last executing test programs:

32.809929804s ago: executing program 3 (id=901):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x50)
perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa06a6, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
getpgrp(0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file2\x00', 0x80, &(0x7f0000000480), 0x1, 0x3f5, &(0x7f00000004c0)="$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")
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet6(0xa, 0x3, 0x9)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c)

32.54068726s ago: executing program 3 (id=909):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x5e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x10}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffdb}, 0x94)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20)
r0 = socket$phonet(0x23, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4)
bind$xdp(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, 0x4, r1, 0x30}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r2=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', <r3=>0x0, 0x2f, 0x72, 0x1, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x8, 0x80, 0x200, 0x7f}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', <r4=>0x0, 0x29, 0x4, 0xe, 0x1, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x10, 0x7, 0x6, 0x9}})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000)
r9 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r10=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'lo\x00', <r13=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x7, 0x51, 0xff, r13}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=<r14=>0x0, &(0x7f0000000340)=0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', <r15=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f00000003c0)={'erspan0\x00', <r16=>0x0, 0x20, 0x10, 0xf5, 0x3, {{0x26, 0x4, 0x1, 0x0, 0x98, 0x67, 0x0, 0x36, 0x29, 0x0, @empty, @remote, {[@generic={0x86, 0xe, "a666be3bb7f529e21ada9271"}, @ssrr={0x89, 0xf, 0x20, [@remote, @private=0xa010101, @loopback]}, @rr={0x7, 0x27, 0x91, [@multicast1, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @rand_addr=0x64010100, @empty, @dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0x2b}, @broadcast]}, @noop, @timestamp_addr={0x44, 0x24, 0x83, 0x1, 0x0, [{@rand_addr=0x64010100, 0x7}, {@broadcast, 0x6}, {@multicast2, 0x6}, {@empty, 0x35987638}]}, @timestamp={0x44, 0xc, 0x41, 0x0, 0xf, [0x6, 0x3]}, @timestamp_prespec={0x44, 0xc, 0x6, 0x3, 0x5, [{@loopback, 0x10001}]}]}}}}})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000500)={@private, @multicast2, <r17=>0x0}, &(0x7f0000000540)=0xc)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'syztnl2\x00', &(0x7f00000006c0)={'ip_vti0\x00', <r18=>0x0, 0x700, 0x20, 0x7, 0x9, {{0x21, 0x4, 0x1, 0x3b, 0x84, 0x68, 0x0, 0x7, 0x29, 0x0, @multicast2, @multicast2, {[@generic={0x94, 0x10, "3cb560c643f1525d6e4fcd61d37b"}, @end, @rr={0x7, 0x1f, 0xb0, [@dev={0xac, 0x14, 0x14, 0x2a}, @broadcast, @broadcast, @broadcast, @rand_addr=0x64010101, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x3c, 0x14, 0x1, 0xc, [{@multicast1, 0x7fffffff}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x4}, {@local, 0x3}, {@private=0xa010101, 0x4}, {@rand_addr=0x64010100, 0x2}, {@remote, 0x7}, {@broadcast, 0xe}]}, @noop]}}}}})
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x94180000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000780)={0x208, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x208}}, 0x11)

32.476276181s ago: executing program 3 (id=911):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000004010)

31.604714018s ago: executing program 3 (id=930):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2ab, &(0x7f0000000a80)="$eJzs3b1rLFUUAPAzyX6pxW5hJYIDWlg9Xl5rs0HyILiVsoVa6MP3Hkh2ERII+IFrKlsbS/8CQbDzn7CxsBdsBTtTBEZmZya7ibObTHATP36/Jjd3zrn3zOQmYYs9+/6L04PHaTw9+eyX6PWS2BrGME6TGMRWVL6IC4ZfBQDwb3aaZfF7VmiSl0REb3NlAQAb1Pj///cbLwkA2LC33n7njd3RaO/NNO3Fw+mXx+P8lX3+tbi++zQ+jEk8ifvRj7OI7Fwxfphl2ayV5gbxynR2PM4zp+/9WK6/+1vEPH8n+jGYT13M3x/t7aSFpfxZXsez5f7DPP9B9OP5mv33R3sPavJj3IlXX16q/17046cP4qOYxON5EYv8z3fS9PXs6z8+fTcvL89PZsfj7jxuIdu+5R8NAAAAAAAAAAAAAAAAAAAAAAD/YffK3jndmPfvyafK/jvbZ/k37Ugrg4v9eYr8pFroUn+gWRbfVP117qdpmpWBi/xWvNCK1t3cNQAAAAAAAAAAAAAAAAAAAPyzHH38ycGjyeTJ4d8yqLoBVG/rv+k6w6WZl6ImZhDnM93FllvltmtWju0qJolYW0a+YqPi21fvvmLwzKqsb79r+uh6V8e0b1Bhw0F1ug4eJfXPsBvVTK86JD8sx3Timnt1Vl3KGh2/Tu2lfuN77zw3H8zWxESyrrDXfi2eXDmTXL6Lzvyp1qa3y0Hxu1B3Nhqd57/+rUh06wAAAAAAAAAAAAAAAAAAgI1avOm35uLJiqSf94sP+Y/BhqsDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNux+Pz/BoNZmXyN4E4cHt3xLQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA/8GcAAAD//wrtYeE=")
listen(0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)="89000000120081ae08061cdc030ec080000000000000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0xc000)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
io_setup(0x6, &(0x7f0000000140))
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r4 = dup(r3)
write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
open(&(0x7f0000000580)='./file0\x00', 0x1c1501, 0x6)
mount$nfs(&(0x7f0000000100)='+\x80.', 0x0, 0x0, 0x136808, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x2}, 0x94)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x4}, 0x18)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0xf8}}, 0x4000)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_drvinfo={0x3, "c428e4c47e162833da1d365a97f8ce8695fb3b6cd015a06ae700180a9835363f", "d1a316d0a02b136a7927e372ee720b73a53c5fad9264fb8966552367948139a6", "865d44e99aa34b3fa54d6e47670cccafb961636459133ab5e30fbcc30b838413", "680529e969986688e7b115c8e7d52f1e0697f976c1ac03a0dc661bf00863d1bd", "5fb854e085db122661d365714ddb293aa630fb100813bfd8602af9abb5d686d9", "ef776367d1348a5de963c8ff", 0x56, 0x1, 0x800, 0x5, 0x5}})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c0)

31.459747291s ago: executing program 2 (id=936):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000640)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@discard}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r3 = io_uring_setup(0x1f6e, &(0x7f0000000340)={0x0, 0xcc11, 0x800, 0x1, 0x1d2})
io_uring_register$IORING_REGISTER_FILES2(r3, 0xd, &(0x7f0000000640)={0x1, 0x0, 0x0, &(0x7f0000000600)=[{0x0}], 0xffffffffffffffff}, 0x20)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000022007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r7}, 0x10)
mknodat$null(0xffffffffffffffff, 0x0, 0x4, 0x103)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x7}, 0x18)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000dc0)={0x9, 0x1, 0x5, 0x7f})

31.458832011s ago: executing program 3 (id=937):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x40, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20200006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0xfffffffe, 0x1, 0x9, 0x4, 0x7}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x40, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x9ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xe6, 0xa000, 0x8, 0x5, 0xa17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x5, 0xfff, 0xe4af, 0x5, 0x8, 0x7}, {0x6, 0xd, 0x22e, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x83, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x7fffffff}, {0x0, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0x8001, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x83, 0x9, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x8, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x5, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x4}, {0x4, 0x4, 0x8, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x594, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x10000, 0xa4, 0x0, 0x7}, {0x8, 0xde, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d9, 0x9}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x4, 0x10001, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x9, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0x1, 0x4, 0x800, 0x0, 0x8}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0xb, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0x2, 0xc0, 0xfffff44c}, {0x4, 0x2, 0xfffffff3, 0x9, 0xbe, 0x4}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x200, 0x9, 0xbc, 0xf}, {0x1ff, 0xfffffffc, 0x1, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x5, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x2, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x2, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0x10, 0x6, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x383, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x47, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x1, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x215ac34e, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc, 0x2}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x0, 0x1, 0x40, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x9, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0xfff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x81, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x5}, {0x7011, 0xfff, 0x9, 0x1, 0x9, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x1, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x6, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0xb, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x81, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0x2f, 0x6}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x4, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x1, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x4, 0x24e, 0x4}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0xaacd, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x5}, {0x5, 0x1}, {}, {0x2}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x2000000)
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000c80), 0x82641, 0x0)
getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000cc0)=0x200, &(0x7f0000000d00)=0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0xfffffffffffff001}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x56d, &(0x7f0000000540)="$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")
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3)
pwrite64(r5, 0x0, 0x0, 0x83)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x24004800)
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)

31.413282702s ago: executing program 2 (id=938):
r0 = socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="240000001ed78703148700b3586f0407a9e553797cc0869fbbd0261575fdeb43", 0x20)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01082cbd7000fedbdf250c0000001800058008000100756470000c00028008006285cf3ae8a7"], 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x8040)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='sys_enter\x00', r5}, 0x18)
munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r6, 0x0, 0x7}, 0x18)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r8)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r9, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r9, 0x0)
r10 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r12, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)
process_madvise(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x52, 0x67, 0x0)
recvmmsg(r0, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0)

31.085291538s ago: executing program 3 (id=941):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18)
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)

31.066519099s ago: executing program 32 (id=941):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18)
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)

30.403017082s ago: executing program 2 (id=955):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f0000000340)=""/169}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r3)

30.001418779s ago: executing program 2 (id=947):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2ab, &(0x7f0000000a80)="$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")
listen(0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)="89000000120081ae08061cdc030ec080000000000000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0xc000)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
io_setup(0x6, &(0x7f0000000140))
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r4 = dup(r3)
write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
open(&(0x7f0000000580)='./file0\x00', 0x1c1501, 0x6)
mount$nfs(&(0x7f0000000100)='+\x80.', 0x0, 0x0, 0x136808, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x2}, 0x94)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x4}, 0x18)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0xf8}}, 0x4000)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_drvinfo={0x3, "c428e4c47e162833da1d365a97f8ce8695fb3b6cd015a06ae700180a9835363f", "d1a316d0a02b136a7927e372ee720b73a53c5fad9264fb8966552367948139a6", "865d44e99aa34b3fa54d6e47670cccafb961636459133ab5e30fbcc30b838413", "680529e969986688e7b115c8e7d52f1e0697f976c1ac03a0dc661bf00863d1bd", "5fb854e085db122661d365714ddb293aa630fb100813bfd8602af9abb5d686d9", "ef776367d1348a5de963c8ff", 0x56, 0x1, 0x800, 0x5, 0x5}})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c0)

29.698618906s ago: executing program 2 (id=952):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000140), 0x2, 0xbca, &(0x7f0000000600)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x4002011, r0, 0x3000)
fallocate(r0, 0x0, 0x0, 0x1000f4)
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201)
r2 = syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00400, &(0x7f0000000200)={[{@minixdf}, {@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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")
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000000010000"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRES16=r2, @ANYBLOB="0000000000000000b70300000000000085"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7}, 0x18)
r4 = socket(0x10, 0x3, 0x0)
inotify_init()
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$kcm(0x2, 0xa, 0x73)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$kcm(0x2, 0xa, 0x73)
mount(0x0, 0x0, 0x0, 0x4000, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffb8)
perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0)
symlink(0x0, &(0x7f00000017c0)='./file0\x00')
rmdir(&(0x7f0000004340)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x2, 0x100004, 0x0, 0xe}, 0x10)
write(r4, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe03000100000000", 0x1c)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYRES32], 0xa0}, 0x4004881)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x69000}], 0x1, 0x7000, 0x0, 0x3)

29.602355028s ago: executing program 0 (id=956):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x2}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0)

29.571031278s ago: executing program 0 (id=957):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x4661, 0x800, 0x5, 0x20e}, &(0x7f0000000540)=<r3=>0x0, &(0x7f0000000680)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x1})
socket(0xa, 0x1, 0x0)
io_uring_enter(r2, 0x71bd, 0xdde3, 0x21, &(0x7f00000000c0)={[0x80]}, 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1010012, &(0x7f0000000500)={[], [{@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'ext4\x00'}}, {@measure}]}, 0x3, 0x4e2, &(0x7f0000000dc0)="$eJzs3M2PFEUfAOBfzwe7wMv77ouIgigLaNyYuAsLCgcvmph40MSIBzludleCLGDYPQghsiQGzyTejUfjTROvXo0n/wA8eDAxJMRwATy16Znu2dmZ3o+B/WCd50lmp6q6pququ7qntmu6A+hbw9mfJOI/EXE7Iv7XjC7OMNx8e3Dv2uTDe9cmYz5NT/+VNPLdz+K54nM788hIJaLyRdKxwqbZK1fPT8zMTF/O42NzFz4dm71y9dVzFybOTp+dvjh+6tSJ48dOvj7+Wu+NKikva9f9/Z9fOrDvnTO33pusFemD+Xt7O5ZU660aw8sse6m3VT3xdrWFk+7tdH1DK8Oq1fNunb3fvjZz+MxmVwjYMGmapgNLL55PO93oSgG2rCQ2uwbA5ii+6LP/f4vXBg09ngh332z+A5S1+0H+ai6pRSXPU+/4/3YtDUfER/N/f529YrnrEL+vUwUAgL4zn7+naef4rxJ72/L9N59DGYqI/0fE7oh4KiL2RMTTEY28z0TEs50FJBHpMuXv6YgvlP9DPotQufNYDVxBNv57I5/bWjz+K0Z/MVTNY7uyzdRMmz6ab5ORqA98fG5m+tgS69+2Qvnt47/slZVfjAXzetypdVygm5qYm3i01na7eyNif62z/Ukt23HFNE4S1dgXEft7WO9QW/jcK9/WW5H64nwl7U8WemVLWjKl1/N8XJn0m4iXm/t/Phbt/4USk+XnJ8cGY2b66FjWC46WlvHLrzffX6r8Fff/j390fuTtkz+dftxmt2T7f0db/49i/nah/UNJRNKar52NSKvFotK90uXmb1821jt8pHvZo/b/bcmHjXBxfH02MTd3+VjEtuTd7vTxhc8W8SJ/1v6RI+XH/+62Vj4XEQci4vmIeCEiDuZ1PxQRhyOipGktP7/14idLLVu5/esra/9U6flv0f5fmK9fZaD4cJZSPX/o9sMlTh6r2/8nGqGRPKX8/Jcs6oyrrenjbT0AAADYGirR+O1/ZbQVrlRGR5vXgPbEjsrMpdm5gxFxcap5j8BQ1CvFla7m9eB6Ulz/HGqLj3fEj+fXjb+qbm/ERycvzUxtduOhz+1sHPNJ1/Gf+bO62bUD1t0azKMBW9RKx//eWxtUEWDD+f6H/lVr/JSxoeuXd0W6X8rAv5Pvf+hTO8uTr8d3y9674JwBW1/qWIa+5viH/lWLD1rhxm3Pnfd1nt+x0VUCNojvf+hLvd7X31sgHShfNBglTwwYXJ9qbC8pa1MC2chqDVdYj4jVZd7+KEUUQ8Cln/BQ6W2FA/XuzlaNtpRqZ1lJD89xKALZVlkx89m9a975i2eirHW3+X7hOK23ts+DNE3XvdNuyukIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgzf0TAAD//4REzz8=")
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x1400e, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240), 0x0, 0x1}}, 0x40)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0)
add_key(&(0x7f00000001c0)='trusted\x00', &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)

29.280084343s ago: executing program 2 (id=960):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r3, 0x0, 0x200000000000006}, 0x18)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, <r4=>0xffffffffffffffff, {0x29}}, './file0\x00'})
r5 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r5, &(0x7f0000000340)={0x18, 0x2, {0x2, @empty}}, 0x1e)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000180)={{0x87, @remote, 0x4e20, 0x3, 'none\x00', 0x0, 0x3, 0x24}, {@loopback, 0x4e24, 0x4, 0xa, 0x100}}, 0x44)
r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
r7 = socket$kcm(0x15, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, 0xfffffffffffffffd)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x20, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)

29.279739484s ago: executing program 33 (id=960):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r3, 0x0, 0x200000000000006}, 0x18)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, <r4=>0xffffffffffffffff, {0x29}}, './file0\x00'})
r5 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r5, &(0x7f0000000340)={0x18, 0x2, {0x2, @empty}}, 0x1e)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000180)={{0x87, @remote, 0x4e20, 0x3, 'none\x00', 0x0, 0x3, 0x24}, {@loopback, 0x4e24, 0x4, 0xa, 0x100}}, 0x44)
r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
r7 = socket$kcm(0x15, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, 0xfffffffffffffffd)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x20, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)

29.231984165s ago: executing program 0 (id=962):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x798011ccc5908918, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffeffff}, 0x94)
r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain)
add_key$keyring(&(0x7f0000000040), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r1)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
close(0xffffffffffffffff)
newfstatat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x3000)
lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x8, 0x2)
mount$cgroup2(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380), 0x808800, &(0x7f0000000780)=ANY=[@ANYBLOB='pids,pids_localevents,memory_recursiveprot,memory_recursiveprot,memory_hugetlb_accounting,memory_localevents,pids_localevents,perf_event,appraise,euid<', @ANYRESDEC=r3, @ANYBLOB="2c636f6e746578743d757365725f752c6673757569643d3962a562353331532d373232612d396463622d320100000000000000040036612c7063723d30303030303030303030303030303030303032322c657569643d", @ANYRESDEC=r4, @ANYBLOB=',\x00'])
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom1\x00', 0x802, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000004c0)='rxrpc_tx_data\x00', r6}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa8f16000)
chdir(0x0)
r7 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_freezer_state(r7, &(0x7f00000001c0)='THAWED\x00', 0x7)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014681100000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000003c110380100000800c00018006000100d1030000281100800800034000000002"], 0x11d4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r10 = socket$l2tp(0x2, 0x2, 0x73)
sendto$l2tp(r10, &(0x7f0000000040)="6dc757b6026d2f5a1e87d3960d3c231a2cc5ea478ca8fe83496aa77bda2d3327b3bab51215ed6f1e3023974ac3ebb3f6b0bd78ab180005c7f0ccd62192d202a85c355d431bc70fe4acabfb4558001033d8230781c4db99d569c4b20e2ee774832b63e0c22011788eab5e2321d775", 0x6e, 0x8050, &(0x7f0000000100)={0x2, 0x0, @broadcast, 0x3}, 0x10)

28.746286284s ago: executing program 0 (id=965):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c636865636b3d7374726963742c756d61736b3d30303030303030303030303030303030303133363033302c756e695f786c6174653d312c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303034302c757466383d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303166622c666c7573682c756e695f786c6174653d302c73686f72746e616d653d77696e39352c00208893fdd4787adad4209069"], 0x6, 0x2ab, &(0x7f0000000a80)="$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")
listen(0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)="89000000120081ae08061cdc030ec080000000000000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0xc000)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
io_setup(0x6, &(0x7f0000000140))
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r4 = dup(r3)
write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
open(&(0x7f0000000580)='./file0\x00', 0x1c1501, 0x6)
mount$nfs(&(0x7f0000000100)='+\x80.', 0x0, 0x0, 0x136808, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x2}, 0x94)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x4}, 0x18)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0xf8}}, 0x4000)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_drvinfo={0x3, "c428e4c47e162833da1d365a97f8ce8695fb3b6cd015a06ae700180a9835363f", "d1a316d0a02b136a7927e372ee720b73a53c5fad9264fb8966552367948139a6", "865d44e99aa34b3fa54d6e47670cccafb961636459133ab5e30fbcc30b838413", "680529e969986688e7b115c8e7d52f1e0697f976c1ac03a0dc661bf00863d1bd", "5fb854e085db122661d365714ddb293aa630fb100813bfd8602af9abb5d686d9", "ef776367d1348a5de963c8ff", 0x56, 0x1, 0x800, 0x5, 0x5}})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c0)

28.481404079s ago: executing program 0 (id=969):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f0000000340)=""/169}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r3)

28.052351798s ago: executing program 0 (id=973):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8b}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket(0x10, 0x803, 0x0)
getpeername(r2, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f00000000c0)=0x80)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x7c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x5, 0xd, 0x3, 0x4, 0x13, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x2, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_LINK={0xfffffefa, 0x3, 0x80000000}]}}]}, 0x7c}}, 0x24040084)

28.007918459s ago: executing program 34 (id=973):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8b}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket(0x10, 0x803, 0x0)
getpeername(r2, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f00000000c0)=0x80)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x7c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x5, 0xd, 0x3, 0x4, 0x13, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x2, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_LINK={0xfffffefa, 0x3, 0x80000000}]}}]}, 0x7c}}, 0x24040084)

2.01900934s ago: executing program 6 (id=1542):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x7, @local, 0x7}, 0x1c)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x4, 0x0, 0x0)

1.115936818s ago: executing program 6 (id=1570):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x40, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20200006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0xfffffffe, 0x1, 0x9, 0x4, 0x7}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x40, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x9ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xe6, 0xa000, 0x8, 0x5, 0xa17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x5, 0xfff, 0xe4af, 0x5, 0x8, 0x7}, {0x6, 0xd, 0x22e, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x83, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x7fffffff}, {0x0, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0x8001, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x83, 0x9, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x8, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x5, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x4}, {0x4, 0x4, 0x8, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x594, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x10000, 0xa4, 0x0, 0x7}, {0x8, 0xde, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d9, 0x9}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x4, 0x10001, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x9, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0x1, 0x4, 0x800, 0x0, 0x8}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0xb, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0x2, 0xc0, 0xfffff44c}, {0x4, 0x2, 0xfffffff3, 0x9, 0xbe, 0x4}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x200, 0x9, 0xbc, 0xf}, {0x1ff, 0xfffffffc, 0x1, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x5, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x2, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x2, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0x10, 0x6, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x383, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x47, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x1, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x215ac34e, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc, 0x2}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x0, 0x1, 0x40, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x9, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0xfff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x81, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x5}, {0x7011, 0xfff, 0x9, 0x1, 0x9, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x1, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x6, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0xb, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x81, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0x2f, 0x6}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x4, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x1, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x4, 0x24e, 0x4}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0xaacd, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x5}, {0x5, 0x1}, {}, {0x2}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x2000000)
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000c80), 0x82641, 0x0)
getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000cc0)=0x200, &(0x7f0000000d00)=0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0xfffffffffffff001}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x56d, &(0x7f0000000540)="$eJzs3d9rW+UbAPDnpO1+77sOxvgqIsVdOJlLt9YfE7yYl6LDgd7P0mZlNF1Gk861Dtwu3I03MgQRB+K1eu/l8B/wrxjoYMgoinhTOelJm6VJk3Vpm5rPB872vjknfc+Tc56X982bkAD61kj6Ty7iuYj4Mok4UrdvMLKdIyvHLT2+OZluSSwvf/hHEkn2WO34JPv/YFb5f0T88nnEqdz6dssLizMTxWJhLquPVmavjZYXFk9fmZ2YLkwXro6Nj597fXzsrTff6Fqsr1z865sP7r977osTS1//9PDo3STOx6FsX30cz+BWfWUkRrLXZCjONxx4tguN9ZJkp0+ATRnI8nwo0j7gSAxkWQ/8930WEctAn0rkP/Sp2jigNrfv0jx413j0zsoEaH38gyvvjcS+6tzowFLyxMwone8Od6H9tI2ff793N92ie+9DALR163ZEnBkcXN//JVn/t3lnOjimsQ39H2yf++n459Vm45/c6vgnmox/DjbJ3c1on/+5hw2H7OlCs6vS8d/bTce/q4tWwwNZ7XB1zDeUXL5SLKR92/8i4mQM7U3rG63nnFt6sNxqX/34L93S9mtjwew8Hg7uffI5UxOViWeJud6j2xHPNx3/JqvXP2ly/dPX42KHbRwv3Hux1b728W+t5e8jXm56/ddWtJKN1ydHq/fDaO2uWO/PO8d/bdX+TsefXv8DK/H/nU0JG+MfTurXa8tP38Z3+/4ptNq32ft/T/JRtVzrDG5MVCpzZyP2JO+vf3xs7bm1eu34NP6TJzbu/5rd//sj4uMO479z7McXNh//1krjn9r4/m+4/k9fePDep9+2ar+z6/9atXQye6ST/q/TE3yW1w4AAAAAAAB6TS4iDkWSy6+Wc7l8fuXzHcfiQK5YKldOXS7NX52K6ndlh2MoV1vpPrL2eYjqcutw3ecjxhrq4xFxNCK+GthfrecnS8WpnQ4eAAAAAAAAAAAAAAAAAAAAesTBFt//T/02sNNnB2w5P/kN/att/nfjl56AntQm/1/6ZLtOBNh2xv/Qv+Q/9C/5D/1L/kP/kv/Qv+Q/9C/5DwAAAAAAAAAAAAAAAAAAAAAAAAAAAF118cKFdFteenxzMq1PXV+YnyldPz1VKM/kZ+cn85OluWv56VJpuljIT5Zm2/29Yql07exYzN8YrRTKldHywuKl2dL81cqlK7M/HI4oDG1LVAAAAAAAAAAAAAAAAAAAALC7lBcWZyaKxcKcQrWwN3riNHZRYbA3TqM/CxFb1sRO90wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsObfAAAA//9IKziJ")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3)
pwrite64(r5, 0x0, 0x0, 0x83)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x24004800)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)

1.085276149s ago: executing program 6 (id=1571):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x80, 0x2b, 0x1ff, 0x0, 0x7fffffff, 0x10000105})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x4, 0x2, 0x8, 0x0, 0x0, 0x0, 0xfd, 0x5}, 0xe)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={<r3=>0x0, 0x10, &(0x7f0000002300)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000440)=0x10)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000001c0)={r3, 0x1f, 0x9, 0x5}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={<r5=>0xffffffffffffffff})
ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB="fdffffffffcf3b316b9cffffffffffff7f"])
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$setpipe(r6, 0x407, 0x7000000)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
fcntl$lock(r7, 0x25, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x2})
fcntl$lock(r7, 0x26, &(0x7f00000001c0)={0x1, 0x2, 0x7, 0x46})
fcntl$lock(r7, 0x24, &(0x7f0000000080)={0x2, 0x1, 0xbb7, 0x800})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000040)={0x80, 0x2b, 0x5, 0x4, 0x7, 0xb})

1.000048271s ago: executing program 6 (id=1573):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, 0x0, &(0x7f0000000240)=r1}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x4661, 0x800, 0x5, 0x20e}, &(0x7f0000000540)=<r3=>0x0, &(0x7f0000000680)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x1})
socket(0xa, 0x1, 0x0)
io_uring_enter(r2, 0x71bd, 0xdde3, 0x21, &(0x7f00000000c0)={[0x80]}, 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1010012, &(0x7f0000000500)={[], [{@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'ext4\x00'}}, {@measure}]}, 0x3, 0x4e2, &(0x7f0000000dc0)="$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")
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x1400e, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240), 0x0, 0x1}}, 0x40)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0)
add_key(&(0x7f00000001c0)='trusted\x00', &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)

967.558581ms ago: executing program 4 (id=1575):
bpf$ENABLE_STATS(0x20, 0x0, 0xfffffffffffffec4)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x5}, 0x18)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x4000, 0x2)

944.499392ms ago: executing program 5 (id=1576):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18)
move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0)

916.760872ms ago: executing program 4 (id=1577):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10004, &(0x7f00000000c0), 0x0, 0x4c0, &(0x7f0000000540)="$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")
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94)
creat(&(0x7f00000004c0)='./bus\x00', 0x20)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0)
preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0)

872.220373ms ago: executing program 5 (id=1578):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

869.447513ms ago: executing program 5 (id=1579):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000140), 0x2, 0xbca, &(0x7f0000000600)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00400, &(0x7f0000000200)={[{@minixdf}, {@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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")
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x69000}], 0x1, 0x7000, 0x0, 0x3)

854.552833ms ago: executing program 6 (id=1580):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x7, @local, 0x7}, 0x1c)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x4, 0x0, 0x0)

815.316834ms ago: executing program 4 (id=1581):
mkdir(0x0, 0x0)
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

760.717035ms ago: executing program 4 (id=1583):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x40, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20200006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0xfffffffe, 0x1, 0x9, 0x4, 0x7}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x40, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x9ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xe6, 0xa000, 0x8, 0x5, 0xa17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x5, 0xfff, 0xe4af, 0x5, 0x8, 0x7}, {0x6, 0xd, 0x22e, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x83, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x7fffffff}, {0x0, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0x8001, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x83, 0x9, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x8, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x5, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x4}, {0x4, 0x4, 0x8, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x594, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x10000, 0xa4, 0x0, 0x7}, {0x8, 0xde, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d9, 0x9}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x4, 0x10001, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x9, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0x1, 0x4, 0x800, 0x0, 0x8}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0xb, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0x2, 0xc0, 0xfffff44c}, {0x4, 0x2, 0xfffffff3, 0x9, 0xbe, 0x4}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x200, 0x9, 0xbc, 0xf}, {0x1ff, 0xfffffffc, 0x1, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x5, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x2, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x2, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0x10, 0x6, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x383, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x47, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x1, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x215ac34e, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc, 0x2}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x0, 0x1, 0x40, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x9, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0xfff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x81, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x5}, {0x7011, 0xfff, 0x9, 0x1, 0x9, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x1, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x6, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0xb, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x81, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0x2f, 0x6}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x4, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x1, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x4, 0x24e, 0x4}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0xaacd, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x5}, {0x5, 0x1}, {}, {0x2}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000cc0)=0x200, &(0x7f0000000d00)=0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffff001}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x56d, &(0x7f0000000540)="$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")
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3)
pwrite64(r3, 0x0, 0x0, 0x83)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)

741.384276ms ago: executing program 5 (id=1584):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x80, 0x2b, 0x1ff, 0x0, 0x7fffffff, 0x10000105})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000e868495fb58d00b6ad1f50ad32d6ad25dfd73a015e0ca6a0f68a7d007dc6751dfb265a0e3ccae669e173a64bc1cfd514600650a58f145ff1205fc9ddaa275e687d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983cd44c05bd0a48dfe3e26e7a23129d6606ed28a69989d552af6d9a9df2c3af36e0360070011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a1a83109753f54b21cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b81a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a928903000000cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba739cd0c31b05c00fba8a4aee676d7caa2e53b91a68ff2e60da7b01a2e5785a238afa4aba70c08b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf78b04963d679d5a5d07e618a1ef9057fec00f9e93021f5a8d30e716de8cde9c6000000000c3b64d10f0939b42b33ab2a8717096c58bb3bb1d457d8bb96870f5a7e2ba31fd69bb80235d957eaa9a40b764e5381ffa604aaafb76a980e72b408f686b185736693089213b4e140f8f38e5589663115093889deb646122a5dc5a9e5ba4d37749a36b880110e2bf524b79bc91105f1d3f7d0de694a9417d68694f17ba5e27ea1cec518b93fadcfe0de010ae9be3273ff73c34b5695080a35bfa5c69e3b533e1b939c81b3beda037b7191cb0000000000000000000010e5d683b8938db5c305cf7e6e62a6890ba9e1f4ee64f8202b59de5036569febfaa95f4633db108b2f786333ec7bacc927f4a1785165b5d2444b4c022bb5cff472e6a0c8ee9d6d8df83b704669147b732ac508c9b9f0ca0a1ce45319d43d4643eb285835daf2065b57bebd61ad6671296c27253a5f9688d57c91ccd40ffe2dbc5dd1613a2e6f5b363cc8d205ce6ef3c3c6ded7dd3dfdb39008d8997213f68cdc971c1d6fdacb7729a5560880a77525e9cfb94ef1735dfe74e6b948697f7e3580436b532a82e315d56b17a5dba98436cc24babaae409f0aab0b40af116001bc85492455956e853ead08b5793d4ecf72378a3dfd9cc837b1c66212d9a2be8fd6341c2f837c7fe09924a51ec42912856cce3d3b2d092c80813aad03e1e63a655f4138730f302df339f30a4fbd453c9a0fba381d071ad7cb80a52bec572e29b0b9b55c235806b97e166609f8083ce776075c"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x4, 0x2, 0x8, 0x0, 0x0, 0x0, 0xfd, 0x5}, 0xe)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={<r3=>0x0, 0x10, &(0x7f0000002300)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000440)=0x10)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000001c0)={r3, 0x1f, 0x9, 0x5}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={<r5=>0xffffffffffffffff})
ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB="fdffffffffcf3b316b9cffffffffffff7f"])
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$setpipe(r6, 0x407, 0x7000000)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
fcntl$lock(r7, 0x25, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x2})
fcntl$lock(r7, 0x26, &(0x7f00000001c0)={0x1, 0x2, 0x7, 0x46})
fcntl$lock(r7, 0x24, &(0x7f0000000080)={0x2, 0x1, 0xbb7, 0x800})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000040)={0x80, 0x2b, 0x5, 0x4, 0x7, 0xb})

640.051028ms ago: executing program 5 (id=1585):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00"/11], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa1, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)

639.042488ms ago: executing program 1 (id=1586):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x6}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, r1, 0xfffffffd}, 0x50)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYRES16=r2, @ANYRES32=r5, @ANYRESOCT=r2, @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'bridge0\x00', 0x400})
close(r0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000780)={0x7, {{0xa, 0x4e23, 0x2, @mcast2, 0x4}}}, 0x88)

630.914838ms ago: executing program 5 (id=1587):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r2, &(0x7f00000030c0), 0x0, 0x9200000000004010)

571.960219ms ago: executing program 4 (id=1590):
bpf$ENABLE_STATS(0x20, 0x0, 0xfffffffffffffec4)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x5}, 0x18)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x4000, 0x2)

544.359039ms ago: executing program 1 (id=1592):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10004, &(0x7f00000000c0), 0x0, 0x4c0, &(0x7f0000000540)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94)
creat(&(0x7f00000004c0)='./bus\x00', 0x20)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0)
preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0)

544.004859ms ago: executing program 4 (id=1593):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r0, &(0x7f00000030c0), 0x0, 0x9200000000004010)

472.004581ms ago: executing program 1 (id=1594):
mkdir(0x0, 0x0)
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

445.666862ms ago: executing program 1 (id=1595):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000140), 0x2, 0xbca, &(0x7f0000000600)="$eJzs3N1rXGUaAPDnnEymaZvdSZdl2e7NZlmWFpadJl1SbBFspSKCF4LeCg3ppIRMP0giNWkuJvoPiHoteCOoRfHCXvdG0VtvtL1VvBCKxEZBRCNnPpKxmUlbO8mJ6e8Hb877nudk3uc5h+ScF2YmgIfWcPYjjTgYEWeSiFJzfxoRxXpvIKLWOG5leXHih+XFiSRWV5/9NokkIm4vL060Xitpbvc3BwMR8dnjSfzl5Y3zzs4vTI9Xq5WZ5vjI3PlLR2bnF/43dX78XOVc5cLosUfGjo4dGzk+1rNaf/zy5LXv//Xk17Wf3vn56nevvZXEyRhsxtrr6JXhGF47J+0KETHe68ly0tesp73OpNA2WO1wBtLtyAwAgE7Stme4v0Up+mL94a0UH32ea3IAAABAT6z2RawCAAAAu1xi/Q8AAAC7XOt9ALeXFydaLd93JGyvW6ciYqhR/0qzNSKFqNW3A9EfEftuJ9H+sdak8WsPbDgivrp5/P2sxRZ9DnkztaWI+Hun65/U6x+qf4p7Y/1pRIz0YP7hO8Y7vf6B5u9l9Z/swfx51w/Aw+n6qcaNbOP9L117/okO9/9Ch3vX75H3/a/1/Ley4flvvf6+Ls9/z9zjHFfefuNyt1hW/6PXnniv1bL5s+0DFXUfbi1F/KPQqf5krf6kS/1n7nGO0i+XK91iede/+mbEoehcf0uy+fcTHZmcqlZGGj87zrH06di73ebPu/7s+u/rUn/r+5+6Xf9Lm71w33r3+dOnP9gQv7ne3bz+9Jti8ly9V2zueXF8bm5mNKKYPL1x/9HN620d03qNrP7D/27U/1SXv/9O9Wfl1ZrnIVsLLDW32filO+Z87OqVD7vl01r/5Xn9z3a5/u31f1LYeP1fucc5/vPxq4e7xdrXv1nL5m+thQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgJY2IwUjS8lo/TcvliP0R8dfYl1Yvzs79d/LiCxfOZrGIoehPJ6eqlZGIKDXGSTYerffXx0fvGP8/Ig5ExOulvfVxeeJi9WzexQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALBmf0QMRpKWIyKNiJVSmpbLeWcFAAAA9NxQ3gkAAAAAW876HwAAAHY/638AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC22IF/Xr+RRETtxN56yxSbsf5cMwO2Wpp3AkBu+vJOAMhNIe8EgNzc5xrf4wLsQsld4gNdI3vu41gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/ugOHbx+I4mI2om99ZYpNmP9uWYGbLU07wSA3PRtFixsXx7A9vMnDg8va3wguUt8YP2Y2m8je7YsJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB2nsF6S9JyRBSb+8rliD9FxFD0J5NT1cpIRPw5Ir4o9e/JxqM55wwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvzc4vTI9Xq5WZrJNGs7O2R2e9kzTOWG2n5KPzgJ1i7Ig0dmgn7/9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADkYXZ+YXq8Wq3MzOadCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJC32fmF6fFqtTKzhZ28awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID+/BgAA///pcwrc")
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x4002011, 0xffffffffffffffff, 0x3000)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4)
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00400, &(0x7f0000000200)={[{@minixdf}, {@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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")
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x69000}], 0x1, 0x7000, 0x0, 0x3)

361.779923ms ago: executing program 1 (id=1598):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00"/11], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa1, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)

334.858203ms ago: executing program 1 (id=1599):
syz_open_dev$usbfs(0x0, 0x75, 0x109301)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240), 0xfffffecc)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x115}, 0x18)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800)
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000280))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX], 0x0, 0x52, 0x0, 0x9, 0x6}, 0x28)
pwritev(r3, &(0x7f0000000600), 0x0, 0x7, 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x1}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e80ba8c01eb3f4b7be71f9fc2355c336cedc15eb778e3a3b35c3f72629ea4d9ae42cf4c17255815fb8a47aafd8b8ff0c202b4e09f7c42811261b5e113fcce27b4329ccb792df14b7d6dcfaf2cf8dbb51946e89c862e9252731f680ec50326fc16386aeefe", 0x90}], 0x2, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x20}, 0xe900)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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")
fspick(r3, &(0x7f0000000900)='./bus\x00', 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r4)
ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000940)={0x5, 0x9, 0xfff0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x38, r5, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x39}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004011}, 0x8000)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
write(r6, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79a3879fa0", 0x37)
sendfile(r6, r4, 0x0, 0x3ffff)
sendfile(r6, r4, 0x0, 0x7fffeffd)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
fallocate(r7, 0x0, 0xa20, 0x8000c64)

261.339695ms ago: executing program 7 (id=1601):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

260.960865ms ago: executing program 7 (id=1602):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x6}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, r1, 0xfffffffd}, 0x50)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYRES16=r2, @ANYRES32=r5, @ANYRESOCT=r2, @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'bridge0\x00', 0x400})
close(r0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000780)={0x7, {{0xa, 0x4e23, 0x2, @mcast2, 0x4}}}, 0x88)

163.562017ms ago: executing program 7 (id=1603):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x40, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20200006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0xfffffffe, 0x1, 0x9, 0x4, 0x7}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x40, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x9ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xe6, 0xa000, 0x8, 0x5, 0xa17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x5, 0xfff, 0xe4af, 0x5, 0x8, 0x7}, {0x6, 0xd, 0x22e, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x83, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x7fffffff}, {0x0, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0x8001, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x83, 0x9, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x8, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x5, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x4}, {0x4, 0x4, 0x8, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x594, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x10000, 0xa4, 0x0, 0x7}, {0x8, 0xde, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d9, 0x9}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x4, 0x10001, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x9, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0x1, 0x4, 0x800, 0x0, 0x8}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0xb, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0x2, 0xc0, 0xfffff44c}, {0x4, 0x2, 0xfffffff3, 0x9, 0xbe, 0x4}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x200, 0x9, 0xbc, 0xf}, {0x1ff, 0xfffffffc, 0x1, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x5, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x2, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x2, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0x10, 0x6, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x383, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x47, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x1, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x215ac34e, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc, 0x2}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x0, 0x1, 0x40, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x9, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0xfff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x81, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x5}, {0x7011, 0xfff, 0x9, 0x1, 0x9, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x1, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x6, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0xb, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x81, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0x2f, 0x6}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x4, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x1, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x4, 0x24e, 0x4}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0xaacd, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x5}, {0x5, 0x1}, {}, {0x2}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x2000000)
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000cc0)=0x200, &(0x7f0000000d00)=0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffff001}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x56d, &(0x7f0000000540)="$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")
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3)
pwrite64(r3, 0x0, 0x0, 0x83)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)

120.447518ms ago: executing program 7 (id=1604):
bpf$ENABLE_STATS(0x20, 0x0, 0xfffffffffffffec4)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r0, 0x0, 0x5}, 0x18)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x5}, 0x18)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x4000, 0x2)

99.475638ms ago: executing program 7 (id=1605):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94)
creat(&(0x7f00000004c0)='./bus\x00', 0x20)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0)
preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0)

40.071159ms ago: executing program 7 (id=1606):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, 0x0, &(0x7f0000000240)=r1}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x4661, 0x800, 0x5, 0x20e}, &(0x7f0000000540)=<r3=>0x0, &(0x7f0000000680)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x1})
socket(0xa, 0x1, 0x0)
io_uring_enter(r2, 0x71bd, 0xdde3, 0x21, &(0x7f00000000c0)={[0x80]}, 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1010012, &(0x7f0000000500)={[], [{@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'ext4\x00'}}, {@measure}]}, 0x3, 0x4e2, &(0x7f0000000dc0)="$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")
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x1400e, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240), 0x0, 0x1}}, 0x40)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0)
add_key(&(0x7f00000001c0)='trusted\x00', &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)

0s ago: executing program 6 (id=1607):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x80, 0x2b, 0x1ff, 0x0, 0x7fffffff, 0x10000105})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x4, 0x2, 0x8, 0x0, 0x0, 0x0, 0xfd, 0x5}, 0xe)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={<r3=>0x0, 0x10, &(0x7f0000002300)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000440)=0x10)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000001c0)={r3, 0x1f, 0x9, 0x5}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={<r4=>0xffffffffffffffff})
ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB="fdffffffffcf3b316b9cffffffffffff7f"])
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x7000000)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
fcntl$lock(r6, 0x25, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x2})
fcntl$lock(r6, 0x26, &(0x7f00000001c0)={0x1, 0x2, 0x7, 0x46})
fcntl$lock(r6, 0x24, &(0x7f0000000080)={0x2, 0x1, 0xbb7, 0x800})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000040)={0x80, 0x2b, 0x5, 0x4, 0x7, 0xb})

kernel console output (not intermixed with test programs):

r, corrupted file size (i_pos 196, 2097152)
[   86.423408][ T5789] FAT-fs (loop0): Filesystem has been set read-only
[   86.508057][ T5789] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097152)
[   86.527072][ T5782] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem
[   86.709360][ T5782] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.770: invalid indirect mapped block 1 (level 1)
[   86.768842][ T5751] loop2: detected capacity change from 0 to 512
[   86.815470][ T5751] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   86.837342][ T5782] EXT4-fs (loop1): 1 truncate cleaned up
[   86.857493][ T5782] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   86.898434][ T5810] loop0: detected capacity change from 0 to 512
[   86.905443][ T5810] EXT4-fs: Ignoring removed mblk_io_submit option
[   86.921252][ T5810] EXT4-fs: Ignoring removed nomblk_io_submit option
[   86.946585][ T5810] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   86.955090][ T5810] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   86.968033][ T5813] loop3: detected capacity change from 0 to 164
[   86.996003][ T5813] ISOFS: unable to read i-node block
[   87.001361][ T5813] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[   87.019137][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.048419][ T5810] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.780: Allocating blocks 41-42 which overlap fs metadata
[   87.100662][ T5810] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.780: Failed to acquire dquot type 1
[   87.164396][ T5810] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[   87.189726][ T5810] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #12: comm syz.0.780: corrupted inode contents
[   87.190618][ T5540] usb 7-1: enqueue for inactive port 0
[   87.213266][ T5823] loop4: detected capacity change from 0 to 512
[   87.220813][ T5810] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #12: comm syz.0.780: mark_inode_dirty error
[   87.227421][ T5540] usb 7-1: enqueue for inactive port 0
[   87.239492][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.251066][ T5823] ext4: Unknown parameter 'euid<00000000000000060928'
[   87.258485][ T5810] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #12: comm syz.0.780: corrupted inode contents
[   87.273037][ T5810] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.780: mark_inode_dirty error
[   87.284932][ T5810] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #12: comm syz.0.780: corrupted inode contents
[   87.298765][ T5810] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[   87.307608][ T5810] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #12: comm syz.0.780: corrupted inode contents
[   87.320213][ T5540] vhci_hcd: vhci_device speed not set
[   87.325885][ T5810] EXT4-fs error (device loop0): ext4_truncate:4666: inode #12: comm syz.0.780: mark_inode_dirty error
[   87.337468][ T5810] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[   87.347906][ T5810] EXT4-fs (loop0): 1 truncate cleaned up
[   87.354365][ T5810] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.391032][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.432641][ T5839] loop0: detected capacity change from 0 to 1024
[   87.453874][ T5839] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   87.586496][ T5841] loop2: detected capacity change from 0 to 512
[   87.595567][ T5841] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   87.640552][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.657838][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.034639][ T5873] loop2: detected capacity change from 0 to 512
[   88.043706][ T5873] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   88.092085][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.115458][ T5879] wg2: entered promiscuous mode
[   88.120503][ T5879] wg2: entered allmulticast mode
[   88.148073][ T5884] loop3: detected capacity change from 0 to 512
[   88.154872][ T5884] ext4: Unknown parameter 'euid<00000000000000060928'
[   88.217151][ T5887] loop2: detected capacity change from 0 to 512
[   88.241256][ T5887] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.302044][ T5898] netlink: 60 bytes leftover after parsing attributes in process `syz.4.810'.
[   88.377654][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.623020][ T5913] FAULT_INJECTION: forcing a failure.
[   88.623020][ T5913] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   88.636258][ T5913] CPU: 0 UID: 0 PID: 5913 Comm: syz.0.816 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   88.636292][ T5913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   88.636308][ T5913] Call Trace:
[   88.636316][ T5913]  <TASK>
[   88.636326][ T5913]  __dump_stack+0x1d/0x30
[   88.636424][ T5913]  dump_stack_lvl+0xe8/0x140
[   88.636444][ T5913]  dump_stack+0x15/0x1b
[   88.636460][ T5913]  should_fail_ex+0x265/0x280
[   88.636489][ T5913]  should_fail+0xb/0x20
[   88.636515][ T5913]  should_fail_usercopy+0x1a/0x20
[   88.636570][ T5913]  _copy_from_user+0x1c/0xb0
[   88.636603][ T5913]  ___sys_sendmsg+0xc1/0x1d0
[   88.636650][ T5913]  __x64_sys_sendmsg+0xd4/0x160
[   88.636730][ T5913]  x64_sys_call+0x191e/0x2ff0
[   88.636756][ T5913]  do_syscall_64+0xd2/0x200
[   88.636792][ T5913]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   88.636851][ T5913]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   88.636888][ T5913]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.636910][ T5913] RIP: 0033:0x7f9d8d3beec9
[   88.636973][ T5913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   88.636992][ T5913] RSP: 002b:00007f9d8be27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   88.637017][ T5913] RAX: ffffffffffffffda RBX: 00007f9d8d615fa0 RCX: 00007f9d8d3beec9
[   88.637032][ T5913] RDX: 0000000000000000 RSI: 0000200000004440 RDI: 0000000000000006
[   88.637044][ T5913] RBP: 00007f9d8be27090 R08: 0000000000000000 R09: 0000000000000000
[   88.637056][ T5913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   88.637080][ T5913] R13: 00007f9d8d616038 R14: 00007f9d8d615fa0 R15: 00007fff15ad7b68
[   88.637105][ T5913]  </TASK>
[   88.838052][ T5889] loop3: detected capacity change from 0 to 512
[   88.857906][ T5889] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent
[   88.891133][ T5920] netlink: 9 bytes leftover after parsing attributes in process `syz.0.818'.
[   88.900658][ T5920] gretap0: entered promiscuous mode
[   88.908379][ T5889] loop3: detected capacity change from 0 to 256
[   88.926065][ T5889] vfat: Bad value for 'fmask'
[   89.111263][ T5915] loop1: detected capacity change from 0 to 512
[   89.114020][ T5915] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   89.160521][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.204814][ T5943] loop3: detected capacity change from 0 to 512
[   89.209737][ T5946] netlink: 'syz.1.828': attribute type 21 has an invalid length.
[   89.219093][ T5943] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   89.246082][ T5943] __quota_error: 302 callbacks suppressed
[   89.246103][ T5943] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[   89.262049][ T5943] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[   89.272047][ T5943] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.825: Failed to acquire dquot type 1
[   89.288118][ T5954] netlink: 36 bytes leftover after parsing attributes in process `syz.1.830'.
[   89.297172][ T5954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.830'.
[   89.307206][ T5943] EXT4-fs (loop3): 1 truncate cleaned up
[   89.317426][ T5954] loop1: detected capacity change from 0 to 512
[   89.324226][ T5954] EXT4-fs: Ignoring removed nobh option
[   89.328613][ T5943] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.342570][   T29] audit: type=1326 audit(135.548:6478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.4.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495a6ceec9 code=0x7ffc0000
[   89.344406][ T5954] EXT4-fs (loop1): failed to initialize system zone (-117)
[   89.365467][   T29] audit: type=1326 audit(135.548:6479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.4.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495a6ceec9 code=0x7ffc0000
[   89.372730][ T5954] EXT4-fs (loop1): mount failed
[   89.395770][   T29] audit: type=1326 audit(135.558:6480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.4.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f495a6ceec9 code=0x7ffc0000
[   89.423032][   T29] audit: type=1326 audit(135.558:6481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.4.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495a6ceec9 code=0x7ffc0000
[   89.445963][   T29] audit: type=1326 audit(135.558:6482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.4.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f495a6ceec9 code=0x7ffc0000
[   89.469373][   T29] audit: type=1326 audit(135.638:6483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.4.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495a6ceec9 code=0x7ffc0000
[   89.492144][   T29] audit: type=1326 audit(135.638:6484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.4.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495a6ceec9 code=0x7ffc0000
[   89.514950][   T29] audit: type=1326 audit(135.648:6485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.4.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f495a6ceec9 code=0x7ffc0000
[   89.557887][ T5959] loop1: detected capacity change from 0 to 256
[   89.565019][ T5959] FAT-fs (loop1): bogus logical sector size 133
[   89.571551][ T5959] FAT-fs (loop1): Can't find a valid FAT filesystem
[   89.600666][ T5963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.834'.
[   89.881817][ T5969] loop0: detected capacity change from 0 to 512
[   89.891576][ T5969] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   89.940420][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.975249][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.986619][ T5985] loop1: detected capacity change from 0 to 2048
[   90.012909][ T5985] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   90.230316][ T6005] netlink: 'syz.3.850': attribute type 21 has an invalid length.
[   90.238633][ T6005] netlink: 156 bytes leftover after parsing attributes in process `syz.3.850'.
[   90.246234][ T6007] 9pnet_fd: p9_fd_create_unix (6007): problem connecting socket: ./file0: -2
[   90.334512][ T6011] netlink: 12 bytes leftover after parsing attributes in process `syz.3.852'.
[   90.349287][ T6011] 8021q: adding VLAN 0 to HW filter on device bond2
[   90.365700][ T6011] vlan2: entered allmulticast mode
[   90.370949][ T6011] bond2: entered allmulticast mode
[   90.547115][ T6025] netlink: 36 bytes leftover after parsing attributes in process `syz.3.858'.
[   90.556138][ T6025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.858'.
[   90.567920][ T6025] loop3: detected capacity change from 0 to 512
[   90.574637][ T6025] EXT4-fs: Ignoring removed nobh option
[   90.581842][ T6025] EXT4-fs (loop3): failed to initialize system zone (-117)
[   90.589160][ T6025] EXT4-fs (loop3): mount failed
[   90.620715][ T6028] netlink: 10 bytes leftover after parsing attributes in process `syz.3.859'.
[   90.793303][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.807184][ T6042] FAULT_INJECTION: forcing a failure.
[   90.807184][ T6042] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   90.820480][ T6042] CPU: 1 UID: 0 PID: 6042 Comm: syz.4.866 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   90.820594][ T6042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   90.820610][ T6042] Call Trace:
[   90.820618][ T6042]  <TASK>
[   90.820627][ T6042]  __dump_stack+0x1d/0x30
[   90.820653][ T6042]  dump_stack_lvl+0xe8/0x140
[   90.820678][ T6042]  dump_stack+0x15/0x1b
[   90.820772][ T6042]  should_fail_ex+0x265/0x280
[   90.820797][ T6042]  should_fail+0xb/0x20
[   90.820898][ T6042]  should_fail_usercopy+0x1a/0x20
[   90.820931][ T6042]  _copy_from_user+0x1c/0xb0
[   90.821027][ T6042]  bpf_test_init+0xdf/0x160
[   90.821058][ T6042]  bpf_prog_test_run_flow_dissector+0x12c/0x340
[   90.821089][ T6042]  ? kstrtouint+0x76/0xc0
[   90.821124][ T6042]  ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10
[   90.821295][ T6042]  bpf_prog_test_run+0x22a/0x390
[   90.821328][ T6042]  __sys_bpf+0x4b9/0x7b0
[   90.821362][ T6042]  __x64_sys_bpf+0x41/0x50
[   90.821427][ T6042]  x64_sys_call+0x2aea/0x2ff0
[   90.821500][ T6042]  do_syscall_64+0xd2/0x200
[   90.821603][ T6042]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   90.821628][ T6042]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   90.821694][ T6042]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.821721][ T6042] RIP: 0033:0x7f495a6ceec9
[   90.821739][ T6042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   90.821762][ T6042] RSP: 002b:00007f495912f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   90.821860][ T6042] RAX: ffffffffffffffda RBX: 00007f495a925fa0 RCX: 00007f495a6ceec9
[   90.821877][ T6042] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a
[   90.821891][ T6042] RBP: 00007f495912f090 R08: 0000000000000000 R09: 0000000000000000
[   90.821911][ T6042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   90.821923][ T6042] R13: 00007f495a926038 R14: 00007f495a925fa0 R15: 00007ffe7b31d268
[   90.821942][ T6042]  </TASK>
[   91.076320][ T6051] loop1: detected capacity change from 0 to 1024
[   91.090254][ T6051] EXT4-fs: Ignoring removed nomblk_io_submit option
[   91.109481][ T6056] loop2: detected capacity change from 0 to 512
[   91.118958][ T6056] EXT4-fs: Ignoring removed nobh option
[   91.131585][ T6056] EXT4-fs (loop2): failed to initialize system zone (-117)
[   91.140284][ T6051] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   91.160308][ T6056] EXT4-fs (loop2): mount failed
[   91.163667][ T6059] Invalid ELF header magic: != ELF
[   91.231415][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.241409][ T6065] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6065 comm=syz.0.873
[   91.271424][ T6065] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=6065 comm=syz.0.873
[   91.284699][ T6065] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pid=6065 comm=syz.0.873
[   91.358789][ T6077] FAULT_INJECTION: forcing a failure.
[   91.358789][ T6077] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   91.371951][ T6077] CPU: 0 UID: 0 PID: 6077 Comm: syz.4.877 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   91.372032][ T6077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   91.372045][ T6077] Call Trace:
[   91.372053][ T6077]  <TASK>
[   91.372060][ T6077]  __dump_stack+0x1d/0x30
[   91.372087][ T6077]  dump_stack_lvl+0xe8/0x140
[   91.372108][ T6077]  dump_stack+0x15/0x1b
[   91.372172][ T6077]  should_fail_ex+0x265/0x280
[   91.372245][ T6077]  should_fail+0xb/0x20
[   91.372281][ T6077]  should_fail_usercopy+0x1a/0x20
[   91.372309][ T6077]  _copy_from_user+0x1c/0xb0
[   91.372371][ T6077]  ___sys_sendmsg+0xc1/0x1d0
[   91.372424][ T6077]  __x64_sys_sendmsg+0xd4/0x160
[   91.372460][ T6077]  x64_sys_call+0x191e/0x2ff0
[   91.372483][ T6077]  do_syscall_64+0xd2/0x200
[   91.372570][ T6077]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   91.372602][ T6077]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   91.372634][ T6077]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.372697][ T6077] RIP: 0033:0x7f495a6ceec9
[   91.372716][ T6077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   91.372739][ T6077] RSP: 002b:00007f495912f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   91.372829][ T6077] RAX: ffffffffffffffda RBX: 00007f495a925fa0 RCX: 00007f495a6ceec9
[   91.372846][ T6077] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[   91.372861][ T6077] RBP: 00007f495912f090 R08: 0000000000000000 R09: 0000000000000000
[   91.372877][ T6077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   91.372892][ T6077] R13: 00007f495a926038 R14: 00007f495a925fa0 R15: 00007ffe7b31d268
[   91.372917][ T6077]  </TASK>
[   91.609107][ T6087] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   91.670702][ T6095] loop3: detected capacity change from 0 to 128
[   91.698524][ T6095] FAULT_INJECTION: forcing a failure.
[   91.698524][ T6095] name failslab, interval 1, probability 0, space 0, times 0
[   91.711360][ T6095] CPU: 0 UID: 0 PID: 6095 Comm: syz.3.886 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   91.711396][ T6095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   91.711409][ T6095] Call Trace:
[   91.711415][ T6095]  <TASK>
[   91.711422][ T6095]  __dump_stack+0x1d/0x30
[   91.711447][ T6095]  dump_stack_lvl+0xe8/0x140
[   91.711472][ T6095]  dump_stack+0x15/0x1b
[   91.711494][ T6095]  should_fail_ex+0x265/0x280
[   91.711561][ T6095]  should_failslab+0x8c/0xb0
[   91.711587][ T6095]  kmem_cache_alloc_noprof+0x50/0x310
[   91.711674][ T6095]  ? audit_log_start+0x365/0x6c0
[   91.711740][ T6095]  audit_log_start+0x365/0x6c0
[   91.711773][ T6095]  audit_seccomp+0x48/0x100
[   91.711886][ T6095]  ? __seccomp_filter+0x68c/0x10d0
[   91.711946][ T6095]  __seccomp_filter+0x69d/0x10d0
[   91.711975][ T6095]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   91.712011][ T6095]  ? vfs_write+0x7e8/0x960
[   91.712039][ T6095]  ? __rcu_read_unlock+0x4f/0x70
[   91.712078][ T6095]  ? __fget_files+0x184/0x1c0
[   91.712111][ T6095]  __secure_computing+0x82/0x150
[   91.712178][ T6095]  syscall_trace_enter+0xcf/0x1e0
[   91.712210][ T6095]  do_syscall_64+0xac/0x200
[   91.712244][ T6095]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   91.712347][ T6095]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   91.712387][ T6095]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.712447][ T6095] RIP: 0033:0x7f7de931eec9
[   91.712465][ T6095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   91.712488][ T6095] RSP: 002b:00007f7de7d7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[   91.712582][ T6095] RAX: ffffffffffffffda RBX: 00007f7de9575fa0 RCX: 00007f7de931eec9
[   91.712595][ T6095] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000009
[   91.712607][ T6095] RBP: 00007f7de7d7f090 R08: 0000000000000000 R09: 0000000000000000
[   91.712653][ T6095] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001
[   91.712705][ T6095] R13: 00007f7de9576038 R14: 00007f7de9575fa0 R15: 00007fff6bb2ac98
[   91.712800][ T6095]  </TASK>
[   91.714954][ T6095] bio_check_eod: 97 callbacks suppressed
[   91.714968][ T6095] syz.3.886: attempt to access beyond end of device
[   91.714968][ T6095] loop3: rw=34817, sector=121, nr_sectors = 120 limit=128
[   91.924878][ T6090] loop4: detected capacity change from 0 to 512
[   91.959278][ T6090] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   91.973453][   T37] kworker/u8:2: attempt to access beyond end of device
[   91.973453][   T37] loop3: rw=1, sector=241, nr_sectors = 800 limit=128
[   92.035049][ T6097] loop2: detected capacity change from 0 to 512
[   92.041965][ T6097] msdos: Bad value for 'uid'
[   92.046583][ T6097] msdos: Bad value for 'uid'
[   92.058578][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.075157][ T6108] loop4: detected capacity change from 0 to 128
[   92.100028][ T6108] syz.4.890: attempt to access beyond end of device
[   92.100028][ T6108] loop4: rw=34817, sector=121, nr_sectors = 120 limit=128
[   92.130537][   T37] kworker/u8:2: attempt to access beyond end of device
[   92.130537][   T37] loop4: rw=1, sector=241, nr_sectors = 800 limit=128
[   92.157625][ T6111] FAULT_INJECTION: forcing a failure.
[   92.157625][ T6111] name failslab, interval 1, probability 0, space 0, times 0
[   92.170343][ T6111] CPU: 1 UID: 0 PID: 6111 Comm: syz.1.891 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   92.170372][ T6111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   92.170384][ T6111] Call Trace:
[   92.170391][ T6111]  <TASK>
[   92.170398][ T6111]  __dump_stack+0x1d/0x30
[   92.170423][ T6111]  dump_stack_lvl+0xe8/0x140
[   92.170471][ T6111]  dump_stack+0x15/0x1b
[   92.170491][ T6111]  should_fail_ex+0x265/0x280
[   92.170520][ T6111]  should_failslab+0x8c/0xb0
[   92.170544][ T6111]  kmem_cache_alloc_noprof+0x50/0x310
[   92.170635][ T6111]  ? sk_prot_alloc+0x3f/0x190
[   92.170665][ T6111]  sk_prot_alloc+0x3f/0x190
[   92.170688][ T6111]  sk_alloc+0x34/0x360
[   92.170711][ T6111]  inet6_create+0x3bd/0x870
[   92.170759][ T6111]  __sock_create+0x2e9/0x5b0
[   92.170785][ T6111]  __sys_socket+0xb0/0x180
[   92.170808][ T6111]  __x64_sys_socket+0x3f/0x50
[   92.170827][ T6111]  x64_sys_call+0x1147/0x2ff0
[   92.170860][ T6111]  do_syscall_64+0xd2/0x200
[   92.170898][ T6111]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   92.170928][ T6111]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   92.170960][ T6111]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.171034][ T6111] RIP: 0033:0x7fe43372eec9
[   92.171096][ T6111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   92.171128][ T6111] RSP: 002b:00007fe432197038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[   92.171148][ T6111] RAX: ffffffffffffffda RBX: 00007fe433985fa0 RCX: 00007fe43372eec9
[   92.171160][ T6111] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000a
[   92.171175][ T6111] RBP: 00007fe432197090 R08: 0000000000000000 R09: 0000000000000000
[   92.171264][ T6111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   92.171280][ T6111] R13: 00007fe433986038 R14: 00007fe433985fa0 R15: 00007ffd2f0fe6d8
[   92.171299][ T6111]  </TASK>
[   92.178360][ T6115] loop3: detected capacity change from 0 to 128
[   92.182281][ T6113] loop4: detected capacity change from 0 to 4096
[   92.385929][ T6113] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   92.463463][ T6120] loop3: detected capacity change from 0 to 512
[   92.489962][ T6120] ext4: Unknown parameter 'euid<00000000000000060928'
[   92.547270][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.799539][ T6133] loop3: detected capacity change from 0 to 512
[   92.965275][ T6166] loop0: detected capacity change from 0 to 512
[   92.971892][ T6166] ext4: Unknown parameter 'euid<00000000000000060928'
[   93.156943][ T6180] FAULT_INJECTION: forcing a failure.
[   93.156943][ T6180] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   93.170143][ T6180] CPU: 1 UID: 0 PID: 6180 Comm: syz.4.916 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   93.170172][ T6180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   93.170185][ T6180] Call Trace:
[   93.170192][ T6180]  <TASK>
[   93.170200][ T6180]  __dump_stack+0x1d/0x30
[   93.170225][ T6180]  dump_stack_lvl+0xe8/0x140
[   93.170250][ T6180]  dump_stack+0x15/0x1b
[   93.170285][ T6180]  should_fail_ex+0x265/0x280
[   93.170307][ T6180]  should_fail+0xb/0x20
[   93.170325][ T6180]  should_fail_usercopy+0x1a/0x20
[   93.170434][ T6180]  _copy_from_user+0x1c/0xb0
[   93.170500][ T6180]  autofs_dev_ioctl+0xdd/0x6a0
[   93.170526][ T6180]  ? __pfx_autofs_dev_ioctl+0x10/0x10
[   93.170635][ T6180]  __se_sys_ioctl+0xce/0x140
[   93.170652][ T6180]  __x64_sys_ioctl+0x43/0x50
[   93.170668][ T6180]  x64_sys_call+0x1816/0x2ff0
[   93.170686][ T6180]  do_syscall_64+0xd2/0x200
[   93.170723][ T6180]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   93.170744][ T6180]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   93.170777][ T6180]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.170796][ T6180] RIP: 0033:0x7f495a6ceec9
[   93.170809][ T6180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   93.170876][ T6180] RSP: 002b:00007f495912f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   93.170895][ T6180] RAX: ffffffffffffffda RBX: 00007f495a925fa0 RCX: 00007f495a6ceec9
[   93.170906][ T6180] RDX: 0000200000001040 RSI: 00000000c018937e RDI: 0000000000000005
[   93.170916][ T6180] RBP: 00007f495912f090 R08: 0000000000000000 R09: 0000000000000000
[   93.170926][ T6180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   93.170936][ T6180] R13: 00007f495a926038 R14: 00007f495a925fa0 R15: 00007ffe7b31d268
[   93.170953][ T6180]  </TASK>
[   93.509669][ T6186] loop4: detected capacity change from 0 to 512
[   93.562223][ T6190] loop4: detected capacity change from 0 to 1024
[   93.569138][ T6190] EXT4-fs: Ignoring removed nomblk_io_submit option
[   93.593809][ T6190] debugfs: 'ttyS3' already exists in 'caif_serial'
[   93.648399][ T6201] netlink: 'syz.4.924': attribute type 4 has an invalid length.
[   93.658049][ T6201] loop4: detected capacity change from 0 to 256
[   93.665668][ T6202] netlink: 'syz.4.924': attribute type 4 has an invalid length.
[   93.747782][ T6214] loop3: detected capacity change from 0 to 256
[   93.900586][ T6235] loop2: detected capacity change from 0 to 1024
[   93.907298][ T6235] EXT4-fs: inline encryption not supported
[   93.914123][ T6235] EXT4-fs: Ignoring removed bh option
[   93.923336][ T3303] FAT-fs (loop3): error, corrupted directory (invalid entries)
[   93.931226][ T3303] FAT-fs (loop3): Filesystem has been set read-only
[   93.938413][ T3303] FAT-fs (loop3): error, corrupted directory (invalid entries)
[   94.173355][ T3439] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.242601][ T3439] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.281462][ T3439] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.353075][   T29] kauditd_printk_skb: 931 callbacks suppressed
[   94.353093][   T29] audit: type=1400 audit(140.568:7415): avc:  denied  { mounton } for  pid=6247 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   94.391313][ T3439] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.672409][ T3439] bond0 (unregistering): Released all slaves
[   94.681176][ T3439] bond1 (unregistering): Released all slaves
[   94.689522][ T3439] bond2 (unregistering): Released all slaves
[   94.702087][ T6257] FAULT_INJECTION: forcing a failure.
[   94.702087][ T6257] name failslab, interval 1, probability 0, space 0, times 0
[   94.714793][ T6257] CPU: 0 UID: 0 PID: 6257 Comm: syz.4.943 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   94.714825][ T6257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   94.714841][ T6257] Call Trace:
[   94.714849][ T6257]  <TASK>
[   94.714858][ T6257]  __dump_stack+0x1d/0x30
[   94.714884][ T6257]  dump_stack_lvl+0xe8/0x140
[   94.714932][ T6257]  dump_stack+0x15/0x1b
[   94.714947][ T6257]  should_fail_ex+0x265/0x280
[   94.714968][ T6257]  ? __hw_addr_add_ex+0x162/0x440
[   94.714987][ T6257]  should_failslab+0x8c/0xb0
[   94.715110][ T6257]  __kmalloc_cache_noprof+0x4c/0x320
[   94.715214][ T6257]  __hw_addr_add_ex+0x162/0x440
[   94.715234][ T6257]  ? __pfx_geneve_setup+0x10/0x10
[   94.715275][ T6257]  dev_addr_init+0xb1/0x120
[   94.715296][ T6257]  alloc_netdev_mqs+0x1c5/0xa30
[   94.715321][ T6257]  rtnl_create_link+0x239/0x710
[   94.715347][ T6257]  rtnl_newlink_create+0x14c/0x620
[   94.715408][ T6257]  ? __list_del_entry_valid_or_report+0x65/0x130
[   94.715437][ T6257]  ? __mutex_lock+0x25d/0xcc0
[   94.715465][ T6257]  rtnl_newlink+0xf29/0x12d0
[   94.715533][ T6257]  ? xas_load+0x413/0x430
[   94.715559][ T6257]  ? __rcu_read_unlock+0x4f/0x70
[   94.715577][ T6257]  ? xa_load+0xb1/0xe0
[   94.715591][ T6257]  ? __rcu_read_unlock+0x4f/0x70
[   94.715608][ T6257]  ? avc_has_perm_noaudit+0x1b1/0x200
[   94.715705][ T6257]  ? cred_has_capability+0x210/0x280
[   94.715727][ T6257]  ? selinux_capable+0x31/0x40
[   94.715751][ T6257]  ? security_capable+0x83/0x90
[   94.715772][ T6257]  ? ns_capable+0x7d/0xb0
[   94.715857][ T6257]  ? __pfx_rtnl_newlink+0x10/0x10
[   94.715899][ T6257]  rtnetlink_rcv_msg+0x5fb/0x6d0
[   94.715981][ T6257]  ? avc_has_perm_noaudit+0x1b1/0x200
[   94.716087][ T6257]  netlink_rcv_skb+0x120/0x220
[   94.716108][ T6257]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   94.716141][ T6257]  rtnetlink_rcv+0x1c/0x30
[   94.716182][ T6257]  netlink_unicast+0x5c0/0x690
[   94.716203][ T6257]  netlink_sendmsg+0x58b/0x6b0
[   94.716235][ T6257]  ? __pfx_netlink_sendmsg+0x10/0x10
[   94.716257][ T6257]  __sock_sendmsg+0x142/0x180
[   94.716286][ T6257]  ____sys_sendmsg+0x31e/0x4e0
[   94.716343][ T6257]  ___sys_sendmsg+0x17b/0x1d0
[   94.716415][ T6257]  __x64_sys_sendmsg+0xd4/0x160
[   94.716451][ T6257]  x64_sys_call+0x191e/0x2ff0
[   94.716469][ T6257]  do_syscall_64+0xd2/0x200
[   94.716496][ T6257]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   94.716585][ T6257]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   94.716610][ T6257]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.716639][ T6257] RIP: 0033:0x7f495a6ceec9
[   94.716652][ T6257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   94.716684][ T6257] RSP: 002b:00007f495912f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   94.716700][ T6257] RAX: ffffffffffffffda RBX: 00007f495a925fa0 RCX: 00007f495a6ceec9
[   94.716710][ T6257] RDX: 0000000000040800 RSI: 00002000000002c0 RDI: 0000000000000004
[   94.716721][ T6257] RBP: 00007f495912f090 R08: 0000000000000000 R09: 0000000000000000
[   94.716732][ T6257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   94.716742][ T6257] R13: 00007f495a926038 R14: 00007f495a925fa0 R15: 00007ffe7b31d268
[   94.716758][ T6257]  </TASK>
[   94.775496][ T6247] chnl_net:caif_netlink_parms(): no params data found
[   94.807932][   T29] audit: type=1326 audit(141.018:7416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6260 comm="syz.4.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495a6ceec9 code=0x7ffc0000
[   95.064802][   T29] audit: type=1326 audit(141.028:7417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6260 comm="syz.4.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f495a6ceec9 code=0x7ffc0000
[   95.087546][   T29] audit: type=1326 audit(141.028:7418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6260 comm="syz.4.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495a6ceec9 code=0x7ffc0000
[   95.110549][   T29] audit: type=1326 audit(141.028:7419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6260 comm="syz.4.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f495a6d0de7 code=0x7ffc0000
[   95.133180][   T29] audit: type=1326 audit(141.028:7420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6260 comm="syz.4.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f495a6d0d5c code=0x7ffc0000
[   95.155903][   T29] audit: type=1326 audit(141.028:7421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6260 comm="syz.4.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f495a6d0c94 code=0x7ffc0000
[   95.178543][   T29] audit: type=1326 audit(141.028:7422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6260 comm="syz.4.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f495a6d0c94 code=0x7ffc0000
[   95.201212][   T29] audit: type=1326 audit(141.028:7423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6260 comm="syz.4.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f495a6cdb2a code=0x7ffc0000
[   95.223925][   T29] audit: type=1326 audit(141.028:7424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6260 comm="syz.4.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495a6ceec9 code=0x7ffc0000
[   95.272463][ T6277] loop1: detected capacity change from 0 to 1024
[   95.280546][ T6277] EXT4-fs: Ignoring removed nomblk_io_submit option
[   95.305148][ T3439] hsr_slave_0: left promiscuous mode
[   95.317552][ T3439] hsr_slave_1: left promiscuous mode
[   95.342855][ T3439] veth1_macvtap: left promiscuous mode
[   95.348561][ T3439] veth0_macvtap: left promiscuous mode
[   95.350176][ T6287] loop2: detected capacity change from 0 to 256
[   95.355534][ T3439] veth1_vlan: left promiscuous mode
[   95.368419][ T3439] veth0_vlan: left promiscuous mode
[   95.535684][ T6292] debugfs: 'ttyS3' already exists in 'caif_serial'
[   95.576878][ T6247] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.584038][ T6247] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.591382][ T6247] bridge_slave_0: entered allmulticast mode
[   95.597971][ T6247] bridge_slave_0: entered promiscuous mode
[   95.605061][ T6247] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.612303][ T6247] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.619831][ T6247] bridge_slave_1: entered allmulticast mode
[   95.626924][ T6247] bridge_slave_1: entered promiscuous mode
[   95.652854][ T6299] loop4: detected capacity change from 0 to 1024
[   95.665022][ T6301] __nla_validate_parse: 10 callbacks suppressed
[   95.665040][ T6301] netlink: 24 bytes leftover after parsing attributes in process `syz.0.950'.
[   95.665685][ T6299] EXT4-fs: inline encryption not supported
[   95.684380][ T3317] FAT-fs (loop2): error, corrupted directory (invalid entries)
[   95.686440][ T6299] EXT4-fs: Ignoring removed bh option
[   95.693830][ T3317] FAT-fs (loop2): Filesystem has been set read-only
[   95.706383][ T3317] FAT-fs (loop2): error, corrupted directory (invalid entries)
[   95.708594][ T6247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.724845][ T6247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.734063][ T6301] netlink: 28 bytes leftover after parsing attributes in process `syz.0.950'.
[   95.745995][ T6301] netem: change failed
[   95.757693][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.950'.
[   95.785537][ T6247] team0: Port device team_slave_0 added
[   95.793105][ T6247] team0: Port device team_slave_1 added
[   95.827819][ T6247] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.834879][ T6247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.861019][ T6247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.872469][ T6247] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.879445][ T6247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.905391][ T6247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.938293][ T6247] hsr_slave_0: entered promiscuous mode
[   95.939275][ T6311] loop0: detected capacity change from 0 to 512
[   95.950082][ T6247] hsr_slave_1: entered promiscuous mode
[   95.956171][ T6247] debugfs: 'hsr0' already exists in 'hsr'
[   95.961988][ T6247] Cannot create hsr debugfs directory
[   95.976712][ T6311] ext4: Unknown parameter 'euid<00000000000000060928'
[   96.027029][ T6315] loop4: detected capacity change from 0 to 1024
[   96.033899][ T6315] EXT4-fs: Ignoring removed nomblk_io_submit option
[   96.043373][ T6314] infiniband !yz!: set down
[   96.047926][ T6314] infiniband !yz!: added team_slave_0
[   96.074667][ T6314] RDS/IB: !yz!: added
[   96.084562][ T6314] smc: adding ib device !yz! with port count 1
[   96.090883][ T6314] smc:    ib device !yz! port 1 has pnetid 
[   96.185380][ T6247] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   96.202854][ T6247] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   96.224007][ T6247] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   96.243572][ T6247] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   96.335749][ T6247] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.363266][ T6325] netlink: 4380 bytes leftover after parsing attributes in process `syz.0.962'.
[   96.385306][ T6247] 8021q: adding VLAN 0 to HW filter on device team0
[   96.426425][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.433551][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.442976][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.450082][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.473185][ T6247] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   96.570997][ T3439] bond0 (unregistering): Released all slaves
[   96.602433][ T6247] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.646344][ T6351] loop0: detected capacity change from 0 to 256
[   96.654289][ T3439] hsr_slave_0: left promiscuous mode
[   96.663343][ T3439] hsr_slave_1: left promiscuous mode
[   96.802342][ T6362] loop4: detected capacity change from 0 to 1024
[   96.809209][ T6362] EXT4-fs: Ignoring removed nomblk_io_submit option
[   96.831971][ T6326] chnl_net:caif_netlink_parms(): no params data found
[   96.901390][ T3306] FAT-fs (loop0): error, corrupted directory (invalid entries)
[   96.909180][ T3306] FAT-fs (loop0): Filesystem has been set read-only
[   96.922600][ T3306] FAT-fs (loop0): error, corrupted directory (invalid entries)
[   96.930783][ T6326] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.938012][ T6326] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.945602][ T6326] bridge_slave_0: entered allmulticast mode
[   96.952220][ T6326] bridge_slave_0: entered promiscuous mode
[   96.960900][ T6326] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.968058][ T6326] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.982471][ T6326] bridge_slave_1: entered allmulticast mode
[   96.989229][ T6326] bridge_slave_1: entered promiscuous mode
[   97.019077][ T6326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   97.039292][ T6377] loop4: detected capacity change from 0 to 4096
[   97.049669][ T6326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   97.115308][ T6326] team0: Port device team_slave_0 added
[   97.124142][ T6247] veth0_vlan: entered promiscuous mode
[   97.133417][ T6326] team0: Port device team_slave_1 added
[   97.163646][ T6247] veth1_vlan: entered promiscuous mode
[   97.172067][ T6326] batman_adv: batadv0: Adding interface: batadv_slave_0
[   97.179079][ T6326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.205185][ T6326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.209538][ T6384] netlink: 24 bytes leftover after parsing attributes in process `syz.1.971'.
[   97.216964][ T6326] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.231886][ T6326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.257835][ T6326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   97.273594][ T6384] netlink: 28 bytes leftover after parsing attributes in process `syz.1.971'.
[   97.282823][ T6384] netem: change failed
[   97.295685][ T6247] veth0_macvtap: entered promiscuous mode
[   97.320730][   T57] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.367665][ T6247] veth1_macvtap: entered promiscuous mode
[   97.394829][ T6326] hsr_slave_0: entered promiscuous mode
[   97.411668][ T6326] hsr_slave_1: entered promiscuous mode
[   97.417609][ T6393] netlink: 48 bytes leftover after parsing attributes in process `syz.1.975'.
[   97.427780][ T6326] debugfs: 'hsr0' already exists in 'hsr'
[   97.433565][ T6326] Cannot create hsr debugfs directory
[   97.451277][   T57] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.460902][ T6398] loop1: detected capacity change from 0 to 512
[   97.471229][ T6388] loop4: detected capacity change from 0 to 512
[   97.473208][ T6247] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.486473][ T6398] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   97.496919][ T6398] EXT4-fs (loop1): warning: maximal mount count reached, running e2fsck is recommended
[   97.509170][ T6398] EXT4-fs error (device loop1): ext4_orphan_get:1392: comm syz.1.976: inode #15: comm syz.1.976: iget: illegal inode #
[   97.525907][ T6398] EXT4-fs (loop1): Remounting filesystem read-only
[   97.535209][   T57] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.570263][ T6247] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.619858][   T57] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.634138][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.652149][   T37] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.667401][ T6414] loop4: detected capacity change from 0 to 1024
[   97.669688][   T37] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.684295][ T6414] EXT4-fs: Ignoring removed nomblk_io_submit option
[   97.702238][   T37] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.711643][ T6326] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   97.721126][ T6326] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   97.761786][ T6326] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   97.780338][ T6420] program syz.1.980 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   97.782886][ T6326] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   97.909245][ T6435] netlink: 14 bytes leftover after parsing attributes in process `syz.1.983'.
[   97.987203][ T6326] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.999958][ T6326] 8021q: adding VLAN 0 to HW filter on device team0
[   98.009442][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.016559][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.025936][   T57] tipc: Disabling bearer <udp:£>
[   98.031146][   T57] tipc: Left network mode
[   98.033403][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.042573][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.113562][   T57] hsr_slave_0: left promiscuous mode
[   98.119407][   T57] hsr_slave_1: left promiscuous mode
[   98.125340][ T6441] loop1: detected capacity change from 0 to 1024
[   98.133802][   T57] veth1_macvtap: left promiscuous mode
[   98.137726][ T6443] loop4: detected capacity change from 0 to 1024
[   98.146293][ T6441] EXT4-fs: Ignoring removed nomblk_io_submit option
[   98.146364][ T6443] EXT4-fs: Ignoring removed nomblk_io_submit option
[   98.159238][   T57] veth0_macvtap: left promiscuous mode
[   98.165159][   T57] veth1_vlan: left promiscuous mode
[   98.170899][   T57] veth0_vlan: left promiscuous mode
[   98.277643][ T6392] chnl_net:caif_netlink_parms(): no params data found
[   98.328647][ T6392] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.336238][ T6392] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.343737][ T6392] bridge_slave_0: entered allmulticast mode
[   98.351174][ T6392] bridge_slave_0: entered promiscuous mode
[   98.358060][ T6392] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.365389][ T6392] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.372634][ T6392] bridge_slave_1: entered allmulticast mode
[   98.379025][ T6392] bridge_slave_1: entered promiscuous mode
[   98.409554][ T6392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   98.424077][ T6392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.435398][ T6326] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.480917][ T6392] team0: Port device team_slave_0 added
[   98.494899][ T6392] team0: Port device team_slave_1 added
[   98.530575][ T6392] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.537699][ T6392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.563755][ T6392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   98.578432][ T6392] batman_adv: batadv0: Adding interface: batadv_slave_1
[   98.585601][ T6392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.611683][ T6392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.647754][ T6468] loop4: detected capacity change from 0 to 512
[   98.670086][ T6468] ext4: Unknown parameter 'euid<00000000000000060928'
[   98.678269][ T6392] hsr_slave_0: entered promiscuous mode
[   98.684939][ T6392] hsr_slave_1: entered promiscuous mode
[   98.691753][ T6392] debugfs: 'hsr0' already exists in 'hsr'
[   98.697548][ T6392] Cannot create hsr debugfs directory
[   98.894039][ T6326] veth0_vlan: entered promiscuous mode
[   98.928779][ T6326] veth1_vlan: entered promiscuous mode
[   98.995856][ T6392] netdevsim netdevsim7 netdevsim0: renamed from eth0
[   99.003244][ T6501] loop5: detected capacity change from 0 to 1024
[   99.014167][ T6501] EXT4-fs: Ignoring removed nomblk_io_submit option
[   99.022120][ T6392] netdevsim netdevsim7 netdevsim1: renamed from eth1
[   99.040372][ T6392] netdevsim netdevsim7 netdevsim2: renamed from eth2
[   99.059948][ T6392] netdevsim netdevsim7 netdevsim3: renamed from eth3
[   99.087401][ T6501] debugfs: 'ttyS3' already exists in 'caif_serial'
[   99.095990][ T6326] veth0_macvtap: entered promiscuous mode
[   99.120398][ T6326] veth1_macvtap: entered promiscuous mode
[   99.128593][ T6513] SELinux: ebitmap: truncated map
[   99.134698][ T6513] SELinux: failed to load policy
[   99.150325][ T6326] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.166856][ T6326] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.181252][   T37] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.217876][   T37] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.234208][ T6392] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.245353][ T6524] loop5: detected capacity change from 0 to 128
[   99.252195][   T37] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.266455][ T6392] 8021q: adding VLAN 0 to HW filter on device team0
[   99.273798][   T37] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.287271][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.294453][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.310333][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.317501][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.325705][ T6530] loop6: detected capacity change from 0 to 1024
[   99.333056][ T6530] journal_path: Lookup failure for './file0'
[   99.339125][ T6530] EXT4-fs: error: could not find journal device path
[   99.341232][ T6532] FAULT_INJECTION: forcing a failure.
[   99.341232][ T6532] name failslab, interval 1, probability 0, space 0, times 0
[   99.358491][ T6532] CPU: 1 UID: 0 PID: 6532 Comm: syz.4.1004 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   99.358522][ T6532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   99.358538][ T6532] Call Trace:
[   99.358545][ T6532]  <TASK>
[   99.358555][ T6532]  __dump_stack+0x1d/0x30
[   99.358625][ T6532]  dump_stack_lvl+0xe8/0x140
[   99.358651][ T6532]  dump_stack+0x15/0x1b
[   99.358671][ T6532]  should_fail_ex+0x265/0x280
[   99.358719][ T6532]  should_failslab+0x8c/0xb0
[   99.358773][ T6532]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[   99.358812][ T6532]  ? sidtab_sid2str_get+0xa0/0x130
[   99.358847][ T6532]  kmemdup_noprof+0x2b/0x70
[   99.358881][ T6532]  sidtab_sid2str_get+0xa0/0x130
[   99.358909][ T6532]  security_sid_to_context_core+0x1eb/0x2e0
[   99.358971][ T6532]  security_sid_to_context+0x27/0x40
[   99.358996][ T6532]  selinux_lsmprop_to_secctx+0x67/0xf0
[   99.359135][ T6532]  security_lsmprop_to_secctx+0x43/0x80
[   99.359169][ T6532]  audit_log_task_context+0x77/0x190
[   99.359236][ T6532]  audit_log_task+0xf4/0x250
[   99.359268][ T6532]  audit_seccomp+0x61/0x100
[   99.359294][ T6532]  ? __seccomp_filter+0x68c/0x10d0
[   99.359361][ T6532]  __seccomp_filter+0x69d/0x10d0
[   99.359386][ T6532]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   99.359416][ T6532]  ? vfs_write+0x7e8/0x960
[   99.359440][ T6532]  ? __rcu_read_unlock+0x4f/0x70
[   99.359463][ T6532]  ? __fget_files+0x184/0x1c0
[   99.359534][ T6532]  __secure_computing+0x82/0x150
[   99.359557][ T6532]  syscall_trace_enter+0xcf/0x1e0
[   99.359584][ T6532]  do_syscall_64+0xac/0x200
[   99.359630][ T6532]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   99.359681][ T6532]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   99.359785][ T6532]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.359810][ T6532] RIP: 0033:0x7f495a6cd8dc
[   99.359827][ T6532] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   99.359914][ T6532] RSP: 002b:00007f495912f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   99.359968][ T6532] RAX: ffffffffffffffda RBX: 00007f495a925fa0 RCX: 00007f495a6cd8dc
[   99.359982][ T6532] RDX: 000000000000000f RSI: 00007f495912f0a0 RDI: 0000000000000006
[   99.359996][ T6532] RBP: 00007f495912f090 R08: 0000000000000000 R09: 0000000000000000
[   99.360009][ T6532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   99.360037][ T6532] R13: 00007f495a926038 R14: 00007f495a925fa0 R15: 00007ffe7b31d268
[   99.360060][ T6532]  </TASK>
[   99.603279][ T6532] audit_panic: 222 callbacks suppressed
[   99.603296][ T6532] audit: error in audit_log_task_context
[   99.622667][   T29] audit: type=1326 audit(145.558:7647): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6531 comm="syz.4.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f495a6cd8dc code=0x7ffc0000
[   99.643120][   T29] audit: type=1326 audit(145.838:7648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6531 comm="syz.4.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f495a6cd97f code=0x7ffc0000
[   99.665781][   T29] audit: type=1326 audit(145.838:7649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6531 comm="syz.4.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f495a6cdb2a code=0x7ffc0000
[   99.688705][   T29] audit: type=1326 audit(145.838:7650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6531 comm="syz.4.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495a6ceec9 code=0x7ffc0000
[   99.711633][   T29] audit: type=1326 audit(145.838:7651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6531 comm="syz.4.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495a6ceec9 code=0x7ffc0000
[   99.740093][ T6392] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   99.750516][ T6392] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   99.778521][   T29] audit: type=1326 audit(145.988:7652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6539 comm="syz.6.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9226b4eec9 code=0x7ffc0000
[   99.801615][   T29] audit: type=1326 audit(145.988:7653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6539 comm="syz.6.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9226b4eec9 code=0x7ffc0000
[   99.857838][ T6540] loop6: detected capacity change from 0 to 512
[   99.876466][ T6543] loop5: detected capacity change from 0 to 1024
[   99.894210][ T6540] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1008'.
[   99.903293][ T6540] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1008'.
[   99.906851][ T6543] EXT4-fs: Ignoring removed nomblk_io_submit option
[   99.913379][   T29] audit: type=1326 audit(145.988:7654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6539 comm="syz.6.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9226b4eec9 code=0x7ffc0000
[   99.941757][   T29] audit: type=1326 audit(145.988:7655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6539 comm="syz.6.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9226b4eec9 code=0x7ffc0000
[   99.946290][ T6392] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.155431][ T6567] loop6: detected capacity change from 0 to 1024
[  100.164842][ T6569] loop1: detected capacity change from 0 to 1024
[  100.170825][ T6392] veth0_vlan: entered promiscuous mode
[  100.177493][ T6567] EXT4-fs: Ignoring removed nomblk_io_submit option
[  100.186372][ T6569] EXT4-fs: Ignoring removed nomblk_io_submit option
[  100.192205][ T6392] veth1_vlan: entered promiscuous mode
[  100.232449][ T6392] veth0_macvtap: entered promiscuous mode
[  100.259393][ T6392] veth1_macvtap: entered promiscuous mode
[  100.273763][ T6392] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.283660][ T6392] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.329544][   T37] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.344781][   T37] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.365799][   T37] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.374214][ T6581] loop5: detected capacity change from 0 to 1024
[  100.377302][   T37] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.395805][ T6581] journal_path: Lookup failure for './file0'
[  100.401970][ T6581] EXT4-fs: error: could not find journal device path
[  100.435461][ T6586] loop6: detected capacity change from 0 to 4096
[  100.493630][ T6592] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  100.573173][ T6596] loop5: detected capacity change from 0 to 1024
[  100.590707][ T6596] EXT4-fs: Ignoring removed nomblk_io_submit option
[  100.626592][ T6602] netlink: 'syz.6.1023': attribute type 6 has an invalid length.
[  100.644862][ T6602] netlink: 'syz.6.1023': attribute type 6 has an invalid length.
[  100.665513][ T6606] loop7: detected capacity change from 0 to 1024
[  100.682596][ T6606] EXT4-fs: Ignoring removed nomblk_io_submit option
[  100.700365][ T6608] loop4: detected capacity change from 0 to 512
[  100.728068][ T6608] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  100.748108][ T6608] System zones: 0-2, 18-18, 34-35
[  100.818475][ T6608] netlink: 'syz.4.1025': attribute type 29 has an invalid length.
[  100.858969][ T6608] netlink: 'syz.4.1025': attribute type 29 has an invalid length.
[  100.879234][ T6615] FAULT_INJECTION: forcing a failure.
[  100.879234][ T6615] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  100.892572][ T6615] CPU: 1 UID: 0 PID: 6615 Comm: syz.6.1027 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  100.892678][ T6615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  100.892691][ T6615] Call Trace:
[  100.892698][ T6615]  <TASK>
[  100.892706][ T6615]  __dump_stack+0x1d/0x30
[  100.892732][ T6615]  dump_stack_lvl+0xe8/0x140
[  100.892826][ T6615]  dump_stack+0x15/0x1b
[  100.892869][ T6615]  should_fail_ex+0x265/0x280
[  100.892900][ T6615]  should_fail_alloc_page+0xf2/0x100
[  100.892937][ T6615]  __alloc_frozen_pages_noprof+0xff/0x360
[  100.892987][ T6615]  alloc_pages_mpol+0xb3/0x250
[  100.893029][ T6615]  folio_alloc_mpol_noprof+0x39/0x80
[  100.893143][ T6615]  shmem_get_folio_gfp+0x3cf/0xd60
[  100.893191][ T6615]  shmem_fallocate+0x57c/0x840
[  100.893232][ T6615]  vfs_fallocate+0x3b6/0x400
[  100.893264][ T6615]  __x64_sys_fallocate+0x7a/0xd0
[  100.893346][ T6615]  x64_sys_call+0x2514/0x2ff0
[  100.893372][ T6615]  do_syscall_64+0xd2/0x200
[  100.893409][ T6615]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  100.893515][ T6615]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  100.893548][ T6615]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.893574][ T6615] RIP: 0033:0x7f9226b4eec9
[  100.893590][ T6615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  100.893655][ T6615] RSP: 002b:00007f92255b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[  100.893679][ T6615] RAX: ffffffffffffffda RBX: 00007f9226da5fa0 RCX: 00007f9226b4eec9
[  100.893692][ T6615] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000a
[  100.893703][ T6615] RBP: 00007f92255b7090 R08: 0000000000000000 R09: 0000000000000000
[  100.893715][ T6615] R10: 00000000001001f0 R11: 0000000000000246 R12: 0000000000000002
[  100.893767][ T6615] R13: 00007f9226da6038 R14: 00007f9226da5fa0 R15: 00007ffd31fff608
[  100.893829][ T6615]  </TASK>
[  101.105128][ T6622] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  101.105128][ T6622]    program syz.4.1025 not setting count and/or reply_len properly
[  101.164899][ T6619] loop7: detected capacity change from 0 to 512
[  101.171845][ T6619] ext4: Unknown parameter 'euid<00000000000000060928'
[  101.275366][ T6634] loop6: detected capacity change from 0 to 1024
[  101.282643][ T6634] EXT4-fs: Ignoring removed bh option
[  101.304388][ T6636] loop7: detected capacity change from 0 to 4096
[  101.392968][ T6645] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  101.443024][ T6648] loop7: detected capacity change from 0 to 1024
[  101.450460][ T6648] EXT4-fs: Ignoring removed nomblk_io_submit option
[  101.481972][ T6593] syz.1.1017 (6593) used greatest stack depth: 6392 bytes left
[  101.504175][ T6655] netlink: 'syz.4.1038': attribute type 6 has an invalid length.
[  101.522867][ T6655] netlink: 'syz.4.1038': attribute type 6 has an invalid length.
[  101.564638][ T6659] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1040'.
[  101.592689][ T6664] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1042'.
[  101.604083][ T6664] netlink: 'syz.7.1042': attribute type 10 has an invalid length.
[  101.615989][ T6664] team0: Port device dummy0 added
[  101.622964][ T6664] netlink: 'syz.7.1042': attribute type 10 has an invalid length.
[  101.634196][ T6664] team0: Port device dummy0 removed
[  101.642340][ T6664] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  101.731020][ T6666] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6666 comm=syz.7.1043
[  102.051508][ T6673] loop5: detected capacity change from 0 to 512
[  102.058326][ T6673] EXT4-fs: Ignoring removed mblk_io_submit option
[  102.065752][ T6673] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  102.077346][ T6673] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082]
[  102.085748][ T6673] System zones: 1-12
[  102.090566][ T6673] EXT4-fs (loop5): 1 truncate cleaned up
[  102.096633][ T6673] EXT4-fs mount: 52 callbacks suppressed
[  102.096687][ T6673] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.258542][ T6735] netlink: 'syz.6.1047': attribute type 10 has an invalid length.
[  102.273204][ T6735] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  102.335949][ T6740] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  102.353063][ T6738] loop4: detected capacity change from 0 to 4096
[  102.396038][ T6738] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.422189][ T6742] loop6: detected capacity change from 0 to 2048
[  102.451037][ T6742] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.470830][ T6746] loop1: detected capacity change from 0 to 1024
[  102.488054][ T6746] EXT4-fs: Ignoring removed nomblk_io_submit option
[  102.503233][ T6742] FAULT_INJECTION: forcing a failure.
[  102.503233][ T6742] name failslab, interval 1, probability 0, space 0, times 0
[  102.515983][ T6742] CPU: 0 UID: 0 PID: 6742 Comm: syz.6.1050 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  102.516012][ T6742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  102.516036][ T6742] Call Trace:
[  102.516044][ T6742]  <TASK>
[  102.516053][ T6742]  __dump_stack+0x1d/0x30
[  102.516080][ T6742]  dump_stack_lvl+0xe8/0x140
[  102.516104][ T6742]  dump_stack+0x15/0x1b
[  102.516122][ T6742]  should_fail_ex+0x265/0x280
[  102.516145][ T6742]  should_failslab+0x8c/0xb0
[  102.516224][ T6742]  kmem_cache_alloc_noprof+0x50/0x310
[  102.516259][ T6742]  ? __es_insert_extent+0x508/0xee0
[  102.516297][ T6742]  __es_insert_extent+0x508/0xee0
[  102.516378][ T6742]  __es_remove_extent+0x6a1/0xda0
[  102.516419][ T6742]  ext4_es_insert_extent+0x3b4/0x1c10
[  102.516468][ T6742]  ext4_map_blocks+0x8cd/0xd00
[  102.516590][ T6742]  ext4_iomap_begin+0x88d/0xe00
[  102.516705][ T6742]  ? __pfx_ext4_iomap_begin+0x10/0x10
[  102.516735][ T6742]  iomap_iter+0x32f/0x730
[  102.516833][ T6742]  ? should_failslab+0x8c/0xb0
[  102.516874][ T6742]  __iomap_dio_rw+0x708/0x1250
[  102.516911][ T6742]  ? ext4_journal_check_start+0x11a/0x1b0
[  102.516939][ T6742]  iomap_dio_rw+0x40/0x90
[  102.516967][ T6742]  ext4_file_write_iter+0xad9/0xf00
[  102.517024][ T6742]  do_iter_readv_writev+0x499/0x540
[  102.517169][ T6742]  vfs_writev+0x2df/0x8b0
[  102.517219][ T6742]  __se_sys_pwritev2+0xfc/0x1c0
[  102.517252][ T6742]  __x64_sys_pwritev2+0x67/0x80
[  102.517284][ T6742]  x64_sys_call+0x2c55/0x2ff0
[  102.517322][ T6742]  do_syscall_64+0xd2/0x200
[  102.517363][ T6742]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  102.517391][ T6742]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  102.517439][ T6742]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.517474][ T6742] RIP: 0033:0x7f9226b4eec9
[  102.517494][ T6742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  102.517526][ T6742] RSP: 002b:00007f92255b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[  102.517544][ T6742] RAX: ffffffffffffffda RBX: 00007f9226da5fa0 RCX: 00007f9226b4eec9
[  102.517637][ T6742] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004
[  102.517654][ T6742] RBP: 00007f92255b7090 R08: 0000000000000000 R09: 0000000000000003
[  102.517705][ T6742] R10: 0000000000009c00 R11: 0000000000000246 R12: 0000000000000001
[  102.517718][ T6742] R13: 00007f9226da6038 R14: 00007f9226da5fa0 R15: 00007ffd31fff608
[  102.517820][ T6742]  </TASK>
[  102.762117][ T6746] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.833914][ T6752] bond0: (slave dummy0): Releasing backup interface
[  102.935754][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.939712][ T6752] bridge_slave_0: left allmulticast mode
[  102.950513][ T6752] bridge_slave_0: left promiscuous mode
[  102.956341][ T6752] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.986952][ T6247] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.003434][ T6752] bridge_slave_1: left allmulticast mode
[  103.009148][ T6752] bridge_slave_1: left promiscuous mode
[  103.014937][ T6752] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.057060][ T6752] bond0: (slave bond_slave_0): Releasing backup interface
[  103.073426][ T6752] bond0: (slave bond_slave_1): Releasing backup interface
[  103.098569][ T6752] team0: Port device team_slave_0 removed
[  103.107206][ T6326] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.126502][ T6752] team0: Port device team_slave_1 removed
[  103.147135][ T6752] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  103.154999][ T6752] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.165302][ T6752] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.172765][ T6752] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.226075][ T6767] debugfs: 'ttyS3' already exists in 'caif_serial'
[  103.233968][   T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  103.241571][   T23] hid-generic 0000:0000:0000.0002: unexpected long global item
[  103.257428][ T6771] loop6: detected capacity change from 0 to 512
[  103.263883][ T6775] loop5: detected capacity change from 0 to 1024
[  103.264482][ T6775] EXT4-fs: Ignoring removed nomblk_io_submit option
[  103.287902][   T23] hid-generic 0000:0000:0000.0002: probe with driver hid-generic failed with error -22
[  103.309832][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.313721][ T6775] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.337741][ T6771] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.361816][ T6786] loop7: detected capacity change from 0 to 1024
[  103.383806][ T6786] EXT4-fs: Ignoring removed nomblk_io_submit option
[  103.406222][ T6247] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.406834][ T6786] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.428382][ T6326] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.483607][ T6392] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.564647][ T6810] bond0: (slave dummy0): Releasing backup interface
[  103.577533][ T6810] bridge_slave_0: left allmulticast mode
[  103.583380][ T6810] bridge_slave_0: left promiscuous mode
[  103.589117][ T6810] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.598460][ T6810] bridge_slave_1: left allmulticast mode
[  103.604290][ T6810] bridge_slave_1: left promiscuous mode
[  103.610167][ T6810] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.622063][ T6810] bond0: (slave bond_slave_0): Releasing backup interface
[  103.632279][ T6810] bond0: (slave bond_slave_1): Releasing backup interface
[  103.645724][ T6810] team0: Port device team_slave_0 removed
[  103.655308][ T6810] team0: Port device team_slave_1 removed
[  103.663674][ T6810] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  103.671233][ T6810] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.680272][ T6810] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.687729][ T6810] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.750321][ T6817] loop5: detected capacity change from 0 to 1024
[  103.757600][ T6817] EXT4-fs: Ignoring removed nomblk_io_submit option
[  103.774998][ T6821] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1074'.
[  103.787535][ T6817] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.840021][ T6247] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.866859][ T6826] loop5: detected capacity change from 0 to 1024
[  103.873776][ T6826] EXT4-fs: Ignoring removed nomblk_io_submit option
[  103.893341][ T6826] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.953446][ T6247] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.964129][ T6830] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1076'.
[  103.973101][ T6830] netlink: 'syz.6.1076': attribute type 30 has an invalid length.
[  103.987362][ T6713] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  103.997732][ T6713] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  104.008138][ T6713] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  104.017010][ T6713] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  104.021789][ T6832] loop5: detected capacity change from 0 to 1024
[  104.032857][ T6832] EXT4-fs: Ignoring removed nomblk_io_submit option
[  104.043475][ T6834] FAULT_INJECTION: forcing a failure.
[  104.043475][ T6834] name failslab, interval 1, probability 0, space 0, times 0
[  104.056168][ T6834] CPU: 1 UID: 0 PID: 6834 Comm: syz.6.1078 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  104.056295][ T6834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  104.056308][ T6834] Call Trace:
[  104.056315][ T6834]  <TASK>
[  104.056323][ T6834]  __dump_stack+0x1d/0x30
[  104.056347][ T6834]  dump_stack_lvl+0xe8/0x140
[  104.056368][ T6834]  dump_stack+0x15/0x1b
[  104.056385][ T6834]  should_fail_ex+0x265/0x280
[  104.056464][ T6834]  should_failslab+0x8c/0xb0
[  104.056496][ T6834]  kmem_cache_alloc_noprof+0x50/0x310
[  104.056602][ T6834]  ? audit_log_start+0x365/0x6c0
[  104.056701][ T6834]  audit_log_start+0x365/0x6c0
[  104.056736][ T6834]  ? should_fail_ex+0xdb/0x280
[  104.056876][ T6834]  audit_seccomp+0x48/0x100
[  104.056908][ T6834]  ? __seccomp_filter+0x68c/0x10d0
[  104.056936][ T6834]  __seccomp_filter+0x69d/0x10d0
[  104.056975][ T6834]  ? bpf_trace_run2+0x124/0x1c0
[  104.057006][ T6834]  ? __se_sys_memfd_create+0x577/0x590
[  104.057096][ T6834]  __secure_computing+0x82/0x150
[  104.057124][ T6834]  syscall_trace_enter+0xcf/0x1e0
[  104.057200][ T6834]  do_syscall_64+0xac/0x200
[  104.057240][ T6834]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  104.057317][ T6834]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  104.057366][ T6834]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.057440][ T6834] RIP: 0033:0x7f9226b4ef03
[  104.057459][ T6834] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7
[  104.057481][ T6834] RSP: 002b:00007f92255b6e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  104.057500][ T6834] RAX: ffffffffffffffda RBX: 0000000000000529 RCX: 00007f9226b4ef03
[  104.057512][ T6834] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000
[  104.057524][ T6834] RBP: 0000200000000f82 R08: 00000000ffffffff R09: 0000000000000000
[  104.057581][ T6834] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000005
[  104.057594][ T6834] R13: 00007f92255b6ef0 R14: 00007f92255b6eb0 R15: 0000200000000080
[  104.057614][ T6834]  </TASK>
[  104.058081][ T6832] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.061457][ T6834] loop6: detected capacity change from 0 to 512
[  104.097902][ T6832] debugfs: 'ttyS3' already exists in 'caif_serial'
[  104.109194][ T6834] EXT4-fs (loop6): orphan cleanup on readonly fs
[  104.292661][ T6834] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1078: bg 0: block 248: padding at end of block bitmap is not set
[  104.307311][ T6834] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.1078: Failed to acquire dquot type 1
[  104.314507][ T6841] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1080'.
[  104.319359][ T6834] EXT4-fs (loop6): 1 truncate cleaned up
[  104.333378][ T6839] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1079'.
[  104.343743][ T6834] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  104.357371][ T6841] SELinux:  Context system_u:object_r:lost_found_t:s0 is not valid (left unmapped).
[  104.387216][ T6847] loop7: detected capacity change from 0 to 1024
[  104.396769][ T6845] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1081'.
[  104.408929][ T6247] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.419919][ T6847] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  104.469343][ T6851] loop1: detected capacity change from 0 to 8192
[  104.483097][ T6853] bridge_slave_0: left allmulticast mode
[  104.488790][ T6853] bridge_slave_0: left promiscuous mode
[  104.491371][ T6847] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: block 3: comm syz.7.1082: lblock 3 mapped to illegal pblock 3 (length 3)
[  104.494678][ T6853] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.509572][ T6847] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  104.527805][ T6847] EXT4-fs (loop7): This should not happen!! Data will be lost
[  104.527805][ T6847] 
[  104.538309][ T6326] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.548508][ T6851]  loop1: p1 p2 p4 < >
[  104.552698][ T6851] loop1: partition table partially beyond EOD, truncated
[  104.561343][ T6851] loop1: p1 start 16777224 is beyond EOD, truncated
[  104.567987][ T6851] loop1: p2 size 515840 extends beyond EOD, truncated
[  104.578977][ T6853] bridge_slave_1: left allmulticast mode
[  104.584953][ T6853] bridge_slave_1: left promiscuous mode
[  104.590966][ T6853] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.606809][ T6851] loop1: p4 start 16777216 is beyond EOD, truncated
[  104.617813][ T6853] bond0: (slave bond_slave_0): Releasing backup interface
[  104.651883][ T6705] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:38: lblock 8 mapped to illegal pblock 8 (length 8)
[  104.671207][ T6853] bond0: (slave bond_slave_1): Releasing backup interface
[  104.685436][ T6862] loop6: detected capacity change from 0 to 1024
[  104.691003][ T6705] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  104.704265][ T6705] EXT4-fs (loop7): This should not happen!! Data will be lost
[  104.704265][ T6705] 
[  104.709222][ T6863] loop4: detected capacity change from 0 to 1024
[  104.717619][ T6853] team0: Port device team_slave_0 removed
[  104.730190][ T6862] EXT4-fs: Ignoring removed nomblk_io_submit option
[  104.738104][ T6863] EXT4-fs: Ignoring removed nomblk_io_submit option
[  104.748469][ T6862] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.749348][ T6853] team0: Port device team_slave_1 removed
[  104.767965][ T6853] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  104.775456][ T6853] batman_adv: batadv0: Removing interface: batadv_slave_0
[  104.776097][ T6392] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  104.785505][ T6863] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.812369][ T6853] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  104.819964][ T6853] batman_adv: batadv0: Removing interface: batadv_slave_1
[  104.846895][ T6870] loop7: detected capacity change from 0 to 4096
[  104.873794][ T6870] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.890339][   T29] kauditd_printk_skb: 557 callbacks suppressed
[  104.890357][   T29] audit: type=1326 audit(104.878:8209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6872 comm="syz.5.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3eb8eec9 code=0x7ffc0000
[  104.893342][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.899437][   T29] audit: type=1326 audit(104.878:8210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6872 comm="syz.5.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3eb8eec9 code=0x7ffc0000
[  104.951317][   T29] audit: type=1326 audit(104.878:8211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6872 comm="syz.5.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fce3eb8eec9 code=0x7ffc0000
[  104.974303][   T29] audit: type=1326 audit(104.878:8212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6872 comm="syz.5.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3eb8eec9 code=0x7ffc0000
[  104.997318][   T29] audit: type=1326 audit(104.878:8213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6872 comm="syz.5.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3eb8eec9 code=0x7ffc0000
[  105.020297][   T29] audit: type=1326 audit(104.878:8214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6872 comm="syz.5.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fce3eb90de7 code=0x7ffc0000
[  105.043437][   T29] audit: type=1326 audit(104.878:8215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6872 comm="syz.5.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fce3eb90d5c code=0x7ffc0000
[  105.066361][   T29] audit: type=1326 audit(104.878:8216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6872 comm="syz.5.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fce3eb90c94 code=0x7ffc0000
[  105.089128][   T29] audit: type=1326 audit(104.878:8217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6872 comm="syz.5.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fce3eb90c94 code=0x7ffc0000
[  105.112101][   T29] audit: type=1326 audit(104.878:8218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6872 comm="syz.5.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fce3eb8db2a code=0x7ffc0000
[  105.136552][ T6326] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.158534][ T6392] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.238395][ T6886] loop4: detected capacity change from 0 to 512
[  105.246477][ T6886] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  105.263038][ T6886] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.276167][ T6886] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.310688][ T6894] loop4: detected capacity change from 0 to 512
[  105.321710][ T6894] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  105.330004][ T6894] System zones: 0-2, 18-18, 34-35
[  105.335720][ T6894] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.363478][ T6894] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1096'.
[  105.383527][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.425602][ T6901] loop4: detected capacity change from 0 to 1024
[  105.432724][ T6901] EXT4-fs: Ignoring removed nomblk_io_submit option
[  105.451578][ T6901] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.471926][ T6901] debugfs: 'ttyS3' already exists in 'caif_serial'
[  105.510442][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.537943][ T6905] loop4: detected capacity change from 0 to 1024
[  105.544912][ T6905] EXT4-fs: Ignoring removed nomblk_io_submit option
[  105.561944][ T6905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.584175][ T6905] debugfs: 'ttyS3' already exists in 'caif_serial'
[  105.632185][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.713059][ T6909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1100'.
[  105.761681][ T6921] loop5: detected capacity change from 0 to 1024
[  105.768745][ T6921] EXT4-fs: Ignoring removed nomblk_io_submit option
[  105.782947][ T6923] loop4: detected capacity change from 0 to 2048
[  105.791833][ T6921] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.805724][ T6923] EXT4-fs (loop4): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.824299][ T6923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1102'.
[  105.844338][ T3312] EXT4-fs (loop4): unmounting filesystem 00000800-0000-0000-0000-000000000000.
[  105.872035][ T6247] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.987632][ T6942] loop1: detected capacity change from 0 to 512
[  105.994410][ T6942] ext4: Unknown parameter 'euid<00000000000000060928'
[  106.026311][ T6946] loop5: detected capacity change from 0 to 1024
[  106.033330][ T6946] EXT4-fs: Ignoring removed nomblk_io_submit option
[  106.051549][ T6946] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.071972][ T6946] debugfs: 'ttyS3' already exists in 'caif_serial'
[  106.123876][ T6247] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.208833][ T6968] loop5: detected capacity change from 0 to 8192
[  106.225305][ T6968] validate_nla: 1 callbacks suppressed
[  106.225320][ T6968] netlink: '+}[@': attribute type 1 has an invalid length.
[  106.923496][ T6991] loop4: detected capacity change from 0 to 512
[  106.931039][ T6991] ext4: Unknown parameter 'euid<00000000000000060928'
[  107.038120][ T7002] loop4: detected capacity change from 0 to 1024
[  107.045834][ T7002] EXT4-fs: Ignoring removed nomblk_io_submit option
[  107.062433][ T7002] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.081916][ T7002] debugfs: 'ttyS3' already exists in 'caif_serial'
[  107.152841][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.176970][ T7007] loop1: detected capacity change from 0 to 8192
[  107.196056][ T7007] __nla_validate_parse: 6 callbacks suppressed
[  107.196149][ T7007] netlink: 28 bytes leftover after parsing attributes in process `+}[@'.
[  107.210946][ T7007] netlink: 28 bytes leftover after parsing attributes in process `+}[@'.
[  107.224571][ T7007] netlink: '+}[@': attribute type 1 has an invalid length.
[  107.231961][ T7007] netlink: 224 bytes leftover after parsing attributes in process `+}[@'.
[  107.240648][ T7011] loop5: detected capacity change from 0 to 1024
[  107.247513][ T7011] EXT4-fs: Ignoring removed nomblk_io_submit option
[  107.264924][ T7011] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.271967][ T7017] loop4: detected capacity change from 0 to 512
[  107.299664][ T7017] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  107.308191][ T7017] System zones: 0-2, 18-18, 34-35
[  107.315465][ T7017] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.352653][ T6247] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.363412][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.376577][ T7023] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1135'.
[  107.443693][ T7025] loop4: detected capacity change from 0 to 512
[  107.450244][ T7025] ext4: Unknown parameter 'euid<00000000000000060928'
[  107.688064][ T7038] loop4: detected capacity change from 0 to 1024
[  107.695228][ T7038] EXT4-fs: Ignoring removed nomblk_io_submit option
[  107.711446][ T7038] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.754572][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.859040][ T7051] loop7: detected capacity change from 0 to 1024
[  107.865800][ T7053] loop6: detected capacity change from 0 to 512
[  107.866219][ T7051] EXT4-fs: Ignoring removed nomblk_io_submit option
[  107.881235][ T7053] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  107.881794][ T7051] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.889431][ T7053] System zones: 0-2, 18-18, 34-35
[  107.908603][ T7053] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.939829][ T6326] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.952909][ T6392] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.978866][ T7059] loop6: detected capacity change from 0 to 1024
[  107.986149][ T7059] EXT4-fs: Ignoring removed nomblk_io_submit option
[  108.001603][ T7059] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.022445][ T7059] debugfs: 'ttyS3' already exists in 'caif_serial'
[  108.060131][ T6326] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.080383][ T7065] loop7: detected capacity change from 0 to 1024
[  108.087248][ T7065] EXT4-fs: Ignoring removed nomblk_io_submit option
[  108.100458][ T7067] loop6: detected capacity change from 0 to 4096
[  108.102731][ T7065] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.122307][ T7067] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.161451][ T6392] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.207082][ T7072] loop7: detected capacity change from 0 to 2048
[  108.217069][ T6326] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.229292][ T7072] EXT4-fs (loop7): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.268925][ T6392] EXT4-fs (loop7): unmounting filesystem 00000800-0000-0000-0000-000000000000.
[  108.287459][ T7080] loop5: detected capacity change from 0 to 1024
[  108.294504][ T7080] EXT4-fs: Ignoring removed nomblk_io_submit option
[  108.319986][ T7078] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1152'.
[  108.329194][ T7078] netlink: 312 bytes leftover after parsing attributes in process `syz.6.1152'.
[  108.338369][ T7078] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1152'.
[  108.428672][ T7094] loop6: detected capacity change from 0 to 512
[  108.452331][ T7094] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  108.461811][ T7094] System zones: 0-2, 18-18, 34-35
[  108.479092][ T7098] loop5: detected capacity change from 0 to 1024
[  108.486795][ T7098] EXT4-fs: Ignoring removed nomblk_io_submit option
[  108.520700][ T7105] loop6: detected capacity change from 0 to 512
[  108.541003][ T7105] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  108.549118][ T7105] System zones: 0-2, 18-18, 34-35
[  108.587496][ T7109] loop5: detected capacity change from 0 to 1024
[  108.594432][ T7109] EXT4-fs: Ignoring removed nomblk_io_submit option
[  108.604941][ T7111] loop6: detected capacity change from 0 to 1024
[  108.612367][ T7111] EXT4-fs: Ignoring removed nomblk_io_submit option
[  108.639355][ T7111] debugfs: 'ttyS3' already exists in 'caif_serial'
[  108.695471][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1166'.
[  108.730722][ T7124] loop5: detected capacity change from 0 to 2048
[  108.781738][ T7131] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1168'.
[  108.907144][ T7139] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1173'.
[  108.943174][ T7141] loop5: detected capacity change from 0 to 1024
[  108.950804][ T7141] EXT4-fs: Ignoring removed nomblk_io_submit option
[  109.021396][ T7146] loop5: detected capacity change from 0 to 512
[  109.040997][ T7146] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  109.049093][ T7146] System zones: 0-2, 18-18, 34-35
[  109.098504][ T7150] loop1: detected capacity change from 0 to 4096
[  109.176500][ T7156] loop1: detected capacity change from 0 to 1024
[  109.184232][ T7156] EXT4-fs: Ignoring removed nomblk_io_submit option
[  109.257815][ T7160] loop1: detected capacity change from 0 to 1024
[  109.264991][ T7160] EXT4-fs: Ignoring removed nomblk_io_submit option
[  109.293012][ T7164] loop7: detected capacity change from 0 to 2048
[  109.366206][ T7170] FAULT_INJECTION: forcing a failure.
[  109.366206][ T7170] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  109.379341][ T7170] CPU: 1 UID: 0 PID: 7170 Comm: syz.1.1182 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  109.379376][ T7170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  109.379450][ T7170] Call Trace:
[  109.379457][ T7170]  <TASK>
[  109.379464][ T7170]  __dump_stack+0x1d/0x30
[  109.379484][ T7170]  dump_stack_lvl+0xe8/0x140
[  109.379501][ T7170]  dump_stack+0x15/0x1b
[  109.379515][ T7170]  should_fail_ex+0x265/0x280
[  109.379536][ T7170]  should_fail+0xb/0x20
[  109.379588][ T7170]  should_fail_usercopy+0x1a/0x20
[  109.379698][ T7170]  _copy_to_user+0x20/0xa0
[  109.379800][ T7170]  finalize_log+0xa1/0x100
[  109.379839][ T7170]  btf_new_fd+0x505/0x790
[  109.379863][ T7170]  bpf_btf_load+0x112/0x130
[  109.379931][ T7170]  __sys_bpf+0x352/0x7b0
[  109.379995][ T7170]  __x64_sys_bpf+0x41/0x50
[  109.380026][ T7170]  x64_sys_call+0x2aea/0x2ff0
[  109.380068][ T7170]  do_syscall_64+0xd2/0x200
[  109.380107][ T7170]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  109.380137][ T7170]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  109.380176][ T7170]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.380225][ T7170] RIP: 0033:0x7fe43372eec9
[  109.380243][ T7170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  109.380261][ T7170] RSP: 002b:00007fe432197038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  109.380280][ T7170] RAX: ffffffffffffffda RBX: 00007fe433985fa0 RCX: 00007fe43372eec9
[  109.380355][ T7170] RDX: 0000000000000028 RSI: 0000200000000300 RDI: 0000000000000012
[  109.380371][ T7170] RBP: 00007fe432197090 R08: 0000000000000000 R09: 0000000000000000
[  109.380437][ T7170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  109.380453][ T7170] R13: 00007fe433986038 R14: 00007fe433985fa0 R15: 00007ffd2f0fe6d8
[  109.380479][ T7170]  </TASK>
[  109.633156][ T7180] loop4: detected capacity change from 0 to 512
[  109.650873][ T7180] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  109.658995][ T7180] System zones: 0-2, 18-18, 34-35
[  109.679333][ T7184] loop6: detected capacity change from 0 to 1024
[  109.686366][ T7184] EXT4-fs: Ignoring removed nomblk_io_submit option
[  109.716358][ T7186] loop4: detected capacity change from 0 to 1024
[  109.736764][ T7186] EXT4-fs: Ignoring removed nomblk_io_submit option
[  109.813958][ T7197] loop4: detected capacity change from 0 to 512
[  109.820559][ T7197] EXT4-fs: Ignoring removed mblk_io_submit option
[  109.827318][ T7197] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  109.838499][ T7197] EXT4-fs (loop4): 1 truncate cleaned up
[  109.875261][ T7195] loop6: detected capacity change from 0 to 512
[  109.883468][ T7195] msdos: Unknown parameter 'doîu™Ÿ£Ãå'
[  110.597194][ T7219] loop6: detected capacity change from 0 to 512
[  110.611551][ T7219] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  110.621248][ T7219] System zones: 0-2, 18-18, 34-35
[  110.697748][ T7227] loop4: detected capacity change from 0 to 1024
[  110.704802][ T7227] EXT4-fs: Ignoring removed nomblk_io_submit option
[  110.865540][ T7237] loop5: detected capacity change from 0 to 1024
[  110.874949][ T7237] EXT4-fs: Ignoring removed nomblk_io_submit option
[  110.894701][ T7248] loop4: detected capacity change from 0 to 512
[  110.922662][ T7248] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  110.924019][ T7237] debugfs: 'ttyS3' already exists in 'caif_serial'
[  110.931892][ T7252] loop7: detected capacity change from 0 to 512
[  110.937444][ T7248] System zones: 0-2, 18-18, 34-35
[  110.945903][ T7252] EXT4-fs: Ignoring removed mblk_io_submit option
[  110.955568][ T7252] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  110.967321][ T7252] EXT4-fs (loop7): 1 truncate cleaned up
[  111.038026][ T7257] loop4: detected capacity change from 0 to 1024
[  111.045365][ T7257] EXT4-fs: Ignoring removed nomblk_io_submit option
[  111.057047][ T7260] loop5: detected capacity change from 0 to 1024
[  111.064393][ T7260] EXT4-fs: Ignoring removed nomblk_io_submit option
[  111.172885][   T29] kauditd_printk_skb: 725 callbacks suppressed
[  111.172904][   T29] audit: type=1326 audit(111.158:8944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.4.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495a6ceec9 code=0x7ffc0000
[  111.202718][   T29] audit: type=1326 audit(111.158:8945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.4.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495a6ceec9 code=0x7ffc0000
[  111.230161][   T29] audit: type=1326 audit(111.188:8946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.4.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f495a6ceec9 code=0x7ffc0000
[  111.252965][   T29] audit: type=1326 audit(111.188:8947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.4.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495a6ceec9 code=0x7ffc0000
[  111.276007][   T29] audit: type=1326 audit(111.188:8948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.4.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f495a6d0de7 code=0x7ffc0000
[  111.298749][   T29] audit: type=1326 audit(111.188:8949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.4.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f495a6d0d5c code=0x7ffc0000
[  111.321573][   T29] audit: type=1326 audit(111.188:8950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.4.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f495a6d0c94 code=0x7ffc0000
[  111.344314][   T29] audit: type=1326 audit(111.188:8951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.4.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f495a6d0c94 code=0x7ffc0000
[  111.367121][   T29] audit: type=1326 audit(111.188:8952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.4.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f495a6cdb2a code=0x7ffc0000
[  111.389765][   T29] audit: type=1326 audit(111.188:8953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.4.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495a6ceec9 code=0x7ffc0000
[  111.452671][ T7273] loop1: detected capacity change from 0 to 1024
[  111.460002][ T7273] EXT4-fs: Ignoring removed nobh option
[  111.606872][ T7290] loop1: detected capacity change from 0 to 512
[  111.614552][ T7290] ext4: Unknown parameter 'euid<00000000000000060928'
[  111.663015][ T7295] loop7: detected capacity change from 0 to 1024
[  111.670314][ T7295] EXT4-fs: Ignoring removed nomblk_io_submit option
[  111.695638][ T7301] netlink: 'syz.1.1228': attribute type 13 has an invalid length.
[  111.777093][ T7305] loop7: detected capacity change from 0 to 512
[  111.784063][ T7305] EXT4-fs: Ignoring removed mblk_io_submit option
[  111.791675][ T7305] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  111.803709][ T7305] EXT4-fs (loop7): 1 truncate cleaned up
[  111.817508][ T6713] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.827419][ T6713] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.849679][ T6713] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.858144][ T6713] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.929173][ T7312] loop1: detected capacity change from 0 to 1024
[  111.940517][ T7312] EXT4-fs: Ignoring removed nobh option
[  112.153605][ T7334] loop5: detected capacity change from 0 to 512
[  112.160278][ T7334] ext4: Unknown parameter 'euid<00000000000000060928'
[  112.250436][ T7337] loop1: detected capacity change from 0 to 1024
[  112.258029][ T7337] EXT4-fs: Ignoring removed nomblk_io_submit option
[  112.295959][ T7343] loop4: detected capacity change from 0 to 1024
[  112.304804][ T7343] EXT4-fs: Ignoring removed nomblk_io_submit option
[  112.308325][ T7339] loop5: detected capacity change from 0 to 4096
[  112.342719][ T7348] __nla_validate_parse: 2 callbacks suppressed
[  112.342737][ T7348] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1243'.
[  112.404865][ T7350] loop4: detected capacity change from 0 to 512
[  112.412001][ T7350] EXT4-fs: Ignoring removed mblk_io_submit option
[  112.419514][ T7350] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  112.434936][ T7350] EXT4-fs (loop4): 1 truncate cleaned up
[  112.450922][ T7355] loop1: detected capacity change from 0 to 1024
[  112.457810][ T7355] EXT4-fs: Ignoring removed nobh option
[  112.557914][ T7365] loop6: detected capacity change from 0 to 512
[  112.606390][ T7365] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  112.628965][ T7365] System zones: 0-2, 18-18, 34-35
[  112.769155][ T7375] loop6: detected capacity change from 0 to 512
[  112.782234][ T7375] ext4: Unknown parameter 'euid<00000000000000060928'
[  112.938869][ T7381] loop7: detected capacity change from 0 to 1024
[  112.955941][ T7381] EXT4-fs: Ignoring removed nomblk_io_submit option
[  112.996476][ T7384] loop6: detected capacity change from 0 to 1024
[  113.003835][ T7384] EXT4-fs: Ignoring removed nomblk_io_submit option
[  113.090481][ T7384] debugfs: 'ttyS3' already exists in 'caif_serial'
[  113.189408][ T7393] loop7: detected capacity change from 0 to 512
[  113.209343][ T7393] ext4: Unknown parameter 'euid<00000000000000060928'
[  113.290958][ T7400] loop7: detected capacity change from 0 to 1024
[  113.297977][ T7400] EXT4-fs: Ignoring removed nobh option
[  113.361342][ T7407] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1261'.
[  113.612219][ T7417] loop4: detected capacity change from 0 to 512
[  113.618912][ T7417] ext4: Unknown parameter 'euid<00000000000000060928'
[  113.702437][ T7421] loop4: detected capacity change from 0 to 1024
[  113.709364][ T7421] EXT4-fs: Ignoring removed nomblk_io_submit option
[  113.729115][ T7421] debugfs: 'ttyS3' already exists in 'caif_serial'
[  113.754554][ T7425] loop5: detected capacity change from 0 to 512
[  113.771738][ T7425] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  113.779879][ T7425] System zones: 0-2, 18-18, 34-35
[  113.820998][ T7433] loop5: detected capacity change from 0 to 512
[  113.827648][ T7433] EXT4-fs: Ignoring removed mblk_io_submit option
[  113.834582][ T7433] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  113.850245][ T7433] EXT4-fs (loop5): 1 truncate cleaned up
[  113.891522][ T7431] loop4: detected capacity change from 0 to 512
[  113.898196][ T7431] ext4: Unknown parameter 'euid<00000000000000060928'
[  113.963171][ T7439] loop4: detected capacity change from 0 to 1024
[  113.971234][ T7439] EXT4-fs: Ignoring removed nobh option
[  114.222665][ T7451] loop4: detected capacity change from 0 to 1024
[  114.236157][ T7451] EXT4-fs: Ignoring removed nomblk_io_submit option
[  114.258972][ T7454] loop6: detected capacity change from 0 to 512
[  114.274596][ T7454] ext4: Unknown parameter 'euid<00000000000000060928'
[  114.351977][ T7464] loop7: detected capacity change from 0 to 512
[  114.382636][ T7464] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  114.384899][ T7466] debugfs: 'ttyS3' already exists in 'caif_serial'
[  114.401509][ T7464] System zones: 0-2, 18-18, 34-35
[  114.456113][ T7472] loop7: detected capacity change from 0 to 1024
[  114.463375][ T7472] EXT4-fs: Ignoring removed nomblk_io_submit option
[  114.487676][ T7475] loop4: detected capacity change from 0 to 1024
[  114.495802][ T7475] EXT4-fs: Ignoring removed nobh option
[  114.506566][ T7472] debugfs: 'ttyS3' already exists in 'caif_serial'
[  114.601658][ T7488] loop4: detected capacity change from 0 to 4096
[  114.723669][ T7498] loop1: detected capacity change from 0 to 1024
[  114.731520][ T7498] EXT4-fs: Ignoring removed nomblk_io_submit option
[  114.796777][ T7507] loop1: detected capacity change from 0 to 512
[  114.811613][ T7507] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  114.820252][ T7507] System zones: 0-2, 18-18, 34-35
[  114.857079][ T7515] loop1: detected capacity change from 0 to 512
[  114.864292][ T7515] EXT4-fs: Ignoring removed mblk_io_submit option
[  114.871288][ T7515] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  114.882450][ T7515] EXT4-fs (loop1): 1 truncate cleaned up
[  115.203043][ T7521] loop6: detected capacity change from 0 to 1024
[  115.210278][ T7521] EXT4-fs: Ignoring removed nomblk_io_submit option
[  115.334418][ T7526] loop6: detected capacity change from 0 to 512
[  115.365267][ T7526] ext4: Unknown parameter 'euid<00000000000000060928'
[  115.564004][ T7539] loop5: detected capacity change from 0 to 512
[  115.571064][ T7539] ext4: Unknown parameter 'euid<00000000000000060928'
[  115.759449][ T7554] loop4: detected capacity change from 0 to 512
[  115.762703][ T7550] loop7: detected capacity change from 0 to 4096
[  115.778646][ T7549] loop6: detected capacity change from 0 to 1024
[  115.786313][ T7549] EXT4-fs: Ignoring removed nomblk_io_submit option
[  115.801545][ T7554] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  115.817863][ T7554] System zones: 0-2, 18-18, 34-35
[  115.879432][ T7559] loop1: detected capacity change from 0 to 512
[  115.890961][ T7559] ext4: Unknown parameter 'euid<00000000000000060928'
[  116.007357][ T7580] loop1: detected capacity change from 0 to 1024
[  116.033937][ T7580] EXT4-fs: Ignoring removed nomblk_io_submit option
[  116.044463][ T7586] loop4: detected capacity change from 0 to 512
[  116.053480][ T7587] loop7: detected capacity change from 0 to 512
[  116.066435][ T7586] EXT4-fs: Ignoring removed mblk_io_submit option
[  116.072962][ T7587] ext4: Unknown parameter 'euid<00000000000000060928'
[  116.080397][ T7586] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  116.098066][ T7589] loop6: detected capacity change from 0 to 1024
[  116.111707][ T7580] debugfs: 'ttyS3' already exists in 'caif_serial'
[  116.120744][ T7589] EXT4-fs: Ignoring removed nomblk_io_submit option
[  116.130717][ T7586] EXT4-fs (loop4): 1 truncate cleaned up
[  116.159742][ T7598] loop7: detected capacity change from 0 to 512
[  116.184436][ T7598] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  116.197729][ T7600] loop1: detected capacity change from 0 to 4096
[  116.204721][ T7598] System zones: 0-2, 18-18, 34-35
[  116.278736][   T29] kauditd_printk_skb: 266 callbacks suppressed
[  116.278755][   T29] audit: type=1326 audit(116.258:9220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7608 comm="syz.6.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9226b4eec9 code=0x7ffc0000
[  116.307876][   T29] audit: type=1326 audit(116.258:9221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7608 comm="syz.6.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9226b4eec9 code=0x7ffc0000
[  116.330710][   T29] audit: type=1326 audit(116.258:9222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7608 comm="syz.6.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9226b4eec9 code=0x7ffc0000
[  116.353546][   T29] audit: type=1326 audit(116.258:9223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7608 comm="syz.6.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9226b4eec9 code=0x7ffc0000
[  116.376442][   T29] audit: type=1326 audit(116.258:9224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7608 comm="syz.6.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9226b50de7 code=0x7ffc0000
[  116.399389][   T29] audit: type=1326 audit(116.258:9225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7608 comm="syz.6.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f9226b50d5c code=0x7ffc0000
[  116.422227][   T29] audit: type=1326 audit(116.258:9226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7608 comm="syz.6.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f9226b50c94 code=0x7ffc0000
[  116.445027][   T29] audit: type=1326 audit(116.258:9227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7608 comm="syz.6.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f9226b50c94 code=0x7ffc0000
[  116.467956][   T29] audit: type=1326 audit(116.258:9228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7608 comm="syz.6.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9226b4db2a code=0x7ffc0000
[  116.494970][   T29] audit: type=1326 audit(116.268:9229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7608 comm="syz.6.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9226b4eec9 code=0x7ffc0000
[  116.572994][ T7614] loop6: detected capacity change from 0 to 512
[  116.580411][ T7614] ext4: Unknown parameter 'euid<00000000000000060928'
[  116.894366][ T7631] loop6: detected capacity change from 0 to 512
[  116.930171][ T7631] ext4: Unknown parameter 'euid<00000000000000060928'
[  116.950514][ T7647] loop4: detected capacity change from 0 to 1024
[  116.957472][ T7647] EXT4-fs: Ignoring removed nomblk_io_submit option
[  116.982104][ T7649] loop1: detected capacity change from 0 to 4096
[  117.000788][ T7655] loop7: detected capacity change from 0 to 512
[  117.020915][ T7655] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  117.029025][ T7655] System zones: 0-2, 18-18, 34-35
[  117.145405][ T7674] loop4: detected capacity change from 0 to 512
[  117.152424][ T7674] ext4: Unknown parameter 'euid<00000000000000060928'
[  117.179494][ T7681] loop1: detected capacity change from 0 to 512
[  117.186415][ T7681] EXT4-fs: Ignoring removed mblk_io_submit option
[  117.193523][ T7681] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  117.204884][ T7681] EXT4-fs (loop1): 1 truncate cleaned up
[  117.305526][ T7692] loop4: detected capacity change from 0 to 1024
[  117.312599][ T7692] EXT4-fs: Ignoring removed nomblk_io_submit option
[  117.458650][ T7701] loop4: detected capacity change from 0 to 512
[  117.491848][ T7701] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  117.500480][ T7703] loop7: detected capacity change from 0 to 4096
[  117.507233][ T7701] System zones: 0-2, 18-18, 34-35
[  117.635377][ T7712] loop4: detected capacity change from 0 to 512
[  117.642129][ T7712] EXT4-fs: Ignoring removed mblk_io_submit option
[  117.648641][ T7712] EXT4-fs: Ignoring removed nomblk_io_submit option
[  117.655904][ T7712] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  117.664397][ T7712] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  117.705468][ T7712] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.1363: Allocating blocks 41-42 which overlap fs metadata
[  117.740556][ T7712] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1363: Failed to acquire dquot type 1
[  117.781781][ T7712] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  117.806809][ T7722] loop5: detected capacity change from 0 to 512
[  117.820458][ T7722] ext4: Unknown parameter 'euid<00000000000000060928'
[  117.830564][ T7712] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.1363: corrupted inode contents
[  117.844487][ T7712] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #12: comm syz.4.1363: mark_inode_dirty error
[  117.858230][ T7712] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.1363: corrupted inode contents
[  117.871425][ T7712] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.1363: mark_inode_dirty error
[  117.883081][ T7712] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.1363: corrupted inode contents
[  117.903044][ T7712] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[  117.954044][ T7712] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.1363: corrupted inode contents
[  117.990071][ T7712] EXT4-fs error (device loop4): ext4_truncate:4666: inode #12: comm syz.4.1363: mark_inode_dirty error
[  118.030928][ T7712] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[  118.059636][ T7739] loop7: detected capacity change from 0 to 512
[  118.068387][ T7735] loop6: detected capacity change from 0 to 1024
[  118.076969][ T7712] EXT4-fs (loop4): 1 truncate cleaned up
[  118.093186][ T7739] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  118.101866][ T7735] EXT4-fs: Ignoring removed nomblk_io_submit option
[  118.116897][ T7743] loop5: detected capacity change from 0 to 4096
[  118.123362][ T7739] System zones: 0-2, 18-18, 34-35
[  118.150462][ T7750] loop1: detected capacity change from 0 to 512
[  118.157125][ T7750] EXT4-fs: Ignoring removed mblk_io_submit option
[  118.164866][ T7750] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  118.177650][ T7735] debugfs: 'ttyS3' already exists in 'caif_serial'
[  118.188559][ T7750] EXT4-fs (loop1): 1 truncate cleaned up
[  118.348416][ T7766] loop5: detected capacity change from 0 to 512
[  118.369183][ T7766] ext4: Unknown parameter 'euid<00000000000000060928'
[  118.622558][ T7783] loop5: detected capacity change from 0 to 512
[  118.641207][ T7783] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  118.649480][ T7783] System zones: 0-2, 18-18, 34-35
[  118.728996][ T7789] loop5: detected capacity change from 0 to 4096
[  119.072722][ T7809] loop7: detected capacity change from 0 to 512
[  119.073989][ T7808] loop5: detected capacity change from 0 to 512
[  119.085615][ T7804] loop1: detected capacity change from 0 to 1024
[  119.095750][ T7808] ext4: Unknown parameter 'euid<00000000000000060928'
[  119.100507][ T7804] EXT4-fs: Ignoring removed nomblk_io_submit option
[  119.113477][ T7809] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  119.121777][ T7809] System zones: 0-2, 18-18, 34-35
[  119.148400][ T7816] loop4: detected capacity change from 0 to 4096
[  119.274176][ T7832] loop1: detected capacity change from 0 to 512
[  119.281364][ T7832] EXT4-fs: Ignoring removed mblk_io_submit option
[  119.288794][ T7832] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  119.315442][ T7835] loop4: detected capacity change from 0 to 1024
[  119.322538][ T7835] EXT4-fs: Ignoring removed nomblk_io_submit option
[  119.328790][ T7832] EXT4-fs (loop1): 1 truncate cleaned up
[  119.380021][ T7848] loop7: detected capacity change from 0 to 512
[  119.397828][ T7848] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  119.407171][ T7848] System zones: 0-2, 18-18, 34-35
[  119.455115][ T7854] loop5: detected capacity change from 0 to 512
[  119.465313][ T7854] ext4: Unknown parameter 'euid<00000000000000060928'
[  119.531226][ T7862] loop4: detected capacity change from 0 to 1024
[  119.538062][ T7862] EXT4-fs: Ignoring removed nomblk_io_submit option
[  119.591507][ T7866] loop5: detected capacity change from 0 to 4096
[  119.771392][ T7886] loop5: detected capacity change from 0 to 512
[  119.792028][ T7886] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  119.800196][ T7886] System zones: 0-2, 18-18, 34-35
[  119.887151][ T7891] loop5: detected capacity change from 0 to 1024
[  119.901202][ T7891] EXT4-fs: Ignoring removed nomblk_io_submit option
[  119.965211][ T7895] loop4: detected capacity change from 0 to 512
[  119.971975][ T7895] ext4: Unknown parameter 'euid<00000000000000060928'
[  120.066141][ T7900] loop4: detected capacity change from 0 to 1024
[  120.100347][ T7900] EXT4-fs: Ignoring removed nomblk_io_submit option
[  120.134703][ T7906] loop5: detected capacity change from 0 to 4096
[  120.197181][ T7917] loop4: detected capacity change from 0 to 512
[  120.214830][ T7917] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  120.230477][ T7917] System zones: 0-2, 18-18, 34-35
[  120.314905][ T7933] loop1: detected capacity change from 0 to 512
[  120.331363][ T7932] loop4: detected capacity change from 0 to 1024
[  120.335392][ T7933] ext4: Unknown parameter 'euid<00000000000000060928'
[  120.338561][ T7932] EXT4-fs: Ignoring removed nomblk_io_submit option
[  120.383553][ T7940] loop6: detected capacity change from 0 to 512
[  120.392511][ T7940] EXT4-fs: Ignoring removed mblk_io_submit option
[  120.409712][ T7940] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  120.435608][ T7940] EXT4-fs (loop6): 1 truncate cleaned up
[  120.464474][ T7950] loop5: detected capacity change from 0 to 1024
[  120.471640][ T7947] loop7: detected capacity change from 0 to 4096
[  120.480076][ T7950] EXT4-fs: Ignoring removed nomblk_io_submit option
[  120.519970][ T7959] loop1: detected capacity change from 0 to 512
[  120.541680][ T7959] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  120.559685][ T7959] System zones: 0-2, 18-18, 34-35
[  120.565082][ T7957] loop4: detected capacity change from 0 to 1024
[  120.572690][ T7957] EXT4-fs: Ignoring removed nomblk_io_submit option
[  120.795463][ T7987] loop7: detected capacity change from 0 to 512
[  120.807964][ T7986] loop4: detected capacity change from 0 to 1024
[  120.827642][ T7987] ext4: Unknown parameter 'euid<00000000000000060928'
[  120.857146][ T7993] loop1: detected capacity change from 0 to 4096
[  120.864690][ T7986] EXT4-fs: Ignoring removed nomblk_io_submit option
[  120.897667][ T7996] loop7: detected capacity change from 0 to 1024
[  120.904821][ T7996] EXT4-fs: Ignoring removed nomblk_io_submit option
[  121.001044][ T8004] loop1: detected capacity change from 0 to 512
[  121.041215][ T8004] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  121.058390][ T8004] System zones: 0-2, 18-18, 34-35
[  121.241525][ T8020] loop7: detected capacity change from 0 to 512
[  121.252030][ T8020] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  121.261720][ T8020] System zones: 0-2, 18-18, 34-35
[  121.382883][ T8032] loop7: detected capacity change from 0 to 1024
[  121.413192][ T8032] EXT4-fs: Ignoring removed nomblk_io_submit option
[  121.418656][ T8033] loop1: detected capacity change from 0 to 512
[  121.438081][ T8033] ext4: Unknown parameter 'euid<00000000000000060928'
[  121.465224][ T8046] loop6: detected capacity change from 0 to 4096
[  121.564243][ T8051] loop5: detected capacity change from 0 to 1024
[  121.566281][ T8059] loop6: detected capacity change from 0 to 512
[  121.571231][ T8051] EXT4-fs: Ignoring removed nomblk_io_submit option
[  121.579501][ T8059] EXT4-fs: Ignoring removed mblk_io_submit option
[  121.590549][ T8059] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  121.603420][ T8059] EXT4-fs (loop6): 1 truncate cleaned up
[  121.677867][ T8067] loop5: detected capacity change from 0 to 512
[  121.713213][ T8067] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  121.724479][ T8067] System zones: 0-2, 18-18, 34-35
[  121.826159][ T8084] loop5: detected capacity change from 0 to 1024
[  121.833454][ T8084] EXT4-fs: Ignoring removed nomblk_io_submit option
[  121.928981][ T8088] loop4: detected capacity change from 0 to 4096
[  122.015150][ T8094] loop5: detected capacity change from 0 to 512
[  122.026146][ T8094] ext4: Unknown parameter 'euid<00000000000000060928'
[  122.117551][ T8102] loop5: detected capacity change from 0 to 1024
[  122.133560][ T8102] EXT4-fs: Ignoring removed nomblk_io_submit option
[  122.202193][ T8111] loop4: detected capacity change from 0 to 512
[  122.232946][ T8111] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  122.241141][ T8111] System zones: 0-2, 18-18, 34-35
[  122.448836][ T8124] loop1: detected capacity change from 0 to 1024
[  122.453399][ T8126] loop5: detected capacity change from 0 to 4096
[  122.456483][ T8124] EXT4-fs: Ignoring removed nomblk_io_submit option
[  122.530546][ T8134] loop6: detected capacity change from 0 to 512
[  122.537171][ T8134] ext4: Unknown parameter 'euid<00000000000000060928'
[  122.630730][ T8146] loop7: detected capacity change from 0 to 512
[  122.651674][ T8146] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  122.660018][ T8146] System zones: 0-2, 18-18, 34-35
[  122.665665][ T8148] loop6: detected capacity change from 0 to 1024
[  122.678487][ T8148] EXT4-fs: Ignoring removed nomblk_io_submit option
[  122.720086][ T8160] loop7: detected capacity change from 0 to 512
[  122.726986][ T8160] EXT4-fs: Ignoring removed mblk_io_submit option
[  122.735470][ T8160] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  122.748226][ T8160] EXT4-fs (loop7): 1 truncate cleaned up
[  122.749089][ T8163] loop1: detected capacity change from 0 to 4096
[  122.844552][ T8170] loop1: detected capacity change from 0 to 1024
[  122.852273][ T8170] EXT4-fs: Ignoring removed nomblk_io_submit option
[  122.989638][ T8182] loop6: detected capacity change from 0 to 512
[  123.020254][ T8182] ext4: Unknown parameter 'euid<00000000000000060928'
[  123.096797][ T8191] loop1: detected capacity change from 0 to 512
[  123.112535][ T8191] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  123.130078][ T8191] System zones: 0-2, 18-18, 34-35
[  123.165035][ T8197] loop4: detected capacity change from 0 to 4096
[  123.239019][ T8204] loop6: detected capacity change from 0 to 1024
[  123.246095][ T8204] EXT4-fs: Ignoring removed nomblk_io_submit option
[  123.292480][ T8204] debugfs: 'ttyS3' already exists in 'caif_serial'
[  123.332328][ T8210] loop4: detected capacity change from 0 to 1024
[  123.344436][ T8210] EXT4-fs: Ignoring removed nomblk_io_submit option
[  123.438639][ T8220] loop1: detected capacity change from 0 to 512
[  123.445353][ T8220] ext4: Unknown parameter 'euid<00000000000000060928'
[  123.576475][ T8236] loop5: detected capacity change from 0 to 512
[  123.604841][ T8236] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  123.605397][ T8239] loop7: detected capacity change from 0 to 4096
[  123.627356][ T8236] System zones: 0-2, 18-18, 34-35
[  123.715476][ T8252] loop5: detected capacity change from 0 to 1024
[  123.722744][ T8252] EXT4-fs: Ignoring removed nomblk_io_submit option
[  123.746887][ T8256] loop7: detected capacity change from 0 to 1024
[  123.754144][ T8256] EXT4-fs: Ignoring removed nomblk_io_submit option
[  123.757615][ T8252] debugfs: 'ttyS3' already exists in 'caif_serial'
[  123.860622][ T8264] loop5: detected capacity change from 0 to 512
[  123.867156][ T8271] loop7: detected capacity change from 0 to 512
[  123.867244][ T8264] ext4: Unknown parameter 'euid<00000000000000060928'
[  123.874000][ T8271] EXT4-fs: Ignoring removed mblk_io_submit option
[  123.887704][ T8271] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  123.898905][ T8271] EXT4-fs (loop7): 1 truncate cleaned up
[  124.017208][ T8282] loop5: detected capacity change from 0 to 512
[  124.031863][ T8282] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  124.041677][ T8282] System zones: 0-2, 18-18, 34-35
[  124.108195][ T8288] loop5: detected capacity change from 0 to 4096
[  124.239444][ T8297] loop6: detected capacity change from 0 to 1024
[  124.246347][ T8297] EXT4-fs: Ignoring removed nomblk_io_submit option
[  124.252133][ T8295] loop5: detected capacity change from 0 to 1024
[  124.260386][ T8295] EXT4-fs: Ignoring removed nomblk_io_submit option
[  124.417410][ T8310] loop6: detected capacity change from 0 to 512
[  124.443023][ T8310] ext4: Unknown parameter 'euid<00000000000000060928'
[  124.471920][ T8318] loop4: detected capacity change from 0 to 512
[  124.491543][ T8318] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  124.519666][ T8318] System zones: 0-2, 18-18, 34-35
[  124.543098][ T8324] loop5: detected capacity change from 0 to 4096
[  124.649305][ T8334] loop4: detected capacity change from 0 to 1024
[  124.653859][ T8332] loop1: detected capacity change from 0 to 1024
[  124.669098][ T8332] EXT4-fs: Ignoring removed nomblk_io_submit option
[  124.678489][ T8334] EXT4-fs: Ignoring removed nomblk_io_submit option
[  124.716807][ T8332] debugfs: 'ttyS3' already exists in 'caif_serial'
[  124.844623][ T8357] loop1: detected capacity change from 0 to 512
[  124.871351][ T8357] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  124.879536][ T8357] System zones: 0-2, 18-18, 34-35
[  124.897321][ T8362] loop7: detected capacity change from 0 to 512
[  124.908714][ T8362] ext4: Unknown parameter 'euid<00000000000000060928'
[  124.959502][ T8369] loop1: detected capacity change from 0 to 4096
[  124.999824][ T8374] loop7: detected capacity change from 0 to 1024
[  125.006822][ T8374] EXT4-fs: Ignoring removed nomblk_io_submit option
[  125.056776][ T8380] loop1: detected capacity change from 0 to 512
[  125.064170][ T8380] EXT4-fs: Ignoring removed mblk_io_submit option
[  125.071884][ T8380] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  125.082727][ T8380] EXT4-fs (loop1): 1 truncate cleaned up
[  125.200884][ T8390] loop7: detected capacity change from 0 to 1024
[  125.207880][ T8390] EXT4-fs: Ignoring removed nomblk_io_submit option
[  125.384087][ T8400] loop7: detected capacity change from 0 to 512
[  125.402719][ T8380] ==================================================================
[  125.410861][ T8380] BUG: KCSAN: data-race in page_cache_sync_ra / page_cache_sync_ra
[  125.418795][ T8380] 
[  125.421119][ T8380] write to 0xffff88812b49e21c of 4 bytes by task 8388 on cpu 1:
[  125.428776][ T8380]  page_cache_sync_ra+0x4e9/0x6c0
[  125.433825][ T8380]  filemap_get_pages+0x2d0/0x1150
[  125.438861][ T8380]  filemap_splice_read+0x3a9/0x740
[  125.443983][ T8380]  ext4_file_splice_read+0x8f/0xb0
[  125.449116][ T8380]  splice_direct_to_actor+0x26c/0x680
[  125.454497][ T8380]  do_splice_direct+0xda/0x150
[  125.459268][ T8380]  do_sendfile+0x380/0x650
[  125.463703][ T8380]  __x64_sys_sendfile64+0x105/0x150
[  125.468917][ T8380]  x64_sys_call+0x2bb0/0x2ff0
[  125.473606][ T8380]  do_syscall_64+0xd2/0x200
[  125.478139][ T8380]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.484044][ T8380] 
[  125.486373][ T8380] write to 0xffff88812b49e21c of 4 bytes by task 8380 on cpu 0:
[  125.494006][ T8380]  page_cache_sync_ra+0x4e9/0x6c0
[  125.499058][ T8380]  filemap_get_pages+0x2d0/0x1150
[  125.504094][ T8380]  filemap_splice_read+0x3a9/0x740
[  125.509213][ T8380]  ext4_file_splice_read+0x8f/0xb0
[  125.514348][ T8380]  splice_direct_to_actor+0x26c/0x680
[  125.519727][ T8380]  do_splice_direct+0xda/0x150
[  125.524500][ T8380]  do_sendfile+0x380/0x650
[  125.528930][ T8380]  __x64_sys_sendfile64+0x105/0x150
[  125.534145][ T8380]  x64_sys_call+0x2bb0/0x2ff0
[  125.538836][ T8380]  do_syscall_64+0xd2/0x200
[  125.543360][ T8380]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.549257][ T8380] 
[  125.551598][ T8380] value changed: 0x0000000f -> 0x00000010
[  125.557317][ T8380] 
[  125.559642][ T8380] Reported by Kernel Concurrency Sanitizer on:
[  125.565809][ T8380] CPU: 0 UID: 0 PID: 8380 Comm: syz.1.1599 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  125.575539][ T8380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  125.585601][ T8380] ==================================================================
[  125.598374][ T8400] ext4: Unknown parameter 'euid<00000000000000060928'