last executing test programs:

7m39.746103859s ago: executing program 1 (id=1654):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000)
sendmmsg(0xffffffffffffffff, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000002940)=[{0x0}], 0x1}}], 0x1, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000080)={[{@nobh}, {@usrjquota}]}, 0x1, 0x77e, &(0x7f0000000a80)="$eJzs3d9rW1UcAPDvTX/tl7aCoPOpIGhhLLWzbgo+VHwQwcFAn91CmpXZtBlNOtZS0CGCL4KKb/qyZ3/MN1/98ar/hQ/imNoNJz5I5abJmq1Jl25pMs3nA7c9596bnPO9P849yT3cBNC3xtM/mYjDEfFhEjFam59ExFA1NRgxs7nezfW1fDolsbHx+u9JdZ0b62v5aHhN6mAt83hEfP9exJHM9nLLK6vzuWKxsFTLT1YWzk+WV1aPnlvIzRXmCovHp6anj5147sTxzsX650+rh65+9MrTX838/e5jVz74IYmZOFRb1hhHp4zHeG2bDKWb8DYvd7qwHkt6XQHuSXpqDmye5XE4RmOgmgIA/s/ejogNAKDPJK7/ANBn6t8D3Fhfy9en3n4j0V3XXoqIfZvx1+9vbi4ZrN2z21e9D3rgRnLbnZEkIsY6UP54RHz2zZtfpFPs0X1IgGbeuRQRZ8bGt7f/ybYxC7v1zA7Lhmv/x++Yr/2D7vk27f8836z/l7nV/4km/Z+RJufuvai+x/BWftv5v78Dhewg7f+92DC27WZD/DVjA7XcQ9U+31By9lyxkLZtD0fERAyNpPmpHcqYuP7P9VbLGvt/f3z81udp+en/rTUyvw6O3P6a2Vwldz8xN7p2KeKJwWbxJ7f2f9Ki/3uqzTJefeH9T1stS+NP461P2+OP2uikvbFxOeKppvt/a0RbsuP4xMnq4TBZPyia+Prn1vVv3P/plJZf/yzQDen+P7Bz/GNJ43jN8u7L+PHy6Hetlt09/ubH/3DyRjVdbzou5iqVpamI4eS17fOPbb22nq+vn8Y/8WTz83+n4z/9THimzfgHr/725b3Hv7fS+Gd3tf93n7hyc36gVfnt7f/pamqiNqed9q/dCt7PtgMAAAAAAAAAAAAAAAAAAAAAAACAdmUi4lAkmeytdCaTzW7+hvejcSBTLJUrR86Wlhdno/pb2WMxlKk/6nK04XmoU7Xn4dfzx+7IPxsRj0TEJyP7k/pzFGd7HDsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1B1s8fv/qV9Gel07AGDP7Ot1BQCArnP9B4D+4/oPAP3H9R8A+o/rPwD0H9d/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9tipkyfTaeOv9bV8mp+9sLI8X7pwdLZQns8uLOez+dLS+excqTRXLGTzpYW7vV+xVDo/HYvLFycrhXJlsryyenqhtLxYOX1uITdXOF0Y6kpUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA75ZXV+VyxWFiS2EqkG6atlTd6XtUOJGY68D4DtcPpAQin+4nkwahGhxPNWovhrrZNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP8F/wYAAP//hNkgcA==")
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r0}, 0x18)
mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00<r\xe9\x9cD\x90\xce\xe1\xc5\x85=\\!\xbbQ\xde\xc3\xe3\x7f\xcf\x1f\x17G\xa6\x13\xae\x92 \x1c\xbf\xfa\xe8e\x8cD\"\xa3w')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='svcrdma_decode_rseg\x00', r0, 0x0, 0x6}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002640)=@delchain={0x238, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1dc, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x1b4, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0xe8, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0xb1, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec7b2a9ceab9c40c5f9bd00ceff17d69ca7a27324ef7a1ad28d4b3c6a826826e9c291c16ab3d13e1f337751959e47bf0fe515b70ea5a3584d9cdba83a705d3257305f931866cf9f1faa34fce0e8a7ee76e20f05d4e1adbee4ba00ddd7b896197ea2a0391ef62c651d59ed7e0e8964192a2c1c29308d03650349840a4d759fc9421e3569c90"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x5c, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x29, 0x6, "726786f34dc39a3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaeded"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x3c, 0x8, 0x0, 0x0, {{0x9}, {0x4}, {0xd, 0x6, "4ac6768e05c6ec90b2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_FD={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xca}]}}]}, 0x238}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
gettid()
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000000)=0xb, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r3, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60)
listen(r3, 0x0)
accept4$nfc_llcp(r3, 0x0, 0x0, 0x0)

7m38.923955391s ago: executing program 1 (id=1668):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002640)=@delchain={0x230, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1dc, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x1b4, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0xe8, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0xb1, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec7b2a9ceab9c40c5f9bd00ceff17d69ca7a27324ef7a1ad28d4b3c6a826826e9c291c16ab3d13e1f337751959e47bf0fe515b70ea5a3584d9cdba83a705d3257305f931866cf9f1faa34fce0e8a7ee76e20f05d4e1adbee4ba00ddd7b896197ea2a0391ef62c651d59ed7e0e8964192a2c1c29308d03650349840a4d759fc9421e3569c90"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x5c, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x29, 0x6, "726786f34dc39a3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaeded"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x3c, 0x8, 0x0, 0x0, {{0x9}, {0x4}, {0xd, 0x6, "4ac6768e05c6ec90b2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_FD={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xca}]}}]}, 0x230}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {0x0}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400})

7m38.850879223s ago: executing program 1 (id=1669):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18)
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000c80)={[{@discard}, {@bh}, {@noblock_validity}]}, 0x2c, 0x52c, &(0x7f0000000640)="$eJzs3d9rY1kdAPBvMv2Rdjrbru7DKuqO6+oowyRtZrcs+6DriyDLssK6TyKzpc2U0qQpTbpua8EO+Oar4IBP+if4IPggzJPvvumbLyMojDo4TAWRyE1uOm2adMq0aWaazwcuOefc2/s9J3DP6T1J7glgaF2NiN2IGIuIjyNiOi3PpFu829qS4x4/3Fnce7izmIlG48N/jqRH7iy2j2+7nJ4zF/FBkh/vEre2tb26UC6XNtJ8oV5ZL9S2tm+sVBaWS8ultWJxfm5+9u2bbxXPrK2vVX7z4Dsr7330+9998f4fd7/x46TO32rtGkvadmaBDmi9L6MxdaAseefe60ewAbiUtmds0BXhmWQj4jMR8Xqa3pcbXJ0AgP5qNKajMX0w31vmBMcAAM+/5J5/KjLZfHr/PxXZbD7fnMPLvRKT2XK1Vr9+u7q5thTNOayZGM3eXimXZtO5wpkYzST5uWb6Sb7Ykb8ZES9HxM/HJ5r5/GK1vDSof3oAYMhd7hj/H423xv8T8AkBALzIjOQAMHyOjv+jA6kHAHB+3P8DwPA5MP53+60uAHAB5Tp++w8AXHwH7v9Huh7wavzkh+dXHQDgHPj8HwCGyvfefz/ZGnvp86+XPtnaXK1+cmOpVFvNVzYX84vVjfX8crW63HxmT+Vp5ytXq+tzb8bmp4V6qVYv1La2b1Wqm2v1W83net8q+WEBAAzey6/d+3MmInbfmWhu0V7LwRcC4MJzmcPwujToCgAD0/37PsAwMB8PZJ6yv+dXhO72/puJU9QH6L9rn+sx/9/tf4M7+6n/Nc6vikCfmP+H4XW6+X+zB/AiM/8Pw6vRyFjPHwCGzAnu4H1FEC64Z/78HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIbYVHPLZPPpWuBTkc3m8xFXImJmYjRze6Vcmo2IlyLiT+Oj40l+btCVBgBOKfv3TLr+17XpN6Y6945l/jPefI2IH/3yw198ulCvb8wl5f/aL6/fTcuLXQOM978NAMABI50F7XG6PY631/d9/HBnsb2dZwUffLu1uGgSdy/d2lVvVT4XoxEx+e/MocZkzmhh4t07EfFqZ/uz+/tn0pVPO+Mnsa/0LX40Wzh1KH72UPxsc1/rNXkvPnsGdYFhcy/pf97tdv1l42rzNb3+Moc701z87Gjn+gza/d9eo7P/a13vH1zJNfuabv3f1ZPGePMP3+25786lxudHIvaO9L/tFaFzzdSR+CMRb3Q74U+/+Wizo+gvX/jS673iN34VcS2Oi99KFeqV9UJta/vGSmVhubRcWisW5+fmZ9+++Vax0JyjLrRnqo/6xzvXX+rd/ojJHvFzx7U/Ir7a66Qdfv3fj3/w5WPif/0r3eJn45Vj4idj4tdOGH9h8rc9l+9O4i/1aP/Iofhjh/4uKbt+wvj3/7q9dMJDAYBzUNvaXl0ol0sbEqdN5Pp15svPSQMleiT+9tGha2rg9TmTxMC6JOCcPLnoB10TAAAAAAAAAAAAAACgl9r300f+9fHHcINuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfX/wMAAP//OkHLZw==")
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002680)=ANY=[@ANYBLOB="140000001000010000000000000007000000000a60000000060a0b0400000000000000000200000034000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c617374000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0)
close(r2)

7m38.640615846s ago: executing program 1 (id=1676):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4000, 0x10000, 0x0, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x80, 0x7a5, &(0x7f0000000f80)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0)
arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x11)
set_mempolicy(0x6005, 0x0, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
r3 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000080), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLom1bZCqiyCoICJaKHUTXOokFKQUEUGFioiL0gq1xa11cnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVSbUT50i/38d3vB5fcJe97//e4e94kw5EAjTWTZCFJK8lskk6S4mKD+6pl5mxzZ/JgJen1nvqlGLSrtivn/aaTbCd5NMl+WeSVdrK599zxb4dPPPj2RueBD/eenRzrQZ45OT568vSDpbc+WXxk86tvfloqspDu347r6hVDXmsXyR3Xo9gNomjXPQL+j+U3Pv62n/s7k9w/yH8nZaqT9876LfudPPz+v/V99+ev7x7nWIGr1+t1+p+B2z2gccok3RTlXJJqvSzn5qrv8N+1pspX19Zfn315bWP1pbpnKuCqDH73fjbx6fQ/8v9jq8o/cPPqJkdPL+9+318/bdU9GmCc+vmffWHrocg/NI78Q3PJPzSX/ENzyT80l/xDc8k/NJf8Q3PJPzSX/ENzXcw/ANAsvYm670AG6lL3/AMAAAAAAAAAAAAAAAAAAFy2M3mwcr6Mq+YX7yUnjydpD6vfGvwfcXLr4HHq16Lf7C9F1W0kz9874g5G9FHNd1/f9kO99b+8p976W6vJ9ptJ5tvty9dfcXb9Xbvb/+P9zosjFhjRY8/UW/+P3XrrLx4mn/fnn/lh80+ZuwbPw+efbv/8jVj/td9H3AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABj82cAAAD//4TDbAU=")
signalfd(r3, &(0x7f0000000840)={[0xe]}, 0x8)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@o_path={&(0x7f0000000880)='mnt\x00', 0x0, 0x4010, r3}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

7m37.763508649s ago: executing program 1 (id=1681):
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01dfffffff9a2600000021", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0)

7m36.299087031s ago: executing program 1 (id=1697):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
pidfd_getfd(0xffffffffffffffff, r0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
socket(0x10, 0x803, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'tunl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x20, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3d, 0x14, 0x64, 0x0, 0x20, 0x4, 0x0, @empty, @empty}}}})
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38)
read$snapshot(r3, 0x0, 0x0)

7m36.277210081s ago: executing program 32 (id=1697):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
pidfd_getfd(0xffffffffffffffff, r0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
socket(0x10, 0x803, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'tunl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x20, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3d, 0x14, 0x64, 0x0, 0x20, 0x4, 0x0, @empty, @empty}}}})
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38)
read$snapshot(r3, 0x0, 0x0)

7m20.739851073s ago: executing program 2 (id=1879):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040))
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000dc0)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0)
unshare(0x10040000)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000200)={0x6, 0x0, 0x100, 0x1, 0x9, "90897f0000030000000000f4ff1d277fffffeb"})
ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000080)={0x9, 0x2, 0x0, 0x80fa, 0x1c, "1300002b2058de35"})
r5 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000002c0)=0xff)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x1}, 0x0, 0x401, 0xfffffffd, 0x0, 0x0, 0x4, 0xfffe, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = gettid()
sendmsg$unix(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r6, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881)
bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000001c0)=0x7f, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

7m20.643533515s ago: executing program 2 (id=1881):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x4, 0x0, 0x203, 0x7, "ec28a144f13d7607"})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
syz_open_pts(r0, 0x0)

7m19.758022458s ago: executing program 2 (id=1893):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001180)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081204e81f782db44b904021d080201000000407e12a118000c000600142603600e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x700)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x437, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x56553}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='mm_page_free\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x91)
pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f0000000000)={0x17c04, r4, 0x6, 0x100000000, 0x6, 0x2d1})

7m19.466910112s ago: executing program 2 (id=1896):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4000, 0x10000, 0x0, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x80, 0x7a5, &(0x7f0000000f80)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0)
arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x11)
set_mempolicy(0x6005, 0x0, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
r3 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000080), 0x0, 0x236, &(0x7f0000000300)="$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")
signalfd(r3, &(0x7f0000000840)={[0xe]}, 0x8)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@o_path={&(0x7f0000000880)='mnt\x00', 0x0, 0x4010, r3}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
syz_clone(0x3000, 0x0, 0x0, &(0x7f0000000800), 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

7m19.021735419s ago: executing program 2 (id=1902):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100030a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x200c405a)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x2, <r3=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r4}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
clock_gettime(0x7, &(0x7f0000000240))
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
lsetxattr$system_posix_acl(0x0, &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, 0x24, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYRES32=r4], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18)
r7 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r8, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r9, 0xffffffffffffffff, 0x0)

7m18.007068494s ago: executing program 2 (id=1910):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x6001, 0x4, 0x3c8, 0x0, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@dev, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'team_slave_0\x00', {}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @mac=@broadcast, @multicast2, @private, 0xf}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@grpid}, {@orlov}]}, 0xfc, 0x572, &(0x7f0000003780)="$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")
chdir(&(0x7f00000000c0)='./file0\x00')
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)

7m18.006365254s ago: executing program 33 (id=1910):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x6001, 0x4, 0x3c8, 0x0, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@dev, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'team_slave_0\x00', {}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @mac=@broadcast, @multicast2, @private, 0xf}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@grpid}, {@orlov}]}, 0xfc, 0x572, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hvSuj6TKadKx14PbgXnyRIYg4EP8A330c/gP+FQMdDBlFH0So3PSmy9qkv5aZbPl84Lbn5N7bc78593t7Tm5CAhhYx7IfhYiXI+KbJOJQy7pi5CuPrW63/PD6VLYksbLy6Z9JJPljze2T/PeBvPJSRPz6VcTJwsZ2a4tLs+VKJZ3P62P1uStjtcWlU5fmyjPpTHp5YnLyzFuTE+++83bXYn39/N/ff3L3wzNfH1/+7uf7h28ncTYO5uta43gCN1orx8r/5qXhOLtuw/EuNNZPkl4fALsylOf5cGTXgEMxlGc98Pz7MiJWgAGVyH8YUM1xQHNu36V58DPjwQerE6BG7COt8RdXXxuJvY250f7l5LGZUTbfHe1C+1kbv/xx53a2xOavQ+zbog6wIzduRsTpYnHj9T/Jr3+7d7rx4vHm1rcxaP9/oJfuZuOfN9qN/wpr459oM/450CZ3d2Pr/C/c70IzHWXjv/fajn/XLl2jQ3nthcaYbzi5eKmSno6IFyPiRAzvyeqb3c85s3xvpdO61vFftmTtN8eC+XHcL+55fJ/pcr0cESNPEnfTg5sRrxTbxZ+s9X/Spv+z5+P8Nts4mt55tdO6reN/ulZ+initbf8/uqOVbH5/cqxxPow1z4qN/rp19LdO7fc6/qz/928e/2jSer+2tvM2ftz7T9pp3W7P/5Hks0a5mQTXyvX6/HjESPLxxscnHu3brDe3z+I/cXzz61+78z+bfH2+zfhvHbnVcdN+6P/pHfX/zgv3Pvrih07tb6//32yUTuSP5Ne/9vJzZbsH+KTPHwAAAAAAAPSTQkQcjKRQWisXCqXS6vs7jsT+QqVaq5+8WF24PB2Nz8qOxnCheaf7UMv7Icbz98M26xPr6pMRcTgivh3a16iXpqqV6V4HDwAAAAAAAAAAAAAAAAAAAH3iQIfP/2d+H+r10QFPXeOLDfb0+iiAXtjyK/+78U1PQF/aMv+B55b8h8El/2FwyX8YXPIfBpf8h8El/2FwyX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqvPnzmXLyvLD61NZffrq4sJs9eqp6bQ2W5pbmCpNVeevlGaq1ZlKWpqqzm319yrV6pXxiVi4NlZPa/Wx2uLShbnqwuX6hUtz5Zn0Qjr8v0QFAAAAAAAAAAAAAAAAAAAAz5ba4tJsuVJJ5xU6Ft6PvjiMpxngql3tXuyXKBQ6FG7m3buzvXp4UQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdf4LAAD//++4Mnc=")
chdir(&(0x7f00000000c0)='./file0\x00')
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)

7m12.684457514s ago: executing program 3 (id=1972):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@grpid}, {@orlov}]}, 0xfc, 0x572, &(0x7f0000003780)="$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")

7m12.557260145s ago: executing program 3 (id=1974):
socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x60008580)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000900)={[{@sysvgroups}, {@orlov}, {@data_err_abort}, {@init_itable}, {@journal_async_commit}, {@grpjquota, 0x2e}, {@oldalloc}, {@errors_continue}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x0, 0x4da, &(0x7f0000000140)="$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")
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18)
syz_emit_ethernet(0x4e, &(0x7f0000000440)=ANY=[@ANYBLOB="99177fa54f29ece65fbcee5586dd6c01a7c3001800"], 0x0)
timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000000)="9c65ee6255b7f8444aea", &(0x7f00000006c0)="2b07b12f4a5e4fd129456d824eea997f9ff4410d33fd612c1efad3e6d3f8b19a3109c8f929f1a7fd861931"}}, &(0x7f0000bbdffc))
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
finit_module(r1, &(0x7f0000000140)='GPL\x00', 0x3)
socket$netlink(0x10, 0x3, 0x14)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
socket$kcm(0x10, 0x2, 0x0)

7m12.431374297s ago: executing program 3 (id=1979):
getpid()
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff85000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
syz_read_part_table(0x5c8, &(0x7f0000000600)="$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")

7m12.095789562s ago: executing program 3 (id=1987):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4000, 0x10000, 0x0, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x80, 0x7a5, &(0x7f0000000f80)="$eJzs3c9rXNUeAPDvnfxq0r6XPHjwXl0FBA2UTkyNrYKLigsRLBR0bRsm01AzyZTMpDQh0BYR3AgqLgTddO2PunPrj63+Fy6kpWparLiQkTuZSSbNTJq0mZlgPh+4uefcc2/O+c65P87MvcwEcGCNpn8yEUcj4v0kYri2PImIvmqqN+L02nr3V1dy6ZREpfL6r0l1nXurK7lo2CZ1uJb5f0R8907EsczWektLy7NThUJ+oZYfL89dGi8tLR+/ODc1k5/Jz5+cmJw8ceq5Uyf3Ltbff1w+cvuDV57+8vSfb//v5nvfJ3E6jtTKGuPYK6MxWntN+tKXcJOX97qyLku63QAeSXpo9qwd5XE0hqOnmmphsJMtAwDa5WpEVACAAyZx/QeAA6b+OcC91ZVcferuJxKddeeliDi0Fn/9/uZaSW/tnt2h6n3QoXvJpjsjSUSM7EH9oxHx6ddvfp5O0ab7kADNXLseEedHRree/5Mtzyzs1jPbFVYGqrPRBxY7/0HnfJOOf55vNv7LrI9/osn4Z6DJsfsoHn78Z27tQTUtpeO/FxuebbvfEH/NSE8t96/qmK8vuXCxkE/Pbf+OiLHoG0jzE9VVmz8FNXb3r7ut6m8c//324VufpfWn8401Mrd6BzZvMz1VnnrcuOvuXI94ordZ/Ml6/yctxr9nd1jHqy+8+0mrsjT+NN76tDX+9qrciHiqaf9v9GWy7fOJ49XdYby+UzTx1U8fD7Wqf6P/B6rztP76e4FOSPt/aPv4R5LG5zVLu6/jhxvD37Yqa9z/m8fffP/vT96opvtry65MlcsLExH9yWtbl5/Y2Laer6+fxj/2ZPPjv9X+n6k9G3t+Pbe93tu/fFH7V03jr7rWKv72SuOf3lX/b5Oo1LZ5oOjm/dmeVvXvrP8nq6mx2pKdnP8e0tLH2JsBAAAAAAAAAAAAAAAAAAAAAAAAYPcyEXEkkkx2PZ3JZLNrv+H93xjKFIql8rELxcX56aj+VvZI9GXqX3U53PB9qBO178Ov5088kH82Iv4TER8NDFbz2VyxMN3t4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5vDm3/+/ms6y2bWynwe63ToAoG0OdbsBAEDHuf4DwMGzu+v/YNvaAQB0zq7f/1eS9jQEAOiYHV//z7e3HQBA57j/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJudPXMmnSp/rK7k0vz05aXF2eLl49P50mx2bjGXzRUXLmVnisWZQj6bK861/EfX1maFYvHSZMwvXhkv50vl8dLS8rm54uJ8+dzFuamZ/Ll8X8ciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdKy0tz04VCvkFiW0Tg/ujGfsm0Rv7ohn/+ER/12pvPEsMdu8EBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDP/R0AAP//aHclQg==")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0)
arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x11)
set_mempolicy(0x6005, 0x0, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
syz_clone(0x3000, 0x0, 0x0, &(0x7f0000000800), 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

7m11.430749662s ago: executing program 3 (id=1994):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) (async, rerun: 64)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r3}, 0x10) (async)
getrlimit(0x7, &(0x7f0000000780)) (async, rerun: 64)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, r1, 0x309, 0x0, 0x0, {0x1d}}, 0x14}}, 0x0) (rerun: 64)

7m10.369876928s ago: executing program 3 (id=2004):
r0 = socket(0x10, 0x802, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x204410, &(0x7f0000000740), 0x1, 0x4a1, &(0x7f00000007c0)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
pipe2(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r2, 0x0, 0x1, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000600)='4', 0x1}], 0x1, 0x0)
write$binfmt_script(r4, &(0x7f00000000c0), 0xb)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r7}, 0x18)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={<r9=>0xffffffffffffffff}, 0x111, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r9, 0x1}}, 0x18)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
gettid()
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_config_ext={0x8, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r10 = syz_io_uring_setup(0x254c, &(0x7f0000000000)={0x0, 0x7c87, 0x800, 0x0, 0x39}, &(0x7f0000000080), &(0x7f00000001c0))
io_uring_register$IORING_REGISTER_PBUF_RING(r10, 0x16, &(0x7f0000000900)={&(0x7f0000003000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x3}, 0x1)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r10, 0x17, &(0x7f0000000f40)={0x0, 0x0, 0x3}, 0x1)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
write(r0, &(0x7f0000000140)="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", 0xfc)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)

7m10.316108789s ago: executing program 34 (id=2004):
r0 = socket(0x10, 0x802, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x204410, &(0x7f0000000740), 0x1, 0x4a1, &(0x7f00000007c0)="$eJzs3M1vVFUbAPDn3mnLN+3Li6h8SBWNjR8tLags3Gh0p4mJLnBjUttCKgM1tCRCiFZjcGlI3BvdGKJ/gSvdGHVl4lb3hoQoMQFdmDF35t4yU2ZKW6YdcH6/5JZz5p7pOc+ce+499x6mAXStwexHErE1In6JiP5atrHAYO2f61fPT/x19fxEEpXKq78n1XLXrp6fKIoW79uSZ4bSiPTDJK+k0ezZcyfGy+Wp03l+ZO7k2yOzZ889OX1y/PjU8alTY0eOHD40+szTY0+1Jc4srmu7353Zm/S8fvHliaMX3/zhqzQidu2r7a+P47akWxaSg1ngf1SqFhd7pC2V3Tm21aWTng42hBUpRUTWXb3V8d8fpbjRef3x4gcdbRywprJr04bWu+crwH9YEp1uAdAZxYU+u/8ttnWaetwRrjxXuwHK4r6eb7U9PZHmZXrXsP77IuLo/N+fZlvk/fDP1jWsEADoet9k858nms3/0thVV257voYyEBH/i4gdEfH/iNgZEfdEVMvem89nVqK2NFRayN88/0wvrzq4Zcjmf8/ma1uN879i9hcDpTy3rRp/b3Jsujx1MP9MhqJ3Q5YfXaKOb1/4+eNW+wbr5n/ZltVfzAXzdlzuWfSAbnJ8brxdk9Ir70fs7mkWf7KwEpBExP0RsXtlv3p7kZh+7NLeVoVuHf8S2rDOVPks4tFa/8/HovgLydLrkyMbozx1cKQ4Km72408XXmle+8bbi78Nsv7f3Hj8LyrR/2dSv147u/I6Lvz6Uct7ytUe/33Ja9Ux2Ze/9s743Nzp0Yi+5KVqvuH1sRvvLfJF+Sz+oQPNx/+O/D1Z/HsiIjuI90XEAxGxP2/7gxHxUEQcWCL+759/+K0VxT+9vv0/2fT8t3D8DzT2/8oTpRPffd2q/jz+4mTbov8PV1ND+SvV898ttG5OlKciKpVVH80AAABw98luvLdGkg4vpNN0eLj2f/h3xua0PDM79/ixmTOnJmvfERiI3rR40tWfPw/N7rZHk/n8N9aej47lz4qL56WH8ufGn5Q2VfPDEzPlyQ7HDt1uS4vxn/mt1OnWAWvO97Wgey0e/2mH2gGsP9d/6F7GP3Qv4x+6V934//LMhT3VxHvVn/sXdjRdC1jiL4cAd4dF1/9Ln3eqIcC6M/+H7mX8Q/cy/qEr3c73+juT2JS3/FaF+zrf1NUlvuidLWXx1e1KeiI637DGRKRLlXkjmu8ajIg1aljcER9LuxPJMg715SaOHc+HznIKd/KsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0D7/BgAA//9ajd4t")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
pipe2(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r2, 0x0, 0x1, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000600)='4', 0x1}], 0x1, 0x0)
write$binfmt_script(r4, &(0x7f00000000c0), 0xb)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r7}, 0x18)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={<r9=>0xffffffffffffffff}, 0x111, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r9, 0x1}}, 0x18)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
gettid()
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_config_ext={0x8, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r10 = syz_io_uring_setup(0x254c, &(0x7f0000000000)={0x0, 0x7c87, 0x800, 0x0, 0x39}, &(0x7f0000000080), &(0x7f00000001c0))
io_uring_register$IORING_REGISTER_PBUF_RING(r10, 0x16, &(0x7f0000000900)={&(0x7f0000003000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x3}, 0x1)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r10, 0x17, &(0x7f0000000f40)={0x0, 0x0, 0x3}, 0x1)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
write(r0, &(0x7f0000000140)="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", 0xfc)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)

7m9.071811948s ago: executing program 5 (id=2018):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="804200000000000014000300"], 0x44}}, 0x0)

7m8.961733879s ago: executing program 5 (id=2019):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000001c0)=0x7f, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

7m8.90616517s ago: executing program 5 (id=2020):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r0}, 0x10)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x1, 0x7fff7ffd}]})
epoll_create1(0x80000)
epoll_create1(0x0)
socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x6)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0xfffb}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_ctinfo={0x30, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r4, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)
close_range(r1, 0xffffffffffffffff, 0x0)

7m8.519967586s ago: executing program 5 (id=2022):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4000, 0x10000, 0x0, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x80, 0x7a5, &(0x7f0000000f80)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0)
arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x11)
set_mempolicy(0x6005, 0x0, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000080), 0x0, 0x236, &(0x7f0000000300)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
syz_clone(0x3000, 0x0, 0x0, &(0x7f0000000800), 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

7m7.940128524s ago: executing program 5 (id=2026):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x1)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
listen(r1, 0x5)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4010, r0}, 0x18)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r3 = dup2(r2, r2)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0)
accept(r1, &(0x7f0000000080)=@can, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r7, &(0x7f0000000100)='P', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

7m6.351008528s ago: executing program 5 (id=2036):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_io_uring_setup(0x7871, &(0x7f0000000140)={0x0, 0x5883, 0x1000, 0x8003, 0x1c2}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000680)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="04000000040000000400000005", @ANYRES64=r0, @ANYRES16], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000500)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000300), &(0x7f00000001c0)=r3}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01002dbd7000000000000100000068852e43aeffaa7b99ab1dcb29b1307e373e525d212d79badac7eecd9296c6b07ba207"], 0x14}, 0x1, 0x0, 0x0, 0x20048091}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1})
io_uring_enter(r0, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0)
setitimer(0x0, &(0x7f0000000140)={{0x692}, {0x9f, 0x7}}, 0x0)
getitimer(0x0, &(0x7f0000000000))
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7, 0x1}, 0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r8 = socket(0x18, 0x1, 0x0)
close(r8)
r9 = socket(0x18, 0x3, 0x2)
setsockopt(r9, 0x1000000029, 0x1a, &(0x7f0000000000)=',\x00\x00\x00', 0x4)
connect$unix(r8, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
write(r8, &(0x7f0000000080)="0008007dddbf", 0x6)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x2, &(0x7f0000000200)=<r11=>0x0)
io_getevents(r11, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0)
io_getevents(r11, 0x15b, 0x15b, &(0x7f0000000600), 0x0)
io_submit(r11, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x2, r10, 0x0}])

7m6.348750918s ago: executing program 35 (id=2036):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_io_uring_setup(0x7871, &(0x7f0000000140)={0x0, 0x5883, 0x1000, 0x8003, 0x1c2}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000680)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="04000000040000000400000005", @ANYRES64=r0, @ANYRES16], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000500)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000300), &(0x7f00000001c0)=r3}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01002dbd7000000000000100000068852e43aeffaa7b99ab1dcb29b1307e373e525d212d79badac7eecd9296c6b07ba207"], 0x14}, 0x1, 0x0, 0x0, 0x20048091}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1})
io_uring_enter(r0, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0)
setitimer(0x0, &(0x7f0000000140)={{0x692}, {0x9f, 0x7}}, 0x0)
getitimer(0x0, &(0x7f0000000000))
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7, 0x1}, 0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r8 = socket(0x18, 0x1, 0x0)
close(r8)
r9 = socket(0x18, 0x3, 0x2)
setsockopt(r9, 0x1000000029, 0x1a, &(0x7f0000000000)=',\x00\x00\x00', 0x4)
connect$unix(r8, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
write(r8, &(0x7f0000000080)="0008007dddbf", 0x6)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x2, &(0x7f0000000200)=<r11=>0x0)
io_getevents(r11, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0)
io_getevents(r11, 0x15b, 0x15b, &(0x7f0000000600), 0x0)
io_submit(r11, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x2, r10, 0x0}])

1m23.770486278s ago: executing program 6 (id=6794):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000c00)={0x22c, 0x0, 0x200, 0x70bd2a, 0xede, {}, [@TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'pimreg1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'netpci0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}]}, @TIPC_NLA_NODE={0xbc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_NODE_ID={0x6b, 0x3, "f1b43cfc60c3526c5543e0fe57d8c5a23f05138845abc3f919968948e3f5b59fd18dc801c51cfd5baf0388faf1a195318a2ebff42c38cc2899a11bb1c56979f99513634f84f96ebfa0b9bf618d50ce1481e1c32edd78f63f696376d980f4146496d0cccde00c83"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "5057c80b0cb2c7211b1cbb90d691c08cf275eeb6623c25af"}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb82}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x44000}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x5, 0x1, 0x7, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x40, 0x7, 0x2, 0xf00, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xa}, 0x0, 0x0, 0x0, 0x5, 0x800000007, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

1m23.581806101s ago: executing program 6 (id=6797):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x500, 0x0, 0x2000040}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)

1m23.322392955s ago: executing program 6 (id=6798):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000440)={[{@bsdgroups}, {@noblock_validity}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@debug}, {@jqfmt_vfsv1}]}, 0x1, 0x604, &(0x7f0000000c00)="$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")
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r3, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe752", 0x53}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa8", 0xea}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7", 0x28}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e3", 0x62}], 0x1}}], 0x2, 0xc0)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030007e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10)
mount(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x4014, 0x0)

1m22.94850112s ago: executing program 6 (id=6802):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
r2 = memfd_create(&(0x7f0000001880)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5`\xda\xca\xd1\xab:\x18\x10\x9b\xd0w', 0x0)
write$binfmt_misc(r2, &(0x7f0000000180)="e502", 0x2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x50}}, 0x0)
r6 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESHEX], 0x2, 0x699, &(0x7f0000000140)="$eJzs3V9rG9n9x/HPyLIte3+E5dcSQsifk6QLDk2VkbxxMCl01dHInlbSiBm52FBY0o29hMjZNkmh8c3WN/0D2yfQu970og+i0Ot9Fr0pLSztXaE3KnNmJEvRv3ijOLvN+2V2NTrznTnfmaPoy9iaIwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADle1XVLjupBc2fXTOZVo7AxZX26t0XdTBduzuxXcpL/VCjoQtp04Zsnq88n/7uuS+mzSyokDwUdvXP+3XvfyOd6209J6MvQaXf49PnRo/udzv6Tl4hd0Kl3/yYp11taycZkTNCW3wziMGhUtnwTxKHZ3Nhwb2/XYlML6n68F7f9hvEiP9cOI7Pm3TSlzc114xf3wp3mVrVS93uNd79Tdt0N84PldKAlFWNvO6jXg+aWjUlWJzF3zWc/TgP8SsOYg4ed/fVZR5IElV4mqDwrqOyWy6VSuVzauLN5567r5kca3ITj9mkkYu4vWnzNzOeNG5iDXFL//+pIdRXU1I52Zcb+eKoqUqjGhPWZXv1/77Y/td/B+t+r8hek72WrL8rW/yvpsyuT6v+EXIyM3WDcGmdC++l+Fm1GRk/1XEd6pPvqqKN9PZnDvo3M1bns5Qx+tuSrqUCxQgVqqGJbTNZitKkNbcjVh9pWTbGMagpUl69Ye4rVlm9fUZ4i+aqorVCRjNbk6aaMStrUptZl5KuoPYXaUVNbqqqif3e73QM9tOd9fUqO6gWVJgQsDwaVp+xpUv3/yafp6zSr/y71/22Vvg6W04fPp8UAXwHd7Pp/UG72ZldfX0YAAAAAAGDeHPvbd8f+7f6ypK5qQd1333RaAAAAAABgjhx1l3VJTnL9L+myHK7/AQAAAAD4X+PYe+wcSav2Q/3OyZ1QL/NLgIUzSBEAAAAAALwie+f/lSWpayetuCrnVNf/AAAAAADga+A3A3Ps53tz7HZ7f9bPSYpby86f/7msaNE5bu1+yzmsJGsqh1nMyCcA2rWLzrlsol77sCTJPvP8S07WWzYJZn/ewS8OZs3170QvJLC0MLiDCQk4Sc8b+eyZPtO1dJNr2TzzD45ysmvSXlZrQd0vemH9XkmVyrlc299t//zxw19IUf84Dx529osffdJ5YHM5TpqOD5OdfjqUTm78yTjJ5Zmdb8HeczHuiFdU63X522Zj1bH9ur3jX1DlMDfY0bQBOOnzV7qejtn11TR29ag/435y/IXk+EtFO2RDRx8tOidZlF488nEDMSGLgs3iRhpzY+2Gyn9Ll/ujkHMK316QysXRMRjKojyYxexz4fxr5FwMZGEfemsGzsV6ksVfkh1NyGL9dFmMjAgAvCkHuiz7LnRZdhLzfhUqZHW3Vx56b2pfqu7Mru4fDFf3Z7/vdu0GC1I++9vE1F4KSt7R1xxbh5bSQ8pfHPOO7mZ1paAJ7+juK1S3pK8/nXwHUpb2SBb/6Xa790q239+9UFX/MNTdSL9xvbyQnMLbzw5/aifAT3y8//H+43J5fcN933XvlLVoDyN7WBC1BwAwYvZ37MyMcN7XtTTi2oN/vJcuDVW8/+9/pKCoj/SJOnqgW72vELg6fq+rAx9DuJVetWrgqtWcf/ee/V664diSbk28qrO1dCC23I9dVG+T4Up9Erv+mkcBAICzdX1GHR5f/wtD9f+W1tKItYtjr7uHa3l2ddy/pJ8UW5qd/AfzPhsAALwd/OgLZ7X9ayeKgtaHpc3NUqW97Zso9H5ooqC65Zug2fYjb7vS3PJNKwrboRfWTSvSclD1YxPvtFph1Da1MDKtMA527Te/m+yr32O/UWm2Ay9u1f1K7BsvbLYrXttUg9gzrZ3v14N424/sxnHL94Ja4FXaQdg0cbgTeX7RmNj3BwKDqt9sB7UgWWyaVhQ0KtGe+VFY32n4purHXhS02mG6w15fQbMWRg2722K+O+7zAgAAvHWePj96dL/T2X/y4sJKcmmethxrQszowpKePk+uypOWfLaKOYIAAPiKOSngp9io8BoTAgAAAAAAAAAAAAAAAAAAAAAAI2bf0nfKhcVxNwtK/Zafncta9Eud3GI4sh9H807sNAu5027VuyXi6NHnU4JX+i290z8Yc3xmB/j3/5PesS1KW/Lz72tlyuC+joXvHqRndGJMsnLsquX+WOTn/88hWXj8xwmrut1ud/rmy8PncGnaAQ4v5CU9WXqFITj79yIAZ+u/AQAA//9b5DOa")
r7 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
ptrace$pokeuser(0x6, r7, 0x358, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000940)={<r8=>0x0}, &(0x7f0000000b40)=0xc)
r9 = syz_clone(0x80008000, &(0x7f0000000b80)="bf281612fec5803ae21071ec78f01140289b77e5d0b8ab220eaf62fa44adec2b604a0b0958e7137dc347bf02d20ebba15e75ad403ab9786bd766798551bc9fd736a9e823cbc66f037abe24f1570a386ac21e90a19e8817fb277c314cce8abf41a394d4e034c8da2ee45527fd38738b713699d0c268b725c10f18aa32de9bc1ab4c7e990e3b89c29d04481b1420c8d44913746f55cc02b5604ce3cb3dc559842eece92e92a3105d4abc11090d7683144f9ea8ec641fdfa6b92a97c2dbf306ef05eadd56e8", 0xc4, &(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00)="4716f55ff5bf9c01584d456ebfd2ab95ef91ff375a7da11f10c7624dd7936441a6978355829e49c71f9e68a0d691830983b32c8f4cb9c2c4a3d49375a6c0744d9527f2784415e2bc5e6ecced5091a384392ba10e1b8607e4f10859ed714b819a5918a8")
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000d80)=<r10=>0x0)
syz_clone3(&(0x7f0000000e00)={0x40000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x33}, &(0x7f0000000e80)=""/56, 0x38, &(0x7f0000000880)=""/175, &(0x7f0000000dc0)=[0xffffffffffffffff, r7, r8, r9, r10], 0x5, {r6}}, 0x58)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) (async)
memfd_create(&(0x7f0000001880)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5`\xda\xca\xd1\xab:\x18\x10\x9b\xd0w', 0x0) (async)
write$binfmt_misc(r2, &(0x7f0000000180)="e502", 0x2) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x2a, 0x2, 0x0) (async)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x50}}, 0x0) (async)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESHEX], 0x2, 0x699, &(0x7f0000000140)="$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") (async)
syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
ptrace(0x10, r7) (async)
ptrace$pokeuser(0x6, r7, 0x358, 0x0) (async)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000940), &(0x7f0000000b40)=0xc) (async)
syz_clone(0x80008000, &(0x7f0000000b80)="bf281612fec5803ae21071ec78f01140289b77e5d0b8ab220eaf62fa44adec2b604a0b0958e7137dc347bf02d20ebba15e75ad403ab9786bd766798551bc9fd736a9e823cbc66f037abe24f1570a386ac21e90a19e8817fb277c314cce8abf41a394d4e034c8da2ee45527fd38738b713699d0c268b725c10f18aa32de9bc1ab4c7e990e3b89c29d04481b1420c8d44913746f55cc02b5604ce3cb3dc559842eece92e92a3105d4abc11090d7683144f9ea8ec641fdfa6b92a97c2dbf306ef05eadd56e8", 0xc4, &(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00)="4716f55ff5bf9c01584d456ebfd2ab95ef91ff375a7da11f10c7624dd7936441a6978355829e49c71f9e68a0d691830983b32c8f4cb9c2c4a3d49375a6c0744d9527f2784415e2bc5e6ecced5091a384392ba10e1b8607e4f10859ed714b819a5918a8") (async)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000d80)) (async)
syz_clone3(&(0x7f0000000e00)={0x40000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x33}, &(0x7f0000000e80)=""/56, 0x38, &(0x7f0000000880)=""/175, &(0x7f0000000dc0)=[0xffffffffffffffff, r7, r8, r9, r10], 0x5, {r6}}, 0x58) (async)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async)

1m22.670612054s ago: executing program 6 (id=6806):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000022b462b0c29ae48b8d46595a5b296c60db88fb4c8d79424a90b6a36f973f928a8d0c8f8e066cb3cbcc20ab9d69331439855629bc969659c99748bd6a42cb96916990366f6288187aa34d3445dad5fca6ad7f46e2fa53a030e4fb7bb3e6efb2db0eb3595d4519625d42f2b13fc48d0b132cb25440b2b0d84fd3e1b79028e8a54444b91a45b4a9692f4033b79558e46cd14c5f1766ad05c65162251f246ab57677a11f6a56eaffc99ef5d09232b3590ef5fec83b237d5bd81051d27fe17a654321f5d08fedbef1fdfd6938b8b3ad6161bba5ee7ce99d16e8b2d4aff6f62acd99b63a981a84cbe35956c9a2bc514aed753710a34fe385f26c88966ba796012c35c6636f4bc65ace2e4837551923364a41422cf350fd18871f476f44c4461fabbba541d23e8bd8b65ce01dda2da91832d712bfd9e014e2a97aad4ba68add771f38b797fd2e3351befc3cb8b5d8a5f22dc05a429e0a02f6efaf2a4a61164ee6294b005a2bcfdff7e3039369cb2e1c022e9fbf1bdd38a9"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70400001800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@v2={0x2000000, [{0xb3e, 0x5}, {0x7, 0x8001}]}, 0x14, 0x2)

1m22.454441977s ago: executing program 6 (id=6809):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x40000000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x20050800)

1m22.454202617s ago: executing program 36 (id=6809):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x40000000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x20050800)

3.742546624s ago: executing program 4 (id=7372):
r0 = getpid()
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4)
syz_pidfd_open(r0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, 0x0, &(0x7f00000003c0)=r3}, 0x20)
socket$inet(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffea4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000001010000fc7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="5d62c32cad3866b853306800"/39], 0x50)
socket$inet_smc(0x2b, 0x1, 0x0)
mknod$loop(0x0, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c3c00000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r6 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90)
write$cgroup_type(r6, &(0x7f00000009c0), 0xd4ba0ff)
unlink(&(0x7f0000000100)='./file0/file1\x00')

3.265184151s ago: executing program 4 (id=7377):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000002000008500000070000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r1, @ANYBLOB="080003"], 0x80}}, 0x8800)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580))
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00'})
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x3}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x4}]}}]}, 0x4c}}, 0x4000)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x6, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x4, 0x4, 0xffffffa8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000640)={'sit0\x00', 0x0, 0x7800, 0x1, 0x5, 0x0, {{0x1b, 0x4, 0x2, 0x6, 0x6c, 0x64, 0x0, 0x6, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x2b}, {[@cipso={0x86, 0x3c, 0x3, [{0x5, 0xa, "3da2abb34911833a"}, {0x6, 0x4, "5b92"}, {0x2, 0xc, "5ed07c186adbc1f80b5b"}, {0x2, 0xa, "bce8bfc32e0a79e4"}, {0x5, 0x12, "772345262f04dec0d4bbdc693a4c158a"}]}, @timestamp_addr={0x44, 0x1c, 0xea, 0x1, 0x4, [{@broadcast, 0x5}, {@multicast1, 0x9}, {@rand_addr=0x64010100, 0xb5}]}]}}}}})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'dummy0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'ip6_vti0\x00', 0x0, 0x29, 0x5, 0xb, 0xe, 0x10, @remote, @loopback, 0x40, 0x20, 0x100, 0xcd}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wg2\x00'})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000840), &(0x7f0000000880)=0x4)
r8 = socket$packet(0x11, 0x3, 0x300)
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', <r10=>0x0})
r11 = socket$nl_route(0x10, 0x3, 0x0)
bind$packet(r9, &(0x7f0000000080)={0x11, 0x4, r10, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14)
sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=@getchain={0x24, 0x11, 0x1, 0xf0bd30, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xd}, {0xfff1, 0xfff2}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004810}, 0x40000)

3.058208274s ago: executing program 4 (id=7380):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x40020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
pwrite64(r1, &(0x7f00000000c0), 0x0, 0x0)

2.962008366s ago: executing program 4 (id=7381):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0)
ppoll(&(0x7f0000000280)=[{r1, 0x6000}], 0x1, 0x0, 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x6, 0x6, 0x1, "42341f9b1000007e4f00"})
r2 = syz_open_pts(r1, 0x40000)
dup3(r2, r1, 0x0)
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x0)

2.551566042s ago: executing program 0 (id=7387):
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1)
mlockall(0x3)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0xe}, 0x0, 0x81, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94)
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804)

2.050911539s ago: executing program 4 (id=7389):
r0 = getpid()
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4)
syz_pidfd_open(r0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, 0x0, &(0x7f00000003c0)=r3}, 0x20)
socket$inet(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffea4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000001010000fc7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="5d62c32cad3866b853306800"/39], 0x50)
socket$inet_smc(0x2b, 0x1, 0x0)
mknod$loop(0x0, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c3c00000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r6 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90)
write$cgroup_type(r6, &(0x7f00000009c0), 0xd4ba0ff)
unlink(&(0x7f0000000100)='./file0/file1\x00')

1.580350976s ago: executing program 0 (id=7394):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x40000000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x20050800)

1.517488827s ago: executing program 4 (id=7396):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_int(r1, 0x6, 0x14, 0x0, 0x0)
connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)
sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0xfea8, 0xa)

925.727526ms ago: executing program 8 (id=7404):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180300000000000000000000000000008510000006000000180000000000000000000000000000006500000002000000180000000101000000000000ea8c93009500000000000000540300000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10)
rename(0x0, 0x0)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r3 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x802)
r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
fchdir(r5)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0)
socket(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
semop(0x0, &(0x7f0000000000)=[{0x0, 0xfffb}], 0x1)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)=[0x7])

912.311396ms ago: executing program 9 (id=7405):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
unshare(0x2040600)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x4000000)

883.253227ms ago: executing program 9 (id=7406):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x600a, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000440)={[{@bsdgroups}, {@noblock_validity}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@debug}, {@jqfmt_vfsv1}]}, 0x1, 0x604, &(0x7f0000000c00)="$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")
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r3, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe752", 0x53}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa8", 0xea}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7", 0x28}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e3", 0x62}], 0x1}}], 0x2, 0xc0)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030007e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10)
mount(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x4014, 0x0)

826.073367ms ago: executing program 8 (id=7407):
r0 = getpid()
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4)
syz_pidfd_open(r0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, 0x0, &(0x7f00000003c0)=r3}, 0x20)
socket$inet(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffea4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000001010000fc7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="5d62c32cad3866b853306800"/39], 0x50)
socket$inet_smc(0x2b, 0x1, 0x0)
mknod$loop(0x0, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c3c00000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x18)
r6 = getpgid(0x0)
sched_rr_get_interval(r6, &(0x7f0000000000))
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
unlink(&(0x7f0000000100)='./file0/file1\x00')

708.769109ms ago: executing program 8 (id=7409):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x118}, 0x1, 0x0, 0x0, 0x20008011}, 0x0)

650.50448ms ago: executing program 0 (id=7410):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
creat(0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, 0x0, 0xc56b256101459e91)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3"], 0x54}}, 0x0)

613.142711ms ago: executing program 0 (id=7412):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18)
syz_usbip_server_init(0x1)

576.658501ms ago: executing program 8 (id=7413):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0xc, 0x6, 0x0, @rand_addr=0x64010101, @remote}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0xffe}}}}}}, 0x0)

511.836692ms ago: executing program 8 (id=7415):
socket(0x23, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20)
unshare(0x22020600)
unshare(0x6a020400)

474.522913ms ago: executing program 8 (id=7416):
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1)
mlockall(0x3)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0xe}, 0x0, 0x81, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94)
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804)

429.640133ms ago: executing program 9 (id=7418):
r0 = socket(0x10, 0x802, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x204410, &(0x7f0000000740), 0x1, 0x4a1, &(0x7f00000007c0)="$eJzs3M1vVFUbAPDn3mnLN+3Li6h8SBWNjR8tLags3Gh0p4mJLnBjUttCKgM1tCRCiFZjcGlI3BvdGKJ/gSvdGHVl4lb3hoQoMQFdmDF35t4yU2ZKW6YdcH6/5JZz5p7pOc+ce+499x6mAXStwexHErE1In6JiP5atrHAYO2f61fPT/x19fxEEpXKq78n1XLXrp6fKIoW79uSZ4bSiPTDJK+k0ezZcyfGy+Wp03l+ZO7k2yOzZ889OX1y/PjU8alTY0eOHD40+szTY0+1Jc4srmu7353Zm/S8fvHliaMX3/zhqzQidu2r7a+P47akWxaSg1ngf1SqFhd7pC2V3Tm21aWTng42hBUpRUTWXb3V8d8fpbjRef3x4gcdbRywprJr04bWu+crwH9YEp1uAdAZxYU+u/8ttnWaetwRrjxXuwHK4r6eb7U9PZHmZXrXsP77IuLo/N+fZlvk/fDP1jWsEADoet9k858nms3/0thVV257voYyEBH/i4gdEfH/iNgZEfdEVMvem89nVqK2NFRayN88/0wvrzq4Zcjmf8/ma1uN879i9hcDpTy3rRp/b3Jsujx1MP9MhqJ3Q5YfXaKOb1/4+eNW+wbr5n/ZltVfzAXzdlzuWfSAbnJ8brxdk9Ir70fs7mkWf7KwEpBExP0RsXtlv3p7kZh+7NLeVoVuHf8S2rDOVPks4tFa/8/HovgLydLrkyMbozx1cKQ4Km72408XXmle+8bbi78Nsv7f3Hj8LyrR/2dSv147u/I6Lvz6Uct7ytUe/33Ja9Ux2Ze/9s743Nzp0Yi+5KVqvuH1sRvvLfJF+Sz+oQPNx/+O/D1Z/HsiIjuI90XEAxGxP2/7gxHxUEQcWCL+759/+K0VxT+9vv0/2fT8t3D8DzT2/8oTpRPffd2q/jz+4mTbov8PV1ND+SvV898ttG5OlKciKpVVH80AAABw98luvLdGkg4vpNN0eLj2f/h3xua0PDM79/ixmTOnJmvfERiI3rR40tWfPw/N7rZHk/n8N9aej47lz4qL56WH8ufGn5Q2VfPDEzPlyQ7HDt1uS4vxn/mt1OnWAWvO97Wgey0e/2mH2gGsP9d/6F7GP3Qv4x+6V934//LMhT3VxHvVn/sXdjRdC1jiL4cAd4dF1/9Ln3eqIcC6M/+H7mX8Q/cy/qEr3c73+juT2JS3/FaF+zrf1NUlvuidLWXx1e1KeiI637DGRKRLlXkjmu8ajIg1aljcER9LuxPJMg715SaOHc+HznIKd/KsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0D7/BgAA//9ajd4t")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
pipe2(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r2, 0x0, 0x1, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000600)='4', 0x1}], 0x1, 0x0)
write$binfmt_script(r4, &(0x7f00000000c0), 0xb)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r7}, 0x18)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={<r9=>0xffffffffffffffff}, 0x111, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r9, 0x1}}, 0x18)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
gettid()
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_config_ext={0x8, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r10 = syz_io_uring_setup(0x254c, &(0x7f0000000000)={0x0, 0x7c87, 0x800, 0x0, 0x39}, &(0x7f0000000080), &(0x7f00000001c0))
io_uring_register$IORING_REGISTER_PBUF_RING(r10, 0x16, &(0x7f0000000900)={&(0x7f0000003000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x3}, 0x1)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r10, 0x17, &(0x7f0000000f40)={0x0, 0x0, 0x3}, 0x1)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
write(r0, &(0x7f0000000140)="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", 0xfc)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)

366.132374ms ago: executing program 7 (id=7419):
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r0}, 0x10)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)

350.364395ms ago: executing program 7 (id=7420):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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")
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x5, 0x1, 0x7, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x2)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x90)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0x20)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'geneve1\x00', <r8=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)

247.664566ms ago: executing program 7 (id=7421):
r0 = getpid()
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4)
syz_pidfd_open(r0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, 0x0, &(0x7f00000003c0)=r3}, 0x20)
socket$inet(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffea4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000001010000fc7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="5d62c32cad3866b853306800"/39], 0x50)
socket$inet_smc(0x2b, 0x1, 0x0)
mknod$loop(0x0, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c3c00000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x18)
r6 = getpgid(0x0)
sched_rr_get_interval(r6, &(0x7f0000000000))
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
unlink(&(0x7f0000000100)='./file0/file1\x00')

198.130967ms ago: executing program 9 (id=7422):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b700000000000700"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x5c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0)

125.834088ms ago: executing program 7 (id=7423):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
creat(0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, 0x0, 0xc56b256101459e91)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3"], 0x54}}, 0x0)

119.057348ms ago: executing program 9 (id=7424):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0)
rmdir(&(0x7f0000000140)='./cgroup/../file0\x00')
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0)
poll(0x0, 0x0, 0x9)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000004c0), 0x5}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0xab0c}}, './file0\x00'})
setsockopt$inet6_tcp_int(r2, 0x6, 0x6, &(0x7f0000000080), 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

40.405139ms ago: executing program 9 (id=7425):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x40020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001300)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x82}, 0x2004400d)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e)

38.384809ms ago: executing program 0 (id=7426):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='kfree\x00', r1}, 0x18)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000180)={0x80, 0x2b, 0x5, 0x0, 0x7fffffff, 0x105})

28.50961ms ago: executing program 7 (id=7427):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10)
clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x2, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x5, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8})

493.88µs ago: executing program 0 (id=7428):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r6, 0x1, 0x1}, 0x50)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xffffffff, 0x0, r7, 0x7, '\x00', 0x0, r6, 0x0, 0x3}, 0x50)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r9 = socket$unix(0x1, 0x1, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
r12 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'sit0\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0xfffc, 0x0, 0x2f, 0x0, @empty, @broadcast}}}})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@noquota}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x2, 0x4f3, &(0x7f0000000700)="$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")
syz_usb_connect$cdc_ncm(0x6, 0x72, &(0x7f0000000f80)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x2, 0x1, 0x9, 0xd8, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "b687fec0"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x2, 0x9, 0x4}, {0x6, 0x24, 0x1a, 0x3, 0x34}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xfc, 0x2, 0x52}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x1ef, 0x2, 0x9, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x5, 0x40, 0x6b}}}}}}}]}}, &(0x7f0000001540)={0xa, &(0x7f0000001240)={0xa, 0x6, 0x250, 0x4, 0x85, 0xb9, 0x20, 0x4}, 0x109, &(0x7f0000001280)={0x5, 0xf, 0x109, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x27, "5541b02a57b827c549b57f35bc6ba9cf"}, @generic={0xe9, 0x10, 0x7, "28a0651f7116c0a198d4016b676350b465d7380980d373ec0e5f63e1c918c5d510a0fbd6606fe75da208ffe2e4adae78bbe3658141b10ebe8b811c6582fff6782172abb6744820203777c226c17b164f26c78aaa78b4c04bcdb1a1bfd1202d302d1ebf956c8e3f736c30bcc1b40e5ba06e4ae62092a8b6cb932b8dd0101ea9f141aab1c4af0d5c7259506f9bfb88e6fcfd90d18fc6465b2fc0b5ed6ce1e3472d8c89f8b9bedd1ae8326caee7b6fdc8330ef7e9e3213df63379a52a6119bcf7aa2a7a7033d82e933a958c7785a798ebfcee4bf118eb7c653d51229a7f105f76e0bf34d06f6424"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0x3, 0x1}]}, 0x3, [{0x4, &(0x7f00000013c0)=@lang_id={0x4, 0x3, 0x412}}, {0xc9, &(0x7f0000001400)=@string={0xc9, 0x3, "cc65b1625b7cd8df812a3c22b552da4efe58e1270d39d6729e994b382d068a26fcedc50e1ed121257e934a953c18dc44fe46c7efd3756a890550f5c3f5c3f79ca4c28b168853ee8f2574d89dc5108b4708e9fe3895364c7aa85d38f2ff333dfb521835f35c8d6b4a1134850754527d45efe06505d2c556ef708e84f1d21bd61aa77667c92773fe88a84477cec05cfb8011513546468a545d7ae7545c87fbebf463aaa6debed3fd3ba00d6160c03770a7eb047ec0598aa19ae15267d8fae10b2f385834dedd9438"}}, {0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x414}}]})
r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x10000, 0x10}, 0xc)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={r1, 0xe0, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], <r14=>0x0, 0x92, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000c00), &(0x7f0000000c40), 0x8, 0xc6, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x20, 0x32, &(0x7f0000000dc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0x7}, @jmp={0x5, 0x0, 0xd, 0x8, 0x2, 0x18, 0x4}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xd}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffb}, @exit, @map_fd={0x18, 0x6, 0x1, 0x0, r13}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x154c06df2b0c7187}}}, &(0x7f0000000240)='syzkaller\x00', 0x1, 0x5e, &(0x7f0000000280)=""/94, 0x81f00, 0x2b, '\x00', 0x0, @fallback=0x5, r6, 0x8, &(0x7f00000003c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0xe, 0x56869924, 0x8}, 0x10, r14, r4, 0x4, &(0x7f0000000d00)=[r8, r0, r0, r0, 0xffffffffffffffff, r0, r8, r0, r7], &(0x7f0000000d40)=[{0x0, 0x4, 0x2, 0x6}, {0x5, 0x5, 0xd, 0x1}, {0x5, 0x2, 0x2, 0xf}, {0x4, 0x3, 0xd}], 0x10, 0x2}, 0x94)
chmod(&(0x7f0000000340)='./file1\x00', 0x0)
truncate(&(0x7f0000000000)='./file1\x00', 0x4)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000280), 0xfd, r0}, 0x38)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x84400, 0x0)

0s ago: executing program 7 (id=7429):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r6, 0x1, 0x1}, 0x50)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xffffffff, 0x0, r7, 0x7, '\x00', 0x0, r6, 0x0, 0x3}, 0x50)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r9 = socket$unix(0x1, 0x1, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
r12 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'sit0\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0xfffc, 0x0, 0x2f, 0x0, @empty, @broadcast}}}})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@noquota}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x2, 0x4f3, &(0x7f0000000700)="$eJzs3c9vG0sdAPDvOnGTtHk4Dzg8nsSjgofSCmonDW0jDiVICE6VKOXCKYTEiaI4cRQ7bRNVKBV/ABLil+DEiQsSZ4SE+icgpEpwRwiBKmjLgQNgtM6ahtRJnNc4buPPR5ru7M7ufmfqeOzZWXkD6FsXI2ImIgYi4nJEFLLtuSzFzm5K93v29MF8mpJoDN35WxJJtq11riRbXsgOG46Ir30l4lvJy3FrW9src5VKeSNbL9VX10u1re0ry6tzS+Wl8trM1OT16RvT16YnTqytN7/05x9+9+dfvvmbz9774+xfL307rdZoVra3HZ3Y6XC/3abnm/8XLYMRsXGcYK+xgaw9+V5XBACAjqTf8T8cEZ+MiOc/6XVtAAAAgG5ofGE0/pVENAAAAIAzK9e8BzbJFbN7AUYjlysWd+/h/Wicz1WqtfpnFqubawu798qORT63uFwpT2T3Co9FPknXJ5v5F+tX961PRcTbEfH9wkhzvThfrSz0+uIHAAAA9IkL+8b//yjsjv8BAACAM2as1xUAAAAAus74HwAAAM6+A8f/yeDpVgQAAADohq/eupWmRuv51wt3tzZXqnevLJRrK8XVzfnifHVjvbhUrS41f7Nv9ajzVarV9c/F2ub9Ur1cq5dqW9uzq9XNtfps87nes+VG4VSaBQAAAOzx9ice/SGJiJ3PjzRT6lxWlj/68Jnu1g7optzxdk+6VQ/g9A30ugJAz7jBF/pXB2N84Iw7YmD/g33rx7xsAAAAvA7GP/ZK8//mA+ENZiAP/cv8P/Qv8//Qv8z/Q58bOnqX4YMKfnvCdQEAALpmtJmSXDGbCxyNXK5YjHir+ViAfLK4XClPRMSHIuL3hfxQuj7Z60oDAAAAAAAAAAAAAAAAAAAAAAAAwBum0UiiAQAAAJxpEbm/JNmD/McL74/uvz5wLvlnobmMiHs/vfOj+3P1+sZkuv3v/9te/3G2/WprS+obp3wlAwAAAGhpjdNb43gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOEnPnj6Yb6XTjPvkixEx1i7+YAw3l8O/KkTE+edJDO45LomIgROIv/MwIt5pFz9JqxVjWS32x89FxEiP4184gfjQzx6l/c9M+v7L73v/5eJic9n+/TeYpVf15OJB/V+u1f81+7l2/d9bh596uJV59/EvSy+VFrL4DyPeHWzf/7TiJ+3in+u8jd/8+vb2QWWNn0WMH/H5k8Yv1VfXS7Wt7SvLq3NL5aXy2tTU5PXpG9PXpidKi8uVcvZv2xjf+/iv/3NQ/LT959vG3+1/D2x/RLzfYfv//fj+048cEv/Sp9q//u8cEj/9m/h09jmQlo+38ju7+b3e+8Xv3jus/QsHtP/Q1z8iLnXY/su3v/OnDncFAE5BbWt7Za5SKW90JTPStTPLpJnq2lH7pN8TP3CI/Kn8kch0M3M7ew2PfXgPOyUAAKArXnzp319yjAkeAAAAAAAAAAAAAAAAAAAA4JV0/UfIhv7/lwWGe9dUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBD/TcAAP//V7HNuw==")
syz_usb_connect$cdc_ncm(0x6, 0x72, &(0x7f0000000f80)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x2, 0x1, 0x9, 0xd8, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "b687fec0"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x2, 0x9, 0x4}, {0x6, 0x24, 0x1a, 0x3, 0x34}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xfc, 0x2, 0x52}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x1ef, 0x2, 0x9, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x5, 0x40, 0x6b}}}}}}}]}}, &(0x7f0000001540)={0xa, &(0x7f0000001240)={0xa, 0x6, 0x250, 0x4, 0x85, 0xb9, 0x20, 0x4}, 0x109, &(0x7f0000001280)={0x5, 0xf, 0x109, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x27, "5541b02a57b827c549b57f35bc6ba9cf"}, @generic={0xe9, 0x10, 0x7, "28a0651f7116c0a198d4016b676350b465d7380980d373ec0e5f63e1c918c5d510a0fbd6606fe75da208ffe2e4adae78bbe3658141b10ebe8b811c6582fff6782172abb6744820203777c226c17b164f26c78aaa78b4c04bcdb1a1bfd1202d302d1ebf956c8e3f736c30bcc1b40e5ba06e4ae62092a8b6cb932b8dd0101ea9f141aab1c4af0d5c7259506f9bfb88e6fcfd90d18fc6465b2fc0b5ed6ce1e3472d8c89f8b9bedd1ae8326caee7b6fdc8330ef7e9e3213df63379a52a6119bcf7aa2a7a7033d82e933a958c7785a798ebfcee4bf118eb7c653d51229a7f105f76e0bf34d06f6424"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0x3, 0x1}]}, 0x3, [{0x4, &(0x7f00000013c0)=@lang_id={0x4, 0x3, 0x412}}, {0xc9, &(0x7f0000001400)=@string={0xc9, 0x3, "cc65b1625b7cd8df812a3c22b552da4efe58e1270d39d6729e994b382d068a26fcedc50e1ed121257e934a953c18dc44fe46c7efd3756a890550f5c3f5c3f79ca4c28b168853ee8f2574d89dc5108b4708e9fe3895364c7aa85d38f2ff333dfb521835f35c8d6b4a1134850754527d45efe06505d2c556ef708e84f1d21bd61aa77667c92773fe88a84477cec05cfb8011513546468a545d7ae7545c87fbebf463aaa6debed3fd3ba00d6160c03770a7eb047ec0598aa19ae15267d8fae10b2f385834dedd9438"}}, {0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x414}}]})
r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x10000, 0x10}, 0xc)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={r1, 0xe0, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], <r14=>0x0, 0x92, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000c00), &(0x7f0000000c40), 0x8, 0xc6, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x20, 0x32, &(0x7f0000000dc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0x7}, @jmp={0x5, 0x0, 0xd, 0x8, 0x2, 0x18, 0x4}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xd}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffb}, @exit, @map_fd={0x18, 0x6, 0x1, 0x0, r13}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x154c06df2b0c7187}}}, &(0x7f0000000240)='syzkaller\x00', 0x1, 0x5e, &(0x7f0000000280)=""/94, 0x81f00, 0x2b, '\x00', 0x0, @fallback=0x5, r6, 0x8, &(0x7f00000003c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0xe, 0x56869924, 0x8}, 0x10, r14, r4, 0x4, &(0x7f0000000d00)=[r8, r0, r0, r0, 0xffffffffffffffff, r0, r8, r0, r7], &(0x7f0000000d40)=[{0x0, 0x4, 0x2, 0x6}, {0x5, 0x5, 0xd, 0x1}, {0x5, 0x2, 0x2, 0xf}, {0x4, 0x3, 0xd}], 0x10, 0x2}, 0x94)
chmod(&(0x7f0000000340)='./file1\x00', 0x0)
truncate(&(0x7f0000000000)='./file1\x00', 0x4)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000280), 0xfd, r0}, 0x38)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x84400, 0x0)

kernel console output (not intermixed with test programs):

 error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.6792: corrupted xattr block 19: overlapping e_value 
[  509.901981][T32596] loop0: detected capacity change from 0 to 2048
[  509.908771][T32593] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.6792: corrupted xattr block 19: overlapping e_value 
[  509.924394][T32593] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=15
[  509.943180][T32574] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=15
[  509.952438][T32593] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.6792: corrupted xattr block 19: overlapping e_value 
[  509.967069][T32574] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.6792: corrupted xattr block 19: overlapping e_value 
[  509.983774][T32593] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.6792: corrupted xattr block 19: overlapping e_value 
[  510.107514][T32596]  loop0: p4 < >
[  510.296968][T32593] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=15
[  510.310886][T32635] loop6: detected capacity change from 0 to 1024
[  510.337760][T32635] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  510.351341][T32635] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  510.362593][T32635] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000]
[  510.373068][T32635] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 2: comm syz.6.6798: lblock 2 mapped to illegal pblock 2 (length 1)
[  510.387328][T32635] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 48: comm syz.6.6798: lblock 0 mapped to illegal pblock 48 (length 1)
[  510.402854][T32635] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.6798: Failed to acquire dquot type 0
[  510.415359][T32635] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  510.425312][T32635] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.6798: mark_inode_dirty error
[  510.437221][T32635] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  510.447645][T32635] EXT4-fs (loop6): 1 orphan inode deleted
[  510.455371][ T2197] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1)
[  510.473213][ T2197] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0
[  510.486174][T32635] EXT4-fs error (device loop6): __ext4_get_inode_loc:4792: comm syz.6.6798: Invalid inode table block 1 in block_group 0
[  510.499027][T32635] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  510.508760][T32635] EXT4-fs error (device loop6): ext4_quota_off:7217: inode #3: comm syz.6.6798: mark_inode_dirty error
[  510.585869][T32652] loop6: detected capacity change from 0 to 164
[  510.594538][T32656] loop0: detected capacity change from 0 to 512
[  510.670132][T32656] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.6803: corrupted in-inode xattr: invalid ea_ino
[  510.704208][T32652] syz.6.6802: attempt to access beyond end of device
[  510.704208][T32652] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  510.749476][T32656] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.6803: couldn't read orphan inode 15 (err -117)
[  510.763386][T32652] syz.6.6802: attempt to access beyond end of device
[  510.763386][T32652] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164
[  510.792832][T22778] iso9660: Corrupted directory entry in block 4 of inode 1792
[  510.802399][T22778] ISOFS: unable to read i-node block
[  510.811178][T22778] ISOFS: unable to read i-node block
[  510.901142][T32656] EXT4-fs error (device loop0): ext4_add_entry:2417: inode #2: comm syz.0.6803: Directory hole found for htree leaf block 0
[  510.981196][T32682] loop7: detected capacity change from 0 to 2048
[  510.991978][T32688] loop0: detected capacity change from 0 to 1024
[  511.008765][T32688] EXT4-fs: Ignoring removed bh option
[  511.014255][T32688] EXT4-fs: inline encryption not supported
[  511.040078][T32688] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  511.053288][ T2197] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  511.063615][T32682]  loop7: p4 < >
[  511.070402][T32688] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  511.080112][T32682] __nla_validate_parse: 6 callbacks suppressed
[  511.080124][T32682] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6807'.
[  511.096859][T32682] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6807'.
[  511.107760][T32688] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.6808: lblock 2 mapped to illegal pblock 2 (length 1)
[  511.122507][T32688] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 48: comm syz.0.6808: lblock 0 mapped to illegal pblock 48 (length 1)
[  511.138482][T32688] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.6808: Failed to acquire dquot type 0
[  511.152026][T32688] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  511.163508][ T2197] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  511.173807][T32688] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.6808: mark_inode_dirty error
[  511.186050][T32688] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  511.200898][T32688] EXT4-fs (loop0): 1 orphan inode deleted
[  511.219241][   T12] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1)
[  511.241862][T32716] loop8: detected capacity change from 0 to 1024
[  511.251689][   T12] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0
[  511.251881][ T2197] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  511.265930][T32716] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  511.281663][T32716] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  511.283342][T32719] netlink: 'syz.7.6813': attribute type 1 has an invalid length.
[  511.299020][T32716] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000]
[  511.300016][T32688] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  511.314252][T32688] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  511.321812][T32688] vhci_hcd vhci_hcd.0: Device attached
[  511.330923][T32716] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 2: comm syz.8.6812: lblock 2 mapped to illegal pblock 2 (length 1)
[  511.347613][T32719] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6813'.
[  511.348205][T32716] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 48: comm syz.8.6812: lblock 0 mapped to illegal pblock 48 (length 1)
[  511.371504][ T2197] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  511.375129][T32722] vhci_hcd: connection closed
[  511.381876][ T3426] vhci_hcd: stop threads
[  511.387608][T32716] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.6812: Failed to acquire dquot type 0
[  511.390896][ T3426] vhci_hcd: release socket
[  511.406437][ T3426] vhci_hcd: disconnect device
[  511.411254][T32716] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  511.430199][T32716] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.6812: mark_inode_dirty error
[  511.449979][T32753] loop7: detected capacity change from 0 to 164
[  511.458619][T32716] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  511.471353][T32716] EXT4-fs (loop8): 1 orphan inode deleted
[  511.492537][ T3447] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1)
[  511.517458][T32753] Unable to read rock-ridge attributes
[  511.537529][ T3447] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 0
[  511.560989][T32716] EXT4-fs error (device loop8): __ext4_get_inode_loc:4792: comm syz.8.6812: Invalid inode table block 1 in block_group 0
[  511.580986][T32716] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  511.594027][T32716] EXT4-fs error (device loop8): ext4_quota_off:7217: inode #3: comm syz.8.6812: mark_inode_dirty error
[  511.600262][  T375] loop4: detected capacity change from 0 to 512
[  511.615538][  T375] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.6815: corrupted in-inode xattr: invalid ea_ino
[  511.630397][ T2197] bond0 (unregistering): Released all slaves
[  511.639171][ T2197] bond1 (unregistering): Released all slaves
[  511.646414][  T375] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.6815: couldn't read orphan inode 15 (err -117)
[  511.648148][ T2197] bond2 (unregistering): Released all slaves
[  511.666880][ T2197] bond3 (unregistering): Released all slaves
[  511.677137][T32695] chnl_net:caif_netlink_parms(): no params data found
[  511.709843][  T401] netlink: 'syz.8.6817': attribute type 4 has an invalid length.
[  511.733710][ T2197] tipc: Disabling bearer <udp:£>
[  511.738823][ T2197] tipc: Left network mode
[  511.741746][T32695] bridge0: port 1(bridge_slave_0) entered blocking state
[  511.750297][T32695] bridge0: port 1(bridge_slave_0) entered disabled state
[  511.757634][T32695] bridge_slave_0: entered allmulticast mode
[  511.764637][T32695] bridge_slave_0: entered promiscuous mode
[  511.774342][T32695] bridge0: port 2(bridge_slave_1) entered blocking state
[  511.781600][T32695] bridge0: port 2(bridge_slave_1) entered disabled state
[  511.789087][  T401] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6817'.
[  511.789100][T32695] bridge_slave_1: entered allmulticast mode
[  511.804981][T32695] bridge_slave_1: entered promiscuous mode
[  511.840054][  T375] EXT4-fs error (device loop4): ext4_add_entry:2417: inode #2: comm syz.4.6815: Directory hole found for htree leaf block 0
[  511.850981][  T463] loop7: detected capacity change from 0 to 2048
[  511.860142][  T401] hsr_slave_0 (unregistering): left promiscuous mode
[  511.869444][ T2197] hsr_slave_0: left promiscuous mode
[  511.875086][ T2197] hsr_slave_1: left promiscuous mode
[  511.880788][  T463]  loop7: p4 < >
[  511.884456][ T2197] veth1_macvtap: left promiscuous mode
[  511.890644][ T2197] veth0_macvtap: left promiscuous mode
[  511.896274][ T2197] veth1_vlan: left promiscuous mode
[  511.901619][ T2197] veth0_vlan: left promiscuous mode
[  511.925280][  T472] loop8: detected capacity change from 0 to 1024
[  511.935069][T26407] EXT4-fs error (device loop0): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0
[  511.951002][  T474] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6820'.
[  511.962210][T26407] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  511.973200][T26407] EXT4-fs error (device loop0): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error
[  511.987297][  T480] loop4: detected capacity change from 0 to 1024
[  512.002621][  T486] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6820'.
[  512.019248][  T488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6822'.
[  512.023428][  T472] netlink: 'syz.8.6821': attribute type 1 has an invalid length.
[  512.081549][  T480] vlan2: entered allmulticast mode
[  512.086693][  T480] geneve1: entered allmulticast mode
[  512.102085][  T488] hsr_slave_0 (unregistering): left promiscuous mode
[  512.118401][  T517] loop7: detected capacity change from 0 to 2048
[  512.132599][  T472] 8021q: adding VLAN 0 to HW filter on device bond1
[  512.142660][  T517] EXT4-fs: Ignoring removed nobh option
[  512.142806][T32695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  512.162377][T32695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  512.194003][T32695] team0: Port device team_slave_0 added
[  512.200806][T32695] team0: Port device team_slave_1 added
[  512.218335][T32695] batman_adv: batadv0: Adding interface: batadv_slave_0
[  512.225361][T32695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  512.251428][T32695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  512.263170][T32695] batman_adv: batadv0: Adding interface: batadv_slave_1
[  512.270217][T32695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  512.296356][T32695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  512.327315][  T637] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  512.333844][  T637] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  512.341567][  T637] vhci_hcd vhci_hcd.0: Device attached
[  512.350955][T32695] hsr_slave_0: entered promiscuous mode
[  512.357061][T32695] hsr_slave_1: entered promiscuous mode
[  512.363209][T32695] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  512.371402][T32695] Cannot create hsr debugfs directory
[  512.371419][  T639] vhci_hcd: connection closed
[  512.379833][   T57] vhci_hcd: stop threads
[  512.388845][   T57] vhci_hcd: release socket
[  512.393262][   T57] vhci_hcd: disconnect device
[  512.500633][  T703] loop8: detected capacity change from 0 to 1024
[  512.507556][  T703] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  512.514075][T32695] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  512.527814][  T703] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  512.544325][T32695] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  512.552459][  T703] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000]
[  512.562373][T32695] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  512.562684][  T703] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 2: comm syz.8.6830: lblock 2 mapped to illegal pblock 2 (length 1)
[  512.583209][  T703] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 48: comm syz.8.6830: lblock 0 mapped to illegal pblock 48 (length 1)
[  512.597530][  T703] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.6830: Failed to acquire dquot type 0
[  512.609046][T32695] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  512.616211][  T703] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  512.627075][  T703] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.6830: mark_inode_dirty error
[  512.640256][  T703] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  512.650998][  T703] EXT4-fs (loop8): 1 orphan inode deleted
[  512.657433][   T57] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1)
[  512.672618][   T57] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 0
[  512.685795][  T703] EXT4-fs error (device loop8): __ext4_get_inode_loc:4792: comm syz.8.6830: Invalid inode table block 1 in block_group 0
[  512.699714][  T703] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  512.710620][  T703] EXT4-fs error (device loop8): ext4_quota_off:7217: inode #3: comm syz.8.6830: mark_inode_dirty error
[  512.722260][T32695] 8021q: adding VLAN 0 to HW filter on device bond0
[  512.732525][  T733] netlink: 'syz.0.6832': attribute type 1 has an invalid length.
[  512.745038][  T733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6832'.
[  512.753964][  T733] tc_dump_action: action bad kind
[  512.761169][T32695] 8021q: adding VLAN 0 to HW filter on device team0
[  512.771524][ T2197] bridge0: port 1(bridge_slave_0) entered blocking state
[  512.778665][ T2197] bridge0: port 1(bridge_slave_0) entered forwarding state
[  512.797847][T32695] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  512.805987][  T737] loop0: detected capacity change from 0 to 2048
[  512.808219][T32695] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  512.841675][ T2197] bridge0: port 2(bridge_slave_1) entered blocking state
[  512.848742][ T2197] bridge0: port 2(bridge_slave_1) entered forwarding state
[  512.856933][  T737]  loop0: p4 < >
[  512.861757][  T742] loop8: detected capacity change from 0 to 512
[  512.871425][  T737] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6833'.
[  512.890786][T32695] 8021q: adding VLAN 0 to HW filter on device batadv0
[  512.890966][  T737] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6833'.
[  512.909418][  T742] EXT4-fs error (device loop8): ext4_iget_extra_inode:5035: inode #15: comm syz.8.6834: corrupted in-inode xattr: invalid ea_ino
[  512.942288][  T742] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.6834: couldn't read orphan inode 15 (err -117)
[  512.978066][  T761] loop4: detected capacity change from 0 to 512
[  513.005736][  T761] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.6837: corrupted in-inode xattr: invalid ea_ino
[  513.019600][  T770] loop7: detected capacity change from 0 to 2048
[  513.026128][  T761] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.6837: couldn't read orphan inode 15 (err -117)
[  513.062117][  T770]  loop7: p1 < > p4
[  513.067910][  T770] loop7: p4 size 8388608 extends beyond EOD, truncated
[  513.090635][  T784] loop0: detected capacity change from 0 to 2048
[  513.105390][T32695] veth0_vlan: entered promiscuous mode
[  513.115838][T32695] veth1_vlan: entered promiscuous mode
[  513.130176][T32695] veth0_macvtap: entered promiscuous mode
[  513.138351][T32695] veth1_macvtap: entered promiscuous mode
[  513.150272][T32695] batman_adv: batadv0: Interface activated: batadv_slave_0
[  513.159458][T32695] batman_adv: batadv0: Interface activated: batadv_slave_1
[  513.163458][  T761] EXT4-fs error (device loop4): ext4_add_entry:2417: inode #2: comm syz.4.6837: Directory hole found for htree leaf block 0
[  513.167924][T32695] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  513.188250][T32695] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  513.197138][T32695] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  513.205952][T32695] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  513.300472][  T815] loop9: detected capacity change from 0 to 512
[  513.310443][  T815] EXT4-fs (loop9): external journal device major/minor numbers have changed
[  513.352886][  T815] EXT4-fs (loop9): failed to open journal device unknown-block(11,131) -6
[  513.470999][  T831] netlink: 'syz.9.6845': attribute type 1 has an invalid length.
[  513.594953][  T845] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  513.624167][  T855] loop7: detected capacity change from 0 to 512
[  513.634343][  T855] EXT4-fs error (device loop7): ext4_iget_extra_inode:5035: inode #15: comm syz.7.6850: corrupted in-inode xattr: invalid ea_ino
[  513.658549][  T855] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.6850: couldn't read orphan inode 15 (err -117)
[  513.674574][  T845] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  513.688744][  T861] loop0: detected capacity change from 0 to 512
[  513.697660][  T861] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.6851: corrupted in-inode xattr: invalid ea_ino
[  513.714632][  T861] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.6851: couldn't read orphan inode 15 (err -117)
[  513.729869][  T845] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  513.738200][  T871] loop9: detected capacity change from 0 to 2048
[  513.781616][  T879] loop7: detected capacity change from 0 to 164
[  513.788977][  T871]  loop9: p4 < >
[  513.798362][  T879] Unable to read rock-ridge attributes
[  513.809801][  T871] bridge0: entered promiscuous mode
[  513.815088][  T871] macsec1: entered promiscuous mode
[  513.837119][  T893] loop7: detected capacity change from 0 to 2048
[  513.846109][  T845] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  513.865492][  T861] EXT4-fs error (device loop0): ext4_add_entry:2417: inode #2: comm syz.0.6851: Directory hole found for htree leaf block 0
[  513.887019][  T889] loop4: detected capacity change from 0 to 512
[  513.899617][  T889] EXT4-fs (loop4): external journal device major/minor numbers have changed
[  513.942908][  T889] EXT4-fs (loop4): failed to open journal device unknown-block(11,131) -6
[  513.986084][  T845] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  513.997634][  T845] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  514.015934][  T845] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  514.035803][  T921] netlink: 'syz.9.6860': attribute type 21 has an invalid length.
[  514.046726][  T845] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  514.051748][  T931] loop0: detected capacity change from 0 to 1024
[  514.093614][  T931] netlink: 'syz.0.6859': attribute type 1 has an invalid length.
[  514.117741][  T947] netlink: 'syz.8.6865': attribute type 1 has an invalid length.
[  514.181700][  T962] loop8: detected capacity change from 0 to 512
[  514.192073][  T962] EXT4-fs error (device loop8): ext4_iget_extra_inode:5035: inode #15: comm syz.8.6870: corrupted in-inode xattr: invalid ea_ino
[  514.209775][  T962] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.6870: couldn't read orphan inode 15 (err -117)
[  514.259921][  T968] loop0: detected capacity change from 0 to 2048
[  514.266772][  T968] EXT4-fs: Ignoring removed nobh option
[  514.291294][  T946] 9pnet_virtio: no channels available for device 
[  514.300739][  T946] tipc: New replicast peer: 255.255.255.83
[  514.306569][  T946] tipc: Enabled bearer <udp:£>, priority 10
[  514.368803][  T971] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  514.387436][   T29] kauditd_printk_skb: 626 callbacks suppressed
[  514.387450][   T29] audit: type=1326 audit(514.361:33581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=981 comm="syz.7.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f424e929 code=0x7ffc0000
[  514.416557][   T29] audit: type=1326 audit(514.371:33582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=981 comm="syz.7.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f14f424e929 code=0x7ffc0000
[  514.439576][   T29] audit: type=1326 audit(514.371:33583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=981 comm="syz.7.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f14f424e963 code=0x7ffc0000
[  514.462276][   T29] audit: type=1326 audit(514.371:33584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=981 comm="syz.7.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f14f424e963 code=0x7ffc0000
[  514.484972][   T29] audit: type=1326 audit(514.371:33585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=981 comm="syz.7.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f424e929 code=0x7ffc0000
[  514.507806][   T29] audit: type=1326 audit(514.371:33586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=981 comm="syz.7.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f424e929 code=0x7ffc0000
[  514.530591][   T29] audit: type=1326 audit(514.381:33587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=981 comm="syz.7.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f424e929 code=0x7ffc0000
[  514.553441][   T29] audit: type=1326 audit(514.381:33588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=981 comm="syz.7.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14f424e929 code=0x7ffc0000
[  514.576300][   T29] audit: type=1326 audit(514.381:33589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=981 comm="syz.7.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f424e929 code=0x7ffc0000
[  514.599117][   T29] audit: type=1326 audit(514.381:33590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=981 comm="syz.7.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14f424e929 code=0x7ffc0000
[  514.623969][  T982] loop7: detected capacity change from 0 to 512
[  514.636615][  T976] EXT4-fs error (device loop8): ext4_add_entry:2417: inode #2: comm syz.8.6870: Directory hole found for htree leaf block 0
[  514.668644][  T982] EXT4-fs (loop7): external journal device major/minor numbers have changed
[  514.699236][  T971] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  514.716635][  T982] EXT4-fs (loop7): failed to open journal device unknown-block(11,131) -6
[  514.727841][  T990] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  514.756258][  T971] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  514.818965][ T1014] netlink: 'syz.8.6881': attribute type 1 has an invalid length.
[  514.868178][  T971] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.161800][  T971] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  515.175481][  T971] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  515.188309][  T971] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  515.202837][  T971] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  515.334577][T13797] tipc: Node number set to 2868003353
[  515.361334][ T1065] loop0: detected capacity change from 0 to 2048
[  515.367948][ T1065] EXT4-fs: Ignoring removed nobh option
[  515.380117][ T1070] loop4: detected capacity change from 0 to 512
[  515.387730][ T1070] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.6888: corrupted in-inode xattr: invalid ea_ino
[  515.401291][ T1070] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.6888: couldn't read orphan inode 15 (err -117)
[  515.528172][ T1070] EXT4-fs error (device loop4): ext4_add_entry:2417: inode #2: comm syz.4.6888: Directory hole found for htree leaf block 0
[  515.636425][ T1086] loop4: detected capacity change from 0 to 512
[  515.643606][ T1086] EXT4-fs (loop4): external journal device major/minor numbers have changed
[  515.667851][ T1086] EXT4-fs (loop4): failed to open journal device unknown-block(11,131) -6
[  515.752150][ T1099] loop7: detected capacity change from 0 to 512
[  515.778736][ T1101] loop8: detected capacity change from 0 to 2048
[  515.779209][ T1099] EXT4-fs error (device loop7): ext4_iget_extra_inode:5035: inode #15: comm syz.7.6895: corrupted in-inode xattr: invalid ea_ino
[  515.785444][ T1101] EXT4-fs: Ignoring removed nobh option
[  515.806551][ T1099] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.6895: couldn't read orphan inode 15 (err -117)
[  516.308287][ T1131] __nla_validate_parse: 7 callbacks suppressed
[  516.308302][ T1131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6905'.
[  516.346320][ T1133] loop0: detected capacity change from 0 to 2048
[  516.389836][ T1133]  loop0: p1 < > p4
[  516.394641][ T1133] loop0: p4 size 8388608 extends beyond EOD, truncated
[  516.464028][ T1140] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6906'.
[  516.581272][ T1148] loop0: detected capacity change from 0 to 512
[  516.590491][ T1148] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  516.601750][ T1150] loop8: detected capacity change from 0 to 512
[  516.610351][ T1150] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  516.634072][ T1148] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.6908: corrupted xattr block 19: overlapping e_value 
[  516.650137][ T1148] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  516.653633][ T1150] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.6907: corrupted xattr block 19: overlapping e_value 
[  516.659399][ T1148] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.6908: corrupted xattr block 19: overlapping e_value 
[  516.686741][ T1150] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop8 ino=15
[  516.687870][ T1148] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  516.708753][ T1167] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.6907: corrupted xattr block 19: overlapping e_value 
[  516.708867][ T1148] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.6908: corrupted xattr block 19: overlapping e_value 
[  516.737177][  T990] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  516.744091][ T1166] loop7: detected capacity change from 0 to 2048
[  516.748806][ T1168] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.6908: corrupted xattr block 19: overlapping e_value 
[  516.767697][ T1150] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.6907: corrupted xattr block 19: overlapping e_value 
[  516.781455][ T1168] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  516.782622][ T1150] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop8 ino=15
[  516.795193][ T1167] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop8 ino=15
[  516.800532][ T1150] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.6907: corrupted xattr block 19: overlapping e_value 
[  516.809537][ T1167] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.6907: corrupted xattr block 19: overlapping e_value 
[  516.835559][ T1166] EXT4-fs: Ignoring removed nobh option
[  516.842016][ T1168] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.6908: corrupted xattr block 19: overlapping e_value 
[  516.856171][ T1168] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.6908: corrupted xattr block 19: overlapping e_value 
[  516.870782][ T1168] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  516.876196][ T1167] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.6907: corrupted xattr block 19: overlapping e_value 
[  516.896166][ T1167] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop8 ino=15
[  516.931808][ T1184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6916'.
[  516.960814][ T1187] loop4: detected capacity change from 0 to 1024
[  516.975651][ T1187] netlink: 'syz.4.6917': attribute type 1 has an invalid length.
[  516.990619][ T1187] 8021q: adding VLAN 0 to HW filter on device bond0
[  517.004229][ T1187] vlan2: entered allmulticast mode
[  517.011545][ T1187] bond0: (slave vlan2): making interface the new active one
[  517.021100][ T1187] bond0: (slave vlan2): Enslaving as an active interface with an up link
[  517.075665][ T1230] loop4: detected capacity change from 0 to 1024
[  517.119904][ T1243] loop4: detected capacity change from 0 to 512
[  517.127275][ T1243] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.6920: corrupted in-inode xattr: invalid ea_ino
[  517.141203][ T1243] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.6920: couldn't read orphan inode 15 (err -117)
[  517.280790][  T990] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.330887][  T990] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.383756][  T990] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  517.394676][  T990] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  517.405977][  T990] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  517.417208][  T990] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  517.460129][ T1276] netlink: 'syz.8.6922': attribute type 4 has an invalid length.
[  517.491740][ T1276] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6922'.
[  517.561590][ T1295] loop0: detected capacity change from 0 to 1024
[  517.573359][ T1294] loop8: detected capacity change from 0 to 2048
[  517.592645][ T1275] 9pnet_virtio: no channels available for device 
[  517.602466][ T1275] tipc: Started in network mode
[  517.607339][ T1275] tipc: Node identity ac14140f, cluster identity 4711
[  517.614323][ T1275] tipc: New replicast peer: 255.255.255.83
[  517.620294][ T1275] tipc: Enabled bearer <udp:£>, priority 10
[  517.679298][ T1294]  loop8: p4 < >
[  517.687763][ T1294] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6929'.
[  517.696668][ T1294] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6929'.
[  517.727418][ T1313] loop0: detected capacity change from 0 to 2048
[  517.740620][ T1294] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6929'.
[  517.763454][ T1314] loop9: detected capacity change from 0 to 512
[  517.771177][ T1314] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  517.771423][ T1313]  loop0: p1 < > p4
[  517.784021][ T1313] loop0: p4 size 8388608 extends beyond EOD, truncated
[  517.810954][ T1314] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #15: comm syz.9.6933: corrupted xattr block 19: overlapping e_value 
[  517.851419][ T1314] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop9 ino=15
[  517.863043][ T1314] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #15: comm syz.9.6933: corrupted xattr block 19: overlapping e_value 
[  517.884655][ T1340] loop8: detected capacity change from 0 to 2048
[  517.893040][ T1341] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #15: comm syz.9.6933: corrupted xattr block 19: overlapping e_value 
[  517.907439][ T1314] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop9 ino=15
[  517.919812][ T1341] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop9 ino=15
[  517.930745][ T1314] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #15: comm syz.9.6933: corrupted xattr block 19: overlapping e_value 
[  517.944907][ T1340]  loop8: p4 < >
[  517.951080][ T1341] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #15: comm syz.9.6933: corrupted xattr block 19: overlapping e_value 
[  517.973351][ T1341] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #15: comm syz.9.6933: corrupted xattr block 19: overlapping e_value 
[  518.010585][ T1341] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop9 ino=15
[  518.030580][ T1340] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6935'.
[  518.061968][ T1344] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6932'.
[  518.147727][T25073] EXT4-fs unmount: 118 callbacks suppressed
[  518.147739][T25073] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  518.311239][ T1391] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.6940'.
[  518.366242][ T1407] loop8: detected capacity change from 0 to 2048
[  518.556552][ T1407]  loop8: p4 < >
[  518.664691][T32695] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  518.753392][T11366] tipc: Node number set to 2886997007
[  518.811437][ T1448] loop8: detected capacity change from 0 to 512
[  518.819219][ T1448] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  518.848149][ T1448] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  518.890951][ T1448] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.6948: corrupted xattr block 19: overlapping e_value 
[  518.907378][ T1448] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop8 ino=15
[  518.920583][ T1448] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.6948: corrupted xattr block 19: overlapping e_value 
[  518.938655][ T1448] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop8 ino=15
[  518.960164][ T1448] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.6948: corrupted xattr block 19: overlapping e_value 
[  518.960296][ T1458] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.6948: corrupted xattr block 19: overlapping e_value 
[  519.000337][ T1458] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop8 ino=15
[  519.010379][ T1458] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.6948: corrupted xattr block 19: overlapping e_value 
[  519.032499][ T1458] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.6948: corrupted xattr block 19: overlapping e_value 
[  519.047822][ T1458] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop8 ino=15
[  519.317030][ T1469] loop7: detected capacity change from 0 to 512
[  519.342633][ T1469] EXT4-fs error (device loop7): ext4_iget_extra_inode:5035: inode #15: comm syz.7.6950: corrupted in-inode xattr: invalid ea_ino
[  519.362593][ T1469] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.6950: couldn't read orphan inode 15 (err -117)
[  519.401563][ T1469] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  519.415931][   T29] kauditd_printk_skb: 263 callbacks suppressed
[  519.415943][   T29] audit: type=1326 audit(519.401:33854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1468 comm="syz.7.6950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f424e929 code=0x7ffc0000
[  519.445118][   T29] audit: type=1326 audit(519.401:33855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1468 comm="syz.7.6950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f424e929 code=0x7ffc0000
[  519.468144][   T29] audit: type=1326 audit(519.401:33856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1468 comm="syz.7.6950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f14f424e929 code=0x7ffc0000
[  519.468313][ T1475] loop9: detected capacity change from 0 to 2048
[  519.491008][   T29] audit: type=1326 audit(519.401:33857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1468 comm="syz.7.6950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f424e929 code=0x7ffc0000
[  519.491036][   T29] audit: type=1326 audit(519.401:33858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1468 comm="syz.7.6950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f424e929 code=0x7ffc0000
[  519.491061][   T29] audit: type=1326 audit(519.401:33859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1468 comm="syz.7.6950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f14f424e929 code=0x7ffc0000
[  519.565992][   T29] audit: type=1326 audit(519.401:33860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1468 comm="syz.7.6950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f424e929 code=0x7ffc0000
[  519.589003][   T29] audit: type=1326 audit(519.401:33861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1468 comm="syz.7.6950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f14f424e929 code=0x7ffc0000
[  519.649998][ T1475]  loop9: p4 < >
[  519.671126][ T1491] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  519.740083][ T1491] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  519.786223][ T1506] loop0: detected capacity change from 0 to 2048
[  519.802552][T20495] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  519.813613][ T1491] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  519.820457][ T1506]  loop0: p4 < >
[  519.854428][ T1512] loop9: detected capacity change from 0 to 2048
[  519.861620][ T1512] EXT4-fs: Ignoring removed nobh option
[  519.870703][ T1491] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  519.910466][ T1512] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  519.947045][ T1491] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  519.990080][ T1491] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  520.003925][ T1547] loop0: detected capacity change from 0 to 1024
[  520.014273][ T1491] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  520.029220][ T1491] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  520.039831][ T1547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  520.081088][   T29] audit: type=1326 audit(520.051:33862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1544 comm="syz.0.6964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf2e1e929 code=0x7ffc0000
[  520.104456][   T29] audit: type=1326 audit(520.051:33863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1544 comm="syz.0.6964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdbf2e1e929 code=0x7ffc0000
[  520.138053][ T1564] netlink: 'syz.0.6964': attribute type 1 has an invalid length.
[  520.164447][ T1564] 8021q: adding VLAN 0 to HW filter on device bond2
[  520.272690][T22129] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  520.298283][ T1607] loop7: detected capacity change from 0 to 2048
[  520.338780][ T1607]  loop7: p1 < > p4
[  520.343249][ T1607] loop7: p4 size 8388608 extends beyond EOD, truncated
[  520.358127][T26407] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  520.385839][ T1617] loop4: detected capacity change from 0 to 1024
[  520.422506][ T1617] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  520.443305][ T1617] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  520.456214][ T1617] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000]
[  520.466088][ T1617] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.6970: lblock 2 mapped to illegal pblock 2 (length 1)
[  520.488155][ T1617] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.6970: lblock 0 mapped to illegal pblock 48 (length 1)
[  520.503382][ T1617] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.6970: Failed to acquire dquot type 0
[  520.515816][ T1617] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  520.526321][ T1617] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.6970: mark_inode_dirty error
[  520.526814][ T1625] loop0: detected capacity change from 0 to 2048
[  520.542008][ T1617] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  520.554520][ T1617] EXT4-fs (loop4): 1 orphan inode deleted
[  520.560785][ T1617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  520.572829][T10985] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1)
[  520.587589][T10985] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:12: Failed to release dquot type 0
[  520.588904][ T1625]  loop0: p4 < >
[  520.600837][ T1617] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  520.612019][ T1617] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz.4.6970: Invalid inode table block 1 in block_group 0
[  520.624954][ T1617] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  520.636625][ T1617] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz.4.6970: mark_inode_dirty error
[  520.722333][T32695] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  520.812164][ T1645] loop0: detected capacity change from 0 to 512
[  520.820379][ T1645] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  520.860442][ T1645] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  520.921837][ T1645] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.6976: corrupted xattr block 19: overlapping e_value 
[  520.976093][ T1645] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  520.985279][ T1645] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.6976: corrupted xattr block 19: overlapping e_value 
[  520.996394][ T1677] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.6976: corrupted xattr block 19: overlapping e_value 
[  521.019941][ T1645] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  521.031155][ T1677] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  521.051462][ T1645] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.6976: corrupted xattr block 19: overlapping e_value 
[  521.095339][ T1677] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.6976: corrupted xattr block 19: overlapping e_value 
[  521.130218][ T1677] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.6976: corrupted xattr block 19: overlapping e_value 
[  521.163304][ T1677] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  521.247755][ T1676] 9pnet_virtio: no channels available for device 
[  521.258237][ T1676] tipc: Enabling of bearer <udp:£> rejected, already enabled
[  521.420340][ T1691] loop8: detected capacity change from 0 to 2048
[  521.427124][ T1691] EXT4-fs: Ignoring removed nobh option
[  521.451204][ T1691] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  521.724462][T26407] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  521.836335][ T1711] __nla_validate_parse: 4 callbacks suppressed
[  521.836439][ T1711] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.6993'.
[  521.956739][ T1718] loop0: detected capacity change from 0 to 2048
[  522.008848][ T1718]  loop0: p4 < >
[  522.118139][ T1747] loop0: detected capacity change from 0 to 1024
[  522.126180][ T1747] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  522.136305][ T1747] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  522.147567][ T1747] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000]
[  522.157677][ T1747] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.6997: lblock 2 mapped to illegal pblock 2 (length 1)
[  522.171827][ T1747] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 48: comm syz.0.6997: lblock 0 mapped to illegal pblock 48 (length 1)
[  522.186071][ T1747] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.6997: Failed to acquire dquot type 0
[  522.197444][ T1747] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  522.207967][ T1747] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.6997: mark_inode_dirty error
[  522.220495][ T1747] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  522.230858][ T1747] EXT4-fs (loop0): 1 orphan inode deleted
[  522.237052][ T1747] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  522.250906][ T2197] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1)
[  522.265569][ T2197] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0
[  522.291348][ T1747] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  522.311121][T20495] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  522.343387][ T1747] EXT4-fs error (device loop0): __ext4_get_inode_loc:4792: comm syz.0.6997: Invalid inode table block 1 in block_group 0
[  522.361198][ T1747] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  522.377453][ T1747] EXT4-fs error (device loop0): ext4_quota_off:7217: inode #3: comm syz.0.6997: mark_inode_dirty error
[  522.785398][ T1783] loop4: detected capacity change from 0 to 1024
[  522.812149][ T1783] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  522.831655][ T1783] netlink: 'syz.4.7005': attribute type 1 has an invalid length.
[  522.855454][ T1783] 8021q: adding VLAN 0 to HW filter on device bond1
[  522.950763][T25073] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  523.151888][ T1848] netlink: 'syz.4.7017': attribute type 21 has an invalid length.
[  523.184877][ T1844] 9pnet_virtio: no channels available for device 
[  523.195467][ T1844] tipc: Enabling of bearer <udp:£> rejected, already enabled
[  523.273168][ T1860] netlink: 'syz.4.7020': attribute type 4 has an invalid length.
[  523.287031][ T1860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7020'.
[  523.747580][ T1909] loop0: detected capacity change from 0 to 2048
[  523.799300][ T1909] EXT4-fs: Ignoring removed nobh option
[  523.852888][ T1909] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  523.882045][ T1918] loop8: detected capacity change from 0 to 2048
[  523.991499][ T1918]  loop8: p4 < >
[  524.103057][ T1911] 9pnet_virtio: no channels available for device 
[  524.129972][ T1911] tipc: Enabling of bearer <udp:£> rejected, already enabled
[  524.327289][ T1942] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  524.411715][ T1942] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  524.432224][   T29] kauditd_printk_skb: 156 callbacks suppressed
[  524.432236][   T29] audit: type=1326 audit(524.411:34014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1953 comm="syz.7.7040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f424e929 code=0x7ffc0000
[  524.465094][ T1954] loop7: detected capacity change from 0 to 128
[  524.483557][   T29] audit: type=1326 audit(524.441:34015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1953 comm="syz.7.7040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f424e929 code=0x7ffc0000
[  524.506600][   T29] audit: type=1326 audit(524.441:34016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1953 comm="syz.7.7040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f14f424d290 code=0x7ffc0000
[  524.529614][   T29] audit: type=1326 audit(524.441:34017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1953 comm="syz.7.7040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f424e929 code=0x7ffc0000
[  524.552491][   T29] audit: type=1326 audit(524.441:34018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1953 comm="syz.7.7040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f424e929 code=0x7ffc0000
[  524.575363][   T29] audit: type=1326 audit(524.441:34019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1953 comm="syz.7.7040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f14f424e929 code=0x7ffc0000
[  524.598287][   T29] audit: type=1326 audit(524.441:34020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1953 comm="syz.7.7040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f14f424e963 code=0x7ffc0000
[  524.620987][   T29] audit: type=1326 audit(524.441:34021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1953 comm="syz.7.7040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f14f424d3df code=0x7ffc0000
[  524.643725][   T29] audit: type=1326 audit(524.441:34022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1953 comm="syz.7.7040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f14f424e9b7 code=0x7ffc0000
[  524.666555][   T29] audit: type=1326 audit(524.441:34023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1953 comm="syz.7.7040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f14f424d290 code=0x7ffc0000
[  524.692175][ T1942] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  524.719668][T26407] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  524.742429][ T1942] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  524.753415][ T1970] netlink: 'syz.0.7041': attribute type 4 has an invalid length.
[  524.764738][ T1970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7041'.
[  524.823793][ T1980] loop0: detected capacity change from 0 to 2048
[  524.839771][ T1942] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  524.852769][ T1942] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  524.864222][ T1942] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  524.873990][ T1980]  loop0: p1 < > p4
[  524.878585][ T1980] loop0: p4 size 8388608 extends beyond EOD, truncated
[  524.886133][ T1990] netlink: 14593 bytes leftover after parsing attributes in process `syz.7.7045'.
[  524.912150][ T1942] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  524.943824][ T1997] netlink: 'syz.9.7046': attribute type 21 has an invalid length.
[  525.008116][ T2007] loop9: detected capacity change from 0 to 2048
[  525.015438][ T2007] EXT4-fs: Ignoring removed nobh option
[  525.041348][ T2007] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  525.091145][ T2005] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.7044'.
[  525.138018][ T2029] netlink: 'syz.8.7053': attribute type 21 has an invalid length.
[  525.181304][ T2040] loop7: detected capacity change from 0 to 2048
[  525.209714][ T2040]  loop7: p1 < > p4
[  525.217572][ T2040] loop7: p4 size 8388608 extends beyond EOD, truncated
[  525.242314][ T2055] loop4: detected capacity change from 0 to 1024
[  525.254071][ T2058] loop8: detected capacity change from 0 to 2048
[  525.270621][ T2055] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  525.299855][ T2058]  loop8: p1 < > p4
[  525.304413][ T2058] loop8: p4 size 8388608 extends beyond EOD, truncated
[  525.347802][ T2055] netlink: 'syz.4.7059': attribute type 1 has an invalid length.
[  525.364511][ T2055] 8021q: adding VLAN 0 to HW filter on device bond2
[  525.394651][ T2119] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.7057'.
[  525.419145][T25073] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  525.438817][ T2121] loop7: detected capacity change from 0 to 128
[  525.475609][ T2130] loop4: detected capacity change from 0 to 2048
[  525.496248][ T2121] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  525.505227][ T2120] tipc: Resetting bearer <eth:syzkaller0>
[  525.520099][ T2130]  loop4: p1 < > p4
[  525.525119][ T2130] loop4: p4 size 8388608 extends beyond EOD, truncated
[  525.537057][ T2141] loop0: detected capacity change from 0 to 1024
[  525.545183][ T2120] tipc: Disabling bearer <eth:syzkaller0>
[  525.561948][ T2141] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  525.588235][ T2141] netlink: 'syz.0.7067': attribute type 1 has an invalid length.
[  525.602860][ T2141] 8021q: adding VLAN 0 to HW filter on device bond3
[  525.625024][T26407] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  525.635419][ T2190] loop7: detected capacity change from 0 to 2048
[  525.659421][ T2190]  loop7: p4 < >
[  525.688671][ T2209] loop0: detected capacity change from 0 to 2048
[  525.728894][ T2209]  loop0: p4 < >
[  525.805940][ T2230] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.834904][ T2247] loop4: detected capacity change from 0 to 1024
[  525.855459][ T2247] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  525.873649][T32695] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  525.890117][ T2230] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.901835][ T2247] netlink: 'syz.4.7081': attribute type 1 has an invalid length.
[  525.924271][ T2247] 8021q: adding VLAN 0 to HW filter on device bond3
[  525.945094][ T2230] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.978327][T25073] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  526.005578][ T2230] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  526.045012][ T2310] loop0: detected capacity change from 0 to 512
[  526.053806][ T2310] EXT4-fs (loop0): external journal device major/minor numbers have changed
[  526.095134][ T2310] EXT4-fs (loop0): failed to open journal device unknown-block(11,131) -6
[  526.157127][ T2322] netlink: 'syz.4.7086': attribute type 21 has an invalid length.
[  526.165183][ T2320] loop8: detected capacity change from 0 to 2048
[  526.176890][ T2230] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  526.190226][ T2230] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  526.202258][ T2230] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  526.211144][ T2320]  loop8: p1 < > p4
[  526.215703][ T2320] loop8: p4 size 8388608 extends beyond EOD, truncated
[  526.250676][ T2230] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  526.267906][ T2341] loop4: detected capacity change from 0 to 2048
[  526.331438][ T2341]  loop4: p4 < >
[  526.387267][ T2376] loop0: detected capacity change from 0 to 512
[  526.447325][ T2396] loop7: detected capacity change from 0 to 128
[  526.468955][ T2406] loop4: detected capacity change from 0 to 2048
[  526.478315][ T2376] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.7094: corrupted in-inode xattr: invalid ea_ino
[  526.492410][ T2406] EXT4-fs: Ignoring removed nobh option
[  526.500061][ T2376] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.7094: couldn't read orphan inode 15 (err -117)
[  526.513307][ T2376] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  526.527390][ T2406] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  526.546244][ T2408] loop8: detected capacity change from 0 to 2048
[  526.585320][ T2396] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  526.592280][ T2408]  loop8: p4 < >
[  526.600823][ T2395] tipc: Resetting bearer <eth:syzkaller0>
[  526.620542][ T2395] tipc: Disabling bearer <eth:syzkaller0>
[  526.628035][ T2408] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7098'.
[  526.637065][ T2408] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7098'.
[  526.676704][ T2408] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7098'.
[  526.729164][T26407] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  526.880784][ T2450] netlink: 14593 bytes leftover after parsing attributes in process `syz.7.7103'.
[  526.938705][ T2452] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7107'.
[  527.111727][ T2466] loop7: detected capacity change from 0 to 512
[  527.120972][ T2466] EXT4-fs error (device loop7): ext4_iget_extra_inode:5035: inode #15: comm syz.7.7114: corrupted in-inode xattr: invalid ea_ino
[  527.123081][ T2468] loop0: detected capacity change from 0 to 2048
[  527.134804][ T2466] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.7114: couldn't read orphan inode 15 (err -117)
[  527.152990][ T2472] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7115'.
[  527.155202][ T2466] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  527.190329][ T2475] loop9: detected capacity change from 0 to 512
[  527.206774][ T2475] EXT4-fs (loop9): external journal device major/minor numbers have changed
[  527.208981][ T2468]  loop0: p4 < >
[  527.225516][ T2468] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7113'.
[  527.234528][ T2468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7113'.
[  527.247627][ T2475] EXT4-fs (loop9): failed to open journal device unknown-block(11,131) -6
[  527.257633][ T2468] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7113'.
[  527.283721][ T2497] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.322342][T25073] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  527.332624][ T2497] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.380877][ T2512] loop4: detected capacity change from 0 to 2048
[  527.425269][ T2515] loop8: detected capacity change from 0 to 1024
[  527.433726][ T2515] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  527.434811][T22129] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  527.443652][ T2512]  loop4: p1 < > p4
[  527.452119][ T2515] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  527.455585][ T2512] loop4: p4 size 8388608 extends beyond EOD, truncated
[  527.473857][ T2497] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.486233][ T2515] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000]
[  527.497449][ T2515] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 2: comm syz.8.7124: lblock 2 mapped to illegal pblock 2 (length 1)
[  527.514334][ T2515] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 48: comm syz.8.7124: lblock 0 mapped to illegal pblock 48 (length 1)
[  527.530105][ T2515] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.7124: Failed to acquire dquot type 0
[  527.541795][ T2515] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  527.542461][ T2497] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.552271][ T2515] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.7124: mark_inode_dirty error
[  527.572602][ T2515] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  527.583119][ T2515] EXT4-fs (loop8): 1 orphan inode deleted
[  527.591760][ T2515] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  527.604366][T10985] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1)
[  527.619928][T10985] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:12: Failed to release dquot type 0
[  527.632818][ T2515] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  527.642206][ T2515] EXT4-fs error (device loop8): __ext4_get_inode_loc:4792: comm syz.8.7124: Invalid inode table block 1 in block_group 0
[  527.655447][ T2515] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  527.665273][ T2515] EXT4-fs error (device loop8): ext4_quota_off:7217: inode #3: comm syz.8.7124: mark_inode_dirty error
[  527.672774][ T2497] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  527.693391][ T2497] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  527.710969][ T2497] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  527.725812][ T2497] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  527.912494][ T2558] loop0: detected capacity change from 0 to 2048
[  527.929018][ T2560] loop4: detected capacity change from 0 to 128
[  527.960511][ T2560] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  527.969706][ T2558]  loop0: p4 < >
[  527.976777][ T2559] tipc: Resetting bearer <eth:syzkaller0>
[  528.001129][ T2559] tipc: Disabling bearer <eth:syzkaller0>
[  528.208597][ T2596] loop0: detected capacity change from 0 to 512
[  528.216147][ T2596] EXT4-fs (loop0): external journal device major/minor numbers have changed
[  528.270169][ T2596] EXT4-fs (loop0): failed to open journal device unknown-block(11,131) -6
[  528.334603][ T2619] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7136'.
[  528.343763][ T2619] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7136'.
[  528.410413][ T2630] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  528.416955][ T2630] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  528.424589][ T2630] vhci_hcd vhci_hcd.0: Device attached
[  528.432954][ T2636] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.453739][ T2633] loop7: detected capacity change from 0 to 2048
[  528.463875][ T2634] vhci_hcd: connection closed
[  528.463978][ T2197] vhci_hcd: stop threads
[  528.473049][ T2197] vhci_hcd: release socket
[  528.477451][ T2197] vhci_hcd: disconnect device
[  528.484897][ T2633]  loop7: p1 < > p4
[  528.490938][ T2636] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.504504][ T2633] loop7: p4 size 8388608 extends beyond EOD, truncated
[  528.556009][ T2636] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.696252][ T2636] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.798742][ T2665] loop4: detected capacity change from 0 to 128
[  528.865523][ T2665] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  528.912174][ T2664] tipc: Resetting bearer <eth:syzkaller0>
[  528.939590][ T2664] tipc: Disabling bearer <eth:syzkaller0>
[  529.081996][ T2685] loop4: detected capacity change from 0 to 2048
[  529.109932][ T2685]  loop4: p4 < >
[  529.154406][ T2697] loop0: detected capacity change from 0 to 512
[  529.161596][ T2697] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  529.181013][ T2697] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  529.200272][ T2697] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.7149: corrupted xattr block 19: overlapping e_value 
[  529.214409][ T2697] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  529.224299][ T2697] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.7149: corrupted xattr block 19: overlapping e_value 
[  529.240406][ T2636] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  529.255410][ T2636] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  529.259792][ T2710] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.7149: corrupted xattr block 19: overlapping e_value 
[  529.263889][ T2697] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  529.282481][ T2636] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  529.286523][ T2697] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.7149: corrupted xattr block 19: overlapping e_value 
[  529.312093][ T2636] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  529.318496][ T2710] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  529.338572][ T2710] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.7149: corrupted xattr block 19: overlapping e_value 
[  529.361896][ T2710] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.7149: corrupted xattr block 19: overlapping e_value 
[  529.375840][ T2710] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  529.407105][ T2722] loop9: detected capacity change from 0 to 2048
[  529.458849][ T2722]  loop9: p4 < >
[  529.525536][   T29] kauditd_printk_skb: 791 callbacks suppressed
[  529.525552][   T29] audit: type=1400 audit(529.501:34812): avc:  denied  { read } for  pid=2733 comm="syz.9.7152" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  529.554163][   T29] audit: type=1400 audit(529.501:34813): avc:  denied  { open } for  pid=2733 comm="syz.9.7152" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  529.580625][   T29] audit: type=1400 audit(529.561:34814): avc:  denied  { create } for  pid=2733 comm="syz.9.7152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  529.661670][   T29] audit: type=1326 audit(529.641:34815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2737 comm="syz.7.7153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f424e929 code=0x7ffc0000
[  529.684732][   T29] audit: type=1326 audit(529.641:34816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2737 comm="syz.7.7153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f424e929 code=0x7ffc0000
[  529.708935][   T29] audit: type=1326 audit(529.641:34817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2737 comm="syz.7.7153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14f424e929 code=0x7ffc0000
[  529.731963][   T29] audit: type=1326 audit(529.641:34818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2737 comm="syz.7.7153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f424e929 code=0x7ffc0000
[  529.754902][   T29] audit: type=1326 audit(529.641:34819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2737 comm="syz.7.7153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f424e929 code=0x7ffc0000
[  529.777789][   T29] audit: type=1326 audit(529.641:34820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2737 comm="syz.7.7153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14f424e929 code=0x7ffc0000
[  529.800827][   T29] audit: type=1326 audit(529.641:34821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2737 comm="syz.7.7153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f424e929 code=0x7ffc0000
[  529.961854][T26407] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  529.971769][ T2746] 9pnet_virtio: no channels available for device 
[  530.022492][ T2753] loop8: detected capacity change from 0 to 2048
[  530.022749][ T2746] tipc: New replicast peer: 255.255.255.83
[  530.034799][ T2746] tipc: Enabled bearer <udp:£ >, priority 10
[  530.051791][ T2758] loop0: detected capacity change from 0 to 512
[  530.061372][ T2753]  loop8: p4 < >
[  530.068315][ T2753] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7159'.
[  530.068802][ T2758] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  530.077234][ T2753] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7159'.
[  530.193783][ T2758] EXT4-fs (loop0): 1 truncate cleaned up
[  530.201180][ T2758] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  530.219869][ T2790] loop9: detected capacity change from 0 to 1024
[  530.266146][ T2792] loop4: detected capacity change from 0 to 2048
[  530.292885][T26407] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  530.363974][ T2797] loop8: detected capacity change from 0 to 512
[  530.372094][ T2792] EXT4-fs: Ignoring removed nobh option
[  530.401935][ T2790] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  530.414980][ T2792] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  530.427841][ T2797] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  530.440362][ T2801] loop0: detected capacity change from 0 to 2048
[  530.447418][ T2801] EXT4-fs: Ignoring removed nobh option
[  530.459331][ T2797] FAULT_INJECTION: forcing a failure.
[  530.459331][ T2797] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  530.472444][ T2797] CPU: 1 UID: 0 PID: 2797 Comm: syz.8.7164 Tainted: G        W           6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) 
[  530.472517][ T2797] Tainted: [W]=WARN
[  530.472523][ T2797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  530.472534][ T2797] Call Trace:
[  530.472540][ T2797]  <TASK>
[  530.472546][ T2797]  __dump_stack+0x1d/0x30
[  530.472565][ T2797]  dump_stack_lvl+0xe8/0x140
[  530.472586][ T2797]  dump_stack+0x15/0x1b
[  530.472603][ T2797]  should_fail_ex+0x265/0x280
[  530.472711][ T2797]  should_fail+0xb/0x20
[  530.472735][ T2797]  should_fail_usercopy+0x1a/0x20
[  530.472761][ T2797]  strncpy_from_user+0x25/0x230
[  530.472806][ T2797]  ? kmem_cache_alloc_noprof+0x186/0x310
[  530.472834][ T2797]  ? getname_flags+0x80/0x3b0
[  530.472854][ T2797]  getname_flags+0xae/0x3b0
[  530.472872][ T2797]  do_sys_openat2+0x60/0x110
[  530.472903][ T2797]  __x64_sys_openat+0xf2/0x120
[  530.472927][ T2797]  x64_sys_call+0x1af/0x2fb0
[  530.472946][ T2797]  do_syscall_64+0xd2/0x200
[  530.472977][ T2797]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  530.473019][ T2797]  ? clear_bhb_loop+0x40/0x90
[  530.473037][ T2797]  ? clear_bhb_loop+0x40/0x90
[  530.473056][ T2797]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.473100][ T2797] RIP: 0033:0x7f7ddabbe929
[  530.473116][ T2797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  530.473177][ T2797] RSP: 002b:00007f7dd91e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  530.473193][ T2797] RAX: ffffffffffffffda RBX: 00007f7ddade6160 RCX: 00007f7ddabbe929
[  530.473204][ T2797] RDX: 000000000000275a RSI: 0000200000000100 RDI: ffffffffffffff9c
[  530.473218][ T2797] RBP: 00007f7dd91e5090 R08: 0000000000000000 R09: 0000000000000000
[  530.473229][ T2797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  530.473274][ T2797] R13: 0000000000000000 R14: 00007f7ddade6160 R15: 00007ffe078320e8
[  530.473292][ T2797]  </TASK>
[  530.705125][T32695] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  530.720824][ T2801] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  530.893446][ T2828] loop9: detected capacity change from 0 to 2048
[  530.900330][ T2828] EXT4-fs: Ignoring removed nobh option
[  530.910453][ T2828] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  530.924946][T26407] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  531.033347][ T2846] loop0: detected capacity change from 0 to 512
[  531.046763][ T2846] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.7175: corrupted in-inode xattr: invalid ea_ino
[  531.064794][ T2846] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.7175: couldn't read orphan inode 15 (err -117)
[  531.088898][ T2846] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  531.102364][T25073] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  531.118917][T20495] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  531.166078][ T2860] loop4: detected capacity change from 0 to 1024
[  531.184718][ T2862] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.192180][ T2860] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  531.198232][T32695] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  531.224349][T25073] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  531.311032][ T2846] EXT4-fs error (device loop0): ext4_add_entry:2417: inode #2: comm syz.0.7175: Directory hole found for htree leaf block 0
[  531.347599][ T2862] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.424865][ T2901] validate_nla: 1 callbacks suppressed
[  531.424882][ T2901] netlink: 'syz.9.7187': attribute type 21 has an invalid length.
[  531.441261][T26407] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  531.452152][ T2862] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.503068][ T2913] loop9: detected capacity change from 0 to 2048
[  531.510228][ T2914] loop7: detected capacity change from 0 to 1024
[  531.519884][ T2862] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.563684][ T2914] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  531.659859][ T2913]  loop9: p4 < >
[  531.686000][T22129] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  531.717550][ T2862] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  531.758205][ T2862] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  531.795328][ T2862] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  531.854960][ T2862] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  531.894160][ T2951] loop9: detected capacity change from 0 to 2048
[  531.901788][ T2953] loop7: detected capacity change from 0 to 128
[  531.911179][ T2953] vfat: Unknown parameter '
'
[  531.925744][ T2953] FAULT_INJECTION: forcing a failure.
[  531.925744][ T2953] name failslab, interval 1, probability 0, space 0, times 0
[  531.938388][ T2953] CPU: 1 UID: 0 PID: 2953 Comm: syz.7.7195 Tainted: G        W           6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) 
[  531.938466][ T2953] Tainted: [W]=WARN
[  531.938472][ T2953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  531.938486][ T2953] Call Trace:
[  531.938492][ T2953]  <TASK>
[  531.938498][ T2953]  __dump_stack+0x1d/0x30
[  531.938518][ T2953]  dump_stack_lvl+0xe8/0x140
[  531.938539][ T2953]  dump_stack+0x15/0x1b
[  531.938554][ T2953]  should_fail_ex+0x265/0x280
[  531.938605][ T2953]  should_failslab+0x8c/0xb0
[  531.938627][ T2953]  kmem_cache_alloc_node_noprof+0x57/0x320
[  531.938656][ T2953]  ? __alloc_skb+0x101/0x320
[  531.938687][ T2953]  __alloc_skb+0x101/0x320
[  531.938792][ T2953]  ? audit_log_start+0x365/0x6c0
[  531.938876][ T2953]  audit_log_start+0x380/0x6c0
[  531.938912][ T2953]  audit_seccomp+0x48/0x100
[  531.938950][ T2953]  ? __seccomp_filter+0x68c/0x10d0
[  531.938974][ T2953]  __seccomp_filter+0x69d/0x10d0
[  531.938999][ T2953]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  531.939033][ T2953]  ? vfs_write+0x75e/0x8e0
[  531.939072][ T2953]  __secure_computing+0x82/0x150
[  531.939135][ T2953]  syscall_trace_enter+0xcf/0x1e0
[  531.939157][ T2953]  do_syscall_64+0xac/0x200
[  531.939185][ T2953]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  531.939206][ T2953]  ? clear_bhb_loop+0x40/0x90
[  531.939273][ T2953]  ? clear_bhb_loop+0x40/0x90
[  531.939294][ T2953]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  531.939312][ T2953] RIP: 0033:0x7f14f424e929
[  531.939325][ T2953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  531.939361][ T2953] RSP: 002b:00007f14f28b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  531.939381][ T2953] RAX: ffffffffffffffda RBX: 00007f14f4475fa0 RCX: 00007f14f424e929
[  531.939451][ T2953] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 00002000000003c0
[  531.939462][ T2953] RBP: 00007f14f28b7090 R08: 0000000000000000 R09: 0000000000000000
[  531.939473][ T2953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  531.939487][ T2953] R13: 0000000000000000 R14: 00007f14f4475fa0 R15: 00007ffd55cadd88
[  531.939507][ T2953]  </TASK>
[  532.160336][ T2963] __nla_validate_parse: 3 callbacks suppressed
[  532.160348][ T2963] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7194'.
[  532.177353][ T2963] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7194'.
[  532.186812][ T2951]  loop9: p4 < >
[  532.195959][ T2970] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7197'.
[  532.266336][ T2983] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7199'.
[  532.275361][ T2983] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7199'.
[  532.288122][ T2984] loop8: detected capacity change from 0 to 512
[  532.293282][ T2979] loop7: detected capacity change from 0 to 2048
[  532.304543][ T2991] netlink: 'syz.9.7201': attribute type 21 has an invalid length.
[  532.310257][ T2984] EXT4-fs error (device loop8): ext4_iget_extra_inode:5035: inode #15: comm syz.8.7200: corrupted in-inode xattr: invalid ea_ino
[  532.328489][ T2984] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.7200: couldn't read orphan inode 15 (err -117)
[  532.341027][ T2984] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  532.370387][ T2979]  loop7: p1 < > p4
[  532.376077][ T2979] loop7: p4 size 8388608 extends beyond EOD, truncated
[  532.392071][ T3010] loop0: detected capacity change from 0 to 512
[  532.407677][ T3010] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.7206: corrupted in-inode xattr: invalid ea_ino
[  532.422007][ T3010] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.7206: couldn't read orphan inode 15 (err -117)
[  532.437978][ T3010] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  532.457977][ T3016] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  532.484179][ T3015] tipc: Resetting bearer <eth:syzkaller0>
[  532.500743][ T2984] EXT4-fs error (device loop8): ext4_add_entry:2417: inode #2: comm syz.8.7200: Directory hole found for htree leaf block 0
[  532.519210][ T3015] tipc: Disabling bearer <eth:syzkaller0>
[  532.554651][T20495] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  532.583575][ T3010] EXT4-fs error (device loop0): ext4_add_entry:2417: inode #2: comm syz.0.7206: Directory hole found for htree leaf block 0
[  532.616369][ T3036] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4)
[  532.622898][ T3036] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  532.624510][ T3044] loop9: detected capacity change from 0 to 2048
[  532.630539][ T3036] vhci_hcd vhci_hcd.0: Device attached
[  532.646078][ T3041] vhci_hcd: connection closed
[  532.648090][ T2197] vhci_hcd: stop threads
[  532.657108][ T2197] vhci_hcd: release socket
[  532.661656][ T2197] vhci_hcd: disconnect device
[  532.674260][ T3044]  loop9: p4 < >
[  532.677359][T26407] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  532.691924][ T3044] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7212'.
[  532.702810][ T3044] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7212'.
[  532.742036][ T3052] loop0: detected capacity change from 0 to 1024
[  532.752376][ T3060] 9pnet_virtio: no channels available for device 
[  532.759595][ T3052] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  532.771215][ T3060] tipc: Enabling of bearer <udp:£> rejected, already enabled
[  532.771812][ T3052] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  532.797245][ T3064] loop7: detected capacity change from 0 to 2048
[  532.821559][ T3064] EXT4-fs: Ignoring removed nobh option
[  532.847817][ T3052] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000]
[  532.859418][ T3064] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  532.871136][ T3052] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.7213: lblock 2 mapped to illegal pblock 2 (length 1)
[  532.904545][ T3052] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 48: comm syz.0.7213: lblock 0 mapped to illegal pblock 48 (length 1)
[  532.931169][ T3052] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.7213: Failed to acquire dquot type 0
[  532.942794][ T3052] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  532.999563][ T3052] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.7213: mark_inode_dirty error
[  533.024147][ T3052] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  533.057066][ T3052] EXT4-fs (loop0): 1 orphan inode deleted
[  533.064515][ T3080] loop4: detected capacity change from 0 to 512
[  533.078339][ T2197] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1)
[  533.094923][ T3052] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  533.108463][ T3080] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.7218: corrupted in-inode xattr: invalid ea_ino
[  533.121943][ T2197] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0
[  533.139358][ T3080] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.7218: couldn't read orphan inode 15 (err -117)
[  533.152720][ T3052] EXT4-fs error (device loop0): __ext4_get_inode_loc:4792: comm syz.0.7213: Invalid inode table block 1 in block_group 0
[  533.174323][ T3052] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  533.194403][ T3084] loop8: detected capacity change from 0 to 128
[  533.204467][ T3052] EXT4-fs error (device loop0): ext4_quota_off:7217: inode #3: comm syz.0.7213: mark_inode_dirty error
[  533.217345][ T3084] vfat: Unknown parameter '
'
[  533.245885][ T3091] loop8: detected capacity change from 0 to 128
[  533.297930][ T3091] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  533.306382][ T3090] tipc: Resetting bearer <eth:syzkaller0>
[  533.333481][ T3090] tipc: Disabling bearer <eth:syzkaller0>
[  533.410544][ T3107] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  533.418206][ T3106] tipc: Resetting bearer <eth:syzkaller0>
[  533.425763][ T3111] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7222'.
[  533.442110][ T3106] tipc: Disabling bearer <eth:syzkaller0>
[  533.517382][ T3117] loop4: detected capacity change from 0 to 512
[  533.524821][ T3117] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  533.543766][ T3117] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.7224: corrupted xattr block 19: overlapping e_value 
[  533.560440][ T3117] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  533.576963][ T3117] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.7224: corrupted xattr block 19: overlapping e_value 
[  533.597687][ T3117] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  533.626854][ T3117] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.7224: corrupted xattr block 19: overlapping e_value 
[  533.628673][ T3128] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.7224: corrupted xattr block 19: overlapping e_value 
[  533.671833][ T3130] loop0: detected capacity change from 0 to 1024
[  533.686545][ T3128] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  533.714374][ T3128] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.7224: corrupted xattr block 19: overlapping e_value 
[  533.749898][ T3144] netlink: 'syz.7.7228': attribute type 21 has an invalid length.
[  533.750913][ T3130] netlink: 'syz.0.7226': attribute type 1 has an invalid length.
[  533.768738][ T3128] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.7224: corrupted xattr block 19: overlapping e_value 
[  533.783831][ T3128] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  533.812827][ T3184] netlink: 'syz.7.7229': attribute type 21 has an invalid length.
[  533.822816][ T3130] 8021q: adding VLAN 0 to HW filter on device bond4
[  533.903150][ T3194] loop7: detected capacity change from 0 to 2048
[  533.905081][ T3198] loop0: detected capacity change from 0 to 512
[  533.918252][ T3198] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.7231: corrupted in-inode xattr: invalid ea_ino
[  533.931685][ T3198] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.7231: couldn't read orphan inode 15 (err -117)
[  533.948875][ T3194]  loop7: p4 < >
[  534.035665][ T3213] loop7: detected capacity change from 0 to 1024
[  534.086746][ T3213] netlink: 'syz.7.7232': attribute type 1 has an invalid length.
[  534.122515][ T3236] loop0: detected capacity change from 0 to 512
[  534.133804][ T3213] 8021q: adding VLAN 0 to HW filter on device bond3
[  534.145570][ T3236] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.7234: corrupted in-inode xattr: invalid ea_ino
[  534.169956][ T3236] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.7234: couldn't read orphan inode 15 (err -117)
[  534.231627][ T3265] loop7: detected capacity change from 0 to 1024
[  534.239111][ T3265] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  534.247800][ T3265] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  534.259865][ T3265] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000]
[  534.269110][ T3265] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 2: comm syz.7.7236: lblock 2 mapped to illegal pblock 2 (length 1)
[  534.283203][ T3265] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 48: comm syz.7.7236: lblock 0 mapped to illegal pblock 48 (length 1)
[  534.323736][ T3236] EXT4-fs error (device loop0): ext4_add_entry:2417: inode #2: comm syz.0.7234: Directory hole found for htree leaf block 0
[  534.346241][ T3265] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.7236: Failed to acquire dquot type 0
[  534.390336][ T3265] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  534.401737][ T3265] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.7236: mark_inode_dirty error
[  534.413477][ T3265] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  534.427240][ T3265] EXT4-fs (loop7): 1 orphan inode deleted
[  534.433531][ T2197] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1)
[  534.459751][ T2197] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0
[  534.481822][ T3280] netlink: 'syz.8.7241': attribute type 21 has an invalid length.
[  534.491693][ T3265] EXT4-fs error (device loop7): __ext4_get_inode_loc:4792: comm syz.7.7236: Invalid inode table block 1 in block_group 0
[  534.505286][ T3278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7238'.
[  534.514192][ T3278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7238'.
[  534.523550][ T3265] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  534.543175][ T3265] EXT4-fs error (device loop7): ext4_quota_off:7217: inode #3: comm syz.7.7236: mark_inode_dirty error
[  534.559675][   T29] kauditd_printk_skb: 694 callbacks suppressed
[  534.559755][   T29] audit: type=1400 audit(534.541:35508): avc:  denied  { setopt } for  pid=3276 comm="syz.0.7238" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  534.585720][   T29] audit: type=1400 audit(534.541:35509): avc:  denied  { bind } for  pid=3276 comm="syz.0.7238" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  534.605279][   T29] audit: type=1400 audit(534.541:35510): avc:  denied  { name_bind } for  pid=3276 comm="syz.0.7238" src=20005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  534.608849][ T3296] loop4: detected capacity change from 0 to 2048
[  534.625631][   T29] audit: type=1400 audit(534.541:35511): avc:  denied  { node_bind } for  pid=3276 comm="syz.0.7238" src=20005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  534.679279][ T3301] loop8: detected capacity change from 0 to 1024
[  534.699936][ T3305] loop7: detected capacity change from 0 to 2048
[  534.707292][ T3301] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  534.719622][ T3296]  loop4: p4 < >
[  534.724768][ T3301] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  534.738463][ T3301] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000]
[  534.739951][ T3305]  loop7: p1 < > p4
[  534.747349][ T3301] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 2: comm syz.8.7242: lblock 2 mapped to illegal pblock 2 (length 1)
[  534.750910][ T3305] loop7: p4 size 8388608 extends beyond EOD, truncated
[  534.784645][ T3301] Quota error (device loop8): qtree_write_dquot: dquota write failed
[  534.795233][ T3301] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 48: comm syz.8.7242: lblock 0 mapped to illegal pblock 48 (length 1)
[  534.810085][ T3320] netlink: 'syz.0.7244': attribute type 21 has an invalid length.
[  534.836637][   T29] audit: type=1400 audit(534.811:35512): avc:  denied  { create } for  pid=3304 comm="syz.7.7243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  534.858537][ T3301] Quota error (device loop8): v2_write_file_info: Can't write info structure
[  534.867337][ T3301] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.7242: Failed to acquire dquot type 0
[  534.868507][   T29] audit: type=1400 audit(534.841:35513): avc:  denied  { connect } for  pid=3304 comm="syz.7.7243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  534.898621][ T3301] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  534.909173][   T29] audit: type=1400 audit(534.861:35514): avc:  denied  { write } for  pid=3304 comm="syz.7.7243" path="socket:[97026]" dev="sockfs" ino=97026 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  534.937742][ T3301] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.7242: mark_inode_dirty error
[  534.968460][   T29] audit: type=1400 audit(534.941:35515): avc:  denied  { read write } for  pid=3304 comm="syz.7.7243" name="loop7p4" dev="devtmpfs" ino=7017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  534.992755][ T3301] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  535.012689][ T3301] EXT4-fs (loop8): 1 orphan inode deleted
[  535.022368][T10983] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1)
[  535.052928][T10983] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:11: Failed to release dquot type 0
[  535.078124][ T3301] EXT4-fs error (device loop8): __ext4_get_inode_loc:4792: comm syz.8.7242: Invalid inode table block 1 in block_group 0
[  535.091314][ T3301] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  535.101316][ T3338] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[  535.107916][ T3338] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  535.115511][ T3338] vhci_hcd vhci_hcd.0: Device attached
[  535.121475][ T3301] EXT4-fs error (device loop8): ext4_quota_off:7217: inode #3: comm syz.8.7242: mark_inode_dirty error
[  535.136054][ T3339] vhci_hcd: connection closed
[  535.138017][T10985] vhci_hcd: stop threads
[  535.146977][T10985] vhci_hcd: release socket
[  535.151468][T10985] vhci_hcd: disconnect device
[  535.388957][ T3372] netlink: 'syz.7.7257': attribute type 21 has an invalid length.
[  535.448298][ T3376] loop9: detected capacity change from 0 to 512
[  535.455448][ T3376] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  535.471899][ T3376] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #15: comm syz.9.7258: corrupted xattr block 19: overlapping e_value 
[  535.486878][ T3376] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop9 ino=15
[  535.490371][ T3392] loop7: detected capacity change from 0 to 512
[  535.495926][ T3376] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #15: comm syz.9.7258: corrupted xattr block 19: overlapping e_value 
[  535.504582][ T3392] EXT4-fs error (device loop7): ext4_iget_extra_inode:5035: inode #15: comm syz.7.7260: corrupted in-inode xattr: invalid ea_ino
[  535.516530][ T3376] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop9 ino=15
[  535.530324][ T3392] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.7260: couldn't read orphan inode 15 (err -117)
[  535.538692][ T3395] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #15: comm syz.9.7258: corrupted xattr block 19: overlapping e_value 
[  535.563993][ T3376] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #15: comm syz.9.7258: corrupted xattr block 19: overlapping e_value 
[  535.573041][ T3395] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop9 ino=15
[  535.586760][ T3395] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #15: comm syz.9.7258: corrupted xattr block 19: overlapping e_value 
[  535.600580][ T3395] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #15: comm syz.9.7258: corrupted xattr block 19: overlapping e_value 
[  535.614467][ T3395] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop9 ino=15
[  535.652575][ T3398] loop0: detected capacity change from 0 to 1024
[  535.678374][ T3398] netlink: 'syz.0.7261': attribute type 1 has an invalid length.
[  535.699569][ T3398] 8021q: adding VLAN 0 to HW filter on device bond5
[  535.717416][ T3392] EXT4-fs error (device loop7): ext4_add_entry:2417: inode #2: comm syz.7.7260: Directory hole found for htree leaf block 0
[  535.779728][ T3442] loop0: detected capacity change from 0 to 512
[  535.786710][ T3442] EXT4-fs (loop0): external journal device major/minor numbers have changed
[  535.810079][ T3442] EXT4-fs (loop0): failed to open journal device unknown-block(11,131) -6
[  536.041799][ T3390] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  536.234507][ T3490] loop8: detected capacity change from 0 to 512
[  536.267850][ T3490] EXT4-fs error (device loop8): ext4_iget_extra_inode:5035: inode #15: comm syz.8.7272: corrupted in-inode xattr: invalid ea_ino
[  536.291495][ T3490] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.7272: couldn't read orphan inode 15 (err -117)
[  536.359296][ T3500] loop0: detected capacity change from 0 to 1024
[  536.421152][ T3500] 8021q: adding VLAN 0 to HW filter on device bond6
[  536.597737][ T3501] EXT4-fs error (device loop8): ext4_add_entry:2417: inode #2: comm syz.8.7272: Directory hole found for htree leaf block 0
[  536.920116][ T3580] loop0: detected capacity change from 0 to 2048
[  536.960759][ T3580]  loop0: p4 < >
[  537.010006][ T3583] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  537.025955][ T3582] tipc: Resetting bearer <eth:syzkaller0>
[  537.047207][ T3582] tipc: Disabling bearer <eth:syzkaller0>
[  571.758567][    T9] page_pool_release_retry() stalled pool shutdown: id 112, 1 inflight 60 sec
[  584.890671][   T29] kauditd_printk_skb: 308 callbacks suppressed
[  584.890687][   T29] audit: type=1400 audit(584.871:35823): avc:  denied  { create } for  pid=3601 comm="syz.0.7284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  584.895257][ T3611] loop8: detected capacity change from 0 to 2048
[  584.896875][   T29] audit: type=1400 audit(584.871:35824): avc:  denied  { write } for  pid=3601 comm="syz.0.7284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  584.917551][ T3611] EXT4-fs: Ignoring removed nobh option
[  584.922064][   T29] audit: type=1400 audit(584.871:35825): avc:  denied  { write } for  pid=3601 comm="syz.0.7284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  584.922387][ T3608] validate_nla: 1 callbacks suppressed
[  584.922399][ T3608] netlink: 'syz.9.7286': attribute type 4 has an invalid length.
[  584.951191][ T3610] loop4: detected capacity change from 0 to 1024
[  584.973884][   T29] audit: type=1400 audit(584.951:35826): avc:  denied  { create } for  pid=3607 comm="syz.9.7286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  584.984984][ T3606] loop7: detected capacity change from 0 to 512
[  585.005526][   T29] audit: type=1400 audit(584.991:35827): avc:  denied  { ioctl } for  pid=3607 comm="syz.9.7286" path="socket:[97249]" dev="sockfs" ino=97249 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  585.034672][   T29] audit: type=1400 audit(584.991:35828): avc:  denied  { bind } for  pid=3607 comm="syz.9.7286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  585.039156][ T3606] EXT4-fs error (device loop7): ext4_iget_extra_inode:5035: inode #15: comm syz.7.7287: corrupted in-inode xattr: invalid ea_ino
[  585.053758][ T3608] __nla_validate_parse: 30 callbacks suppressed
[  585.053823][ T3608] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7286'.
[  585.069252][ T3611] EXT4-fs mount: 28 callbacks suppressed
[  585.069266][ T3611] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  585.077153][ T3606] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.7287: couldn't read orphan inode 15 (err -117)
[  585.101891][ T3610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  585.124196][ T3606] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  585.136533][ T3608] hsr_slave_0 (unregistering): left promiscuous mode
[  585.144697][   T29] audit: type=1326 audit(585.131:35829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3603 comm="syz.7.7287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f424e929 code=0x7ffc0000
[  585.168764][   T29] audit: type=1326 audit(585.141:35830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3603 comm="syz.7.7287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f14f424e929 code=0x7ffc0000
[  585.191753][   T29] audit: type=1326 audit(585.141:35831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3603 comm="syz.7.7287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f424e929 code=0x7ffc0000
[  585.214684][   T29] audit: type=1326 audit(585.141:35832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3603 comm="syz.7.7287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f14f424e929 code=0x7ffc0000
[  585.247226][ T3610] netlink: 'syz.4.7288': attribute type 1 has an invalid length.
[  585.265093][ T3610] 8021q: adding VLAN 0 to HW filter on device bond4
[  585.318041][T25073] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  585.349422][ T3671] loop9: detected capacity change from 0 to 2048
[  585.356948][ T3606] EXT4-fs error (device loop7): ext4_add_entry:2417: inode #2: comm syz.7.7287: Directory hole found for htree leaf block 0
[  585.450380][ T3671]  loop9: p4 < >
[  585.456910][ T3671] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7293'.
[  585.484005][T22129] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  585.496901][ T3671] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7293'.
[  585.506612][ T3689] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[  585.513203][ T3689] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  585.520744][ T3689] vhci_hcd vhci_hcd.0: Device attached
[  585.527423][ T3690] vhci_hcd: connection closed
[  585.527867][ T3447] vhci_hcd: stop threads
[  585.536869][ T3447] vhci_hcd: release socket
[  585.541346][ T3447] vhci_hcd: disconnect device
[  585.970405][T20495] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  585.998523][ T3744] bond2: entered promiscuous mode
[  586.003817][ T3744] 8021q: adding VLAN 0 to HW filter on device bond2
[  586.072293][ T3783] loop7: detected capacity change from 0 to 8192
[  586.283631][ T3803] loop4: detected capacity change from 0 to 2048
[  586.291331][ T3803] EXT4-fs: Ignoring removed nobh option
[  586.313605][ T3803] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  586.544429][ T3815] netlink: 'syz.8.7320': attribute type 21 has an invalid length.
[  586.599982][ T3824] loop0: detected capacity change from 0 to 2048
[  586.604906][ T3826] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4)
[  586.612811][ T3826] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  586.620537][ T3826] vhci_hcd vhci_hcd.0: Device attached
[  586.626961][ T3827] vhci_hcd: connection closed
[  586.627051][T10985] vhci_hcd: stop threads
[  586.636239][T10985] vhci_hcd: release socket
[  586.640742][T10985] vhci_hcd: disconnect device
[  586.645909][ T3824]  loop0: p1 < > p4
[  586.650344][ T3824] loop0: p4 size 8388608 extends beyond EOD, truncated
[  586.718486][ T3835] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.7324'.
[  587.346210][T25073] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  587.379985][ T3883] netlink: 'syz.8.7332': attribute type 21 has an invalid length.
[  587.463328][ T3890] netlink: 'syz.4.7333': attribute type 10 has an invalid length.
[  587.487976][ T3890] team0: Port device dummy0 added
[  587.497170][ T3894] FAULT_INJECTION: forcing a failure.
[  587.497170][ T3894] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  587.510364][ T3894] CPU: 1 UID: 0 PID: 3894 Comm: syz.7.7336 Tainted: G        W           6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) 
[  587.510403][ T3894] Tainted: [W]=WARN
[  587.510410][ T3894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  587.510440][ T3894] Call Trace:
[  587.510524][ T3894]  <TASK>
[  587.510559][ T3894]  __dump_stack+0x1d/0x30
[  587.510580][ T3894]  dump_stack_lvl+0xe8/0x140
[  587.510602][ T3894]  dump_stack+0x15/0x1b
[  587.510620][ T3894]  should_fail_ex+0x265/0x280
[  587.510710][ T3894]  should_fail+0xb/0x20
[  587.510733][ T3894]  should_fail_usercopy+0x1a/0x20
[  587.510784][ T3894]  _copy_from_user+0x1c/0xb0
[  587.510849][ T3894]  ___sys_sendmsg+0xc1/0x1d0
[  587.510912][ T3894]  __x64_sys_sendmsg+0xd4/0x160
[  587.510942][ T3894]  x64_sys_call+0x2999/0x2fb0
[  587.510964][ T3894]  do_syscall_64+0xd2/0x200
[  587.510996][ T3894]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  587.511022][ T3894]  ? clear_bhb_loop+0x40/0x90
[  587.511040][ T3894]  ? clear_bhb_loop+0x40/0x90
[  587.511058][ T3894]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  587.511097][ T3894] RIP: 0033:0x7f14f424e929
[  587.511112][ T3894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  587.511131][ T3894] RSP: 002b:00007f14f28b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  587.511152][ T3894] RAX: ffffffffffffffda RBX: 00007f14f4475fa0 RCX: 00007f14f424e929
[  587.511165][ T3894] RDX: 0000000024040840 RSI: 00002000000001c0 RDI: 0000000000000003
[  587.511193][ T3894] RBP: 00007f14f28b7090 R08: 0000000000000000 R09: 0000000000000000
[  587.511206][ T3894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  587.511278][ T3894] R13: 0000000000000000 R14: 00007f14f4475fa0 R15: 00007ffd55cadd88
[  587.511295][ T3894]  </TASK>
[  587.636182][ T3901] netlink: 'syz.4.7339': attribute type 21 has an invalid length.
[  587.663922][ T3904] tipc: New replicast peer: 255.255.255.83
[  587.712749][ T3904] tipc: Enabled bearer <udp:£ >, priority 10
[  587.780335][ T3911] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7342'.
[  587.888914][ T3917] loop0: detected capacity change from 0 to 2048
[  587.919340][ T3917]  loop0: p1 < > p4
[  587.925272][ T3917] loop0: p4 size 8388608 extends beyond EOD, truncated
[  587.966767][ T3935] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  587.998134][ T3946] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.7346'.
[  588.032058][ T3925] tipc: Resetting bearer <eth:syzkaller0>
[  588.050761][ T3925] tipc: Disabling bearer <eth:syzkaller0>
[  588.260561][ T3975] tipc: Enabling of bearer <udp:£ > rejected, already enabled
[  588.534423][ T4009] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7358'.
[  588.767397][ T4018] loop9: detected capacity change from 0 to 2048
[  588.819038][ T4018]  loop9: p1 < > p4
[  588.829722][ T4018] loop9: p4 size 8388608 extends beyond EOD, truncated
[  588.913451][ T4023] netlink: 16186 bytes leftover after parsing attributes in process `syz.9.7361'.
[  589.041169][ T4025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7362'.
[  589.050155][ T4025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7362'.
[  589.772963][T13793] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  589.791952][T13793] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  589.816238][ T4060] loop8: detected capacity change from 0 to 2048
[  589.850020][ T4060]  loop8: p1 < > p4
[  589.855032][ T4060] loop8: p4 size 8388608 extends beyond EOD, truncated
[  589.963822][ T4075] loop7: detected capacity change from 0 to 2048
[  589.970797][ T4075] EXT4-fs: Ignoring removed nobh option
[  589.982697][ T4073] loop9: detected capacity change from 0 to 2048
[  589.993696][ T4075] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  590.006013][ T4082] loop8: detected capacity change from 0 to 1024
[  590.019045][ T4073]  loop9: p1 < > p4
[  590.024086][ T4073] loop9: p4 size 8388608 extends beyond EOD, truncated
[  590.043917][ T4082] EXT4-fs (loop8): invalid first ino: 9
[  590.077679][   T29] kauditd_printk_skb: 154 callbacks suppressed
[  590.077707][   T29] audit: type=1400 audit(590.051:35987): avc:  denied  { setopt } for  pid=4081 comm="syz.8.7375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  590.106472][   T29] audit: type=1400 audit(590.091:35988): avc:  denied  { create } for  pid=4094 comm="syz.0.7376" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  590.122426][ T4096] __nla_validate_parse: 8 callbacks suppressed
[  590.122440][ T4096] netlink: 16186 bytes leftover after parsing attributes in process `syz.9.7374'.
[  590.126672][   T29] audit: type=1400 audit(590.091:35989): avc:  denied  { listen } for  pid=4081 comm="syz.8.7375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  590.161495][   T29] audit: type=1400 audit(590.091:35990): avc:  denied  { accept } for  pid=4081 comm="syz.8.7375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  590.190776][ T4097] loop0: detected capacity change from 0 to 1024
[  590.197991][   T29] audit: type=1400 audit(590.171:35991): avc:  denied  { mounton } for  pid=4094 comm="syz.0.7376" path="/327/file0" dev="tmpfs" ino=1785 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  590.238807][ T4101] netlink: 'syz.4.7377': attribute type 4 has an invalid length.
[  590.239062][ T4097] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  590.255486][ T4101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7377'.
[  590.266348][ T4097] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  590.279587][ T4097] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000]
[  590.303022][ T4097] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.7376: lblock 2 mapped to illegal pblock 2 (length 1)
[  590.321347][ T4101] hsr_slave_0 (unregistering): left promiscuous mode
[  590.330918][ T4097] Quota error (device loop0): qtree_write_dquot: dquota write failed
[  590.339332][ T4097] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 48: comm syz.0.7376: lblock 0 mapped to illegal pblock 48 (length 1)
[  590.363656][ T4097] Quota error (device loop0): v2_write_file_info: Can't write info structure
[  590.372529][ T4097] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.7376: Failed to acquire dquot type 0
[  590.386935][ T4097] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  590.397044][ T4097] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.7376: mark_inode_dirty error
[  590.420570][ T4097] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  590.431934][ T4097] EXT4-fs (loop0): 1 orphan inode deleted
[  590.440602][ T4097] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  590.453214][   T57] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1)
[  590.498088][   T57] Quota error (device loop0): remove_tree: Can't read quota data block 1
[  590.506566][   T57] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 0
[  590.537127][ T4097] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  590.548524][ T4097] EXT4-fs error (device loop0): __ext4_get_inode_loc:4792: comm syz.0.7376: Invalid inode table block 1 in block_group 0
[  590.561526][ T4097] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  590.571335][ T4097] EXT4-fs error (device loop0): ext4_quota_off:7217: inode #3: comm syz.0.7376: mark_inode_dirty error
[  590.670733][   T29] audit: type=1400 audit(590.651:35992): avc:  denied  { mount } for  pid=4094 comm="syz.0.7376" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  590.831952][T22129] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  590.945443][   T29] audit: type=1400 audit(590.921:35993): avc:  denied  { unlink } for  pid=26407 comm="syz-executor" name="file0" dev="tmpfs" ino=1785 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  591.231888][ T4144] loop9: detected capacity change from 0 to 2048
[  591.278529][ T4144]  loop9: p1 < > p4
[  591.282919][ T4144] loop9: p4 size 8388608 extends beyond EOD, truncated
[  591.360399][ T4151] netlink: 16186 bytes leftover after parsing attributes in process `syz.9.7388'.
[  591.415683][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  591.424573][    T9] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  591.631799][ T4170] loop9: detected capacity change from 0 to 2048
[  591.641179][ T4170] EXT4-fs: Ignoring removed nobh option
[  591.651490][ T4170] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  591.748283][T13792] page_pool_release_retry() stalled pool shutdown: id 131, 1 inflight 60 sec
[  591.770155][ T4175] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4)
[  591.776712][ T4175] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  591.784228][ T4175] vhci_hcd vhci_hcd.0: Device attached
[  591.869538][ T4177] vhci_hcd: connection closed
[  591.872584][   T12] vhci_hcd: stop threads
[  591.881575][   T12] vhci_hcd: release socket
[  591.885982][   T12] vhci_hcd: disconnect device
[  591.996394][ T4183] loop7: detected capacity change from 0 to 2048
[  592.003427][ T4183] EXT4-fs: Ignoring removed nobh option
[  592.019343][ T4183] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  592.126295][T22129] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  592.393784][ T4218] tipc: Enabling of bearer <udp:£ > rejected, already enabled
[  592.436691][ T4220] loop7: detected capacity change from 0 to 512
[  592.447024][ T4220] EXT4-fs error (device loop7): ext4_iget_extra_inode:5035: inode #15: comm syz.7.7400: corrupted in-inode xattr: invalid ea_ino
[  592.467918][ T4220] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.7400: couldn't read orphan inode 15 (err -117)
[  592.482395][ T4220] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  592.523220][ T4224] tipc: New replicast peer: 255.255.255.83
[  592.529152][ T4224] tipc: Enabled bearer <udp:£ >, priority 10
[  592.546665][T32695] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  592.590210][ T4235] netlink: 'syz.9.7405': attribute type 21 has an invalid length.
[  592.621291][ T4220] EXT4-fs error (device loop7): ext4_add_entry:2417: inode #2: comm syz.7.7400: Directory hole found for htree leaf block 0
[  592.623572][ T4239] loop9: detected capacity change from 0 to 1024
[  592.641810][ T4239] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  592.650533][ T4239] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  592.661454][ T4239] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000]
[  592.670941][ T4239] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #3: block 2: comm syz.9.7406: lblock 2 mapped to illegal pblock 2 (length 1)
[  592.685754][ T4239] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #3: block 48: comm syz.9.7406: lblock 0 mapped to illegal pblock 48 (length 1)
[  592.687792][T13793] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  592.700448][ T4239] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.7406: Failed to acquire dquot type 0
[  592.707822][T13793] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  592.728626][ T4239] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  592.739315][ T4239] EXT4-fs error (device loop9): ext4_evict_inode:254: inode #11: comm syz.9.7406: mark_inode_dirty error
[  592.751171][ T4239] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  592.751279][T22129] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  592.786213][ T4239] EXT4-fs (loop9): 1 orphan inode deleted
[  592.800452][   T57] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1)
[  592.816519][ T4239] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  592.846664][   T57] EXT4-fs error (device loop9): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 0
[  592.861428][ T4257] tipc: New replicast peer: 255.255.255.83
[  592.867392][ T4257] tipc: Enabled bearer <udp:£ >, priority 10
[  592.889915][ T4239] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  592.900017][ T4239] EXT4-fs error (device loop9): __ext4_get_inode_loc:4792: comm syz.9.7406: Invalid inode table block 1 in block_group 0
[  592.914087][ T4262] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[  592.920635][ T4262] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  592.928172][ T4262] vhci_hcd vhci_hcd.0: Device attached
[  592.935034][ T4239] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  592.944905][ T4263] vhci_hcd: connection closed
[  592.945381][   T57] vhci_hcd: stop threads
[  592.954382][   T57] vhci_hcd: release socket
[  592.958861][   T57] vhci_hcd: disconnect device
[  592.965579][ T4239] EXT4-fs error (device loop9): ext4_quota_off:7217: inode #3: comm syz.9.7406: mark_inode_dirty error
[  592.966310][ T4267] netlink: 'syz.7.7414': attribute type 4 has an invalid length.
[  593.026861][ T4267] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7414'.
[  593.074721][ T4281] loop9: detected capacity change from 0 to 512
[  593.082394][ T4281] EXT4-fs error (device loop9): ext4_iget_extra_inode:5035: inode #15: comm syz.9.7418: corrupted in-inode xattr: invalid ea_ino
[  593.095924][ T4281] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.7418: couldn't read orphan inode 15 (err -117)
[  593.108285][ T4281] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  593.155146][ T4288] loop7: detected capacity change from 0 to 1024
[  593.169620][ T4288] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  593.188986][ T4288] netlink: 'syz.7.7420': attribute type 1 has an invalid length.
[  593.207889][ T4288] 8021q: adding VLAN 0 to HW filter on device bond4
[  593.258316][ T4281] EXT4-fs error (device loop9): ext4_add_entry:2417: inode #2: comm syz.9.7418: Directory hole found for htree leaf block 0
[  593.299452][T22129] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  593.309051][T32695] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  593.338306][T13797] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  593.346200][T13797] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  593.422445][ T4343] tipc: Enabling of bearer <udp:£ > rejected, already enabled
[  593.510710][ T4356] loop7: detected capacity change from 0 to 512
[  593.517994][ T4356] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  593.546863][ T4354] loop0: detected capacity change from 0 to 512
[  593.561628][ T4354] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  593.568913][ T4356] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  593.587768][ T4356] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.7429: corrupted xattr block 19: overlapping e_value 
[  593.602033][ T4356] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=15
[  593.612036][ T4354] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  593.618263][ T4356] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.7429: corrupted xattr block 19: overlapping e_value 
[  593.638407][ T4354] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.7428: corrupted xattr block 19: overlapping e_value 
[  593.639377][ T4368] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.7429: corrupted xattr block 19: overlapping e_value 
[  593.652543][ T4356] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=15
[  593.677574][ T4354] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  593.686910][ T4354] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.7428: corrupted xattr block 19: overlapping e_value 
[  593.686924][ T4369] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.7428: corrupted xattr block 19: overlapping e_value 
[  593.687032][ T4354] ==================================================================
[  593.687067][ T4354] BUG: KCSAN: data-race in data_push_tail / string
[  593.687102][ T4354] 
[  593.687109][ T4354] write to 0xffffffff88e607a0 of 1 bytes by task 4369 on cpu 1:
[  593.687129][ T4354]  string+0x187/0x220
[  593.687154][ T4354]  vsnprintf+0x532/0x890
[  593.687179][ T4354]  vscnprintf+0x41/0x90
[  593.687202][ T4354]  printk_sprint+0x30/0x2d0
[  593.687218][ T4354]  vprintk_store+0x599/0x860
[  593.687235][ T4354]  vprintk_emit+0x178/0x650
[  593.687251][ T4354]  vprintk_default+0x26/0x30
[  593.687272][ T4354]  vprintk+0x1d/0x30
[  593.687294][ T4354]  _printk+0x79/0xa0
[  593.687318][ T4354]  __ext4_error_inode+0x2ca/0x3f0
[  593.687338][ T4354]  check_xattrs+0x25e/0x7d0
[  593.687368][ T4354]  ext4_xattr_get+0x1ed/0x470
[  593.687393][ T4354]  ext4_xattr_security_get+0x32/0x40
[  593.687426][ T4354]  __vfs_getxattr+0x2ad/0x2c0
[  593.687452][ T4354]  inode_doinit_use_xattr+0x7a/0x2d0
[  593.687478][ T4354]  inode_doinit_with_dentry+0x596/0x7a0
[  593.687505][ T4354]  selinux_inode_permission+0xff/0x620
[  593.687530][ T4354]  security_inode_permission+0x6d/0xb0
[  593.687565][ T4354]  inode_permission+0x106/0x310
[  593.687589][ T4354]  vfs_truncate+0xb4/0x220
[  593.687616][ T4354]  do_sys_truncate+0x91/0x130
[  593.687649][ T4354]  __x64_sys_truncate+0x31/0x40
[  593.687677][ T4354]  x64_sys_call+0x2920/0x2fb0
[  593.687697][ T4354]  do_syscall_64+0xd2/0x200
[  593.687729][ T4354]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  593.687751][ T4354] 
[  593.687757][ T4354] read to 0xffffffff88e607a0 of 8 bytes by task 4354 on cpu 0:
[  593.687775][ T4354]  data_push_tail+0xfd/0x420
[  593.687802][ T4354]  data_alloc+0xbf/0x2b0
[  593.687827][ T4354]  prb_reserve+0x808/0xaf0
[  593.687854][ T4354]  vprintk_store+0x56d/0x860
[  593.687874][ T4354]  vprintk_emit+0x178/0x650
[  593.687895][ T4354]  vprintk_default+0x26/0x30
[  593.687916][ T4354]  vprintk+0x1d/0x30
[  593.687944][ T4354]  _printk+0x79/0xa0
[  593.687968][ T4354]  __ext4_error_inode+0x2ca/0x3f0
[  593.687989][ T4354]  check_xattrs+0x25e/0x7d0
[  593.688020][ T4354]  ext4_xattr_get+0x1ed/0x470
[  593.688053][ T4354]  ext4_xattr_security_get+0x32/0x40
[  593.688080][ T4354]  __vfs_getxattr+0x2ad/0x2c0
[  593.688111][ T4354]  inode_doinit_use_xattr+0x7a/0x2d0
[  593.688142][ T4354]  inode_doinit_with_dentry+0x596/0x7a0
[  593.688167][ T4354]  selinux_inode_setattr+0x1fb/0x4e0
[  593.688185][ T4354]  security_inode_setattr+0x88/0xd0
[  593.688212][ T4354]  notify_change+0x723/0x890
[  593.688240][ T4354]  chmod_common+0x138/0x270
[  593.688263][ T4354]  do_fchmodat+0xcd/0x180
[  593.688293][ T4354]  __x64_sys_chmod+0x38/0x50
[  593.688314][ T4354]  x64_sys_call+0x1529/0x2fb0
[  593.688333][ T4354]  do_syscall_64+0xd2/0x200
[  593.688361][ T4354]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  593.688381][ T4354] 
[  593.688387][ T4354] value changed: 0x00000001000031be -> 0x6b636f6c625f7274
[  593.688402][ T4354] 
[  593.688408][ T4354] Reported by Kernel Concurrency Sanitizer on:
[  593.688425][ T4354] CPU: 0 UID: 0 PID: 4354 Comm: syz.0.7428 Tainted: G        W           6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) 
[  593.688456][ T4354] Tainted: [W]=WARN
[  593.688464][ T4354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  593.688476][ T4354] ==================================================================
[  593.709115][ T4369] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  593.780679][ T4356] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.7429: corrupted xattr block 19: overlapping e_value 
[  593.784106][ T4368] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=15
[  593.788518][ T4354] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  593.794035][ T4368] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.7429: corrupted xattr block 19: overlapping e_value 
[  593.801543][ T4354] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.7428: corrupted xattr block 19: overlapping e_value 
[  593.813548][ T4369] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.7428: corrupted xattr block 19: overlapping e_value 
[  593.838047][    T9] page_pool_release_retry() stalled pool shutdown: id 137, 1 inflight 60 sec
[  593.850671][ T4369] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.7428: corrupted xattr block 19: overlapping e_value 
[  593.855495][ T4368] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.7429: corrupted xattr block 19: overlapping e_value 
[  593.864964][ T4369] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  593.869309][ T4368] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=15
[  594.628405][ T4109] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  594.779635][T22129] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  594.790260][T26407] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.