syz.3.6547
[  426.578223][T24110] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  426.594722][T24110] ext4 filesystem being mounted at /534/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  426.610235][T24113] loop3: detected capacity change from 0 to 1024
[  426.636989][T24113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  426.669275][T24113] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  426.693580][T24113] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.6547: lblock 0 mapped to illegal pblock 0 (length 6)
[  426.723809][T15426] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  426.723912][T24113] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.6547: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  426.789136][T24124] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  426.822976][T22501] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  426.870213][T24126] netlink: 'syz.4.6552': attribute type 13 has an invalid length.
[  426.879383][T24128] loop7: detected capacity change from 0 to 128
[  426.907088][T24128] FAULT_INJECTION: forcing a failure.
[  426.907088][T24128] name failslab, interval 1, probability 0, space 0, times 0
[  426.919829][T24128] CPU: 0 UID: 0 PID: 24128 Comm: syz.7.6553 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  426.919941][T24128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  426.919957][T24128] Call Trace:
[  426.919964][T24128]  <TASK>
[  426.919973][T24128]  __dump_stack+0x1d/0x30
[  426.919997][T24128]  dump_stack_lvl+0xe8/0x140
[  426.920016][T24128]  dump_stack+0x15/0x1b
[  426.920197][T24128]  should_fail_ex+0x265/0x280
[  426.920235][T24128]  should_failslab+0x8c/0xb0
[  426.920268][T24128]  kmem_cache_alloc_noprof+0x50/0x310
[  426.920297][T24128]  ? security_file_alloc+0x32/0x100
[  426.920359][T24128]  security_file_alloc+0x32/0x100
[  426.920472][T24128]  init_file+0x5c/0x1d0
[  426.920502][T24128]  alloc_empty_file+0x8b/0x200
[  426.920591][T24128]  path_openat+0x68/0x2170
[  426.920652][T24128]  ? _parse_integer_limit+0x170/0x190
[  426.920679][T24128]  ? kstrtoull+0x111/0x140
[  426.920703][T24128]  ? kstrtouint+0x76/0xc0
[  426.920734][T24128]  do_filp_open+0x109/0x230
[  426.920789][T24128]  do_sys_openat2+0xa6/0x110
[  426.920825][T24128]  __x64_sys_openat+0xf2/0x120
[  426.920958][T24128]  x64_sys_call+0x2e9c/0x2ff0
[  426.921000][T24128]  do_syscall_64+0xd2/0x200
[  426.921062][T24128]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  426.921086][T24128]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  426.921114][T24128]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  426.921142][T24128] RIP: 0033:0x7f232dd5ebe9
[  426.921161][T24128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  426.921203][T24128] RSP: 002b:00007f232c7bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  426.921240][T24128] RAX: ffffffffffffffda RBX: 00007f232df95fa0 RCX: 00007f232dd5ebe9
[  426.921257][T24128] RDX: 000000000000275a RSI: 0000200000000840 RDI: ffffffffffffff9c
[  426.921273][T24128] RBP: 00007f232c7bf090 R08: 0000000000000000 R09: 0000000000000000
[  426.921340][T24128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  426.921356][T24128] R13: 00007f232df96038 R14: 00007f232df95fa0 R15: 00007ffd00b15cf8
[  426.921383][T24128]  </TASK>
[  427.215622][T24136] syzkaller0: refused to change device tx_queue_len
[  427.335186][T24142] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=24142 comm=syz.4.6558
[  427.391957][T24142] loop4: detected capacity change from 0 to 1024
[  427.449433][T24142] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  427.492321][T24142] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  427.530902][T24142] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.6558: lblock 0 mapped to illegal pblock 0 (length 6)
[  427.588222][T24142] EXT4-fs error (device loop4): ext4_ext_remove_space:2955: inode #15: comm syz.4.6558: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  427.675158][T22091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  427.814332][T24081] syz.2.6534 (24081) used greatest stack depth: 6328 bytes left
[  427.856657][T24160] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6564'.
[  427.879382][T24160] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  427.922919][T24160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6564'.
[  427.991630][T24170] syzkaller0: refused to change device tx_queue_len
[  428.343709][T24181] loop4: detected capacity change from 0 to 512
[  428.395308][T24181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  428.418095][T24181] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  428.541690][T24194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6576'.
[  428.550708][T24194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6576'.
[  428.562238][T22091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  428.619707][T24196] netlink: 'syz.4.6577': attribute type 13 has an invalid length.
[  428.738749][T24206] loop4: detected capacity change from 0 to 128
[  428.753722][T24206] syz.4.6583: attempt to access beyond end of device
[  428.753722][T24206] loop4: rw=0, sector=2072, nr_sectors = 1 limit=128
[  428.910300][T24216] loop4: detected capacity change from 0 to 512
[  428.947948][T24216] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  428.977728][T24221] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=24221 comm=syz.2.6588
[  428.990695][T24216] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  429.139451][T22091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  429.210413][T24232] netlink: 'syz.2.6591': attribute type 13 has an invalid length.
[  429.476871][T24247] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6597'.
[  429.601010][T24256] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=24256 comm=syz.4.6600
[  429.622113][T24256] loop4: detected capacity change from 0 to 1024
[  429.646885][T24256] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  429.665741][T24256] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  429.686433][T24256] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.6600: lblock 0 mapped to illegal pblock 0 (length 6)
[  429.702446][T24256] EXT4-fs error (device loop4): ext4_ext_remove_space:2955: inode #15: comm syz.4.6600: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  429.784616][T22091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  430.182869][T24271] netlink: 'syz.3.6604': attribute type 13 has an invalid length.
[  430.277769][T24279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6607'.
[  430.286733][T24279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6607'.
[  430.498697][T24288] loop3: detected capacity change from 0 to 512
[  430.527573][T24288] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  430.544362][T24288] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  430.553425][T24294] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6609'.
[  430.569145][T24294] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  430.626411][T24294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6609'.
[  430.636221][T24304] random: crng reseeded on system resumption
[  430.653959][   T29] kauditd_printk_skb: 601 callbacks suppressed
[  430.653976][   T29] audit: type=1326 audit(1757223703.485:32519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24293 comm="syz.2.6609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033bb4ebe9 code=0x7ffc0000
[  430.686370][   T29] audit: type=1326 audit(1757223703.495:32520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24293 comm="syz.2.6609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f033bb4d550 code=0x7ffc0000
[  430.710014][   T29] audit: type=1326 audit(1757223703.495:32521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24293 comm="syz.2.6609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033bb4ebe9 code=0x7ffc0000
[  430.734029][   T29] audit: type=1326 audit(1757223703.495:32522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24293 comm="syz.2.6609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f033bb4d550 code=0x7ffc0000
[  430.757973][   T29] audit: type=1326 audit(1757223703.495:32523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24293 comm="syz.2.6609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033bb4ebe9 code=0x7ffc0000
[  430.781573][   T29] audit: type=1326 audit(1757223703.495:32524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24293 comm="syz.2.6609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033bb4ebe9 code=0x7ffc0000
[  430.805202][   T29] audit: type=1326 audit(1757223703.495:32525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24293 comm="syz.2.6609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f033bb4ebe9 code=0x7ffc0000
[  430.828959][   T29] audit: type=1326 audit(1757223703.495:32526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24293 comm="syz.2.6609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033bb4ebe9 code=0x7ffc0000
[  430.852684][   T29] audit: type=1326 audit(1757223703.495:32527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24293 comm="syz.2.6609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f033bb4ebe9 code=0x7ffc0000
[  430.876269][   T29] audit: type=1326 audit(1757223703.495:32528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24293 comm="syz.2.6609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033bb4ebe9 code=0x7ffc0000
[  430.901322][T22501] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  430.916900][T24307] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=24307 comm=syz.4.6617
[  430.953706][T24307] loop4: detected capacity change from 0 to 1024
[  430.971996][T24307] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  430.994423][T24307] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.6617: lblock 0 mapped to illegal pblock 0 (length 6)
[  430.998367][T24315] FAULT_INJECTION: forcing a failure.
[  430.998367][T24315] name failslab, interval 1, probability 0, space 0, times 0
[  431.020388][T24315] CPU: 0 UID: 0 PID: 24315 Comm: syz.2.6619 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  431.020420][T24315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  431.020436][T24315] Call Trace:
[  431.020480][T24315]  <TASK>
[  431.020491][T24315]  __dump_stack+0x1d/0x30
[  431.020518][T24315]  dump_stack_lvl+0xe8/0x140
[  431.020544][T24315]  dump_stack+0x15/0x1b
[  431.020623][T24315]  should_fail_ex+0x265/0x280
[  431.020654][T24315]  should_failslab+0x8c/0xb0
[  431.020749][T24315]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[  431.020789][T24315]  ? sidtab_sid2str_get+0xa0/0x130
[  431.020856][T24315]  kmemdup_noprof+0x2b/0x70
[  431.020888][T24315]  sidtab_sid2str_get+0xa0/0x130
[  431.020911][T24315]  security_sid_to_context_core+0x1eb/0x2e0
[  431.020947][T24315]  security_sid_to_context+0x27/0x40
[  431.020966][T24315]  selinux_lsmprop_to_secctx+0x67/0xf0
[  431.020987][T24315]  security_lsmprop_to_secctx+0x43/0x80
[  431.021022][T24315]  audit_log_task_context+0x77/0x190
[  431.021130][T24315]  audit_log_task+0xf4/0x250
[  431.021162][T24315]  audit_seccomp+0x61/0x100
[  431.021195][T24315]  ? __seccomp_filter+0x68c/0x10d0
[  431.021224][T24315]  __seccomp_filter+0x69d/0x10d0
[  431.021321][T24315]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  431.021356][T24315]  ? vfs_write+0x7e8/0x960
[  431.021445][T24315]  ? __rcu_read_unlock+0x4f/0x70
[  431.021473][T24315]  ? __fget_files+0x184/0x1c0
[  431.021510][T24315]  __secure_computing+0x82/0x150
[  431.021533][T24315]  syscall_trace_enter+0xcf/0x1e0
[  431.021629][T24315]  do_syscall_64+0xac/0x200
[  431.021660][T24315]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  431.021682][T24315]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  431.021745][T24315]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.021769][T24315] RIP: 0033:0x7f033bb4ebe9
[  431.021786][T24315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  431.021883][T24315] RSP: 002b:00007f033a5b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  431.021904][T24315] RAX: ffffffffffffffda RBX: 00007f033bd85fa0 RCX: 00007f033bb4ebe9
[  431.021920][T24315] RDX: 0000200000000040 RSI: 0000000080085504 RDI: 0000000000000006
[  431.021936][T24315] RBP: 00007f033a5b7090 R08: 0000000000000000 R09: 0000000000000000
[  431.021947][T24315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  431.022032][T24315] R13: 00007f033bd86038 R14: 00007f033bd85fa0 R15: 00007ffd0370d4c8
[  431.022054][T24315]  </TASK>
[  431.077889][T24307] EXT4-fs error (device loop4): ext4_ext_remove_space:2955: inode #15: comm syz.4.6617: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  431.083764][T24315] usb usb9: usbfs: process 24315 (syz.2.6619) did not claim interface 8 before use
[  431.300274][T24320] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=24320 comm=syz.3.6620
[  431.330430][T24320] loop3: detected capacity change from 0 to 1024
[  431.348557][T24320] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  431.366745][T24320] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.6620: lblock 0 mapped to illegal pblock 0 (length 6)
[  431.377238][T24325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6622'.
[  431.414344][T24320] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.6620: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  431.420096][T24331] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  431.464061][T24336] syzkaller0: refused to change device tx_queue_len
[  431.496784][T24340] random: crng reseeded on system resumption
[  431.568891][T24349] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  431.784608][T24364] netlink: 360 bytes leftover after parsing attributes in process `syz.7.6635'.
[  431.806308][T24364] netlink: 360 bytes leftover after parsing attributes in process `syz.7.6635'.
[  431.825925][T24364] netlink: 360 bytes leftover after parsing attributes in process `syz.7.6635'.
[  431.845382][T24364] netlink: 360 bytes leftover after parsing attributes in process `syz.7.6635'.
[  432.517550][T24385] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  432.608639][T24391] hub 6-0:1.0: USB hub found
[  432.613508][T24391] hub 6-0:1.0: 8 ports detected
[  432.665404][T24398] syzkaller0: refused to change device tx_queue_len
[  432.674662][T24399] syzkaller0: refused to change device tx_queue_len
[  432.949710][T24419] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  433.189837][T24433] syzkaller0: refused to change device tx_queue_len
[  433.296511][T24435] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=24435 comm=syz.3.6662
[  433.350044][T24435] loop3: detected capacity change from 0 to 1024
[  433.388861][T24435] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  433.421794][T24435] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.6662: lblock 0 mapped to illegal pblock 0 (length 6)
[  433.466888][T24435] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.6662: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  433.549043][T24453] loop4: detected capacity change from 0 to 512
[  433.592471][T24453] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.6666: corrupted inode contents
[  433.622625][T24453] EXT4-fs (loop4): Remounting filesystem read-only
[  433.644088][T24453] EXT4-fs (loop4): 1 truncate cleaned up
[  433.656035][T24453] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  433.697365][T24463] random: crng reseeded on system resumption
[  433.839238][T24474] syzkaller0: refused to change device tx_queue_len
[  434.361443][T24490] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=24490 comm=syz.4.6679
[  434.390662][T24488] random: crng reseeded on system resumption
[  434.410018][T24490] loop4: detected capacity change from 0 to 1024
[  434.438062][T24490] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  434.478868][T24490] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.6679: lblock 0 mapped to illegal pblock 0 (length 6)
[  434.501798][T24490] EXT4-fs error (device loop4): ext4_ext_remove_space:2955: inode #15: comm syz.4.6679: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  435.483591][T24505] netlink: 'syz.4.6684': attribute type 13 has an invalid length.
[  435.542784][T24507] loop4: detected capacity change from 0 to 512
[  435.583057][T24507] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.6685: corrupted inode contents
[  435.605274][T24507] EXT4-fs (loop4): Remounting filesystem read-only
[  435.625351][T24507] EXT4-fs (loop4): 1 truncate cleaned up
[  435.631753][T24507] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  435.711803][   T29] kauditd_printk_skb: 531 callbacks suppressed
[  435.711865][   T29] audit: type=1326 audit(1757223708.545:33055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24506 comm="syz.4.6685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f2bc08aebe9 code=0x7ffc0000
[  435.773183][   T29] audit: type=1326 audit(1757223708.545:33056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24506 comm="syz.4.6685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc08aebe9 code=0x7ffc0000
[  435.796909][   T29] audit: type=1326 audit(1757223708.545:33057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24506 comm="syz.4.6685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc08aebe9 code=0x7ffc0000
[  435.921987][T24511] __nla_validate_parse: 37 callbacks suppressed
[  435.922073][T24511] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6687'.
[  436.164340][   T29] audit: type=1326 audit(1757223708.995:33058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24526 comm="syz.2.6691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033bb4ebe9 code=0x7ffc0000
[  436.188088][   T29] audit: type=1326 audit(1757223708.995:33059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24526 comm="syz.2.6691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033bb4ebe9 code=0x7ffc0000
[  436.233336][   T29] audit: type=1326 audit(1757223709.045:33060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24526 comm="syz.2.6691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f033bb4ebe9 code=0x7ffc0000
[  436.257139][   T29] audit: type=1326 audit(1757223709.045:33061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24526 comm="syz.2.6691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033bb4ebe9 code=0x7ffc0000
[  436.280848][   T29] audit: type=1326 audit(1757223709.045:33062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24526 comm="syz.2.6691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033bb4ebe9 code=0x7ffc0000
[  436.304483][   T29] audit: type=1326 audit(1757223709.045:33063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24526 comm="syz.2.6691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f033bb4ebe9 code=0x7ffc0000
[  436.328073][   T29] audit: type=1326 audit(1757223709.045:33064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24526 comm="syz.2.6691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033bb4ebe9 code=0x7ffc0000
[  436.371155][T24533] random: crng reseeded on system resumption
[  436.584510][T24539] netlink: 'syz.2.6695': attribute type 13 has an invalid length.
[  436.611508][T24541] syzkaller0: refused to change device tx_queue_len
[  436.781395][T24552] syzkaller0: refused to change device tx_queue_len
[  436.846988][T24555] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=24555 comm=syz.3.6702
[  436.896706][T24555] loop3: detected capacity change from 0 to 1024
[  436.924706][T24559] random: crng reseeded on system resumption
[  436.947641][T24555] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  436.986148][T24555] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.6702: lblock 0 mapped to illegal pblock 0 (length 6)
[  437.020762][T24555] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.6702: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  437.168712][T24569] netlink: 'syz.3.6707': attribute type 13 has an invalid length.
[  437.230671][T24572] loop3: detected capacity change from 0 to 512
[  437.265685][T24572] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.6708: corrupted inode contents
[  437.292324][T24572] EXT4-fs (loop3): Remounting filesystem read-only
[  437.316324][T24572] EXT4-fs (loop3): 1 truncate cleaned up
[  437.327034][T24572] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  437.595461][T24591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6714'.
[  438.076600][T24553] syz.0.6699 (24553) used greatest stack depth: 6136 bytes left
[  438.090737][T24599] random: crng reseeded on system resumption
[  438.127553][T24601] random: crng reseeded on system resumption
[  438.526894][T24609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6720'.
[  438.592437][T24618] FAULT_INJECTION: forcing a failure.
[  438.592437][T24618] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  438.605582][T24618] CPU: 0 UID: 0 PID: 24618 Comm: syz.4.6722 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  438.605660][T24618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  438.605673][T24618] Call Trace:
[  438.605680][T24618]  <TASK>
[  438.605688][T24618]  __dump_stack+0x1d/0x30
[  438.605795][T24618]  dump_stack_lvl+0xe8/0x140
[  438.605822][T24618]  dump_stack+0x15/0x1b
[  438.605869][T24618]  should_fail_ex+0x265/0x280
[  438.605893][T24618]  should_fail+0xb/0x20
[  438.605924][T24618]  should_fail_usercopy+0x1a/0x20
[  438.605948][T24618]  _copy_to_user+0x20/0xa0
[  438.606012][T24618]  put_user_ifreq+0x58/0xa0
[  438.606040][T24618]  sock_do_ioctl+0x1cb/0x220
[  438.606078][T24618]  sock_ioctl+0x41b/0x610
[  438.606108][T24618]  ? __pfx_sock_ioctl+0x10/0x10
[  438.606197][T24618]  __se_sys_ioctl+0xcb/0x140
[  438.606216][T24618]  __x64_sys_ioctl+0x43/0x50
[  438.606233][T24618]  x64_sys_call+0x1816/0x2ff0
[  438.606254][T24618]  do_syscall_64+0xd2/0x200
[  438.606336][T24618]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  438.606361][T24618]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  438.606426][T24618]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.606454][T24618] RIP: 0033:0x7f2bc08aebe9
[  438.606472][T24618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  438.606491][T24618] RSP: 002b:00007f2bbf317038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  438.606578][T24618] RAX: ffffffffffffffda RBX: 00007f2bc0ae5fa0 RCX: 00007f2bc08aebe9
[  438.606592][T24618] RDX: 0000200000000340 RSI: 0000000000008946 RDI: 0000000000000003
[  438.606604][T24618] RBP: 00007f2bbf317090 R08: 0000000000000000 R09: 0000000000000000
[  438.606615][T24618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  438.606628][T24618] R13: 00007f2bc0ae6038 R14: 00007f2bc0ae5fa0 R15: 00007ffeb03b9998
[  438.606655][T24618]  </TASK>
[  438.985981][T24628] netlink: 'syz.3.6727': attribute type 13 has an invalid length.
[  439.052273][T24633] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6729'.
[  439.083938][T24633] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  439.155742][T24633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6729'.
[  439.739427][T24645] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6733'.
[  439.846598][T24654] tipc: Started in network mode
[  439.851523][T24654] tipc: Node identity 2274fa64e23c, cluster identity 4711
[  439.858752][T24654] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  439.865767][T24655] syzkaller0: entered promiscuous mode
[  439.871302][T24655] syzkaller0: entered allmulticast mode
[  439.908584][T24655] tipc: Resetting bearer <eth:syzkaller0>
[  439.917225][T24655] tipc: Disabling bearer <eth:syzkaller0>
[  440.011439][T24660] netlink: 'syz.0.6738': attribute type 13 has an invalid length.
[  440.061632][T24662] syzkaller0: refused to change device tx_queue_len
[  440.117275][T24668] loop4: detected capacity change from 0 to 512
[  440.139589][T24668] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  440.261901][T24683] loop4: detected capacity change from 0 to 512
[  440.284846][T24683] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6745: bg 0: block 248: padding at end of block bitmap is not set
[  440.299857][T24683] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.6745: Failed to acquire dquot type 1
[  440.312005][T24683] EXT4-fs (loop4): 1 truncate cleaned up
[  440.318531][T24683] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  440.393390][T24692] random: crng reseeded on system resumption
[  440.424518][T24696] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=24696 comm=syz.0.6750
[  440.591384][T24700] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36435 sclass=netlink_audit_socket pid=24700 comm=syz.0.6752
[  441.021784][T24706] syzkaller0: refused to change device tx_queue_len
[  441.085661][   T29] kauditd_printk_skb: 302 callbacks suppressed
[  441.085776][   T29] audit: type=1326 audit(1757223713.915:33361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24684 comm="syz.3.6747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2029cebe9 code=0x7fc00000
[  441.091805][T24708] loop7: detected capacity change from 0 to 512
[  441.138458][T24708] ext4 filesystem being mounted at /578/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  441.271488][T24721] netlink: 'syz.4.6760': attribute type 3 has an invalid length.
[  441.393024][T24728] loop4: detected capacity change from 0 to 1024
[  441.400076][T24728] ext4: Bad value for 'barrier'
[  441.409911][T24728] loop4: detected capacity change from 0 to 256
[  441.410928][   T29] audit: type=1400 audit(1757223714.245:33362): avc:  denied  { ioctl } for  pid=24727 comm="syz.4.6762" path="socket:[86859]" dev="sockfs" ino=86859 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  441.416783][T24728] msdos: Bad value for 'uid'
[  441.445962][T24728] msdos: Bad value for 'uid'
[  441.504489][   T29] audit: type=1326 audit(1757223714.335:33363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24733 comm="syz.3.6765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2029cebe9 code=0x7ffc0000
[  441.528190][   T29] audit: type=1326 audit(1757223714.335:33364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24733 comm="syz.3.6765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2029cebe9 code=0x7ffc0000
[  441.551832][   T29] audit: type=1326 audit(1757223714.335:33365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24733 comm="syz.3.6765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fe2029cebe9 code=0x7ffc0000
[  441.575470][   T29] audit: type=1326 audit(1757223714.335:33366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24733 comm="syz.3.6765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2029cebe9 code=0x7ffc0000
[  441.599224][   T29] audit: type=1326 audit(1757223714.335:33367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24733 comm="syz.3.6765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2029cebe9 code=0x7ffc0000
[  441.622917][   T29] audit: type=1326 audit(1757223714.335:33368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24733 comm="syz.3.6765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe2029cebe9 code=0x7ffc0000
[  441.646436][   T29] audit: type=1326 audit(1757223714.335:33369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24733 comm="syz.3.6765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2029cebe9 code=0x7ffc0000
[  441.654785][T24734] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=24734 comm=syz.3.6765
[  441.670235][   T29] audit: type=1326 audit(1757223714.335:33370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24733 comm="syz.3.6765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2029cebe9 code=0x7ffc0000
[  441.718820][T24734] loop3: detected capacity change from 0 to 1024
[  441.748055][T24740] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=24740 comm=syz.2.6767
[  441.752625][T24742] loop7: detected capacity change from 0 to 512
[  441.777266][T24734] EXT4-fs mount: 22 callbacks suppressed
[  441.777281][T24734] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  441.803113][T24734] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  441.815982][T24734] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.6765: lblock 0 mapped to illegal pblock 0 (length 6)
[  441.835069][T24734] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.6765: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  441.836917][T24742] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  441.884084][T24756] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36435 sclass=netlink_audit_socket pid=24756 comm=syz.0.6771
[  441.885622][T24742] ext4 filesystem being mounted at /581/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  441.929131][T22501] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  441.958041][T15426] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.056245][T24771] loop4: detected capacity change from 0 to 1024
[  442.073464][T24771] EXT4-fs: Ignoring removed bh option
[  442.090098][T24771] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  442.225832][T22091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.315354][T24780] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1882 sclass=netlink_audit_socket pid=24780 comm=syz.7.6781
[  442.378951][T24780] loop7: detected capacity change from 0 to 1024
[  442.427771][T24780] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  442.488139][T24780] ext4 filesystem being mounted at /585/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  442.561959][T24780] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: comm syz.7.6781: lblock 0 mapped to illegal pblock 0 (length 6)
[  442.642791][T24780] EXT4-fs error (device loop7): ext4_ext_remove_space:2955: inode #15: comm syz.7.6781: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  442.772215][T15426] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  442.876731][T24795] random: crng reseeded on system resumption
[  443.351389][T24810] loop7: detected capacity change from 0 to 128
[  443.453024][T24821] loop3: detected capacity change from 0 to 512
[  443.505757][T24821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  443.560782][T24810] ==================================================================
[  443.568942][T24810] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark
[  443.576098][T24810] 
[  443.578430][T24810] write to 0xffff88811b4acb14 of 4 bytes by task 24817 on cpu 1:
[  443.586154][T24810]  xas_set_mark+0x12b/0x140
[  443.590684][T24810]  __folio_start_writeback+0x1dd/0x440
[  443.596166][T24810]  mpage_writepages+0xd18/0x1250
[  443.601136][T24810]  fat_writepages+0x24/0x30
[  443.605695][T24810]  do_writepages+0x1c6/0x310
[  443.610304][T24810]  file_write_and_wait_range+0x156/0x2c0
[  443.615958][T24810]  __generic_file_fsync+0x46/0x140
[  443.621082][T24810]  fat_file_fsync+0x49/0x100
[  443.625683][T24810]  vfs_fsync_range+0x10d/0x130
[  443.630467][T24810]  generic_file_write_iter+0x1b8/0x2f0
[  443.635940][T24810]  iter_file_splice_write+0x663/0xa60
[  443.641321][T24810]  direct_splice_actor+0x153/0x2a0
[  443.646443][T24810]  splice_direct_to_actor+0x30f/0x680
[  443.651824][T24810]  do_splice_direct+0xda/0x150
[  443.656593][T24810]  do_sendfile+0x380/0x650
[  443.661032][T24810]  __x64_sys_sendfile64+0x105/0x150
[  443.666245][T24810]  x64_sys_call+0x2bb0/0x2ff0
[  443.670937][T24810]  do_syscall_64+0xd2/0x200
[  443.675463][T24810]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  443.681389][T24810] 
[  443.683716][T24810] read to 0xffff88811b4acb14 of 4 bytes by task 24810 on cpu 0:
[  443.691373][T24810]  xas_find_marked+0x5dc/0x620
[  443.696160][T24810]  find_get_entry+0x5d/0x380
[  443.700757][T24810]  filemap_get_folios_tag+0x92/0x210
[  443.706049][T24810]  writeback_iter+0x4bb/0x820
[  443.710738][T24810]  mpage_writepages+0x87/0x1250
[  443.715605][T24810]  fat_writepages+0x24/0x30
[  443.720119][T24810]  do_writepages+0x1c6/0x310
[  443.724725][T24810]  file_write_and_wait_range+0x156/0x2c0
[  443.730391][T24810]  __generic_file_fsync+0x46/0x140
[  443.735514][T24810]  fat_file_fsync+0x49/0x100
[  443.740118][T24810]  vfs_fsync_range+0x10d/0x130
[  443.744895][T24810]  generic_file_write_iter+0x1b8/0x2f0
[  443.750366][T24810]  iter_file_splice_write+0x663/0xa60
[  443.755745][T24810]  direct_splice_actor+0x153/0x2a0
[  443.760873][T24810]  splice_direct_to_actor+0x30f/0x680
[  443.766251][T24810]  do_splice_direct+0xda/0x150
[  443.771023][T24810]  do_sendfile+0x380/0x650
[  443.775475][T24810]  __x64_sys_sendfile64+0x105/0x150
[  443.780703][T24810]  x64_sys_call+0x2bb0/0x2ff0
[  443.785400][T24810]  do_syscall_64+0xd2/0x200
[  443.789924][T24810]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  443.795827][T24810] 
[  443.798156][T24810] value changed: 0x0a000021 -> 0x04000021
[  443.803873][T24810] 
[  443.806200][T24810] Reported by Kernel Concurrency Sanitizer on:
[  443.812360][T24810] CPU: 0 UID: 0 PID: 24810 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) 
[  443.821650][T24810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  443.831798][T24810] ==================================================================
[  443.875582][T24821] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  444.118466][T22501] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.