last executing test programs:

1m9.723695958s ago: executing program 0 (id=79):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet6(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10)
sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)

1m9.648831314s ago: executing program 0 (id=83):
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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")
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='ext4_ext_show_extent\x00', r1}, 0x18)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GSUBSCRIP(r2, 0x89e0, 0x0)
r3 = syz_clone(0x200aa000, &(0x7f0000001700)="c74b85b560", 0x5, &(0x7f0000000300), 0x0, &(0x7f0000001280)="f80d232d65fa44dcbb5275ffbb3fa739460646aa98e44757024f1d12f83dc7fa49de1e2e380100fb669b9a0476f02c378ff3002c0bf751268af4e61f2631bdb473f6b3ad4de83db830a937d094245cc90000000000000000000000000c18cdc6fb97b62b56af861fb132fed071339fb95da9ef6a68d0a2d0cb1c0f676b405d32945af3aea458e92cb82c987fd5ed96742136021bff501971cc5128a3edf3f78f043f2bd5f10c3ac2ffe1bb2c38b91ae3")
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x4}, 0x80, 0x623a, 0xfffffbfe, 0x2, 0xffffffffffffffff, 0x3, 0x1, 0x0, 0x0, 0x0, 0x80000001}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYRESHEX=r0], &(0x7f0000000240)='syzkaller\x00', 0x31, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r4], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000001d000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES16=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe(&(0x7f0000000100)={<r7=>0xffffffffffffffff})
r8 = open_tree(r7, &(0x7f0000000200)='./file1\x00', 0x100)
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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")
r9 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0)
ioctl$GIO_UNISCRNMAP(r8, 0x4b69, &(0x7f00000008c0)=""/69)
pwrite64(r9, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES64, @ANYRES32=r10, @ANYRESHEX=r10], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m9.274800932s ago: executing program 0 (id=91):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x18)
socket$can_j1939(0x1d, 0x2, 0x7)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x204000, &(0x7f0000001600)={[{@debug}, {@min_batch_time={'min_batch_time', 0x3d, 0x4ab}}, {@data_err_ignore}, {@nobarrier}, {@inlinecrypt}, {@orlov}, {@nogrpid}, {@discard}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000c40)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0xce342, 0x0)
pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
fsopen(&(0x7f0000000080)='sysfs\x00', 0x1)
ioctl$SIOCGETVIFCNT(r2, 0x89e0, &(0x7f0000000040))

1m8.701821445s ago: executing program 0 (id=101):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x5, 0x8, 0xf}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{r0}, &(0x7f0000000bc0), &(0x7f0000000c00)=r1}, 0x20)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000240)=@framed={{}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000740)={[{@delalloc}, {@nolazytime}, {@jqfmt_vfsv0}, {@jqfmt_vfsv1}, {@nomblk_io_submit}, {@auto_da_alloc}, {@nouid32}]}, 0x2, 0x47e, &(0x7f0000000c40)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10)
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
sendfile(r7, r7, &(0x7f0000000000)=0x2eb4, 0x2000007ff)

1m7.932615273s ago: executing program 0 (id=105):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xb, 0x5, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8890}, 0x40)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x16, 0x8, 0xc, 0x7fffffff, 0x53, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b51edbca96daa8af8ff00000000bfa200000000000007020000f8ffffffb703c00008000000b70400000000000085000000030000009500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
io_setup(0x2, &(0x7f00000014c0)=<r3=>0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00')
io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r4, 0x0}])
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1})
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000007f7b000018114e9dbce959b1391ecfb3b24a3a2e", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r7}, 0x18)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002e40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="8b332ebd700000000000150000000c009900040000003a00000004001d"], 0x38}}, 0x40000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000004000000000000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000185a00000e0000000000000000000000185600000000000000000000000000007fed08000e000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000690ad6012136f533a65c4191dd164e82c7c61cebfc091108ed439036a863faf30d79f1c868c24a105ae3d5744d9010b0c342be168689907ae18d4e05ba13bb07f1f7a00b80aa19ad247c6fd011f9121b33ff970005d089d56f7fd74f6f642ef6185d9d6c7ab382591acc2eff0542e45fe9af85578055a706106e115f36b70b22a23d39c7980571b0629b6671a52b7a7b9d73ac517430"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x1, 0x2, 0x1, 0xfffffffb}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffc}]})
r10 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c45, 0x1)

1m7.357602116s ago: executing program 0 (id=112):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r3}, 0xe)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x20000054)
bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)

55.193187123s ago: executing program 2 (id=245):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='ext4_ext_show_extent\x00', r0}, 0x18)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0)
r2 = syz_clone(0x200aa000, &(0x7f0000001700)="c74b85b560", 0x5, &(0x7f0000000300), 0x0, &(0x7f0000001280)="f80d232d65fa44dcbb5275ffbb3fa739460646aa98e44757024f1d12f83dc7fa49de1e2e380100fb669b9a0476f02c378ff3002c0bf751268af4e61f2631bdb473f6b3ad4de83db830a937d094245cc90000000000000000000000000c18cdc6fb97b62b56af861fb132fed071339fb95da9ef6a68d0a2d0cb1c0f676b405d32945af3aea458e92cb82c987fd5ed96742136021bff501971cc5128a3edf3f78f043f2bd5f10c3ac2ffe1bb2c38b91ae3")
perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000001d000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES16=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe(&(0x7f0000000100)={<r4=>0xffffffffffffffff})
r5 = open_tree(r4, &(0x7f0000000200)='./file1\x00', 0x100)
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0)
ioctl$GIO_UNISCRNMAP(r5, 0x4b69, &(0x7f00000008c0)=""/69)
pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES64, @ANYRES32=r7, @ANYRESHEX=r7], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

54.846855889s ago: executing program 2 (id=250):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r1 = socket$inet6(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10)
sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)

54.713277019s ago: executing program 2 (id=252):
sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, 0x0, 0x40010)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000140)='\x00', 0x89901)
umount2(&(0x7f0000000080)='./file0\x00', 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r3, 0x0, 0x2}, 0x18)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x4, 0x0, 0x0)
sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, 0x0, 0x40010) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
dup(r0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) (async)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async)
mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async)
open_tree(0xffffffffffffff9c, &(0x7f0000000140)='\x00', 0x89901) (async)
umount2(&(0x7f0000000080)='./file0\x00', 0x2) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r3, 0x0, 0x2}, 0x18) (async)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x4, 0x0, 0x0) (async)

54.69530666s ago: executing program 2 (id=253):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000050000000200"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x7fd, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x2, 0x0, 0x4}}, 0x2e)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000006000000140008"], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x8000)

54.445873098s ago: executing program 2 (id=254):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}, {@noquota}]}, 0x3, 0x440, &(0x7f0000000280)="$eJzs28tvG8UfAPDv2kn66+uXUJVHH0CgIMoradJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSJy6IIxJ/ASe4IOCExBXuqFKFcmnhZLT2bmI7thunTlzqz0dad2Z33Jmvd8ee2ckG0LdG05ckYk9E/B4Rw9VsfYHR6j83V5am/15Zmk6iXH7zr6RS7sbK0nReNH/f7jwzEFH4NIlDTepduHT53FSpNHsxy48vnn9vfOHS5Wfnzk+dnT07e2Hy1KkTxyeePzn5XFfiTOO6cfDD+cMHXn376uvTp6++8/O3SR5/QxxdMtru4OPlcper6629NelkoIcNoSPFajeNwUr/H45irJ284Xjlk542DthS5XK5fF/rw8tl4C6WRK9bAPRG/kOfzn/zbZuGHneE6y9WJ0Bp3DezrXpkIApZmcGG+W03jUbE6eV/vkq32Jr7EAAAdb5Pxz/PNBv/FaL2vtD/szWUkYi4JyL2RcTJiNgfEfdGVMreHxEPdFh/4yLJ+vFP4dqmAtugdPz3Qra2VT/+y0d/MVLMcnsr8Q8mZ+ZKs8eyz+RoDO5I8xNt6vjh5d8+b3WsdvyXbmn9+Vgwa8e1gR3175mZWpy6nZhrXf844uBAs/iT1ZWAJCIORMTBTdYx99Q3h1sdu3X8bXRhnan8dcQT1fO/HA3x55L265Pj/4vS7LHx/KpY75dfr7zRqv7bir8L0vO/q+n1vxr/SFK7XrvQyf/+5ZPp65U/Pms5p9ns9T+UvFW374OpxcWLExFDyWvVRtfun2woN7lWPo3/6JHm/X9frH0ShyIivYgfjIiHIuLhrO2PRMSjEXGkzafw00uPvbv5+LdWGv9MR+d/LTEUjXuaJ4rnfvyurtKRTuJPz/+JSupotmcj338baVenVzMAAAD8VxUiYk8khbHVdKEwNlb9G/79satQml9YfPrM/PsXZqrPCIzEYCG/0zVccz90IpvW5/nJhvzx7L7xF8WdlfzY9HxpptfBQ5/b3aL/p/4s9rp1wJbzvBb0L/0f+pf+D/1L/4f+1aT/7+xFO4Dt1+z3/6MetAPYfg3937If9BHzf+hfm+n/vjPg7tC2Lw9tXzuAbbWwM279kLyExLpEFO6IZkhsUaLX30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADd8W8AAAD//58P56I=")
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
r3 = accept$inet(r2, 0x0, 0x0)
setsockopt$inet_int(r3, 0x0, 0x1, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
r4 = socket(0x10, 0x803, 0x0)
connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10008, {0x0, 0x0, 0x0, 0x0, {0x5, 0x2}, {0x0, 0xffef}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x4004000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xd, 0x2e, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xb}, @jmp={0x5, 0x0, 0x5, 0x3, 0x4, 0x100, 0x1}, @ldst={0x3, 0x0, 0x6, 0x5, 0x5, 0x20, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x13}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x6e, &(0x7f00000007c0)=""/110, 0x41100, 0x8, '\x00', 0x0, @fallback=0x36, r5, 0x8, &(0x7f0000000840)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x4, 0x6, 0x3, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000980)=[r0, r0, r0, r0], &(0x7f0000000c00)=[{0x1, 0x5, 0x2, 0x4}, {0x4, 0x5, 0xc, 0xb}, {0x2, 0x2, 0xe, 0x6}], 0x10, 0x2}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r7, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5})

54.445692269s ago: executing program 32 (id=254):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}, {@noquota}]}, 0x3, 0x440, &(0x7f0000000280)="$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")
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
r3 = accept$inet(r2, 0x0, 0x0)
setsockopt$inet_int(r3, 0x0, 0x1, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
r4 = socket(0x10, 0x803, 0x0)
connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10008, {0x0, 0x0, 0x0, 0x0, {0x5, 0x2}, {0x0, 0xffef}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x4004000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xd, 0x2e, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xb}, @jmp={0x5, 0x0, 0x5, 0x3, 0x4, 0x100, 0x1}, @ldst={0x3, 0x0, 0x6, 0x5, 0x5, 0x20, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x13}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x6e, &(0x7f00000007c0)=""/110, 0x41100, 0x8, '\x00', 0x0, @fallback=0x36, r5, 0x8, &(0x7f0000000840)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x4, 0x6, 0x3, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000980)=[r0, r0, r0, r0], &(0x7f0000000c00)=[{0x1, 0x5, 0x2, 0x4}, {0x4, 0x5, 0xc, 0xb}, {0x2, 0x2, 0xe, 0x6}], 0x10, 0x2}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r7, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5})

52.31060387s ago: executing program 33 (id=112):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r3}, 0xe)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x20000054)
bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)

31.278264974s ago: executing program 1 (id=622):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x7fd, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x2, 0x0, 0x4}}, 0x2e)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000006000000140008"], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x8000)

31.169557162s ago: executing program 1 (id=625):
syz_emit_ethernet(0xfc1, &(0x7f0000000000)=ANY=[@ANYRES8], 0x0)

31.079617889s ago: executing program 1 (id=627):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b0000000500000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='rpm_return_int\x00', r1}, 0x18)
syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0xc340)

31.020700813s ago: executing program 1 (id=630):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10)
syz_emit_ethernet(0x86, &(0x7f0000000440)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x29, 0x0, @empty=0xe000, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0xe000, 0x0, "bfd8a5dd2002c02142c4391145badd28fd7f0ffc0e896f38da00000500", "0bb10000085b2e007f00", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc460b8cd26e095f24ab642591"}}}}}}}, 0x0)

30.924743661s ago: executing program 1 (id=631):
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x1, 0x1003, 0x5, 0x1}}, 0x80, 0x0}, 0x4000059)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1303000056000528707b528e9a93a54a07"], 0xfe33)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, &(0x7f0000000500))
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
lseek(r3, 0x0, 0x1)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000040)=0x10000, 0x4)
syz_open_dev$loop(&(0x7f0000000200), 0xe6f7183, 0x484481)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='erofs_readpages\x00', r2}, 0x18)
r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x4142, 0x0)
pwrite64(r4, &(0x7f0000000000)=']', 0x1, 0xd09c)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async)
socket$kcm(0x10, 0x400000002, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x1, 0x1003, 0x5, 0x1}}, 0x80, 0x0}, 0x4000059) (async)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1303000056000528707b528e9a93a54a07"], 0xfe33) (async)
socket(0x2, 0x80805, 0x0) (async)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, &(0x7f0000000500)) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) (async)
lseek(r3, 0x0, 0x1) (async)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000040)=0x10000, 0x4) (async)
syz_open_dev$loop(&(0x7f0000000200), 0xe6f7183, 0x484481) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='erofs_readpages\x00', r2}, 0x18) (async)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x4142, 0x0) (async)
pwrite64(r4, &(0x7f0000000000)=']', 0x1, 0xd09c) (async)

30.437976908s ago: executing program 1 (id=638):
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000010000660800000000000018000000000000a200000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00}, 0x94)

30.405106119s ago: executing program 34 (id=638):
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000010000660800000000000018000000000000a200000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00}, 0x94)

6.440984305s ago: executing program 4 (id=907):
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000005002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00}, 0x94)

6.439644745s ago: executing program 4 (id=911):
r0 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r0, &(0x7f00000007c0)={0xa, 0x0, 0x3, @initdev={0xfe, 0x88, '\x00', 0x9, 0x0}, 0x8}, 0x1c)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1, 0x2, 0x7fffffff}})
ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000010340))
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
syz_io_uring_submit(0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x30)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f0000000180)="10030600e0fc020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14)

6.439296665s ago: executing program 4 (id=912):
r0 = fsmount(0xffffffffffffffff, 0x1, 0x76)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r2, 0xb29, 0x0, 0x0, {{}, {@val={0x5}, @void}}}, 0x1c}}, 0x2404c044)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x24004040)
sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="16c0223ab0330e24b43b76b8650866be2fba925a0ee4d65880341baa6f88ec7cdb781bfd413675e1133b424256628b6c3fed976264450be2d7857552ccd9189b8e99bed9986aaff1c8d7bbd9dd7c95ba1880a30c1b625d848d608d87b4685048eff9711a614ee87baab7f266524384d26244dccf4a2a721fd436a6d4788d4835ae730443480f27e4300b97681320a0b9e3270a81a7096bc5dcc9302fad0c33e9a0b9e82ed193bdd471160e4dc6315403036cad895a10c33349d34ea1b31d61b5e702e9a2df9a64475af20d74a108", @ANYRES16, @ANYBLOB="00022abd7000fbdbdf257200000008000300", @ANYRES32=r3, @ANYBLOB="0c0099000700000051000000"], 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x80)
sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)={0x134, r2, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}], @NL80211_ATTR_IE={0xb5, 0x2a, [@chsw_timing={0x68, 0x4, {0x2455, 0x7}}, @mesh_chsw={0x76, 0x6, {0x5, 0x6a, 0x18, 0x9}}, @preq={0x82, 0x83, {{0x1, 0x1, 0x1, 0x0, 0x1}, 0x9, 0x5, 0x0, @device_a, 0x200, @value=@device_b, 0x20000, 0xdd, 0x9, [{{0x0, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @broadcast, 0x1}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x39a}, {{0x1, 0x0, 0x1}, @broadcast, 0xf}, {{0x0, 0x0, 0x1}, @device_a, 0x67}, {{0x1}, @device_a, 0xfffffc00}, {{0x1, 0x0, 0x1}, @broadcast, 0x6}, {{0x0, 0x0, 0x1}, @device_b, 0x3}]}}, @erp={0x2a, 0x1, {0x1, 0x1}}, @ssid={0x0, 0xb, @random="f0b21a26246a8893a3dcad"}, @chsw_timing={0x68, 0x4, {0x7, 0x6}}, @channel_switch={0x25, 0x3, {0x1, 0x7c, 0xff}}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x400040, {0xff, 0x6051, 0x0, 0x1}}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x1000, 0x3, 0x7, 0x0, {0x7, 0x2, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x6, 0x6, 0x9}}]}, 0x134}, 0x1, 0x0, 0x0, 0x20040010}, 0x40040c4)
io_setup(0x30, &(0x7f0000000600)=<r4=>0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r6, 0x0, 0x2}, 0x18)
r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
io_submit(r4, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x4, r7, &(0x7f00000000c0)="01", 0x1, 0xfffffffffffffffc}])
recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)=@un=@abs, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/50, 0x32}, {&(0x7f0000000200)=""/28, 0x1c}, {&(0x7f00000003c0)=""/118, 0x76}, {&(0x7f00000007c0)=""/208, 0xd0}], 0x4, &(0x7f0000000540)=""/43, 0x2b}, 0x2081)

6.438288605s ago: executing program 4 (id=914):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='ext4_ext_show_extent\x00', r0}, 0x18)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0)
r2 = syz_clone(0x200aa000, &(0x7f0000001700)="c74b85b560", 0x5, &(0x7f0000000300), 0x0, &(0x7f0000001280)="f80d232d65fa44dcbb5275ffbb3fa739460646aa98e44757024f1d12f83dc7fa49de1e2e380100fb669b9a0476f02c378ff3002c0bf751268af4e61f2631bdb473f6b3ad4de83db830a937d094245cc90000000000000000000000000c18cdc6fb97b62b56af861fb132fed071339fb95da9ef6a68d0a2d0cb1c0f676b405d32945af3aea458e92cb82c987fd5ed96742136021bff501971cc5128a3edf3f78f043f2bd5f10c3ac2ffe1bb2c38b91ae3")
perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x18)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pipe(0x0)
r4 = open_tree(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x100)
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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")
r5 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f00000008c0)=""/69)
pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES64, @ANYRES32=r6, @ANYRESHEX=r6], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

6.364360481s ago: executing program 4 (id=915):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x5, 0x8, 0xf}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{r0}, &(0x7f0000000bc0), &(0x7f0000000c00)=r1}, 0x20)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000240)=@framed={{}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000740)={[{@delalloc}, {@nolazytime}, {@jqfmt_vfsv0}, {@jqfmt_vfsv1}, {@nomblk_io_submit}, {@auto_da_alloc}, {@nouid32}]}, 0x2, 0x47e, &(0x7f0000000c40)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10)
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
sendfile(r7, r7, &(0x7f0000000000)=0x2eb4, 0x2000007ff)

6.172891115s ago: executing program 6 (id=916):
unshare(0x6c000200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') (async)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00')
getdents(r0, &(0x7f00000000c0)=""/35, 0x23) (async)
getdents(r0, &(0x7f00000000c0)=""/35, 0x23)
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4091}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41)
prctl$PR_SET_NAME(0xf, &(0x7f0000000640)='LX[X\x00.]%Jk\xe8\xd4M\xd7\xf9m\xa7%\xe5)J81`.\x7f7\xa6\'\x1f4\x06_0\xf3\x05\xc8\xcc\xf8\r:\r*w\x8d\xbd\x02\xd3F\x83\x82u3\xc7\x1bp\xa1=\xdb\x9e8H\a\xdc(\xb9\x84\f%\xb8\xd8\xd9\xa2`2\xc6V\xda\x14@\x12-\x94e\xca\xb8\xf8\x0e\xf4\xb2\x87J3\x9eucSYT\x81\xb2t\x13*\x8c\x8d\xdf\x17\xcc\xa7nO\xbb\x05\x95;\xcd\x10\x80\xfdx$\xc6CLk.\xe4Nin\xdaXH(\x97\xd1\x03\xe6\xec\x1d)\x98\xca\x83hy\x11\a\xda\xac\xfb{\xa6\xdd\x7f\xe2\xf5\xc4p=\x14v\x91\x92Hhd42\xbb\x00\x00\x00')
socket$inet_smc(0x2b, 0x1, 0x0) (async)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = socket$kcm(0x2, 0x5, 0x84)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r3, &(0x7f0000001740)='\x00', 0x1, 0x20000000, &(0x7f00000005c0)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000001bc0)=0x3ff, 0x4) (async)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000001bc0)=0x3ff, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r5=>0x0})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) (async)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES16=r6, @ANYRESDEC=r3, @ANYRES32, @ANYRES32=r2, @ANYRESHEX=r1, @ANYRESHEX=r5, @ANYRES32=0x0], 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES16=r6, @ANYRESDEC=r3, @ANYRES32, @ANYRES32=r2, @ANYRESHEX=r1, @ANYRESHEX=r5, @ANYRES32=0x0], 0x50)
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x0, 0xb}}}, 0x24}}, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r9, 0x400454cd, 0x339) (async)
ioctl$TUNSETLINK(r9, 0x400454cd, 0x339)
bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_0\x00', 0x10)
syz_emit_ethernet(0x252, &(0x7f0000000700)={@multicast, @empty, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x1, 0x0, 0x244, 0x64, 0x0, 0x5, 0x6, 0x0, @remote, @multicast1, {[@ssrr={0x89, 0xb, 0xfd, [@broadcast, @multicast2]}, @cipso={0x86, 0x8, 0x0, [{0x7, 0x2}]}]}}, {{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x48, 0x1, 0x2, 0x0, 0xbff6, {[@exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0xb, 0xf989, "18f6c883a81c0e"}, @exp_fastopen={0xfe, 0xf, 0xf989, "f6792053860f76d0087709"}, @mss={0x2, 0x4, 0x8c}, @generic={0x5, 0xd, "b427f738c7efb8a226539f"}, @timestamp={0x8, 0xa, 0x8, 0x4}, @mptcp=@remove_addr={0x1e, 0xc2, 0x3, 0x0, "db60b19dde2b4323127bb34bb845e7590e5738fde2fbacf767b466c57be491fb8c7cecd3f063613f0091d15edf9e955af12daf070185453c4d1b9406c0e91c7ca18ebd8c0d3b9f9c1f7ed2f1e936cb909a666efd62a1ae87f934913d2236516f29b80ea841b7cb5db966c9317dbf5beb6f6c408391625b3c505cb0ab98396f1843df2ef368789cd4b5389b451fa8289a5183ea2b6d4bd73fb0cf22b443e8155906efc96822c5a60398cdb297f3c1a4a046ed53ea6125ce626d03fe9fe584d1"}, @generic={0x8, 0xf, "701d4d802e9034515d520fa520"}]}}, {"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"}}}}}}, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68)

5.894314436s ago: executing program 6 (id=917):
r0 = socket(0x11, 0xa, 0x0)
bind$can_raw(r0, &(0x7f0000000000), 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000743ab0008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001d2c0000000b0a911f1e1c000000000000070000000900010073797a30"], 0xb0}}, 0x0)
getsockname$packet(r0, 0x0, &(0x7f0000000080))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r2 = syz_open_dev$evdev(&(0x7f0000000140), 0x8, 0x480200)
ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f00000001c0)=""/73)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r4, 0x1, 0x123, 0x238, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x34}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)

5.818019601s ago: executing program 6 (id=918):
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000004800000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00}, 0x94)

5.817436422s ago: executing program 6 (id=919):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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")
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000400007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
modify_ldt$write(0x1, &(0x7f0000000080)={0x1000, 0x1000, 0xfffffffffffffffe}, 0x10) (async)
modify_ldt$write(0x1, &(0x7f0000000080)={0x1000, 0x1000, 0xfffffffffffffffe}, 0x10)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) (async)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0)
ptrace(0x10, r0)
fsmount(0xffffffffffffffff, 0x0, 0x20) (async)
r2 = fsmount(0xffffffffffffffff, 0x0, 0x20)
symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00')
openat(r2, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) (async)
openat(r2, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4)
setsockopt$MRT_DEL_MFC(r2, 0x0, 0xcd, &(0x7f0000000040)={@loopback, @rand_addr=0x64010100, 0xffffffffffffffff, "1667c48e3a7c3006a7a363924097ffb78f990abcf43ad63aedd8dac061eaad1b", 0x7, 0x9, 0x1, 0x100}, 0x3c)
ptrace$setregs(0xd, r0, 0x930, &(0x7f0000000800)) (async)
ptrace$setregs(0xd, r0, 0x930, &(0x7f0000000800))
ptrace$poke(0x21, r0, 0x0, 0x0) (async)
ptrace$poke(0x21, r0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r3}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000e000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x8, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x8, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r5 = semget(0x1, 0x4, 0x39c)
semop(r5, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2)
semop(r5, &(0x7f00000001c0)=[{0x3, 0x3, 0x800}, {0x1, 0xbbdd, 0x1000}], 0x2)

5.753000097s ago: executing program 4 (id=920):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', <r2=>0x0})
rt_sigtimedwait(&(0x7f0000000080)={[0xd36]}, &(0x7f00000000c0), &(0x7f0000000140)={0x0, 0x989680}, 0x8)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={r2, 0x2, 0x6, @local}, 0x6b)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @multicast}, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'})

5.682860852s ago: executing program 35 (id=920):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', <r2=>0x0})
rt_sigtimedwait(&(0x7f0000000080)={[0xd36]}, &(0x7f00000000c0), &(0x7f0000000140)={0x0, 0x989680}, 0x8)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={r2, 0x2, 0x6, @local}, 0x6b)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @multicast}, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'})

4.893718921s ago: executing program 6 (id=933):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xffff}, 0x18)
r1 = socket$netlink(0x10, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000300)=[{0x8006, 0x85, 0x7, 0x7ffc0001}]})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfffff000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
geteuid()
r2 = mq_open(0x0, 0x42, 0x1f0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, 0x0, 0x440c0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, 0x0, 0x0)
mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)

4.819131667s ago: executing program 3 (id=935):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = syz_open_dev$sg(0x0, 0x0, 0x8401)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c0000000b"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r3}, 0x18)
ioctl$BLKTRACESETUP(r1, 0xc0481273, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e40)={&(0x7f0000001040)='kfree\x00', r5}, 0x18)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x3f, 0x0)
ioctl$SG_BLKTRACETEARDOWN(r1, 0x1276, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0)
sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2002000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x148, r6, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xd7, 0xa8, @random="c5a66c0d568d6414b760ea5fbb329d7e4fce7ee0ee18d081362a9f4ca3d1633bdfd928f7b25d185f56f53378a074113841c1dcc144f64b5a23452cdd2af1992a79108077260b005d10e813303212f99a279fd85229bdbe7541b4c9445f12e216921efd0b86b3e7da1aefe927202f8292bdea93be841d870bedadad7bdd95d1ccad9484955d873144e58c5dcae5ce4af1fb4abdb35ba74186e227cf8d766eed8e0baaa1086b6240cbb07cd0c28caa25c0f78833ed28cceaa8dff4c95c0a84aa43009c25527de8a68fa41eb8acab050014546d88"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x148}, 0x1, 0x0, 0x0, 0xc000}, 0x20008080)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20)
r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r7, 0x0)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0)
r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x884000, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r8, 0x0)

4.503679511s ago: executing program 6 (id=939):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x3800488, &(0x7f0000002200), 0x65, 0x786, &(0x7f00000007c0)="$eJzs3d9rW2UfAPDvSX93e9/2hRd0XhUELYyldtZNwYuJFyI4GOi1W0mzMps2o0nHWgpuiOCNoOKFoDe79se889Yft/pfeCEbU7vhxAupnDRZszXpkq1J5vb5wGme5zwnfZ5vnnOe8yTnkATwyJpI/2QiDkTEB0nEWHV9EhEDlVR/xLGt7W5urOfSJYnNzdd/Syrb3NhYz0Xdc1L7qpnHI+L7dyMOZnbWW1pdW5gtFPLL1fxUefHsVGl17dCZxdn5/Hx+6cj0zMzho88dPbJ3sf7x09r+qx++8vRXx/5657HL7/+QxLHYXy2rj2OvTMRE9TUZSF/C27y815X1WLJ7cYM9gAdB2jF9W0d5HIix6KukmhjpZssAgE55OyI2m+lrWgIA/Kslzc//AMBDqfY5wI2N9Vxt6e0nEt117aWIGN6Kv3Z9c6ukv3rNbrhyHXT0RnLblZEkIsb3oP6JiPjsmze/SJfo0HVIgEYuXIyIU+MTO8f/ZMc9C+16poVtJu7IG/+ge75N5z/PN5r/ZW7Nf6LB/GeowbF7L+5+/Geu7EE1TaXzvxfr7m27WRd/1XhfNfefypxvIDl9ppBPx7b/RsRkDAyl+eld6pi8/vf1ZmX187/fP3rr87T+9HF7i8yV/qHbnzM3W569n5jrXbsY8UR/o/iTW/2fNJn/nmixjldfeO/TZmVp/Gm8tWVn/J21eSniqYb9v31HW7Lr/YlTld1hqrZTNPD1z5+MNqu/vv/TJa2/9l6gG9L+H909/vGk/n7NUvt1/Hhp7LtmZXePv/H+P5i8UUkPVtedny2Xl6cjBpPXdq4/vP3cWr62fRr/5JONj//d9v/0PeGpFuPvv/rrl/cef2el8c+11f/tJy7fXOhrVn9r/T9TSU1W17Qy/rXawPt57QAAAAAAAAAAAAAAAAAAAAAAAACgVZmI2B9JJnsrnclks1u/4f3/GM0UiqXywdPFlaW5qPxW9ngMZGpfdTlW932o09Xvw6/lD9+RfzYi/hcRHw+NVPLZXLEw1+vgAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBqX5Pf/0/9MtTr1gEAHTPc1+sWAADdNtzf6xYAAN023NbWIx1rBwDQPe2d/wGAh4HzPwA8epz/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6LATx4+ny+afG+u5ND93bnVloXju0Fy+tJBdXMllc8Xls9n5YnG+kM/miotN/9GFrYdCsXh2JpZWzk+V86XyVGl17eRicWWpfPLM4ux8/mR+oGuRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDrSqtrC7OFQn5ZQkKi7URc2DqOHpT27F0iBrdHiZGejU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD7p/AgAA//+mAybn")
creat(&(0x7f0000000100)='./bus\x00', 0x38) (async)
creat(&(0x7f0000000100)='./bus\x00', 0x38)
r2 = open(&(0x7f0000000300)='./bus\x00', 0x6200, 0x5d)
preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x2, 0x0, 0x0, 0x0) (async)
preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x2, 0x0, 0x0, 0x0)
sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f2, 0x400, 0x70bd29, 0x25dfdbfb, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x20004080)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) (async)
bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f00000002c0)=0xe2, 0x4)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) (async)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c)
close_range(r3, 0xffffffffffffffff, 0x0)

4.486305082s ago: executing program 36 (id=939):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x3800488, &(0x7f0000002200), 0x65, 0x786, &(0x7f00000007c0)="$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")
creat(&(0x7f0000000100)='./bus\x00', 0x38) (async)
creat(&(0x7f0000000100)='./bus\x00', 0x38)
r2 = open(&(0x7f0000000300)='./bus\x00', 0x6200, 0x5d)
preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x2, 0x0, 0x0, 0x0) (async)
preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x2, 0x0, 0x0, 0x0)
sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f2, 0x400, 0x70bd29, 0x25dfdbfb, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x20004080)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) (async)
bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f00000002c0)=0xe2, 0x4)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) (async)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c)
close_range(r3, 0xffffffffffffffff, 0x0)

4.260498979s ago: executing program 3 (id=941):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000a00)={[{@barrier_val}, {@resuid}, {@block_validity}, {@errors_remount}], [{@dont_hash}]}, 0x1, 0x79b, &(0x7f0000000180)="$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")
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
prctl$PR_MCE_KILL(0x21, 0x0, 0x0)
ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0)

3.179504191s ago: executing program 3 (id=945):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="7c010000190001000000000000000000fc0200000000000000000000000000007f000001000000000000000000000000fffd0006000000000a00000008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000010000800000000000000000000000000000000000000000070000000000000000000000000000001d000000000000000400000080ff000000000000000000000000000000000000dd0200000000000000000000000000000001000200000000c4000500ac14143b000000000000000000000000000004d32b00000000000000ac14140c000000000000000000000000000000000000fb000000000000000000ff400000000000000000000000000000000000010000000033"], 0x17c}, 0x1, 0x0, 0x0, 0x40001}, 0x0)

3.121086855s ago: executing program 3 (id=947):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='ext4_ext_show_extent\x00', r0}, 0x18)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0)
r2 = syz_clone(0x200aa000, &(0x7f0000001700)="c74b85b560", 0x5, &(0x7f0000000300), 0x0, &(0x7f0000001280)="f80d232d65fa44dcbb5275ffbb3fa739460646aa98e44757024f1d12f83dc7fa49de1e2e380100fb669b9a0476f02c378ff3002c0bf751268af4e61f2631bdb473f6b3ad4de83db830a937d094245cc90000000000000000000000000c18cdc6fb97b62b56af861fb132fed071339fb95da9ef6a68d0a2d0cb1c0f676b405d32945af3aea458e92cb82c987fd5ed96742136021bff501971cc5128a3edf3f78f043f2bd5f10c3ac2ffe1bb2c38b91ae3")
perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x18)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pipe(0x0)
r4 = open_tree(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x100)
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0)
ioctl$GIO_UNISCRNMAP(r4, 0x4b69, 0x0)
pwrite64(r5, 0x0, 0x0, 0x9000)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES64, @ANYRES32=r6, @ANYRESHEX=r6], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.969784436s ago: executing program 3 (id=949):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000000f00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x2263, 0x41)
getsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f0000000300), &(0x7f0000000380)=0x4)
connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
sendto$inet(r1, &(0x7f0000000940)="01a4acc7", 0x4, 0x53, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='tlb_flush\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000500), 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0500000004000000ff0f000007", @ANYRES16=r1, @ANYRES64=0x0, @ANYRES64=r2], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000240)=r4}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10)
r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'})
r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00')
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=<r8=>r7, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r8, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}, 0x40)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000006f886ee5b7f9d944c17b51457e0955682feffc987bf1d4f17137f614ae189215902797cf37105db751db31dbfc1c8c7410f71818e60baeb15511fae377b9366ad34ade8f0062799e8b15547b3571fb71ffb45f55cf9d95c40466dd6999279e88a18f11515b02ac224194c89ff70105c7ddad05f6762e5fbdb806d12cb5b7f3787281e46db2f8d80d1dfc7db1bb2c1adb1bf775cc96911f753647a52e0cf5b0695598260074dad655320832b6d34e857617f2f6835d04e56dcd78284e1badffcf8ed41ac6dd4af722c68c3b08783f572003a7cdefdc95809bd4657e4dfc9c388b73d5e31214"], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000008008500000083000000bf0900000000e2ff540d0100000000009500000000000000e4e7dbaa3277a1c9ebfabf91000000000000b7020000000000008500000085000000b70000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11}, 0x18)
pipe2(&(0x7f00000006c0), 0x0)
r12 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r12, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)

2.621839383s ago: executing program 7 (id=953):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='rpm_return_int\x00', r1}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r2}, 0x10)
syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0xc340)

2.586137945s ago: executing program 7 (id=955):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x5f4b, &(0x7f0000000100)={0x0, 0x1568, 0x10000, 0x2, 0x285}, &(0x7f0000000040)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}})
io_uring_enter(r1, 0x29ab, 0xd480, 0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f00000004c0), &(0x7f0000001c40)=r5}, 0x20)
openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0)
ioctl$SIOCGETMIFCNT_IN6(r6, 0x89e0, &(0x7f0000000100)={0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r8}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='br_fdb_add\x00', r10}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r11, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc)
r12 = socket$netlink(0x10, 0x3, 0x4)
writev(r12, &(0x7f00000001c0)=[{&(0x7f0000000500)="580000001400192340834b80043f679a10ff3d425f85b4141691c148c61bcdf1e4220000000001008048244a48fb6cfbe939ca28f23457e792945f64009400050028925aaa000000c600480000000000feff2c707f8f00ff", 0x58}], 0x1)

2.513347801s ago: executing program 3 (id=957):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='ext4_ext_show_extent\x00', r0}, 0x18)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0)
r2 = syz_clone(0x200aa000, &(0x7f0000001700)="c74b85b560", 0x5, &(0x7f0000000300), 0x0, &(0x7f0000001280)="f80d232d65fa44dcbb5275ffbb3fa739460646aa98e44757024f1d12f83dc7fa49de1e2e380100fb669b9a0476f02c378ff3002c0bf751268af4e61f2631bdb473f6b3ad4de83db830a937d094245cc90000000000000000000000000c18cdc6fb97b62b56af861fb132fed071339fb95da9ef6a68d0a2d0cb1c0f676b405d32945af3aea458e92cb82c987fd5ed96742136021bff501971cc5128a3edf3f78f043f2bd5f10c3ac2ffe1bb2c38b91ae3")
perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x18)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pipe(0x0)
r4 = open_tree(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x100)
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0)
ioctl$GIO_UNISCRNMAP(r4, 0x4b69, 0x0)
pwrite64(r5, 0x0, 0x0, 0x9000)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES64, @ANYRES32=r6, @ANYRESHEX=r6], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.455185815s ago: executing program 37 (id=957):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='ext4_ext_show_extent\x00', r0}, 0x18)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0)
r2 = syz_clone(0x200aa000, &(0x7f0000001700)="c74b85b560", 0x5, &(0x7f0000000300), 0x0, &(0x7f0000001280)="f80d232d65fa44dcbb5275ffbb3fa739460646aa98e44757024f1d12f83dc7fa49de1e2e380100fb669b9a0476f02c378ff3002c0bf751268af4e61f2631bdb473f6b3ad4de83db830a937d094245cc90000000000000000000000000c18cdc6fb97b62b56af861fb132fed071339fb95da9ef6a68d0a2d0cb1c0f676b405d32945af3aea458e92cb82c987fd5ed96742136021bff501971cc5128a3edf3f78f043f2bd5f10c3ac2ffe1bb2c38b91ae3")
perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x18)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pipe(0x0)
r4 = open_tree(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x100)
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0)
ioctl$GIO_UNISCRNMAP(r4, 0x4b69, 0x0)
pwrite64(r5, 0x0, 0x0, 0x9000)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES64, @ANYRES32=r6, @ANYRESHEX=r6], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.903087557s ago: executing program 7 (id=967):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r3 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
fcntl$setpipe(r1, 0x407, 0x8)
vmsplice(r2, &(0x7f0000001640)=[{&(0x7f0000000500)="ae", 0x1}], 0x1, 0x1)
readv(r1, &(0x7f0000000080)=[{&(0x7f00000078c0)=""/110, 0x94}], 0x1)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='fib6_table_lookup\x00', r6}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r8}, 0x10)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfee, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
getsockopt$WPAN_WANTLQI(r7, 0x0, 0x3, &(0x7f0000000180), &(0x7f00000002c0)=0x4)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0xc084)
recvmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000004ac0)=""/157, 0x9d}, {&(0x7f0000000700)=""/230, 0xe6}, {&(0x7f0000002880)=""/4053, 0xfd5}, {&(0x7f0000001880)=""/4085, 0xff5}, {&(0x7f00000000c0)=""/119, 0x77}, {&(0x7f0000000e00)=""/102, 0x66}], 0x6}, 0x0)

1.609814699s ago: executing program 7 (id=969):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socket$rds(0x15, 0x5, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r4, 0x0, 0x2}, 0x18)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x3, 0x2, 0x0, 0x4070bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x7}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='sys_enter\x00', r6}, 0x10)
r7 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r7, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
accept4(r7, 0x0, 0x0, 0x400000000000000)

1.346664239s ago: executing program 5 (id=971):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d103"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d103"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)

1.249785226s ago: executing program 5 (id=972):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="09000000040000000800000010"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800002d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000240)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x21700, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r2], 0x50)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c000280"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10)
ioprio_get$uid(0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r6}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x18)
pwrite64(r8, 0x0, 0x0, 0xfecc)
ioctl$int_in(r5, 0x0, &(0x7f00000003c0)=0x10000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r7}, 0x10)

1.204714389s ago: executing program 5 (id=973):
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x77a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r1 = socket(0x28, 0xa, 0x8)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1)
getsockname$packet(r1, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x2c, r2, 0x10ada85e65c25359, 0xfffffffc, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x9}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000)
sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r2, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x57}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0xc080}, 0x800)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r4, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000003a80)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x2}, {0x0}, &(0x7f0000003a00)=[{&(0x7f00000016c0)=""/96, 0x60}], 0x1, 0x39, 0x2}}], 0x48, 0x4000000}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x3)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x48844)
r7 = socket$kcm(0x29, 0x2, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x41, &(0x7f0000000000)=0x6, 0x4)
socket$nl_rdma(0x10, 0x3, 0x14)
syz_open_dev$usbmon(&(0x7f0000000040), 0x80, 0x240240)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r10 = getuid()
mount$9p_fd(0x0, &(0x7f0000000400)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000040), 0x800048, &(0x7f0000000b40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB="2c6d61736b3d5e4d41595f524541442c7063723d30303030303030303030303030303030303035332c666f776e65723d0ef88bc9230aa1c3b1a9d1520d97595428a6b29d19b75eefeabcd0035c7791835709e686da88a5d8c2a152ca41cfb6fde112a9a515b137fe4ef44c51a6d4220bb282b41f40cf2c84569e40fb51646c9b1b8e3faa235aeb60073a0921e0e2ac9cabb61ee94762aecaa1ab0dfba8e7c77c6aa8c03658b92fc0f23b1256e224b40b67ee6e5164f75c467c62f60b585872c190a2c4702c7a7229d287cd7be2576f20cd5a6d49f67b875da5e09f6200f93a22a2cb2c733c709fb47227e4f39486c401fcb2fbc7c988f88e", @ANYRESDEC=0xee01, @ANYBLOB=',rootcontext=user_u,obj_role=,uid<', @ANYRESDEC=r10, @ANYBLOB=',context=system_u,\x00'])

1.127188165s ago: executing program 5 (id=974):
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
syz_clone(0x4d005300, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) (async)
syz_clone(0x4d005300, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'pimreg1\x00', &(0x7f0000000040)=@ethtool_coalesce={0xf, 0xb7, 0x7, 0x9, 0x3, 0x4, 0x9, 0x4, 0x3, 0x6, 0x4, 0x401, 0x5, 0x2, 0xfffffff9, 0x9, 0x8, 0x6, 0x6, 0x3, 0x4d8, 0x6, 0xcf1}})

1.066831379s ago: executing program 8 (id=922):
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000006002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00}, 0x94)

989.814575ms ago: executing program 8 (id=975):
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
memfd_create(0x0, 0x0)
socket(0x1e, 0x4, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xb9, &(0x7f000000cf3d)=""/185, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000012700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40054)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000580), 0x0)
sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000005c0)="5067010b0e2ce0921fdf9f0b838df4c093f51501bc7b0a6206f06ed23ead30d24725a4e9658c5a876b0ebc65084239b63b2120a57824ea46d745b6ed37539fcbff89d1ac8590775e3595c75aee3b6f23dae09d229cced9f24b8c63ca1ce4e6a5", 0x60}], 0x1, 0x0, 0x0, 0x804c040}, 0x801)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9)
r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x17, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000800000000000000000000000183b000003000000000000000000000018250000", @ANYRES32, @ANYBLOB="0000000000000000060707000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000700000000000000ffb7030068cc000000b704000000000000850000008200000085200000040000002f9bfcfff0ffffff95000000000000008ad5186f17dcdf5e2875984184cb1e9008616b6aeaf7155138ebe9ad6478d397d236006be7e5d3fc3f9e63eb0b8620171fb3e61332afacf7540bc0bbb37c57b3a82233b5da229e73ec2f3bc2a610a1372e194b4721296425e3f9f9e21376ef019390ab6922dae6713120a5966f13dc22135665b3f91c4874786ce76601"], 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0)
rt_sigtimedwait(0x0, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00')
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
close(r6)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB=',w&eno=', @ANYBLOB=',noextend,msize=0x000000007fffffff,'])
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r5, 0x40383d0c, &(0x7f0000000000)={{0x6, 0x5c}, {0x101, 0x10001}, 0x1})
r8 = socket$netlink(0x10, 0x3, 0x0)
writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}, {&(0x7f0000000340)="6a814b35320a00aa58dcc6117a310d8cb31b8da54fc4bf172b7eb002ab702b1f1b13394751", 0x25}, {&(0x7f0000000280)="58848e89b6f24538bc2c6e8a8ec71955d34dbff7ef38cd59989e0974f665eb2dc7f0245f76", 0x25}], 0x3)

941.734229ms ago: executing program 8 (id=976):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d5800000000000008001a8004000a80140012800b0001006970766c616e000004000280ddf1339a2fa6c32980c8292b169506a3ed6cc27183b6b2c2a8740226df49a87bd4c5170b0db9e5bb87106967673de830077cba3a5886e251492eb9db7707ae986901f70b1ec70b9dc5998b17489a3cdf564d16813a0266a2cd493a38869506c1286e"], 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18) (async, rerun: 32)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3}, &(0x7f0000000500), &(0x7f0000000540)=r4}, 0x20) (async, rerun: 32)
r5 = inotify_init1(0x800)
inotify_add_watch(r5, &(0x7f0000000140)='./file0\x00', 0x84000221)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) (async)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r7=>r6}, './file0\x00'})
setsockopt$inet_buf(r7, 0x0, 0x9, &(0x7f0000000040)="a30bbcf8cece", 0x6)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) (async)
setsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f00000000c0)=0x3, 0x4) (async)
prctl$PR_SET_NAME(0xf, 0x0) (async, rerun: 32)
r9 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32)
setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async)
setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290)
close_range(r8, 0xffffffffffffffff, 0x0) (async)
ioctl$VT_DISALLOCATE(r6, 0x5608)

903.898162ms ago: executing program 8 (id=977):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r6=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0)

749.995643ms ago: executing program 5 (id=978):
r0 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r0, &(0x7f00000007c0)={0xa, 0x0, 0x3, @initdev={0xfe, 0x88, '\x00', 0x9, 0x0}, 0x8}, 0x1c)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1, 0x2, 0x7fffffff}})
ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000010340))
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
socket$l2tp(0x2, 0x2, 0x73)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'vcan0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000180)="10030600e0fc020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14)

739.757484ms ago: executing program 5 (id=979):
bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0), 0x8)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000680)=ANY=[@ANYRES16=<r3=>r1], &(0x7f0000000600)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0x401}, 0x11)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sysinfo(&(0x7f0000000000)=""/177)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095", @ANYRES32=r6, @ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRESHEX=r3, @ANYRES64], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640", @ANYRESOCT=r0], 0x6c}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYRES64=r4], 0x28}, 0x1, 0x0, 0x0, 0x4c814}, 0x20000880)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r9, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x18)
r10 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x88c4)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000100)='svcrdma_wc_read\x00', r11, 0x0, 0x1}, 0x18)
open_tree(0xffffffffffffff9c, &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x88801)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0x40000000, 0x0, 0x3}, 0x8})
connect$llc(r5, &(0x7f0000000300)={0x1a, 0x0, 0x0, 0x12, 0x24, 0x2}, 0x10)

630.531762ms ago: executing program 7 (id=980):
r0 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x801)
r1 = syz_io_uring_setup(0x16f9, &(0x7f0000000000)={0x0, 0x3a13, 0x10, 0x3, 0x11c, 0x0, r0}, &(0x7f00000003c0)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x40f6, 0x80, 0x0, 0x224}, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000280))
syz_io_uring_submit(r5, r3, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x6000, 0x0, {0x0, r4}})
io_uring_enter(r1, 0x1c39, 0x106a, 0x22, 0x0, 0x0)
open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x801) (async)
syz_io_uring_setup(0x16f9, &(0x7f0000000000)={0x0, 0x3a13, 0x10, 0x3, 0x11c, 0x0, r0}, &(0x7f00000003c0), &(0x7f0000000540)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async)
syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x40f6, 0x80, 0x0, 0x224}, &(0x7f0000000040), &(0x7f0000000280)) (async)
syz_io_uring_submit(r5, r3, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x6000, 0x0, {0x0, r4}}) (async)
io_uring_enter(r1, 0x1c39, 0x106a, 0x22, 0x0, 0x0) (async)

561.910998ms ago: executing program 7 (id=981):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = dup(r0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000077b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f00000000c0)={0x9})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x18)
r4 = syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3010, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140))
r5 = epoll_create(0xaf2)
r6 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x37d}, &(0x7f0000000340)=<r7=>0x0, &(0x7f0000000280)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0xe000200f})
timer_create(0x0, 0x0, &(0x7f0000000000))
timer_settime(0x0, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
timer_delete(0x0)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r9, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r9, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r10 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r12, {0x0, 0xa}, {0xffff, 0xffff}, {0x4, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x8, 0x5}, {0x12, 0x1, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
syz_genetlink_get_family_id$team(&(0x7f0000002d00), r1)

341.249634ms ago: executing program 9 (id=940):
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="000000000001000066080000000000001800000000000000ffb00000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00}, 0x94)

311.255757ms ago: executing program 9 (id=982):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
socket$netlink(0x10, 0x3, 0x13)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300))
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x80)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000540)={0xfffffff7, 0x200401, 0xd, 0xc6cf, 0x91, "24060801000002ffffffff00", 0x7ff, 0x1fd})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x8)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x200000000000000)

0s ago: executing program 2 (id=959):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x2, 0x7ffc0002}]})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x2, 0x0, 0x0, 0x0, 0x9, 0x804, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x1c}, 0x4, 0x8, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x3, &(0x7f00000003c0)=[{0x534, 0x3, 0x1, 0x2}, {0x8, 0x66, 0x18, 0xffffff80}, {0x1, 0x2c, 0xc7, 0x10000}]}, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00'}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
r1 = socket(0x40000000015, 0x5, 0x0)
r2 = syz_io_uring_setup(0x5a48, &(0x7f00000000c0)={0x0, 0x3234, 0x200, 0xffffffff, 0x187, 0x0, r1}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000540)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x438}, 0x0, 0x12f4c4729364eade, 0x1})
io_uring_enter(r2, 0x3516, 0xa00100, 0x0, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
symlink(&(0x7f0000000040)='.\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x1110, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0xedf2}, 0x0, 0xffbffffffffffffe, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)

kernel console output (not intermixed with test programs):

e="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b04d5f749 code=0x7ffc0000
[   55.195561][   T29] audit: type=1326 audit(1766026918.660:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz.6.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b04d5f749 code=0x7ffc0000
[   55.218917][   T29] audit: type=1326 audit(1766026918.660:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz.6.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9b04d5f749 code=0x7ffc0000
[   55.277615][ T4628] IPVS: set_ctl: invalid protocol: 94 172.20.20.187:20000
[   55.323285][ T4628] sch_fq: defrate 0 ignored.
[   55.683701][ T4632] loop1: detected capacity change from 0 to 1024
[   55.720044][ T4632] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   55.765489][ T4638] loop5: detected capacity change from 0 to 512
[   55.772358][ T4638] EXT4-fs: Ignoring removed nomblk_io_submit option
[   55.780432][ T4638] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.349: iget: bad extended attribute block 262144
[   55.793690][ T4638] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.349: couldn't read orphan inode 15 (err -117)
[   55.807583][ T4638] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   55.859572][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.883941][ T4277] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.081351][ T4653] loop1: detected capacity change from 0 to 1024
[   56.088435][ T4653] EXT4-fs: Ignoring removed oldalloc option
[   56.094454][ T4653] EXT4-fs: Ignoring removed bh option
[   56.123803][ T4653] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.155375][ T4670] netlink: 'syz.4.356': attribute type 1 has an invalid length.
[   56.260227][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.350797][ T4679] bridge0: entered promiscuous mode
[   56.378481][ T4682] loop4: detected capacity change from 0 to 512
[   56.392614][ T4682] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.361: bad orphan inode 11862016
[   56.404376][ T4682] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   56.417169][ T4682] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.433053][ T4677] uprobe: syz.6.360:4677 failed to unregister, leaking uprobe
[   56.538351][ T4687] loop1: detected capacity change from 0 to 2048
[   56.545649][ T4687] ext4: Unknown parameter 'dont_hash'
[   56.556454][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   56.724831][ T4677] bridge0: left promiscuous mode
[   56.757967][ T4693] loop6: detected capacity change from 0 to 2048
[   56.806026][ T4693] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[   56.938937][ T4693] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   56.954232][ T4693] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   56.966708][ T4693] EXT4-fs (loop6): This should not happen!! Data will be lost
[   56.966708][ T4693] 
[   56.976474][ T4693] EXT4-fs (loop6): Total free blocks count 0
[   56.982494][ T4693] EXT4-fs (loop6): Free/Dirty block details
[   56.988390][ T4693] EXT4-fs (loop6): free_blocks=2415919104
[   56.994128][ T4693] EXT4-fs (loop6): dirty_blocks=2288
[   56.999424][ T4693] EXT4-fs (loop6): Block reservation details
[   57.005467][ T4693] EXT4-fs (loop6): i_reserved_data_blocks=143
[   57.133362][ T4701] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2284 with max blocks 3 with error 28
[   57.180194][ T4693] syz.6.363 (4693) used greatest stack depth: 10088 bytes left
[   58.255924][ T4735] __nla_validate_parse: 4 callbacks suppressed
[   58.255942][ T4735] netlink: 660 bytes leftover after parsing attributes in process `syz.6.376'.
[   58.300257][ T4733] loop5: detected capacity change from 0 to 1024
[   58.314192][ T4733] EXT4-fs: Ignoring removed bh option
[   58.327652][ T4745] loop3: detected capacity change from 0 to 164
[   58.345829][ T4747] xt_hashlimit: max too large, truncated to 1048576
[   58.354327][ T4745] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   58.361722][ T4733] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.365162][ T4745] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   58.399097][ T4745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.380'.
[   58.501005][ T4733] EXT4-fs (loop5): shut down requested (2)
[   58.539188][ T4277] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.561740][ T4765] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   58.603437][ T4774] pim6reg1: entered promiscuous mode
[   58.700221][ T4774] pim6reg1: entered allmulticast mode
[   58.715780][ T4778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.394'.
[   58.738336][ T4774] loop5: detected capacity change from 0 to 512
[   58.747939][ T4774] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[   58.757086][ T4774] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[   58.770340][ T4784] loop3: detected capacity change from 0 to 128
[   58.795293][ T4774] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended
[   58.804761][ T4774] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[   58.814987][ T4774] System zones: 0-2, 18-18, 34-34
[   58.817280][ T4791] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   58.831980][ T4774] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.387: iget: bad i_size value: 360287970189639680
[   58.852572][ T4774] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.387: couldn't read orphan inode 15 (err -117)
[   58.865611][ T4774] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   58.890560][ T4791] Cannot find add_set index 0 as target
[   58.957074][ T3488] IPVS: starting estimator thread 0...
[   59.050034][ T4277] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.072940][ T4797] IPVS: using max 2256 ests per chain, 112800 per kthread
[   59.087774][ T4809] netlink: 8 bytes leftover after parsing attributes in process `syz.5.399'.
[   59.147282][ T4816] netlink: 68 bytes leftover after parsing attributes in process `syz.5.399'.
[   59.159054][ T4814] Buffer I/O error on dev loop9, logical block 0, async page read
[   59.183427][ T4814] Buffer I/O error on dev loop9, logical block 0, async page read
[   59.191298][ T4814]  loop9: unable to read partition table
[   59.204282][ T4809] program syz.5.399 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   59.226295][ T4819] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   59.236689][ T4814] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ �â·û
[   59.236689][ T4814] 
) failed (rc=-5)
[   59.252160][ T4819] EXT4-fs (loop3): 1 truncate cleaned up
[   59.456267][ T4834] bond1: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[   59.472604][ T4834] bond1 (unregistering): Released all slaves
[   59.881062][ T4845] 
@0Ù: renamed from bond_slave_1 (while UP)
[   60.005279][ T4845] netlink: 68 bytes leftover after parsing attributes in process `syz.5.411'.
[   60.119704][ T4852] xt_CT: No such helper "snmp_trap"
[   60.230555][ T3389] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0
[   60.238188][ T3389] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0
[   60.245669][ T3389] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0
[   60.253117][ T3389] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0
[   60.260595][ T3389] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0
[   60.268027][ T3389] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0
[   60.275492][ T3389] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0
[   60.279646][ T4863] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   60.282931][ T3389] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0
[   60.282959][ T3389] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0
[   60.292809][   T29] kauditd_printk_skb: 349 callbacks suppressed
[   60.292822][   T29] audit: type=1400 audit(1766026923.940:2375): avc:  denied  { bind } for  pid=4862 comm="syz.1.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   60.300280][ T3389] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0
[   60.312847][ T3389] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1
[   60.314016][   T29] audit: type=1400 audit(1766026923.940:2376): avc:  denied  { write } for  pid=4862 comm="syz.1.418" path="socket:[10871]" dev="sockfs" ino=10871 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   60.373824][   T29] audit: type=1400 audit(1766026923.940:2377): avc:  denied  { read } for  pid=4862 comm="syz.1.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   60.393784][   T29] audit: type=1326 audit(1766026923.940:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4862 comm="syz.1.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5069f749 code=0x7ffc0000
[   60.395506][ T4861] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   60.417338][   T29] audit: type=1326 audit(1766026923.940:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4862 comm="syz.1.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5069f749 code=0x7ffc0000
[   60.417395][   T29] audit: type=1326 audit(1766026923.940:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4862 comm="syz.1.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5069f749 code=0x7ffc0000
[   60.476073][   T29] audit: type=1326 audit(1766026923.940:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4862 comm="syz.1.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5069f749 code=0x7ffc0000
[   60.496233][ T4863] EXT4-fs (loop1): 1 truncate cleaned up
[   60.500090][   T29] audit: type=1326 audit(1766026923.940:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4862 comm="syz.1.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5069f749 code=0x7ffc0000
[   60.506457][ T4861] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   60.529050][   T29] audit: type=1326 audit(1766026923.940:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4862 comm="syz.1.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efe5069df90 code=0x7ffc0000
[   60.561573][   T29] audit: type=1326 audit(1766026923.940:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4862 comm="syz.1.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5069f749 code=0x7ffc0000
[   60.588947][ T4867] netlink: 4 bytes leftover after parsing attributes in process `syz.5.420'.
[   60.673362][ T4877] netlink: 96 bytes leftover after parsing attributes in process `syz.5.426'.
[   60.741739][ T4881] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.791096][ T4891] set_capacity_and_notify: 6 callbacks suppressed
[   60.791115][ T4891] loop1: detected capacity change from 0 to 2048
[   60.806835][ T4893] loop5: detected capacity change from 0 to 512
[   60.815358][ T4891] ext4: Unknown parameter 'dont_hash'
[   60.825576][ T4893] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.431: bad orphan inode 11862016
[   60.842350][ T4901] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=3108 sclass=netlink_xfrm_socket pid=4901 comm=syz.3.433
[   60.862091][ T4893] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   60.941950][ T4908] loop4: detected capacity change from 0 to 512
[   60.974321][ T4901] netlink: 'syz.3.433': attribute type 1 has an invalid length.
[   61.133017][ T4921] random: crng reseeded on system resumption
[   61.133457][ T4925] netlink: 'syz.3.440': attribute type 30 has an invalid length.
[   61.225513][ T4930] netlink: 8 bytes leftover after parsing attributes in process `syz.6.441'.
[   61.311771][ T4932] netlink: 96 bytes leftover after parsing attributes in process `syz.5.442'.
[   61.657153][ T4941] loop4: detected capacity change from 0 to 8192
[   61.692324][ T4939] loop5: detected capacity change from 0 to 512
[   61.699019][ T4939] EXT4-fs: Ignoring removed nomblk_io_submit option
[   61.709790][ T4941] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   61.730088][ T4939] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.444: iget: bad extended attribute block 262144
[   61.763107][ T4953] loop6: detected capacity change from 0 to 2048
[   61.769723][ T4939] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.444: couldn't read orphan inode 15 (err -117)
[   61.817969][ T4953] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   61.844503][ T4957] netlink: 'syz.3.450': attribute type 1 has an invalid length.
[   61.871860][ T4957] loop3: detected capacity change from 0 to 512
[   61.883112][ T4957] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   62.030304][ T4968] tipc: Started in network mode
[   62.035303][ T4968] tipc: Node identity aaaaaaaaaa38, cluster identity 4711
[   62.042511][ T4968] tipc: Enabled bearer <eth:veth0_macvtap>, priority 0
[   62.055190][ T4967] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.449: bg 0: block 345: padding at end of block bitmap is not set
[   62.069704][ T4967] EXT4-fs (loop6): Remounting filesystem read-only
[   62.086490][ T2903] EXT4-fs warning (device loop6): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[   62.255898][ T5004] SELinux:  Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped).
[   62.298446][ T5004] loop4: detected capacity change from 0 to 1024
[   62.329818][ T5006] netlink: 'syz.3.467': attribute type 1 has an invalid length.
[   62.376685][ T5010] FAULT_INJECTION: forcing a failure.
[   62.376685][ T5010] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   62.390030][ T5010] CPU: 1 UID: 0 PID: 5010 Comm: syz.1.469 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   62.390061][ T5010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   62.390084][ T5010] Call Trace:
[   62.390090][ T5010]  <TASK>
[   62.390098][ T5010]  __dump_stack+0x1d/0x30
[   62.390188][ T5010]  dump_stack_lvl+0xe8/0x140
[   62.390241][ T5010]  dump_stack+0x15/0x1b
[   62.390261][ T5010]  should_fail_ex+0x265/0x280
[   62.390290][ T5010]  should_fail+0xb/0x20
[   62.390310][ T5010]  should_fail_usercopy+0x1a/0x20
[   62.390411][ T5010]  _copy_from_user+0x1c/0xb0
[   62.390442][ T5010]  memdup_user+0x5e/0xd0
[   62.390461][ T5010]  strndup_user+0x68/0xb0
[   62.390489][ T5010]  __se_sys_mount+0x4d/0x2e0
[   62.390511][ T5010]  ? fput+0x8f/0xc0
[   62.390611][ T5010]  ? ksys_write+0x192/0x1a0
[   62.390631][ T5010]  __x64_sys_mount+0x67/0x80
[   62.390653][ T5010]  x64_sys_call+0x2cca/0x3000
[   62.390717][ T5010]  do_syscall_64+0xd8/0x2c0
[   62.390813][ T5010]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.390879][ T5010] RIP: 0033:0x7efe5069f749
[   62.390895][ T5010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   62.390914][ T5010] RSP: 002b:00007efe4f107038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   62.390933][ T5010] RAX: ffffffffffffffda RBX: 00007efe508f5fa0 RCX: 00007efe5069f749
[   62.390946][ T5010] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000
[   62.390959][ T5010] RBP: 00007efe4f107090 R08: 0000200000000140 R09: 0000000000000000
[   62.390971][ T5010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   62.391034][ T5010] R13: 00007efe508f6038 R14: 00007efe508f5fa0 R15: 00007fff9c6abf28
[   62.391053][ T5010]  </TASK>
[   62.595725][ T5016] FAULT_INJECTION: forcing a failure.
[   62.595725][ T5016] name failslab, interval 1, probability 0, space 0, times 0
[   62.600382][ T5018] capability: warning: `syz.1.471' uses 32-bit capabilities (legacy support in use)
[   62.608411][ T5016] CPU: 0 UID: 0 PID: 5016 Comm: syz.4.468 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   62.608437][ T5016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   62.608451][ T5016] Call Trace:
[   62.608460][ T5016]  <TASK>
[   62.608469][ T5016]  __dump_stack+0x1d/0x30
[   62.608497][ T5016]  dump_stack_lvl+0xe8/0x140
[   62.608550][ T5016]  dump_stack+0x15/0x1b
[   62.608572][ T5016]  should_fail_ex+0x265/0x280
[   62.608632][ T5016]  should_failslab+0x8c/0xb0
[   62.608657][ T5016]  kmem_cache_alloc_bulk_noprof+0x63/0x3f0
[   62.608747][ T5016]  bpf_test_run_xdp_live+0xdd3/0x11d0
[   62.608784][ T5016]  ? __pfx_autoremove_wake_function+0x10/0x10
[   62.608820][ T5016]  ? mutex_unlock+0x4f/0x90
[   62.608850][ T5016]  ? bpf_test_run_xdp_live+0x354/0x11d0
[   62.608948][ T5016]  bpf_prog_test_run_xdp+0x525/0x970
[   62.608983][ T5016]  ? _kstrtol+0x41/0x90
[   62.609055][ T5016]  ? __rcu_read_unlock+0x4f/0x70
[   62.609080][ T5016]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   62.609172][ T5016]  bpf_prog_test_run+0x22a/0x390
[   62.609199][ T5016]  __sys_bpf+0x4c0/0x7c0
[   62.609237][ T5016]  __x64_sys_bpf+0x41/0x50
[   62.609354][ T5016]  x64_sys_call+0x28e1/0x3000
[   62.609381][ T5016]  do_syscall_64+0xd8/0x2c0
[   62.609500][ T5016]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.609528][ T5016] RIP: 0033:0x7fc832a8f749
[   62.609595][ T5016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   62.609615][ T5016] RSP: 002b:00007fc8314ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   62.609635][ T5016] RAX: ffffffffffffffda RBX: 00007fc832ce5fa0 RCX: 00007fc832a8f749
[   62.609650][ T5016] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a
[   62.609663][ T5016] RBP: 00007fc8314ef090 R08: 0000000000000000 R09: 0000000000000000
[   62.609677][ T5016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   62.609690][ T5016] R13: 00007fc832ce6038 R14: 00007fc832ce5fa0 R15: 00007ffe4a3b5d08
[   62.609711][ T5016]  </TASK>
[   62.617983][ T5015] loop6: detected capacity change from 0 to 1024
[   62.829318][ T5015] EXT4-fs: Ignoring removed bh option
[   62.855168][ T5015] EXT4-fs (loop6): shut down requested (2)
[   62.985258][ T5049] netlink: 'syz.1.480': attribute type 1 has an invalid length.
[   63.061524][ T3482] tipc: Node number set to 9611946
[   63.090853][ T5060] loop1: detected capacity change from 0 to 512
[   63.097809][ T5060] EXT4-fs: dax option not supported
[   63.222349][ T5069] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.488: bg 0: block 248: padding at end of block bitmap is not set
[   63.260686][ T5069] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.488: Failed to acquire dquot type 1
[   63.298677][ T5057] EXT4-fs: Ignoring removed nomblk_io_submit option
[   63.306922][ T5069] EXT4-fs (loop5): 1 truncate cleaned up
[   63.314711][ T5069] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   63.315248][ T5057] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.483: iget: bad extended attribute block 262144
[   63.364795][ T5057] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.483: couldn't read orphan inode 15 (err -117)
[   63.416389][ T5069] syz.5.488 (5069) used greatest stack depth: 9184 bytes left
[   63.477330][ T5091] __nla_validate_parse: 4 callbacks suppressed
[   63.477346][ T5091] netlink: 8 bytes leftover after parsing attributes in process `syz.5.494'.
[   63.508059][ T5091] netlink: 'syz.5.494': attribute type 1 has an invalid length.
[   63.568039][ T5108] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   63.579151][ T5108] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   63.593105][ T5108] JBD2: no valid journal superblock found
[   63.598882][ T5108] EXT4-fs (loop4): Could not load journal inode
[   63.608670][ T5108] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[   63.816610][ T5129] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   63.834855][ T5123] EXT4-fs: Ignoring removed nomblk_io_submit option
[   63.845555][ T5126] 9pnet_fd: Insufficient options for proto=fd
[   63.862407][ T5123] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.505: iget: bad extended attribute block 262144
[   63.876030][ T5123] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.505: couldn't read orphan inode 15 (err -117)
[   63.997492][ T5144] netlink: 1 bytes leftover after parsing attributes in process `syz.6.512'.
[   64.051082][ T5149] netlink: 'wÞ£ÿ': attribute type 4 has an invalid length.
[   64.072949][ T5155] netlink: 96 bytes leftover after parsing attributes in process `syz.5.515'.
[   64.083445][ T5149] netlink: 'wÞ£ÿ': attribute type 4 has an invalid length.
[   64.167809][ T5167] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01d, mo2=0002]
[   64.192743][ T5167] System zones: 1-12
[   64.196840][ T5167] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.518: Directory hole found for htree index block 0
[   64.244188][ T5167] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117
[   64.244225][ T5167] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.518: Directory hole found for htree index block 0
[   64.284479][ T5167] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[   64.301027][ T5174] tipc: Failed to remove unknown binding: 66,1,1/0:3020376033/3020376035
[   64.309659][ T5174] tipc: Failed to remove unknown binding: 66,1,1/0:3020376033/3020376035
[   64.334780][ T5176] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   64.363383][ T5176] EXT4-fs (loop1): mount failed
[   64.369894][ T5167] EXT4-fs: Ignoring removed orlov option
[   64.376272][ T5171] EXT4-fs: Ignoring removed nomblk_io_submit option
[   64.381665][ T5167] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[   64.404118][ T5167] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[   64.431646][ T5167] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.518: Directory hole found for htree index block 0
[   64.449147][ T5171] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.520: iget: bad extended attribute block 262144
[   64.463101][ T5171] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.520: couldn't read orphan inode 15 (err -117)
[   64.618585][ T5184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.522'.
[   64.665452][ T5184] macvlan2: entered promiscuous mode
[   64.670823][ T5184] macvlan2: entered allmulticast mode
[   64.676386][ T5194] hsr0: entered promiscuous mode
[   64.698377][ T5193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.525'.
[   64.736370][ T5193] hsr_slave_0: left promiscuous mode
[   64.738493][ T5192] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2807: inode #11: comm syz.4.525: corrupted xattr block 95: invalid header
[   64.821961][ T5192] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.525: bg 0: block 7: invalid block bitmap
[   64.843560][ T5193] hsr_slave_1: left promiscuous mode
[   64.922291][ T5192] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem
[   64.934853][ T5192] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2971: inode #11: comm syz.4.525: corrupted xattr block 95: invalid header
[   64.974889][ T5192] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117)
[   64.993353][ T5192] EXT4-fs (loop4): 1 orphan inode deleted
[   65.001166][ T5193] hsr0 (unregistering): left promiscuous mode
[   65.146910][ T5221] EXT4-fs: Mount option(s) incompatible with ext3
[   65.172491][ T5229] netlink: 96 bytes leftover after parsing attributes in process `syz.1.536'.
[   66.164655][   T29] kauditd_printk_skb: 584 callbacks suppressed
[   66.164675][   T29] audit: type=1400 audit(1766026929.810:2966): avc:  granted  { setsecparam } for  pid=5224 comm="syz.4.535" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[   66.428194][ T5264] netlink: 12 bytes leftover after parsing attributes in process `syz.5.543'.
[   66.561579][   T29] audit: type=1400 audit(1766026930.050:2967): avc:  denied  { create } for  pid=5254 comm="syz.3.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[   66.581311][   T29] audit: type=1400 audit(1766026930.050:2968): avc:  denied  { listen } for  pid=5254 comm="syz.3.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[   66.640576][ T5267] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[   66.711915][ T5264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   66.780298][   T29] audit: type=1326 audit(1766026930.340:2969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.3.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ad13f749 code=0x7ffc0000
[   66.791537][ T5272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.548'.
[   66.803665][   T29] audit: type=1326 audit(1766026930.340:2970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.3.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ad13f749 code=0x7ffc0000
[   66.822782][ T5264] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   66.835963][   T29] audit: type=1326 audit(1766026930.340:2971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.3.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3ad13f749 code=0x7ffc0000
[   66.855022][ T5274] netlink: 96 bytes leftover after parsing attributes in process `syz.1.549'.
[   66.867282][   T29] audit: type=1326 audit(1766026930.340:2972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.3.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ad13f749 code=0x7ffc0000
[   66.899560][   T29] audit: type=1326 audit(1766026930.350:2973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.3.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3ad13f749 code=0x7ffc0000
[   66.922961][   T29] audit: type=1326 audit(1766026930.350:2974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.3.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ad13f749 code=0x7ffc0000
[   66.946384][   T29] audit: type=1326 audit(1766026930.350:2975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.3.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3ad13f749 code=0x7ffc0000
[   66.979789][ T3708] hid_parser_main: 8 callbacks suppressed
[   66.979809][ T3708] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4
[   66.993490][ T3708] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2
[   67.001248][ T3708] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0
[   67.009032][ T3708] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0
[   67.016809][ T3708] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0
[   67.024541][ T3708] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0
[   67.032307][ T3708] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0
[   67.051914][ T3708] hid-generic 0000:3000000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[   67.093738][ T5282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.551'.
[   67.146642][ T5284] set_capacity_and_notify: 13 callbacks suppressed
[   67.146660][ T5284] loop1: detected capacity change from 0 to 512
[   67.190201][ T5284] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.552: inode has both inline data and extents flags
[   67.216878][ T5284] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.552: couldn't read orphan inode 15 (err -117)
[   67.238491][ T5284] EXT4-fs mount: 30 callbacks suppressed
[   67.238508][ T5284] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.244855][ T5291] loop4: detected capacity change from 0 to 128
[   67.273921][ T5293] netlink: '+}[@': attribute type 10 has an invalid length.
[   67.289909][ T5299] loop3: detected capacity change from 0 to 512
[   67.297135][ T5291] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   67.299032][ T5293] team0 (unregistering): Port device team_slave_0 removed
[   67.318822][ T5291] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   67.331336][ T5299] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.344234][ T5299] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   67.346062][ T5293] team0 (unregistering): Port device team_slave_1 removed
[   67.376070][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.386889][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   67.507125][ T5312] capability: warning: `syz.1.558' uses deprecated v2 capabilities in a way that may be insecure
[   67.524721][ T5299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5299 comm=syz.3.555
[   67.538070][ T5299] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.555: bg 0: block 217: padding at end of block bitmap is not set
[   67.554852][ T5299] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem
[   67.678510][ T5317] loop4: detected capacity change from 0 to 512
[   67.763612][ T5317] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.776216][ T5317] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   67.854887][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.880897][ T5326] syzkaller0: entered promiscuous mode
[   67.886577][ T5326] syzkaller0: entered allmulticast mode
[   67.996878][ T5333] FAULT_INJECTION: forcing a failure.
[   67.996878][ T5333] name failslab, interval 1, probability 0, space 0, times 0
[   68.009560][ T5333] CPU: 1 UID: 0 PID: 5333 Comm: syz.5.565 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   68.009587][ T5333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   68.009663][ T5333] Call Trace:
[   68.009671][ T5333]  <TASK>
[   68.009730][ T5333]  __dump_stack+0x1d/0x30
[   68.009783][ T5333]  dump_stack_lvl+0xe8/0x140
[   68.009840][ T5333]  dump_stack+0x15/0x1b
[   68.009864][ T5333]  should_fail_ex+0x265/0x280
[   68.009893][ T5333]  should_failslab+0x8c/0xb0
[   68.009931][ T5333]  kmem_cache_alloc_bulk_noprof+0x63/0x3f0
[   68.009964][ T5333]  ? bpf_test_run_xdp_live+0x821/0x11d0
[   68.010000][ T5333]  bpf_test_run_xdp_live+0xdd3/0x11d0
[   68.010049][ T5333]  ? cpus_read_unlock+0x6e/0xc0
[   68.010088][ T5333]  ? __static_call_update+0x343/0x380
[   68.010130][ T5333]  ? bpf_test_run_xdp_live+0x354/0x11d0
[   68.010239][ T5333]  bpf_prog_test_run_xdp+0x525/0x970
[   68.010275][ T5333]  ? _kstrtol+0x41/0x90
[   68.010322][ T5333]  ? __rcu_read_unlock+0x4f/0x70
[   68.010349][ T5333]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   68.010387][ T5333]  bpf_prog_test_run+0x22a/0x390
[   68.010468][ T5333]  __sys_bpf+0x4c0/0x7c0
[   68.010501][ T5333]  __x64_sys_bpf+0x41/0x50
[   68.010550][ T5333]  x64_sys_call+0x28e1/0x3000
[   68.010581][ T5333]  do_syscall_64+0xd8/0x2c0
[   68.010619][ T5333]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.010641][ T5333] RIP: 0033:0x7f0c5e9ef749
[   68.010656][ T5333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   68.010774][ T5333] RSP: 002b:00007f0c5d44f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   68.010841][ T5333] RAX: ffffffffffffffda RBX: 00007f0c5ec45fa0 RCX: 00007f0c5e9ef749
[   68.010856][ T5333] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a
[   68.010869][ T5333] RBP: 00007f0c5d44f090 R08: 0000000000000000 R09: 0000000000000000
[   68.010881][ T5333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   68.010894][ T5333] R13: 00007f0c5ec46038 R14: 00007f0c5ec45fa0 R15: 00007fff00a544b8
[   68.010946][ T5333]  </TASK>
[   68.242630][ T5341] process 'syz.3.567' launched './file1' with NULL argv: empty string added
[   68.306263][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.500896][ T5378] loop3: detected capacity change from 0 to 1024
[   68.512398][ T5378] EXT4-fs: Ignoring removed orlov option
[   68.561663][ T5378] EXT4-fs (loop3): unable to read superblock
[   68.611233][ T5378] SELinux:  Context system_u:object_r:cpu_device_t:s0 is not valid (left unmapped).
[   68.764042][ T1038] kernel write not supported for file /sg0 (pid: 1038 comm: kworker/1:2)
[   68.809677][ T5407] Driver unsupported XDP return value 0 on prog  (id 488) dev N/A, expect packet loss!
[   69.229705][ T5428] __nla_validate_parse: 2 callbacks suppressed
[   69.229725][ T5428] netlink: 12 bytes leftover after parsing attributes in process `syz.3.594'.
[   69.253600][ T5430] tipc: Can't bind to reserved service type 1
[   69.259614][ T5428] pim6reg: entered allmulticast mode
[   69.279208][ T5428] pim6reg: left allmulticast mode
[   69.325756][ T5438] loop1: detected capacity change from 0 to 512
[   69.357573][ T5438] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.375155][ T5438] ext4 filesystem being mounted at /139/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   69.480261][ T5438] SELinux:  policydb version 576 does not match my version range 15-35
[   69.491775][ T5438] SELinux: failed to load policy
[   69.537916][ T5454] loop5: detected capacity change from 0 to 512
[   69.546037][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.573248][ T5454] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.646482][ T5463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.662519][ T4277] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.694135][ T5463] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.708525][ T5468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.604'.
[   69.732781][ T5463] netlink: 24 bytes leftover after parsing attributes in process `syz.6.605'.
[   69.741819][ T5463] netlink: 24 bytes leftover after parsing attributes in process `syz.6.605'.
[   70.094352][ T5497] netlink: 48 bytes leftover after parsing attributes in process `syz.1.615'.
[   70.984193][ T5528] loop3: detected capacity change from 0 to 1024
[   71.015831][ T5528] EXT4-fs: inline encryption not supported
[   71.059115][ T5528] EXT4-fs: Mount option(s) incompatible with ext3
[   71.141344][ T5528] loop3: detected capacity change from 0 to 512
[   71.173155][ T5528] EXT4-fs: inline encryption not supported
[   71.182217][   T29] kauditd_printk_skb: 440 callbacks suppressed
[   71.182234][   T29] audit: type=1400 audit(1766026934.840:3416): avc:  denied  { unmount } for  pid=5542 comm="syz.1.630" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   71.261026][ T5528] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.281029][   T29] audit: type=1400 audit(1766026934.940:3417): avc:  denied  { create } for  pid=5527 comm="syz.3.624" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1
[   71.426478][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.461725][   T29] audit: type=1400 audit(1766026934.990:3418): avc:  denied  { read write } for  pid=5547 comm="syz.4.632" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   71.485723][   T29] audit: type=1400 audit(1766026934.990:3419): avc:  denied  { open } for  pid=5547 comm="syz.4.632" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   71.509804][   T29] audit: type=1400 audit(1766026934.990:3420): avc:  denied  { map } for  pid=5547 comm="syz.4.632" path="socket:[13272]" dev="sockfs" ino=13272 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   71.533565][   T29] audit: type=1400 audit(1766026934.990:3421): avc:  denied  { read } for  pid=5547 comm="syz.4.632" path="socket:[13272]" dev="sockfs" ino=13272 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   71.557136][   T29] audit: type=1400 audit(1766026935.020:3422): avc:  denied  { create } for  pid=5547 comm="syz.4.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   71.576714][   T29] audit: type=1400 audit(1766026935.080:3423): avc:  denied  { create } for  pid=5553 comm="syz.5.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   71.596213][   T29] audit: type=1400 audit(1766026935.080:3424): avc:  denied  { setopt } for  pid=5553 comm="syz.5.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   71.616270][   T29] audit: type=1400 audit(1766026935.080:3425): avc:  denied  { write } for  pid=5553 comm="syz.5.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   71.667218][ T5564] serio: Serial port ptm0
[   71.886592][   T67] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.920641][ T5594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5594 comm=syz.3.644
[   71.935866][ T5594] vlan2: entered allmulticast mode
[   71.941124][ T5594] dummy0: entered allmulticast mode
[   71.975345][ T5604] netlink: 8 bytes leftover after parsing attributes in process `syz.6.647'.
[   71.986616][   T67] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.045596][   T67] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.059331][ T5614] loop5: detected capacity change from 0 to 512
[   72.067333][ T5610] netlink: 4 bytes leftover after parsing attributes in process `syz.6.649'.
[   72.072050][ T5614] EXT4-fs: inline encryption not supported
[   72.092267][ T5614] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   72.107710][ T5610] tipc: Resetting bearer <eth:veth0_macvtap>
[   72.128314][ T5610] tipc: Disabling bearer <eth:veth0_macvtap>
[   72.135563][ T5614] EXT4-fs (loop5): 1 truncate cleaned up
[   72.142561][ T5614] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.157135][ T5622] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[   72.185216][   T67] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.202042][ T5622] bridge0: entered promiscuous mode
[   72.207599][ T5622] macsec1: entered promiscuous mode
[   72.213797][ T5622] bridge0: port 3(macsec1) entered blocking state
[   72.220407][ T5622] bridge0: port 3(macsec1) entered disabled state
[   72.227471][ T5622] macsec1: entered allmulticast mode
[   72.232811][ T5622] bridge0: entered allmulticast mode
[   72.238671][ T5622] macsec1: left allmulticast mode
[   72.243796][ T5622] bridge0: left allmulticast mode
[   72.254591][ T5622] bridge0: left promiscuous mode
[   72.299891][   T67] bridge_slave_1: left allmulticast mode
[   72.305715][   T67] bridge_slave_1: left promiscuous mode
[   72.311547][   T67] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.347172][   T67] bridge_slave_0: left allmulticast mode
[   72.352918][   T67] bridge_slave_0: left promiscuous mode
[   72.358568][   T67] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.486510][ T5641] loop6: detected capacity change from 0 to 512
[   72.642400][ T5641] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.656432][ T5641] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   72.667727][ T5641] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.680634][   T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   72.700952][   T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   72.712252][   T67] bond0 (unregistering): Released all slaves
[   72.724985][ T5654] netlink: 'syz.3.662': attribute type 3 has an invalid length.
[   72.732734][ T5654] netlink: 132 bytes leftover after parsing attributes in process `syz.3.662'.
[   72.749382][ T5585] chnl_net:caif_netlink_parms(): no params data found
[   72.795539][   T67] hsr_slave_0: left promiscuous mode
[   72.811522][   T67] hsr_slave_1: left promiscuous mode
[   72.821527][ T5656] FAULT_INJECTION: forcing a failure.
[   72.821527][ T5656] name failslab, interval 1, probability 0, space 0, times 0
[   72.834224][ T5656] CPU: 0 UID: 0 PID: 5656 Comm: syz.4.663 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   72.834375][ T5656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   72.834388][ T5656] Call Trace:
[   72.834395][ T5656]  <TASK>
[   72.834404][ T5656]  __dump_stack+0x1d/0x30
[   72.834437][ T5656]  dump_stack_lvl+0xe8/0x140
[   72.834467][ T5656]  dump_stack+0x15/0x1b
[   72.834487][ T5656]  should_fail_ex+0x265/0x280
[   72.834511][ T5656]  should_failslab+0x8c/0xb0
[   72.834537][ T5656]  kmem_cache_alloc_bulk_noprof+0x63/0x3f0
[   72.834609][ T5656]  ? bpf_test_run_xdp_live+0x78f/0x11d0
[   72.834643][ T5656]  bpf_test_run_xdp_live+0xdd3/0x11d0
[   72.834680][ T5656]  ? __pfx_autoremove_wake_function+0x10/0x10
[   72.834717][ T5656]  ? bpf_test_run_xdp_live+0x354/0x11d0
[   72.834767][ T5656]  bpf_prog_test_run_xdp+0x525/0x970
[   72.834826][ T5656]  ? _kstrtol+0x41/0x90
[   72.834849][ T5656]  ? __rcu_read_unlock+0x4f/0x70
[   72.834876][ T5656]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   72.834988][ T5656]  bpf_prog_test_run+0x22a/0x390
[   72.835035][ T5656]  __sys_bpf+0x4c0/0x7c0
[   72.835062][ T5656]  __x64_sys_bpf+0x41/0x50
[   72.835097][ T5656]  x64_sys_call+0x28e1/0x3000
[   72.835199][ T5656]  do_syscall_64+0xd8/0x2c0
[   72.835240][ T5656]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.835262][ T5656] RIP: 0033:0x7fc832a8f749
[   72.835277][ T5656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   72.835358][ T5656] RSP: 002b:00007fc8314ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   72.835376][ T5656] RAX: ffffffffffffffda RBX: 00007fc832ce5fa0 RCX: 00007fc832a8f749
[   72.835389][ T5656] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a
[   72.835401][ T5656] RBP: 00007fc8314ef090 R08: 0000000000000000 R09: 0000000000000000
[   72.835423][ T5656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   72.835437][ T5656] R13: 00007fc832ce6038 R14: 00007fc832ce5fa0 R15: 00007ffe4a3b5d08
[   72.835497][ T5656]  </TASK>
[   73.052436][ T5658] netlink: 36 bytes leftover after parsing attributes in process `syz.3.664'.
[   73.061951][ T4277] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.071349][   T67] veth1_macvtap: left promiscuous mode
[   73.090266][   T67] veth0_macvtap: left promiscuous mode
[   73.101566][   T67] veth1_vlan: left promiscuous mode
[   73.110436][   T67] veth0_vlan: left promiscuous mode
[   73.219975][   T67] team0 (unregistering): Port device team_slave_1 removed
[   73.230442][   T67] team0 (unregistering): Port device team_slave_0 removed
[   73.271976][   T67] team0 (unregistering): Port device dummy0 removed
[   73.352220][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.359327][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.393387][ T5679] loop6: detected capacity change from 0 to 256
[   73.401866][ T5585] bridge_slave_0: entered allmulticast mode
[   73.415573][ T5679] netlink: 8 bytes leftover after parsing attributes in process `syz.6.670'.
[   73.437334][ T5585] bridge_slave_0: entered promiscuous mode
[   73.449341][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.456509][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.487146][ T5688] loop4: detected capacity change from 0 to 512
[   73.494840][ T5688] ext4: Unknown parameter 'hash'
[   73.522064][ T5585] bridge_slave_1: entered allmulticast mode
[   73.528858][ T5585] bridge_slave_1: entered promiscuous mode
[   73.533292][ T5686] program syz.6.670 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   73.574420][ T5695] FAULT_INJECTION: forcing a failure.
[   73.574420][ T5695] name failslab, interval 1, probability 0, space 0, times 0
[   73.587124][ T5695] CPU: 1 UID: 0 PID: 5695 Comm: syz.4.675 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   73.587232][ T5695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   73.587253][ T5695] Call Trace:
[   73.587288][ T5695]  <TASK>
[   73.587347][ T5695]  __dump_stack+0x1d/0x30
[   73.587377][ T5695]  dump_stack_lvl+0xe8/0x140
[   73.587401][ T5695]  dump_stack+0x15/0x1b
[   73.587426][ T5695]  should_fail_ex+0x265/0x280
[   73.587462][ T5695]  should_failslab+0x8c/0xb0
[   73.587490][ T5695]  kmem_cache_alloc_bulk_noprof+0x63/0x3f0
[   73.587521][ T5695]  ? bpf_test_run_xdp_live+0x686/0x11d0
[   73.587554][ T5695]  bpf_test_run_xdp_live+0xdd3/0x11d0
[   73.587604][ T5695]  ? __pfx_autoremove_wake_function+0x10/0x10
[   73.587646][ T5695]  ? bpf_test_run_xdp_live+0x354/0x11d0
[   73.587719][ T5695]  bpf_prog_test_run_xdp+0x525/0x970
[   73.587750][ T5695]  ? _kstrtol+0x41/0x90
[   73.587770][ T5695]  ? __rcu_read_unlock+0x4f/0x70
[   73.587794][ T5695]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   73.587886][ T5695]  bpf_prog_test_run+0x22a/0x390
[   73.587917][ T5695]  __sys_bpf+0x4c0/0x7c0
[   73.587944][ T5695]  __x64_sys_bpf+0x41/0x50
[   73.588043][ T5695]  x64_sys_call+0x28e1/0x3000
[   73.588122][ T5695]  do_syscall_64+0xd8/0x2c0
[   73.588225][ T5695]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   73.588253][ T5695] RIP: 0033:0x7fc832a8f749
[   73.588269][ T5695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   73.588287][ T5695] RSP: 002b:00007fc8314ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   73.588305][ T5695] RAX: ffffffffffffffda RBX: 00007fc832ce5fa0 RCX: 00007fc832a8f749
[   73.588320][ T5695] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a
[   73.588419][ T5695] RBP: 00007fc8314ef090 R08: 0000000000000000 R09: 0000000000000000
[   73.588434][ T5695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   73.588450][ T5695] R13: 00007fc832ce6038 R14: 00007fc832ce5fa0 R15: 00007ffe4a3b5d08
[   73.588472][ T5695]  </TASK>
[   74.898749][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.910285][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.018406][ T5585] team0: Port device team_slave_0 added
[   75.037523][ T5585] team0: Port device team_slave_1 added
[   75.160163][ T5716] __nla_validate_parse: 1 callbacks suppressed
[   75.160178][ T5716] netlink: 8 bytes leftover after parsing attributes in process `syz.6.680'.
[   75.202358][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.209332][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   75.235294][ T5585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.298329][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.305456][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   75.331416][ T5585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.369974][ T5585] hsr_slave_0: entered promiscuous mode
[   75.378750][ T5585] hsr_slave_1: entered promiscuous mode
[   75.539027][ T5585] netdevsim netdevsim7 netdevsim0: renamed from eth0
[   75.556103][ T5585] netdevsim netdevsim7 netdevsim1: renamed from eth1
[   75.568150][ T5585] netdevsim netdevsim7 netdevsim2: renamed from eth2
[   75.586601][ T5585] netdevsim netdevsim7 netdevsim3: renamed from eth3
[   75.668224][ T5744] FAULT_INJECTION: forcing a failure.
[   75.668224][ T5744] name failslab, interval 1, probability 0, space 0, times 0
[   75.681531][ T5744] CPU: 0 UID: 0 PID: 5744 Comm: syz.3.686 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   75.681558][ T5744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   75.681571][ T5744] Call Trace:
[   75.681578][ T5744]  <TASK>
[   75.681587][ T5744]  __dump_stack+0x1d/0x30
[   75.681676][ T5744]  dump_stack_lvl+0xe8/0x140
[   75.681701][ T5744]  dump_stack+0x15/0x1b
[   75.681722][ T5744]  should_fail_ex+0x265/0x280
[   75.681749][ T5744]  should_failslab+0x8c/0xb0
[   75.681822][ T5744]  kmem_cache_alloc_bulk_noprof+0x63/0x3f0
[   75.681853][ T5744]  ? bpf_test_run_xdp_live+0x78f/0x11d0
[   75.681889][ T5744]  bpf_test_run_xdp_live+0xdd3/0x11d0
[   75.681981][ T5744]  ? __pfx_autoremove_wake_function+0x10/0x10
[   75.682017][ T5744]  ? bpf_test_run_xdp_live+0x354/0x11d0
[   75.682069][ T5744]  bpf_prog_test_run_xdp+0x525/0x970
[   75.682146][ T5744]  ? _kstrtol+0x41/0x90
[   75.682166][ T5744]  ? __rcu_read_unlock+0x4f/0x70
[   75.682189][ T5744]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   75.682321][ T5744]  bpf_prog_test_run+0x22a/0x390
[   75.682349][ T5744]  __sys_bpf+0x4c0/0x7c0
[   75.682378][ T5744]  __x64_sys_bpf+0x41/0x50
[   75.682466][ T5744]  x64_sys_call+0x28e1/0x3000
[   75.682491][ T5744]  do_syscall_64+0xd8/0x2c0
[   75.682580][ T5744]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.682603][ T5744] RIP: 0033:0x7fb3ad13f749
[   75.682620][ T5744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   75.682639][ T5744] RSP: 002b:00007fb3abb9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   75.682693][ T5744] RAX: ffffffffffffffda RBX: 00007fb3ad395fa0 RCX: 00007fb3ad13f749
[   75.682707][ T5744] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a
[   75.682720][ T5744] RBP: 00007fb3abb9f090 R08: 0000000000000000 R09: 0000000000000000
[   75.682811][ T5744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   75.682824][ T5744] R13: 00007fb3ad396038 R14: 00007fb3ad395fa0 R15: 00007ffc123bd1b8
[   75.682842][ T5744]  </TASK>
[   75.964913][ T5752] netlink: 16 bytes leftover after parsing attributes in process `+}[@'.
[   75.969782][ T5755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.688'.
[   75.985448][ T5755] loop4: detected capacity change from 0 to 128
[   75.994703][ T5755] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   76.007132][ T5755] ext4 filesystem being mounted at /140/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   76.041164][ T5755] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.4.688: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1
[   76.061765][ T5755] EXT4-fs (loop4): Remounting filesystem read-only
[   76.084996][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.098650][ T5585] 8021q: adding VLAN 0 to HW filter on device team0
[   76.134615][ T5585] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   76.145116][ T5585] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   76.329944][ T5802] tipc: Started in network mode
[   76.334909][ T5802] tipc: Node identity ac14141b, cluster identity 4711
[   76.341794][ T5802] tipc: New replicast peer: 255.255.255.255
[   76.347971][ T5802] tipc: Enabled bearer <udp:syz2>, priority 10
[   76.366782][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.372483][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   76.373912][ T5820] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.392649][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.399749][ T5820] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.494606][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.696482][   T29] kauditd_printk_skb: 165 callbacks suppressed
[   76.696496][   T29] audit: type=1400 audit(1766026940.360:3591): avc:  denied  { mounton } for  pid=5842 comm="syz.6.697" path="/syzcgroup/unified/syz6" dev="cgroup2" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[   76.729355][ T5844] tmpfs: Unknown parameter 'mpoh'
[   76.755946][ T5843] netlink: 'wg1': attribute type 1 has an invalid length.
[   76.810447][ T5843] 8021q: adding VLAN 0 to HW filter on device bond1
[   76.950980][   T29] audit: type=1400 audit(1766026940.610:3592): avc:  denied  { create } for  pid=5864 comm="syz.6.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   76.987593][   T29] audit: type=1400 audit(1766026940.640:3593): avc:  denied  { ioctl } for  pid=5864 comm="syz.6.700" path="socket:[14212]" dev="sockfs" ino=14212 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   77.075199][ T5585] veth0_vlan: entered promiscuous mode
[   77.076024][   T29] audit: type=1400 audit(1766026940.730:3594): avc:  denied  { mount } for  pid=5870 comm="syz.3.702" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   77.104824][ T5585] veth1_vlan: entered promiscuous mode
[   77.123333][   T29] audit: type=1400 audit(1766026940.780:3595): avc:  denied  { cpu } for  pid=5875 comm="syz.5.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   77.130615][ T5585] veth0_macvtap: entered promiscuous mode
[   77.159428][ T5585] veth1_macvtap: entered promiscuous mode
[   77.195982][   T29] audit: type=1326 audit(1766026940.860:3596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5881 comm="syz.6.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b04d5f749 code=0x7ffc0000
[   77.225874][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.227947][   T29] audit: type=1326 audit(1766026940.890:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5881 comm="syz.6.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b04d5f749 code=0x7ffc0000
[   77.236808][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.256508][   T29] audit: type=1326 audit(1766026940.890:3598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5881 comm="syz.6.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b04d5f749 code=0x7ffc0000
[   77.256542][   T29] audit: type=1326 audit(1766026940.890:3599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5881 comm="syz.6.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b04d5f749 code=0x7ffc0000
[   77.256571][   T29] audit: type=1326 audit(1766026940.890:3600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5881 comm="syz.6.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b04d5f749 code=0x7ffc0000
[   77.316738][ T5814] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.392284][ T5890] netlink: 36 bytes leftover after parsing attributes in process `,&#^%'.
[   77.400917][ T5890] netlink: 36 bytes leftover after parsing attributes in process `,&#^%'.
[   77.417680][ T2969] tipc: Node number set to 2886997019
[   77.425871][ T5814] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.437146][ T5890] netlink: 36 bytes leftover after parsing attributes in process `,&#^%'.
[   77.447238][ T5814] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.474658][ T5814] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.503373][ T5901] loop3: detected capacity change from 0 to 512
[   77.512708][ T5903] Falling back ldisc for ttyS3.
[   77.572363][ T5901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.591834][ T5901] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   77.791196][ T5925] netlink: 48 bytes leftover after parsing attributes in process `syz.7.720'.
[   77.872774][ T5912] loop5: detected capacity change from 0 to 512
[   77.907356][ T5912] EXT4-fs: Ignoring removed nomblk_io_submit option
[   77.923198][ T5931] loop7: detected capacity change from 0 to 512
[   77.935752][ T5912] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.715: iget: bad extended attribute block 262144
[   77.957988][ T5931] ext2: Unknown parameter 'obj_type'
[   77.974227][ T5912] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.715: couldn't read orphan inode 15 (err -117)
[   78.168560][ T5912] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.306946][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.395177][ T4277] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.408913][ T5945] loop3: detected capacity change from 0 to 512
[   78.437175][ T5945] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   78.609609][ T5945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   78.671824][ T5945] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   78.723354][ T5945] EXT4-fs error (device loop3): __ext4_remount:6789: comm syz.3.725: Abort forced by user
[   78.741833][ T5945] EXT4-fs (loop3): Remounting filesystem read-only
[   78.748392][ T5945] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000d40000.
[   78.955768][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   79.059746][ T5963] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   79.065659][ T5962] loop5: detected capacity change from 0 to 8192
[   79.127903][ T5976] loop3: detected capacity change from 0 to 512
[   79.145156][ T5976] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   79.160849][ T5976] EXT4-fs (loop3): mount failed
[   79.419662][ T5984] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   79.574789][ T5996] loop4: detected capacity change from 0 to 512
[   79.592507][ T5996] EXT4-fs: Ignoring removed oldalloc option
[   79.611656][ T5996] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   79.642796][ T5996] EXT4-fs (loop4): 1 truncate cleaned up
[   79.657615][ T5996] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.158850][ T5989] loop7: detected capacity change from 0 to 512
[   80.171338][ T5989] EXT4-fs: Ignoring removed nomblk_io_submit option
[   80.179420][ T5989] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.736: iget: bad extended attribute block 262144
[   80.196448][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.212000][ T5989] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.736: couldn't read orphan inode 15 (err -117)
[   80.237322][ T5989] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.271269][ T6010] loop4: detected capacity change from 0 to 1024
[   80.302547][ T6010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   80.349274][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.433847][ T5585] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.528423][ T6026] loop3: detected capacity change from 0 to 512
[   80.540870][ T6026] FAT-fs (loop3): Directory bread(block 199916) failed
[   80.548861][ T6026] FAT-fs (loop3): Directory bread(block 199917) failed
[   80.558925][ T6026] FAT-fs (loop3): Directory bread(block 199918) failed
[   80.601638][ T6026] FAT-fs (loop3): Directory bread(block 199919) failed
[   80.630003][ T6026] FAT-fs (loop3): Directory bread(block 199920) failed
[   80.653357][ T6032] SELinux: security_context_str_to_sid (root) failed with errno=-22
[   80.676879][ T6026] FAT-fs (loop3): Directory bread(block 199921) failed
[   80.696919][ T6040] FAULT_INJECTION: forcing a failure.
[   80.696919][ T6040] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   80.710238][ T6040] CPU: 1 UID: 0 PID: 6040 Comm: syz.7.752 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   80.710264][ T6040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   80.710276][ T6040] Call Trace:
[   80.710282][ T6040]  <TASK>
[   80.710290][ T6040]  __dump_stack+0x1d/0x30
[   80.710315][ T6040]  dump_stack_lvl+0xe8/0x140
[   80.710336][ T6040]  dump_stack+0x15/0x1b
[   80.710356][ T6040]  should_fail_ex+0x265/0x280
[   80.710381][ T6040]  should_fail_alloc_page+0xf2/0x100
[   80.710404][ T6040]  __alloc_frozen_pages_noprof+0x109/0x360
[   80.710434][ T6040]  alloc_pages_mpol+0xb3/0x260
[   80.710465][ T6040]  vma_alloc_folio_noprof+0x1aa/0x300
[   80.710495][ T6040]  handle_mm_fault+0xc31/0x2c60
[   80.710526][ T6040]  ? _raw_spin_lock+0x52/0xa0
[   80.710548][ T6040]  ? __pte_offset_map_lock+0x1d9/0x240
[   80.710580][ T6040]  __get_user_pages+0x1024/0x1ed0
[   80.710621][ T6040]  get_user_pages_remote+0x1d5/0x6c0
[   80.710655][ T6040]  ? __rcu_read_unlock+0x4f/0x70
[   80.710679][ T6040]  __update_ref_ctr+0x8e/0x3a0
[   80.710697][ T6040]  uprobe_mmap+0x2de/0xd30
[   80.710725][ T6040]  ? vms_complete_munmap_vmas+0x3e6/0x440
[   80.710759][ T6040]  __mmap_complete+0x1ed/0x230
[   80.710789][ T6040]  mmap_region+0xb86/0x1410
[   80.710832][ T6040]  do_mmap+0x9b3/0xbe0
[   80.710864][ T6040]  vm_mmap_pgoff+0x17a/0x2e0
[   80.710890][ T6040]  ksys_mmap_pgoff+0x268/0x310
[   80.710919][ T6040]  x64_sys_call+0x16bb/0x3000
[   80.710943][ T6040]  do_syscall_64+0xd8/0x2c0
[   80.710976][ T6040]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.710998][ T6040] RIP: 0033:0x7f7ded7af749
[   80.711014][ T6040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   80.711032][ T6040] RSP: 002b:00007f7dec1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[   80.711053][ T6040] RAX: ffffffffffffffda RBX: 00007f7deda06090 RCX: 00007f7ded7af749
[   80.711067][ T6040] RDX: 0000000000000003 RSI: 0000000000004000 RDI: 0000200000ffc000
[   80.711081][ T6040] RBP: 00007f7dec1f6090 R08: 0000000000000009 R09: 0000000000000000
[   80.711094][ T6040] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001
[   80.711107][ T6040] R13: 00007f7deda06128 R14: 00007f7deda06090 R15: 00007fff901fd708
[   80.711125][ T6040]  </TASK>
[   80.711136][ T6040] ref_ctr increment failed for inode: 0x5f offset: 0x4 ref_ctr_offset: 0x2 of mm: 0xffff88811bdfec00
[   80.722357][ T6026] FAT-fs (loop3): Directory bread(block 199922) failed
[   80.956998][ T6026] FAT-fs (loop3): Directory bread(block 199923) failed
[   81.123945][ T6047] EXT4-fs: Ignoring removed nomblk_io_submit option
[   81.202519][ T6047] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.755: iget: bad extended attribute block 262144
[   81.241568][ T6047] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.755: couldn't read orphan inode 15 (err -117)
[   81.288489][ T6047] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.589663][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.706852][ T6078] can0: slcan on ptm0.
[   81.739113][   T29] kauditd_printk_skb: 143 callbacks suppressed
[   81.739165][   T29] audit: type=1400 audit(1766026945.400:3743): avc:  denied  { mount } for  pid=6077 comm="syz.5.766" name="/" dev="loop5" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[   81.959167][ T6097] tipc: New replicast peer: 255.255.255.255
[   81.965370][ T6097] tipc: Enabled bearer <udp:syz2>, priority 10
[   82.041614][ T6077] can0 (unregistered): slcan off ptm0.
[   82.112501][   T29] audit: type=1400 audit(1766026945.780:3744): avc:  denied  { unmount } for  pid=4277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[   82.155055][ T6101] EXT4-fs: Ignoring removed nomblk_io_submit option
[   82.184862][ T6101] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.773: iget: bad extended attribute block 262144
[   82.206622][ T6101] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.773: couldn't read orphan inode 15 (err -117)
[   82.219566][ T6101] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.315056][   T29] audit: type=1400 audit(1766026945.980:3745): avc:  denied  { accept } for  pid=6109 comm="syz.5.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   82.347770][ T5585] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.368876][   T29] audit: type=1400 audit(1766026946.030:3746): avc:  denied  { create } for  pid=6114 comm="syz.5.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   82.394697][   T29] audit: type=1326 audit(1766026946.060:3747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6114 comm="syz.5.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5e9ef749 code=0x7ffc0000
[   82.418903][   T29] audit: type=1326 audit(1766026946.060:3748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6114 comm="syz.5.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f0c5e9ef749 code=0x7ffc0000
[   82.442298][   T29] audit: type=1326 audit(1766026946.060:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6114 comm="syz.5.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0c5e9ef783 code=0x7ffc0000
[   82.465482][   T29] audit: type=1326 audit(1766026946.060:3750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6114 comm="syz.5.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0c5e9ef783 code=0x7ffc0000
[   82.488649][   T29] audit: type=1326 audit(1766026946.060:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6114 comm="syz.5.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5e9ef749 code=0x7ffc0000
[   82.512204][   T29] audit: type=1326 audit(1766026946.060:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6114 comm="syz.5.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5e9ef749 code=0x7ffc0000
[   83.495619][ T6145] set_capacity_and_notify: 4 callbacks suppressed
[   83.495639][ T6145] loop5: detected capacity change from 0 to 512
[   83.510532][ T6145] EXT4-fs: Ignoring removed nomblk_io_submit option
[   83.518703][ T6145] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.787: iget: bad extended attribute block 262144
[   83.532876][ T6145] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.787: couldn't read orphan inode 15 (err -117)
[   83.545770][ T6145] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   83.720783][ T4277] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.881044][ T6157] loop3: detected capacity change from 0 to 512
[   83.887958][ T6157] EXT4-fs: Ignoring removed i_version option
[   83.894020][ T6157] EXT4-fs: Ignoring removed bh option
[   83.965228][ T6157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.978223][ T6157] ext4 filesystem being mounted at /175/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   84.410326][ T6173] 9pnet_fd: p9_fd_create_tcp (6173): problem connecting socket to 127.0.0.1
[   84.532308][ T6175] loop7: detected capacity change from 0 to 164
[   84.624942][ T6183] loop4: detected capacity change from 0 to 1024
[   84.918397][ T6183] 9p: Bad value for 'rfdno'
[   84.945058][ T6187] loop5: detected capacity change from 0 to 512
[   85.244844][ T6192] loop6: detected capacity change from 0 to 128
[   85.359605][ T6199] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   85.489640][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.653312][ T6204] loop6: detected capacity change from 0 to 512
[   85.674040][ T6204] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.808: corrupted in-inode xattr: invalid ea_ino
[   85.757184][ T6204] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.808: couldn't read orphan inode 15 (err -117)
[   85.812055][ T6204] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   85.835141][ T6299] loop3: detected capacity change from 0 to 512
[   85.859320][ T6299] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.811: bad orphan inode 11862016
[   85.904940][ T4346] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.917085][ T6299] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   85.961506][ T6299] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   86.021479][ T6317] loop7: detected capacity change from 0 to 1024
[   86.028488][ T6317] EXT4-fs: Ignoring removed oldalloc option
[   86.034585][ T6317] EXT4-fs: Ignoring removed bh option
[   86.043331][ T6317] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   86.095950][ T5585] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.215305][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   86.277194][ T6328] loop7: detected capacity change from 0 to 1024
[   86.310642][ T3510] IPVS: starting estimator thread 0...
[   86.486245][ T6328] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   86.513396][ T6340] IPVS: using max 2256 ests per chain, 112800 per kthread
[   86.576959][ T6328] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   86.650348][ T6328] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.815: bg 0: block 112: padding at end of block bitmap is not set
[   86.743297][ T6328] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 117
[   86.755790][ T6328] EXT4-fs (loop7): This should not happen!! Data will be lost
[   86.755790][ T6328] 
[   87.027113][ T5585] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   87.091471][   T29] kauditd_printk_skb: 71 callbacks suppressed
[   87.091486][   T29] audit: type=1400 audit(1766026950.740:3824): avc:  denied  { execute } for  pid=6357 comm="syz.6.823" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=16158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[   87.160497][ T6358] EXT4-fs (loop6): orphan cleanup on readonly fs
[   87.167517][ T6358] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.823: bg 0: block 248: padding at end of block bitmap is not set
[   87.198744][ T6358] Quota error (device loop6): write_blk: dquota write failed
[   87.206268][ T6358] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[   87.216295][ T6358] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.823: Failed to acquire dquot type 1
[   87.218046][ T6362] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.240238][ T6362] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   87.251417][ T6358] EXT4-fs (loop6): 1 truncate cleaned up
[   87.257928][ T6358] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   87.285530][   T29] audit: type=1400 audit(1766026950.940:3825): avc:  denied  { create } for  pid=6365 comm="syz.5.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   87.305077][   T29] audit: type=1400 audit(1766026950.940:3826): avc:  denied  { bind } for  pid=6365 comm="syz.5.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   87.341298][ T6358] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended
[   87.384842][ T6358] EXT4-fs warning (device loop6): read_mmp_block:111: Error -117 while reading MMP block 0
[   87.479808][ T4346] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.682890][   T29] audit: type=1326 audit(1766026951.350:3827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6373 comm="syz.6.827" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b04d5f749 code=0x0
[   87.841594][   T29] audit: type=1400 audit(1766026951.510:3828): avc:  denied  { append } for  pid=6373 comm="syz.6.827" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   87.965429][ T5780] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   88.000177][ T5780] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2048 with error 28
[   88.012766][ T5780] EXT4-fs (loop3): This should not happen!! Data will be lost
[   88.012766][ T5780] 
[   88.022576][ T5780] EXT4-fs (loop3): Total free blocks count 0
[   88.028693][ T5780] EXT4-fs (loop3): Free/Dirty block details
[   88.031682][   T29] audit: type=1400 audit(1766026951.530:3829): avc:  denied  { setattr } for  pid=6361 comm="syz.3.824" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   88.034638][ T5780] EXT4-fs (loop3): free_blocks=65280
[   88.062400][ T5780] EXT4-fs (loop3): dirty_blocks=8193
[   88.067685][ T5780] EXT4-fs (loop3): Block reservation details
[   88.073692][ T5780] EXT4-fs (loop3): i_reserved_data_blocks=8193
[   88.096964][ T5780] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28
[   88.265268][ T6398] FAULT_INJECTION: forcing a failure.
[   88.265268][ T6398] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   88.278453][ T6398] CPU: 0 UID: 0 PID: 6398 Comm: syz.5.831 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   88.278481][ T6398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   88.278506][ T6398] Call Trace:
[   88.278514][ T6398]  <TASK>
[   88.278523][ T6398]  __dump_stack+0x1d/0x30
[   88.278550][ T6398]  dump_stack_lvl+0xe8/0x140
[   88.278577][ T6398]  dump_stack+0x15/0x1b
[   88.278601][ T6398]  should_fail_ex+0x265/0x280
[   88.278705][ T6398]  should_fail+0xb/0x20
[   88.278729][ T6398]  should_fail_usercopy+0x1a/0x20
[   88.278757][ T6398]  _copy_from_iter+0xcf/0xe70
[   88.278828][ T6398]  ? __alloc_skb+0x3bb/0x4d0
[   88.278851][ T6398]  ? __alloc_skb+0x24d/0x4d0
[   88.278876][ T6398]  netlink_sendmsg+0x471/0x6b0
[   88.278913][ T6398]  ? __pfx_netlink_sendmsg+0x10/0x10
[   88.278971][ T6398]  __sock_sendmsg+0x145/0x180
[   88.278992][ T6398]  __sys_sendto+0x268/0x330
[   88.279102][ T6398]  __x64_sys_sendto+0x76/0x90
[   88.279141][ T6398]  x64_sys_call+0x29a7/0x3000
[   88.279183][ T6398]  do_syscall_64+0xd8/0x2c0
[   88.279220][ T6398]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.279293][ T6398] RIP: 0033:0x7f0c5e9ef749
[   88.279387][ T6398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   88.279406][ T6398] RSP: 002b:00007f0c5d44f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[   88.279426][ T6398] RAX: ffffffffffffffda RBX: 00007f0c5ec45fa0 RCX: 00007f0c5e9ef749
[   88.279443][ T6398] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000004
[   88.279458][ T6398] RBP: 00007f0c5d44f090 R08: 0000000000000000 R09: 0000000000000000
[   88.279473][ T6398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   88.279562][ T6398] R13: 00007f0c5ec46038 R14: 00007f0c5ec45fa0 R15: 00007fff00a544b8
[   88.279581][ T6398]  </TASK>
[   88.491653][ T6399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   88.518632][ T6399] sch_tbf: burst 32855 is lower than device lo mtu (11337746) !
[   88.594982][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.604128][   T29] audit: type=1400 audit(1766026952.260:3830): avc:  denied  { setopt } for  pid=6404 comm="syz.5.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   88.623741][   T29] audit: type=1400 audit(1766026952.260:3831): avc:  denied  { ioctl } for  pid=6404 comm="syz.5.832" path="socket:[17193]" dev="sockfs" ino=17193 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   89.507824][ T6432] set_capacity_and_notify: 3 callbacks suppressed
[   89.507842][ T6432] loop5: detected capacity change from 0 to 128
[   90.246320][ T6447] loop5: detected capacity change from 0 to 32768
[   90.342118][ T6447]  loop5: p1 p2 p3 < > p4 < p5 p6 >
[   90.358865][ T6452] loop6: detected capacity change from 0 to 2048
[   90.363663][ T6447] loop5: p1 start 2820096 is beyond EOD, truncated
[   90.371868][ T6447] loop5: p2 size 83886080 extends beyond EOD, truncated
[   90.392785][ T6447] loop5: p5 start 2820096 is beyond EOD, truncated
[   90.399357][ T6447] loop5: p6 size 83886080 extends beyond EOD, truncated
[   90.407540][ T6452] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[   90.443299][ T6459] loop3: detected capacity change from 0 to 128
[   90.642779][ T6465] loop5: detected capacity change from 0 to 1024
[   90.652883][ T6452] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   90.701559][ T6465] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   90.712527][ T6465] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   90.720631][ T6452] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1338 with error 28
[   90.734614][ T6452] EXT4-fs (loop6): This should not happen!! Data will be lost
[   90.734614][ T6452] 
[   90.744277][ T6452] EXT4-fs (loop6): Total free blocks count 0
[   90.750321][ T6452] EXT4-fs (loop6): Free/Dirty block details
[   90.752074][ T6465] JBD2: no valid journal superblock found
[   90.756237][ T6452] EXT4-fs (loop6): free_blocks=2415919104
[   90.762052][ T6465] EXT4-fs (loop5): Could not load journal inode
[   90.767691][ T6452] EXT4-fs (loop6): dirty_blocks=1344
[   90.779237][ T6452] EXT4-fs (loop6): Block reservation details
[   90.785250][ T6452] EXT4-fs (loop6): i_reserved_data_blocks=84
[   90.895137][ T6482] loop5: detected capacity change from 0 to 512
[   90.903460][ T6483] loop4: detected capacity change from 0 to 128
[   90.984841][ T6482] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.857: bad orphan inode 11862016
[   91.002015][ T6482] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   91.015717][ T6482] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   91.015799][ T5806] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[   91.046752][ T6493] can0: slcan on ptm0.
[   91.121821][ T6492] can0 (unregistered): slcan off ptm0.
[   91.258021][ T4277] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   91.448722][ T6520] netlink: 'syz.7.869': attribute type 29 has an invalid length.
[   91.542029][ T6526] loop5: detected capacity change from 0 to 128
[   91.600831][ T6529] can0: slcan on ptm0.
[   91.741962][ T6528] can0 (unregistered): slcan off ptm0.
[   91.759596][ T6515] syz.5.868 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[   91.770606][ T6515] CPU: 1 UID: 0 PID: 6515 Comm: syz.5.868 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   91.770699][ T6515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   91.770712][ T6515] Call Trace:
[   91.770720][ T6515]  <TASK>
[   91.770728][ T6515]  __dump_stack+0x1d/0x30
[   91.770755][ T6515]  dump_stack_lvl+0xe8/0x140
[   91.770817][ T6515]  dump_stack+0x15/0x1b
[   91.770841][ T6515]  dump_header+0x81/0x240
[   91.770867][ T6515]  oom_kill_process+0x295/0x350
[   91.770942][ T6515]  out_of_memory+0x97b/0xb80
[   91.771022][ T6515]  try_charge_memcg+0x610/0xa10
[   91.771056][ T6515]  charge_memcg+0x51/0xc0
[   91.771094][ T6515]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[   91.771180][ T6515]  __read_swap_cache_async+0x17b/0x2d0
[   91.771268][ T6515]  swap_cluster_readahead+0x262/0x3c0
[   91.771312][ T6515]  swapin_readahead+0xde/0x820
[   91.771383][ T6515]  ? mod_memcg_lruvec_state+0x1a1/0x280
[   91.771411][ T6515]  ? lruvec_stat_mod_folio+0xd6/0x120
[   91.771449][ T6515]  ? __rcu_read_unlock+0x4f/0x70
[   91.771476][ T6515]  ? swap_cache_get_folio+0x277/0x280
[   91.771537][ T6515]  do_swap_page+0x2b4/0x21e0
[   91.771583][ T6515]  ? __pfx_default_wake_function+0x10/0x10
[   91.771619][ T6515]  handle_mm_fault+0x9d8/0x2c60
[   91.771665][ T6515]  do_user_addr_fault+0x630/0x1080
[   91.771761][ T6515]  exc_page_fault+0x62/0xa0
[   91.771796][ T6515]  asm_exc_page_fault+0x26/0x30
[   91.771821][ T6515] RIP: 0033:0x7f0c5e8c59ec
[   91.771840][ T6515] Code: 66 0f 1f 44 00 00 69 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00
[   91.771881][ T6515] RSP: 002b:00007fff00a54620 EFLAGS: 00010206
[   91.771907][ T6515] RAX: 0000000000000000 RBX: 00007f0c5ec45fa0 RCX: 0000000000000000
[   91.771922][ T6515] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055557fc16808
[   91.771997][ T6515] RBP: 00007f0c5ec47da0 R08: 0000000000000000 R09: 7fffffffffffffff
[   91.772010][ T6515] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000167da
[   91.772023][ T6515] R13: 00007f0c5ec46180 R14: ffffffffffffffff R15: 00007fff00a54730
[   91.772045][ T6515]  </TASK>
[   91.979193][ T6515] memory: usage 283280kB, limit 307200kB, failcnt 3955
[   91.986060][ T6515] memory+swap: usage 280352kB, limit 9007199254740988kB, failcnt 0
[   91.993977][ T6515] kmem: usage 271452kB, limit 9007199254740988kB, failcnt 0
[   92.001254][ T6515] Memory cgroup stats for /syz5:
[   92.001585][ T6515] cache 4096
[   92.009734][ T6515] rss 0
[   92.012590][ T6515] shmem 0
[   92.015517][ T6515] mapped_file 0
[   92.019005][ T6515] dirty 0
[   92.022044][ T6515] writeback 4096
[   92.025734][ T6515] workingset_refault_anon 7
[   92.030227][ T6515] workingset_refault_file 0
[   92.034747][ T6515] swap 462848
[   92.038144][ T6515] swapcached 8192
[   92.041806][ T6515] pgpgin 102798
[   92.045259][ T6515] pgpgout 102795
[   92.048794][ T6515] pgfault 94923
[   92.052355][ T6515] pgmajfault 3
[   92.055723][ T6515] inactive_anon 8192
[   92.059629][ T6515] active_anon 0
[   92.063196][ T6515] inactive_file 4096
[   92.067081][ T6515] active_file 0
[   92.070526][ T6515] unevictable 0
[   92.074034][ T6515] hierarchical_memory_limit 314572800
[   92.079402][ T6515] hierarchical_memsw_limit 9223372036854771712
[   92.085585][ T6515] total_cache 4096
[   92.089375][ T6515] total_rss 0
[   92.092673][ T6515] total_shmem 0
[   92.096117][ T6515] total_mapped_file 0
[   92.100091][ T6515] total_dirty 0
[   92.103564][ T6515] total_writeback 4096
[   92.107618][ T6515] total_workingset_refault_anon 7
[   92.112666][ T6515] total_workingset_refault_file 0
[   92.117684][ T6515] total_swap 462848
[   92.121498][ T6515] total_swapcached 8192
[   92.125648][ T6515] total_pgpgin 102798
[   92.129628][ T6515] total_pgpgout 102795
[   92.133930][ T6515] total_pgfault 94923
[   92.137910][ T6515] total_pgmajfault 3
[   92.141900][ T6515] total_inactive_anon 8192
[   92.146305][ T6515] total_active_anon 0
[   92.150278][ T6515] total_inactive_file 4096
[   92.154709][ T6515] total_active_file 0
[   92.158681][ T6515] total_unevictable 0
[   92.162765][ T6515] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.868,pid=6515,uid=0
[   92.177475][ T6515] Memory cgroup out of memory: Killed process 6515 (syz.5.868) total-vm:94100kB, anon-rss:1188kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000
[   92.307651][ T6541] loop5: detected capacity change from 0 to 128
[   92.453784][ T6539] netlink: 4 bytes leftover after parsing attributes in process `syz.7.877'.
[   92.469060][   T29] kauditd_printk_skb: 13 callbacks suppressed
[   92.469078][   T29] audit: type=1326 audit(1766026956.130:3845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6537 comm="syz.5.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5e9ef749 code=0x7ffc0000
[   92.498674][   T29] audit: type=1326 audit(1766026956.130:3846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6537 comm="syz.5.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5e9ef749 code=0x7ffc0000
[   92.703064][ T6527] loop6: detected capacity change from 0 to 512
[   92.739990][ T6527] EXT4-fs: Ignoring removed nomblk_io_submit option
[   92.770701][ T6527] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.872: iget: bad extended attribute block 262144
[   92.801503][   T29] audit: type=1326 audit(1766026956.190:3847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6537 comm="syz.5.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5e9ef749 code=0x7ffc0000
[   92.824872][   T29] audit: type=1326 audit(1766026956.190:3849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6537 comm="syz.5.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5e9ef749 code=0x7ffc0000
[   92.848231][   T29] audit: type=1326 audit(1766026956.190:3848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6537 comm="syz.5.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f0c5e9ef749 code=0x7ffc0000
[   92.871548][   T29] audit: type=1326 audit(1766026956.240:3850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6537 comm="syz.5.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5e9ef749 code=0x7ffc0000
[   92.894873][   T29] audit: type=1326 audit(1766026956.240:3851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6537 comm="syz.5.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5e9ef749 code=0x7ffc0000
[   92.918326][   T29] audit: type=1326 audit(1766026956.250:3852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6537 comm="syz.5.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5e9ef749 code=0x7ffc0000
[   92.923073][ T6527] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.872: couldn't read orphan inode 15 (err -117)
[   92.941685][   T29] audit: type=1326 audit(1766026956.250:3853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6537 comm="syz.5.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0c5e9ef783 code=0x7ffc0000
[   92.976703][   T29] audit: type=1326 audit(1766026956.310:3854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6537 comm="syz.5.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5e9ef749 code=0x7ffc0000
[   92.977382][ T6527] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   93.261121][ T6560] EXT4-fs: Ignoring removed orlov option
[   93.283042][ T4346] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.301844][ T6557] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   93.306902][ T6560] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled
[   93.324308][ T6560] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   93.432049][ T6568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   93.440511][ T6568] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   93.989577][ T5585] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.525709][ T6605] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.894: bad orphan inode 11862016
[   94.572341][ T6605] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   94.595751][ T6605] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   94.803594][ T4346] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   94.915767][ T6620] netlink: 36 bytes leftover after parsing attributes in process `syz.6.898'.
[   94.925047][ T6622] netlink: 36 bytes leftover after parsing attributes in process `syz.6.898'.
[   94.944740][ T6620] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   94.952417][ T6620] batadv_slave_0: entered promiscuous mode
[   94.960280][ T6620] netlink: 8 bytes leftover after parsing attributes in process `syz.6.898'.
[   95.012108][ T6622] netlink: 8 bytes leftover after parsing attributes in process `syz.6.898'.
[   95.040178][ T6627] set_capacity_and_notify: 2 callbacks suppressed
[   95.040196][ T6627] loop7: detected capacity change from 0 to 128
[   95.156061][ T6635] loop5: detected capacity change from 0 to 512
[   95.172945][ T6635] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   95.223407][ T6635] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   95.239496][ T6642] loop3: detected capacity change from 0 to 512
[   95.246347][ T6642] EXT4-fs: quotafile must be on filesystem root
[   95.279917][ T6627] syz.7.900: attempt to access beyond end of device
[   95.279917][ T6627] loop7: rw=2049, sector=169, nr_sectors = 8 limit=128
[   95.293465][ T6627] syz.7.900: attempt to access beyond end of device
[   95.293465][ T6627] loop7: rw=2049, sector=185, nr_sectors = 16 limit=128
[   95.308443][ T6638] tipc: New replicast peer: 255.255.255.255
[   95.311173][ T6627] syz.7.900: attempt to access beyond end of device
[   95.311173][ T6627] loop7: rw=2049, sector=209, nr_sectors = 8 limit=128
[   95.314652][ T6638] tipc: Enabled bearer <udp:syz2>, priority 10
[   95.330726][ T6627] syz.7.900: attempt to access beyond end of device
[   95.330726][ T6627] loop7: rw=2049, sector=225, nr_sectors = 8 limit=128
[   95.334654][ T6642] veth0: entered promiscuous mode
[   95.353028][ T6627] syz.7.900: attempt to access beyond end of device
[   95.353028][ T6627] loop7: rw=2049, sector=241, nr_sectors = 8 limit=128
[   95.374236][ T6627] syz.7.900: attempt to access beyond end of device
[   95.374236][ T6627] loop7: rw=2049, sector=257, nr_sectors = 8 limit=128
[   95.396410][ T6627] syz.7.900: attempt to access beyond end of device
[   95.396410][ T6627] loop7: rw=2049, sector=273, nr_sectors = 8 limit=128
[   95.411060][ T6627] syz.7.900: attempt to access beyond end of device
[   95.411060][ T6627] loop7: rw=2049, sector=289, nr_sectors = 8 limit=128
[   95.426563][ T6627] syz.7.900: attempt to access beyond end of device
[   95.426563][ T6627] loop7: rw=2049, sector=305, nr_sectors = 8 limit=128
[   95.440659][ T6627] syz.7.900: attempt to access beyond end of device
[   95.440659][ T6627] loop7: rw=2049, sector=321, nr_sectors = 8 limit=128
[   95.467913][ T6642] veth0: left promiscuous mode
[   95.556781][ T6658] netlink: 'syz.4.912': attribute type 3 has an invalid length.
[   95.566834][ T6659] loop5: detected capacity change from 0 to 512
[   95.603102][ T6663] loop4: detected capacity change from 0 to 512
[   95.616969][ T6659] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.908: bg 0: block 248: padding at end of block bitmap is not set
[   95.633175][ T6659] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.908: Failed to acquire dquot type 1
[   95.645410][ T6659] EXT4-fs (loop5): 1 truncate cleaned up
[   95.651877][ T6659] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.663069][ T6663] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.914: bad orphan inode 11862016
[   95.740723][ T6671] loop7: detected capacity change from 0 to 512
[   95.751627][ T6663] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.834794][ T6671] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   96.120605][ T6664] netlink: 'syz.7.913': attribute type 1 has an invalid length.
[   96.136540][ T6664] 8021q: adding VLAN 0 to HW filter on device bond1
[   96.164322][ T6664] 8021q: adding VLAN 0 to HW filter on device bond1
[   96.171735][ T6664] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   96.184055][ T6664] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   96.215427][ T6671] bond2: entered promiscuous mode
[   96.221251][ T6671] 8021q: adding VLAN 0 to HW filter on device bond2
[   96.232605][ T6671] bond1: (slave bond2): Enslaving as an active interface with a down link
[   96.255845][ T6671] macvlan2: entered promiscuous mode
[   96.261178][ T6671] macvlan2: entered allmulticast mode
[   96.267308][ T6671] bond1: entered promiscuous mode
[   96.273076][ T6671] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   96.282011][ T6671] bond1: left promiscuous mode
[   96.289516][ T6685] netlink: 12 bytes leftover after parsing attributes in process `syz.6.917'.
[   96.311673][ T6664] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.913: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[   96.328489][ T6664] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=15
[   96.340251][ T6664] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.913: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[   96.360324][ T6664] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=15
[   96.369586][ T6664] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.913: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[   96.387829][ T6664] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=15
[   96.400063][ T6689] loop6: detected capacity change from 0 to 512
[   96.407593][ T6664] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.913: bg 0: block 18: invalid block bitmap
[   96.423363][ T6664] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.913: Failed to acquire dquot type 1
[   96.444133][ T6689] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   96.456103][ T6664] syz.7.913 (6664) used greatest stack depth: 9072 bytes left
[   96.467170][ T5815] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.525212][ T5815] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.547798][ T6704] loop3: detected capacity change from 0 to 512
[   96.563836][ T6706] loop7: detected capacity change from 0 to 512
[   96.563907][ T6704] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.925: bad orphan inode 11862016
[   96.583901][ T6704] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   96.584503][ T5815] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.595991][ T6706] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   96.616146][ T6706] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #2: comm syz.7.924: corrupted inode contents
[   96.646789][ T6706] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #2: comm syz.7.924: mark_inode_dirty error
[   96.658427][ T6706] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #2: comm syz.7.924: corrupted inode contents
[   96.672037][ T6706] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.924: mark_inode_dirty error
[   96.686099][ T5815] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.759489][ T6724] loop7: detected capacity change from 0 to 128
[   96.771191][ T5815] bridge_slave_1: left allmulticast mode
[   96.776946][ T5815] bridge_slave_1: left promiscuous mode
[   96.782655][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.784614][ T6724] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   96.823366][ T5815] bridge_slave_0: left allmulticast mode
[   96.829069][ T5815] bridge_slave_0: left promiscuous mode
[   96.831117][ T6724] Invalid argument reading file caps for ./file0
[   96.834850][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.923301][ T5815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   96.933341][ T5815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   96.942928][ T5815] bond0 (unregistering): Released all slaves
[   96.993716][ T5815] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   97.001255][ T5815] batman_adv: batadv0: Removing interface: batadv_slave_0
[   97.009251][ T5815] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   97.016839][ T5815] batman_adv: batadv0: Removing interface: batadv_slave_1
[   97.028511][ T5815] veth1_macvtap: left promiscuous mode
[   97.034197][ T5815] veth0_macvtap: left promiscuous mode
[   97.039817][ T5815] veth1_vlan: left promiscuous mode
[   97.045488][ T5815] veth0_vlan: left promiscuous mode
[   97.053735][ T6740] ISOFS: Unable to identify CD-ROM format.
[   97.128457][ T5815] team0 (unregistering): Port device team_slave_1 removed
[   97.139071][ T5815] team0 (unregistering): Port device team_slave_0 removed
[   97.169109][ T6741] EXT4-fs: Ignoring removed nomblk_io_submit option
[   97.177304][ T6741] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.930: iget: bad extended attribute block 262144
[   97.190647][ T6741] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.930: couldn't read orphan inode 15 (err -117)
[   97.218780][ T6745] netlink: 4 bytes leftover after parsing attributes in process `syz.7.932'.
[   97.238216][ T4346] EXT4-fs error (device loop6): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size
[   97.248885][ T6745] netlink: 4 bytes leftover after parsing attributes in process `syz.7.932'.
[   97.250966][ T4346] EXT4-fs (loop6): Remounting filesystem read-only
[   97.304126][ T6747] atomic_op ffff88811ac7dd28 conn xmit_atomic 0000000000000000
[   97.317277][ T3320] EXT4-fs unmount: 15 callbacks suppressed
[   97.317291][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.357354][ T6709] chnl_net:caif_netlink_parms(): no params data found
[   97.402185][ T6709] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.409337][ T6709] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.416673][ T6709] bridge_slave_0: entered allmulticast mode
[   97.423864][ T6709] bridge_slave_0: entered promiscuous mode
[   97.430611][ T6759] netlink: 96 bytes leftover after parsing attributes in process `syz.7.936'.
[   97.440016][ T6709] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.447236][ T6709] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.460051][ T6709] bridge_slave_1: entered allmulticast mode
[   97.468274][ T6709] bridge_slave_1: entered promiscuous mode
[   97.477340][ T6762] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.937: bad orphan inode 11862016
[   97.489933][ T6762] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   97.502629][ T6762] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.523114][ T6709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   97.533136][ T6696] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.542468][ T5780] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   97.553278][ T5780] __quota_error: 217 callbacks suppressed
[   97.553294][ T5780] Quota error (device loop6): write_blk: dquota write failed
[   97.566585][ T5780] Quota error (device loop6): free_dqentry: Can't write quota data block 5
[   97.581023][ T5780] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   97.581639][ T6709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   97.591718][ T5780] Quota error (device loop6): write_blk: dquota write failed
[   97.608018][ T5780] Quota error (device loop6): free_dqentry: Can't write quota data block 5
[   97.617720][ T5585] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   97.650481][ T6709] team0: Port device team_slave_0 added
[   97.663299][ T6767] netlink: 'syz.7.938': attribute type 30 has an invalid length.
[   97.673478][ T6709] team0: Port device team_slave_1 added
[   97.718357][ T5815] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.742562][ T6709] batman_adv: batadv0: Adding interface: batadv_slave_0
[   97.749578][ T6709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   97.775810][ T6709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.789605][ T6709] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.796628][ T6709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   97.822691][ T6709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   97.857017][ T5815] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.889405][ T6709] hsr_slave_0: entered promiscuous mode
[   97.930235][ T6779] ext4: Unknown parameter 'dont_hash'
[   98.003591][ T6709] hsr_slave_1: entered promiscuous mode
[   98.025602][ T6709] debugfs: 'hsr0' already exists in 'hsr'
[   98.031371][ T6709] Cannot create hsr debugfs directory
[   98.039466][ T5815] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.078752][ T5815] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.201774][ T5815] bridge_slave_1: left allmulticast mode
[   98.207472][ T5815] bridge_slave_1: left promiscuous mode
[   98.213154][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.222786][ T5815] bridge_slave_0: left allmulticast mode
[   98.228466][ T5815] bridge_slave_0: left promiscuous mode
[   98.234166][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.503935][ T5815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   98.530318][ T6788] EXT4-fs (loop7): orphan cleanup on readonly fs
[   98.536866][ T5815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   98.547230][ T6788] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.942: bad orphan inode 13
[   98.547795][ T5815] bond0 (unregistering): Released all slaves
[   98.566041][ T4277] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.578291][ T5815] bond1 (unregistering): Released all slaves
[   98.598271][ T6709] netdevsim netdevsim8 netdevsim0: renamed from eth0
[   98.609788][ T6788] ext4_test_bit(bit=12, block=18) = 1
[   98.615329][ T6788] is_bad_inode(inode)=0
[   98.619509][ T6788] NEXT_ORPHAN(inode)=2130706432
[   98.624488][ T6788] max_ino=32
[   98.627685][ T6788] i_nlink=1
[   98.634909][ T6788] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   98.649530][ T6788] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended
[   98.695079][ T6709] netdevsim netdevsim8 netdevsim1: renamed from eth1
[   98.718024][ T5815] tipc: Disabling bearer <udp:syz2>
[   98.723315][ T5815] tipc: Left network mode
[   98.737732][ T6709] netdevsim netdevsim8 netdevsim2: renamed from eth2
[   98.767082][ T5815] hsr_slave_0: left promiscuous mode
[   98.772872][ T5815] hsr_slave_1: left promiscuous mode
[   98.795787][ T5815] batman_adv: batadv0: Removing interface: batadv_slave_0
[   98.822311][ T5815] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.829786][ T5815] batman_adv: batadv0: Removing interface: batadv_slave_1
[   98.837505][ T6788] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[   98.847376][ T6794] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.942: bg 0: block 248: padding at end of block bitmap is not set
[   98.863834][ T5815] veth1_vlan: left promiscuous mode
[   98.869105][ T5815] veth0_vlan: left promiscuous mode
[   98.872427][ T6794] Quota error (device loop7): write_blk: dquota write failed
[   98.881728][ T6794] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota
[   98.891677][ T6794] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.942: Failed to acquire dquot type 1
[   98.941054][ T5585] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.968205][ T6792] EXT4-fs: Ignoring removed nomblk_io_submit option
[   99.000427][ T6792] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.943: iget: bad extended attribute block 262144
[   99.014417][ T6792] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.943: couldn't read orphan inode 15 (err -117)
[   99.030300][ T6792] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.052677][ T6807] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.947: bad orphan inode 11862016
[   99.066978][ T6807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   99.079545][ T6807] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   99.079909][ T6709] netdevsim netdevsim8 netdevsim3: renamed from eth3
[   99.099386][ T6805] netlink: 96 bytes leftover after parsing attributes in process `syz.7.946'.
[   99.137881][ T6772] chnl_net:caif_netlink_parms(): no params data found
[   99.196081][ T6814] EXT4-fs: Ignoring removed mblk_io_submit option
[   99.213752][ T6814] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   99.227145][ T3678] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   99.237588][ T6814] EXT4-fs (loop7): revision level too high, forcing read-only mode
[   99.245604][ T6814] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[   99.252331][ T4277] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.253969][ T6814] System zones: 0-1, 15-15, 18-18, 34-34
[   99.269180][ T6814] EXT4-fs (loop7): orphan cleanup on readonly fs
[   99.278926][ T6814] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #4: comm syz.7.948: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[   99.296932][ T6814] EXT4-fs error (device loop7): ext4_quota_enable:7180: comm syz.7.948: Bad quota inode: 4, type: 1
[   99.307963][ T6814] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   99.308440][ T6772] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.322642][ T6814] EXT4-fs (loop7): Cannot turn on quotas: error -117
[   99.329998][ T6772] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.344246][ T6814] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   99.345412][ T6772] bridge_slave_0: entered allmulticast mode
[   99.363357][ T6772] bridge_slave_0: entered promiscuous mode
[   99.370696][ T6814] EXT4-fs (loop7): shut down requested (1)
[   99.377726][ T6826] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop7 ino=16
[   99.387998][ T6826] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop7 ino=16
[   99.397165][   T29] audit: type=1400 audit(1766026963.070:4068): avc:  denied  { read } for  pid=6812 comm="syz.7.948" name="file2" dev="loop7" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[   99.412432][ T6826] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop7 ino=16
[   99.420110][   T29] audit: type=1326 audit(1766026963.070:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6827 comm="syz.5.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5e9ef749 code=0x7ffc0000
[   99.451880][   T29] audit: type=1326 audit(1766026963.070:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6827 comm="syz.5.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f0c5e9ef749 code=0x7ffc0000
[   99.475282][   T29] audit: type=1326 audit(1766026963.070:4071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6827 comm="syz.5.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5e9ef749 code=0x7ffc0000
[   99.504364][ T6772] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.511735][ T6772] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.519283][ T5585] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.528810][ T6772] bridge_slave_1: entered allmulticast mode
[   99.536432][ T6772] bridge_slave_1: entered promiscuous mode
[   99.572759][ T6709] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.579314][ T4381] Process accounting resumed
[   99.611088][ T6772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.624000][ T6709] 8021q: adding VLAN 0 to HW filter on device team0
[   99.631605][ T6845] netlink: 96 bytes leftover after parsing attributes in process `syz.5.956'.
[   99.651897][ T6772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.672146][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.679328][ T5789] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.708053][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.715171][ T5812] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.742544][ T6852] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[   99.764129][ T6852] bond1 (unregistering): Released all slaves
[   99.780297][ T6772] team0: Port device team_slave_0 added
[   99.795796][ T6772] team0: Port device team_slave_1 added
[   99.819305][ T6772] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.826478][ T6772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.852653][ T6772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.869899][ T6772] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.876939][ T6772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.903166][ T6772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.975230][ T6772] hsr_slave_0: entered promiscuous mode
[   99.981315][ T6772] hsr_slave_1: entered promiscuous mode
[   99.988224][ T6772] debugfs: 'hsr0' already exists in 'hsr'
[   99.994005][ T6772] Cannot create hsr debugfs directory
[  100.135358][ T6880] netlink: 4 bytes leftover after parsing attributes in process `syz.5.964'.
[  100.173207][ T6709] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.239036][ T6890] set_capacity_and_notify: 8 callbacks suppressed
[  100.239055][ T6890] loop5: detected capacity change from 0 to 512
[  100.256734][ T6890] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.271238][ T6890] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.304412][ T6772] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  100.313812][ T6772] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  100.325377][ T6772] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  100.343446][ T6855] chnl_net:caif_netlink_parms(): no params data found
[  100.354792][ T6772] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  100.363456][ T4277] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.399246][ T6903] netlink: 60 bytes leftover after parsing attributes in process `syz.7.967'.
[  100.419973][ T6903] netlink: 60 bytes leftover after parsing attributes in process `syz.7.967'.
[  100.447719][ T6855] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.454919][ T6855] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.462652][ T6855] bridge_slave_0: entered allmulticast mode
[  100.469823][ T6855] bridge_slave_0: entered promiscuous mode
[  100.481543][ T6855] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.488686][ T6855] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.495926][ T6855] bridge_slave_1: entered allmulticast mode
[  100.502539][ T6855] bridge_slave_1: entered promiscuous mode
[  100.543296][ T6855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  100.563778][ T6855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.620321][ T6709] veth0_vlan: entered promiscuous mode
[  100.627760][ T6855] team0: Port device team_slave_0 added
[  100.646889][ T6709] veth1_vlan: entered promiscuous mode
[  100.657001][ T6855] team0: Port device team_slave_1 added
[  100.676467][ T6855] batman_adv: batadv0: Adding interface: batadv_slave_0
[  100.683572][ T6855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  100.709770][ T6855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  100.722041][ T6855] batman_adv: batadv0: Adding interface: batadv_slave_1
[  100.728998][ T6855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  100.755019][ T6855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  100.780069][ T6772] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.789289][ T6709] veth0_macvtap: entered promiscuous mode
[  100.796778][ T6709] veth1_macvtap: entered promiscuous mode
[  100.828827][ T6772] 8021q: adding VLAN 0 to HW filter on device team0
[  100.839141][ T6855] hsr_slave_0: entered promiscuous mode
[  100.839676][ T6925] netlink: 12 bytes leftover after parsing attributes in process `syz.5.971'.
[  100.845586][ T6855] hsr_slave_1: entered promiscuous mode
[  100.853661][ T6925] netlink: 12 bytes leftover after parsing attributes in process `syz.5.971'.
[  100.868665][ T6855] debugfs: 'hsr0' already exists in 'hsr'
[  100.874462][ T6855] Cannot create hsr debugfs directory
[  100.884051][ T6709] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.892604][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.899699][ T5823] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.917299][ T6930] netlink: 24 bytes leftover after parsing attributes in process `syz.5.972'.
[  100.927632][ T6709] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.946035][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.953270][ T5823] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.001751][ T1599] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.012542][ T6933] SELinux:  Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped).
[  101.024083][ T6933] 9p: Bad value for 'wfdno'
[  101.029214][ T1599] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.047910][ T1599] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.065238][ T1599] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.189590][ T6772] 8021q: adding VLAN 0 to HW filter on device batadv0
[  101.191202][ T6946] netlink: 'syz.8.975': attribute type 6 has an invalid length.
[  101.292751][ T6855] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  101.304003][ T6855] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  101.313457][ T6855] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  101.323843][ T6855] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  101.528458][ T6979] infiniband syz!: set active
[  101.533259][ T6979] infiniband syz!: added team_slave_0
[  101.617478][ T6772] veth0_vlan: entered promiscuous mode
[  101.626442][ T6772] veth1_vlan: entered promiscuous mode
[  101.648936][ T6772] veth0_macvtap: entered promiscuous mode
[  101.658801][ T6772] veth1_macvtap: entered promiscuous mode
[  101.676491][ T6772] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.688537][ T6772] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.700318][ T1599] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.723114][ T1599] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.743494][ T1599] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.766788][ T6855] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.779154][ T6855] 8021q: adding VLAN 0 to HW filter on device team0
[  101.790871][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.791622][ T6979] RDS/IB: syz!: added
[  101.797997][ T5792] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.802033][ T6979] smc: adding ib device syz! with port count 1
[  101.815658][ T1599] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.815789][ T6979] smc:    ib device syz! port 1 has no pnetid
[  101.834353][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.841470][ T5815] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.870676][ T6996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  101.879453][ T6996] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  101.941574][ T6855] 8021q: adding VLAN 0 to HW filter on device batadv0
[  102.020364][ T6855] veth0_vlan: entered promiscuous mode
[  102.029162][ T6855] veth1_vlan: entered promiscuous mode
[  102.047567][ T6855] veth0_macvtap: entered promiscuous mode
[  102.055456][ T6855] veth1_macvtap: entered promiscuous mode
[  102.069055][ T6855] batman_adv: batadv0: Interface activated: batadv_slave_0
[  102.083193][ T6855] batman_adv: batadv0: Interface activated: batadv_slave_1
[  102.095855][ T5815] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.104903][ T5815] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.113920][ T5815] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.128591][ T5815] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.177043][ T6967] ==================================================================
[  102.185176][ T6967] BUG: KCSAN: data-race in __mod_timer / __mod_timer
[  102.191887][ T6967] 
[  102.194223][ T6967] write to 0xffff88811aa94470 of 8 bytes by task 3480 on cpu 1:
[  102.201857][ T6967]  __mod_timer+0x784/0x840
[  102.206289][ T6967]  mod_timer+0x1f/0x30
[  102.210368][ T6967]  wg_timers_any_authenticated_packet_traversal+0xd0/0x100
[  102.217594][ T6967]  wg_packet_tx_worker+0xeb/0x330
[  102.222635][ T6967]  process_scheduled_works+0x4ce/0x9d0
[  102.228100][ T6967]  worker_thread+0x582/0x770
[  102.232697][ T6967]  kthread+0x489/0x510
[  102.236790][ T6967]  ret_from_fork+0x149/0x290
[  102.241500][ T6967]  ret_from_fork_asm+0x1a/0x30
[  102.246293][ T6967] 
[  102.248612][ T6967] read to 0xffff88811aa94470 of 8 bytes by task 6967 on cpu 0:
[  102.256183][ T6967]  __mod_timer+0x69/0x840
[  102.260527][ T6967]  mod_timer+0x1f/0x30
[  102.264600][ T6967]  wg_timers_any_authenticated_packet_traversal+0xd0/0x100
[  102.271898][ T6967]  wg_packet_rx_poll+0x7f5/0x1160
[  102.276925][ T6967]  __napi_poll+0x5f/0x300
[  102.281279][ T6967]  napi_threaded_poll_loop+0x1ac/0x630
[  102.286782][ T6967]  napi_threaded_poll+0x164/0x200
[  102.291826][ T6967]  kthread+0x489/0x510
[  102.295936][ T6967]  ret_from_fork+0x149/0x290
[  102.300541][ T6967]  ret_from_fork_asm+0x1a/0x30
[  102.305328][ T6967] 
[  102.307662][ T6967] value changed: 0x00000000ffffb2ec -> 0x00000000ffffb2ef
[  102.314767][ T6967] 
[  102.317081][ T6967] Reported by Kernel Concurrency Sanitizer on:
[  102.323225][ T6967] CPU: 0 UID: 0 PID: 6967 Comm: napi/wg0-0 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  102.332942][ T6967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  102.342993][ T6967] ==================================================================
[  102.431498][ T7013] netlink: 24 bytes leftover after parsing attributes in process `syz.8.983'.
[  102.591193][   T29] kauditd_printk_skb: 207 callbacks suppressed
[  102.591208][   T29] audit: type=1326 audit(1766026966.250:4279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7010 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeb7c1f749 code=0x7ffc0000
[  102.621074][   T29] audit: type=1326 audit(1766026966.250:4280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7010 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeb7c1f749 code=0x7ffc0000