last executing test programs:

42.25875329s ago: executing program 4 (id=498):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x13}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0xb, 0x73}, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043c", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)

42.251828631s ago: executing program 4 (id=500):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001200952762f33027307000fbdbdf25e5", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32, @ANYBLOB="140012"], 0x44}, 0x1, 0x0, 0x0, 0x24004844}, 0x28000052)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2004000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000a000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x48800)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r3 = shmget$private(0x0, 0x13000, 0x2, &(0x7f0000fed000/0x13000)=nil)
r4 = shmat(r3, &(0x7f0000ffc000/0x3000)=nil, 0x4000)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000300)=""/208)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x4, &(0x7f0000000540)=ANY=[@ANYRESHEX=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x8d}, 0x94)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x11, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x35e8}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f00000004c0)='GPL\x00', 0x8, 0x47, &(0x7f0000000700)=""/71, 0x41000, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x3, 0xc, 0x8, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000008c0)=[r2, r2, r2, r2], &(0x7f0000000900)=[{0x5, 0x4, 0xd, 0x7}], 0x10, 0x52f0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000400), &(0x7f00000001c0)=r5}, 0x20)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)
openat(r6, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50)
faccessat(r6, &(0x7f0000000000)='./file0\x00', 0x5)
r7 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', <r8=>0x0})
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x12, r8, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffffe8a}]}}]}, 0x40}}, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', r8, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)

42.200311033s ago: executing program 4 (id=502):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, 0x0, 0x0)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r4, 0x0, 0x7}, 0x18)
sendto(r2, &(0x7f0000000000)="00c881d76049ac562e4e5094890b55e5ea113389145c57e7b3479bf3f2cf8a", 0x1f, 0x0, 0x0, 0x0)
recvfrom(r1, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0)

42.188574284s ago: executing program 4 (id=505):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000bc0)={[{@errors_remount}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@stripe={'stripe', 0x3d, 0xb}}, {@auto_da_alloc}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000d80)="$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")
open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
open(&(0x7f0000000080)='./file1\x00', 0x0, 0x86)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}, {0x3, 0x3, 0x27, 0x2}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, 0x0, &(0x7f0000000600))
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x10007ffffffff}, 0x18)
kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xaa202, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x2, 0x2, 0x90b, 0x3, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc39, 0x3, 0x7, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x3, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x100, 0x40, 0x83, 0x538a, 0x9, 0xda, 0x4, 0x0, 0x4, 0x5, 0x7, 0x8000, 0x8000000000000000, 0x4, 0x0, 0x14, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0x6, 0x7, 0x6, 0xa, 0x82c, 0x7ff, 0xe000000000000, 0xe4, 0x6, 0x0, 0x9, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x800000000, 0x6, 0x6, 0x9, 0x100000001, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x3, 0x4, 0x7, 0x402, 0x3, 0x8, 0x5, 0x0, 0x3, 0x40, 0x2, 0x7, 0xe, 0x1]})
bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1b000b00000000e7000000000080000000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000300"/28], 0x50)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000280)='tasks\x00', 0x2, 0x0)
r6 = syz_clone(0x4000, &(0x7f0000001000), 0x0, 0x0, 0x0, 0x0)
write$cgroup_pid(r5, &(0x7f0000000400)=r6, 0x12)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x118, 0xc8, 0x8, 0x0, 0x5803, 0x228, 0x2e8, 0x2e8, 0x228, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @private0, [0xffffffff, 0xffffff00, 0xff, 0xff], [0xff, 0xff, 0x0, 0xff000000], 'wlan0\x00', 'syzkaller1\x00', {}, {0xff}, 0x32, 0x3, 0x3, 0x4}, 0x0, 0xd8, 0x118, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@esp={{0x30}, {[0x4d4, 0x4d3], 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x81, 0xff, {0x4}}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x4], 0x81, 0x32, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x3, 0x1}, {0x1, 0x4, 0x4}, {0x0, 0x3, 0x1}, 0x4, 0x101}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358)
unshare(0x8000000)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x8, 0x1800}], 0x1, 0x0)
unshare(0x2c040000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000012c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095bb351cfa8abe6c07f17a2b49280b0ce0814f0b24890b70eb721f7c5d7151b2b377e3981440020c58fc90020079263de5a0b42d102906219b3f54270c8968e5d3fd8a539d43e757fcfc9bc11023b80816d6e7503a60ee225cb91db7ed68e4306e4ae1bd15659553e3d1826f2469c930d689240a2eca925afc35a80434356f91fb8d7c4f0d728accacc5712c68caf0668db0978471d28a889069868370f7d34e82443c2d91b8b442cb5357dee2e5ed3a745fed91eeff41ad671fe7cdc649c490ca60a8c313d7317fcf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)

42.077990399s ago: executing program 4 (id=512):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20)
socket(0x10, 0x1, 0x80)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x6, 0x4, 0xdd, 0xa}, 0x50)
close(0x3)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13, r0, 0x0)
munmap(&(0x7f0000ff9000/0x2000)=nil, 0x2000)

41.977684343s ago: executing program 4 (id=517):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x401}]})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
setresuid(0xee00, 0x0, 0x0)
prlimit64(0x0, 0xd, &(0x7f00000000c0)={0x200000000005, 0x8000000000200003}, 0x0)
setpriority(0x2, 0x0, 0xffffffffffffffcd) (fail_nth: 3)

41.957773344s ago: executing program 32 (id=517):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x401}]})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
setresuid(0xee00, 0x0, 0x0)
prlimit64(0x0, 0xd, &(0x7f00000000c0)={0x200000000005, 0x8000000000200003}, 0x0)
setpriority(0x2, 0x0, 0xffffffffffffffcd) (fail_nth: 3)

39.863783655s ago: executing program 3 (id=553):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @local}, {0x0, 0x17c1, 0x8}}}}}, 0x0)

39.837321386s ago: executing program 3 (id=554):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff})
fsetxattr$security_ima(r0, &(0x7f00000000c0), &(0x7f0000000100)=@md5={0x1, "310596a65beb6e00c1f53d153a75028b"}, 0x11, 0x2)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
pivot_root(0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r4, 0x0, 0x9}, 0x18)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="580000000206030000000000000000000700000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000300000011000300686173683a69702c706f7274000000003e5261dfd46ab1123336b352ed9086ce27577bc43976e5c55cbe2505455ecc4fa7b82dfa18a365041969d88eca798d6026749a812982ebeb14e7ab664a0739"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0}}, 0x10)

39.815617687s ago: executing program 3 (id=555):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='{/}\\')
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x6, 0x4, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1857510000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000))
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000020a01"], 0x248}, 0x1, 0x0, 0x0, 0x800}, 0x8080)

39.74806477s ago: executing program 3 (id=558):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000bc0)={[{@errors_remount}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@stripe={'stripe', 0x3d, 0xb}}, {@auto_da_alloc}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000d80)="$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")
open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
open(&(0x7f0000000080)='./file1\x00', 0x0, 0x86)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}, {0x3, 0x3, 0x27, 0x2}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, 0x0, &(0x7f0000000600))
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x10007ffffffff}, 0x18)
kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xaa202, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x2, 0x2, 0x90b, 0x3, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc39, 0x3, 0x7, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x3, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x100, 0x40, 0x83, 0x538a, 0x9, 0xda, 0x4, 0x0, 0x4, 0x5, 0x7, 0x8000, 0x8000000000000000, 0x4, 0x0, 0x14, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0x6, 0x7, 0x6, 0xa, 0x82c, 0x7ff, 0xe000000000000, 0xe4, 0x6, 0x0, 0x9, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x800000000, 0x6, 0x6, 0x9, 0x100000001, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x3, 0x4, 0x7, 0x402, 0x3, 0x8, 0x5, 0x0, 0x3, 0x40, 0x2, 0x7, 0xe, 0x1]})
bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1b000b00000000e7000000000080000000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000300"/28], 0x50)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000280)='tasks\x00', 0x2, 0x0)
r6 = syz_clone(0x4000, &(0x7f0000001000), 0x0, 0x0, 0x0, 0x0)
write$cgroup_pid(r5, &(0x7f0000000400)=r6, 0x12)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x118, 0xc8, 0x8, 0x0, 0x5803, 0x228, 0x2e8, 0x2e8, 0x228, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @private0, [0xffffffff, 0xffffff00, 0xff, 0xff], [0xff, 0xff, 0x0, 0xff000000], 'wlan0\x00', 'syzkaller1\x00', {}, {0xff}, 0x32, 0x3, 0x3, 0x4}, 0x0, 0xd8, 0x118, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@esp={{0x30}, {[0x4d4, 0x4d3], 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x81, 0xff, {0x4}}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x4], 0x81, 0x32, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x3, 0x1}, {0x1, 0x4, 0x4}, {0x0, 0x3, 0x1}, 0x4, 0x101}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358)
semget$private(0x0, 0x4000, 0x555)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x8, 0x1800}], 0x1, 0x0)
unshare(0x2c040000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000012c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095bb351cfa8abe6c07f17a2b49280b0ce0814f0b24890b70eb721f7c5d7151b2b377e3981440020c58fc90020079263de5a0b42d102906219b3f54270c8968e5d3fd8a539d43e757fcfc9bc11023b80816d6e7503a60ee225cb91db7ed68e4306e4ae1bd15659553e3d1826f2469c930d689240a2eca925afc35a80434356f91fb8d7c4f0d728accacc5712c68caf0668db0978471d28a889069868370f7d34e82443c2d91b8b442cb5357dee2e5ed3a745fed91eeff41ad671fe7cdc649c490ca60a8c313d7317fcf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)

39.689110112s ago: executing program 3 (id=560):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x20, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x80}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ldst={0x1, 0x2, 0x0, 0x4, 0xa, 0x100, 0x13}, @ldst={0x3, 0x1, 0x4, 0x2, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0xb, 0x3, 0x1, 0x10, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x80, 0x76, &(0x7f0000000340)=""/118, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xa, 0x4, 0xffffffff}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000440)=[{0x0, 0x3, 0x1, 0x7}], 0x10, 0x6}, 0x94)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xc, [@decl_tag={0xa, 0x0, 0x0, 0x11, 0x3, 0x7}, @const={0x9}]}, {0x0, [0x30, 0x2e, 0x61, 0x0, 0x2e, 0x61, 0x30, 0x0, 0x2e, 0x6f]}}, &(0x7f0000000580)=""/230, 0x40, 0xe6, 0x0, 0xb}, 0x28)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES16=r0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x18)
sync()

39.395461526s ago: executing program 3 (id=566):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000a000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)

39.394879466s ago: executing program 33 (id=566):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000a000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)

36.722369642s ago: executing program 1 (id=622):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000005b80)={@loopback, 0x33, r3})
getdents64(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = open$dir(&(0x7f0000001100)='./file0\x00', 0xfe5cea626a7e7d90, 0x80)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r5, 0xc0406619, &(0x7f0000001140)={@desc={0x1, 0x0, @desc2}})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6, 0x0, 0x8000000000}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000010c0)={&(0x7f0000001080)='cachefiles_ondemand_open\x00', r6, 0x0, 0x4}, 0x18)
syz_emit_ethernet(0x102a, &(0x7f0000000040)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x101c, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @empty=0xe0000001}, {0x0, 0x4e00, 0x1008, 0x0, @opaque="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"}}}}}, 0x0)

36.648285075s ago: executing program 1 (id=623):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8db}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0x401}, 0x11) (async, rerun: 32)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000400080001400000000014000000110001"], 0x68}}, 0x0) (async)
close(r3)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='netfs_rreq_ref\x00', r1, 0x0, 0x4}, 0x18) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) (async)
fallocate(0xffffffffffffffff, 0x8, 0x4000, 0x4001) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async)
alarm(0x38) (async, rerun: 64)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (rerun: 64)
syslog(0x3, &(0x7f0000000780)=""/180, 0xb4)

36.29377035s ago: executing program 1 (id=626):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBTYPE(r0, 0x4b48, 0x0)

36.29345007s ago: executing program 1 (id=627):
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x1808004, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x4, 0x7cc, &(0x7f0000002200)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1700000000000000090000000080000004010000", @ANYRES32, @ANYBLOB="0000000000eaff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ff9}]})
r3 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil)
r4 = shmat(r3, &(0x7f0000caa000/0x3000)=nil, 0x7000)
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000001, 0x20031, 0xffffffffffffffff, 0xec785000)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000c43000/0x3000)=nil)
shmdt(r4)
bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
syz_usb_connect(0x4, 0x0, 0x0, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r7, 0x402, 0x8000001f)
r8 = open(&(0x7f0000000280)='.\x00', 0x181000, 0x0)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000100000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000000100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fcntl$notify(r8, 0x402, 0x8000003d)
close_range(r7, r8, 0x0)
sendmsg$key(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x2, 0x8, 0x0, 0x5, 0x19, 0x0, 0x70bd2d, 0x25dfdbff, [@sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e23, @private=0xa010102}, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e22}, @sadb_address={0x3, 0x6, 0xff, 0xa0, 0x0, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}}, @sadb_x_policy={0x8, 0x12, 0x3, 0x3, 0x0, 0x6e6bba, 0x7, {0x6, 0x2b, 0x80, 0x9, 0x0, 0xfffffff8, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e23}, @sadb_sa={0x2, 0x1, 0x4d4, 0x95, 0x2, 0x35, 0x2, 0x20000001}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}, @sadb_x_sa2={0x2, 0x13, 0x8, 0x0, 0x0, 0x70bd2c, 0x3507}]}, 0xc8}}, 0x4040014)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000003c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r10)
syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0xa1c0)
syz_open_dev$tty1(0xc, 0x4, 0x4)

35.729060935s ago: executing program 1 (id=631):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r1, 0x0, 0x8000)
r2 = socket(0x10, 0x803, 0x0)
setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtaction={0x898, 0x30, 0xfbed, 0x70bd29, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb, 0xffffffffffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x2, 0x4000, 0xfffffffd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xbebc20, 0x0, 0x10000, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x153, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x45d25275, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80000000, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3a4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x894e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400400, 0x1, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xcd9, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x319e, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x400]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0xfffc, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
process_mrelease(0xffffffffffffffff, 0x0)

35.533113224s ago: executing program 1 (id=635):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x13}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0xb, 0x73}, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001000810000000000008000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)

35.531859754s ago: executing program 34 (id=635):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x13}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0xb, 0x73}, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001000810000000000008000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)

33.173503586s ago: executing program 6 (id=680):
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="100029bd7000ffdbdf250e000000340041090800080006000000060002004e200010060007000800000005000d0001000000080006", @ANYRESDEC=0x0], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '\x94l\\\xec\xd1\xcb\x9a}\xab7\x1f\xde\xb5\x83>\fG\\x00', 0x3a, '/dev\x14bus/usb/00#/00#\x00', 0x3a, './file0'}, 0x51)
r1 = socket$nl_route(0x10, 0x3, 0x0)
syz_io_uring_setup(0x7990, &(0x7f00000001c0)={0x0, 0x494d, 0x80, 0x1, 0x2fd}, &(0x7f00000002c0)=<r2=>0x0, &(0x7f0000000300))
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000003, 0x4000010, 0xffffffffffffffff, 0x10000000)
r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x80040, 0x182, 0x15}, 0x18)
r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd\x00')
getdents64(r5, &(0x7f0000000080)=""/38, 0x26)
getdents(r5, 0xffffffffffffffff, 0x7a)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_LINKAT={0x27, 0x2, 0x0, r4, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', r5, 0x0, 0x1, {0x0, r6}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRESOCT=r1, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4008080)
sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)

33.131602748s ago: executing program 6 (id=684):
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50)

32.991090014s ago: executing program 6 (id=686):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18)
pselect6(0x40, &(0x7f0000000000)={0x3, 0x8, 0x22, 0x753, 0x2, 0x1, 0xc17, 0x8}, &(0x7f0000000540)={0x8, 0xfffffffffffffff8, 0x3, 0x6, 0x7fff, 0x2, 0xffffffffffffffa3, 0xd5}, &(0x7f0000000200)={0xa, 0x80000000, 0x2, 0x7, 0xffff, 0x8, 0x4, 0x80000000}, &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280)={[0x4]}, 0x8})
r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x54)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0x20)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x10290, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x808000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket(0x1e, 0x4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000014c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="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", @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
clock_getres(0x3, 0x0)

31.330273066s ago: executing program 6 (id=703):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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")
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='ext4\x00', 0x800800, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r2)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004022}, 0x20008000)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYRES8=r0], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xc, 0x0)
r5 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @empty, 0xfffff001}, 0x18)
r6 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0)
write$binfmt_format(r6, &(0x7f0000000100)='0\x00', 0xfffffed8)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="8b33000000000000000005000000080003"], 0x1c}}, 0x0)

30.912900534s ago: executing program 6 (id=715):
syz_emit_ethernet(0x46, &(0x7f0000000280)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x6, 0xb, 0x65, 0x9, 0x2, 0x89, 0x101, @broadcast, @local}, "0200000000000000"}}}}}, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r0=>0x0}, &(0x7f0000000100)=0x14)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@func={0x2, 0x0, 0x0, 0xc, 0x1}, @const={0x3, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x61, 0x5f, 0x5f, 0x30]}}, &(0x7f0000000180)=""/54, 0x36, 0x36}, 0x28)
r2 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10)
r3 = socket$kcm(0x2, 0x2, 0x73)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10)
r4 = socket$kcm(0x2, 0x2, 0x73)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x29}}, 0x31)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x3c9100)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000001cc0)={0x2, 0x2, 0x1, 'queue1\x00', 0x9})
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={0x1, <r7=>0xffffffffffffffff}, 0x4)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x4, 0x8, 0x6, 0x9, 0x10000, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x4)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x1, 0x0, 0xffffffa0, 0x10200, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5, 0x1}, 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1e, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf26d}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x28, '\x00', r0, @fallback=0x34, r1, 0x8, &(0x7f0000000200)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x9, 0xfffffeff, 0xb}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000480)=[r6, r7, r8, r9, r10], &(0x7f00000004c0)=[{0x1, 0x5, 0xc, 0x9}, {0x3, 0x5, 0xa}, {0x1, 0x4, 0x2, 0x5}, {0x0, 0x1, 0xa, 0x4}, {0x5, 0x5, 0x3, 0xc}, {0x4, 0x5, 0x1, 0x1}, {0x0, 0x1, 0x0, 0x4}, {0x2, 0x3, 0x3}], 0x10, 0x5}, 0x94)
r12 = socket$inet6_udp(0xa, 0x2, 0x0)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x8, &(0x7f0000001d80)=ANY=[@ANYBLOB="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", @ANYRESDEC=r8], &(0x7f0000000580)='GPL\x00', 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r11}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r13}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00')
creat(&(0x7f0000000080)='./file0\x00', 0x6a)
socket$inet(0x2, 0x6, 0xfffff3a8)
pipe2$9p(&(0x7f00000001c0)={<r14=>0xffffffffffffffff}, 0x0)
r15 = socket$nl_sock_diag(0x10, 0x3, 0x4)
mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000d40)={'trans=fd,', {'rfdno', 0x3d, r14}, 0x2c, {'wfdno', 0x3d, r15}, 0x2c, {[{@afid={'afid', 0x3d, 0x1000}}]}})
setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x4f0, 0x0, 0x270, 0x270, 0x340, 0x0, 0x420, 0x420, 0x420, 0x420, 0x420, 0x6, 0x0, {[{{@ipv6={@remote, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28, 'HL\x00', 0x0, {0xff}}}, {{@ipv6={@private1, @loopback, [0x0, 0x0, 0xff000000], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@remote, @private0, [0xff000000, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffffff, 0xffffffff, 0xff000000], 'pimreg1\x00', 'pim6reg1\x00', {}, {}, 0x0, 0x4, 0x0, 0x10}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [0xff000000, 0xff], [0x0, 0x0, 0xff000000], 'syzkaller1\x00', 'veth0_to_batadv\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x6, 0x6}, {0x2, 0x3, 0x6}, {0xffffffffffffffff, 0x5, 0x1}, 0x7c, 0xcbad}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x550)

30.636967967s ago: executing program 6 (id=723):
mkdirat(0xffffffffffffff9c, 0x0, 0x100)
open$dir(0x0, 0x0, 0x12c)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=0x0, @ANYRES32], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x1f, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r0, @ANYRES32=r0], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe2$9p(&(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r7}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="54fe9f4bee2c00cb5dd7b1068a6f050a33d33a9f4f68c279322716fab1f4a6893717cf46e5b6e71602b0c1726e1ab2875999ec6edb06ba0bdce2f31f0f30a14f43740a4b3e3ccee330c00f0968d866127050f7e2fc7b20d7292178515745159a8593a33a5cac2f54012ae222bd155a798296f4e19bc75ad56557bbc577fd807584ba607528a8cfbb000b4f9c2925216d868d888675952e1ff2fede3c823d0998bcbc3bc5229c5de916a2d015ce8defababa25fe205e20b3f0dfb4a28d5b03338b7133b47"])
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001080)={&(0x7f0000000180)='kfree\x00', r8}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000002000)=ANY=[@ANYRESOCT, @ANYBLOB="9ddf3eee0e5f0bb7c1f1403ba29cc9f6b466a5c86c85ced50cf87981e6a8274051a491374cc09aad674b764b2e"], 0x0, 0x4000002, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000a00)=[@in6={0xa, 0x4e24, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, @in6={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, @in={0x2, 0x4e22, @multicast2}], 0x48)
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000680)={[&(0x7f0000000040)='\x00', &(0x7f00000000c0)='}-$\x00', &(0x7f0000000280)='![!+*[$.&\'!/^\f*]\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='sys_enter\x00', &(0x7f0000000400)='GPL\x00', &(0x7f00000004c0)='GPL\x00', &(0x7f0000000500)='[\x00', &(0x7f0000000540)='\x00', &(0x7f0000000580)='\x00']}, &(0x7f0000000980)={[&(0x7f0000000700)='GPL\x00', &(0x7f0000000740)='\x00', &(0x7f0000000780)='sys_enter\x00', &(0x7f0000000880)='\x00', &(0x7f00000008c0)='!$\xd4\x00', &(0x7f0000000900)='GPL\x00', &(0x7f0000000940)='\x00']})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r8}, 0x18)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000b00)=<r9=>0x0, &(0x7f0000000b40)=0x4)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x80, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0xfffffffffffffe29}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000040)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
acct(0x0)

30.636274157s ago: executing program 35 (id=723):
mkdirat(0xffffffffffffff9c, 0x0, 0x100)
open$dir(0x0, 0x0, 0x12c)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=0x0, @ANYRES32], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x1f, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r0, @ANYRES32=r0], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe2$9p(&(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r7}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="54fe9f4bee2c00cb5dd7b1068a6f050a33d33a9f4f68c279322716fab1f4a6893717cf46e5b6e71602b0c1726e1ab2875999ec6edb06ba0bdce2f31f0f30a14f43740a4b3e3ccee330c00f0968d866127050f7e2fc7b20d7292178515745159a8593a33a5cac2f54012ae222bd155a798296f4e19bc75ad56557bbc577fd807584ba607528a8cfbb000b4f9c2925216d868d888675952e1ff2fede3c823d0998bcbc3bc5229c5de916a2d015ce8defababa25fe205e20b3f0dfb4a28d5b03338b7133b47"])
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001080)={&(0x7f0000000180)='kfree\x00', r8}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000002000)=ANY=[@ANYRESOCT, @ANYBLOB="9ddf3eee0e5f0bb7c1f1403ba29cc9f6b466a5c86c85ced50cf87981e6a8274051a491374cc09aad674b764b2e"], 0x0, 0x4000002, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000a00)=[@in6={0xa, 0x4e24, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, @in6={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, @in={0x2, 0x4e22, @multicast2}], 0x48)
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000680)={[&(0x7f0000000040)='\x00', &(0x7f00000000c0)='}-$\x00', &(0x7f0000000280)='![!+*[$.&\'!/^\f*]\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='sys_enter\x00', &(0x7f0000000400)='GPL\x00', &(0x7f00000004c0)='GPL\x00', &(0x7f0000000500)='[\x00', &(0x7f0000000540)='\x00', &(0x7f0000000580)='\x00']}, &(0x7f0000000980)={[&(0x7f0000000700)='GPL\x00', &(0x7f0000000740)='\x00', &(0x7f0000000780)='sys_enter\x00', &(0x7f0000000880)='\x00', &(0x7f00000008c0)='!$\xd4\x00', &(0x7f0000000900)='GPL\x00', &(0x7f0000000940)='\x00']})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r8}, 0x18)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000b00)=<r9=>0x0, &(0x7f0000000b40)=0x4)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x80, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0xfffffffffffffe29}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000040)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
acct(0x0)

2.037550271s ago: executing program 8 (id=1352):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x35}, {}, {0xfffffffffffffffd, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x70bd2a, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
pipe2$9p(&(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r9}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r8}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})
close(r4)
socket$inet6_udplite(0xa, 0x2, 0x88)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYRES32=0x0], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0x4}, 0x18)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$fou(&(0x7f00000005c0), r12)
sendmsg$FOU_CMD_ADD(r12, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x1c, r13, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8840)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x166, 0x4)

1.845287369s ago: executing program 8 (id=1360):
r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
close(r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x3, @empty, 0x6}, 0x1c)
listen(r1, 0x9)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000001100"/28], 0x48)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1808000000000000000000001c00000018110000", @ANYRES8=0x0, @ANYRES8, @ANYBLOB="0000000000000000b7050000080000004608f0ff7600003100bf9800000000000036080000010000008500000007000000b70000000000000095000000000000", @ANYRES64=r2], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=<r5=>r3, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r4, 0x0, 0x20000000002}, 0x18)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000240)=ANY=[@ANYRESDEC=r4, @ANYRES16=r3, @ANYRES8, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT=r5, @ANYRES32=r6, @ANYRES32=r4, @ANYRESDEC], 0xfb, 0x11ff, &(0x7f0000002480)="$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")
ioctl$EXT4_IOC_GETFSUUID(r6, 0x8008662c, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=@getqdisc={0x0, 0x26, 0x800, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff0, 0x7}, {0x1, 0xa}, {0x4, 0x7}}}, 0xa4}, 0x1, 0x0, 0x0, 0x8800}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
accept$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14)

1.82636493s ago: executing program 7 (id=1361):
r0 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x104)
syz_clone3(&(0x7f00000008c0)={0x222025080, 0x0, 0x0, 0x0, {0x32}, &(0x7f0000000300)=""/212, 0xd4, 0x0, 0x0, 0x0, {r0}}, 0x58)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@generic={0x0, r1}, 0x18)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000280)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x810)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x791, &(0x7f0000000800)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000000)={0xfffffffffffffe22, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
open$dir(&(0x7f0000000000)='./file1\x00', 0x0, 0x40)
unlinkat(0xffffffffffffff9c, 0x0, 0x200)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
syz_io_uring_setup(0xac7, 0x0, &(0x7f00000002c0), &(0x7f0000000480)=<r5=>0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=r5], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x19, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]})
r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
fadvise64(r8, 0x7f, 0x0, 0x4)
syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0xd28f, 0x80, 0x200003, 0x1af}, &(0x7f0000000540)=<r9=>0x0, &(0x7f00000000c0)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, {0x2}})
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)="0c4a522d120d68306fc7e0f85f124d89a52a6a68d513ab1f0be2e6a230779569dcafbb154e94e72f47a2f08f31b0508665f7c8377d09adf4b06173d31011a9112f1b78bd", 0x44}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x6, 0x9}, 0x8)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000500)={0x0, 0x1ff, 0xdc}, 0x8)
shutdown(r4, 0x1)

1.468593315s ago: executing program 7 (id=1366):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x555)
semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x8, 0x1800}], 0x1, 0x0)
unshare(0x2c040000)

1.468224316s ago: executing program 2 (id=1367):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x0)

1.467904116s ago: executing program 7 (id=1368):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000099000000"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xffff}, 0x18)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c45, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80)
flock(r3, 0x2)
dup3(r3, r2, 0x0)

1.448279727s ago: executing program 2 (id=1369):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x555)
semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x8, 0x1800}], 0x1, 0x0)
unshare(0x2c040000)

1.447641186s ago: executing program 7 (id=1370):
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r5, &(0x7f0000000000)={0x24, @none={0x0, 0x1}}, 0x14)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket(0x1, 0x5, 0x0)
r7 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000500)={0xe000200c})
r8 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x4000004)
write$RDMA_USER_CM_CMD_DESTROY_ID(r8, &(0x7f0000000680)={0x1, 0x10, 0xfa00, {0x0}}, 0x18)
msgsnd(0x0, &(0x7f0000002900)=ANY=[@ANYBLOB="03"], 0xfd1, 0x0)
msgctl$IPC_RMID(0x0, 0x0)

1.400133999s ago: executing program 2 (id=1371):
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x0)

1.343680701s ago: executing program 2 (id=1373):
syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@noload}]}, 0xee, 0x472, &(0x7f0000000f40)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000000000000480010007"], 0x50)
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0)
lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0)

1.106245471s ago: executing program 2 (id=1374):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8000000c8, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x40, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x12)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102032900fefd000e40000200875a65969ff57b00000000000000040000000000ac1414aa"], 0xfdef)

969.758597ms ago: executing program 8 (id=1375):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01030000000000001c0012000c000100626f6e64000000000c000200080001000535cb791cf3e5b70232d790d9c04fe43a7bccf8c1da7ccaeb2139e26949091daef3a65ea915fa328ea3e70c9110ba58f2187888ae4d7776b4df2cbc2dc561eaad02975097e535fbd5a237175c2182cb970e188b27e6d601948c2d7647f30ac62ae107bffbd46fb6a6fd4ee99f79ae08ccfaad4753ddce7c44aa8dcefdfec4028ee61b21deb786b416246d65017099d8"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x100, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x8000}, [@IFLA_BROADCAST={0xa, 0x2, @local}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe2$9p(&(0x7f0000001900)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r8}, 0x10)
r9 = dup(r7)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[], [], 0x6b}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10)
clock_adjtime(0x0, &(0x7f0000000340)={0x80, 0x7, 0x7, 0x7fff, 0x2, 0x5, 0xe, 0x2, 0x100000000, 0x10, 0x7, 0xee, 0x1, 0x2, 0x4, 0x5, 0x1, 0x3, 0x546, 0x0, 0x5, 0x4, 0xa41, 0x2, 0x5, 0x4e1})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)

873.510942ms ago: executing program 0 (id=1376):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r0, 0x0, 0x1075}, 0x18)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r3=>r2, {0xd, 0x5}}, './mnt\x00'})
write$tcp_mem(r3, &(0x7f00000000c0)={0xff, 0x20, 0x3, 0x20, 0x2}, 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x18)
kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r6 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x7fff}, 0x18)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="140000001000010000000000000000030000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000020900010073797a30000000000900030073797a3200000000240b0000060a010400000000000000000100000008000b4000000000fc0a048028000180080001006c6f67001c0002800e00024073797a6b616c6c65720000000800054000000008d00a01800e000100696d6d656469617465000000bc0a0280640002804c0002800900020073797a32000000000900020073797a310000000008000180fffffffc0900020073797a31000000000800034000009c920900020073797a300000000008000180ffffffff14000280080003400000000808000180fffffffb0800014000000002080001400000000b500002804b000100fa62d7ba9ceeacf9aa4f832b78f35731f355d63e192a72aef5e68a05d1b806151b6bd1e2d74abafd383790ad363fdc1b7766748630b48f9beefdb33c86d5835a470b5ffd20d7e9006c0102805c00028008000180fffffffe0900020073797a30000000000900020073797a320000000008000180ffffffff0900020073797a320000000008000180fffffffd0900020073797a310000000008000180fffffffc0800034000000e5628000280080003400000000608000340000000070900020073797a320000000008000180fffffffe540002800900020073797a320000000008000180fffffffe0800034000000000080003400000000008000340000000090900020073797a310000000008000180fffffffe080003400000800108000180fffffffd8e000100818ce881ff18470752e86442e8b77ddcfc7a4c87f05cd36147be26c85cc854cc117db1906007a5a8c298f4724c8c743d46ec7f3ba478d9dfb10bbe9e4fdfc2188d62db9bb1364fed383fe0b0c3fbbab83959470cb0ffb14765c32f10b54d99531d04caaf264214997543a1c63637d9a3a20b7ce9312e545626eb375c88462c198f35cf8a11616de4fa0c000098020280eb00010099c8e680eb4d0e7f78e1fb62226ae541d997c8cb51c5ebd0bb7e2730b61310dcd7525807288a7ad8c00f6aa230a1d1b876ddb0e188384e7c79cd8af94a02451a04d8f116bde38077da45650d82bdd1767b03e3f35bc4a5769e659d8cdb6d9d9d717c78b50f6b3ac899b07a9eaf2c989654de7d6609299bad01ca1f3fa8b6229a6c69627a07f627880e902231b20368f3ae64fd12fc37afeb95f14a4dc3d0bc5f6e2afd0fc8ef6982054cffa703ee1376654019ad6d2add9052c5d2f2e0ba3318f931b2c5f2dcce5cbca6093c64d23b64e2f2061da3dd5983644280de22d592b63b5d7f6b571beb005400010041bbc64da6bacaad1bebec23352accccbca40d6ba87943f82df945bf4ccc5250a0c2b2cb13793380f424b280bfb960885af6df4afa26efa8fcd7a1243389ef3fcf1d709f775a9cd1dfb2b84fd03e5d70f800010001950b7c0ec30534e476b721ba6e82d03078fe63b683918ecbbb9c339c8cdd63689339ac43acd5973f4aac8720a98d18e13b98e11e291f3f3621ed29c717639f84bdd28810da6ae30538775f15e00133741e9de3f96f69ab363752fa962b3c71041ba1e463a91d782a968d9febb648b66e71a6827c53b3be014b785f61c4fd46fef00658f64cdd465edb61ba4c5f00849b2935c485da99a38489ecc29837433ac5446c3922d73153fd8fb2368a5ce4201760ca6778f570b7fcb38be633a02d57c5884b6bcbaf3bc28ca7686edb5d59e1b823a8f0f5ff788625995d51c16413783c6290a9714bd4dcbd2a388139f3e46f69916f335c0002800900020073797a3000000000080003400000000908000180000000000900020073797a3000000000080003400000000808000180fffffffd080003400000000408000340fffffff908000180fffffffb0800034000000003a80002801c000280080003400000020008000340fffffff508000340000000001400028008000340000000050800034000000007720001001c2cce526d2ee30fb33f426450278cb35ac06b1cef15fefc26b5c17a8c9251bed316fccb5588f2e071fc355537fcf458cf14217f16ce4c12a4b559f3e807c94c6cc4f418baebc6024b74b9dbc5ef66dbbe91812ea247db80670c101ed494f105ad9c09b4eaf8d5c133b46a311c1a00001c0302802000028008000180fffffffc0900020073797a320000000008000340000000035c00028008000180fffffffc08000180fffffffc08000180fffffffb0900020073797a300000000008000340000000060900020073797a30000000000900020073797a31000000000900020073797a310000000008000180fffffffbf6000100330e5af714359ac9da33381a13071148dbe4293800e6be0290efbb549850cda132ca27a55553fd77c3067504c4596086f4001f53d49e8111395ebccb983c6b04735a58ab2617dfc62123b09c8dc5a47154667414dc28e8369829764b2e3cc23303a882890bad6d3a70d9e15701ec8c4c15a46d38c9ed6bc8658f8a45a02083f563324a27c649bab7cbcb485c289bd8df0a040128df6891ab48095977e0463f8e3ed7ba6df976ee30768954dfeb3f08c942b2c9384aa0b78baf92ecf5e4d73788afb1bc5a8f7c4b454897cd8bcac7f19cdd949fac66756da3b9311e13362eee317df853f6bc7e4638eb145a1484d3780e09b50000c8000100d5c1e4159bf770e02e6e1ebe911d7513709588175328d2e11f2ebf3f6967c49bedcb2a5459a45272bb8084e3bb55ea7a80166d97ec16457ed7d2a834d9aafdb2a54110ddc7975eaeda4f897ec7d533c27df0ce5ff92cfedadc67fff850ee5d07822d72b27af229d17ad2f8d802ae40d98f373e348a04b4f0270c71f82319de3a0331f165204896e0e448cf7ea0f8eb32a312fda6716f72f0234742fe6708ad0adf587ea21d94b8c8f5080028dda1e21d3d9ac82d8edd12941631b72b692ecc262d6ae12393000100c56deda494a09379df59bad8f0f17376b307ce49571034af728b1c4bf694e3b91406b976944238ab36ccaf40e3d92952ba87aa27af6353a82868c9508577a1b6a349fce75b3e4952b04b9527f496b5555e6db110dec07430b01446635eff12f136dbcb54fd4dc90b02e1bc6488ed74efd9eeb1b6de6e2a234f6c323df5c28a0352d03b34ee4f64ab614078125aa3cc0048000280080003400000000c08000340000000010900020073797a310000000008000180fffffffd0800034000008000080003400000dc5b08000180fffffffc08000180fffffffb2c0202804b000100cece2d8ff50c68c1060c2e691ddc50c6d87b46b4e5f6695010163d98bac2d9d7693cff0ec1e2107f58d3c305c78e5a596df92f1dbe80793dce5424be9e7951890023db7d0b9b2700e5000100f46e4b21dd4b92221713eece21b0e3bfb3fe995725eca78713a8d11ac82a6aefeeeab4720bd136479523ccafa34771afedeafc55275842bb7adb37ff3c93b19d9d5139f8b67ee81e380faa9506e6c8e5956cf7efc9828438d340b1bf747ec7f9b12eb2f8c31049c1fc37e8f28812ea0aadd0caa7e32f6bb4b2b7a4473e5fa876c87bf285a503660ea12a0cfff6863a87c64ea83c31e737e278edcad77cb964828c7049d335e25156fd4d1c2faada6a8363794fe487155fbfd7c2e1b8504d4a744357734f51fca0426ffe929280df27411f8a90a067b285e970fa1e403722ae91dd000000f400010073e22ba6603d1c92836887468b100c2dc430efeb2ef19c66bd0582fe94df7b5a20292fdfbd2009980dbf9651685f7713bfb0f42583e452670f29e2cabf848fcdcb7a2067f0b257efd7dc927e540584b08f026e14be231afa797e36410d8ad6cbced8c5d2cce2f5a8b75713e57b3161b5b4ce78f283bf59a04f90bc1c5a4371abed0124c621ecb51b6166ad39f14216c09456232b7ea8dd7058bbbeae8b1c13df7ffa1515a359309683421d783f4fb00547cb06b3f974e65f28397c2c16675436a414b6e28d61800c35bdc05f9837e14491ce0fa7c0fbf6f61dd8f7eceac62373ed913de212a188ad5fa12d0eab8a0b440900010073797a30"], 0xb98}}, 0x2400c004)
ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000280)={0x5, 0xfe, 0x8006})

756.198197ms ago: executing program 0 (id=1377):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@noblock_validity}]}, 0x1, 0xbb6, &(0x7f0000000c00)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtIxk5nEZDLHpr8fvDnve96TeZ4nJ5nzHpiTAJ5ak9mXNOJIRJxPIsbr+9OIGKj2hiLWa8c9vH91NmtJVCpv/5ZEEhEP7l+dbbxWUt+O1gdDEXH7tST+/VFr3OXVtcWZcrm0VB8fX7l45fjy6torCxdnLpQulC6dmn711PTp6eku1nr3yntfPPPDG89fv/nx1JufH/ouibMxVp9rrqNbJmNy42fSrBARM90OlpO+ej3NdSaFHBMCAKCjtGkN998Yj754vHgbj29/zDU5AAAAoCsqfREVAAAA4IBL3P8DAADAAdf4HMCD+1dnGy3fTyT01r1zETFRq7/xfHNtphDr1e1Q9EfEyO9JND/WmtS+bc8ms0hff1/KWmz3HPJwFwJusn4tIv6/1flPqvVPVJ/ibq0/jYipLsSf3DTu9e/fXuo/24X4edcPwNPp1rnahaz1+pfW1j+DtdHm619hi2vXbuR9/Wus/x62rP/SjfVfX5v131s7jHH00Uu32801r//e/eTnuSx+tt1TUX/DvWsRRwtb1Z9s1J+0qf/8DmOMzt690W4uqz+rt9F6XX/lZsSx6mqutf6GpNP/Jzo+v1AuTdW+bvH6q6c7x28+/1nL4jfuBXohO/8jsbvzf2WHMSb+9+uRdnPb15/+MpC8U+0N1Pd8OLOysnQiYiB5vXX/yc65NI5pvEZW/4vPdf7736r+7D1hvf5zyH57rtW32fj6ppijx05+tfv691dW/9wuz/+nO4zx5Tc33m83l3f9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwZ0ogYiyQtbvTTtFiMGI2I/8RIWr68vPLy/OUPLs1lcxET0Z/OL5RLUxExXhsn2fhEtf94fHLTeDoiDkfEZ+PD1XFx9nJ5Lu/iAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2DAaEWORpMWISCPij/E0LRbzzgoAAADouom8EwAAAAD2nft/AAAAOPha7v8LfxkN9TIXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADqTDz966k0TE+pnhassM1Of6c80M2G/pzg4b2e88gN7ryzsBIDeFpn6lUqnkmArQY+7xgWSb+aG2M4NdzwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf64Xjty6k0TE+pnhassM1Of6c80M2G9p3gkAuenrNJlsuwN4ghXyTgDIjXt8oLayf1SpaZ0favudg3uOCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCTY6zakrQYEWm1n6bFYsS/ImIi+pP5hXJpKiIORcRP4/2D2fhE3kkDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQdcura4sz5XJpSUdHp4ud4ehZrOH6H3ObYwbbT3Xo5PzGBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABALpZX1xZnyuXS0nLemQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5W15dW5wpl0tL+9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzZwAAAP//0L4Jug==")
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
r2 = open(&(0x7f0000000240)='./file2\x00', 0x145142, 0x0)
sendfile(r2, r2, 0x0, 0x800000009)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0xc, 0x4, 0x4002, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50)

648.837761ms ago: executing program 2 (id=1378):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @val={@void, {0x8100, 0x5, 0x1, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0x2000, 0x81e0, 0x8}}}}}}, 0x2e) (fail_nth: 3)

401.651252ms ago: executing program 5 (id=1379):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x0)

401.444342ms ago: executing program 5 (id=1380):
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0)

286.530407ms ago: executing program 0 (id=1381):
socket$nl_netfilter(0x10, 0x3, 0xc)
writev(0xffffffffffffffff, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000005008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee", 0x87, 0x0, 0x0, 0x0)

191.191941ms ago: executing program 7 (id=1382):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x12, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@call={0x85, 0x0, 0x0, 0x60}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x1, 0x33, &(0x7f0000000300)=""/51, 0x40f00, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0xe, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000480)=[{0x3, 0x2, 0x7, 0xa}, {0x1, 0x4, 0xa, 0x1b}, {0x4, 0x1, 0x0, 0x7}, {0x2, 0x3, 0x1, 0x5}, {0x2, 0x4, 0xa, 0x18}], 0x10, 0x8001}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0)

187.259151ms ago: executing program 5 (id=1383):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000"], &(0x7f0000000240)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)
write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69)
close(r0)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

171.200202ms ago: executing program 5 (id=1384):
syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@noload}]}, 0xee, 0x472, &(0x7f0000000f40)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000000000000480010007"], 0x50)
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0)
lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0)

163.966153ms ago: executing program 7 (id=1385):
r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
close(r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x3, @empty, 0x6}, 0x1c)
listen(r1, 0x9)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000001100"/28], 0x48)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1808000000000000000000001c00000018110000", @ANYRES8=0x0, @ANYRES8, @ANYBLOB="0000000000000000b7050000080000004608f0ff7600003100bf9800000000000036080000010000008500000007000000b70000000000000095000000000000", @ANYRES64=r2], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=<r5=>r3, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r4, 0x0, 0x20000000002}, 0x18)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000240)=ANY=[@ANYRESDEC=r4, @ANYRES16=r3, @ANYRES8, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT=r5, @ANYRES32=r6, @ANYRES32=r4, @ANYRESDEC], 0xfb, 0x11ff, &(0x7f0000002480)="$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")
ioctl$EXT4_IOC_GETFSUUID(r6, 0x8008662c, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=@getqdisc={0x0, 0x26, 0x800, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff0, 0x7}, {0x1, 0xa}, {0x4, 0x7}}}, 0xa4}, 0x1, 0x0, 0x0, 0x8800}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
accept$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14)

77.526126ms ago: executing program 8 (id=1386):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
io_uring_setup(0x22625, 0x0) (async)
io_uring_setup(0x22625, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone3(&(0x7f0000001040)={0x20400, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000001000)=[0x0], 0x1}, 0x58)
readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x10007ffffffff}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x10007ffffffff}, 0x18)
r3 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x40000, 0x0, 0x0) (async)
sendto$inet6(r3, 0x0, 0x0, 0x40000, 0x0, 0x0)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0)
readv(r4, &(0x7f0000000ec0)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1)
timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) (async)
timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0))
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000400)={0x7, &(0x7f00000003c0)=[{0x100, 0x6, 0x1, 0x3}, {0x7fff, 0x9, 0x7f, 0x7f}, {0x8000, 0xa, 0xd, 0xa}, {0xb0a, 0x7, 0x9, 0x1}, {0x8000, 0x58, 0xc0, 0x2000000}, {0x1e4, 0x4, 0x8, 0x7}, {0x0, 0x10, 0x2, 0x4}]})
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="4eaa0009061a177e99e1973e3508000000000071103100db2d0a9d8e00000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4f}, 0x80)
r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaa00000001000008004d1e00bb1a6fb0441c0fc10a01010100000005ac14d4e23e91431cf661080000000002004e224e22", @ANYRES32, @ANYRES32=r5, @ANYBLOB="50c2000290781e83"], 0x0)
fcntl$setsig(r5, 0xa, 0x13)
fcntl$setlease(r5, 0x400, 0x1)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x1c9c380}}, 0x0) (async)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x1c9c380}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)

74.644726ms ago: executing program 8 (id=1387):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x9000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4a}, 0x48)
close(r0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000340)={r0, 0x1, 0x7, 0xa70})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00'}, 0x18)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0)
recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/243, 0xfffffed7}], 0x1}, 0x0)

60.211867ms ago: executing program 0 (id=1388):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r3, 0x0, 0xffff}, 0x18)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local'])
open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x101042, 0x1)

41.045488ms ago: executing program 8 (id=1389):
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
r8 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r9=>0x0)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r9], 0x1c}}, 0x0)
close(r8)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4)

40.786838ms ago: executing program 5 (id=1390):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0)
getrlimit(0x0, &(0x7f0000000280))

36.314658ms ago: executing program 0 (id=1391):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x555)
semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x8, 0x1800}], 0x1, 0x0)
unshare(0x2c040000)

6.029569ms ago: executing program 5 (id=1392):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800000000000100, 0x88000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r5}, 0x18)
syz_io_uring_setup(0x496, &(0x7f0000000940)={0x0, 0x422e, 0x800, 0x3, 0xac}, &(0x7f0000000080), &(0x7f0000000400))
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff000000000a0400009111c7000000000095"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000540)={&(0x7f0000000280)="194ba950e30d68c1c6fc74d943ba9f69f474700efd20145460230893a1b74e2c02a62ec6a9d192b8708a50fbb38b2051eefb4f7d3cb6a81d77113a7d94e37d10334cf62d05b95e4a9dafe4dcec", &(0x7f0000000300)=""/26, &(0x7f0000000340)="f261dc7971928c6f4e003e28006919ab5e698651d601700a7ad4c1887603c63369ef3007231f0de91da5f1b8458d637b134052694d6c7d55b8ca3d87e3e83113dfab08516b3e3aeb47fdc8f73f66c8b88a085603fad5addadf2973e2edd1ca18f5db3585c213e50719d0f687c73c0e15e26ddf208240fc539f9fc830a84676845f882d46528253d5b87aeb25b53678a929055c1a77", &(0x7f00000004c0)="fecf6103c0a607e4d8eeaf4fc8aad181ec3795cb148b1713d16a4538fb81e4666b5e4863492d441ea4b30b4f6e6c75a403f21672c77d7c087373fed0ec34790f72bcea78c7f819bacdcc8126155bc90e6d1d", 0x2, r1, 0x4}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r9, r10, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9}, &(0x7f00000006c0), &(0x7f0000000700)=r8}, 0x20)
syz_emit_ethernet(0x2a, &(0x7f0000001f80)=ANY=[@ANYBLOB="0388c2006c00bbbbbbbbbbbb08004500001c0000000000019078ac1e0001ac1414aa0000907800670008"], 0x0)

0s ago: executing program 0 (id=1393):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001000000", @ANYRES32, @ANYBLOB], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000500)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x49}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10)
r9 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r9, 0x0, 0x5, &(0x7f0000000240)={@broadcast, @empty, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x7e, 0x6b}, 0x3c)
setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000d00)={{}, {}, [], {0x4, 0x6}}, 0x24, 0x2)

0s ago: executing program 5 (id=1394):
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async, rerun: 64)
r0 = accept$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x0, @initdev}, &(0x7f0000000700)=0x10) (rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, r0, 0x28f3e000) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getrandom(&(0x7f0000000180)=""/191, 0xbf, 0x0) (async, rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) (async, rerun: 32)
r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r5 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=<r6=>0x0, &(0x7f0000000040)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x1, 0x0}) (async, rerun: 32)
io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x0) (async, rerun: 32)
r8 = dup3(r2, r1, 0x80000) (async)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) (async)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000380)={<r11=>0x0, 0x6, 0x2, 0x1000}, &(0x7f0000000580)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f00000005c0)={r11, @in6={{0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, &(0x7f0000000680)=0x84) (async, rerun: 32)
ioctl$SG_IO(r4, 0x2285, 0x0) (rerun: 32)
writev(r4, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0c00000f7fc08fcd111fbdf23ea32dbb0664a5f747d7deda3fa0b7327bd49eb067a0689fff2a41c", 0x2c}], 0x2) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

kernel console output (not intermixed with test programs):

ring): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.260433][ T5197] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   55.283575][   T31] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.373722][   T31] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.455123][ T5190] lo speed is unknown, defaulting to 1000
[   55.532879][   T31] bridge_slave_1: left allmulticast mode
[   55.538554][   T31] bridge_slave_1: left promiscuous mode
[   55.544242][   T31] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.560447][   T31] bridge_slave_0: left allmulticast mode
[   55.566179][   T31] bridge_slave_0: left promiscuous mode
[   55.571885][   T31] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.602997][ T5215] loop5: detected capacity change from 0 to 512
[   55.609832][ T5215] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   55.652933][ T5215] EXT4-fs (loop5): failed to initialize system zone (-117)
[   55.660665][ T5215] EXT4-fs (loop5): mount failed
[   55.716696][ T5226] xt_hashlimit: overflow, try lower: 0/0
[   55.720891][ T5227] xt_hashlimit: overflow, try lower: 0/0
[   55.733916][ T5226] loop5: detected capacity change from 0 to 512
[   55.741870][ T5226] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   55.754632][ T5226] EXT4-fs (loop5): 1 orphan inode deleted
[   55.760371][ T5226] EXT4-fs (loop5): 1 truncate cleaned up
[   55.768577][   T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   55.787087][   T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   55.800093][   T31] bond0 (unregistering): Released all slaves
[   55.806866][ T5232] IPv6: NLM_F_CREATE should be specified when creating new route
[   55.819383][ T5222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.578'.
[   55.828372][ T5228] netlink: 12 bytes leftover after parsing attributes in process `syz.0.578'.
[   55.913354][ T5190] chnl_net:caif_netlink_parms(): no params data found
[   55.957864][   T31] hsr_slave_0: left promiscuous mode
[   55.985319][   T31] hsr_slave_1: left promiscuous mode
[   55.991843][   T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   55.999253][   T31] batman_adv: batadv0: Removing interface: batadv_slave_0
[   56.021997][   T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   56.029428][   T31] batman_adv: batadv0: Removing interface: batadv_slave_1
[   56.063597][   T31] veth1_macvtap: left promiscuous mode
[   56.069472][   T31] veth0_macvtap: left promiscuous mode
[   56.075090][   T31] veth1_vlan: left promiscuous mode
[   56.080395][   T31] veth0_vlan: left promiscuous mode
[   56.155476][   T31] team0 (unregistering): Port device team_slave_1 removed
[   56.165351][   T31] team0 (unregistering): Port device team_slave_0 removed
[   56.199623][ T5246] tipc: Started in network mode
[   56.204561][ T5246] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   56.220005][ T5246] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[   56.228421][ T5246] tipc: Enabled bearer <udp:syz1>, priority 10
[   56.275229][ T5254] 9pnet_fd: Insufficient options for proto=fd
[   56.281427][ T5253] 9pnet_fd: Insufficient options for proto=fd
[   56.291155][ T5190] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.298303][ T5190] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.307864][ T5190] bridge_slave_0: entered allmulticast mode
[   56.314594][ T5190] bridge_slave_0: entered promiscuous mode
[   56.315324][ T5259] loop5: detected capacity change from 0 to 512
[   56.324195][ T5190] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.327616][ T5259] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   56.333765][ T5190] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.349702][ T5259] EXT4-fs (loop5): failed to initialize system zone (-117)
[   56.350954][ T5190] bridge_slave_1: entered allmulticast mode
[   56.358122][ T5259] EXT4-fs (loop5): mount failed
[   56.364477][ T5190] bridge_slave_1: entered promiscuous mode
[   56.389191][ T5190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.399754][ T5190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.421703][ T5190] team0: Port device team_slave_0 added
[   56.428185][ T5190] team0: Port device team_slave_1 added
[   56.446027][ T5190] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.453077][ T5190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.479075][ T5190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.493055][ T5271] loop5: detected capacity change from 0 to 512
[   56.494051][   T31] IPVS: stop unused estimator thread 0...
[   56.501028][ T5271] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   56.510894][ T5190] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.517370][ T5271] EXT4-fs (loop5): 1 truncate cleaned up
[   56.521964][ T5190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.553709][ T5190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.585522][ T5190] hsr_slave_0: entered promiscuous mode
[   56.591894][ T5190] hsr_slave_1: entered promiscuous mode
[   56.676742][ T5190] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   56.685886][ T5190] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   56.695896][ T5190] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   56.711194][ T5190] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   56.729234][ T5190] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.736331][ T5190] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.743627][ T5190] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.750690][ T5190] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.765949][ T5290] loop5: detected capacity change from 0 to 512
[   56.773720][ T5290] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   56.804128][ T5190] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.816079][ T5290] EXT4-fs (loop5): failed to initialize system zone (-117)
[   56.822003][ T5190] 8021q: adding VLAN 0 to HW filter on device team0
[   56.830426][ T5290] EXT4-fs (loop5): mount failed
[   56.836392][ T4436] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.844782][ T4436] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.888392][ T5297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.602'.
[   56.896159][ T5190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.907636][ T5190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.920513][ T4436] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.927689][ T4436] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.937146][ T4436] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.944324][ T4436] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.958838][ T5297] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   56.966326][ T5297] batman_adv: batadv0: Removing interface: batadv_slave_0
[   56.976181][ T5297] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   56.983701][ T5297] batman_adv: batadv0: Removing interface: batadv_slave_1
[   57.017018][ T5308] random: crng reseeded on system resumption
[   57.037031][ T5190] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.148330][ T5190] veth0_vlan: entered promiscuous mode
[   57.156502][ T5190] veth1_vlan: entered promiscuous mode
[   57.163148][ T5330] loop2: detected capacity change from 0 to 512
[   57.168480][ T5190] veth0_macvtap: entered promiscuous mode
[   57.175872][ T5330] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   57.177254][ T5190] veth1_macvtap: entered promiscuous mode
[   57.194452][ T5330] EXT4-fs (loop2): failed to initialize system zone (-117)
[   57.202260][ T5330] EXT4-fs (loop2): mount failed
[   57.211457][ T5190] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.221936][ T5190] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.233098][ T4407] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.242417][ T4407] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.252905][ T4407] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.261734][ T4407] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.350744][ T3401] tipc: Node number set to 1
[   57.365205][ T5351] netlink: 'syz.6.616': attribute type 39 has an invalid length.
[   57.434631][ T5355] loop2: detected capacity change from 0 to 4096
[   57.718381][ T5365] loop1: detected capacity change from 0 to 512
[   57.725252][ T5365] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   57.736596][ T5365] EXT4-fs (loop1): failed to initialize system zone (-117)
[   57.743964][ T5365] EXT4-fs (loop1): mount failed
[   57.834929][ T5371] netlink: 'syz.1.622': attribute type 16 has an invalid length.
[   57.842731][ T5371] netlink: 'syz.1.622': attribute type 17 has an invalid length.
[   57.873418][ T5371] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   57.911327][ T5375] loop1: detected capacity change from 0 to 128
[   57.918038][ T5375] EXT4-fs: Ignoring removed nobh option
[   57.925762][ T5375] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   57.958341][ T5380] netlink: 12 bytes leftover after parsing attributes in process `syz.5.624'.
[   57.960648][   T29] kauditd_printk_skb: 896 callbacks suppressed
[   57.960693][   T29] audit: type=1326 audit(1764086422.245:10242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5362 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b7de82005 code=0x7ffc0000
[   58.000289][   T29] audit: type=1326 audit(1764086422.245:10243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5362 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b7de82005 code=0x7ffc0000
[   58.024674][   T29] audit: type=1326 audit(1764086422.275:10244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5362 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b7de82005 code=0x7ffc0000
[   58.048158][   T29] audit: type=1326 audit(1764086422.275:10245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5362 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b7de82005 code=0x7ffc0000
[   58.071725][   T29] audit: type=1326 audit(1764086422.275:10246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5362 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b7de82005 code=0x7ffc0000
[   58.095389][   T29] audit: type=1326 audit(1764086422.275:10247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5362 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b7de82005 code=0x7ffc0000
[   58.118920][   T29] audit: type=1326 audit(1764086422.275:10248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5362 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b7de82005 code=0x7ffc0000
[   58.142439][   T29] audit: type=1326 audit(1764086422.275:10249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5362 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b7de82005 code=0x7ffc0000
[   58.165906][   T29] audit: type=1326 audit(1764086422.275:10250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5362 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b7de82005 code=0x7ffc0000
[   58.189333][   T29] audit: type=1326 audit(1764086422.275:10251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5362 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b7de82005 code=0x7ffc0000
[   58.245326][ T5388] loop1: detected capacity change from 0 to 764
[   58.467493][ T5397] loop2: detected capacity change from 0 to 1024
[   58.482317][ T5397] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   58.493996][ T5397] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm syz.2.630: lblock 0 mapped to illegal pblock 0 (length 6)
[   58.507719][ T5397] FAULT_INJECTION: forcing a failure.
[   58.507719][ T5397] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   58.520858][ T5397] CPU: 1 UID: 0 PID: 5397 Comm: syz.2.630 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   58.520898][ T5397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   58.520910][ T5397] Call Trace:
[   58.520916][ T5397]  <TASK>
[   58.520975][ T5397]  __dump_stack+0x1d/0x30
[   58.520990][ T5397]  dump_stack_lvl+0xe8/0x140
[   58.521001][ T5397]  dump_stack+0x15/0x1b
[   58.521020][ T5397]  should_fail_ex+0x265/0x280
[   58.521039][ T5397]  should_fail+0xb/0x20
[   58.521112][ T5397]  should_fail_usercopy+0x1a/0x20
[   58.521124][ T5397]  copy_folio_from_iter_atomic+0x278/0x11b0
[   58.521143][ T5397]  generic_perform_write+0x2c2/0x490
[   58.521179][ T5397]  ext4_buffered_write_iter+0x1ee/0x3c0
[   58.521193][ T5397]  ? ext4_file_write_iter+0xfe/0xf60
[   58.521216][ T5397]  ext4_file_write_iter+0x387/0xf60
[   58.521292][ T5397]  ? kstrtouint+0x76/0xc0
[   58.521310][ T5397]  ? kstrtouint_from_user+0x9f/0xf0
[   58.521321][ T5397]  ? avc_policy_seqno+0x15/0x30
[   58.521331][ T5397]  ? selinux_file_permission+0x1e4/0x320
[   58.521350][ T5397]  ? __pfx_ext4_file_write_iter+0x10/0x10
[   58.521400][ T5397]  vfs_write+0x52a/0x960
[   58.521495][ T5397]  ksys_write+0xda/0x1a0
[   58.521509][ T5397]  __x64_sys_write+0x40/0x50
[   58.521523][ T5397]  x64_sys_call+0x2802/0x3000
[   58.521555][ T5397]  do_syscall_64+0xd2/0x200
[   58.521567][ T5397]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   58.521583][ T5397]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   58.521678][ T5397]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.521691][ T5397] RIP: 0033:0x7f0b7de4f749
[   58.521701][ T5397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   58.521743][ T5397] RSP: 002b:00007f0b7c8af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   58.521754][ T5397] RAX: ffffffffffffffda RBX: 00007f0b7e0a5fa0 RCX: 00007f0b7de4f749
[   58.521761][ T5397] RDX: 0000000000000007 RSI: 0000200000000040 RDI: 0000000000000004
[   58.521769][ T5397] RBP: 00007f0b7c8af090 R08: 0000000000000000 R09: 0000000000000000
[   58.521775][ T5397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   58.521783][ T5397] R13: 00007f0b7e0a6038 R14: 00007f0b7e0a5fa0 R15: 00007ffeaac806c8
[   58.521793][ T5397]  </TASK>
[   58.522131][ T5397] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm syz.2.630: lblock 0 mapped to illegal pblock 0 (length 1)
[   58.756572][ T5397] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   58.768984][ T5397] EXT4-fs (loop2): This should not happen!! Data will be lost
[   58.768984][ T5397] 
[   58.788305][ T3317] rock: directory entry would overflow storage
[   58.794591][ T3317] rock: sig=0x4f50, size=4, remaining=3
[   58.800194][ T3317] iso9660: Corrupted directory entry in block 6 of inode 1792
[   58.808267][ T3317] Symlink component flag not implemented
[   58.814387][ T3317] iso9660: Corrupted directory entry in block 6 of inode 1792
[   58.979696][ T5407] random: crng reseeded on system resumption
[   58.992922][   T52] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.052116][   T52] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.103479][   T52] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.127032][ T5409] lo speed is unknown, defaulting to 1000
[   59.168939][ T5424] netlink: 32 bytes leftover after parsing attributes in process `syz.5.639'.
[   59.189979][ T5409] chnl_net:caif_netlink_parms(): no params data found
[   59.199951][ T5428] FAULT_INJECTION: forcing a failure.
[   59.199951][ T5428] name failslab, interval 1, probability 0, space 0, times 0
[   59.212764][ T5428] CPU: 1 UID: 0 PID: 5428 Comm: syz.5.640 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   59.212784][ T5428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   59.212803][ T5428] Call Trace:
[   59.212807][ T5428]  <TASK>
[   59.212812][ T5428]  __dump_stack+0x1d/0x30
[   59.212827][ T5428]  dump_stack_lvl+0xe8/0x140
[   59.212838][ T5428]  dump_stack+0x15/0x1b
[   59.212875][ T5428]  should_fail_ex+0x265/0x280
[   59.212894][ T5428]  ? nsim_bpf+0x4ae/0x920
[   59.212911][ T5428]  should_failslab+0x8c/0xb0
[   59.212928][ T5428]  __kmalloc_cache_noprof+0x4c/0x4a0
[   59.212956][ T5428]  nsim_bpf+0x4ae/0x920
[   59.212970][ T5428]  ? bpf_offload_find_netdev+0x202/0x250
[   59.212989][ T5428]  bpf_map_offload_map_alloc+0x2b2/0x4a0
[   59.213064][ T5428]  map_create+0x840/0xda0
[   59.213080][ T5428]  ? security_bpf+0x2b/0x90
[   59.213096][ T5428]  __sys_bpf+0x54e/0x7c0
[   59.213178][ T5428]  __x64_sys_bpf+0x41/0x50
[   59.213201][ T5428]  x64_sys_call+0x2aee/0x3000
[   59.213250][ T5428]  do_syscall_64+0xd2/0x200
[   59.213263][ T5428]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   59.213279][ T5428]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   59.213362][ T5428]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.213374][ T5428] RIP: 0033:0x7fbbe5c5f749
[   59.213384][ T5428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   59.213394][ T5428] RSP: 002b:00007fbbe46bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   59.213484][ T5428] RAX: ffffffffffffffda RBX: 00007fbbe5eb5fa0 RCX: 00007fbbe5c5f749
[   59.213491][ T5428] RDX: 0000000000000048 RSI: 0000200000000140 RDI: 0000000000000000
[   59.213498][ T5428] RBP: 00007fbbe46bf090 R08: 0000000000000000 R09: 0000000000000000
[   59.213505][ T5428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   59.213572][ T5428] R13: 00007fbbe5eb6038 R14: 00007fbbe5eb5fa0 R15: 00007ffd3e265878
[   59.213583][ T5428]  </TASK>
[   59.217409][   T52] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.272383][ T5432] loop5: detected capacity change from 0 to 1024
[   59.429702][ T5432] EXT4-fs: Ignoring removed nomblk_io_submit option
[   59.455919][ T5409] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.463116][ T5409] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.470389][ T5409] bridge_slave_0: entered allmulticast mode
[   59.477309][ T5409] bridge_slave_0: entered promiscuous mode
[   59.483662][ T5432] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   59.484832][ T5409] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.498014][ T5409] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.505362][ T5409] bridge_slave_1: entered allmulticast mode
[   59.506387][ T5432] vhci_hcd: invalid port number 96
[   59.511952][ T5409] bridge_slave_1: entered promiscuous mode
[   59.516407][ T5432] vhci_hcd: default hub control req: 0300 vfffa i0060 l0
[   59.533765][   T36] kernel write not supported for file /uhid (pid: 36 comm: kworker/1:1)
[   59.555740][ T5409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.569360][ T5409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.593921][ T5409] team0: Port device team_slave_0 added
[   59.606557][ T5409] team0: Port device team_slave_1 added
[   59.618518][   T52] bridge_slave_1: left allmulticast mode
[   59.624394][   T52] bridge_slave_1: left promiscuous mode
[   59.630371][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.638151][   T52] bridge_slave_0: left allmulticast mode
[   59.643927][   T52] bridge_slave_0: left promiscuous mode
[   59.649530][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.753680][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   59.763676][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   59.773290][   T52] bond0 (unregistering): Released all slaves
[   59.794533][ T5409] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.801536][ T5409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   59.827769][ T5409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.839782][ T5409] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.846837][ T5409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   59.872845][ T5409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.892870][   T52] hsr_slave_0: left promiscuous mode
[   59.898593][   T52] hsr_slave_1: left promiscuous mode
[   59.904410][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.911888][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[   59.921550][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.928999][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[   59.941463][   T52] veth1_macvtap: left promiscuous mode
[   59.947055][   T52] veth0_macvtap: left promiscuous mode
[   59.953535][   T52] veth1_vlan: left promiscuous mode
[   59.958906][   T52] veth0_vlan: left promiscuous mode
[   60.024271][   T52] team0 (unregistering): Port device team_slave_1 removed
[   60.034751][   T52] team0 (unregistering): Port device team_slave_0 removed
[   60.060400][ T5449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5449 comm=syz.2.646
[   60.086574][ T5448] xt_TCPMSS: Only works on TCP SYN packets
[   60.088043][ T5409] hsr_slave_0: entered promiscuous mode
[   60.098789][ T5409] hsr_slave_1: entered promiscuous mode
[   60.104752][ T5409] debugfs: 'hsr0' already exists in 'hsr'
[   60.110535][ T5409] Cannot create hsr debugfs directory
[   60.199340][ T5409] netdevsim netdevsim7 netdevsim0: renamed from eth0
[   60.208398][ T5409] netdevsim netdevsim7 netdevsim1: renamed from eth1
[   60.217836][ T5409] netdevsim netdevsim7 netdevsim2: renamed from eth2
[   60.227034][ T5409] netdevsim netdevsim7 netdevsim3: renamed from eth3
[   60.229632][ T5460] loop2: detected capacity change from 0 to 512
[   60.242958][ T5460] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   60.252818][ T5460] EXT4-fs (loop2): invalid journal inode
[   60.258760][ T5460] EXT4-fs (loop2): can't get journal size
[   60.266077][ T5460] EXT4-fs (loop2): 1 truncate cleaned up
[   60.282075][ T5460] pimreg: entered allmulticast mode
[   60.296953][ T5460] pimreg: left allmulticast mode
[   60.328273][ T5409] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.339212][ T5409] 8021q: adding VLAN 0 to HW filter on device team0
[   60.351458][ T4407] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.358746][ T4407] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.377122][ T4407] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.384355][ T4407] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.474082][ T5409] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.504048][ T5488] random: crng reseeded on system resumption
[   60.552600][ T5486] loop6: detected capacity change from 0 to 8192
[   60.581545][ T5500] random: crng reseeded on system resumption
[   60.587142][ T5486] vfat: Unknown parameter '00000000000000000005'
[   60.608736][ T5503] FAULT_INJECTION: forcing a failure.
[   60.608736][ T5503] name failslab, interval 1, probability 0, space 0, times 0
[   60.621752][ T5503] CPU: 0 UID: 0 PID: 5503 Comm: syz.5.663 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   60.621782][ T5503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   60.621795][ T5503] Call Trace:
[   60.621801][ T5503]  <TASK>
[   60.621809][ T5503]  __dump_stack+0x1d/0x30
[   60.621832][ T5503]  dump_stack_lvl+0xe8/0x140
[   60.621854][ T5503]  dump_stack+0x15/0x1b
[   60.621879][ T5503]  should_fail_ex+0x265/0x280
[   60.621910][ T5503]  should_failslab+0x8c/0xb0
[   60.621939][ T5503]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[   60.621966][ T5503]  ? __alloc_skb+0x101/0x320
[   60.622067][ T5503]  __alloc_skb+0x101/0x320
[   60.622095][ T5503]  netlink_dump+0x10d/0x8a0
[   60.622124][ T5503]  ? genl_start+0x117/0x390
[   60.622147][ T5503]  ? should_failslab+0x8c/0xb0
[   60.622260][ T5503]  __netlink_dump_start+0x43e/0x520
[   60.622295][ T5503]  genl_family_rcv_msg_dumpit+0x115/0x180
[   60.622320][ T5503]  ? __pfx_genl_start+0x10/0x10
[   60.622340][ T5503]  ? __pfx_genl_dumpit+0x10/0x10
[   60.622411][ T5503]  ? __pfx_genl_done+0x10/0x10
[   60.622440][ T5503]  genl_rcv_msg+0x3f0/0x460
[   60.622522][ T5503]  ? __pfx_nl80211_dump_interface+0x10/0x10
[   60.622553][ T5503]  netlink_rcv_skb+0x123/0x220
[   60.622616][ T5503]  ? __pfx_genl_rcv_msg+0x10/0x10
[   60.622641][ T5503]  genl_rcv+0x28/0x40
[   60.622660][ T5503]  netlink_unicast+0x5c0/0x690
[   60.622691][ T5503]  netlink_sendmsg+0x58b/0x6b0
[   60.622769][ T5503]  ? __pfx_netlink_sendmsg+0x10/0x10
[   60.622788][ T5503]  __sock_sendmsg+0x145/0x180
[   60.622812][ T5503]  ____sys_sendmsg+0x31e/0x4e0
[   60.622835][ T5503]  ___sys_sendmsg+0x17b/0x1d0
[   60.622867][ T5503]  __x64_sys_sendmsg+0xd4/0x160
[   60.622944][ T5503]  x64_sys_call+0x191e/0x3000
[   60.622965][ T5503]  do_syscall_64+0xd2/0x200
[   60.622987][ T5503]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   60.623052][ T5503]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   60.623087][ T5503]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.623108][ T5503] RIP: 0033:0x7fbbe5c5f749
[   60.623123][ T5503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   60.623177][ T5503] RSP: 002b:00007fbbe46bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   60.623194][ T5503] RAX: ffffffffffffffda RBX: 00007fbbe5eb5fa0 RCX: 00007fbbe5c5f749
[   60.623205][ T5503] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[   60.623216][ T5503] RBP: 00007fbbe46bf090 R08: 0000000000000000 R09: 0000000000000000
[   60.623227][ T5503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   60.623288][ T5503] R13: 00007fbbe5eb6038 R14: 00007fbbe5eb5fa0 R15: 00007ffd3e265878
[   60.623304][ T5503]  </TASK>
[   60.985007][ T5524] netlink: 72 bytes leftover after parsing attributes in process `syz.2.671'.
[   61.003969][ T5524] netlink: 20 bytes leftover after parsing attributes in process `syz.2.671'.
[   61.012971][ T5524] netlink: 24 bytes leftover after parsing attributes in process `syz.2.671'.
[   61.082436][ T5409] veth0_vlan: entered promiscuous mode
[   61.095334][ T5535] 9pnet: Could not find request transport: fd
[   61.109670][ T5409] veth1_vlan: entered promiscuous mode
[   61.130543][ T5409] veth0_macvtap: entered promiscuous mode
[   61.144345][ T5409] veth1_macvtap: entered promiscuous mode
[   61.150312][ T5535] loop6: detected capacity change from 0 to 1024
[   61.157680][ T5535] EXT4-fs: inline encryption not supported
[   61.163617][ T5409] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.167695][ T5535] EXT4-fs: Ignoring removed nobh option
[   61.176437][ T5535] EXT4-fs: Ignoring removed bh option
[   61.176585][ T5550] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5550 comm=syz.0.677
[   61.198272][ T5550] netlink: 332 bytes leftover after parsing attributes in process `syz.0.677'.
[   61.200236][ T5535] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4193: comm syz.6.674: Allocating blocks 497-513 which overlap fs metadata
[   61.208338][ T5548] random: crng reseeded on system resumption
[   61.229018][ T5409] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.248578][ T4437] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.261314][ T5541] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4193: comm syz.6.674: Allocating blocks 497-513 which overlap fs metadata
[   61.277183][ T4437] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.288811][ T4437] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.303907][ T4437] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.388461][ T5559] loop7: detected capacity change from 0 to 4096
[   61.400859][ T5564] netlink: 40 bytes leftover after parsing attributes in process `syz.6.680'.
[   61.444318][ T5572] pimreg: entered allmulticast mode
[   61.450997][ T5572] pimreg: left allmulticast mode
[   61.631949][ T5584] loop2: detected capacity change from 0 to 512
[   61.639369][ T5584] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   61.672103][ T5584] EXT4-fs (loop2): 1 truncate cleaned up
[   61.704106][ T5590] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   61.769139][ T5593] loop7: detected capacity change from 0 to 512
[   61.777810][ T5593] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[   61.788107][ T5593] EXT4-fs (loop7): invalid journal inode
[   61.793851][ T5593] EXT4-fs (loop7): can't get journal size
[   61.810162][ T5593] EXT4-fs (loop7): 1 truncate cleaned up
[   61.820481][ T5599] random: crng reseeded on system resumption
[   61.822137][ T5589] loop5: detected capacity change from 0 to 164
[   61.856731][ T5589] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   62.179930][ T5614] Cannot find del_set index 2 as target
[   62.929020][ T5620] ip6gre1: entered allmulticast mode
[   62.949392][ T5620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5620 comm=syz.2.698
[   63.161407][   T29] kauditd_printk_skb: 482 callbacks suppressed
[   63.161423][   T29] audit: type=1400 audit(1764086427.455:10734): avc:  denied  { read } for  pid=5627 comm="syz.7.701" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   63.190811][   T29] audit: type=1400 audit(1764086427.455:10735): avc:  denied  { open } for  pid=5627 comm="syz.7.701" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   63.192990][ T5626] loop2: detected capacity change from 0 to 512
[   63.214353][   T29] audit: type=1400 audit(1764086427.455:10736): avc:  denied  { ioctl } for  pid=5627 comm="syz.7.701" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   63.246040][   T29] audit: type=1400 audit(1764086427.455:10737): avc:  denied  { ioctl } for  pid=5627 comm="syz.7.701" path="socket:[13894]" dev="sockfs" ino=13894 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   63.276613][ T5632] loop6: detected capacity change from 0 to 512
[   63.281544][ T5626] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   63.293842][   T29] audit: type=1326 audit(1764086427.545:10738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5629 comm="syz.0.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa299fef749 code=0x7ffc0000
[   63.317300][   T29] audit: type=1326 audit(1764086427.545:10739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5629 comm="syz.0.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa299fef749 code=0x7ffc0000
[   63.340725][   T29] audit: type=1326 audit(1764086427.545:10740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5629 comm="syz.0.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa299fef749 code=0x7ffc0000
[   63.364191][   T29] audit: type=1326 audit(1764086427.545:10741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5629 comm="syz.0.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa299fef749 code=0x7ffc0000
[   63.387819][   T29] audit: type=1326 audit(1764086427.545:10742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5629 comm="syz.0.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa299fef749 code=0x7ffc0000
[   63.411288][   T29] audit: type=1326 audit(1764086427.545:10743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5629 comm="syz.0.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fa299fef749 code=0x7ffc0000
[   63.436111][ T5626] EXT4-fs (loop2): 1 truncate cleaned up
[   63.441339][ T5639] netlink: 'syz.5.707': attribute type 10 has an invalid length.
[   63.453483][ T5639] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[   63.462756][ T5632] EXT4-fs error (device loop6): ext4_iget_extra_inode:5075: inode #15: comm syz.6.703: corrupted in-inode xattr: invalid ea_ino
[   63.478647][ T5632] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.703: couldn't read orphan inode 15 (err -117)
[   63.513713][ T5632] bridge0: port 3(vlan2) entered blocking state
[   63.520277][ T5632] bridge0: port 3(vlan2) entered disabled state
[   63.527087][ T5632] vlan2: entered allmulticast mode
[   63.532303][ T5632] bridge0: entered allmulticast mode
[   63.538511][ T5632] vlan2: left allmulticast mode
[   63.543401][ T5632] bridge0: left allmulticast mode
[   63.604222][ T5190] EXT4-fs error (device loop6): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[   63.650966][ T5190] EXT4-fs error (device loop6): ext4_lookup:1787: inode #11: comm syz-executor: iget: bad extended attribute block 393216
[   63.669611][ T5190] EXT4-fs error (device loop6): ext4_lookup:1787: inode #11: comm syz-executor: iget: bad extended attribute block 393216
[   63.733021][ T5667] netlink: 28 bytes leftover after parsing attributes in process `syz.5.718'.
[   63.741972][ T5667] netlink: 108 bytes leftover after parsing attributes in process `syz.5.718'.
[   63.751144][ T5667] netlink: 28 bytes leftover after parsing attributes in process `syz.5.718'.
[   63.760145][ T5667] netlink: 108 bytes leftover after parsing attributes in process `syz.5.718'.
[   63.769137][ T5667] netlink: 84 bytes leftover after parsing attributes in process `syz.5.718'.
[   63.878015][   T52] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.924675][   T52] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.001853][   T52] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.023065][ T5692] loop7: detected capacity change from 0 to 256
[   64.039869][ T5692] vfat: Bad value for 'fmask'
[   64.073409][   T52] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.129114][ T5685] lo speed is unknown, defaulting to 1000
[   64.138374][ T5706] sd 0:0:1:0: device reset
[   64.164846][ T5706] veth1_macvtap: left promiscuous mode
[   64.173642][ T5706] macsec0: entered allmulticast mode
[   64.206575][   T52] bridge_slave_1: left allmulticast mode
[   64.212360][   T52] bridge_slave_1: left promiscuous mode
[   64.218207][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.251759][   T52] bridge_slave_0: left allmulticast mode
[   64.257470][   T52] bridge_slave_0: left promiscuous mode
[   64.263237][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.343883][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   64.353871][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   64.363324][   T52] bond0 (unregistering): Released all slaves
[   64.425320][   T52] hsr_slave_0: left promiscuous mode
[   64.450092][   T52] hsr_slave_1: left promiscuous mode
[   64.459019][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.466600][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.474556][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.482093][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[   64.492455][   T52] veth1_macvtap: left promiscuous mode
[   64.497916][   T52] veth0_macvtap: left promiscuous mode
[   64.504085][   T52] veth1_vlan: left promiscuous mode
[   64.509442][   T52] veth0_vlan: left promiscuous mode
[   64.575135][   T52] team0 (unregistering): Port device team_slave_1 removed
[   64.584965][   T52] team0 (unregistering): Port device team_slave_0 removed
[   64.642081][ T5685] chnl_net:caif_netlink_parms(): no params data found
[   64.686742][ T5685] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.693989][ T5685] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.701431][ T5685] bridge_slave_0: entered allmulticast mode
[   64.709628][ T5685] bridge_slave_0: entered promiscuous mode
[   64.717763][ T5685] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.722799][ T5758] loop7: detected capacity change from 0 to 1024
[   64.724858][ T5685] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.738294][ T5685] bridge_slave_1: entered allmulticast mode
[   64.744711][ T5685] bridge_slave_1: entered promiscuous mode
[   64.752068][ T5760] loop2: detected capacity change from 0 to 4096
[   64.766090][ T5685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.776766][ T5685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.808272][ T5685] team0: Port device team_slave_0 added
[   64.815390][ T5685] team0: Port device team_slave_1 added
[   64.835275][ T5685] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.842446][ T5685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.868398][ T5685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.879763][ T5685] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.886744][ T5685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.912673][ T5685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.944077][ T5685] hsr_slave_0: entered promiscuous mode
[   64.950208][ T5685] hsr_slave_1: entered promiscuous mode
[   65.305359][ T5685] netdevsim netdevsim8 netdevsim0: renamed from eth0
[   65.326791][ T5685] netdevsim netdevsim8 netdevsim1: renamed from eth1
[   65.348206][ T5685] netdevsim netdevsim8 netdevsim2: renamed from eth2
[   65.365690][ T5685] netdevsim netdevsim8 netdevsim3: renamed from eth3
[   65.463463][ T5685] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.480188][ T5685] 8021q: adding VLAN 0 to HW filter on device team0
[   65.490225][ T4407] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.497365][ T4407] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.517784][ T5685] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   65.528367][ T5685] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.541068][ T4407] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.548130][ T4407] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.622660][ T5685] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.738556][ T5819] FAULT_INJECTION: forcing a failure.
[   65.738556][ T5819] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   65.751693][ T5819] CPU: 1 UID: 0 PID: 5819 Comm: syz.7.755 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   65.751737][ T5819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   65.751749][ T5819] Call Trace:
[   65.751755][ T5819]  <TASK>
[   65.751762][ T5819]  __dump_stack+0x1d/0x30
[   65.751784][ T5819]  dump_stack_lvl+0xe8/0x140
[   65.751802][ T5819]  dump_stack+0x15/0x1b
[   65.751819][ T5819]  should_fail_ex+0x265/0x280
[   65.751865][ T5819]  should_fail+0xb/0x20
[   65.751882][ T5819]  should_fail_usercopy+0x1a/0x20
[   65.751902][ T5819]  strncpy_from_user+0x25/0x230
[   65.751926][ T5819]  ? kmem_cache_alloc_noprof+0x242/0x480
[   65.751996][ T5819]  ? getname_flags+0x80/0x3b0
[   65.752023][ T5819]  getname_flags+0xae/0x3b0
[   65.752093][ T5819]  do_sys_openat2+0x60/0x110
[   65.752115][ T5819]  __x64_sys_openat+0xf2/0x120
[   65.752209][ T5819]  x64_sys_call+0x2eab/0x3000
[   65.752285][ T5819]  do_syscall_64+0xd2/0x200
[   65.752305][ T5819]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   65.752353][ T5819]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   65.752399][ T5819]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.752502][ T5819] RIP: 0033:0x7f089cc5df90
[   65.752518][ T5819] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44
[   65.752534][ T5819] RSP: 002b:00007f089b6bef10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[   65.752552][ T5819] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f089cc5df90
[   65.752611][ T5819] RDX: 0000000000000002 RSI: 00007f089b6befa0 RDI: 00000000ffffff9c
[   65.752624][ T5819] RBP: 00007f089b6befa0 R08: 0000000000000000 R09: 00007f089b6becd6
[   65.752636][ T5819] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[   65.752649][ T5819] R13: 00007f089ceb6038 R14: 00007f089ceb5fa0 R15: 00007fff32587f98
[   65.752666][ T5819]  </TASK>
[   66.108827][ T5837] loop7: detected capacity change from 0 to 1024
[   66.123590][ T5837] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[   66.167422][ T5837] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   66.203002][ T5837] EXT4-fs (loop7): revision level too high, forcing read-only mode
[   66.213729][ T5837] EXT4-fs (loop7): orphan cleanup on readonly fs
[   66.240154][ T5837] EXT4-fs error (device loop7): ext4_read_inode_bitmap:167: comm syz.7.757: Inode bitmap for bg 0 marked uninitialized
[   66.287749][ T5837] EXT4-fs mount: 40 callbacks suppressed
[   66.287763][ T5837] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   66.324891][ T5685] veth0_vlan: entered promiscuous mode
[   66.339511][ T5685] veth1_vlan: entered promiscuous mode
[   66.349522][ T5837] EXT4-fs (loop7): ext4_remount: Checksum for group 0 failed (32298!=35945)
[   66.407251][ T5837] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.421854][ T5685] veth0_macvtap: entered promiscuous mode
[   66.431676][ T5685] veth1_macvtap: entered promiscuous mode
[   66.460579][ T5685] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.483369][ T5685] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.494092][ T5876] loop7: detected capacity change from 0 to 512
[   66.508709][ T5876] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[   66.522265][ T5874] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.534895][ T5878] loop5: detected capacity change from 0 to 512
[   66.542151][ T5878] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   66.552289][ T5874] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.561221][ T5872] __nla_validate_parse: 6 callbacks suppressed
[   66.561236][ T5872] netlink: 96 bytes leftover after parsing attributes in process `syz.0.765'.
[   66.576958][ T5874] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.587121][ T5874] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.587966][ T5878] EXT4-fs (loop5): 1 truncate cleaned up
[   66.602141][ T5876] EXT4-fs (loop7): failed to initialize system zone (-117)
[   66.609365][ T5876] EXT4-fs (loop7): mount failed
[   66.634524][ T5878] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   66.687261][ T5885] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   66.695056][ T5885] SELinux: failed to load policy
[   66.792950][ T5005] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.840366][ T5905] loop5: detected capacity change from 0 to 512
[   66.842299][ T5904] loop8: detected capacity change from 0 to 512
[   66.860917][ T5905] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   66.874907][ T5904] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[   66.890860][ T5905] EXT4-fs (loop5): failed to initialize system zone (-117)
[   66.900671][ T5905] EXT4-fs (loop5): mount failed
[   66.906441][ T5904] EXT4-fs (loop8): failed to initialize system zone (-117)
[   66.921024][ T5904] EXT4-fs (loop8): mount failed
[   66.986886][ T5913] loop8: detected capacity change from 0 to 1024
[   67.040369][ T5919] : renamed from vlan0 (while UP)
[   67.046340][ T5913] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   67.063500][ T5913] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   67.151631][ T5898] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   67.160149][ T5927] netlink: 'syz.5.781': attribute type 5 has an invalid length.
[   67.169023][ T5898] vhci_hcd: invalid port number 96
[   67.174445][ T5898] vhci_hcd: default hub control req: 0300 vfffa i0060 l0
[   67.182792][ T5913] EXT4-fs error (device loop8): ext4_free_blocks:6706: comm syz.8.779: Freeing blocks not in datazone - block = 0, count = 16
[   67.288435][ T5928] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.779: bg 0: block 112: padding at end of block bitmap is not set
[   67.306123][ T5927] lo speed is unknown, defaulting to 1000
[   67.322219][ T5928] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 14 with max blocks 1 with error 117
[   67.334778][ T5928] EXT4-fs (loop8): This should not happen!! Data will be lost
[   67.334778][ T5928] 
[   67.384216][ T5685] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   67.418910][ T5955] loop5: detected capacity change from 0 to 512
[   67.427607][ T5955] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[   67.437292][ T5955] EXT4-fs (loop5): invalid journal inode
[   67.443066][ T5955] EXT4-fs (loop5): can't get journal size
[   67.451454][ T5955] EXT4-fs (loop5): 1 truncate cleaned up
[   67.457638][ T5955] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   67.482491][ T5955] pimreg: entered allmulticast mode
[   67.492018][ T5955] pimreg: left allmulticast mode
[   67.584598][ T5005] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.974017][ T5972] openvswitch: netlink: Missing key (keys=40, expected=100)
[   67.983103][ T5972] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.794' sets config #1
[   68.148624][ T5977] netlink: 124 bytes leftover after parsing attributes in process `syz.0.796'.
[   68.229951][   T36] IPVS: starting estimator thread 0...
[   68.256958][   T29] kauditd_printk_skb: 698 callbacks suppressed
[   68.257034][   T29] audit: type=1400 audit(1764086432.545:11442): avc:  denied  { ioctl } for  pid=5988 comm="syz.2.801" path="socket:[15694]" dev="sockfs" ino=15694 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   68.308855][ T5994] netlink: 76 bytes leftover after parsing attributes in process `syz.7.803'.
[   68.357853][ T6002] loop5: detected capacity change from 0 to 512
[   68.360636][ T5990] IPVS: using max 2880 ests per chain, 144000 per kthread
[   68.367411][ T6002] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.800: bg 0: block 393: padding at end of block bitmap is not set
[   68.390859][ T6002] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem
[   68.409354][ T6002] EXT4-fs (loop5): 2 truncates cleaned up
[   68.415790][ T6002] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.513376][ T5005] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.527238][   T29] audit: type=1326 audit(1764086432.825:11443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6007 comm="syz.8.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e453f749 code=0x7ffc0000
[   68.551019][   T29] audit: type=1326 audit(1764086432.825:11444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6007 comm="syz.8.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e453f749 code=0x7ffc0000
[   68.577174][   T29] audit: type=1326 audit(1764086432.875:11445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6007 comm="syz.8.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46e453f749 code=0x7ffc0000
[   68.600715][   T29] audit: type=1326 audit(1764086432.875:11446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6007 comm="syz.8.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e453f749 code=0x7ffc0000
[   68.624235][   T29] audit: type=1326 audit(1764086432.875:11447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6007 comm="syz.8.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e453f749 code=0x7ffc0000
[   68.648720][   T29] audit: type=1326 audit(1764086432.875:11448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6007 comm="syz.8.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f46e453f749 code=0x7ffc0000
[   68.672110][   T29] audit: type=1326 audit(1764086432.875:11449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6007 comm="syz.8.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e453f749 code=0x7ffc0000
[   68.695745][   T29] audit: type=1326 audit(1764086432.875:11450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6007 comm="syz.8.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f46e453f749 code=0x7ffc0000
[   68.719171][   T29] audit: type=1326 audit(1764086432.875:11451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6007 comm="syz.8.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e453f749 code=0x7ffc0000
[   68.753653][ T6016] netlink: 124 bytes leftover after parsing attributes in process `syz.5.808'.
[   68.767513][ T6016] loop5: detected capacity change from 0 to 1024
[   68.808799][ T6014] netlink: 40 bytes leftover after parsing attributes in process `syz.0.809'.
[   68.878551][ T6016] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.903086][ T5005] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.917001][ T6027] loop2: detected capacity change from 0 to 512
[   68.925025][ T6028] netlink: 'syz.8.811': attribute type 12 has an invalid length.
[   68.932821][ T6028] netlink: 'syz.8.811': attribute type 29 has an invalid length.
[   68.940654][ T6028] netlink: 148 bytes leftover after parsing attributes in process `syz.8.811'.
[   68.949653][ T6028] netlink: 'syz.8.811': attribute type 1 has an invalid length.
[   68.971639][ T6027] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   68.985115][ T6028] program syz.8.811 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   68.994530][ T6028] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   69.014689][ T6027] EXT4-fs (loop2): 1 truncate cleaned up
[   69.021278][ T6027] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.077275][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.095514][ T6045] netlink: 16 bytes leftover after parsing attributes in process `syz.2.817'.
[   69.112785][ T6045] loop2: detected capacity change from 0 to 512
[   69.120673][ T6045] EXT4-fs: Ignoring removed nobh option
[   69.144546][ T6045] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.817: corrupted inode contents
[   69.169557][ T6045] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #3: comm syz.2.817: mark_inode_dirty error
[   69.195845][ T6045] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.817: corrupted inode contents
[   69.230776][ T6045] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.817: mark_inode_dirty error
[   69.272412][ T6045] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.817: Failed to acquire dquot type 0
[   69.287831][ T6055] loop5: detected capacity change from 0 to 512
[   69.302711][ T6055] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[   69.314920][ T6045] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.817: corrupted inode contents
[   69.328236][ T6055] EXT4-fs (loop5): invalid journal inode
[   69.340745][ T6055] EXT4-fs (loop5): can't get journal size
[   69.349716][ T6045] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #16: comm syz.2.817: mark_inode_dirty error
[   69.361507][ T6055] EXT4-fs (loop5): 1 truncate cleaned up
[   69.378085][ T6055] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.398861][ T6045] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.817: corrupted inode contents
[   69.431314][ T6055] pimreg: entered allmulticast mode
[   69.440301][ T6055] pimreg: left allmulticast mode
[   69.446014][ T6045] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.817: mark_inode_dirty error
[   69.466022][ T6045] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.817: corrupted inode contents
[   69.507410][ T6045] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem
[   69.526678][ T6070] loop7: detected capacity change from 0 to 512
[   69.534217][ T6070] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[   69.544351][ T6045] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.817: corrupted inode contents
[   69.567604][ T5005] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.577898][ T6070] EXT4-fs (loop7): failed to initialize system zone (-117)
[   69.585260][ T6045] EXT4-fs error (device loop2): ext4_truncate:4637: inode #16: comm syz.2.817: mark_inode_dirty error
[   69.596948][ T6070] EXT4-fs (loop7): mount failed
[   69.614251][ T6045] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem
[   69.639377][ T6045] EXT4-fs (loop2): 1 truncate cleaned up
[   69.645778][ T6045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.661888][ T6045] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   69.676721][ T6078] loop7: detected capacity change from 0 to 512
[   69.683624][ T6078] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[   69.699092][ T6079] bridge: RTM_NEWNEIGH with invalid ether address
[   69.709542][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x1
[   69.717088][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   69.724551][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   69.732027][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   69.739688][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   69.747226][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   69.759321][ T6079] loop5: detected capacity change from 0 to 1024
[   69.764058][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.766195][ T6079] EXT4-fs: Ignoring removed bh option
[   69.780098][ T6079] EXT4-fs: inline encryption not supported
[   69.786243][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   69.786480][ T6079] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   69.793694][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   69.811463][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x2
[   69.818852][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   69.821145][ T6078] EXT4-fs (loop7): failed to initialize system zone (-117)
[   69.840444][ T6079] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[   69.848780][ T6078] EXT4-fs (loop7): mount failed
[   69.850107][    T9] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v8.00 Device [syz0] on syz0
[   69.868424][ T6079] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.828: lblock 2 mapped to illegal pblock 2 (length 1)
[   69.888507][ T6087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.829'.
[   69.897614][ T6079] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.828: lblock 0 mapped to illegal pblock 48 (length 1)
[   69.939312][ T6089] netlink: 124 bytes leftover after parsing attributes in process `syz.0.832'.
[   69.945411][ T6079] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.828: Failed to acquire dquot type 0
[   69.963895][ T6091] loop7: detected capacity change from 0 to 512
[   69.972178][ T6091] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[   69.982890][ T6079] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem
[   69.982978][ T6079] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.828: mark_inode_dirty error
[   69.983111][ T6079] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[   69.983189][ T6079] EXT4-fs (loop5): 1 orphan inode deleted
[   69.983617][ T6079] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.000699][ T4411] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1)
[   70.000987][ T4411] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:10: Failed to release dquot type 0
[   70.025657][ T6091] EXT4-fs (loop7): 1 truncate cleaned up
[   70.090000][ T6091] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.112357][ T6087] bridge0: entered promiscuous mode
[   70.119054][ T6087] bridge0: port 3(macvtap1) entered blocking state
[   70.125665][ T6087] bridge0: port 3(macvtap1) entered disabled state
[   70.136396][ T6087] macvtap1: entered allmulticast mode
[   70.136481][ T5005] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.141960][ T6087] bridge0: entered allmulticast mode
[   70.156404][ T5874] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:67: lblock 1 mapped to illegal pblock 1 (length 1)
[   70.157007][ T6087] macvtap1: left allmulticast mode
[   70.175810][ T6087] bridge0: left allmulticast mode
[   70.182834][ T5874] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:67: Failed to release dquot type 0
[   70.195306][ T6087] bridge0: left promiscuous mode
[   70.197868][ T5005] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0
[   70.216895][ T5005] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem
[   70.235490][ T5005] EXT4-fs error (device loop5): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error
[   70.274559][ T6109] lo speed is unknown, defaulting to 1000
[   70.290514][ T6114] loop2: detected capacity change from 0 to 164
[   70.300033][ T6114] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   70.309379][ T5409] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.330183][ T6117] UHID_CREATE from different security context by process 36 (syz.8.842), this is not allowed.
[   70.360345][ T6125] loop5: detected capacity change from 0 to 512
[   70.370841][ T6125] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   70.404946][ T6125] EXT4-fs (loop5): 1 truncate cleaned up
[   70.408548][ T6127] netlink: 124 bytes leftover after parsing attributes in process `syz.0.846'.
[   70.411410][ T6125] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.439703][ T6112] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22
[   70.447929][ T6112] netdevsim netdevsim8: Direct firmware load for . failed with error -22
[   70.527776][ T6136] loop8: detected capacity change from 0 to 128
[   70.546242][ T5005] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.166650][ T6167] loop5: detected capacity change from 0 to 512
[   71.174384][ T6167] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   71.185786][ T6167] EXT4-fs (loop5): 1 truncate cleaned up
[   71.192079][ T6167] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.221617][ T6171] loop7: detected capacity change from 0 to 1024
[   71.250048][ T6171] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.265202][ T5005] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.276693][ T5409] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.320022][ T6182] lo speed is unknown, defaulting to 1000
[   71.326743][ T6186] random: crng reseeded on system resumption
[   71.364106][ T6191] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[   71.640211][ T6208] loop5: detected capacity change from 0 to 128
[   72.033686][ T6225] loop8: detected capacity change from 0 to 256
[   72.041504][ T6225] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   72.061783][ T6225] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   72.073584][ T6226] 9p: Unknown Cache mode or invalid value f
[   72.092068][ T6232] __nla_validate_parse: 1 callbacks suppressed
[   72.092099][ T6232] netlink: 8 bytes leftover after parsing attributes in process `syz.7.886'.
[   72.306115][ T6243] FAULT_INJECTION: forcing a failure.
[   72.306115][ T6243] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   72.319287][ T6243] CPU: 1 UID: 0 PID: 6243 Comm: syz.2.890 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   72.319312][ T6243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   72.319324][ T6243] Call Trace:
[   72.319330][ T6243]  <TASK>
[   72.319338][ T6243]  __dump_stack+0x1d/0x30
[   72.319361][ T6243]  dump_stack_lvl+0xe8/0x140
[   72.319458][ T6243]  dump_stack+0x15/0x1b
[   72.319474][ T6243]  should_fail_ex+0x265/0x280
[   72.319508][ T6243]  should_fail+0xb/0x20
[   72.319545][ T6243]  should_fail_usercopy+0x1a/0x20
[   72.319567][ T6243]  _copy_from_user+0x1c/0xb0
[   72.319593][ T6243]  generic_map_update_batch+0x3c3/0x550
[   72.319652][ T6243]  ? __pfx_generic_map_update_batch+0x10/0x10
[   72.319682][ T6243]  bpf_map_do_batch+0x25c/0x380
[   72.319706][ T6243]  __sys_bpf+0x5f8/0x7c0
[   72.319733][ T6243]  __x64_sys_bpf+0x41/0x50
[   72.319842][ T6243]  x64_sys_call+0x2aee/0x3000
[   72.319862][ T6243]  do_syscall_64+0xd2/0x200
[   72.319928][ T6243]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   72.320033][ T6243]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   72.320066][ T6243]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.320085][ T6243] RIP: 0033:0x7f0b7de4f749
[   72.320101][ T6243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   72.320121][ T6243] RSP: 002b:00007f0b7c88e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   72.320142][ T6243] RAX: ffffffffffffffda RBX: 00007f0b7e0a6090 RCX: 00007f0b7de4f749
[   72.320203][ T6243] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a
[   72.320214][ T6243] RBP: 00007f0b7c88e090 R08: 0000000000000000 R09: 0000000000000000
[   72.320233][ T6243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   72.320247][ T6243] R13: 00007f0b7e0a6128 R14: 00007f0b7e0a6090 R15: 00007ffeaac806c8
[   72.320322][ T6243]  </TASK>
[   72.626290][ T6247] loop5: detected capacity change from 0 to 512
[   72.633287][ T6247] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   72.644756][ T6247] EXT4-fs (loop5): 1 truncate cleaned up
[   72.651711][ T6247] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.683863][ T5005] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.899161][ T6256] loop8: detected capacity change from 0 to 1024
[   72.906276][ T6256] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   72.917287][ T6256] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   72.927852][ T6256] JBD2: no valid journal superblock found
[   72.933627][ T6256] EXT4-fs (loop8): Could not load journal inode
[   73.057797][ T6270] pimreg: entered allmulticast mode
[   73.065124][ T6270] pimreg: left allmulticast mode
[   73.077341][ T6271] openvswitch: netlink: Missing key (keys=40, expected=100)
[   73.155791][ T6274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.903'.
[   73.262114][   T29] kauditd_printk_skb: 807 callbacks suppressed
[   73.262128][   T29] audit: type=1326 audit(1764086437.555:12253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6244 comm="syz.2.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b7de82005 code=0x7ffc0000
[   73.292090][   T29] audit: type=1326 audit(1764086437.555:12254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6244 comm="syz.2.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b7de82005 code=0x7ffc0000
[   73.315616][   T29] audit: type=1326 audit(1764086437.555:12255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6244 comm="syz.2.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b7de82005 code=0x7ffc0000
[   73.339235][   T29] audit: type=1326 audit(1764086437.555:12256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6244 comm="syz.2.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b7de82005 code=0x7ffc0000
[   73.362809][   T29] audit: type=1326 audit(1764086437.555:12257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6244 comm="syz.2.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b7de82005 code=0x7ffc0000
[   73.386278][   T29] audit: type=1326 audit(1764086437.555:12258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6244 comm="syz.2.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b7de82005 code=0x7ffc0000
[   73.409788][   T29] audit: type=1326 audit(1764086437.555:12259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6244 comm="syz.2.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b7de82005 code=0x7ffc0000
[   73.433311][   T29] audit: type=1326 audit(1764086437.555:12260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6244 comm="syz.2.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b7de82005 code=0x7ffc0000
[   73.456706][   T29] audit: type=1326 audit(1764086437.555:12261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6244 comm="syz.2.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b7de82005 code=0x7ffc0000
[   73.480129][   T29] audit: type=1326 audit(1764086437.555:12262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6244 comm="syz.2.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b7de82005 code=0x7ffc0000
[   73.839965][ T6312] loop8: detected capacity change from 0 to 512
[   73.849070][ T6312] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[   73.860579][ T6312] EXT4-fs (loop8): 1 truncate cleaned up
[   73.866592][ T6312] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.899132][ T5685] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.916872][ T6316] loop8: detected capacity change from 0 to 512
[   73.923751][ T6316] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[   73.940347][ T6316] EXT4-fs (loop8): failed to initialize system zone (-117)
[   73.947752][ T6316] EXT4-fs (loop8): mount failed
[   74.046890][ T6326] loop8: detected capacity change from 0 to 512
[   74.055458][ T6326] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.068718][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.8.924'.
[   74.079788][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.8.924'.
[   74.089606][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.8.924'.
[   74.098912][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.8.924'.
[   74.109173][ T6326] EXT4-fs (loop8): shut down requested (0)
[   74.128283][ T5685] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.163558][ T6336] netlink: 156 bytes leftover after parsing attributes in process `syz.8.927'.
[   74.227881][ T6341] pimreg: entered allmulticast mode
[   74.237087][ T6339] pimreg: left allmulticast mode
[   74.478428][ T6359] loop2: detected capacity change from 0 to 512
[   74.485897][ T6359] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   74.497740][ T6359] EXT4-fs (loop2): 1 truncate cleaned up
[   74.504512][ T6359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.545643][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.954005][ T6364] loop5: detected capacity change from 0 to 512
[   74.961093][ T6364] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   74.972914][ T6364] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.941: invalid indirect mapped block 4294967295 (level 0)
[   74.987329][ T6364] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.941: invalid indirect mapped block 4294967295 (level 1)
[   75.002515][ T6364] EXT4-fs (loop5): 1 orphan inode deleted
[   75.008261][ T6364] EXT4-fs (loop5): 1 truncate cleaned up
[   75.014410][ T6364] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.044288][ T5005] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.103559][ T6373] loop7: detected capacity change from 0 to 512
[   75.110520][ T6373] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[   75.119571][ T6373] EXT4-fs (loop7): invalid journal inode
[   75.125563][ T6373] EXT4-fs (loop7): can't get journal size
[   75.140876][ T6373] EXT4-fs (loop7): 1 truncate cleaned up
[   75.147718][ T6373] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.168559][ T6373] pimreg: entered allmulticast mode
[   75.176849][ T6372] pimreg: left allmulticast mode
[   75.261495][ T5409] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.291175][ T6376] netlink: 96 bytes leftover after parsing attributes in process `syz.8.945'.
[   75.320385][ T6397] loop7: detected capacity change from 0 to 256
[   75.333700][ T6397] FAT-fs (loop7): bogus number of FAT sectors
[   75.340003][ T6397] FAT-fs (loop7): Can't find a valid FAT filesystem
[   75.432689][ T6401] loop5: detected capacity change from 0 to 8192
[   75.454102][ T6401] vfat: Unknown parameter '00000000000000000005'
[   75.462547][ T6409] lo speed is unknown, defaulting to 1000
[   75.601672][ T6420] loop7: detected capacity change from 0 to 512
[   75.622772][ T6420] EXT4-fs (loop7): external journal device major/minor numbers have changed
[   75.642124][ T6420] EXT4-fs (loop7): failed to open journal device unknown-block(8,3) -6
[   75.655457][ T6420] netlink: 8 bytes leftover after parsing attributes in process `syz.7.958'.
[   75.666932][ T6420] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.958' sets config #1
[   75.741913][ T6422] loop2: detected capacity change from 0 to 512
[   75.761044][ T6422] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   75.783257][ T6422] EXT4-fs (loop2): 1 truncate cleaned up
[   75.797052][ T6422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.856872][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.131236][ T6437] netlink: 96 bytes leftover after parsing attributes in process `syz.0.964'.
[   76.283274][ T6459] atomic_op ffff888104a0dd28 conn xmit_atomic 0000000000000000
[   76.313843][ T6457] loop5: detected capacity change from 0 to 4096
[   76.323146][ T6457] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.407537][ T6468] loop8: detected capacity change from 0 to 8192
[   76.414823][ T6468] vfat: Unknown parameter '00000000000000000005'
[   76.430216][ T6471] loop7: detected capacity change from 0 to 1024
[   76.456315][ T6471] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.479607][ T6476] netlink: 'syz.8.979': attribute type 1 has an invalid length.
[   76.524394][ T6476] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   76.535707][ T6476] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   76.571739][ T5409] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.594482][ T5005] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.633300][ T6484] loop5: detected capacity change from 0 to 1024
[   76.648962][ T6476] bond1: (slave gretap1): making interface the new active one
[   76.658607][ T6476] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   76.668700][ T6489] loop7: detected capacity change from 0 to 164
[   76.671696][ T6476] macvlan2: entered promiscuous mode
[   76.680337][ T6476] macvlan2: entered allmulticast mode
[   76.680543][ T6489] Unable to read rock-ridge attributes
[   76.686625][ T6476] bond1: entered promiscuous mode
[   76.696397][ T6476] gretap1: entered promiscuous mode
[   76.703941][ T6484] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.726569][ T6476] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   76.738294][ T5005] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.750542][ T6476] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[   76.772232][ T6476] bond1: left promiscuous mode
[   76.777066][ T6476] gretap1: left promiscuous mode
[   76.807225][ T6504] loop5: detected capacity change from 0 to 128
[   76.820956][ T6506] Unable to read rock-ridge attributes
[   76.827308][ T6506] iso9660: Corrupted directory entry in block 4 of inode 1792
[   76.844460][    T9] hid_parser_main: 26 callbacks suppressed
[   76.844476][    T9] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4
[   76.858102][    T9] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2
[   76.873239][    T9] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x3
[   76.882093][    T9] hid-generic 0000:3000000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[   77.002845][ T6511] random: crng reseeded on system resumption
[   77.039017][ T6515] loop7: detected capacity change from 0 to 4096
[   77.048404][ T6515] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.254000][ T5409] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.287705][ T6520] __nla_validate_parse: 2 callbacks suppressed
[   77.287719][ T6520] netlink: 176 bytes leftover after parsing attributes in process `syz.7.993'.
[   77.323889][ T6476] syz.8.979 (6476) used greatest stack depth: 9240 bytes left
[   77.341463][ T6524] xt_hashlimit: size too large, truncated to 1048576
[   77.350701][ T6523] netlink: 'syz.8.995': attribute type 32 has an invalid length.
[   77.400964][ T6534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6534 comm=syz.8.995
[   77.437217][ T6540] netlink: 12 bytes leftover after parsing attributes in process `syz.7.998'.
[   77.543908][ T6552] loop8: detected capacity change from 0 to 1024
[   77.562702][ T6552] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   77.587386][ T5685] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.712262][ T6561] netlink: 'syz.2.1005': attribute type 10 has an invalid length.
[   77.743684][ T6561] ipvlan0: entered allmulticast mode
[   77.749097][ T6561] veth0_vlan: entered allmulticast mode
[   77.756608][ T6561] team0: Device ipvlan0 failed to register rx_handler
[   77.788034][ T6564] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1007'.
[   77.954637][ T6571] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1009'.
[   77.988330][ T6568] loop8: detected capacity change from 0 to 4096
[   78.083406][ T6568] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.197595][ T6580] loop2: detected capacity change from 0 to 512
[   78.209134][ T6564] vhci_hcd: default hub control req: 8017 v0006 i0003 l0
[   78.211274][ T6580] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   78.216611][ T6564] netlink: 'syz.8.1007': attribute type 1 has an invalid length.
[   78.233837][ T6564] netlink: 'syz.8.1007': attribute type 4 has an invalid length.
[   78.241595][ T6564] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.1007'.
[   78.248348][ T6580] EXT4-fs (loop2): 1 truncate cleaned up
[   78.258152][ T6580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.279077][ T6583] loop5: detected capacity change from 0 to 1024
[   78.302106][ T6583] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.331791][ T6583] EXT4-fs error (device loop5): ext4_read_inline_dir:1476: inode #12: block 7: comm syz.5.1012: path /104/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0
[   78.397594][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.413664][ T5685] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.456872][ T6592] loop2: detected capacity change from 0 to 1024
[   78.495847][ T6596] loop7: detected capacity change from 0 to 512
[   78.503293][ T6596] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[   78.514426][ T6596] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.1017: bad orphan inode 131083
[   78.525520][ T6596] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.546280][   T29] kauditd_printk_skb: 238 callbacks suppressed
[   78.546296][   T29] audit: type=1400 audit(1764086442.835:12501): avc:  denied  { mount } for  pid=6593 comm="syz.8.1016" name="/" dev="ramfs" ino=18751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   78.577430][ T6592] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.613061][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.624753][   T29] audit: type=1400 audit(1764086442.835:12502): avc:  denied  { ioctl } for  pid=6595 comm="syz.7.1017" path="socket:[17921]" dev="sockfs" ino=17921 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   78.649556][   T29] audit: type=1400 audit(1764086442.835:12503): avc:  denied  { read } for  pid=6595 comm="syz.7.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   78.673447][ T6604] loop2: detected capacity change from 0 to 128
[   78.700007][   T29] audit: type=1400 audit(1764086442.985:12504): avc:  denied  { sqpoll } for  pid=6603 comm="syz.2.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   78.791959][ T5409] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.817832][ T6612] random: crng reseeded on system resumption
[   78.831483][ T6614] loop8: detected capacity change from 0 to 128
[   78.835994][ T6616] loop9: detected capacity change from 0 to 7
[   78.844457][ T6616] buffer_io_error: 14 callbacks suppressed
[   78.844472][ T6616] Buffer I/O error on dev loop9, logical block 0, async page read
[   78.858421][ T6616] Buffer I/O error on dev loop9, logical block 0, async page read
[   78.866406][ T6616]  loop9: unable to read partition table
[   78.872942][ T6616] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[   78.872942][ T6616] 
) failed (rc=-5)
[   78.887664][   T29] audit: type=1400 audit(1764086443.175:12505): avc:  denied  { setopt } for  pid=6613 comm="syz.8.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   78.900025][ T6618] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1025'.
[   78.908073][   T29] audit: type=1400 audit(1764086443.175:12506): avc:  denied  { connect } for  pid=6613 comm="syz.8.1024" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   78.985903][ T6623] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   78.994850][ T6623] SELinux:  Context system_u:object_r:pam_console_exec_t:s0 is not valid (left unmapped).
[   79.005112][   T29] audit: type=1400 audit(1764086443.305:12507): avc:  denied  { relabelto } for  pid=6622 comm="syz.2.1027" name="devices.allow" dev="cgroup" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:pam_console_exec_t:s0"
[   79.033018][   T29] audit: type=1400 audit(1764086443.305:12508): avc:  denied  { associate } for  pid=6622 comm="syz.2.1027" name="devices.allow" dev="cgroup" ino=67 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:pam_console_exec_t:s0"
[   79.067820][ T6627] loop8: detected capacity change from 0 to 512
[   79.087474][ T5005] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.098382][ T6627] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem
[   79.115225][ T6627] EXT4-fs (loop8): invalid journal inode
[   79.121192][ T6627] EXT4-fs (loop8): can't get journal size
[   79.122388][ T3366] kernel read not supported for file /ppp (pid: 3366 comm: kworker/0:2)
[   79.137579][ T6627] EXT4-fs (loop8): 1 truncate cleaned up
[   79.151082][ T6627] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.222236][ T6640] loop5: detected capacity change from 0 to 4096
[   79.230832][ T5685] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.242604][ T6635] xt_TPROXY: Can be used only with -p tcp or -p udp
[   79.259038][   T29] audit: type=1400 audit(1764086443.545:12509): avc:  denied  { create } for  pid=6644 comm="syz.8.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   79.298758][   T29] audit: type=1400 audit(1764086443.545:12510): avc:  denied  { setopt } for  pid=6644 comm="syz.8.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   79.359520][ T6650] loop7: detected capacity change from 0 to 128
[   79.456755][ T6653] lo speed is unknown, defaulting to 1000
[   79.505114][ T6658] loop5: detected capacity change from 0 to 128
[   79.669878][ T6661] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1041'.
[   79.729616][ T6663] loop5: detected capacity change from 0 to 512
[   79.740532][ T6642] loop2: detected capacity change from 0 to 8192
[   79.748038][ T6663] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   79.762409][ T6663] EXT4-fs (loop5): 1 truncate cleaned up
[   79.842692][ T6666] loop5: detected capacity change from 0 to 1024
[   79.938284][ T6676] loop2: detected capacity change from 0 to 512
[   79.957726][ T6676] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   79.967675][ T6676] EXT4-fs (loop2): invalid journal inode
[   79.974043][ T6676] EXT4-fs (loop2): can't get journal size
[   79.981279][ T6676] EXT4-fs (loop2): 1 truncate cleaned up
[   80.019722][ T6680] loop5: detected capacity change from 0 to 8192
[   80.031803][ T6680] vfat: Unknown parameter '00000000000000000005'
[   80.083303][ T6683] loop2: detected capacity change from 0 to 512
[   80.111287][ T6683] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   80.135945][ T6683] EXT4-fs (loop2): 1 truncate cleaned up
[   80.251700][ T6699] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1057'.
[   80.319799][ T6708] loop7: detected capacity change from 0 to 512
[   80.326869][ T6708] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[   80.336397][ T6708] EXT4-fs (loop7): invalid journal inode
[   80.342094][ T6708] EXT4-fs (loop7): can't get journal size
[   80.348647][ T6708] EXT4-fs (loop7): 1 truncate cleaned up
[   80.389752][ T6713] lo speed is unknown, defaulting to 1000
[   80.441501][ T6718] netlink: 'syz.7.1063': attribute type 11 has an invalid length.
[   80.449437][ T6718] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1063'.
[   80.485698][ T6721] loop7: detected capacity change from 0 to 512
[   80.562738][ T6731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1065'.
[   80.613524][ T6732] loop7: detected capacity change from 0 to 512
[   80.642920][ T6732] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   80.655237][ T6730] FAULT_INJECTION: forcing a failure.
[   80.655237][ T6730] name failslab, interval 1, probability 0, space 0, times 0
[   80.668143][ T6730] CPU: 0 UID: 0 PID: 6730 Comm: syz.7.1067 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   80.668226][ T6730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   80.668237][ T6730] Call Trace:
[   80.668244][ T6730]  <TASK>
[   80.668252][ T6730]  __dump_stack+0x1d/0x30
[   80.668274][ T6730]  dump_stack_lvl+0xe8/0x140
[   80.668296][ T6730]  dump_stack+0x15/0x1b
[   80.668374][ T6730]  should_fail_ex+0x265/0x280
[   80.668408][ T6730]  should_failslab+0x8c/0xb0
[   80.668435][ T6730]  kmem_cache_alloc_lru_noprof+0x55/0x490
[   80.668510][ T6730]  ? __d_alloc+0x3d/0x340
[   80.668537][ T6730]  __d_alloc+0x3d/0x340
[   80.668561][ T6730]  ? __account_obj_stock+0x211/0x350
[   80.668629][ T6730]  d_alloc_parallel+0x58/0xc70
[   80.668645][ T6730]  ? avc_has_perm_noaudit+0x1b1/0x200
[   80.668665][ T6730]  ? lockref_get_not_dead+0x120/0x1c0
[   80.668689][ T6730]  ? __rcu_read_unlock+0x4f/0x70
[   80.668713][ T6730]  __lookup_slow+0x8c/0x250
[   80.668813][ T6730]  lookup_slow+0x3c/0x60
[   80.668845][ T6730]  link_path_walk+0x753/0x900
[   80.668908][ T6730]  __filename_parentat+0x15c/0x3f0
[   80.668933][ T6730]  filename_create+0x78/0x230
[   80.668997][ T6730]  start_creating_path+0x37/0x130
[   80.669022][ T6730]  unix_bind+0x1fd/0x920
[   80.669129][ T6730]  __sys_bind+0x1d1/0x2a0
[   80.669162][ T6730]  __x64_sys_bind+0x3f/0x50
[   80.669190][ T6730]  x64_sys_call+0x2b72/0x3000
[   80.669221][ T6730]  do_syscall_64+0xd2/0x200
[   80.669244][ T6730]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   80.669303][ T6730]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   80.669336][ T6730]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.669357][ T6730] RIP: 0033:0x7f089cc5f749
[   80.669374][ T6730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   80.669392][ T6730] RSP: 002b:00007f089b6bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[   80.669484][ T6730] RAX: ffffffffffffffda RBX: 00007f089ceb5fa0 RCX: 00007f089cc5f749
[   80.669577][ T6730] RDX: 000000000000006e RSI: 0000200000000180 RDI: 000000000000000f
[   80.669592][ T6730] RBP: 00007f089b6bf090 R08: 0000000000000000 R09: 0000000000000000
[   80.669658][ T6730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   80.669669][ T6730] R13: 00007f089ceb6038 R14: 00007f089ceb5fa0 R15: 00007fff32587f98
[   80.669687][ T6730]  </TASK>
[   80.989340][ T6740] loop5: detected capacity change from 0 to 2048
[   81.061439][ T6752] loop2: detected capacity change from 0 to 512
[   81.091099][ T6752] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   81.105069][ T6757] bridge0: entered promiscuous mode
[   81.110388][ T6757] macsec1: entered promiscuous mode
[   81.116826][ T6757] bridge0: port 3(macsec1) entered blocking state
[   81.123359][ T6757] bridge0: port 3(macsec1) entered disabled state
[   81.129959][ T6752] EXT4-fs (loop2): invalid journal inode
[   81.130056][ T6757] macsec1: entered allmulticast mode
[   81.140931][ T6757] bridge0: entered allmulticast mode
[   81.146534][ T6752] EXT4-fs (loop2): can't get journal size
[   81.167964][ T6757] macsec1: left allmulticast mode
[   81.173250][ T6757] bridge0: left allmulticast mode
[   81.173616][ T6752] EXT4-fs (loop2): 1 truncate cleaned up
[   81.184283][ T6757] bridge0: left promiscuous mode
[   81.208256][ T6756] bridge0: entered promiscuous mode
[   81.215021][ T6756] macsec1: entered promiscuous mode
[   81.228194][ T6756] bridge0: port 3(macsec1) entered blocking state
[   81.234776][ T6756] bridge0: port 3(macsec1) entered disabled state
[   81.250897][ T6756] macsec1: entered allmulticast mode
[   81.256232][ T6756] bridge0: entered allmulticast mode
[   81.263833][ T6756] macsec1: left allmulticast mode
[   81.268892][ T6756] bridge0: left allmulticast mode
[   81.305165][ T6770] hub 5-0:1.0: USB hub found
[   81.309912][ T6770] hub 5-0:1.0: 8 ports detected
[   81.316819][ T6756] bridge0: left promiscuous mode
[   81.396932][ T6774] loop7: detected capacity change from 0 to 128
[   81.564724][ T6788] loop8: detected capacity change from 0 to 512
[   81.571901][ T6788] EXT4-fs: Ignoring removed nobh option
[   81.578627][ T6788] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[   81.613219][ T6788] EXT4-fs (loop8): 1 truncate cleaned up
[   81.649418][ T6795] loop2: detected capacity change from 0 to 512
[   81.659023][ T6795] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   81.672418][ T6797] bridge_slave_1: left allmulticast mode
[   81.678089][ T6797] bridge_slave_1: left promiscuous mode
[   81.683874][ T6797] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.693715][ T6795] EXT4-fs (loop2): invalid journal inode
[   81.699413][ T6795] EXT4-fs (loop2): can't get journal size
[   81.706137][ T6795] EXT4-fs (loop2): 1 truncate cleaned up
[   81.713086][ T6797] bridge_slave_0: left allmulticast mode
[   81.718749][ T6797] bridge_slave_0: left promiscuous mode
[   81.724564][ T6797] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.799995][ T6806] netlink: 'syz.8.1091': attribute type 4 has an invalid length.
[   81.812790][ T6806] .`: renamed from bond0 (while UP)
[   81.869310][ T6810] loop7: detected capacity change from 0 to 4096
[   82.079944][ T6821] loop7: detected capacity change from 0 to 512
[   82.087989][ T6821] EXT4-fs (loop7): orphan cleanup on readonly fs
[   82.094427][ T6821] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13
[   82.102814][ T6821] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[   82.117671][ T6821] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.1097: attempt to clear invalid blocks 2 len 1
[   82.131223][ T6821] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1097: invalid indirect mapped block 1819239214 (level 0)
[   82.145602][ T6821] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1097: invalid indirect mapped block 1819239214 (level 1)
[   82.160150][ T6821] EXT4-fs (loop7): 1 truncate cleaned up
[   82.169017][ T6821] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended
[   82.178810][ T6821] EXT4-fs error (device loop7): __ext4_remount:6748: comm syz.7.1097: Abort forced by user
[   82.189317][ T6821] EXT4-fs (loop7): Remounting filesystem read-only
[   82.195863][ T6821] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[   82.267531][ T6825] lo speed is unknown, defaulting to 1000
[   82.379032][ T6830] __nla_validate_parse: 7 callbacks suppressed
[   82.379047][ T6830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1099'.
[   82.407665][ T6830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1099'.
[   82.721306][ T6837] loop5: detected capacity change from 0 to 512
[   82.742222][ T6837] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   82.771042][ T6837] EXT4-fs (loop5): 1 truncate cleaned up
[   83.101403][ T6848] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1105'.
[   83.247017][ T6859] No control pipe specified
[   83.318825][ T6862] lo speed is unknown, defaulting to 1000
[   83.489334][ T6867] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1111'.
[   83.533564][ T6867] IPv6: Can't replace route, no match found
[   83.687934][   T29] kauditd_printk_skb: 947 callbacks suppressed
[   83.687949][   T29] audit: type=1326 audit(1764086447.975:13458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6870 comm="syz.8.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e453f749 code=0x7ffc0000
[   83.717733][   T29] audit: type=1326 audit(1764086447.975:13459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6870 comm="syz.8.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e453f749 code=0x7ffc0000
[   83.829323][   T29] audit: type=1326 audit(1764086447.975:13460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6870 comm="syz.8.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e453f749 code=0x7ffc0000
[   83.852983][   T29] audit: type=1326 audit(1764086447.975:13461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6870 comm="syz.8.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46e453f749 code=0x7ffc0000
[   83.876697][   T29] audit: type=1326 audit(1764086447.975:13462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6870 comm="syz.8.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e453f749 code=0x7ffc0000
[   83.900344][   T29] audit: type=1326 audit(1764086447.975:13463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6870 comm="syz.8.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e453f749 code=0x7ffc0000
[   83.923891][   T29] audit: type=1326 audit(1764086447.975:13464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6870 comm="syz.8.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e453f749 code=0x7ffc0000
[   83.947415][   T29] audit: type=1326 audit(1764086447.975:13465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6870 comm="syz.8.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f46e453f749 code=0x7ffc0000
[   83.970914][   T29] audit: type=1326 audit(1764086447.975:13466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6870 comm="syz.8.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e453f749 code=0x7ffc0000
[   83.994591][   T29] audit: type=1326 audit(1764086447.975:13467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6870 comm="syz.8.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e453f749 code=0x7ffc0000
[   84.143523][ T6890] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.150803][ T6890] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.199116][ T6890] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.209141][ T6890] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.255060][ T6890] ipvlan0: left allmulticast mode
[   84.260136][ T6890] veth0_vlan: left allmulticast mode
[   84.306261][ T6890] ip6gre1: left allmulticast mode
[   84.313036][ T2141] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.339861][ T2141] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.375308][ T2141] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.400615][ T2141] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.028164][ T6943] vhci_hcd: invalid port number 255
[   85.033466][ T6943] vhci_hcd: invalid port number 255
[   85.097263][ T6954] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1146'.
[   85.106296][ T6954] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1146'.
[   85.115359][ T6954] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1146'.
[   85.155723][ T6957] ip6t_srh: unknown srh match flags  4000
[   85.179883][ T6954] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1146'.
[   85.189083][ T6954] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1146'.
[   85.198227][ T6954] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1146'.
[   85.281529][ T6974] lo speed is unknown, defaulting to 1000
[   85.363916][ T6981] loop5: detected capacity change from 0 to 4096
[   85.540519][ T6997] loop2: detected capacity change from 0 to 512
[   85.607312][ T6997] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   85.860945][ T7032] loop7: detected capacity change from 0 to 256
[   85.867787][ T7032] vfat: Unknown parameter '01777777777777777777777���'
[   85.880840][ T7032] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.1170' sets config #-1
[   86.129579][ T7038] loop7: detected capacity change from 0 to 4096
[   86.231404][ T3401] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   86.238849][ T3401] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   86.246258][ T3401] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   86.253668][ T3401] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   86.261069][ T3401] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   86.268442][ T3401] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   86.275842][ T3401] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   86.283269][ T3401] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   86.513879][ T3401] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   86.521328][ T3401] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   86.546813][ T3401] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[   86.561077][ T7060] loop2: detected capacity change from 0 to 1024
[   86.746765][ T7094] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00fd with DS=0x7
[   86.770476][ T7097] loop8: detected capacity change from 0 to 128
[   86.781900][ T7097] ext4 filesystem being mounted at /92/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   86.869744][ T7100] loop2: detected capacity change from 0 to 4096
[   86.976288][ T7115] loop5: detected capacity change from 0 to 8192
[   87.013756][ T7119] loop7: detected capacity change from 0 to 256
[   87.306553][ T7150] loop5: detected capacity change from 0 to 512
[   87.334202][ T7150] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   87.350333][ T7150] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.1210: corrupted inode contents
[   87.362481][ T7150] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.1210: mark_inode_dirty error
[   87.374105][ T7150] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.1210: corrupted inode contents
[   87.386158][ T7150] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.1210: mark_inode_dirty error
[   87.537625][ T7161] loop5: detected capacity change from 0 to 8192
[   87.554033][ T7161] vfat: Unknown parameter '00000000000000000005'
[   87.586592][ T7166] loop2: detected capacity change from 0 to 4096
[   87.780024][ T7180] sit0: entered promiscuous mode
[   87.893950][ T7180] netlink: 'syz.7.1219': attribute type 1 has an invalid length.
[   87.901779][ T7180] __nla_validate_parse: 8 callbacks suppressed
[   87.901793][ T7180] netlink: 1 bytes leftover after parsing attributes in process `syz.7.1219'.
[   87.929780][ T7181] smc: net device bond0 applied user defined pnetid SYZ0
[   88.277584][ T7197] loop7: detected capacity change from 0 to 32768
[   88.321266][ T7197]  loop7: p1 p2 p3 < > p4 < p5 p6 >
[   88.326798][ T7197] loop7: p1 start 460800 is beyond EOD, truncated
[   88.333312][ T7197] loop7: p2 size 83886080 extends beyond EOD, truncated
[   88.341959][   T23] hid-generic 0003:0004:0000.0005: hidraw0: USB HID v0.00 Device [syz0] on syz1
[   88.377840][ T7216] loop5: detected capacity change from 0 to 512
[   88.381182][ T7197] loop7: p5 start 460800 is beyond EOD, truncated
[   88.390712][ T7197] loop7: p6 size 83886080 extends beyond EOD, truncated
[   88.400162][ T7216] EXT4-fs warning (device loop5): ext4_xattr_inode_get:546: inode #11: comm syz.5.1233: ea_inode file size=0 entry size=6
[   88.430420][ T7216] ------------[ cut here ]------------
[   88.435981][ T7216] EA inode 11 i_nlink=2
[   88.436297][ T7216] WARNING: CPU: 1 PID: 7216 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380
[   88.450633][ T7216] Modules linked in:
[   88.454559][ T7216] CPU: 1 UID: 0 PID: 7216 Comm: syz.5.1233 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   88.464318][ T7216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   88.474398][ T7216] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380
[   88.481030][ T7216] Code: 90 49 8d 7e 40 e8 06 f8 b8 ff 4d 8b 6e 40 4c 89 e7 e8 1a f3 b8 ff 41 8b 56 48 48 c7 c7 a5 d6 55 86 4c 89 ee e8 07 f4 67 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 88 f2 b5 03 0f 1f 84 00 00 00 00 00
[   88.500679][ T7216] RSP: 0018:ffffc900033eb778 EFLAGS: 00010246
[   88.506801][ T7216] RAX: 0d8d1906182e8200 RBX: ffff88811ac1a8c0 RCX: 0000000000080000
[   88.514835][ T7216] RDX: ffffc9001098a000 RSI: 0000000000004d47 RDI: 0000000000004d48
[   88.522868][ T7216] RBP: 0000000000000002 R08: 0001c900033eb5f7 R09: 0000000000000000
[   88.530886][ T7216] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88811ac1a870
[   88.538919][ T7216] R13: 000000000000000b R14: ffff88811ac1a828 R15: 0000000000000001
[   88.546932][ T7216] FS:  00007fbbe46bf6c0(0000) GS:ffff8882aef11000(0000) knlGS:0000000000000000
[   88.555981][ T7216] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   88.562603][ T7216] CR2: ffffffffde000000 CR3: 0000000129436000 CR4: 00000000003506f0
[   88.570627][ T7216] DR0: fffffffffffffffe DR1: 0000000000000000 DR2: 0000000000000000
[   88.578617][ T7216] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[   88.586640][ T7216] Call Trace:
[   88.589927][ T7216]  <TASK>
[   88.592877][ T7216]  ext4_xattr_inode_dec_ref_all+0x579/0x830
[   88.598809][ T7216]  ? errseq_check+0x2c/0x50
[   88.603352][ T7216]  ext4_xattr_delete_inode+0x6b7/0x790
[   88.609011][ T7216]  ? ext4_truncate+0x92e/0xae0
[   88.614106][ T7216]  ext4_evict_inode+0xa6a/0xd90
[   88.618980][ T7216]  ? __pfx_ext4_evict_inode+0x10/0x10
[   88.624574][ T7216]  evict+0x2e3/0x550
[   88.628478][ T7216]  ? __dquot_initialize+0x146/0x7c0
[   88.633745][ T7216]  iput+0x4ed/0x650
[   88.637591][ T7216]  ext4_process_orphan+0x1a9/0x1c0
[   88.642806][ T7216]  ext4_orphan_cleanup+0x6a8/0xa00
[   88.647946][ T7216]  ext4_fill_super+0x3483/0x3810
[   88.652930][ T7216]  ? snprintf+0x86/0xb0
[   88.657097][ T7216]  ? set_blocksize+0x1a8/0x310
[   88.661937][ T7216]  ? sb_set_blocksize+0xe3/0x100
[   88.666946][ T7216]  ? setup_bdev_super+0x30e/0x370
[   88.672087][ T7216]  ? __pfx_ext4_fill_super+0x10/0x10
[   88.677377][ T7216]  get_tree_bdev_flags+0x291/0x300
[   88.682580][ T7216]  ? __pfx_ext4_fill_super+0x10/0x10
[   88.687919][ T7216]  get_tree_bdev+0x1f/0x30
[   88.692382][ T7216]  ext4_get_tree+0x1c/0x30
[   88.693050][   T29] kauditd_printk_skb: 792 callbacks suppressed
[   88.693063][   T29] audit: type=1326 audit(1764086452.995:14260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7185 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b7de82005 code=0x7ffc0000
[   88.696806][ T7216]  vfs_get_tree+0x57/0x1d0
[   88.696866][ T7216]  do_new_mount+0x24d/0x660
[   88.696894][ T7216]  path_mount+0x4a5/0xb70
[   88.696919][ T7216]  ? user_path_at+0x109/0x130
[   88.703755][   T29] audit: type=1326 audit(1764086453.005:14261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7185 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b7de82005 code=0x7ffc0000
[   88.726653][ T7216]  __se_sys_mount+0x28c/0x2e0
[   88.757409][   T29] audit: type=1326 audit(1764086453.025:14262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7185 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b7de82005 code=0x7ffc0000
[   88.768188][ T7216]  ? do_mkdirat+0x3ac/0x3f0
[   88.768220][ T7216]  __x64_sys_mount+0x67/0x80
[   88.772918][   T29] audit: type=1326 audit(1764086453.025:14263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7185 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b7de82005 code=0x7ffc0000
[   88.772946][   T29] audit: type=1326 audit(1764086453.045:14264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7185 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b7de82005 code=0x7ffc0000
[   88.796433][ T7216]  x64_sys_call+0x2b51/0x3000
[   88.800919][   T29] audit: type=1326 audit(1764086453.045:14265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7185 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b7de82005 code=0x7ffc0000
[   88.805452][ T7216]  do_syscall_64+0xd2/0x200
[   88.828892][   T29] audit: type=1326 audit(1764086453.045:14266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7185 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b7de82005 code=0x7ffc0000
[   88.852382][ T7216]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   88.857038][   T29] audit: type=1326 audit(1764086453.045:14267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7185 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b7de82005 code=0x7ffc0000
[   88.880460][ T7216]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   88.880496][ T7216]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.880526][ T7216] RIP: 0033:0x7fbbe5c60eea
[   88.880542][ T7216] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   88.880580][ T7216] RSP: 002b:00007fbbe46bee68 EFLAGS: 00000246
[   88.885069][   T29] audit: type=1326 audit(1764086453.045:14268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7185 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b7de82005 code=0x7ffc0000
[   88.908511][ T7216]  ORIG_RAX: 00000000000000a5
[   88.914594][   T29] audit: type=1326 audit(1764086453.045:14269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7185 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b7de82005 code=0x7ffc0000
[   88.961214][ T7222] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1234'.
[   88.974078][ T7216] RAX: ffffffffffffffda RBX: 00007fbbe46beef0 RCX: 00007fbbe5c60eea
[   89.048801][ T7216] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fbbe46beeb0
[   89.056814][ T7216] RBP: 0000200000000180 R08: 00007fbbe46beef0 R09: 0000000000800780
[   89.064829][ T7216] R10: 0000000000800780 R11: 0000000000000246 R12: 00002000000001c0
[   89.072846][ T7216] R13: 00007fbbe46beeb0 R14: 000000000000046c R15: 0000200000000680
[   89.080858][ T7216]  </TASK>
[   89.083882][ T7216] ---[ end trace 0000000000000000 ]---
[   89.092748][ T7216] EXT4-fs (loop5): 1 orphan inode deleted
[   89.149924][ T7235] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1239'.
[   89.159240][ T7235] unsupported nla_type 24929
[   89.233104][ T7237] loop2: detected capacity change from 0 to 8192
[   89.239859][ T7237] vfat: Unknown parameter '00000000000000000005'
[   89.303620][ T7245] veth2: entered promiscuous mode
[   89.304056][ T7247] netlink: 'syz.5.1244': attribute type 1 has an invalid length.
[   89.308762][ T7245] veth2: entered allmulticast mode
[   89.321705][ T7247] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1244'.
[   89.344159][ T7233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   89.352829][ T7233] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   89.392081][ T7248] netlink: 'syz.5.1244': attribute type 1 has an invalid length.
[   89.399909][ T7248] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1244'.
[   89.467120][ T7259] loop5: detected capacity change from 0 to 1024
[   89.858582][ T4411] Bluetooth: hci0: Frame reassembly failed (-84)
[   89.926355][ T7308] loop8: detected capacity change from 0 to 512
[   89.935349][ T7308] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem
[   89.955714][ T7308] EXT4-fs (loop8): invalid journal inode
[   89.962924][ T7308] EXT4-fs (loop8): can't get journal size
[   89.969700][ T7308] EXT4-fs (loop8): 1 truncate cleaned up
[   90.058468][ T7310] loop7: detected capacity change from 0 to 32768
[   90.093017][ T7317] loop2: detected capacity change from 0 to 512
[   90.100957][ T7317] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[   90.100979][ T7310]  loop7: p1 p2 p3 < p5 p6 >
[   90.101084][ T7310] loop7: p1 size 242222080 extends beyond EOD, 
[   90.109040][ T7317] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[   90.113567][ T7310] truncated
[   90.114060][ T7310] loop7: p2 start 4294967295 is beyond EOD, 
[   90.120648][ T7317] EXT4-fs (loop2): 1 truncate cleaned up
[   90.127865][ T7310] truncated
[   90.156440][ T7315] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[   90.343388][ T7323] xt_bpf: check failed: parse error
[   90.354400][ T7331] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1275'.
[   90.364177][ T7331] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1275'.
[   90.433265][ T7341] batman_adv: batadv0: Adding interface: macvlan2
[   90.439802][ T7341] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.465422][ T7339] loop7: detected capacity change from 0 to 8192
[   90.466063][ T7341] batman_adv: batadv0: Interface activated: macvlan2
[   90.490359][ T7339] vfat: Unknown parameter '00000000000000000005'
[   90.747271][ T7361] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1288'.
[   90.862651][ T7382] tipc: New replicast peer: 255.255.255.255
[   90.868857][ T7382] tipc: Enabled bearer <udp:syz2>, priority 10
[   91.119595][ T7422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1310'.
[   91.134469][ T7422] loop2: detected capacity change from 0 to 164
[   91.142108][ T7412] loop8: detected capacity change from 0 to 164
[   91.146614][ T7422] loop2: detected capacity change from 0 to 128
[   91.155113][ T7412] Unable to read rock-ridge attributes
[   91.161585][ T7412] Unable to read rock-ridge attributes
[   91.173526][ T7412] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.1308'.
[   91.246383][ T7425] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   91.282160][ T7429] loop8: detected capacity change from 0 to 512
[   91.295046][ T7429] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   91.331867][ T7442] loop8: detected capacity change from 0 to 512
[   91.338913][ T7442] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem
[   91.348281][ T7442] EXT4-fs (loop8): invalid journal inode
[   91.354182][ T7442] EXT4-fs (loop8): can't get journal size
[   91.360649][ T7442] EXT4-fs (loop8): 1 truncate cleaned up
[   91.468830][ T7451] netlink: 'syz.8.1320': attribute type 13 has an invalid length.
[   91.471495][ T7454] loop7: detected capacity change from 0 to 1024
[   91.487381][ T7451] gretap0: refused to change device tx_queue_len
[   91.494998][ T7451] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   91.548822][ T7457] loop8: detected capacity change from 0 to 8192
[   91.556267][ T7457] vfat: Unknown parameter '18446744073709551615'
[   91.733449][ T7481] loop7: detected capacity change from 0 to 512
[   91.752958][ T7481] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   91.890612][ T3798] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   91.890621][ T7302] Bluetooth: hci0: command 0x1003 tx timeout
[   92.026101][ T7498] loop2: detected capacity change from 0 to 1024
[   92.403103][ T7528] Unsupported ieee802154 address type: 0
[   92.531723][ T7533] loop2: detected capacity change from 0 to 512
[   92.541317][ T7533] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   92.549422][ T7533] EXT4-fs (loop2): orphan cleanup on readonly fs
[   92.556552][ T7533] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   92.575418][ T7533] EXT4-fs (loop2): Cannot turn on quotas: error -117
[   92.582551][ T7533] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1353: bg 0: block 40: padding at end of block bitmap is not set
[   92.597295][ T7533] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem
[   92.606438][ T7533] EXT4-fs (loop2): 1 truncate cleaned up
[   92.734308][ T7558] loop2: detected capacity change from 0 to 512
[   92.746899][ T7553] loop8: detected capacity change from 0 to 8192
[   92.748961][ T7547] netlink: 'syz.0.1358': attribute type 12 has an invalid length.
[   92.754255][ T7553] vfat: Unknown parameter '00000000000000000005'
[   92.767573][ T7558] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   92.790848][ T7558] EXT4-fs (loop2): invalid journal inode
[   92.791062][ T7555] loop7: detected capacity change from 0 to 2048
[   92.796754][ T7558] EXT4-fs (loop2): can't get journal size
[   92.810777][ T7558] EXT4-fs (loop2): 1 truncate cleaned up
[   92.821607][ T7555] ext4 filesystem being mounted at /150/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   92.902339][ T7566] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1361: bg 0: block 345: padding at end of block bitmap is not set
[   92.916840][ T7565] loop2: detected capacity change from 0 to 512
[   92.916936][ T7566] EXT4-fs (loop7): Remounting filesystem read-only
[   92.923712][ T7565] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   92.938869][ T7565] EXT4-fs (loop2): invalid journal inode
[   92.944611][ T7565] EXT4-fs (loop2): can't get journal size
[   92.951994][ T7565] EXT4-fs (loop2): 1 truncate cleaned up
[   93.209296][ T7586] xt_CT: You must specify a L4 protocol and not use inversions on it
[   93.222320][ T7588] loop2: detected capacity change from 0 to 512
[   93.229569][ T7588] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   93.238538][ T7588] EXT4-fs (loop2): invalid journal inode
[   93.244643][ T7588] EXT4-fs (loop2): can't get journal size
[   93.361527][ T7588] EXT4-fs (loop2): 1 truncate cleaned up
[   93.618924][ T7594] netlink: 'syz.8.1375': attribute type 1 has an invalid length.
[   93.667890][ T7594] bond0: entered promiscuous mode
[   93.673117][ T7594] bond0: entered allmulticast mode
[   93.702012][   T29] kauditd_printk_skb: 565 callbacks suppressed
[   93.702027][   T29] audit: type=1326 audit(1764086457.995:14834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.0.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa299fedf90 code=0x7ffc0000
[   93.748319][ T7594] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.807450][ T7594] vlan2: entered allmulticast mode
[   93.839116][   T29] audit: type=1326 audit(1764086458.025:14835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7593 comm="syz.8.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e453f749 code=0x7ffc0000
[   93.862872][   T29] audit: type=1326 audit(1764086458.025:14836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7593 comm="syz.8.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46e453f749 code=0x7ffc0000
[   93.886513][   T29] audit: type=1326 audit(1764086458.025:14837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.0.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa299fef749 code=0x7ffc0000
[   93.907933][ T7604] FAULT_INJECTION: forcing a failure.
[   93.907933][ T7604] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   93.910309][   T29] audit: type=1326 audit(1764086458.025:14838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.0.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa299fef749 code=0x7ffc0000
[   93.923086][ T7604] CPU: 0 UID: 0 PID: 7604 Comm: syz.2.1378 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   93.923187][ T7604] Tainted: [W]=WARN
[   93.923194][ T7604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   93.923207][ T7604] Call Trace:
[   93.923213][ T7604]  <TASK>
[   93.923269][ T7604]  __dump_stack+0x1d/0x30
[   93.923296][ T7604]  dump_stack_lvl+0xe8/0x140
[   93.923316][ T7604]  dump_stack+0x15/0x1b
[   93.923335][ T7604]  should_fail_ex+0x265/0x280
[   93.923443][ T7604]  should_fail+0xb/0x20
[   93.923458][ T7604]  should_fail_usercopy+0x1a/0x20
[   93.923479][ T7604]  _copy_from_iter+0xd2/0xe80
[   93.923504][ T7604]  ? __build_skb_around+0x1ab/0x200
[   93.923570][ T7604]  skb_copy_datagram_from_iter+0xb1/0x490
[   93.923595][ T7604]  tun_get_user+0xafb/0x26e0
[   93.923629][ T7604]  ? ref_tracker_alloc+0x1f2/0x2f0
[   93.923733][ T7604]  ? selinux_file_permission+0x1e4/0x320
[   93.923807][ T7604]  tun_chr_write_iter+0x15e/0x210
[   93.923903][ T7604]  ? __pfx_tun_chr_write_iter+0x10/0x10
[   93.923929][ T7604]  vfs_write+0x52a/0x960
[   93.923959][ T7604]  ksys_write+0xda/0x1a0
[   93.923986][ T7604]  __x64_sys_write+0x40/0x50
[   93.924089][ T7604]  x64_sys_call+0x2802/0x3000
[   93.924156][ T7604]  do_syscall_64+0xd2/0x200
[   93.924178][ T7604]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   93.924206][ T7604]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   93.924265][ T7604]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.924287][ T7604] RIP: 0033:0x7f0b7de4f749
[   93.924304][ T7604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   93.924322][ T7604] RSP: 002b:00007f0b7c8af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   93.924341][ T7604] RAX: ffffffffffffffda RBX: 00007f0b7e0a5fa0 RCX: 00007f0b7de4f749
[   93.924355][ T7604] RDX: 000000000000002e RSI: 0000200000000140 RDI: 0000000000000003
[   93.924367][ T7604] RBP: 00007f0b7c8af090 R08: 0000000000000000 R09: 0000000000000000
[   93.924388][ T7604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   93.924407][ T7604] R13: 00007f0b7e0a6038 R14: 00007f0b7e0a5fa0 R15: 00007ffeaac806c8
[   93.924427][ T7604]  </TASK>
[   94.166455][   T29] audit: type=1326 audit(1764086458.025:14839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.0.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa299fef749 code=0x7ffc0000
[   94.189927][   T29] audit: type=1326 audit(1764086458.025:14840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.0.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa299fef749 code=0x7ffc0000
[   94.213485][   T29] audit: type=1326 audit(1764086458.025:14841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.0.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa299fef749 code=0x7ffc0000
[   94.236977][   T29] audit: type=1326 audit(1764086458.025:14842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.0.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa299fef749 code=0x7ffc0000
[   94.260478][   T29] audit: type=1326 audit(1764086458.025:14843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.0.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa299fef749 code=0x7ffc0000
[   94.397093][ T7618] loop5: detected capacity change from 0 to 512
[   94.404973][ T7618] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[   94.431519][ T7618] EXT4-fs (loop5): invalid journal inode
[   94.437253][ T7618] EXT4-fs (loop5): can't get journal size
[   94.443593][ T7618] EXT4-fs (loop5): 1 truncate cleaned up
[   94.481229][ T7620] loop7: detected capacity change from 0 to 8192
[   94.498146][ T7620] vfat: Unknown parameter '00000000000000000005'
[   94.570130][ T7648] ==================================================================
[   94.578240][ T7648] BUG: KCSAN: data-race in __anon_vma_prepare / handle_mm_fault
[   94.585867][ T7648] 
[   94.588178][ T7648] write to 0xffff88811b46b400 of 8 bytes by task 7649 on cpu 1:
[   94.595800][ T7648]  __anon_vma_prepare+0x172/0x2f0
[   94.600815][ T7648]  handle_mm_fault+0x1d1b/0x2be0
[   94.605751][ T7648]  do_user_addr_fault+0x3fe/0x1080
[   94.610876][ T7648]  exc_page_fault+0x62/0xa0
[   94.615394][ T7648]  asm_exc_page_fault+0x26/0x30
[   94.620244][ T7648]  rep_movs_alternative+0x4a/0x90
[   94.625272][ T7648]  _copy_to_iter+0x141/0xe70
[   94.629905][ T7648]  get_random_bytes_user+0x12d/0x290
[   94.635187][ T7648]  __x64_sys_getrandom+0xcf/0x1a0
[   94.640203][ T7648]  x64_sys_call+0x1fa6/0x3000
[   94.644868][ T7648]  do_syscall_64+0xd2/0x200
[   94.649361][ T7648]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.655240][ T7648] 
[   94.657555][ T7648] read to 0xffff88811b46b400 of 8 bytes by task 7648 on cpu 0:
[   94.665081][ T7648]  handle_mm_fault+0xe8e/0x2be0
[   94.669922][ T7648]  do_user_addr_fault+0x630/0x1080
[   94.675023][ T7648]  exc_page_fault+0x62/0xa0
[   94.679520][ T7648]  asm_exc_page_fault+0x26/0x30
[   94.684370][ T7648] 
[   94.686698][ T7648] value changed: 0x0000000000000000 -> 0xffff888104ac31a0
[   94.693787][ T7648] 
[   94.696091][ T7648] Reported by Kernel Concurrency Sanitizer on:
[   94.702227][ T7648] CPU: 0 UID: 0 PID: 7648 Comm: syz.5.1394 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   94.713506][ T7648] Tainted: [W]=WARN
[   94.717294][ T7648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   94.727338][ T7648] ==================================================================