last executing test programs:

2m48.877056774s ago: executing program 1 (id=1140):
r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8)
syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x90, 0xfffe}}}}}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x8000000, 0x0, 0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
syz_emit_ethernet(0x7a, &(0x7f0000004540)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9a83c9", 0x4, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be}}}}}}}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @private2, @local, {[@hopopts={0x6c}]}}}}}, 0x0)

2m48.821930184s ago: executing program 1 (id=1141):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file6\x00', 0xa4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0x415}, 0x18)
unshare(0x64000600)
unshare(0x2040400)

2m47.430886574s ago: executing program 1 (id=1162):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)='%ps    \x00'}, 0x20)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x1008, 0x0, @loopback={0xff00000000000000, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)

2m47.384256085s ago: executing program 1 (id=1165):
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000540)='./file0\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xff, 0x19c, &(0x7f0000000200)="$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")
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000190001000100000000000a0080201400000400050000081e0e000900"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18)
r4 = socket$caif_stream(0x25, 0x1, 0x0)
sendmmsg$inet(r4, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000000)="ce", 0x1}], 0x1}}], 0x2, 0x810)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x18)
clock_getres(0x8, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10)
setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0xf00)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYBLOB="8721e726691b0f8b533033b59540795402ca505d85f8c5e71b60e50d06325d92ce0c19c958879caf92eb28d88d7a9ba7bbe398ce647be02d8a90b38426131119912c2a75fd90a827be1097623a80f64659f54715c0d9bf743f33236226aaacccab647419dbc6cc6f47e5de531b2d6a98392acc5a78799bdd2225f8a1ff76decf8e759741b169eb1ec175a8fff81610fc71a0ec2743e2f7f33c5362f4f37162c197", @ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r9}, 0x18)
r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x880)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)

2m47.203601886s ago: executing program 1 (id=1170):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c000280060001"], 0x24}}, 0x0)
pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="3a5ba7690176eed98ad1d3e342f923fcb8c20727e2a905b0ae70cf3c5c5dcd9aa971113e6d89c2d94753cab87ffe3018165ecb41eda21aa2cf7cb9b313a171b2f80183f48e4f797c7ea6e942c874e54641a2fc15", 0x54}], 0x1, 0x5, 0x8, 0x19)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000100)='sys_enter\x00', r4}, 0x18)
semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, 0x0)

2m46.904394898s ago: executing program 1 (id=1172):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file6\x00', 0xa4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0x415}, 0x18)
unshare(0x64000600)
unshare(0x2040400)

2m46.904193208s ago: executing program 32 (id=1172):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file6\x00', 0xa4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0x415}, 0x18)
unshare(0x64000600)
unshare(0x2040400)

2m8.808366804s ago: executing program 3 (id=1666):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x300001e, 0x62033, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x400000000000000, &(0x7f00008b5000/0x1000)=nil)

2m8.655116445s ago: executing program 3 (id=1668):
r0 = socket(0x29, 0x800, 0x80)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1f, &(0x7f00000000c0)=[{0x6}]})
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
dup3(r3, r0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0x3}}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x5, 0x8}, @ptr={0xd, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x0, 0x30, 0x6f, 0x0, 0x2e]}}, &(0x7f0000000180)=""/247, 0x53, 0xf7, 0x0, 0x2, 0x0, @void, @value}, 0x28)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'pim6reg\x00', <r4=>0x0})
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb010000000100000000009400000094000000080000000f00000005000006040000000d0000000c00000010000000060000000300000000000040100000b5060000000f000000d6e0000004000000070000930400000007000000ff7f0000020000001000000081000000040000001000000003000000b485ce27ed00000004000000f9ffffff060000000700000008000000010000001000000006000053a325186e53c5b2007f00000002000000002e302e00002e0085c6cfb8a5cd3d014a048e2614b589c8d96943535c05a6a0272e4c547296dcf7be24bbc5d41874025143490c75437383fe1fcfc550de7901aad8295b6fe2b65c5ff802cc7b2af2758efe44493614fb9b82dfe9a98bd8b9e83b22c34ad2aef5a37f5440dbe338ebcbf18907ac0afe10b3f2f60af9122c606478e12d6bac28dfb5653ea58ae7479082ac58b3dad4ccc14f0f520ab771f52e036caf0bddc2156115d4d563de4cfb7b32200856cf7c6ae9290e285d8a584d4b5349806efc7e"], &(0x7f0000000740)=""/221, 0xb4, 0xdd, 0x1, 0x3, 0x0, @void, @value}, 0x28)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="40000000000000ffec00000000000000000000004e0e7aa825af0c7b8e161a426eeb37fa29ea57f79ea8149fc085727a7ecb5c152d513ffdc213cc82d47b37bad31bfe9f5fddca4e530d28cf8b1c30cb503eee4952dc2b5f5dd1feb26a7b3c99752d87ecb07d06810268c4e9577e11d3b6505b28495fa72ecacd0040b0ca5caf4c6581c675ec09e6b022226a603e6dd540ea1532c68e4bdfb99fdec288e3064d3328b1ac6dcff05c7a575bc42a5bde7719ad99d08141b744f1d87ee2cfc3af0c6bd1849e762289fde7ef2303", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="00000000000000000500"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x200000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
finit_module(r6, &(0x7f0000000500)='\x00', 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r9}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r7}, 0x10)
r11 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r11, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e00, @empty}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)="08001efbb07d5a6e", 0x8}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x30}, 0x48d0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r12 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11ff0)
ioctl$BLKTRACESETUP(r12, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x4, 0x80400, 0x2004, 0x7fc})
ioctl$SG_BLKTRACETEARDOWN(r12, 0x1276, 0x0)
geteuid()

2m8.492124126s ago: executing program 3 (id=1669):
socket$nl_route(0x10, 0x3, 0x0)
socket(0x200000000000011, 0x2, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000400))
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
execve(0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32], 0x0, 0x80004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x50)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008082, &(0x7f00000001c0)={[{@nodioread_nolock}, {@nolazytime}, {@abort}, {@errors_continue}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@nomblk_io_submit}, {@nobarrier}]}, 0x0, 0x5e0, &(0x7f00000011c0)="$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")
r2 = syz_open_dev$hidraw(&(0x7f00000003c0), 0xa, 0x121040)
preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000280)=""/240, 0xf0}], 0x1, 0x33, 0x2)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)

2m7.958350387s ago: executing program 3 (id=1680):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x3000000, &(0x7f00000006c0), 0xfe, 0x512, &(0x7f0000000c40)="$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")
name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11fc1)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x4, 0x80400, 0x2004, 0x7fc})
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r2 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x5a2, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x0, 0x2]})
truncate(&(0x7f0000000100)='./file1\x00', 0x800003ffb)
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)

2m7.052760573s ago: executing program 3 (id=1691):
syz_init_net_socket$x25(0x9, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC], 0x48)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$rds(0x15, 0x5, 0x0)
unshare(0x26000600)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094)

2m6.846269814s ago: executing program 3 (id=1696):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r5, r2, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c)
syz_emit_ethernet(0xe, &(0x7f0000001980)={@remote, @empty, @void, {@generic={0x8884}}}, 0x0)

2m6.833464043s ago: executing program 33 (id=1696):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r5, r2, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c)
syz_emit_ethernet(0xe, &(0x7f0000001980)={@remote, @empty, @void, {@generic={0x8884}}}, 0x0)

1m56.10055718s ago: executing program 2 (id=1848):
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0)
r2 = gettid()
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={0x40, 0x3, 0x1}, 0x18)
process_vm_writev(r2, &(0x7f0000000440), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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")
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x541082, 0x0)
ioctl$TUNSETLINK(r5, 0x400454cc, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000080)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0xc0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC=r5, @ANYBLOB="5e20a48cc0d4e0016d113f34a8acf365866ea8f8aae368353e9fd582ae573b194c689e242e0c4422daf3708a0810970f65a61baf21769d56fd93793fe745f85b708467870c668a0b7d48759b7712fe19ac2113f08ec0", @ANYRESHEX=r7, @ANYRESHEX=r5], 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)

1m55.594206493s ago: executing program 2 (id=1854):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r0}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)

1m55.578055434s ago: executing program 2 (id=1855):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a00)=ANY=[@ANYRES32, @ANYBLOB="1c00000001000000", @ANYRES32, @ANYRES32], 0x20)

1m55.516278394s ago: executing program 2 (id=1856):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x800700, &(0x7f0000000600), 0x3, 0x46c, &(0x7f0000001380)="$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")
chdir(&(0x7f0000000400)='./file0\x00')
creat(&(0x7f0000000280)='./bus\x00', 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@deltaction={0x14, 0x31, 0x400, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40004004}, 0x24004010)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x26cd342616049460, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0xd)
listen(0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
syz_emit_ethernet(0x22, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaabbffac1e010100"/34], 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[], 0x36)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000ec850000006d000000181100"/28, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @void, @value}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES16=r6], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x6})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r7, 0xb, &(0x7f0000000500), 0x66)
r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = getpid()
kcmp(r8, r9, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
syz_init_net_socket$x25(0x9, 0x5, 0x0)

1m55.421543745s ago: executing program 2 (id=1857):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x4, @local, 0x4}, 0x1c)
connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x1, 0xfff, @rand_addr=' \x01\x00'}}}, 0x32)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000140000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1)

1m55.019962148s ago: executing program 2 (id=1863):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='kmem_cache_free\x00', r0}, 0x18)
socket$packet(0x11, 0xa, 0x300)
syz_emit_ethernet(0x32, &(0x7f00000003c0)=ANY=[], 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288476d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000340))
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20)
r5 = io_uring_setup(0x792b, &(0x7f0000000600)={0x0, 0x2002, 0x1, 0x0, 0x4b1})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x10)
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {<r7=>0xffffffffffffffff}}, './file0\x00'})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r7, 0x6612)
getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4)

1m55.006743288s ago: executing program 34 (id=1863):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='kmem_cache_free\x00', r0}, 0x18)
socket$packet(0x11, 0xa, 0x300)
syz_emit_ethernet(0x32, &(0x7f00000003c0)=ANY=[], 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288476d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000340))
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20)
r5 = io_uring_setup(0x792b, &(0x7f0000000600)={0x0, 0x2002, 0x1, 0x0, 0x4b1})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x10)
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {<r7=>0xffffffffffffffff}}, './file0\x00'})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r7, 0x6612)
getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4)

5.718398027s ago: executing program 7 (id=3033):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x18)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]})
setgroups(0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
socket$inet_smc(0x2b, 0x1, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10)
alarm(0xb3af)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
syz_clone3(&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0], 0x1}, 0x58)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x0, 0xfffffdfd, 0x8, 0x12, 0x300, &(0x7f0000000500)="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"})
ioctl$TCSETA(r6, 0x4b6a, &(0x7f0000000340)={0x200f, 0x0, 0x0, 0xfeff, 0x3, "72710080ab003f00"})
ioctl$GIO_SCRNMAP(r6, 0x4b40, &(0x7f0000000a40)=""/4096)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)={0xd0, 0x2, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x3, 0x2, 0x9, 0x81, 0x0]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xb}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8001}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0xf67000, 0x4, 0x5]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x200008d4}, 0x20040000)

5.504152419s ago: executing program 6 (id=3036):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
poll(0x0, 0x0, 0xd)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = memfd_secret(0x0)
fremovexattr(r1, &(0x7f0000000280)=@known='system.posix_acl_access\x00')
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x4, 0x70bd2e, 0x25dfdbff, {{}, {}, {0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0xc014}, 0x4014)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000008bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000680)={[{@init_itable_val}, {@sysvgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@mb_optimize_scan}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
pipe2$watch_queue(&(0x7f0000000340), 0x80)
socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYRES8], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='kfree\x00', r6}, 0x18)
add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="01004e6e7000ffeddf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x2000c810}, 0x800)

4.622538075s ago: executing program 6 (id=3040):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x21, @none, 0x0, 0x1}, 0xe)
setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000240)=0x5, 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=0x0, @ANYRES8=r0, @ANYRES16=r0, @ANYRES64=r1, @ANYRESHEX=r1, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)={'team0\x00', <r2=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
syz_io_uring_setup(0xbc3, &(0x7f00000009c0)={0x0, 0x1065, 0x80, 0x4, 0x1ab}, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1})
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008011}, 0x10)

4.510878596s ago: executing program 6 (id=3044):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x50010, &(0x7f0000000000), 0xfc, 0x59c, &(0x7f0000000bc0)="$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")
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e23, @private=0xa010100}, @in6={0xa, 0x4e22, 0x808e, @empty, 0xffffffb0}, @in={0x2, 0x4e21, @loopback}], 0x3c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = epoll_create1(0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r5, 0x0, 0x4}, 0x18)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a400020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r6}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x2c, r8, 0x1, 0x0, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4008000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
close(r0)
setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000440)="8d57fcd1a80f321782b08a1e75c6cb3163e87a4842f0d93e158c61bbcec4c56e3aa912edf042b829646572e6a9432e400a5b7d284121e426b53190bf3ec944a3ba6d074ca3b523e6ee96b4bcfab765b05267b2fbde11a62d52fc6bfb054197119157722cbe6a734b188fc4b974e80c0caa6e55a85e69300520909156b167dceae38bdbd5cf7e64c9524ec2d687357ccac5b3a95a5f92e733296e90f9458b6fc035638d076c5c39a84f24f43f052e30820855bfd5", 0xb4)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000400)={0xa})
epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0)

3.798393842s ago: executing program 7 (id=3056):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000", @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x617eceaf6a27851)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)

3.444465964s ago: executing program 6 (id=3057):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61125b00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad430100000000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

3.344076045s ago: executing program 6 (id=3058):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
signalfd(r0, &(0x7f0000000240)={[0x84]}, 0x8)
syz_usb_disconnect(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[], 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r1, @ANYRES32=r3, @ANYBLOB="0000000000000000b70800a5000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10e, &(0x7f0000000280)={[{@init_itable_val={'init_itable', 0x3d, 0x957}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@stripe={'stripe', 0x3d, 0x8}}, {@orlov}, {@errors_remount}]}, 0x4, 0x46b, &(0x7f00000009c0)="$eJzs289vFFUcAPDvTFt+IxXxBz/UKhobf2yhgHLwotHEgyYmXvBY20KQhRpaEyFE0Rg8GhITj8ajiX+BJ70Y9WTiVe+GhBguoqcxsztDd9fttsC2A93PJ9nueztv9r3vvHm7b+Z1AxhYY/mfJGJbRPweETua2fYCY82n69cuTP9z7cJ0Eln21l9Jo9zf1y5Ml0XL/bYWmfE0Iv00ib1d6p0/d/7UVL0+e7bITyycfm9i/tz5506enjoxe2L2zOTRo4cPHXzh+ckjfYnz3rytez6c27f7tbcvvzF97PI7P3+blPF3xNEnY702Ppllfa6uWttb0snwCnYYWsXGsGJ5N+TdNdIY/ztiKBY7b0e8+kmljQNWVVZYYvPFDFjHkqi6BUA1yi/6/Pq3fKzd7KN6V19qXgDlcV8vHs0tw5EWZUY6rm/7aSwijl3896v8EatzHwIAoM33+fzn2W7zvzQeaCl3T2xsrA2NFmspOyPivojYFRH3RzTKPhgRD3WrpMeCQOciyf/nP+mVW49uefn878Vibat9/lfO/mJ0qMhtb8R/JI2ozx5oHJOI8RjZePxkffZgjzp+eOW3z5fa1jr/yx95/eVcsGjHleGN7fvMTC1M3U7Mra5+HLFnuFv8yY2VgCQidkfEnlus4+TT3+xbatvy8fewknWmZWRfRzzV7P+L0RF/Kem9PjmxKT8fJvKz4EDXOn759dKbS9V/W/H3Qd7/W7qe/zfiH01a12vnb+bdm6P70h+fLXlNU7ul83/xhQ3F8wdTCwtnD0ZsSF5vNrr19cnFfct8WT6Pf3x/9/G/MxaPxN6IyE/ihyPikYh4tIjusYh4PCL29zgKP738xLu9jlD3+Df1eMf+yeOf6ej/0fYiHf2/mNgQna90Twyd+vG79ndcSfylvP8PN1LjxSuNz78ve8e1knbd7NkMAAAAd6s0IrZFktZupNO0Vmv+D/+u2JLW5+YXnjk+9/6ZmeZvBEZjJC3vdDXvB48k5f3P0Zb8ZEf+UHHf+IuhzY18bXquPlN18DDgtraO//KWb6359KffaMD614d1NOAuZfzD4DL+YXAZ/zC4uoz/zVW0A1h73b7/P6qgHcDa6xj/lv1ggLj+h8E1HFlSdRuAarR+//sggIExvzmW/5H8ekhkWZbdAc1YP4lI74hm9CeRrPIo2FZ1gDefqPqTCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoD/+CwAA//9lEuuH")
chdir(&(0x7f0000000140)='./file0\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000ede69b0d90e47d39c781e9767dc916f0000020ce8bd93dec4a37e5048b002b80cb63801fe136eb269aa81c1b2bb071a450ef9ba00aba7b635d4a03985eeb6bd4b0e780401f0f08f6669a11e1bbc330bddf62b35fcd641798bca17b89851cd495ac01881ef5eb47c1c6eec2", @ANYBLOB="c888713013a0aa51d041aeb4cfca4d8a75fe82fb50784b15e9510214913a29922fafd34594e6a2d22cb68fe8a892b4687f6f0000dcb14fe3e7c9484394f307e02e49136490cef4a88a978a1ca02bd14dddaf", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0}, 0x18)
lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)

3.227359006s ago: executing program 7 (id=3059):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}})
write$binfmt_aout(r0, 0x0, 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ff00"})
syz_open_pts(r0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
shmdt(0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000080000000c00000003000000"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009900"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000000)={[], [{@uid_gt}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}, 0x64, 0x52b, &(0x7f0000000f40)="$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")

3.100534937s ago: executing program 7 (id=3061):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ff00"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x12)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
shmdt(0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r3}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
write$binfmt_register(0xffffffffffffffff, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x40, 0x6}}, './file2\x00'})

2.969138558s ago: executing program 4 (id=3063):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x4ab}, 0x18)
mkdir(&(0x7f0000000040)='./file0\x00', 0x141)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

2.920275648s ago: executing program 4 (id=3065):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000280), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x6000)

2.59459029s ago: executing program 4 (id=3068):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x3, &(0x7f0000000200))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_emit_ethernet(0x7e, &(0x7f00000006c0)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x17, 0x4, 0x0, 0x5, 0x70, 0x67, 0x0, 0x5, 0x1, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x17, 0x20, [@private=0xa010102, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xb}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x1c, 0xd5, 0x3, 0x5, [{@remote, 0x84c}, {@remote, 0x3ff}, {@loopback, 0x39}]}, @end, @end, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0x48, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x17}]}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0x400, 0x7, 0x9, 0x1, 0x10001}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0)
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
r5 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0xfffffffc, 0x100, 0x0, 0x1dd}, &(0x7f0000000340)=<r6=>0x0, &(0x7f0000000300)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r5, 0x47f9, 0x0, 0x0, 0x0, 0x0)

2.577611681s ago: executing program 0 (id=3069):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000640)='f2fs_direct_IO_enter\x00', r3, 0x0, 0x800000000000000}, 0x18)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x123400, 0x0)
ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="03000000000000000000"], &(0x7f0000001b80)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffc, @void, @value}, 0xfffffffffffffedc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x0, 0x8, 0x300}})
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x1a3302, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000780)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r7}, 0x10)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r11=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r10, r11}, 0x40)
syz_emit_ethernet(0xfdef, &(0x7f0000001b80)=ANY=[@ANYBLOB="4500001400000000942523fc0c2c43cc6f00"], 0x0)
capset(&(0x7f0000000740)={0x19980330}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0xfffffffb})
ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000008000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="19"], 0x48)
socket$l2tp6(0xa, 0x2, 0x73)

2.356541752s ago: executing program 0 (id=3070):
r0 = socket$inet6(0xa, 0x3, 0x8)
sendmmsg$inet6(r0, 0x0, 0x0, 0x0)

2.274601483s ago: executing program 0 (id=3071):
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0)
r2 = gettid()
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={0x40, 0x3, 0x1}, 0x18)
process_vm_writev(r2, &(0x7f0000000440), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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")
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x541082, 0x0)
ioctl$TUNSETLINK(r5, 0x400454cc, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000080)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0xc0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC=r5, @ANYBLOB="5e20a48cc0d4e0016d113f34a8acf365866ea8f8aae368353e9fd582ae573b194c689e242e0c4422daf3708a0810970f65a61baf21769d56fd93793fe745f85b708467870c668a0b7d48759b7712fe19ac2113f08ec0", @ANYRESHEX=r7, @ANYRESHEX=r5], 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)

2.268015613s ago: executing program 5 (id=3072):
ptrace(0x10, 0x0)
ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000180)={0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10000)
io_uring_enter(0xffffffffffffffff, 0x6252, 0xc09b, 0x0, 0x0, 0x0)
mmap(&(0x7f0000a24000/0x3000)=nil, 0x3000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cc, &(0x7f0000000080))
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='sched_switch\x00', r1}, 0x18)
syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x100010, 0xffffffffffffffff, 0x0)
unshare(0x8020000)
msgget$private(0x0, 0x0)
r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r3}, 0x18)
r4 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x0)
r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu '], 0x5)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_clone(0x100400, 0x0, 0x0, 0x0, 0x0, 0x0)

2.240626143s ago: executing program 7 (id=3073):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0x12, 0x60d, 0x1d8, 0x202, 0x2d0, 0x2e8, 0x2e8, 0x2d0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @mcast1, [0x0, 0x0, 0xc0], [0x0, 0xff000000], 'veth1_to_batadv\x00', 'macsec0\x00'}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {'Yv'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
bind$unix(r5, &(0x7f0000000640)=@file={0x1, './cgroup\x00'}, 0x6e)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000f3, 0x8, 0x0, 0x0}}, 0x10)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
kexec_load(0x0, 0x0, &(0x7f0000000140), 0x0)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000240)=<r9=>0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0xff, 0x0, 0xcf, 0xfe, 0x0, 0x100, 0x34920, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x3}, 0x10000, 0x0, 0x2, 0x2, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, r9, 0xffffffffffffffff, r3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r2], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES64=r8], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r10, &(0x7f0000000780)="d2", 0xffe0, 0xc0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
r11 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r11, &(0x7f0000000080)='t', 0x1)
sendfile(r11, r3, 0x0, 0x3ffff)
sendfile(r11, r3, 0x0, 0x7ffff000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10)

1.602491168s ago: executing program 4 (id=3074):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000480)="36cde1d29f0748943ccff453767a947063994a8969f11c37c012ddfe1638afe6e62cb821ccb8178814e5f4895ef5379f93ec8a0de70524089e51b19381246a96cb8a761e9de7e4a3393a3d8198963e890eaa5ffaee6e04ec865325ad8744f5be0332d7ecd9378a2c8e6867970be448ef06b6423e6b71fa17fb9a6ac31732f6ff2723c87e9a186e3696c5dedbc568fcadb9188717c9", &(0x7f0000000540)=""/234}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f0000000000)={[{@acl}, {@barrier_val={'barrier', 0x3d, 0x1003}}, {@errors_remount}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x1, 0x4e4, &(0x7f0000002d40)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file6\x00', 0xa4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0x415}, 0x18)
unshare(0x64000600)
unshare(0x2040400)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000200))

1.577445688s ago: executing program 0 (id=3075):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x24044, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0)
getresuid(&(0x7f0000000000)=<r0=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xb00000, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@acl}], [{@subj_user={'subj_user', 0x3d, 'rootcontext'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@fowner_gt={'fowner>', 0xee01}}, {@uid_lt={'uid<', r0}}, {@fowner_lt={'fowner<', r0}}, {@euid_lt={'euid<', r0}}, {@audit}, {@subj_type}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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")
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x3)
socket(0x17, 0x1, 0x7ff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]})
semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
pipe(&(0x7f0000000280))
semop(0x0, &(0x7f00000000c0)=[{}, {}], 0x2)
semop(0x0, &(0x7f0000000180)=[{}, {}], 0x2)
semctl$IPC_RMID(0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0xfe, 0x7fff0000}]})
close_range(r2, r2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r4}, 0x10)
mq_unlink(0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, 0x0)

884.166443ms ago: executing program 5 (id=3076):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x4ab}, 0x18)
mkdir(&(0x7f0000000040)='./file0\x00', 0x141)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

879.973733ms ago: executing program 7 (id=3077):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$eJzs3MFqE18Ux/Hzb/pv0pQ2EURQUA+60c3QxgfQIC2IAaU2RV0IUzvRkDEpM0MlIjYbcetzFJfuBPUFuhE37t0VQXDThTjiTKZN2rSmbdLE9PuBck9y7o+5bdNyUuis3339pFRwjYLpyVBCZUikJhsi6T9V3X/1dSioR6RRTS6P/fhy9s69+zezudz0rOpMdu5KRlUnzr9/+vzNhY/e2PzbiXdxWUs/WP+e+bp2au30+q+5x0VXi66WK56aulCpeOaCbeli0S0Zqrdty3QtLZZdy2nqF+zK0lJVzfLieHLJsVxXzXJVS1ZVvYp6TlXNR2axrIZh6HhSjrfhNvbkV2dnzeyubT/W0ROh60ZbPek42VrrZn71CM4EAAD6zN7zfzjr7z7/5+bDtcPzvwjzf5fUmh79Zf7HQHCcrJms//w2Y/4HAAAAAAAAAAAAAAAAAAAAAOBfsOH7Kd/3U9EafcRFJCEi0eNenxPdccDv/9UeHRcd1vCPewkR+9VyfjkfrmE/W5Ci2GLJpKTkZ/B6qAvrmRu56UkNpOWDvVLPryznYxKP8pF0q/y5E1NhXpvz/0uy8foZScnJ1tfPtMyPyKWLDXlDUvLpoVTElsXgdb2VfzGlev1Wblt+NNgHAAAAAMAgMHTTjvfvQT/YkJCd/TC/j78PbHt/PSxn2rlFJQAAAAAAODS3+qxk2rblHKCIi8gh4oNaxKQvjrGtuCYifXCMoyoSIhI+oweJf9uMt5Xy29gzLCI9/7Lso+j1byYAAAAAnbY19O8j9PllF08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDx0+79wKL9O1pRY494w+ViR/4JAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH3kdwAAAP//R8IgDA==")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0x12, 0x60d, 0x1d8, 0x202, 0x2d0, 0x2e8, 0x2e8, 0x2d0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @mcast1, [0x0, 0x0, 0xc0], [0x0, 0xff000000], 'veth1_to_batadv\x00', 'macsec0\x00'}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {'Yv'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
bind$unix(r3, &(0x7f0000000640)=@file={0x1, './cgroup\x00'}, 0x6e)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000f3, 0x8, 0x0, 0x0}}, 0x10)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
kexec_load(0x0, 0x0, &(0x7f0000000140), 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES64=r6], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000780)="d2", 0xffe0, 0xc0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r7, &(0x7f0000000080)='t', 0x1)
sendfile(r7, r1, 0x0, 0x3ffff)
sendfile(r7, r1, 0x0, 0x7ffff000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10)

830.849003ms ago: executing program 5 (id=3078):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x12, 0xfa00, {0x3, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x21}, 0x5}, r1, 0xb}}, 0x48)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4)
sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x23}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000001c0)='}', 0x1}], 0x1}}], 0x2, 0x2400c042)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r3}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000340), r1}}, 0x18)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0x9}, 0x18)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18)
r7 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r7, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r8 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
sendmsg$tipc(r8, &(0x7f00000003c0)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x1, {{0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x26040885}, 0x20000040)

764.726364ms ago: executing program 5 (id=3079):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000280), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x6000)

683.325864ms ago: executing program 0 (id=3080):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ff00"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x12)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
shmdt(0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r3}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
write$binfmt_register(0xffffffffffffffff, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x40, 0x6}}, './file2\x00'})

672.139075ms ago: executing program 4 (id=3081):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a000000020000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1, 0x0, 0x8}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$key(0xf, 0x3, 0x2)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000003c0)='kfree\x00', r3, 0x0, 0x6}, 0x2e)
r4 = socket(0x40000000015, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000180)={'batadv_slave_1\x00', &(0x7f0000019580)=@ethtool_rxnfc={0x2f, 0x1, 0x8, {0x10, @tcp_ip4_spec={@private=0xa010100, @multicast1, 0x4e24, 0x4e20, 0x11}, {0x0, @random="72457f192cc8", 0x5, 0x1, [0x1, 0x7f]}, @sctp_ip6_spec={@mcast2, @mcast2, 0x4e20, 0x4e21, 0x2}, {0x0, @link_local, 0x1, 0x1, [0x88, 0xfffffffa]}, 0x3, 0xfffff001}}})
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x50}, 0x1, 0x7}, 0x0)

585.500795ms ago: executing program 5 (id=3082):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20001f, &(0x7f0000000040)={[{@jqfmt_vfsold}, {@noauto_da_alloc}, {@delalloc}]}, 0x3, 0x54f, &(0x7f0000000600)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x2}, 0x1c)
listen(r2, 0x9)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)

521.116276ms ago: executing program 4 (id=3083):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ff00"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x12)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
shmdt(0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r3}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
write$binfmt_register(0xffffffffffffffff, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x40, 0x6}}, './file2\x00'})

360.875997ms ago: executing program 0 (id=3084):
r0 = fsopen(&(0x7f0000000000)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00'})
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x104010, 0x1, 0xfffffffd, 0x9, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
socketpair(0x2c, 0x3, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a1, &(0x7f0000000900)={'bridge0\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18)
perf_event_open(&(0x7f0000000280)={0x6, 0x80, 0x40, 0x10, 0x20, 0x4, 0x7602, 0x0, 0x43010, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x200000000000000}, 0x0, 0x8000000000000, 0x0, 0x5, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
socket$packet(0x11, 0x2, 0x300)
getsockname$packet(0xffffffffffffffff, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010", @ANYBLOB, @ANYRESHEX], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x1}, 0x18)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})

60.765329ms ago: executing program 6 (id=3085):
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0)
r2 = gettid()
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={0x40, 0x3, 0x1}, 0x18)
process_vm_writev(r2, &(0x7f0000000440), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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")
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x541082, 0x0)
ioctl$TUNSETLINK(r5, 0x400454cc, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000080)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0xc0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC=r5, @ANYBLOB="5e20a48cc0d4e0016d113f34a8acf365866ea8f8aae368353e9fd582ae573b194c689e242e0c4422daf3708a0810970f65a61baf21769d56fd93793fe745f85b708467870c668a0b7d48759b7712fe19ac2113f08ec0", @ANYRESHEX=r7, @ANYRESHEX=r5], 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)

0s ago: executing program 5 (id=3086):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0x12, 0x60d, 0x1d8, 0x202, 0x2d0, 0x2e8, 0x2e8, 0x2d0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @mcast1, [0x0, 0x0, 0xc0], [0x0, 0xff000000], 'veth1_to_batadv\x00', 'macsec0\x00'}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {'Yv'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
bind$unix(r4, &(0x7f0000000640)=@file={0x1, './cgroup\x00'}, 0x6e)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000f3, 0x8, 0x0, 0x0}}, 0x10)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000240))
syz_open_dev$tty20(0xc, 0x4, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES64=r7], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000780)="d2", 0xffe0, 0xc0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r8, &(0x7f0000000080)='t', 0x1)
sendfile(r8, r2, 0x0, 0x3ffff)
sendfile(r8, r2, 0x0, 0x7ffff000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10)

kernel console output (not intermixed with test programs):

): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  227.049351][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.122859][T11394] EXT4-fs error (device loop5): ext4_find_dest_de:2052: inode #12: block 7: comm syz.5.2529: bad entry in directory: rec_len is too small for name_len - offset=0, inode=13, rec_len=16, size=56 fake=0
[  227.176392][T11394] EXT4-fs (loop5): Remounting filesystem read-only
[  227.259077][T11201] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  227.288935][T11483] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not ''
[  227.555452][T11490] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2557'.
[  227.889606][ T7075] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.993320][T11506] loop5: detected capacity change from 0 to 512
[  228.001332][T11506] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  228.021891][T11506] EXT4-fs (loop5): orphan cleanup on readonly fs
[  228.033576][T11506] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  228.044017][T11514] loop6: detected capacity change from 0 to 512
[  228.048288][T11506] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  228.061264][T11506] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.2561: bad orphan inode 768
[  228.072410][T11506] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  228.088740][T11514] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  228.093089][T11519] loop4: detected capacity change from 0 to 512
[  228.111562][T11514] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  228.252966][T11522] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2561'.
[  228.411373][T11525] lo speed is unknown, defaulting to 1000
[  228.418935][T11525] lo speed is unknown, defaulting to 1000
[  228.628491][T11518] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  228.644393][ T7075] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.664226][T11524] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  228.672295][T11518] EXT4-fs (loop6): Remounting filesystem read-only
[  228.744136][T11530] loop5: detected capacity change from 0 to 128
[  228.766744][T11530] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  228.797161][T11530] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  228.813142][T11530] x_tables: ip6_tables: mh match: only valid for protocol 135
[  228.937179][ T8743] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.027533][T11539] loop4: detected capacity change from 0 to 512
[  229.122354][T11545] loop6: detected capacity change from 0 to 512
[  229.188895][T11544] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  229.233147][T11550] loop7: detected capacity change from 0 to 512
[  229.255284][T11550] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  229.285978][T11550] EXT4-fs (loop7): orphan cleanup on readonly fs
[  229.292617][T11550] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  229.307276][T11550] EXT4-fs (loop7): Cannot turn on quotas: error -22
[  229.314047][T11550] EXT4-fs error (device loop7): ext4_orphan_get:1419: comm syz.7.2575: bad orphan inode 768
[  229.327770][T11550] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  229.507470][T11558] loop5: detected capacity change from 0 to 512
[  229.528724][T11558] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.541693][T11558] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  229.724426][ T9294] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.892120][T11573] lo speed is unknown, defaulting to 1000
[  229.898772][T11573] lo speed is unknown, defaulting to 1000
[  230.208025][T11577] loop7: detected capacity change from 0 to 512
[  230.231455][T11576] loop4: detected capacity change from 0 to 128
[  230.239354][T11577] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  230.247780][T11576] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  230.253280][T11577] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  230.278888][T11576] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  230.297907][T11582] loop6: detected capacity change from 0 to 512
[  230.314703][T11576] x_tables: ip6_tables: mh match: only valid for protocol 135
[  230.402921][ T7075] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.433974][T11586] loop5: detected capacity change from 0 to 512
[  230.561021][T11589] lo speed is unknown, defaulting to 1000
[  230.567519][T11589] lo speed is unknown, defaulting to 1000
[  231.154806][ T9294] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.271372][   T29] kauditd_printk_skb: 685 callbacks suppressed
[  231.271387][   T29] audit: type=1326 audit(1749340298.683:13690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11594 comm="syz.0.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62fb3e929 code=0x7ffc0000
[  231.303953][   T29] audit: type=1326 audit(1749340298.683:13691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11594 comm="syz.0.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fd62fb3e929 code=0x7ffc0000
[  231.328021][   T29] audit: type=1326 audit(1749340298.683:13692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11594 comm="syz.0.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62fb3e929 code=0x7ffc0000
[  231.351991][   T29] audit: type=1326 audit(1749340298.683:13693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11594 comm="syz.0.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62fb3e929 code=0x7ffc0000
[  231.406312][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  231.505897][   T29] audit: type=1400 audit(1749340298.913:13694): avc:  denied  { setopt } for  pid=11609 comm="syz.4.2590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  231.560941][T11610] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  231.569299][T11610] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  231.648798][   T29] audit: type=1326 audit(1749340299.063:13695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11615 comm="syz.0.2593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62fb3e929 code=0x7ffc0000
[  231.679704][   T29] audit: type=1326 audit(1749340299.093:13696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11615 comm="syz.0.2593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd62fb3e929 code=0x7ffc0000
[  231.703405][   T29] audit: type=1326 audit(1749340299.093:13697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11615 comm="syz.0.2593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62fb3e929 code=0x7ffc0000
[  231.727114][   T29] audit: type=1326 audit(1749340299.093:13698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11615 comm="syz.0.2593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62fb3e929 code=0x7ffc0000
[  231.750895][   T29] audit: type=1326 audit(1749340299.093:13699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11615 comm="syz.0.2593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7fd62fb3e929 code=0x7ffc0000
[  231.890051][T11622] __nla_validate_parse: 13 callbacks suppressed
[  231.890071][T11622] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2592'.
[  232.107079][T11624] pimreg: entered allmulticast mode
[  232.143523][T11624] pimreg: left allmulticast mode
[  232.203407][T11627] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  232.248684][T11627] SELinux: failed to load policy
[  232.339870][T11632] loop7: detected capacity change from 0 to 512
[  232.353814][T11632] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  232.402399][T11638] loop7: detected capacity change from 0 to 512
[  232.419491][T11638] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  232.432387][T11638] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  232.695681][T11650] smc: net device bond0 applied user defined pnetid SYZ2
[  232.710643][T11651] FAULT_INJECTION: forcing a failure.
[  232.710643][T11651] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  232.724089][T11651] CPU: 0 UID: 0 PID: 11651 Comm: syz.0.2603 Not tainted 6.15.0-syzkaller-13659-g5b032cac6225 #0 PREEMPT(voluntary) 
[  232.724182][T11651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  232.724246][T11651] Call Trace:
[  232.724253][T11651]  <TASK>
[  232.724267][T11651]  __dump_stack+0x1d/0x30
[  232.724295][T11651]  dump_stack_lvl+0xe8/0x140
[  232.724320][T11651]  dump_stack+0x15/0x1b
[  232.724336][T11651]  should_fail_ex+0x265/0x280
[  232.724361][T11651]  should_fail_alloc_page+0xf2/0x100
[  232.724407][T11651]  __alloc_frozen_pages_noprof+0xff/0x360
[  232.724460][T11651]  alloc_pages_mpol+0xb3/0x250
[  232.724498][T11651]  folio_alloc_mpol_noprof+0x39/0x80
[  232.724539][T11651]  shmem_get_folio_gfp+0x3cf/0xd60
[  232.724605][T11651]  ? simple_xattr_get+0xb9/0x120
[  232.724648][T11651]  shmem_write_begin+0xa8/0x190
[  232.724691][T11651]  generic_perform_write+0x181/0x490
[  232.724799][T11651]  shmem_file_write_iter+0xc5/0xf0
[  232.724829][T11651]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  232.724933][T11651]  vfs_write+0x49d/0x8e0
[  232.724951][T11651]  ? bpf_trace_run2+0x124/0x1c0
[  232.725046][T11651]  __x64_sys_pwrite64+0xfd/0x150
[  232.725089][T11651]  x64_sys_call+0xe45/0x2fb0
[  232.725109][T11651]  do_syscall_64+0xd2/0x200
[  232.725136][T11651]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  232.725192][T11651]  ? clear_bhb_loop+0x40/0x90
[  232.725219][T11651]  ? clear_bhb_loop+0x40/0x90
[  232.725246][T11651]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.725272][T11651] RIP: 0033:0x7fd62fb3e929
[  232.725291][T11651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  232.725337][T11651] RSP: 002b:00007fd62e1a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[  232.725360][T11651] RAX: ffffffffffffffda RBX: 00007fd62fd65fa0 RCX: 00007fd62fb3e929
[  232.725393][T11651] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000003
[  232.725509][T11651] RBP: 00007fd62e1a7090 R08: 0000000000000000 R09: 0000000000000000
[  232.725521][T11651] R10: 000000000000fecc R11: 0000000000000246 R12: 0000000000000001
[  232.725539][T11651] R13: 0000000000000000 R14: 00007fd62fd65fa0 R15: 00007ffcab38d868
[  232.725572][T11651]  </TASK>
[  233.062780][T11657] loop5: detected capacity change from 0 to 512
[  233.079083][T11657] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  233.091541][T11626] lo speed is unknown, defaulting to 1000
[  233.100553][T11626] lo speed is unknown, defaulting to 1000
[  233.136321][T11653] xt_CT: You must specify a L4 protocol and not use inversions on it
[  233.149875][T11660] loop5: detected capacity change from 0 to 512
[  233.178361][T11660] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  233.190956][T11666] loop4: detected capacity change from 0 to 512
[  233.213375][T11660] EXT4-fs (loop5): 1 truncate cleaned up
[  233.230341][T11660] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  233.369816][ T9294] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.402858][ T7075] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.420914][T11676] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2612'.
[  233.461130][T11683] loop5: detected capacity change from 0 to 512
[  233.489708][T11683] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  233.502591][T11683] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  233.523071][T11681] wg2: entered promiscuous mode
[  233.528099][T11681] wg2: entered allmulticast mode
[  233.572456][T11687] loop7: detected capacity change from 0 to 512
[  233.801448][T11675] lo speed is unknown, defaulting to 1000
[  233.813293][T11675] lo speed is unknown, defaulting to 1000
[  233.832898][T11683] lo speed is unknown, defaulting to 1000
[  233.839180][T11683] lo speed is unknown, defaulting to 1000
[  234.261667][ T7075] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.297945][T11694] loop6: detected capacity change from 0 to 512
[  234.304690][T11694] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  234.363035][T11699] loop6: detected capacity change from 0 to 512
[  234.382498][T11699] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  234.398602][T11697] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  234.408015][T11699] EXT4-fs (loop6): orphan cleanup on readonly fs
[  234.414410][T11699] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  234.429132][T11699] EXT4-fs (loop6): Cannot turn on quotas: error -22
[  234.435739][T11699] EXT4-fs error (device loop6): ext4_orphan_get:1419: comm syz.6.2621: bad orphan inode 768
[  234.472405][T11699] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  234.628028][T11691] tmpfs: Unknown parameter 'usrquota'
[  234.678901][T11717] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2621'.
[  234.688170][T11717] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2621'.
[  234.697249][T11717] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2621'.
[  234.751026][T11717] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2621'.
[  234.754667][T11716] lo speed is unknown, defaulting to 1000
[  234.766487][T11716] lo speed is unknown, defaulting to 1000
[  234.843327][T11715] loop7: detected capacity change from 0 to 512
[  234.865752][T11715] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  234.885883][T11720] loop4: detected capacity change from 0 to 512
[  234.907912][T11720] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  234.920897][T11715] EXT4-fs (loop7): 1 truncate cleaned up
[  234.934389][T11715] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  234.947310][T11720] ext4 filesystem being mounted at /548/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  234.970825][T11720] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.2627: corrupted inode contents
[  235.001898][ T8743] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.019623][T11720] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.2627: mark_inode_dirty error
[  235.032696][ T9294] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.059336][T11726] loop6: detected capacity change from 0 to 512
[  235.061994][T11720] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.2627: corrupted inode contents
[  235.082304][T11720] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.2627: mark_inode_dirty error
[  235.252452][T11736] loop5: detected capacity change from 0 to 512
[  235.260560][T11733] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2629'.
[  235.261001][T11736] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  235.308119][T11738] loop5: detected capacity change from 0 to 2048
[  235.327928][T11738] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #2: comm syz.5.2632: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5)
[  235.347389][T11738] EXT4-fs (loop5): get root inode failed
[  235.353257][T11738] EXT4-fs (loop5): mount failed
[  235.371013][T11738] loop5: detected capacity change from 0 to 256
[  235.377743][T11738] msdos: Unknown parameter 'dttq'
[  235.424784][T11743] loop5: detected capacity change from 0 to 512
[  235.732618][T11748] lo speed is unknown, defaulting to 1000
[  235.739260][T11748] lo speed is unknown, defaulting to 1000
[  235.900689][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.065958][T11753] pimreg: entered allmulticast mode
[  236.073503][T11753] pimreg: left allmulticast mode
[  236.075457][T11755] netlink: 460 bytes leftover after parsing attributes in process `syz.7.2637'.
[  236.163687][T11753] SELinux: failed to load policy
[  236.687254][T11774] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11774 comm=syz.0.2643
[  236.699989][T11774] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11774 comm=syz.0.2643
[  236.749054][   T29] kauditd_printk_skb: 395 callbacks suppressed
[  236.749074][   T29] audit: type=1326 audit(1749340304.164:14095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11776 comm="syz.4.2645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc505d4e929 code=0x7ffc0000
[  236.779008][   T29] audit: type=1326 audit(1749340304.164:14096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11776 comm="syz.4.2645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc505d4e929 code=0x7ffc0000
[  236.803193][   T29] audit: type=1326 audit(1749340304.164:14097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11776 comm="syz.4.2645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc505d4e929 code=0x7ffc0000
[  236.826945][   T29] audit: type=1326 audit(1749340304.164:14098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11776 comm="syz.4.2645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc505d4e929 code=0x7ffc0000
[  236.970451][   T29] audit: type=1326 audit(1749340304.164:14099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11776 comm="syz.4.2645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fc505d4e929 code=0x7ffc0000
[  236.994154][   T29] audit: type=1326 audit(1749340304.164:14100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11776 comm="syz.4.2645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc505d4e929 code=0x7ffc0000
[  237.017913][   T29] audit: type=1326 audit(1749340304.164:14101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11776 comm="syz.4.2645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc505d4d58a code=0x7ffc0000
[  237.041397][   T29] audit: type=1326 audit(1749340304.164:14102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11776 comm="syz.4.2645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc505d811e5 code=0x7ffc0000
[  237.065159][   T29] audit: type=1326 audit(1749340304.344:14103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11778 comm="syz.0.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62fb3e929 code=0x7ffc0000
[  237.067240][T11782] loop5: detected capacity change from 0 to 2048
[  237.088912][   T29] audit: type=1326 audit(1749340304.344:14104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11778 comm="syz.0.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62fb3e929 code=0x7ffc0000
[  237.225134][T11782] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  237.242059][T11782] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.271177][T11786] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2647'.
[  237.286567][ T8535] hid-generic 0000:0004:0000.002C: unknown main item tag 0x0
[  237.294028][ T8535] hid-generic 0000:0004:0000.002C: unknown main item tag 0x0
[  237.301700][ T8535] hid-generic 0000:0004:0000.002C: unknown main item tag 0x0
[  237.320813][T11777] loop4: detected capacity change from 0 to 512
[  237.331161][ T8535] hid-generic 0000:0004:0000.002C: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  237.343227][T11777] EXT4-fs: Ignoring removed orlov option
[  237.362366][T11777] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  237.410465][T11777] EXT4-fs (loop4): 1 orphan inode deleted
[  237.417115][T11777] EXT4-fs (loop4): 1 truncate cleaned up
[  237.433677][T11777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  237.472506][T11798] loop7: detected capacity change from 0 to 512
[  237.479800][T11798] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  237.501280][T11798] EXT4-fs (loop7): 1 truncate cleaned up
[  237.508940][T11798] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  237.533857][T11805] pim6reg1: entered promiscuous mode
[  237.539284][T11805] pim6reg1: entered allmulticast mode
[  237.581055][T11777] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #12: block 7: comm syz.4.2645: bad entry in directory: rec_len is too small for name_len - offset=0, inode=13, rec_len=16, size=56 fake=0
[  237.678147][T11806] lo speed is unknown, defaulting to 1000
[  237.684442][T11806] lo speed is unknown, defaulting to 1000
[  237.812757][T11777] EXT4-fs (loop4): Remounting filesystem read-only
[  237.832120][ T9294] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.992213][T11811] loop7: detected capacity change from 0 to 512
[  238.007547][T11811] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  238.022104][T11811] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  238.547778][T11818] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11818 comm=syz.0.2656
[  238.560427][T11818] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11818 comm=syz.0.2656
[  238.598952][T11822] loop6: detected capacity change from 0 to 512
[  238.671378][T11825] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[  238.679815][T11825] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[  238.878414][T11835] loop5: detected capacity change from 0 to 512
[  238.885471][T11835] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  238.936976][ T9294] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.949618][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.407172][T11847] loop7: detected capacity change from 0 to 2048
[  239.425613][T11844] lo speed is unknown, defaulting to 1000
[  239.431790][T11844] lo speed is unknown, defaulting to 1000
[  239.477391][T11847] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  239.543022][T11847] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.574684][T11853] loop6: detected capacity change from 0 to 512
[  239.603106][T11853] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  239.617137][T11853] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  239.654931][T11849] loop4: detected capacity change from 0 to 256
[  239.758112][T11849] FAT-fs (loop4): Directory bread(block 64) failed
[  239.765218][T11849] FAT-fs (loop4): Directory bread(block 65) failed
[  239.773290][T11849] FAT-fs (loop4): Directory bread(block 66) failed
[  239.779973][T11849] FAT-fs (loop4): Directory bread(block 67) failed
[  239.781674][T11859] loop7: detected capacity change from 0 to 128
[  239.787372][T11849] FAT-fs (loop4): Directory bread(block 68) failed
[  239.795430][T11859] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  239.799882][T11849] FAT-fs (loop4): Directory bread(block 69) failed
[  239.818437][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  239.833353][T11849] FAT-fs (loop4): Directory bread(block 70) failed
[  239.851421][T11849] FAT-fs (loop4): Directory bread(block 71) failed
[  239.944035][T11863] lo speed is unknown, defaulting to 1000
[  239.950505][T11863] lo speed is unknown, defaulting to 1000
[  240.084084][T11859] ext4 filesystem being mounted at /145/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  240.133614][T11849] FAT-fs (loop4): Directory bread(block 72) failed
[  240.190051][T11865] pim6reg1: entered promiscuous mode
[  240.195633][T11865] pim6reg1: entered allmulticast mode
[  240.204917][T11849] FAT-fs (loop4): Directory bread(block 73) failed
[  240.331817][ T9294] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  240.461195][ T8743] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.591616][T11884] loop7: detected capacity change from 0 to 512
[  240.667185][T11886] loop6: detected capacity change from 0 to 512
[  240.685753][T11886] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  240.699057][T11886] EXT4-fs (loop6): orphan cleanup on readonly fs
[  240.715459][T11886] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  240.730150][T11886] EXT4-fs (loop6): Cannot turn on quotas: error -22
[  240.736806][T11886] EXT4-fs error (device loop6): ext4_orphan_get:1419: comm syz.6.2677: bad orphan inode 768
[  240.767968][T11186] kworker/u8:47: attempt to access beyond end of device
[  240.767968][T11186] loop4: rw=1, sector=1224, nr_sectors = 608 limit=256
[  240.822448][T11890] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.840943][T11186] kworker/u8:47: attempt to access beyond end of device
[  240.840943][T11186] loop4: rw=1, sector=1864, nr_sectors = 2176 limit=256
[  240.880677][T11186] kworker/u8:47: attempt to access beyond end of device
[  240.880677][T11186] loop4: rw=1, sector=4040, nr_sectors = 1600 limit=256
[  240.908623][T11890] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.925174][T11186] kworker/u8:47: attempt to access beyond end of device
[  240.925174][T11186] loop4: rw=1, sector=5864, nr_sectors = 64 limit=256
[  240.959400][T11186] kworker/u8:47: attempt to access beyond end of device
[  240.959400][T11186] loop4: rw=1, sector=5960, nr_sectors = 2056 limit=256
[  240.990757][T11890] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.993270][T11186] kworker/u8:47: attempt to access beyond end of device
[  240.993270][T11186] loop4: rw=1, sector=8016, nr_sectors = 2288 limit=256
[  241.030053][T11186] kworker/u8:47: attempt to access beyond end of device
[  241.030053][T11186] loop4: rw=1, sector=10304, nr_sectors = 2800 limit=256
[  241.031819][T11894] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2677'.
[  241.053026][T11894] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2677'.
[  241.062100][T11894] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2677'.
[  241.066692][T11186] kworker/u8:47: attempt to access beyond end of device
[  241.066692][T11186] loop4: rw=1, sector=13104, nr_sectors = 2048 limit=256
[  241.071149][T11894] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2677'.
[  241.100994][T11890] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.127585][T11186] kworker/u8:47: attempt to access beyond end of device
[  241.127585][T11186] loop4: rw=1, sector=15152, nr_sectors = 2320 limit=256
[  241.158735][T11890] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  241.171417][T11890] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  241.179247][T11186] kworker/u8:47: attempt to access beyond end of device
[  241.179247][T11186] loop4: rw=1, sector=17472, nr_sectors = 1200 limit=256
[  241.184251][T11890] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  241.206904][T11890] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  241.336427][T11870] lo speed is unknown, defaulting to 1000
[  241.342595][T11870] lo speed is unknown, defaulting to 1000
[  241.532251][T11909] pimreg: entered allmulticast mode
[  241.539021][T11908] loop7: detected capacity change from 0 to 512
[  241.541621][T11909] pimreg: left allmulticast mode
[  241.551345][T11904] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2678'.
[  241.567440][T11908] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  241.703033][T11909] SELinux: failed to load policy
[  241.867436][T11926] lo speed is unknown, defaulting to 1000
[  241.874106][T11926] lo speed is unknown, defaulting to 1000
[  242.038066][T11928] pim6reg1: entered promiscuous mode
[  242.043521][T11928] pim6reg1: entered allmulticast mode
[  242.121406][T11920] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2687'.
[  242.130531][T11920] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2687'.
[  242.267549][T11932] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11932 comm=syz.0.2690
[  242.280339][T11932] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11932 comm=syz.0.2690
[  242.300240][T11934] loop5: detected capacity change from 0 to 256
[  242.314500][   T29] kauditd_printk_skb: 379 callbacks suppressed
[  242.314516][   T29] audit: type=1326 audit(1749340309.724:14484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11935 comm="syz.0.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62fb3e929 code=0x7ffc0000
[  242.355647][   T29] audit: type=1326 audit(1749340309.754:14485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11935 comm="syz.0.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fd62fb3e929 code=0x7ffc0000
[  242.379454][   T29] audit: type=1326 audit(1749340309.754:14486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11935 comm="syz.0.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62fb3e929 code=0x7ffc0000
[  242.403097][   T29] audit: type=1326 audit(1749340309.754:14487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11935 comm="syz.0.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62fb3e929 code=0x7ffc0000
[  242.440260][T11934] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  242.453861][T11940] __nla_validate_parse: 2 callbacks suppressed
[  242.453948][T11940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2695'.
[  242.469518][T11940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2695'.
[  242.599599][T11947] loop5: detected capacity change from 0 to 512
[  242.608603][T11947] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  242.772560][T11951] lo speed is unknown, defaulting to 1000
[  242.779171][T11951] lo speed is unknown, defaulting to 1000
[  242.943445][T11951] loop7: detected capacity change from 0 to 512
[  242.950256][T11951] EXT4-fs: Ignoring removed mblk_io_submit option
[  242.956808][T11951] EXT4-fs: Ignoring removed bh option
[  242.970566][T11951] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  242.985294][T11951] EXT4-fs (loop7): 1 truncate cleaned up
[  243.058936][   T29] audit: type=1326 audit(1749340310.474:14488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11943 comm="syz.4.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc505d4e929 code=0x7ffc0000
[  243.082641][   T29] audit: type=1326 audit(1749340310.474:14489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11943 comm="syz.4.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc505d4e929 code=0x7ffc0000
[  243.115797][T11956] loop5: detected capacity change from 0 to 512
[  243.122581][T11956] EXT4-fs: dax option not supported
[  243.132825][   T29] audit: type=1326 audit(1749340310.524:14490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11943 comm="syz.4.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fc505d4e929 code=0x7ffc0000
[  243.156520][   T29] audit: type=1326 audit(1749340310.524:14491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11943 comm="syz.4.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc505d4e929 code=0x7ffc0000
[  243.180213][   T29] audit: type=1326 audit(1749340310.524:14492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11943 comm="syz.4.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc505d4e929 code=0x7ffc0000
[  243.203863][   T29] audit: type=1400 audit(1749340310.544:14493): avc:  denied  { associate } for  pid=11955 comm="syz.5.2699" name="blkio.bfq.group_wait_time" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  243.240476][T11960] loop6: detected capacity change from 0 to 512
[  243.248319][T11960] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  243.259901][T11962] loop5: detected capacity change from 0 to 512
[  243.269621][T11961] netlink: 332 bytes leftover after parsing attributes in process `syz.4.2702'.
[  243.269796][T11960] EXT4-fs (loop6): orphan cleanup on readonly fs
[  243.286856][T11962] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  243.289133][T11961] netlink: 'syz.4.2702': attribute type 9 has an invalid length.
[  243.295813][T11960] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  243.303343][T11961] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2702'.
[  243.317900][T11960] EXT4-fs (loop6): Cannot turn on quotas: error -22
[  243.330311][T11961] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2702'.
[  243.333564][T11960] EXT4-fs error (device loop6): ext4_orphan_get:1419: comm syz.6.2701: bad orphan inode 768
[  243.353995][T11962] EXT4-fs (loop5): orphan cleanup on readonly fs
[  243.361745][T11962] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  243.376417][T11962] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  243.383053][T11962] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.2700: bad orphan inode 768
[  243.684186][T11960] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2701'.
[  243.693240][T11960] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2701'.
[  243.702254][T11960] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2701'.
[  243.713534][T11987] loop4: detected capacity change from 0 to 256
[  243.736942][T11980] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  243.746013][T11960] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2701'.
[  243.763494][T11962] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2700'.
[  243.821016][T11990] pim6reg1: entered promiscuous mode
[  243.826448][T11990] pim6reg1: entered allmulticast mode
[  243.876027][T11997] loop5: detected capacity change from 0 to 512
[  243.883159][T11997] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  243.893625][T11997] EXT4-fs (loop5): orphan cleanup on readonly fs
[  243.902211][T11997] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  243.916889][T11997] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  243.917347][T12001] pim6reg1: entered promiscuous mode
[  243.923491][T11997] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.2712: bad orphan inode 768
[  243.929014][T12001] pim6reg1: entered allmulticast mode
[  243.978594][T12003] loop4: detected capacity change from 0 to 8192
[  244.084836][T12009] loop4: detected capacity change from 0 to 512
[  244.091967][T12009] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  244.102943][T12009] EXT4-fs (loop4): orphan cleanup on readonly fs
[  244.109829][T12009] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  244.124569][T12009] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  244.131297][T12009] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.2716: bad orphan inode 768
[  244.349841][T12018] loop7: detected capacity change from 0 to 512
[  244.417665][T12012] loop5: detected capacity change from 0 to 2048
[  244.503871][T12025] netlink: 'syz.4.2721': attribute type 13 has an invalid length.
[  244.515658][T12025] loop4: detected capacity change from 0 to 512
[  244.527904][T12025] ext4 filesystem being mounted at /568/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  244.542881][T12031] loop5: detected capacity change from 0 to 512
[  244.550376][T12031] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  244.560673][T12031] EXT4-fs (loop5): orphan cleanup on readonly fs
[  244.569064][T12031] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  244.583762][T12031] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  244.590412][T12031] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.2722: bad orphan inode 768
[  244.721433][T12041] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  244.729273][T12041] batman_adv: batadv0: Removing interface: batadv_slave_0
[  244.752120][T12041] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  244.759636][T12041] batman_adv: batadv0: Removing interface: batadv_slave_1
[  244.787200][T12045] loop6: detected capacity change from 0 to 512
[  244.795230][T12045] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  244.810205][T12045] EXT4-fs (loop6): orphan cleanup on readonly fs
[  244.816803][T12045] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  244.822240][T12049] loop5: detected capacity change from 0 to 128
[  244.831450][T12045] EXT4-fs (loop6): Cannot turn on quotas: error -22
[  244.831471][T12045] EXT4-fs error (device loop6): ext4_orphan_get:1419: comm syz.6.2727: bad orphan inode 768
[  244.840211][T12049] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  244.867154][T12049] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  244.879986][T12049] x_tables: ip6_tables: mh match: only valid for protocol 135
[  244.932755][T12051] loop4: detected capacity change from 0 to 128
[  244.950200][T12051] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  244.963524][T12051] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  244.985678][T12051] x_tables: ip6_tables: mh match: only valid for protocol 135
[  245.061485][T12056] loop4: detected capacity change from 0 to 512
[  245.070772][T12056] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  245.082345][T12056] EXT4-fs (loop4): orphan cleanup on readonly fs
[  245.089976][T12056] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  245.104651][T12056] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  245.111317][T12056] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.2730: bad orphan inode 768
[  245.237204][T12060] loop6: detected capacity change from 0 to 128
[  245.244087][T12060] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  245.260867][T12060] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  245.375150][T12060] x_tables: ip6_tables: mh match: only valid for protocol 135
[  245.543969][T12071] loop4: detected capacity change from 0 to 1024
[  245.552812][T12071] EXT4-fs: Ignoring removed mblk_io_submit option
[  245.563566][T12071] EXT4-fs: Ignoring removed nobh option
[  245.569278][T12071] EXT4-fs: Ignoring removed bh option
[  245.722496][T11197] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  245.727031][T12077] loop7: detected capacity change from 0 to 2048
[  245.756195][T12077] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #2: comm syz.7.2736: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5)
[  245.760855][T12080] loop5: detected capacity change from 0 to 512
[  245.783948][T12080] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  245.819735][T12085] loop5: detected capacity change from 0 to 2048
[  245.828800][T12077] EXT4-fs (loop7): get root inode failed
[  245.834563][T12077] EXT4-fs (loop7): mount failed
[  245.840722][T12085] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #2: comm syz.5.2739: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5)
[  245.860077][T12087] loop4: detected capacity change from 0 to 512
[  245.868695][T12085] EXT4-fs (loop5): get root inode failed
[  245.874502][T12085] EXT4-fs (loop5): mount failed
[  245.884335][T12077] loop7: detected capacity change from 0 to 256
[  245.891145][T12077] msdos: Unknown parameter 'dttq'
[  245.901091][T12087] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  245.915963][T12087] EXT4-fs (loop4): 1 truncate cleaned up
[  245.942542][T12085] loop5: detected capacity change from 0 to 256
[  245.964623][T12085] msdos: Unknown parameter 'dttq'
[  245.972365][T12092] loop7: detected capacity change from 0 to 512
[  245.979680][T12092] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  246.020832][T12095] loop4: detected capacity change from 0 to 512
[  246.046777][T12097] loop7: detected capacity change from 0 to 512
[  246.057406][T12097] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  246.078545][T12100] loop5: detected capacity change from 0 to 512
[  246.086882][T12097] EXT4-fs (loop7): orphan cleanup on readonly fs
[  246.093311][T12097] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  246.107984][T12097] EXT4-fs (loop7): Cannot turn on quotas: error -22
[  246.114657][T12097] EXT4-fs error (device loop7): ext4_orphan_get:1419: comm syz.7.2743: bad orphan inode 768
[  246.137596][T12100] ext4 filesystem being mounted at /305/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  246.226571][T11197] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  246.675239][T12119] loop7: detected capacity change from 0 to 512
[  246.719076][T12126] loop5: detected capacity change from 0 to 512
[  246.726277][T12126] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  246.846665][T12128] lo speed is unknown, defaulting to 1000
[  246.853253][T12128] lo speed is unknown, defaulting to 1000
[  247.176692][T12137] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  247.426173][T12142] FAULT_INJECTION: forcing a failure.
[  247.426173][T12142] name failslab, interval 1, probability 0, space 0, times 0
[  247.438944][T12142] CPU: 1 UID: 0 PID: 12142 Comm: syz.0.2756 Not tainted 6.15.0-syzkaller-13659-g5b032cac6225 #0 PREEMPT(voluntary) 
[  247.438985][T12142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  247.439005][T12142] Call Trace:
[  247.439014][T12142]  <TASK>
[  247.439025][T12142]  __dump_stack+0x1d/0x30
[  247.439052][T12142]  dump_stack_lvl+0xe8/0x140
[  247.439122][T12142]  dump_stack+0x15/0x1b
[  247.439144][T12142]  should_fail_ex+0x265/0x280
[  247.439169][T12142]  ? ftrace_profile_set_filter+0x96/0x190
[  247.439199][T12142]  should_failslab+0x8c/0xb0
[  247.439281][T12142]  __kmalloc_cache_noprof+0x4c/0x320
[  247.439323][T12142]  ftrace_profile_set_filter+0x96/0x190
[  247.439348][T12142]  perf_ioctl+0x7b3/0x12e0
[  247.439427][T12142]  ? ioctl_has_perm+0x289/0x2a0
[  247.439465][T12142]  ? do_vfs_ioctl+0xd1e/0x11d0
[  247.439541][T12142]  ? selinux_file_ioctl+0x2e3/0x370
[  247.439572][T12142]  ? __fget_files+0x184/0x1c0
[  247.439605][T12142]  ? __pfx_perf_ioctl+0x10/0x10
[  247.439694][T12142]  __se_sys_ioctl+0xcb/0x140
[  247.439747][T12142]  __x64_sys_ioctl+0x43/0x50
[  247.439857][T12142]  x64_sys_call+0x19a8/0x2fb0
[  247.439884][T12142]  do_syscall_64+0xd2/0x200
[  247.439912][T12142]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  247.440025][T12142]  ? clear_bhb_loop+0x40/0x90
[  247.440141][T12142]  ? clear_bhb_loop+0x40/0x90
[  247.440169][T12142]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.440228][T12142] RIP: 0033:0x7fd62fb3e929
[  247.440245][T12142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  247.440267][T12142] RSP: 002b:00007fd62e1a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  247.440291][T12142] RAX: ffffffffffffffda RBX: 00007fd62fd65fa0 RCX: 00007fd62fb3e929
[  247.440307][T12142] RDX: 00002000000001c0 RSI: 0000000040082406 RDI: 0000000000000003
[  247.440378][T12142] RBP: 00007fd62e1a7090 R08: 0000000000000000 R09: 0000000000000000
[  247.440394][T12142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  247.440409][T12142] R13: 0000000000000000 R14: 00007fd62fd65fa0 R15: 00007ffcab38d868
[  247.440434][T12142]  </TASK>
[  247.684747][T12144] loop7: detected capacity change from 0 to 512
[  247.692080][T12144] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  247.702461][T12144] EXT4-fs (loop7): orphan cleanup on readonly fs
[  247.754238][T12144] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  247.768980][T12144] EXT4-fs (loop7): Cannot turn on quotas: error -22
[  247.775641][T12144] EXT4-fs error (device loop7): ext4_orphan_get:1419: comm syz.7.2757: bad orphan inode 768
[  248.071645][T12153] pimreg: entered allmulticast mode
[  248.080734][   T29] kauditd_printk_skb: 232 callbacks suppressed
[  248.080766][   T29] audit: type=1326 audit(1749340315.495:14726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12155 comm="syz.4.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc505d4e929 code=0x7ffc0000
[  248.097547][T12153] pimreg: left allmulticast mode
[  248.110827][   T29] audit: type=1326 audit(1749340315.495:14727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12155 comm="syz.4.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc505d4e929 code=0x7ffc0000
[  248.139386][   T29] audit: type=1326 audit(1749340315.495:14728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12155 comm="syz.4.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc505d4e929 code=0x7ffc0000
[  248.163014][   T29] audit: type=1326 audit(1749340315.495:14729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12155 comm="syz.4.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc505d4e929 code=0x7ffc0000
[  248.186698][   T29] audit: type=1326 audit(1749340315.495:14730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12155 comm="syz.4.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc505d4e929 code=0x7ffc0000
[  248.210344][   T29] audit: type=1326 audit(1749340315.495:14731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12155 comm="syz.4.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fc505d4e929 code=0x7ffc0000
[  248.234003][   T29] audit: type=1326 audit(1749340315.495:14732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12155 comm="syz.4.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc505d4e929 code=0x7ffc0000
[  248.257711][   T29] audit: type=1326 audit(1749340315.495:14733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12155 comm="syz.4.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc505d4e929 code=0x7ffc0000
[  248.281324][   T29] audit: type=1326 audit(1749340315.495:14734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12155 comm="syz.4.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc505d4d58a code=0x7ffc0000
[  248.305012][   T29] audit: type=1326 audit(1749340315.495:14735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12155 comm="syz.4.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc505d811e5 code=0x7ffc0000
[  248.465221][T12162] loop5: detected capacity change from 0 to 512
[  248.521254][T12165] loop7: detected capacity change from 0 to 512
[  248.549768][T12165] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  249.411986][T12160] lo speed is unknown, defaulting to 1000
[  249.420932][T12160] lo speed is unknown, defaulting to 1000
[  249.442298][T12177] loop5: detected capacity change from 0 to 512
[  249.457059][T12177] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  249.479281][T12177] EXT4-fs (loop5): 1 truncate cleaned up
[  249.581756][T12185] loop5: detected capacity change from 0 to 512
[  249.611771][T12185] ext4 filesystem being mounted at /315/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  249.623387][T12189] loop7: detected capacity change from 0 to 128
[  249.631507][T12189] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  249.658950][T12190] loop4: detected capacity change from 0 to 512
[  249.665700][T12190] EXT4-fs: Ignoring removed orlov option
[  249.671641][T12189] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  249.681016][T12190] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  249.696524][T12189] x_tables: ip6_tables: mh match: only valid for protocol 135
[  249.706709][T12190] EXT4-fs (loop4): 1 orphan inode deleted
[  249.712539][T12190] EXT4-fs (loop4): 1 truncate cleaned up
[  249.755667][T12156] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #12: block 7: comm syz.4.2761: bad entry in directory: rec_len is too small for name_len - offset=0, inode=13, rec_len=16, size=56 fake=0
[  249.778256][T12156] EXT4-fs (loop4): Remounting filesystem read-only
[  249.876236][T12192] lo speed is unknown, defaulting to 1000
[  249.882430][T12192] lo speed is unknown, defaulting to 1000
[  249.962999][T12198] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12198 comm=syz.6.2774
[  249.975682][T12198] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12198 comm=syz.6.2774
[  250.038063][T12200] loop6: detected capacity change from 0 to 512
[  250.049838][T12200] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  250.092810][T12203] loop6: detected capacity change from 0 to 256
[  250.135315][T12201] loop7: detected capacity change from 0 to 2048
[  250.145654][T12201] EXT4-fs mount: 38 callbacks suppressed
[  250.145672][T12201] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  250.165034][T12201] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.307999][T12218] __nla_validate_parse: 19 callbacks suppressed
[  250.308018][T12218] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.2779'.
[  250.355867][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.425809][T12224] loop4: detected capacity change from 0 to 512
[  250.459081][T12224] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  250.460504][ T7075] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.469402][T12224] EXT4-fs (loop4): orphan cleanup on readonly fs
[  250.485301][T12224] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  250.500021][T12224] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  250.506740][T12224] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.2781: bad orphan inode 768
[  250.519726][T12224] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  250.621487][ T8533] hid-generic 0000:0004:0000.002D: unknown main item tag 0x0
[  250.629034][ T8533] hid-generic 0000:0004:0000.002D: unknown main item tag 0x0
[  250.636574][ T8533] hid-generic 0000:0004:0000.002D: unknown main item tag 0x0
[  250.664748][ T8533] hid-generic 0000:0004:0000.002D: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  250.708786][T12232] loop5: detected capacity change from 0 to 128
[  250.715732][T12232] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  250.728153][T12232] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  250.742163][T12232] x_tables: ip6_tables: mh match: only valid for protocol 135
[  250.955821][T12211] lo speed is unknown, defaulting to 1000
[  250.992004][T12211] lo speed is unknown, defaulting to 1000
[  251.189283][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.220349][T12239] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12239 comm=syz.7.2785
[  251.232992][T12239] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12239 comm=syz.7.2785
[  251.376568][T12249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2789'.
[  251.385535][T12249] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2789'.
[  251.426739][T12253] loop7: detected capacity change from 0 to 512
[  251.446325][T12253] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  251.460668][T12253] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  251.609120][T11201] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  252.073745][T12276] loop6: detected capacity change from 0 to 512
[  252.090041][T12276] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  252.124312][T12276] EXT4-fs (loop6): orphan cleanup on readonly fs
[  252.134957][T12267] lo speed is unknown, defaulting to 1000
[  252.141053][T12267] lo speed is unknown, defaulting to 1000
[  252.142107][T12276] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  252.161512][T12276] EXT4-fs (loop6): Cannot turn on quotas: error -22
[  252.168156][T12276] EXT4-fs error (device loop6): ext4_orphan_get:1419: comm syz.6.2795: bad orphan inode 768
[  252.178928][T12245] lo speed is unknown, defaulting to 1000
[  252.203734][T12245] lo speed is unknown, defaulting to 1000
[  252.235193][T12258] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  252.254817][T12276] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  252.338866][T12258] EXT4-fs (loop7): Remounting filesystem read-only
[  252.350514][ T9294] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.419680][T12282] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[  252.428101][T12282] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[  252.516567][T12285] loop7: detected capacity change from 0 to 512
[  252.543291][T12285] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  252.570734][T12286] loop5: detected capacity change from 0 to 2048
[  252.588834][T12245] chnl_net:caif_netlink_parms(): no params data found
[  252.596098][T12285] EXT4-fs (loop7): orphan cleanup on readonly fs
[  252.605326][T12285] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  252.619968][T12285] EXT4-fs (loop7): Cannot turn on quotas: error -22
[  252.626683][T12285] EXT4-fs error (device loop7): ext4_orphan_get:1419: comm syz.7.2798: bad orphan inode 768
[  252.640331][T12286] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  252.654710][T12285] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  252.700897][T12286] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.717465][T12245] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.724762][T12245] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.732210][T12245] bridge_slave_0: entered allmulticast mode
[  252.755674][T12245] bridge_slave_0: entered promiscuous mode
[  252.784250][T12245] bridge0: port 2(bridge_slave_1) entered blocking state
[  252.791366][T12245] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.802459][ T8743] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.813831][T12245] bridge_slave_1: entered allmulticast mode
[  252.834997][T12245] bridge_slave_1: entered promiscuous mode
[  252.887643][T12245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  252.912691][T12299] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2800'.
[  252.921738][T12299] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2800'.
[  252.932762][T12245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  252.979170][T12245] team0: Port device team_slave_0 added
[  252.987135][T12285] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2798'.
[  252.996256][T12245] team0: Port device team_slave_1 added
[  252.996272][T12285] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2798'.
[  252.996355][T12285] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2798'.
[  253.049548][T12245] batman_adv: batadv0: Adding interface: batadv_slave_0
[  253.056731][T12245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  253.082902][T12245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  253.113812][T12245] batman_adv: batadv0: Adding interface: batadv_slave_1
[  253.120810][T12245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  253.146958][T12245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  253.158599][ T9294] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.267001][   T29] kauditd_printk_skb: 899 callbacks suppressed
[  253.267054][   T29] audit: type=1400 audit(1749340320.686:15635): avc:  denied  { append } for  pid=12306 comm="syz.6.2803" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  253.268143][T12245] hsr_slave_0: entered promiscuous mode
[  253.311123][T12245] hsr_slave_1: entered promiscuous mode
[  253.311451][T12245] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  253.311468][T12245] Cannot create hsr debugfs directory
[  253.338516][   T29] audit: type=1400 audit(1749340320.756:15636): avc:  denied  { write } for  pid=12306 comm="syz.6.2803" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  253.341204][T12313] loop7: detected capacity change from 0 to 512
[  253.344566][T12313] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  253.369283][T12313] EXT4-fs (loop7): 1 truncate cleaned up
[  253.369660][T12313] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  253.526464][ T9294] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.551121][T12245] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.607256][T12245] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.673237][T12245] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.685951][   T29] audit: type=1326 audit(1749340321.106:15637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12263 comm="syz.4.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc505d4e929 code=0x7ffc0000
[  253.689442][T12338] lo speed is unknown, defaulting to 1000
[  253.716862][T12341] loop4: detected capacity change from 0 to 512
[  253.720658][T12338] lo speed is unknown, defaulting to 1000
[  253.724242][T12341] EXT4-fs: Ignoring removed orlov option
[  253.735362][   T29] audit: type=1326 audit(1749340321.126:15638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12263 comm="syz.4.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc505d4e929 code=0x7ffc0000
[  253.760408][T12245] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.770305][T12341] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  253.782079][T12341] EXT4-fs (loop4): 1 orphan inode deleted
[  253.787888][T12341] EXT4-fs (loop4): 1 truncate cleaned up
[  253.795878][T12341] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  253.819591][   T29] audit: type=1326 audit(1749340321.236:15639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12263 comm="syz.4.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fc505d4e929 code=0x7ffc0000
[  253.848559][   T29] audit: type=1326 audit(1749340321.266:15640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12263 comm="syz.4.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc505d4e929 code=0x7ffc0000
[  253.889206][   T29] audit: type=1326 audit(1749340321.266:15641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12263 comm="syz.4.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc505d4e929 code=0x7ffc0000
[  253.900802][T12264] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #12: block 7: comm syz.4.2791: bad entry in directory: rec_len is too small for name_len - offset=0, inode=13, rec_len=16, size=56 fake=0
[  253.912858][   T29] audit: type=1326 audit(1749340321.266:15642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12263 comm="syz.4.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc505d4e929 code=0x7ffc0000
[  253.912899][   T29] audit: type=1326 audit(1749340321.266:15643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12263 comm="syz.4.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc505d4e929 code=0x7ffc0000
[  253.912932][   T29] audit: type=1326 audit(1749340321.266:15644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12263 comm="syz.4.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc505d4e929 code=0x7ffc0000
[  254.007470][T12264] EXT4-fs (loop4): Remounting filesystem read-only
[  254.058600][T12348] loop7: detected capacity change from 0 to 128
[  254.065982][T12348] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  254.078260][T12348] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  254.091842][T12348] x_tables: ip6_tables: mh match: only valid for protocol 135
[  254.214243][T12245] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  254.247174][T12245] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  254.285819][T12245] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  254.302887][   T23] hid-generic 0000:0004:0000.002E: unknown main item tag 0x0
[  254.310488][   T23] hid-generic 0000:0004:0000.002E: unknown main item tag 0x0
[  254.317946][   T23] hid-generic 0000:0004:0000.002E: unknown main item tag 0x0
[  254.329520][T12245] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  254.380423][   T23] hid-generic 0000:0004:0000.002E: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  254.476940][T12245] 8021q: adding VLAN 0 to HW filter on device bond0
[  254.513201][T12245] 8021q: adding VLAN 0 to HW filter on device team0
[  254.572805][T11201] bridge0: port 1(bridge_slave_0) entered blocking state
[  254.580010][T11201] bridge0: port 1(bridge_slave_0) entered forwarding state
[  254.609190][T12365] loop5: detected capacity change from 0 to 128
[  254.617712][T11201] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.624859][T11201] bridge0: port 2(bridge_slave_1) entered forwarding state
[  254.646949][T12365] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  254.703001][T12245] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  254.713743][T12245] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  254.722688][T12365] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  254.774224][T12365] x_tables: ip6_tables: mh match: only valid for protocol 135
[  254.807252][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.933178][T12245] 8021q: adding VLAN 0 to HW filter on device batadv0
[  255.096399][T11199] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  255.158167][T12382] pimreg: entered allmulticast mode
[  255.181902][T12382] pimreg: left allmulticast mode
[  255.209041][T12388] loop6: detected capacity change from 0 to 512
[  255.229452][T12388] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  255.238500][T12245] veth0_vlan: entered promiscuous mode
[  255.276746][T12382] SELinux: failed to load policy
[  255.288188][T12245] veth1_vlan: entered promiscuous mode
[  255.314353][T12245] veth0_macvtap: entered promiscuous mode
[  255.324236][T12398] __nla_validate_parse: 4 callbacks suppressed
[  255.324263][T12398] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.2824'.
[  255.355182][T12245] veth1_macvtap: entered promiscuous mode
[  255.387063][T12400] loop4: detected capacity change from 0 to 2048
[  255.393143][T12245] batman_adv: batadv0: Interface activated: batadv_slave_0
[  255.416322][T12400] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #2: comm syz.4.2826: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5)
[  255.443370][T12245] batman_adv: batadv0: Interface activated: batadv_slave_1
[  255.465966][T12245] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  255.474944][T12245] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  255.483768][T12245] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  255.492556][T12245] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  255.514712][T12400] EXT4-fs (loop4): get root inode failed
[  255.520584][T12400] EXT4-fs (loop4): mount failed
[  255.621248][T11191] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  255.697928][T12420] loop5: detected capacity change from 0 to 512
[  255.705804][T12420] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  255.715627][T12420] EXT4-fs (loop5): orphan cleanup on readonly fs
[  255.722070][T12420] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  255.736973][T12420] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  255.743725][T12420] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.2830: bad orphan inode 768
[  255.761548][T12420] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  255.818774][T12429] loop6: detected capacity change from 0 to 512
[  255.825574][T12429] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  255.827811][T12430] netlink: 516 bytes leftover after parsing attributes in process `syz.0.2833'.
[  255.890155][T12438] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  255.902502][ T8529] hid-generic 0000:0004:0000.002F: unknown main item tag 0x0
[  255.905408][T12438] SELinux: failed to load policy
[  255.910095][ T8529] hid-generic 0000:0004:0000.002F: unknown main item tag 0x0
[  255.922466][ T8529] hid-generic 0000:0004:0000.002F: unknown main item tag 0x0
[  255.932398][ T8529] hid-generic 0000:0004:0000.002F: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  256.085592][ T7075] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.116825][T12453] loop7: detected capacity change from 0 to 1024
[  256.123625][T12453] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  256.131132][T12455] loop5: detected capacity change from 0 to 512
[  256.134949][T12453] ªªªªªª: renamed from vlan0 (while UP)
[  256.225142][T12455] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  256.246650][T12455] ext4 filesystem being mounted at /329/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  256.443281][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  256.520016][T12464] lo speed is unknown, defaulting to 1000
[  256.526465][T12464] lo speed is unknown, defaulting to 1000
[  256.836517][T12469] FAULT_INJECTION: forcing a failure.
[  256.836517][T12469] name failslab, interval 1, probability 0, space 0, times 0
[  256.849275][T12469] CPU: 0 UID: 0 PID: 12469 Comm: syz.4.2846 Not tainted 6.15.0-syzkaller-13659-g5b032cac6225 #0 PREEMPT(voluntary) 
[  256.849370][T12469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  256.849458][T12469] Call Trace:
[  256.849466][T12469]  <TASK>
[  256.849475][T12469]  __dump_stack+0x1d/0x30
[  256.849509][T12469]  dump_stack_lvl+0xe8/0x140
[  256.849527][T12469]  dump_stack+0x15/0x1b
[  256.849550][T12469]  should_fail_ex+0x265/0x280
[  256.849574][T12469]  should_failslab+0x8c/0xb0
[  256.849672][T12469]  __kmalloc_node_noprof+0xa9/0x410
[  256.849776][T12469]  ? crypto_create_tfm_node+0x5c/0x250
[  256.849815][T12469]  crypto_create_tfm_node+0x5c/0x250
[  256.849841][T12469]  ? crypto_alg_mod_lookup+0x2f9/0x490
[  256.849951][T12469]  crypto_alloc_tfm_node+0xdc/0x2b0
[  256.849981][T12469]  crypto_alloc_aead+0x2d/0x40
[  256.850069][T12469]  esp6_init_state+0x3f3/0xa00
[  256.850111][T12469]  ? __kmalloc_node_track_caller_noprof+0x1e5/0x410
[  256.850153][T12469]  __xfrm_init_state+0x740/0xbb0
[  256.850209][T12469]  xfrm_add_sa+0x1e51/0x2410
[  256.850242][T12469]  xfrm_user_rcv_msg+0x566/0x660
[  256.850282][T12469]  ? __kfree_skb+0x109/0x150
[  256.850333][T12469]  ? nlmon_xmit+0x4f/0x60
[  256.850359][T12469]  ? consume_skb+0x49/0x150
[  256.850398][T12469]  netlink_rcv_skb+0x120/0x220
[  256.850418][T12469]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  256.850465][T12469]  xfrm_netlink_rcv+0x48/0x60
[  256.850569][T12469]  netlink_unicast+0x59e/0x670
[  256.850591][T12469]  netlink_sendmsg+0x58b/0x6b0
[  256.850685][T12469]  ? __pfx_netlink_sendmsg+0x10/0x10
[  256.850730][T12469]  __sock_sendmsg+0x142/0x180
[  256.850759][T12469]  ____sys_sendmsg+0x31e/0x4e0
[  256.850848][T12469]  ___sys_sendmsg+0x17b/0x1d0
[  256.850885][T12469]  __x64_sys_sendmsg+0xd4/0x160
[  256.850981][T12469]  x64_sys_call+0x2999/0x2fb0
[  256.851008][T12469]  do_syscall_64+0xd2/0x200
[  256.851031][T12469]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  256.851121][T12469]  ? clear_bhb_loop+0x40/0x90
[  256.851149][T12469]  ? clear_bhb_loop+0x40/0x90
[  256.851182][T12469]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.851208][T12469] RIP: 0033:0x7fc505d4e929
[  256.851228][T12469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  256.851320][T12469] RSP: 002b:00007fc5043b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  256.851409][T12469] RAX: ffffffffffffffda RBX: 00007fc505f75fa0 RCX: 00007fc505d4e929
[  256.851424][T12469] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000007
[  256.851439][T12469] RBP: 00007fc5043b7090 R08: 0000000000000000 R09: 0000000000000000
[  256.851454][T12469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  256.851470][T12469] R13: 0000000000000000 R14: 00007fc505f75fa0 R15: 00007ffd9ad82cd8
[  256.851515][T12469]  </TASK>
[  257.193960][ T7075] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.280524][ T8529] hid-generic 0000:0004:0000.0030: unknown main item tag 0x0
[  257.287994][ T8529] hid-generic 0000:0004:0000.0030: unknown main item tag 0x0
[  257.295587][ T8529] hid-generic 0000:0004:0000.0030: unknown main item tag 0x0
[  257.312469][T12473] SELinux: failed to load policy
[  257.320771][T12480] loop6: detected capacity change from 0 to 512
[  257.345299][T12482] loop7: detected capacity change from 0 to 512
[  257.353369][T12480] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  257.367230][ T8529] hid-generic 0000:0004:0000.0030: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  257.396951][T12471] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2847'.
[  257.406083][T12471] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2847'.
[  257.415067][T12471] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2847'.
[  257.426727][T12482] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  257.433075][T12471] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2847'.
[  257.456367][T12482] EXT4-fs (loop7): orphan cleanup on readonly fs
[  257.465359][T12482] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  257.469901][T12487] loop6: detected capacity change from 0 to 2048
[  257.480051][T12482] EXT4-fs (loop7): Cannot turn on quotas: error -22
[  257.493003][T12482] EXT4-fs error (device loop7): ext4_orphan_get:1419: comm syz.7.2852: bad orphan inode 768
[  257.504886][T12482] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  257.533245][T12491] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[  257.541717][T12491] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[  257.550442][T12487] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #2: comm syz.6.2854: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5)
[  257.610349][T12487] EXT4-fs (loop6): get root inode failed
[  257.616066][T12487] EXT4-fs (loop6): mount failed
[  257.625384][T12499] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2858'.
[  257.660293][T12499] batadv0: entered promiscuous mode
[  257.665689][T12499] batadv0: entered allmulticast mode
[  257.694197][T12501] loop4: detected capacity change from 0 to 512
[  257.709418][T12501] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  257.712396][T12505] loop6: detected capacity change from 0 to 512
[  257.733421][T12501] EXT4-fs (loop4): orphan cleanup on readonly fs
[  257.749102][T12501] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  257.763902][T12501] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  257.770739][T12501] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.2860: bad orphan inode 768
[  257.789462][T12501] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  257.791842][T12510] loop5: detected capacity change from 0 to 512
[  257.924910][T12515] SELinux: failed to load policy
[  257.928220][T12501] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2860'.
[  257.941324][ T9294] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.969031][T12520] loop7: detected capacity change from 0 to 512
[  257.977253][T12520] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  257.995832][T12519] netlink: 'syz.0.2866': attribute type 9 has an invalid length.
[  258.029888][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.154588][T12528] loop7: detected capacity change from 0 to 2048
[  258.183885][T12528] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #2: comm syz.7.2870: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5)
[  258.206881][T12528] EXT4-fs (loop7): get root inode failed
[  258.212656][T12528] EXT4-fs (loop7): mount failed
[  258.273296][   T29] kauditd_printk_skb: 736 callbacks suppressed
[  258.273310][   T29] audit: type=1326 audit(1749340325.696:16381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12502 comm="syz.6.2859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0223f111e5 code=0x7ffc0000
[  258.304396][   T29] audit: type=1326 audit(1749340325.726:16382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12502 comm="syz.6.2859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0223f111e5 code=0x7ffc0000
[  258.328277][   T29] audit: type=1326 audit(1749340325.726:16383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12537 comm="syz.7.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf35ade929 code=0x7ffc0000
[  258.335519][T12538] loop7: detected capacity change from 0 to 512
[  258.351912][   T29] audit: type=1326 audit(1749340325.726:16384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12537 comm="syz.7.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf35ade929 code=0x7ffc0000
[  258.360857][T12538] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  258.381769][   T29] audit: type=1326 audit(1749340325.726:16385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12537 comm="syz.7.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf35ade929 code=0x7ffc0000
[  258.415552][   T29] audit: type=1326 audit(1749340325.726:16386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12537 comm="syz.7.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf35ade929 code=0x7ffc0000
[  258.423754][T12538] EXT4-fs (loop7): 1 truncate cleaned up
[  258.439475][   T29] audit: type=1326 audit(1749340325.726:16387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12537 comm="syz.7.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf35ade929 code=0x7ffc0000
[  258.445838][T12538] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  258.468854][   T29] audit: type=1326 audit(1749340325.726:16388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12537 comm="syz.7.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf35ade929 code=0x7ffc0000
[  258.468889][   T29] audit: type=1326 audit(1749340325.726:16389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12537 comm="syz.7.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf35ade929 code=0x7ffc0000
[  258.528308][   T29] audit: type=1326 audit(1749340325.726:16390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12537 comm="syz.7.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf35ade929 code=0x7ffc0000
[  258.575317][ T9294] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.632146][T12550] loop7: detected capacity change from 0 to 512
[  258.641186][T12550] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  258.663908][T12550] EXT4-fs (loop7): orphan cleanup on readonly fs
[  258.670468][T12550] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  258.685179][T12550] EXT4-fs (loop7): Cannot turn on quotas: error -22
[  258.691867][T12550] EXT4-fs error (device loop7): ext4_orphan_get:1419: comm syz.7.2876: bad orphan inode 768
[  258.709118][T12554] loop6: detected capacity change from 0 to 512
[  258.709654][T12550] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  258.716168][T12554] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  258.906560][T12568] loop6: detected capacity change from 0 to 512
[  259.032437][ T9294] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.093880][T12585] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12585 comm=syz.0.2885
[  259.106556][T12585] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12585 comm=syz.0.2885
[  259.160250][T12569] lo speed is unknown, defaulting to 1000
[  259.170624][T12569] lo speed is unknown, defaulting to 1000
[  259.375085][T12569] chnl_net:caif_netlink_parms(): no params data found
[  259.412444][T12599] loop5: detected capacity change from 0 to 128
[  259.427048][T12599] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  259.444960][T12599] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  259.471065][T12569] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.478225][T12569] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.486382][T12569] bridge_slave_0: entered allmulticast mode
[  259.488988][T12599] x_tables: ip6_tables: mh match: only valid for protocol 135
[  259.493154][T12569] bridge_slave_0: entered promiscuous mode
[  259.506845][T12569] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.514030][T12569] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.521296][T12569] bridge_slave_1: entered allmulticast mode
[  259.528135][T12569] bridge_slave_1: entered promiscuous mode
[  259.557144][T12569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  259.570402][T12569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  259.597047][T12569] team0: Port device team_slave_0 added
[  259.608840][T12569] team0: Port device team_slave_1 added
[  259.661044][T12569] batman_adv: batadv0: Adding interface: batadv_slave_0
[  259.668094][T12569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  259.694104][T12569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  259.737731][T12569] batman_adv: batadv0: Adding interface: batadv_slave_1
[  259.744966][T12569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  259.771085][T12569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  259.886322][T12569] hsr_slave_0: entered promiscuous mode
[  259.894536][T12569] hsr_slave_1: entered promiscuous mode
[  259.905516][T12619] x_tables: ip6_tables: mh match: only valid for protocol 135
[  259.909810][T12569] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  259.933177][T12569] Cannot create hsr debugfs directory
[  259.944117][T12620] loop6: detected capacity change from 0 to 256
[  260.005542][T12623] loop7: detected capacity change from 0 to 256
[  260.046253][T12623] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  260.110831][T12569] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.198874][T12569] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.282549][T12569] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.319109][T11200] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  260.370643][T12569] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.428146][T12639] loop5: detected capacity change from 0 to 512
[  260.495470][T12569] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  260.518014][T12569] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  260.530750][T12569] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  260.549597][T12569] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  260.677987][T12569] 8021q: adding VLAN 0 to HW filter on device bond0
[  260.720303][T12569] 8021q: adding VLAN 0 to HW filter on device team0
[  260.744824][T11194] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.752022][T11194] bridge0: port 1(bridge_slave_0) entered forwarding state
[  260.770033][T11191] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.777197][T11191] bridge0: port 2(bridge_slave_1) entered forwarding state
[  261.011078][T12569] 8021q: adding VLAN 0 to HW filter on device batadv0
[  261.018361][T12662] loop6: detected capacity change from 0 to 1024
[  261.026265][T12662] ext4: Bad value for 'mb_optimize_scan'
[  261.073616][T12668] __nla_validate_parse: 20 callbacks suppressed
[  261.073637][T12668] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2905'.
[  261.094581][T12670] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=12670 comm=syz.6.2908
[  261.113116][T12670] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2908'.
[  261.126216][T12670] bridge0: entered promiscuous mode
[  261.133995][T12670] bridge0: port 3(macvlan2) entered blocking state
[  261.140589][T12670] bridge0: port 3(macvlan2) entered disabled state
[  261.147812][T12670] macvlan2: entered allmulticast mode
[  261.153315][T12670] bridge0: entered allmulticast mode
[  261.160569][T12670] macvlan2: left allmulticast mode
[  261.165822][T12670] bridge0: left allmulticast mode
[  261.171610][T12670] bridge0: left promiscuous mode
[  261.238373][T12634] lo speed is unknown, defaulting to 1000
[  261.261840][T12634] lo speed is unknown, defaulting to 1000
[  261.310448][T12683] loop5: detected capacity change from 0 to 128
[  261.318297][T12683] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  261.342198][T12569] veth0_vlan: entered promiscuous mode
[  261.350639][T12683] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  261.364499][T12569] veth1_vlan: entered promiscuous mode
[  261.373668][T12683] x_tables: ip6_tables: mh match: only valid for protocol 135
[  261.404535][T12569] veth0_macvtap: entered promiscuous mode
[  261.417283][T12688] pim6reg1: entered promiscuous mode
[  261.422747][T12688] pim6reg1: entered allmulticast mode
[  261.433388][T12569] veth1_macvtap: entered promiscuous mode
[  261.453547][T12569] batman_adv: batadv0: Interface activated: batadv_slave_0
[  261.469346][T12569] batman_adv: batadv0: Interface activated: batadv_slave_1
[  261.506990][T12569] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  261.515886][T12569] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  261.524800][T12569] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  261.533628][T12569] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  261.869078][T12701] loop4: detected capacity change from 0 to 512
[  261.881140][T12701] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  261.918771][T12701] EXT4-fs (loop4): orphan cleanup on readonly fs
[  261.936071][T12701] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  261.950712][T12701] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  261.957498][T12701] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.2914: bad orphan inode 768
[  262.085139][T12701] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  262.168217][T12712] loop7: detected capacity change from 0 to 512
[  262.224915][T12716] loop6: detected capacity change from 0 to 512
[  262.241613][T11194] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  262.301000][T12724] loop5: detected capacity change from 0 to 2048
[  262.336939][T12724] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #2: comm syz.5.2921: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5)
[  262.359162][T12726] SELinux: failed to load policy
[  262.374398][T12724] EXT4-fs (loop5): get root inode failed
[  262.380112][T12724] EXT4-fs (loop5): mount failed
[  262.450345][T12736] SELinux: failed to load policy
[  262.462578][T12569] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.505782][T12743] loop4: detected capacity change from 0 to 512
[  262.526964][T12743] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  262.541345][T12743] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  262.576271][T12752] x_tables: ip6_tables: mh match: only valid for protocol 135
[  262.837209][T12756] lo speed is unknown, defaulting to 1000
[  262.843728][T12756] lo speed is unknown, defaulting to 1000
[  263.147613][T12758] loop6: detected capacity change from 0 to 512
[  263.154578][T12758] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  263.218051][T12760] loop7: detected capacity change from 0 to 128
[  263.226826][T12760] EXT4-fs: Ignoring removed nobh option
[  263.234395][T12760] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  263.248405][T12762] SELinux: failed to load policy
[  263.259948][T12760] ext4 filesystem being mounted at /198/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  263.319101][ T9294] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  263.402770][T12569] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.489297][T12774] loop4: detected capacity change from 0 to 512
[  263.532457][T12774] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  263.548569][T12770] loop7: detected capacity change from 0 to 256
[  263.561965][T12774] EXT4-fs (loop4): orphan cleanup on readonly fs
[  263.574942][T12776] tipc: Started in network mode
[  263.579957][T12776] tipc: Node identity 02f9c6efc18a, cluster identity 4711
[  263.587383][T12776] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  263.612442][T12774] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  263.627078][T12774] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  263.633724][T12774] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.2938: bad orphan inode 768
[  263.706199][T12776] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2941'.
[  263.732901][T12774] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  263.748779][T12778] tipc: Resetting bearer <eth:syzkaller0>
[  263.755540][T12770] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2937'.
[  263.760529][T12770] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  263.792755][T12776] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2941'.
[  263.814368][T12776] bridge0: port 2(bridge_slave_1) entered disabled state
[  263.821778][T12776] bridge0: port 1(bridge_slave_0) entered disabled state
[  263.872161][T12775] tipc: Resetting bearer <eth:syzkaller0>
[  263.874457][T12783] loop7: detected capacity change from 0 to 512
[  263.896889][T12775] tipc: Disabling bearer <eth:syzkaller0>
[  263.962423][   T29] kauditd_printk_skb: 1072 callbacks suppressed
[  263.962440][   T29] audit: type=1326 audit(1749340331.377:17463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12782 comm="syz.7.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf35ade929 code=0x7ffc0000
[  264.032577][   T29] audit: type=1326 audit(1749340331.417:17464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12782 comm="syz.7.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fbf35ade929 code=0x7ffc0000
[  264.056370][   T29] audit: type=1326 audit(1749340331.417:17465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12782 comm="syz.7.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf35ade929 code=0x7ffc0000
[  264.080005][   T29] audit: type=1326 audit(1749340331.417:17466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12782 comm="syz.7.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf35ade929 code=0x7ffc0000
[  264.103758][   T29] audit: type=1326 audit(1749340331.427:17467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12782 comm="syz.7.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7fbf35ade929 code=0x7ffc0000
[  264.127422][   T29] audit: type=1326 audit(1749340331.427:17468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12782 comm="syz.7.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf35ade929 code=0x7ffc0000
[  264.151194][   T29] audit: type=1326 audit(1749340331.427:17469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12782 comm="syz.7.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf35ade929 code=0x7ffc0000
[  264.175578][   T29] audit: type=1326 audit(1749340331.577:17470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12782 comm="syz.7.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fbf35ade929 code=0x7ffc0000
[  264.225837][   T29] audit: type=1326 audit(1749340331.627:17471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12782 comm="syz.7.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf35ade929 code=0x7ffc0000
[  264.249761][   T29] audit: type=1326 audit(1749340331.627:17472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12782 comm="syz.7.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf35ade929 code=0x7ffc0000
[  264.287231][T12569] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.381674][T12800] SELinux: failed to load policy
[  264.435134][T12805] loop6: detected capacity change from 0 to 128
[  264.442074][T12805] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  264.458765][T12805] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  264.459834][T12806] netlink: 'syz.4.2948': attribute type 1 has an invalid length.
[  264.472651][T12805] x_tables: ip6_tables: mh match: only valid for protocol 135
[  264.478104][T12806] vxcan0: Master is either lo or non-ether device
[  264.587209][T12808] loop5: detected capacity change from 0 to 512
[  264.594110][T12808] EXT4-fs: Ignoring removed orlov option
[  264.603016][T12808] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  264.627995][T12808] EXT4-fs (loop5): 1 orphan inode deleted
[  264.633987][T12808] EXT4-fs (loop5): 1 truncate cleaned up
[  264.640568][T12808] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  264.645598][T12814] loop4: detected capacity change from 0 to 512
[  264.664917][T12814] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  264.677870][T12814] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  264.805993][T12819] loop7: detected capacity change from 0 to 128
[  264.815141][T12735] EXT4-fs error (device loop5): ext4_find_dest_de:2052: inode #12: block 7: comm syz.5.2926: bad entry in directory: rec_len is too small for name_len - offset=0, inode=13, rec_len=16, size=56 fake=0
[  264.844554][T12819] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  264.882240][T12735] EXT4-fs (loop5): Remounting filesystem read-only
[  264.892091][T12819] ext4 filesystem being mounted at /201/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  264.897400][T12817] lo speed is unknown, defaulting to 1000
[  264.908602][T12817] lo speed is unknown, defaulting to 1000
[  265.061782][ T9294] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  265.092952][T12825] loop7: detected capacity change from 0 to 256
[  265.120089][T12825] FAT-fs (loop7): Directory bread(block 64) failed
[  265.126975][T12825] FAT-fs (loop7): Directory bread(block 65) failed
[  265.133731][T12825] FAT-fs (loop7): Directory bread(block 66) failed
[  265.140457][T12825] FAT-fs (loop7): Directory bread(block 67) failed
[  265.141449][T12823] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2954'.
[  265.147199][T12825] FAT-fs (loop7): Directory bread(block 68) failed
[  265.156127][T12823] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2954'.
[  265.162799][T12825] FAT-fs (loop7): Directory bread(block 69) failed
[  265.171625][T12823] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2954'.
[  265.178185][T12825] FAT-fs (loop7): Directory bread(block 70) failed
[  265.194078][T12825] FAT-fs (loop7): Directory bread(block 71) failed
[  265.195933][T12823] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2954'.
[  265.200900][T12825] FAT-fs (loop7): Directory bread(block 72) failed
[  265.216310][T12825] FAT-fs (loop7): Directory bread(block 73) failed
[  265.557403][T11200] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  265.672568][T12840] lo speed is unknown, defaulting to 1000
[  265.678994][T12840] lo speed is unknown, defaulting to 1000
[  265.806788][T12842] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  265.885134][T12842] SELinux: failed to load policy
[  265.935194][T12569] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.988740][ T7075] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.997926][T12851] loop6: detected capacity change from 0 to 128
[  266.005514][T12851] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  266.019303][T12851] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  266.036703][T12851] x_tables: ip6_tables: mh match: only valid for protocol 135
[  266.063261][T12858] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2958'.
[  266.127515][T12861] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.2962'.
[  266.731495][T12853] lo speed is unknown, defaulting to 1000
[  266.752264][T12853] lo speed is unknown, defaulting to 1000
[  266.952740][T11200] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  267.006594][T12880] loop6: detected capacity change from 0 to 512
[  267.031040][T12880] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  267.051451][T12880] EXT4-fs (loop6): 1 truncate cleaned up
[  267.063136][T12880] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.084439][T12884] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2965'.
[  267.132641][ T8743] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.226953][T12888] loop6: detected capacity change from 0 to 512
[  267.239783][T12888] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  267.262849][T12888] EXT4-fs (loop6): 1 truncate cleaned up
[  267.269131][T12888] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.328277][ T8743] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.404148][T12901] loop5: detected capacity change from 0 to 512
[  267.435411][T12901] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.451523][T12899] lo speed is unknown, defaulting to 1000
[  267.459502][T12899] lo speed is unknown, defaulting to 1000
[  267.460439][T12901] ext4 filesystem being mounted at /348/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  267.572662][T12909] loop7: detected capacity change from 0 to 512
[  267.593527][T12907] lo speed is unknown, defaulting to 1000
[  267.599651][T12907] lo speed is unknown, defaulting to 1000
[  267.684701][T12909] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.703503][T12909] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  267.783356][T12924] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  268.049767][T12931] lo speed is unknown, defaulting to 1000
[  268.056085][T12931] lo speed is unknown, defaulting to 1000
[  268.302102][ T7075] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.468437][T12938] loop4: detected capacity change from 0 to 256
[  268.479458][T12938] bridge: RTM_NEWNEIGH with invalid ether address
[  268.486734][T12938] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  268.513177][ T9294] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.647299][T12945] lo speed is unknown, defaulting to 1000
[  268.662220][T12952] loop4: detected capacity change from 0 to 512
[  268.669075][T12945] lo speed is unknown, defaulting to 1000
[  268.675760][T12954] loop7: detected capacity change from 0 to 2048
[  268.685540][T12952] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  268.706924][T12952] EXT4-fs (loop4): 1 truncate cleaned up
[  268.726669][T12954] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #2: comm syz.7.2994: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5)
[  268.764259][T12952] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  268.805254][T12954] EXT4-fs (loop7): get root inode failed
[  268.811002][T12954] EXT4-fs (loop7): mount failed
[  268.827121][T12569] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.863658][T12961] loop4: detected capacity change from 0 to 512
[  268.886862][T12961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  268.910157][T12961] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  269.105390][T12968] loop7: detected capacity change from 0 to 512
[  269.167126][T12968] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  269.207475][T12968] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  269.365574][T12980] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  269.404290][   T29] kauditd_printk_skb: 231 callbacks suppressed
[  269.404308][   T29] audit: type=1326 audit(1749340336.828:17704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12978 comm="syz.6.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0223ede929 code=0x7ffc0000
[  269.434212][   T29] audit: type=1326 audit(1749340336.828:17705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12978 comm="syz.6.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0223ede929 code=0x7ffc0000
[  269.457868][   T29] audit: type=1326 audit(1749340336.828:17706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12978 comm="syz.6.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f0223ede929 code=0x7ffc0000
[  269.481682][   T29] audit: type=1326 audit(1749340336.828:17707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12978 comm="syz.6.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0223ede929 code=0x7ffc0000
[  269.572482][   T29] audit: type=1326 audit(1749340336.828:17708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12978 comm="syz.6.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0223ede929 code=0x7ffc0000
[  269.596272][   T29] audit: type=1326 audit(1749340336.828:17709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12978 comm="syz.6.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0223ede929 code=0x7ffc0000
[  269.619905][   T29] audit: type=1326 audit(1749340336.828:17710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12978 comm="syz.6.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0223ede929 code=0x7ffc0000
[  269.643647][   T29] audit: type=1326 audit(1749340336.828:17711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12978 comm="syz.6.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0223ede929 code=0x7ffc0000
[  269.667212][   T29] audit: type=1326 audit(1749340336.828:17712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12978 comm="syz.6.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0223ede929 code=0x7ffc0000
[  269.690834][   T29] audit: type=1326 audit(1749340336.828:17713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12978 comm="syz.6.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0223ede929 code=0x7ffc0000
[  269.765178][T12966] lo speed is unknown, defaulting to 1000
[  269.771408][T12966] lo speed is unknown, defaulting to 1000
[  269.839790][T12981] lo speed is unknown, defaulting to 1000
[  269.845980][T12981] lo speed is unknown, defaulting to 1000
[  269.877790][T12942] lo speed is unknown, defaulting to 1000
[  269.915269][T12569] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.926038][T12942] lo speed is unknown, defaulting to 1000
[  269.956552][T12985] bridge: RTM_NEWNEIGH with invalid ether address
[  269.986972][ T9294] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.064371][T12985] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  270.096714][T12998] loop4: detected capacity change from 0 to 2048
[  270.103836][T12996] loop7: detected capacity change from 0 to 512
[  270.110524][T12996] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  270.112139][T12997] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12997 comm=syz.6.3006
[  270.131448][T12997] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12997 comm=syz.6.3006
[  270.148461][T12998] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #2: comm syz.4.3007: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5)
[  270.168091][T12998] EXT4-fs (loop4): get root inode failed
[  270.173630][T13002] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  270.173895][T12998] EXT4-fs (loop4): mount failed
[  270.184405][T13002] SELinux: failed to load policy
[  270.265143][T13009] loop7: detected capacity change from 0 to 512
[  270.290863][T13015] loop4: detected capacity change from 0 to 128
[  270.312835][T13009] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  270.330324][T13015] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  270.348481][T13019] loop5: detected capacity change from 0 to 128
[  270.355279][T13009] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  270.371833][T13015] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  270.372247][T13019] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  270.458051][T13019] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  270.507631][T13019] x_tables: ip6_tables: mh match: only valid for protocol 135
[  270.516579][T13015] x_tables: ip6_tables: mh match: only valid for protocol 135
[  270.996449][T13032] loop6: detected capacity change from 0 to 512
[  271.026039][T13032] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  271.036122][T13028] lo speed is unknown, defaulting to 1000
[  271.042715][T13028] lo speed is unknown, defaulting to 1000
[  271.094037][T13033] lo speed is unknown, defaulting to 1000
[  271.101476][T13033] lo speed is unknown, defaulting to 1000
[  271.170731][T13032] EXT4-fs (loop6): orphan cleanup on readonly fs
[  271.182519][ T9294] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.204516][T13032] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  271.219158][T13032] EXT4-fs (loop6): Cannot turn on quotas: error -22
[  271.225824][T13032] EXT4-fs error (device loop6): ext4_orphan_get:1419: comm syz.6.3018: bad orphan inode 768
[  271.301182][T13032] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  271.354110][T13038] loop7: detected capacity change from 0 to 512
[  271.360967][ T8743] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.390938][T13038] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  271.401390][T11200] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  271.434464][T13038] EXT4-fs (loop7): 1 truncate cleaned up
[  271.444486][T13038] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  271.475020][T11201] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  271.488705][T13042] SELinux: failed to load policy
[  271.528133][ T9294] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.650446][T13063] loop4: detected capacity change from 0 to 128
[  271.693738][T13063] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  271.919458][T13072] loop4: detected capacity change from 0 to 128
[  271.926489][T13072] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  271.971287][T13069] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13069 comm=syz.7.3032
[  271.983939][T13069] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13069 comm=syz.7.3032
[  271.998578][T13072] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  272.025072][T13072] x_tables: ip6_tables: mh match: only valid for protocol 135
[  272.275074][T13085] loop6: detected capacity change from 0 to 512
[  272.282650][T13085] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  272.299101][T13085] EXT4-fs (loop6): 1 truncate cleaned up
[  272.372930][T13095] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.3037'.
[  272.767003][T11194] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  272.855899][T13102] loop4: detected capacity change from 0 to 512
[  272.866960][T13102] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  272.879391][T13102] EXT4-fs (loop4): 1 truncate cleaned up
[  273.179635][ T8534] hid-generic 0000:0004:0000.0031: unknown main item tag 0x0
[  273.187140][ T8534] hid-generic 0000:0004:0000.0031: unknown main item tag 0x0
[  273.194620][ T8534] hid-generic 0000:0004:0000.0031: unknown main item tag 0x0
[  273.239180][T13114] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3042'.
[  273.259189][ T8534] hid-generic 0000:0004:0000.0031: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  273.284247][T13116] loop6: detected capacity change from 0 to 512
[  273.346938][T13119] loop4: detected capacity change from 0 to 2048
[  273.404848][T13119] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #2: comm syz.4.3045: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5)
[  273.454793][T13119] EXT4-fs (loop4): get root inode failed
[  273.460529][T13119] EXT4-fs (loop4): mount failed
[  273.589796][T13131] loop5: detected capacity change from 0 to 2048
[  273.630423][T13135] SELinux: failed to load policy
[  273.673929][T13142] loop4: detected capacity change from 0 to 512
[  273.691864][T13142] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  273.719722][T13142] EXT4-fs (loop4): orphan cleanup on readonly fs
[  273.735289][T13140] SELinux: failed to load policy
[  273.736506][T13142] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  273.754876][T13142] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  273.761548][T13142] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.3052: bad orphan inode 768
[  273.842350][T13145] SELinux: failed to load policy
[  273.891107][T13147] loop5: detected capacity change from 0 to 512
[  273.984284][T13152] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3056'.
[  274.075272][T13142] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3052'.
[  274.084381][T13142] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3052'.
[  274.093508][T13142] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3052'.
[  274.174603][T13156] lo speed is unknown, defaulting to 1000
[  274.180941][T13156] lo speed is unknown, defaulting to 1000
[  274.342803][T13142] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3052'.
[  274.422694][   T29] kauditd_printk_skb: 223 callbacks suppressed
[  274.422708][   T29] audit: type=1326 audit(1749340341.848:17937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13161 comm="syz.6.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0223ede929 code=0x7ffc0000
[  274.510931][   T29] audit: type=1326 audit(1749340341.878:17938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13161 comm="syz.6.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0223ede929 code=0x7ffc0000
[  274.534663][   T29] audit: type=1326 audit(1749340341.878:17939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13161 comm="syz.6.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0223ede929 code=0x7ffc0000
[  274.558524][   T29] audit: type=1326 audit(1749340341.878:17940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13161 comm="syz.6.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f0223ede929 code=0x7ffc0000
[  274.564860][T13164] loop7: detected capacity change from 0 to 512
[  274.582409][   T29] audit: type=1326 audit(1749340341.878:17941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13161 comm="syz.6.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0223ede929 code=0x7ffc0000
[  274.591300][T13164] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  274.612251][   T29] audit: type=1326 audit(1749340341.878:17942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13161 comm="syz.6.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0223edd58a code=0x7ffc0000
[  274.612367][   T29] audit: type=1326 audit(1749340341.878:17943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13161 comm="syz.6.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0223f111e5 code=0x7ffc0000
[  274.670702][   T29] audit: type=1326 audit(1749340342.078:17944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13161 comm="syz.6.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0223ede929 code=0x7ffc0000
[  274.694406][   T29] audit: type=1326 audit(1749340342.078:17945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13161 comm="syz.6.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0223ede929 code=0x7ffc0000
[  274.718025][   T29] audit: type=1326 audit(1749340342.078:17946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13161 comm="syz.6.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0223ede929 code=0x7ffc0000
[  274.903404][T13181] FAULT_INJECTION: forcing a failure.
[  274.903404][T13181] name failslab, interval 1, probability 0, space 0, times 0
[  274.916237][T13181] CPU: 1 UID: 0 PID: 13181 Comm: syz.5.3066 Not tainted 6.15.0-syzkaller-13659-g5b032cac6225 #0 PREEMPT(voluntary) 
[  274.916294][T13181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  274.916310][T13181] Call Trace:
[  274.916318][T13181]  <TASK>
[  274.916327][T13181]  __dump_stack+0x1d/0x30
[  274.916351][T13181]  dump_stack_lvl+0xe8/0x140
[  274.916372][T13181]  dump_stack+0x15/0x1b
[  274.916392][T13181]  should_fail_ex+0x265/0x280
[  274.916427][T13181]  should_failslab+0x8c/0xb0
[  274.916458][T13181]  kmem_cache_alloc_node_noprof+0x57/0x320
[  274.916495][T13181]  ? __alloc_skb+0x101/0x320
[  274.916518][T13181]  __alloc_skb+0x101/0x320
[  274.916539][T13181]  netlink_alloc_large_skb+0xba/0xf0
[  274.916617][T13181]  netlink_sendmsg+0x3cf/0x6b0
[  274.916648][T13181]  ? __pfx_netlink_sendmsg+0x10/0x10
[  274.916716][T13181]  __sock_sendmsg+0x142/0x180
[  274.916752][T13181]  ____sys_sendmsg+0x31e/0x4e0
[  274.916783][T13181]  ___sys_sendmsg+0x17b/0x1d0
[  274.916903][T13181]  __x64_sys_sendmsg+0xd4/0x160
[  274.916956][T13181]  x64_sys_call+0x2999/0x2fb0
[  274.916978][T13181]  do_syscall_64+0xd2/0x200
[  274.917063][T13181]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  274.917092][T13181]  ? clear_bhb_loop+0x40/0x90
[  274.917118][T13181]  ? clear_bhb_loop+0x40/0x90
[  274.917158][T13181]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.917221][T13181] RIP: 0033:0x7f83ee6ce929
[  274.917239][T13181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  274.917313][T13181] RSP: 002b:00007f83ecd37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  274.917330][T13181] RAX: ffffffffffffffda RBX: 00007f83ee8f5fa0 RCX: 00007f83ee6ce929
[  274.917345][T13181] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003
[  274.917360][T13181] RBP: 00007f83ecd37090 R08: 0000000000000000 R09: 0000000000000000
[  274.917374][T13181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  274.917388][T13181] R13: 0000000000000000 R14: 00007f83ee8f5fa0 R15: 00007ffd0fef8be8
[  274.917406][T13181]  </TASK>
[  275.152472][T13179] SELinux: failed to load policy
[  275.555179][T13202] loop7: detected capacity change from 0 to 128
[  275.566719][T13202] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  275.601092][T13202] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  275.683683][T13202] x_tables: ip6_tables: mh match: only valid for protocol 135
[  276.203912][T13211] loop4: detected capacity change from 0 to 512
[  276.255261][T13211] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  276.592730][T13219] lo speed is unknown, defaulting to 1000
[  276.599420][T13219] lo speed is unknown, defaulting to 1000
[  276.874789][T13168] loop6: detected capacity change from 0 to 512
[  276.888140][T11197] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  276.897797][T13168] EXT4-fs: Ignoring removed orlov option
[  276.904034][T13168] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  276.917685][T13168] EXT4-fs (loop6): 1 orphan inode deleted
[  276.923590][T13168] EXT4-fs (loop6): 1 truncate cleaned up
[  276.930495][T13225] loop7: detected capacity change from 0 to 128
[  276.938157][T13225] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  276.952285][T13225] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  276.977495][T13225] x_tables: ip6_tables: mh match: only valid for protocol 135
[  277.013683][T13162] EXT4-fs error (device loop6): ext4_find_dest_de:2052: inode #12: block 7: comm syz.6.3058: bad entry in directory: rec_len is too small for name_len - offset=0, inode=13, rec_len=16, size=56 fake=0
[  277.036701][T13162] EXT4-fs (loop6): Remounting filesystem read-only
[  277.107241][T13229] SELinux: failed to load policy
[  277.190544][T13239] loop5: detected capacity change from 0 to 512
[  277.199826][T13239] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  277.235261][T13239] EXT4-fs (loop5): orphan cleanup on readonly fs
[  277.289121][T13239] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  277.303827][T13239] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  277.310449][T13239] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.3082: bad orphan inode 768
[  277.803507][T13251] loop5: detected capacity change from 0 to 128
[  277.810418][T13251] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  277.861661][T13251] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  277.886520][T13251] x_tables: ip6_tables: mh match: only valid for protocol 135
[  278.054571][T13253] ==================================================================
[  278.062733][T13253] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark
[  278.070689][T13253] 
[  278.073045][T13253] write to 0xffff888106bee614 of 4 bytes by task 13251 on cpu 1:
[  278.080787][T13253]  xas_set_mark+0x12b/0x140
[  278.085335][T13253]  __folio_start_writeback+0x1dd/0x440
[  278.090841][T13253]  mpage_writepages+0xd18/0x1250
[  278.095819][T13253]  fat_writepages+0x24/0x30
[  278.100370][T13253]  do_writepages+0x1c3/0x310
[  278.105008][T13253]  file_write_and_wait_range+0x156/0x2c0
[  278.110692][T13253]  __generic_file_fsync+0x46/0x140
[  278.115834][T13253]  fat_file_fsync+0x49/0x100
[  278.120483][T13253]  vfs_fsync_range+0x10d/0x130
[  278.125281][T13253]  generic_file_write_iter+0x1b8/0x2f0
[  278.130764][T13253]  iter_file_splice_write+0x5f2/0x970
[  278.136164][T13253]  direct_splice_actor+0x156/0x2a0
[  278.141303][T13253]  splice_direct_to_actor+0x312/0x680
[  278.146794][T13253]  do_splice_direct+0xda/0x150
[  278.151586][T13253]  do_sendfile+0x380/0x650
[  278.156028][T13253]  __x64_sys_sendfile64+0x105/0x150
[  278.161244][T13253]  x64_sys_call+0xb39/0x2fb0
[  278.165851][T13253]  do_syscall_64+0xd2/0x200
[  278.170470][T13253]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  278.176391][T13253] 
[  278.178720][T13253] read to 0xffff888106bee614 of 4 bytes by task 13253 on cpu 0:
[  278.186357][T13253]  __writeback_single_inode+0x1f9/0x7c0
[  278.191946][T13253]  writeback_single_inode+0x167/0x3e0
[  278.197346][T13253]  sync_inode_metadata+0x5b/0x90
[  278.202300][T13253]  __generic_file_fsync+0xf8/0x140
[  278.207432][T13253]  fat_file_fsync+0x49/0x100
[  278.212040][T13253]  vfs_fsync_range+0x10d/0x130
[  278.216816][T13253]  generic_file_write_iter+0x1b8/0x2f0
[  278.222293][T13253]  iter_file_splice_write+0x5f2/0x970
[  278.227696][T13253]  direct_splice_actor+0x156/0x2a0
[  278.232848][T13253]  splice_direct_to_actor+0x312/0x680
[  278.238250][T13253]  do_splice_direct+0xda/0x150
[  278.243044][T13253]  do_sendfile+0x380/0x650
[  278.247485][T13253]  __x64_sys_sendfile64+0x105/0x150
[  278.252844][T13253]  x64_sys_call+0xb39/0x2fb0
[  278.257473][T13253]  do_syscall_64+0xd2/0x200
[  278.262013][T13253]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  278.267943][T13253] 
[  278.270280][T13253] value changed: 0x0a000021 -> 0x04000021
[  278.276101][T13253] 
[  278.278437][T13253] Reported by Kernel Concurrency Sanitizer on:
[  278.284598][T13253] CPU: 0 UID: 0 PID: 13253 Comm: syz.5.3086 Not tainted 6.15.0-syzkaller-13659-g5b032cac6225 #0 PREEMPT(voluntary) 
[  278.296778][T13253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  278.306862][T13253] ==================================================================
[  278.445419][T11199] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  278.505424][T13245] lo speed is unknown, defaulting to 1000
[  278.516664][T13245] lo speed is unknown, defaulting to 1000
[  278.593521][T13255] loop6: detected capacity change from 0 to 2048
[  278.753634][T11200] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)