last executing test programs:

8m43.857083689s ago: executing program 32 (id=172):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff8500000004000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x69)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c000000100003040000000011b35a0000000000", @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x8000)

5m8.64293704s ago: executing program 33 (id=3199):
unshare(0x22020400)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r5)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00', <r7=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000ffdbdf251700000008000300", @ANYRES32=r7, @ANYBLOB="2c00308014000400f3334b3a377d75925b14c802ee6479f02194f478f2a27c0645bc4d38b7764823166d436a8eb4e7440444e1e55d690c0001800800010003000000050002000800000032d777ebec72a26bf81485fc59363aab537f9d3c5c3c8e1b35bf2c572d220add9c118d8393d04d9f6cbb648240b3efdfe103c33112307762228252496a9c7d0a4e7ac692842488a964879d16c677b2efa0b23609a0dd450088eec3af96953986ee937079a178dca8e38510de1984e32a5af314e7ef52c13d385c8b698e85acd6a2102f81b7084d6753127ea7967d3dc928fd826791bb6994dce2385976385baab131eeda753a6f253e4db20732fec67a530dba4394d80670d818226b793e79ee7196561487d795f26464488d90"], 0x48}}, 0x20000000)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r9)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r11=>0x0})
syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r11, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', <r12=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="0601eaff", @ANYRES16=r4, @ANYBLOB="200028bd7000fcdbdf251d0000000c000600000000000000000048002f800c0002000203aaaaaaaaaaaa08000100dc0000003000038005000200030000000c00050000000000000000000500020000000000080001000000000008000400a60800000c000600030000000300000008000300", @ANYRES32=r7, @ANYBLOB="40002f800c0002000201aaaaaaaaaaaa0800010003000000040003800c0002000200aaaaaaaaaaaa0c0002000201aaaaaaaaaaaa0c000380080001000000000008000300", @ANYRES32=r11, @ANYBLOB="0c00060003000000030000000c000600020000000000000020002f80080001000700000008000100000000000c000200000000000000000008000300", @ANYRES32=r12, @ANYBLOB], 0x104}, 0x1, 0x0, 0x0, 0x40000}, 0xc8c1)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r14 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r14, 0x10c, &(0x7f00000003c0)=0xfff, 0x0, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r13}, 0x10)
r15 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082)
r16 = fcntl$dupfd(r15, 0x0, r15)
ioctl$SG_IO(r16, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r2}, 0x18)
flistxattr(r0, &(0x7f0000000600)=""/62, 0x3e)

4m51.929704071s ago: executing program 3 (id=3377):
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000002001801000020646c4300000000002020207b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
socket$igmp6(0xa, 0x3, 0x2)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
fallocate(r0, 0x39, 0x1, 0x80000001)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r2, 0x0, 0xfffffffffffffffd}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
r3 = gettid()
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082)
read(r4, &(0x7f0000000100)=""/140, 0xde)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000040)={0x197, @tick, 0x0, {}, 0xff, 0x2})
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f0000000240)={0x151a, 0x0, 0x5, 0x3, 0x4, 0xb})
io_uring_setup(0x24, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r4, 0xc0605345, &(0x7f00000001c0)={0xfffffff9, 0x2, {0xffffffffffffffff, 0x3, 0x5, 0x0, 0x8}, 0xd4d})
tkill(r3, 0x7)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd1}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x0, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x20, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10)

4m51.607267732s ago: executing program 3 (id=3380):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0)
r2 = epoll_create(0x8)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000300)={0x10000001})
epoll_pwait2(r2, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18)
r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000011c0), 0x2401, 0x0)
write$P9_RWALK(r4, 0x0, 0x30)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r5}, 0x10)
munlockall()
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, 0x0, 0x0)
r7 = timerfd_create(0x0, 0x800)
timerfd_settime(r7, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
timerfd_settime(r7, 0x2, &(0x7f0000000200)={{0x0, 0x989680}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000c00)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0xfffffffe, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x400000, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}, @TCA_POLICE_RATE={0x404}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0)

4m50.707111648s ago: executing program 3 (id=3392):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18)
pipe2$9p(&(0x7f00000001c0), 0x0) (fail_nth: 6)

4m50.649850224s ago: executing program 3 (id=3394):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x404, &(0x7f0000000580)={[{@sysvgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@max_batch_time={'max_batch_time', 0x3d, 0x94ca}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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")
r0 = syz_clone(0x11, 0x0, 0xb, 0x0, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x113a, 0x2, 0x2}, &(0x7f00000000c0), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f00000024c0)={0x2, 0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}], &(0x7f0000002480)=[0x2]}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r2}, 0x10)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)

4m50.324260555s ago: executing program 3 (id=3397):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = getpid()
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000070000000400000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000030000000000000000000400000000000cc8355cbe9799540600"], 0x50)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0)
r2 = syz_pidfd_open(r0, 0x0)
setns(r2, 0x24020000)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r4, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xd9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4014}, 0x2800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0)

4m49.479944186s ago: executing program 3 (id=3408):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000c00)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0xfffffffe, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x400000, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}, @TCA_POLICE_RATE={0x404}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0)

4m49.479184086s ago: executing program 34 (id=3408):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000c00)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0xfffffffe, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x400000, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}, @TCA_POLICE_RATE={0x404}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0)

4m45.329594373s ago: executing program 7 (id=3443):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0)={[{@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@errors_remount}]}, 0x6, 0x5fc, &(0x7f0000001000)="$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")
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_REMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000001600)={0x175c, 0x1, 0x5, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [{{0x254, 0x1, {{0x3, 0x5}, 0x3, 0x7, 0x8, 0xc, 0x17, 'syz0\x00', "d78a40c7ea53f9c656e178286362581236e08bda73e00273d1c3fcc0a4f2da4f", "7ddf8e95bb16857e64b7832e0f16460ddfeb62b2fc59103fa2fda6619160d5f7", [{0x5, 0x1, {0x1, 0x7}}, {0x3, 0x8, {0x1, 0x7ff}}, {0xd, 0x1, {0x2, 0xc1}}, {0xce, 0x2, {0x0, 0x7}}, {0x7, 0x400, {0x1, 0x2}}, {0x7, 0x8, {0x2, 0x275}}, {0x3, 0x4, {0x1}}, {0x360e, 0x3, {0x3, 0x93}}, {0x2, 0x4, {0x3, 0x61}}, {0x6cf8, 0x2, {0x2, 0x1}}, {0x0, 0x8, {0x0, 0x8}}, {0x8, 0x2, {0x0, 0x8001}}, {0x2, 0x9, {0x2, 0x1}}, {0x8, 0x4, {0x2, 0x6}}, {0x1ff, 0x1, {0x3, 0x40}}, {0xec1f, 0xa71, {0x3, 0xfff}}, {0x9, 0x81, {0x1}}, {0x0, 0x10, {0x2, 0x1}}, {0x1, 0x1, {0x1, 0x9}}, {0x9, 0xfff, {0x1, 0x46}}, {0x4, 0x27c, {0x1, 0xb}}, {0x71cd, 0x1, {0x3, 0x8}}, {0x7, 0x4, {0x1, 0x7}}, {0xb58c, 0x6149, {0x1, 0x4}}, {0x4, 0x8, {0x3, 0x8}}, {0x6, 0x0, {0x3, 0xec63}}, {0x9, 0x0, {0x1, 0x1}}, {0x8, 0x3ff, {0x2, 0x5}}, {0xb6, 0x7b2b, {0x2, 0xfff}}, {0x400, 0xa7fa, {0x0, 0x3}}, {0x73fd, 0x8, {0x2, 0x1}}, {0x8, 0x100, {0x2, 0xfffff8aa}}, {0x9, 0x6, {0x3, 0xcde}}, {0x5dc1, 0x7d6, {0x1, 0x3}}, {0x6, 0x5, {0x3, 0x1b}}, {0x7ff, 0x8, {0x2, 0x8}}, {0x38cc, 0x81, {0x3, 0x8}}, {0x1, 0x312e, {0x3}}, {0x8, 0x0, {0x0, 0xe52}}, {0x5, 0xb0, {0x0, 0x3}}]}}}, {{0x254, 0x1, {{0x0, 0x1}, 0x3, 0x0, 0x7, 0x3c00, 0x28, 'syz0\x00', "221f7c1e0ed921ef915721a97c41d18ea4f47e11d6f8e05897d534da9c3107f3", "b5ab456d99987a4ea281c808c96426287bbb9907dfe2d78818fce66a3e8d9771", [{0x5, 0xff33, {0x2, 0x8}}, {0x6, 0x1, {0x2, 0x1}}, {0x0, 0x40, {0x1, 0xfffffffe}}, {0x100, 0x7, {0x3, 0x2a8f}}, {0x7ff, 0x7, {0x2, 0x7}}, {0x5, 0xcc, {0x0, 0x2}}, {0x9, 0x9, {0x2}}, {0xffff, 0xd3dd, {0x3, 0x3ff}}, {0x2, 0x8001, {0x2, 0x9}}, {0x7, 0x4e9, {0x3, 0xfffffff9}}, {0x0, 0x8, {0x2, 0x3}}, {0x4, 0xffff, {0x2, 0xfffffffa}}, {0x7, 0x0, {0x2, 0xff}}, {0x1, 0x3, {0x2, 0x5}}, {0x7, 0x9, {0x1, 0x7}}, {0x1, 0x9, {0x0, 0x6}}, {0x3, 0x2, {0x1, 0x7}}, {0x1, 0x81, {0x2, 0x7}}, {0x8, 0x8704, {0x1, 0x7}}, {0x6, 0x5, {0x3, 0x2}}, {0x2, 0x3, {0x2, 0x6}}, {0x4, 0x74e5, {0x0, 0x8e54}}, {0x0, 0x0, {0x2, 0x5}}, {0x0, 0x4, {0x0, 0x7}}, {0x0, 0x8f81, {0x2, 0x10}}, {0x9d4, 0x7, {0x1, 0xf}}, {0x86dc, 0x3a6e}, {0x36f, 0x0, {0x2, 0x5}}, {0x2, 0x10, {0x2, 0x6}}, {0x9, 0xfff8}, {0x3, 0x0, {0x2, 0xb14e575}}, {0x81, 0x5, {0x0, 0x8}}, {0xb82f, 0x6, {0x1, 0x8}}, {0x55, 0x7, {0x2, 0x8}}, {0x7, 0x1, {0x0, 0x1}}, {0x6, 0x6, {0x1, 0x80}}, {0x7, 0x6, {0x3}}, {0x2, 0xffff, {0x2, 0x1}}, {0x1d57, 0x101, {0x1, 0x81}}, {0x5, 0xfff, {0x3, 0x95}}]}}}, {{0x254, 0x1, {{0x1, 0x3}, 0xf, 0x5, 0xe, 0xf, 0x28, 'syz1\x00', "e068e21e2868fcc7c6979ece0e0f64879ee78e887b5bf92f91e99f74f32d969e", "7ff151339ff0ddd42a63808c8c0038bda28ce251d6866ca0558346b9bf1ade33", [{0x3, 0x7ff, {0x2, 0x6b}}, {0x3, 0x3, {0x2, 0x400}}, {0x1503, 0x3, {0x3, 0x7f}}, {0x80, 0x1000, {0x2, 0x8}}, {0x1, 0x0, {0x1, 0x4}}, {0x1000, 0x3, {0x1, 0x9}}, {0x0, 0x7, {0x3, 0x401}}, {0xe2e, 0x23, {0x2, 0xffffffff}}, {0x1000, 0x10, {0x3, 0x10001}}, {0x6, 0x200}, {0xf, 0xae1, {0x0, 0x9}}, {0x1, 0x6, {0x2, 0xfffffafe}}, {0x6, 0x9, {0x1, 0x1}}, {0x4b, 0x9, {0x2}}, {0x8, 0x3, {0x3, 0x80000000}}, {0x5, 0x7, {0x2, 0x3}}, {0x8, 0xf, {0x2, 0x8}}, {0x6, 0x5, {0x1, 0x3}}, {0x6, 0x7, {0x0, 0x8}}, {0xd90, 0x2, {0x2, 0x7f}}, {0x7, 0x1, {0x1, 0x62a7}}, {0x81, 0x7f, {0x2, 0x8}}, {0xffff, 0x0, {0x2, 0x2}}, {0x3, 0x8, {0x1, 0x3}}, {0x5780, 0x3, {0x3, 0x42}}, {0x1, 0x200, {0x1, 0x7}}, {0x6, 0x6aa3, {0x2, 0xa36}}, {0x29f, 0x8, {0x2, 0x6}}, {0xdb32, 0x9, {0x1, 0x2}}, {0x1, 0x2, {0x2, 0x6}}, {0x0, 0x1000, {0x2, 0x3}}, {0xa2ab, 0x400, {0x3}}, {0x8, 0x0, {0x3, 0x5}}, {0x2b0c, 0xbdfc, {0x1, 0x376}}, {0x7, 0x3, {0x1, 0x7}}, {0x7f, 0x0, {0x1, 0x2}}, {0x3, 0x6, {0x1, 0x3}}, {0xc0, 0xae, {0x0, 0x3}}, {0x14f0, 0x207, {0x1}}, {0x4939, 0x7fff, {0x0, 0x2}}]}}}, {{0x254, 0x1, {{0x3, 0xff}, 0x10, 0x5, 0x1, 0x400, 0x0, 'syz1\x00', "bd15f6c6c713ca29631496845eb8b0e8635346bdc1e151d64b5e90bf274203b0", "cd7bad879d93e5a716643fac72016179844ab5f9313b3de640309d020246c024", [{0xa6, 0x10, {0x1, 0x4}}, {0x0, 0x3ff, {0x0, 0x101}}, {0x7, 0x7, {0x1}}, {0x8, 0x401, {0x3, 0xb}}, {0xfffc, 0x811, {0x0, 0xc1}}, {0x47, 0x8001, {0x3, 0x6}}, {0x2, 0xfffc, {0x1, 0x3}}, {0xc7, 0x50d, {0x0, 0x2}}, {0x1, 0x9, {0x3, 0xb}}, {0x5, 0x2, {0x3, 0x7fffffff}}, {0x9, 0xd, {0x0, 0x8}}, {0x0, 0x5, {0x3, 0xa}}, {0xfff7, 0x5, {0x3, 0x1}}, {0x3997, 0x0, {0x2, 0x8}}, {0x2, 0x2c1, {0x0, 0x9}}, {0x10, 0x3, {0x1, 0x3}}, {0x0, 0x5, {0x2, 0x1}}, {0x833, 0x400, {0x3, 0x3}}, {0x4, 0xcb70, {0x0, 0x4}}, {0x9, 0x4, {0x0, 0x3}}, {0x79c, 0x3, {0x1, 0xb4d12f8}}, {0xf3e, 0xfff7, {0x1, 0x4f2}}, {0x4, 0x6000, {0x3, 0x1}}, {0xff, 0x2, {0x1}}, {0x3, 0x8, {0x0, 0x10}}, {0x2362, 0x0, {0x1, 0x5}}, {0x0, 0x8, {0x0, 0x8}}, {0x9, 0xfffd, {0x3, 0xa2}}, {0x1000, 0x7, {0x3, 0x7}}, {0xfffa, 0x1, {0x2, 0x9}}, {0xfffe, 0x0, {0x2, 0x803a}}, {0xcf2, 0x3bd, {0x0, 0xc81}}, {0x2, 0x8, {0x2}}, {0x6da, 0x6, {0x3, 0xfff}}, {0x6, 0x5, {0x3, 0xfffffff9}}, {0x8, 0x5, {0x2, 0x8}}, {0xfff4, 0x4, {0x1, 0x8}}, {0x5, 0x7, {0x3, 0x3}}, {0x3, 0x3, {0x1, 0x45}}, {0x8, 0x1000, {0x0, 0x10}}]}}}, {{0x254, 0x1, {{0x2, 0x7}, 0xa, 0x9, 0x200, 0x6, 0x22, 'syz0\x00', "198de82ad70d9248b0c5a2a0c9a2d239cd679896ba3d4fc265b2ddc9e0e8e275", "83a5ebfad5f0d04408abbabcc6a5a8e55fba4250f06b137dc6a7c3de4d9d96b1", [{0x200, 0xb, {0x3, 0x10001}}, {0x1, 0xff, {0x0, 0x80}}, {0x200, 0x7, {0x2, 0x7f}}, {0x7, 0xfd, {0x0, 0x3bb}}, {0x6, 0x8, {0x2, 0x716c3ef4}}, {0x6, 0x3, {0x1, 0xc80}}, {0x8, 0x7807, {0x1}}, {0x5, 0x5, {0x0, 0x9}}, {0x2, 0x101, {0x0, 0x9}}, {0x7, 0x7, {0x1, 0xf26}}, {0x3, 0x7, {0x2, 0xb}}, {0x6, 0x3, {0x0, 0x4}}, {0x5, 0x9, {0x1, 0x6}}, {0x3, 0x8, {0x1, 0xa}}, {0x7, 0x0, {0x2, 0x7fff}}, {0x0, 0xf1b3, {0x0, 0x7}}, {0x4, 0x5, {0x2, 0x8}}, {0x1000, 0xdf, {0x1, 0x2}}, {0x2df, 0x40, {0x3, 0x6}}, {0x3, 0x4, {0x0, 0xc}}, {0x600, 0x6, {0x0, 0x2056}}, {0x7, 0x0, {0x0, 0x6}}, {0x3, 0x10, {0xa08a1d8a5ed8fe4a, 0x4}}, {0xae, 0x40, {0x1, 0x2}}, {0x1000, 0x8000, {0x1, 0x5000}}, {0x3, 0x7fff, {0x3, 0x6}}, {0x5, 0x9, {0x0, 0x100}}, {0x2, 0x1, {0x2, 0x800}}, {0xa000, 0x27, {0x3, 0x2}}, {0x7, 0x5, {0x0, 0x7fffffff}}, {0x8, 0x4, {0x1, 0x4}}, {0xb, 0x5, {0x1, 0x1}}, {0xb, 0x2, {0x1, 0x40}}, {0x4, 0x0, {0x3, 0xd89}}, {0x4, 0x4, {0x3, 0x81}}, {0x6, 0x9, {0x0, 0xffffffff}}, {0x4, 0xaa, {0x3, 0x3ee}}, {0xa, 0x78e1, {0x2, 0x101}}, {0x7, 0x0, {0x1, 0x6}}, {0x8e, 0x7fc, {0x1, 0x5}}]}}}, {{0x254, 0x1, {{0x2, 0x4}, 0xff, 0x7, 0x3ab9, 0x7f, 0x3, 'syz0\x00', "8efb8e271f4c8885f8a5c57812791caf4e2cba06d14763d98b383af660a976a0", "ebe6289d9c0d2463be94637ab508d629a17e135516f7e1c8ac67f3d6f9fedac9", [{0x6, 0x3ff}, {0x0, 0xf, {0x3, 0x3}}, {0x4, 0x5, {0x3, 0x1ff}}, {0x4, 0x4, {0x0, 0x7}}, {0x8, 0xffff, {0x2, 0x136000}}, {0x952, 0x7, {0x0, 0x9bc80000}}, {0x2, 0x8001, {0x2, 0x9}}, {0x5, 0x1, {0x0, 0x6}}, {0x3, 0x80, {0x1, 0x1}}, {0x5ec8, 0x0, {0x1}}, {0x4, 0xfff, {0x1, 0x8}}, {0x4, 0x6, {0x3, 0x6}}, {0x1, 0x2, {0x0, 0x8}}, {0xa, 0x6}, {0x2, 0x6, {0x2, 0x4}}, {0x180, 0xfff, {0x1, 0x800}}, {0xbb10, 0x9, {0x1, 0x4}}, {0xc, 0x4, {0x0, 0x1}}, {0x401, 0x0, {0x3, 0x10000}}, {0xd, 0x3, {0x3, 0x6}}, {0x40, 0x0, {0x2, 0x81}}, {0x5, 0xad, {0x2, 0x5}}, {0xc, 0x0, {0x3, 0x6}}, {0x7, 0x400, {0x2, 0x2}}, {0xe, 0x1, {0x0, 0x9}}, {0x6, 0x4, {0x3}}, {0x2, 0x3, {0x3}}, {0x6, 0x5, {0x0, 0x64ea773f}}, {0x1, 0xfffc, {0x2, 0x2}}, {0x0, 0xc2d, {0x1, 0x7}}, {0x3, 0xd830, {0x0, 0x8}}, {0x5, 0x3, {0x2, 0x1}}, {0x40, 0x4, {0x0, 0x2}}, {0x8, 0x3123, {0x2, 0x5181ee3e}}, {0x945a, 0x9, {0x1, 0x7}}, {0x4, 0xc5a7, {0x0, 0x3}}, {0xe, 0x5, {0x4, 0x80}}, {0x3, 0x0, {0x2, 0x6}}, {0x45, 0x4, {0x2, 0xe}}, {0x5, 0x401, {0x3, 0xb}}]}}}, {{0x254, 0x1, {{0x0, 0x4db}, 0x2, 0x0, 0x200, 0x3, 0x0, 'syz0\x00', "29bdd7d39294f646cc6f168034e9403dcfed08de345de74751b582c896254a07", "1f64922fc76896bbf88ac08512939aba335f3c2099b93d2b960e29cd678af43c", [{0xf037, 0x8, {0x3, 0x7}}, {0x9, 0x8518, {0x0, 0x10000}}, {0xa, 0xe74, {0x0, 0x6}}, {0x80, 0x10, {0x3, 0x7fffffff}}, {0x8, 0x609, {0x0, 0x7fffffff}}, {0x0, 0x6, {0x3, 0xff}}, {0x7, 0xb52, {0x2, 0x600}}, {0x8b, 0x81, {0x2, 0x8}}, {0x6, 0x7}, {0x0, 0x6, {0x0, 0x9}}, {0xfff, 0x7f, {0x2, 0xfffffff2}}, {0x5, 0xff, {0x4, 0x1ff}}, {0x22, 0x7214, {0x3, 0x6}}, {0x81, 0x7619, {0x0, 0x10001}}, {0x3ff, 0xd, {0x2, 0x3}}, {0x0, 0x1000, {0x1, 0x1}}, {0x52a, 0x0, {0x3, 0x2}}, {0x6, 0x1, {0x1, 0xc9b}}, {0x5, 0x4, {0x0, 0x7}}, {0x2, 0x8, {0x1, 0x7519}}, {0x6, 0x3, {0x2, 0x1}}, {0x2, 0x7, {0x1, 0x8}}, {0x0, 0x1, {0x2, 0x3c}}, {0x4, 0x8, {0x3, 0x4}}, {0x2, 0x48, {0x0, 0x2}}, {0x400, 0x8, {0x3, 0x5}}, {0xb00, 0x8, {0x3}}, {0x4, 0x91, {0x3}}, {0x4, 0xfff, {0x2, 0xfffffffc}}, {0x9, 0x8, {0x0, 0xf2}}, {0x1000, 0x7, {0x26787f51ef6d43ce, 0x5}}, {0x4, 0x8, {0x1, 0x6}}, {0x6, 0x6, {0x1, 0x5}}, {0x1, 0xafa1, {0x2, 0xba6}}, {0xfb, 0xa2, {0x2, 0x1}}, {0x7, 0xfff, {0x3, 0x7}}, {0x1000, 0x2, {0x1, 0x6}}, {0x60e, 0x204, {0x2, 0x3}}, {0x8, 0x6, {0x2, 0xce}}, {0x0, 0xae}]}}}, {{0x254, 0x1, {{0x1, 0x1}, 0x48, 0x0, 0x9, 0x3ff, 0xd, 'syz1\x00', "6ee79662592ffa9e69e8dcaa85c01a15802832070fe5226918b79516ed7c5d95", "8b78fed3d33d02818972c5751476378d735509e47ef189deeec9f6c153f9c757", [{0x3ac, 0x29, {0x2, 0x8}}, {0x9, 0x8000, {0x0, 0x80000001}}, {0x6, 0x5, {0x2, 0x1}}, {0x8000, 0x2, {0x3, 0x7}}, {0x0, 0x13, {0x7, 0xe90}}, {0x0, 0x5, {0x0, 0x100}}, {0x3d3e, 0x200, {0x0, 0x1}}, {0x3, 0x6, {0x0, 0xf}}, {0x1, 0xd, {0x0, 0xffffffff}}, {0x0, 0x0, {0x3, 0x3}}, {0x5, 0x3ff, {0x2, 0x101}}, {0xae, 0x5, {0x2, 0x21f}}, {0x2, 0x1, {0x3, 0x3}}, {0xb85e, 0x401, {0x1, 0xf3e8}}, {0x3, 0x9, {0x1, 0x9}}, {0x7fff, 0x9, {0x1, 0x80000000}}, {0x1, 0x8a, {0x0, 0x6}}, {0x5, 0x7, {0x2, 0xffffffff}}, {0xffff, 0xa, {0x2, 0x8}}, {0x8, 0x1000, {0x1, 0x1}}, {0x8, 0x69, {0x2, 0x9}}, {0x8, 0x1, {0x3, 0x9}}, {0x5, 0xfc7c, {0x2, 0x4}}, {0x5, 0x1, {0x3, 0x8}}, {0x7bb, 0x0, {0x2, 0x4}}, {0x4e2c, 0x1ff, {0x3, 0x7}}, {0x6, 0xbd, {0x3, 0x80000001}}, {0x100, 0x0, {0x1, 0x7e4}}, {0x8, 0x3, {0x1, 0x200}}, {0x5, 0x0, {0x2, 0x5}}, {0x7140, 0x4, {0x0, 0x2}}, {0x2, 0x8, {0x0, 0x8001}}, {0x80, 0x2, {0x3, 0x7f}}, {0xb, 0x0, {0x3, 0x1}}, {0x5, 0x7, {0x2}}, {0x8, 0x5, {0x0, 0xc}}, {0xfff, 0xd, {0x3, 0x10000}}, {0xb2d, 0x0, {0x2, 0x4}}, {0xad, 0x1ff, {0x1, 0x4}}, {0x4, 0x5, {0x0, 0x1000}}]}}}, {{0x254, 0x1, {{0x2, 0x1}, 0xff, 0xf, 0x0, 0xee3, 0x1, 'syz1\x00', "2b5d776150b1da774cfbbeffeb6b633e747359155b5930bf5d9c5f8892db0714", "63dc4a11e6b26ffd1d4117a22c922ade50b6c10aae99c69cfd14aa80055b2b6b", [{0x8, 0x9, {0x3, 0x7}}, {0x3, 0xd1d4, {0x1, 0x6}}, {0x7, 0x1, {0x3, 0x4}}, {0x5, 0xd, {0x1, 0x6}}, {0x5, 0x6, {0x1, 0x101}}, {0x7, 0x4, {0x0, 0x9115}}, {0x0, 0x80, {0x0, 0x2}}, {0x80, 0x8, {0x2}}, {0x43, 0x9b71, {0x3, 0x1}}, {0x1, 0xa, {0x0, 0x5}}, {0x2, 0x2, {0x0, 0x3}}, {0x7, 0x6, {0x3, 0x6}}, {0x29, 0x6, {0x3, 0x6}}, {0x8, 0xa306, {0x2, 0x3}}, {0x8, 0x9, {0x3}}, {0x7, 0x8000, {0x2, 0x6}}, {0x4, 0x9, {0x660f8f6d36cf8005}}, {0x200, 0x2, {0x3, 0x100}}, {0x7ff, 0x63d2, {0x0, 0x3}}, {0xc, 0x4, {0x3, 0xffff7fff}}, {0x8, 0x61d, {0x1, 0x4}}, {0x0, 0x0, {0x2, 0x8}}, {0x5, 0x0, {0x2, 0x3}}, {0x9, 0x5, {0x3, 0x2}}, {0x4, 0x2, {0x0, 0x15}}, {0x4, 0x1, {0x3}}, {0x8, 0x8001, {0x2, 0x84}}, {0xff, 0xf, {0x2, 0xc0c}}, {0x4, 0x8001}, {0x0, 0x2, {0x3, 0x7d267636}}, {0x28, 0x3, {0x2, 0x8}}, {0xfbff, 0x8e7, {0x2, 0x1}}, {0x9, 0x5d, {0x0, 0x7}}, {0x8, 0xfffa, {0x1, 0x6}}, {0x8001, 0x0, {0x3, 0xf}}, {0x7, 0x7, {0x0, 0xff}}, {0x4, 0x200, {0x0, 0x6}}, {0x5, 0x2, {0x3, 0x2}}, {0x4, 0x2, {0x0, 0x5}}, {0x9, 0x101, {0x2, 0x3}}]}}}, {{0x254, 0x1, {{0x3, 0x400}, 0xfd, 0xe4, 0xfff, 0x9, 0x22, 'syz0\x00', "61e504944032f63f74a0f39c6ebd6b851d2096cadd773cdeabdad6f199d1b839", "96cef29df80c2d7a219fb1c0bfbb173825cbf1dee61d28ae5c3a3e37e107ca8f", [{0x8, 0x0, {0x1, 0x3}}, {0x8, 0xa, {0x2, 0x4}}, {0x592, 0x9e, {0x0, 0x7}}, {0x18df, 0xc57, {0x3, 0x8}}, {0xf40c, 0x195, {0x2, 0xfffffffb}}, {0x6, 0x1, {0x0, 0x7}}, {0xe, 0x8, {0x0, 0xb35}}, {0x6, 0x8, {0x1, 0x9}}, {0xf, 0x8, {0x0, 0x8}}, {0x9, 0x3, {0x1, 0x5}}, {0x7, 0x9, {0x3, 0x2}}, {0x81, 0x8b, {0x1, 0x6d8}}, {0xfffb, 0x1, {0x2, 0xe}}, {0x91c0, 0x4, {0x0, 0x9}}, {0x0, 0xf0, {0x2, 0x80000000}}, {0x0, 0x9, {0x0, 0x5}}, {0x9, 0xd518, {0x3, 0x8}}, {0x8, 0xf, {0x1, 0x6}}, {0x80, 0x17, {0x0, 0x81}}, {0x3, 0x3, {0x2, 0x2}}, {0x6, 0x40, {0x1, 0x9}}, {0x1, 0x2, {0x2, 0x80}}, {0x3d, 0x5, {0x3, 0x5}}, {0x7, 0x6, {0x3, 0x80}}, {0x7ff, 0x8, {0x0, 0x9}}, {0x3, 0x6, {0x1, 0x80}}, {0x3, 0x1fa, {0x1, 0x782}}, {0xc57, 0x6f, {0x3, 0xa}}, {0x2, 0x4, {0x0, 0x6}}, {0x4, 0x0, {0x2, 0x3ff}}, {0x7, 0x2, {0x1, 0x401}}, {0x1000, 0x20, {0x0, 0x7}}, {0xc2, 0x2, {0x1, 0x9}}, {0x9, 0xad, {0x1, 0x800}}, {0x2a, 0x8, {0x0, 0x1}}, {0x4, 0x0, {0x0, 0xf}}, {0xe1, 0x3ff}, {0x6, 0x200, {0x0, 0x1}}, {0x7fff, 0xfff, {0x3, 0xe}}, {0x90, 0x4, {0x2, 0x7}}]}}}]}, 0x175c}}, 0xc0)

4m45.012851903s ago: executing program 7 (id=3448):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESHEX, @ANYBLOB="57643db0fc1963f11566b6a5b1f4cfcfdaff506d0b1aa7aa65e9611bd4fbb75044d7a9b9ab042b1b7e4f0da7e9ea31cacbe99da5dd6f71ab2deb6dec102511f7bddfc71057e365d1e2736041385e731bd911c09c9e8f2d454f629b2c3a49ae23f59a669d1781c8304ccd1e3a66a94108b69d23ebdf7d8f69f239db5132b0d26b76220fbce29ba98f635a158ffd059e135d14597fc13a8998b389e6bff89f8b0f98457296582ef9cf9b2335af0007a8dca47a7c34cd7bcf8c84e2b3e42835d919d16f48c89b4b3b078bfb92a8e8e81ff79cfff48a33ae06dcf05b4669e3a64f046f5b7d", @ANYRESOCT, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESHEX=r0, @ANYRESDEC=r2], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)

4m42.983590228s ago: executing program 7 (id=3467):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x52}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@jqfmt_vfsold}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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")
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$eJzs3c9rJFkdAPBvdbpjMpOZZNWDLrj+2JXMoNOdbNzd4GFdQfS0oK73MSadENJJh3RndxIWN4N/gCCigie9eBH8AwRZ8OJRhAU9KyqK6IwevDgl1V2dmWS6O5mZnnQ2/flAdb2qV1Xf9zqp6npVj6oARtYnIuK1iLiXpun1iJjO5xfyIQ7aQ7bc3TtvL2dDEmn6xj+TSPJ5nW0l+fhyvtpERHz9KxHfSh6O29jb31iq1ao7+XSlubldaezt31jfXFqrrlW3FhbmX158ZfGlxbmB1PNKRLz6pb/+4Ls/+/Krv/rsW3+6+fdr386KNZXnP1iPR1RsfU50z2xXvXQkO1th5zGDnUfFVg1zk92WGHtozu2nXCYAALrLzvE/GBGfiojrMR1j+eksAAAAcHGkX5iKsSQi7W68x3wAAADgfaTQ6gObFMp5X4CpKBTK5XYf3g/HpUKt3mh+ZrW+u7XS7is7E6XC6nqtOpf3FZ6JUpJNz7fS96dfPDa9EBHPRMT3pydb0+Xlem1l2Bc/AAAAYERcPtb+/890u/0PAAAAXDAzwy4AAAAA8NRp/wMAAMDFp/0PAAAAF9pXX389G9LO+69X3tzb3ai/eWOl2tgob+4ul5frO9vltXp9rfXMvs2Ttler17c/F1u7tyrNaqNZaezt39ys7241b673ekM2AAAA8LQ98/F3/5BExMHnJ1tDZvx0q55yMeC8Kh6mknzcZbf+49X2+C9nVCjgTIwNuwDA0BSHXQBgaErDLgAwdMkJ+T077/w2H39ysOUBAAAGb/ajve//F/quedA/Gzj37MQwutz/h9HVuv9/2p68ThbgQik5A4CR98T3/0+Upo9UIAAAYOCmWkNSKOeX96aiUCiXI660XgtQSlbXa9W5iLgaEb+fLn0gm55vrZmc2GYAAAAAAAAAAAAAAAAAAAAAAAAAANrSNIkUAAAAuNAiCn9Lft1+lv/s9AtTx68PjCf/nY78FaFv/fiNH95aajZ35rP5/zqc3/xRPv/FYVzBAAAAgJHwSC/w77TTO+14AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABiku3feXu4MJyz6ziDj/uOLETHTLX4xJlrjiShFxKV/J1F8YL0kIsYGEH8y+/hIt/hJVqzDkN3iTw4g/sHtvvFjJv8WusW/PID4MMrezY4/rx3b/44cWLrvf8WII9OPq/fxLw6Pf2M99v8rp4zx7Hu/qPSMfzvi2WL3408nftIj/vOnjP/Nb+zv98pLfxIx2/X3JzkSq9Lc3K409vZvrG8urVXXqlsLC/MvL76y+NLiXGV1vVbNP7vG+N7HfnmvX/0v9Yg/06f+VyPihVPW/3/v3brzoXay1C3+tefz+Encj/+bn+ZLPBy/kP/2fTpPZ/mznfRBO/2g537+u+f61X+lR/1P+vtf61/t8U7i+te+8+f+iwIAZ6mxt7+xVKtVdy5sImuln4NiSOSJ8XP0X/fOQDeYpmma7VNPsJ0kzsPX0koM+8gEAAAM2v2T/mGXBAAAAAAAAAAAAAAAAAAAAEbXWTxO7HjMg8NUMohHaAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADMT/AwAA//+VPdXC")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f00000010c0))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="00000a00aaaaaaa8c9aaaaaaaaaaaa4308004540005c4000e000032f90787f0000017f000001a001880b004890780300000003000000d5191003a4709d2908ffeb7cffd4ce1d171b6b1140356ac76eb6217b5dc934ebcab523aecafe010fb90cf4ae853cb97d7c9f3b3fa48f3a7d"], 0x6e)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r5, 0x0, 0xffff}, 0x18)
fcntl$lock(r3, 0x6, &(0x7f0000002000)={0x1})

4m41.874173774s ago: executing program 7 (id=3478):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x404, &(0x7f0000000580)={[{@sysvgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@max_batch_time={'max_batch_time', 0x3d, 0x94ca}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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")
r0 = syz_clone(0x11, 0x0, 0xb, 0x0, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)

4m41.873688734s ago: executing program 1 (id=3479):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%-5lx  \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0)

4m41.784015393s ago: executing program 1 (id=3481):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00'}, 0x10)
r2 = socket(0x10, 0x3, 0x9)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x100000000403)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x18)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x98, 0x0, 0x0, 0x130, 0x1f0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0xa}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @empty, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118)
bind$bt_hci(r3, &(0x7f00000002c0)={0x1f, 0x1, 0x3}, 0x6)

4m41.737332637s ago: executing program 7 (id=3482):
r0 = openat$random(0xffffffffffffff9c, &(0x7f00000018c0), 0xc8803, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04000000000010"])
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101142)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r2)
r5 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x33, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5871, 0x2, @perf_config_ext={0x6, 0x400000008}, 0x4c58, 0x5, 0x0, 0x1, 0xe, 0x20005, 0x10, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f00000006c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r6=>0x0})
ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f0000000340)=r6)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f00000007c0)={{r1}, r6, 0x18, @inherit={0x68, &(0x7f0000000440)={0x0, 0x4, 0x6, 0x5, {0xc155280af4fa694f, 0x24, 0x1, 0x1, 0xb8a}, [0x9, 0x8, 0x5, 0x3]}}, @name="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"})
r7 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x8, {{0xa, 0x0, 0x7, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1, 0x2}}}, 0x108)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000001880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="000426bd7000fddb1f0f07183492e557010072000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4010)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)

4m41.481524812s ago: executing program 7 (id=3484):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]})
r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000000)=0x14)
read(r2, &(0x7f00000019c0)=""/4097, 0x1001)

4m41.443199705s ago: executing program 35 (id=3484):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]})
r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000000)=0x14)
read(r2, &(0x7f00000019c0)=""/4097, 0x1001)

4m40.805745297s ago: executing program 1 (id=3486):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0)

4m40.738894883s ago: executing program 1 (id=3487):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x404, &(0x7f0000000580)={[{@sysvgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@max_batch_time={'max_batch_time', 0x3d, 0x94ca}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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")
r0 = syz_clone(0x11, 0x0, 0xb, 0x0, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)

4m40.5631102s ago: executing program 6 (id=3488):
bpf$MAP_CREATE(0x0, &(0x7f0000001540)=ANY=[@ANYRES16, @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYRES8, @ANYRES16, @ANYRES16=0x0], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xf867dafb6ee897a, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20)
syz_read_part_table(0x5c2, &(0x7f0000000000)="$eJzs2z1oU2sYB/AnavCil+vi5GQdnFwURzOoJFFRCNEu4qCgiBi4EEGIECjoYDO0NEPp2KUUsvRjapqhw6Wlhc6ldOil0KHTpV0KXZpL6Xv39vYDhN8PDg/v+/7Pec4znPEEv7QL8U+3281ERPfy8e/ubeULT2+WHpZfRWTiTUT0/PXH1MFJJiX+e+qttF5P67HRK53+nSfZ1trL3dtv5xsX0nlfuq6Ot3tPPBxnbiK3cO37j2pxoJb7tFqsb/5cWX4xuZ0vt583mlPPso/fp9xiqpdS/RK1+Baf411UohIfonpK/UdaG3f3bxRbMx8f7BU6g3P3Uq50wjmP2v9rz9DrZv3Rnenrw/drs0vlrYuHucr/+LoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADh/E7mFa99/VIsDtdyn1WJ98+fK8ovJ7Xy5/bzRnHqWffw+5RZTvZTql6jFt/gc76ISlfgQ1VPqP9LauLt/o9ia+fhgr9AZnLuXcqUTznnU/l97hl4364/uTF8fvl+bXSpvXTzMVS6f0QsAAAAAAAAAAAAAAAAAAABAROQLT2+WHpZfRWTiTUT8+fvczMF+N/3vnkm5W6mup/2x0Sud/p0n2dbay93bb+cbf6f9vt8i+iLi6ni799yH4dj+DQAA///B9JXf")
r4 = socket$inet_udp(0x2, 0x2, 0x0)
readv(r4, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r5, 0x0, 0x115}, 0x18)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$VT_GETMODE(r6, 0x5601, 0x0)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000e0021401002dbd7000fbfbdf250900020073797a31000000000800410072786500140033006c6f00"/56], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="9feb0100180000000000000018800000180000000400000002c2d71f0000000000000c02000000000000f6621b0000008cc7f5af18779bfeae0009000000000000e7007751267239eb3dd0"], 0x0, 0x34}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="183000167ee9ca4f0000f9"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r8}, 0x10)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012020, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)

4m40.56104231s ago: executing program 1 (id=3489):
r0 = io_uring_setup(0x258d, &(0x7f0000000640)={0x0, 0x4008272, 0x1, 0x3, 0x288})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/140, 0x8c}], 0x1)
io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1)

4m39.675341075s ago: executing program 6 (id=3496):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS    \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0)

4m39.592399443s ago: executing program 1 (id=3498):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS    \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0) (fail_nth: 1)

4m39.590013372s ago: executing program 6 (id=3499):
r0 = socket$netlink(0x10, 0x3, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f00000000c0)="14a1c73255298e5e0545deac3aa74852b7290ce76f9f46215fb27fa9f38810c85858d56e87e07b2163637afc878690c009daa0442f42e01511e00dddd1019586b90c0e198baf70e1d88a14dbb0da6d44aad2e7af894519ed780888091ac2698f8390213145d2eab9510579b750b6616713ba04bc15acf8e464ed694729767b611f0a3e8f03d8955a19c541ce10c53636b59557661a013a6014542c47219a04af2c204bce0e0701e3f34dfdcaa33af2", &(0x7f0000000180)="09b731cdac1ea4f13955c83dcb2ca5321f775303cb838a57f740337ecc25d2000d3f3cd5"}}, &(0x7f0000000080))
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x70, 0x103781)
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r4=>r0, {0x9c}}, '\xe9\x1fq\x89Y\x1e\x923aK\x00'})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x15, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000001000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000001117f000010000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000010000008500000085000000b7000000000000"], &(0x7f0000002140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r5}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff})
perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x1}, 0xc004, 0x10000, 0x0, 0x8, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000002000000b}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="a6e32a0000000000000000000000000200"/31], 0x48)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0500000000000000000000e1", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10)
sendmsg$inet(r6, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x840, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x803})
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$nl_route(0x10, 0x3, 0x0)

4m39.523688289s ago: executing program 36 (id=3498):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS    \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0) (fail_nth: 1)

4m38.433531284s ago: executing program 6 (id=3504):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x404, &(0x7f0000000580)={[{@sysvgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@max_batch_time={'max_batch_time', 0x3d, 0x94ca}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$eJzs289PHFUcAPDv7EKR/hBs6o/Sqmg1En9AobX24EWjiQdNTPRQjwi0wW6LKZjYhigaU4+miXfj0cS/wJNejHoy8ap306QxXFo9rZndGdhddrdAF7a6n08y8N7MW9777szbfW8eE0DPGk1/JBH7I+L3iBiqZusLjFZ/3Vpdnvl7dXkmiXL5rb+SSrmbq8szedH8dfvyTF9E4bMkjjSpd/HylfPTpdLcpSw/sXTh/YnFy1eem78wfW7u3NzFqdOnT56YfOHU1PMdiTON6+bIRwtHD7/2zrU3Zs5ce/fnb5M8/oY4OmS03cEny+UOV9ddB2rSSV8XG8KWFKvdNPor/X8oirF+8obi1U+72jhgR5XL5fIDrQ+vlIH/sSS63QKgO/Iv+nT+m2+7NPS4K9x4qToBSuO+lW3VI31RyMr0N8xvO2k0Is6s/PNVusXO3IcAAKjzfTr+ebbZ+K8QtfeF7s3WUIYj4r6IOBgRpyLiUETcH1Ep+2BEPNSskqR1/Y2LJBvHP4Xr2w5uE9Lx34vZ2lb9+C8f/cVwMcsdqMTfn5ydL80dz96TsegfSPOTber44ZXfvmh1rHb8l25p/flYMGvH9b6B+tfMTi9N30nMtW58EjHS1yz+ZG0lID19hyNiZJt1zD/9zdFWx24ffxsdWGcqfx3xVPX8r0RD/Lmk/frkxD1Rmjs+kV8VG/3y69U3W9V/R/F3QHr+9za9/tfiH05q12sXt17H1T8+bzmn2e71vyd5u27fh9NLS5cmI/Ykr1cbXbt/qqHc1Hr5NP6xY837/8FYfyeORER6ET8cEY9ExKNZ2x+LiMcj4lib+H96+Yn3thf/QJu/2hlp/LNbOv/riT3RuKd5onj+x+/qKh3ebPyRnf+TldRYtmczn3+badf2rmYAAAD47ylExP5ICuNr6UJhfLz6P/yHYm+htLC49MzZhQ8uzlafERiO/kJ+p2uo5n7oZDatz/NTDfkT2X3jL4uDlfz4zEJpttvBQ4/b16L/p/4sdrt1wI7zvBb0Lv0fepf+D71L/4fe1aT/D3ajHcDua/b9/3EX2gHsvob+b9kPeoj5P/Qu/R96l/4PPWlxMG7/kLyExIZEFO6KZkjsUKLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//zpS5t0=")
r0 = syz_clone(0x11, 0x0, 0xb, 0x0, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00'}, 0x10)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)

4m38.164264s ago: executing program 6 (id=3509):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101682)
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000200)={0x2, 0x1000, 0x1, 0x7fffffff, 0x0, 0x2})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0)
read(r2, &(0x7f0000000040)=""/148, 0xffffff96)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000240)={0xff}, 0x4)
ioprio_set$uid(0x3, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
writev(r3, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000d13ba24615cd3fc3b74aa58e300c1617983471e9a433eec3b7f3b0670ccce370cdf97237d650b2f2bb531c85d23773ae274744a742bd05d1a85031632b69ad4eeb00629d9b7cf3041df9b921e45768a9f1f918461e68a2dae0b2acee5f0c8d7ad9fec7c34dbba0fe705c5609019700"/140, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
pipe2$9p(&(0x7f00000000c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRES16=r7, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r8}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@version_9p2000}]}})
remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98)
fallocate(r9, 0x80, 0x5d, 0x1000000005)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10)

4m37.363339956s ago: executing program 6 (id=3511):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r1, &(0x7f0000001600)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0xffffffffffffff0f}, 0x48)
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f00000001c0)={0x15, 0x21, 0x11, 0x11, 0x7, 0x3, 0x5, 0xc5, 0x1})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r4}, 0x18)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={r1, r2})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
r7 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', <r8=>0x0})
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x5, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0)
sendmmsg(r5, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000dc0)="e3", 0x1}], 0x1}}], 0x1, 0x24004801)
close_range(r0, 0xffffffffffffffff, 0x0)
r10 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000000)='we<'}, {&(0x7f0000000040)="2050a6562961a7a40dfb7b087b84bbd31d3c23a3d74f0c8e5237085c49ad46e10c017abcc63742997c7492105e718be4a33728480e5eb3e7242fac2fe94f723ea9e6c02709b0b8343edca82646e066d65c68b43b93dbeca98c24816f63914cb30ebddb0bdf6378fadf0a8b29809645f795c5"}], 0x10000000000002a4)

4m37.319466801s ago: executing program 37 (id=3511):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r1, &(0x7f0000001600)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0xffffffffffffff0f}, 0x48)
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f00000001c0)={0x15, 0x21, 0x11, 0x11, 0x7, 0x3, 0x5, 0xc5, 0x1})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r4}, 0x18)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={r1, r2})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
r7 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', <r8=>0x0})
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x5, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0)
sendmmsg(r5, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000dc0)="e3", 0x1}], 0x1}}], 0x1, 0x24004801)
close_range(r0, 0xffffffffffffffff, 0x0)
r10 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000000)='we<'}, {&(0x7f0000000040)="2050a6562961a7a40dfb7b087b84bbd31d3c23a3d74f0c8e5237085c49ad46e10c017abcc63742997c7492105e718be4a33728480e5eb3e7242fac2fe94f723ea9e6c02709b0b8343edca82646e066d65c68b43b93dbeca98c24816f63914cb30ebddb0bdf6378fadf0a8b29809645f795c5"}], 0x10000000000002a4)

4m34.767376525s ago: executing program 9 (id=3500):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x404, &(0x7f0000000580)={[{@sysvgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@max_batch_time={'max_batch_time', 0x3d, 0x94ca}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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")
syz_clone(0x11, 0x0, 0xb, 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)

4m34.233255006s ago: executing program 9 (id=3532):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00')

4m33.076250827s ago: executing program 9 (id=3547):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x104, 0x90020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x1006, 0x0, 0xfffffffc, 0x0, 0xed}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', <r3=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) (async)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000280)={r3, 0x2, 0x6, @local}, 0xd)
setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000500)={r3, 0x1, 0x6, @local}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
vmsplice(r4, &(0x7f0000000080)=[{&(0x7f0000000140)="d442e7", 0x3}], 0x1, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095", @ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) (async)
r5 = socket$nl_rdma(0x10, 0x3, 0x14) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYBLOB="f3ce6ee1c44128f8e8c4a99ad7c6da8a95a797d2f3dcd89dbb658a98fecdf3c8e74d3cdcdcaab140b36e5e4ceae344ed78bded0c456de05fb1cddd9a47d792ddaf29f10eb911a78b5b27c655da7ad010680d8f91dbf86716fd9bb0634800b6049246f8222c02c39fc7a25034efd6c70fd25db3b2abec3f37194f3ad63ee723e08e95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x200000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r6}, 0x10) (async, rerun: 32)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
socket(0x10, 0x3, 0x0) (async, rerun: 64)
r8 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x100a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3, 0xffffffffffffffb4}, 0x1006, 0x0, 0xfffffffc, 0x0, 0x9, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4008084) (async)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32=r8, @ANYRESHEX=r5], 0x48)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r9, 0x0) (async)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYRESOCT=r7, @ANYRESHEX=r7, @ANYRESHEX=r5, @ANYBLOB="ab0517db98f14bbb16c39b8de311b92052efa814919b3047fe9bb3388eff992f0d2d0367e2d2356f5810520b0af1313b1e9a6f433451581411522e9a8a5c6aca50a8cc281b7f5d4365cb3d987c43698f11726aff010000000100000075f9a4f23b78461ef0ac7f2fc035cd27f3e69d0d4e3db2258c01e2175ca0ba93a69cceba107a1792f12a5fe8be497a6237f869fd7f3dbc6537175fbe4b7d7f26eb7c5cbc9150481104ed552d92baa3fbe6d5328fd6829da90b1ba9c7d4767faabc1d57cdcdff1389ed0f004ccdb03737b8b9a1c82ea6b0114b88767ada86"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4m33.075355387s ago: executing program 38 (id=3547):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x104, 0x90020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x1006, 0x0, 0xfffffffc, 0x0, 0xed}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', <r3=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) (async)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000280)={r3, 0x2, 0x6, @local}, 0xd)
setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000500)={r3, 0x1, 0x6, @local}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
vmsplice(r4, &(0x7f0000000080)=[{&(0x7f0000000140)="d442e7", 0x3}], 0x1, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095", @ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) (async)
r5 = socket$nl_rdma(0x10, 0x3, 0x14) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYBLOB="f3ce6ee1c44128f8e8c4a99ad7c6da8a95a797d2f3dcd89dbb658a98fecdf3c8e74d3cdcdcaab140b36e5e4ceae344ed78bded0c456de05fb1cddd9a47d792ddaf29f10eb911a78b5b27c655da7ad010680d8f91dbf86716fd9bb0634800b6049246f8222c02c39fc7a25034efd6c70fd25db3b2abec3f37194f3ad63ee723e08e95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x200000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r6}, 0x10) (async, rerun: 32)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
socket(0x10, 0x3, 0x0) (async, rerun: 64)
r8 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x100a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3, 0xffffffffffffffb4}, 0x1006, 0x0, 0xfffffffc, 0x0, 0x9, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4008084) (async)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32=r8, @ANYRESHEX=r5], 0x48)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r9, 0x0) (async)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYRESOCT=r7, @ANYRESHEX=r7, @ANYRESHEX=r5, @ANYBLOB="ab0517db98f14bbb16c39b8de311b92052efa814919b3047fe9bb3388eff992f0d2d0367e2d2356f5810520b0af1313b1e9a6f433451581411522e9a8a5c6aca50a8cc281b7f5d4365cb3d987c43698f11726aff010000000100000075f9a4f23b78461ef0ac7f2fc035cd27f3e69d0d4e3db2258c01e2175ca0ba93a69cceba107a1792f12a5fe8be497a6237f869fd7f3dbc6537175fbe4b7d7f26eb7c5cbc9150481104ed552d92baa3fbe6d5328fd6829da90b1ba9c7d4767faabc1d57cdcdff1389ed0f004ccdb03737b8b9a1c82ea6b0114b88767ada86"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

15.787037188s ago: executing program 4 (id=6898):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x61}, {}, {0x3, 0xfd}, {0x0, 0x2, 0x0, 0x10000000}, {}, {0x2, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x8)

15.739424072s ago: executing program 4 (id=6900):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000000000000008"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x40040)
bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000008c0)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}], [{@obj_user}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@appraise}, {@uid_eq}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4042, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r4, &(0x7f0000004200)='t', 0x1)
sendfile(r4, r3, 0x0, 0x3ffff)
sendfile(r4, r3, 0x0, 0x7ffff000)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xdb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6180000, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001480)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x250, 0xffffff7a, 0xffffffff, 0x250, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {0xff}, 0x16, 0x0, 0x41}, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xc, 0x2, 0x4, 'snmp_trap\x00', {0x7}}}}, {{@ip={@multicast2, @local, 0xff, 0xffffff00, 'veth0_to_hsr\x00', 'virt_wifi0\x00', {}, {}, 0x33, 0x1, 0x9c}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x6, 'system_u:object_r:tpm_device_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000800)="87eb503e303871014b7b9b89f6d8770bf70878c2981d10c976d3fffec180fda539657a1e599627d88bcf518359413e764838ba1f6ad2db65567dbfb7a7f0a4d88e146a2a5597f9774ea3378d0476be28aa8715267ac72f365b6ac54f05865bc2dca5efc7502c602eb17a14d32238c69209000624662cd8e677d4efbaf0c33329c11f535c4165a8e3b679e2a170", 0x8d)
shmget(0x0, 0x2000, 0x2c000400, &(0x7f0000fae000/0x2000)=nil)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)

15.530773362s ago: executing program 4 (id=6903):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x52}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@jqfmt_vfsold}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$eJzs3d9rW9cdAPDvla0sP5zZYXvIAsvCkmGHLZIdL4nZQ7bB2J4C27L3zLNlYyxbxpKT2ITNYX/AYIy10Kc+9aXQP6BQ8ieUQqB9L21pKW3SPhTaRkVXUuI4UuwQWUqtzweOdO7Rvfqeo4uO7rn3cBVA3zoVEacj4kG1Wj0bEcON8kwjxWY91da7f+/WTC0lUa1e/SyJSOpltdXGtrznkcZmByPir3+K+EfyZNzy+sbidLFYWG0s5ytLK/ny+sa5haXp+cJ8YXlycuLi1KWpC1PjHWnnUERc/sNH///Pa3+8/Navbrx/7ZOxfyaN8ohH7ei0etOz6WfRNBgRq3sRrEcG0xYCAPB90DzO/3lEnI3hGEiP5gAAAID9pPrbofgmiagCAAAA+1YmnQObZHKNeQBDkcnkcvU5vD+Ow5liqVz55VxpbXm2Pld2JLKZuYViYbwxV3gksklteSLNP1o+v215MiKORcT/hg+ly7mZUnG21yc/AAAAoE8c2Tb+/3K4Pv7f4uueVQ4AAADonJFeVwAAAADYc8b/AAAAsP8Z/wMAAMC+9ucrV2qp2vz/69nr62uLpevnZgvlxdzS2kxuprS6kpsvlebTe/Yt7fR+xVJp5dexvHYzXymUK/ny+sa1pdLacuXawmN/gQ0AAAB00bGf3XkviYjN3xxKU82BXlcK6IrBZ1n5w72rB9B9A72uANAzz/T7D+wr2V5XAOi5ZIfX207eebvzdQEAAPbG6E9aX/8f2PHcwGamS1UE9ojzf9C/XP+H/uX6P/SvbAyEgTz0t51uAfr81/+r1WeqEAAA0HFDaUoyuYj0PMBQZDK5XMTRdEyQTeYWioXxiPhhRLw7nP1BbXki3TLZcc4wAAAAAAAAAAAAAAAAAAAAAAAAAFBXrSZRBQAAAPa1iMzHSXo3/4jR4TND288PHEi+Gk6fI+LGK1dfujldqaxO1Mo/f1heeblRfr4XZzAAAACA7Zrj9OY4HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA66f69WzPN1M24n/4+IkZaxR+Mg+nzwchGxOEvkhjcsl0SEQMdiL95OyKOt4qf1KoVI41atIp/qMfxj3QgPvSzO7X+53etvn+ZOJU+t/7+XUx7qOfXvv/LPOz/BlrEr5Ud3WWME3ffyLeNfzvixGDr/qcZP2nT/5zeZfy//21jo91r1VcjRlv+/iSPxcpXllby5fWNcwtL0/OF+cLy5OTExalLUxemxvNzC8VC47FljP/+9M0HT2v/4TbxR3Zo/5ldtv/buzfv/aiezT7cPHkUf+x06/1/vE38TGP//6KRr70+2sxv1vNbnXz9nZNPa/9sm/bvtP/Hdtn+s3/59we7XBUA6ILy+sbidLFYWO3rzHN9GrXDoheiFS9mpva5vgDVaJn51x68c+3IvNft6kSmp90SAACwB54cAwMAAAAAAAAAAAAAAAAAAADd1o3biWW3xdxMHztx93wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM75LgAA///6fNJN")
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f00000010c0))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="00000a00aaaaaaa8c9aaaaaaaaaaaa4308004540005c4000e000032f90787f0000017f000001a001880b004890780300000003000000d5191003a4709d2908ffeb7cffd4ce1d171b6b1140356ac76eb6217b5dc934ebcab523aecafe010fb90cf4ae853cb97d7c9f3b3fa48f3a7d"], 0x6e)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r5, 0x0, 0xffff}, 0x18)
fcntl$lock(r3, 0x6, &(0x7f0000002000)={0x1})

13.490192408s ago: executing program 0 (id=6919):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101682)
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000200)={0x2, 0x1000, 0x1, 0x7fffffff, 0x0, 0x2})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0)
read(r1, &(0x7f0000000040)=""/148, 0xffffff96)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
ioprio_set$uid(0x3, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="16000000000000000400000001000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000d13ba24615cd3fc3b74aa58e300c1617983471e9a433eec3b7f3b0670ccce370cdf97237d650b2f2bb531c85d23773ae2747", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
pipe2$9p(&(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRES16=r4, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}})
remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98)
fallocate(r5, 0x80, 0x5d, 0x1000000005)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)

13.132741532s ago: executing program 5 (id=6922):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x40)
pwrite64(r0, &(0x7f00000000c0), 0x0, 0x9000)
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0xd)
fcntl$setlease(r1, 0x400, 0x0)

13.124758843s ago: executing program 2 (id=6923):
syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
ftruncate(r0, 0x2000009)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x1808004, &(0x7f0000000680)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYRESHEX, @ANYBLOB="92208f8dd2478c4248608a57ea023ef8845944fce569f274772ca5201b4d19c9435b225c2703c4693641c3dab414ccfaa1ac12e42d3a51a9fd90dbb8dfe62fb80628dedad9cd7198cb4a3151acd3756581ae75ee414b0456b64ef7cc12f7f5a3fc858a533068bf99853d8609541e6b600f496ce1dfa65b139a86732db5e92567e310c4de67464d7250876ff8485fc19836a302e2d02a707c1a4324c8624df0f5f22dcebd53ffd3d6cd01d6d0d6ae9e8c05db3db0e1ac10e46b5cda59dfe7ab7cffd6bf7efd4d1b7068ef0b878aff95af9e3c3cdf815921a9ffe2c0f97cdeaba5e6a40289c27f3b0339b98f8cd7f6684801e60f7b"], 0x4, 0x7dc, &(0x7f0000002a00)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x4)
open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000640)=ANY=[@ANYBLOB="20000000020000001d"], 0x202400)
syz_io_uring_setup(0x26b6, &(0x7f0000000200)={0x0, 0xf906, 0x800, 0x0, 0x308}, &(0x7f0000000080), &(0x7f0000000280))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="02030003230000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c01000000030005000000000002004e21ac1e0101000000000000100002001000000004d3000004d50000000014001800090d94"], 0x118}, 0x1, 0x7}, 0x10)

12.926386632s ago: executing program 5 (id=6924):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x2000000, &(0x7f0000000080)={[{@dioread_nolock}, {@discard}]}, 0x1, 0xb80, &(0x7f0000000c40)="$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")
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000121000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x401}, 0x11)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x20008000)
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x173)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
process_vm_writev(0x0, &(0x7f0000000000)=[{0x0}, {0xffffffffffffffff}, {0xfffffffffffffffc}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0xffffff5b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10)
io_setup(0x3, &(0x7f0000000340))
open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9)
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
sendmsg$can_j1939(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)="2086596618db6284c57d735b5e892eec2cd426c13f272f80fb4bd6de233e54b78f3575", 0x23}, 0x1, 0x0, 0x0, 0x200400c0}, 0x4000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r3, 0x0, 0x2}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)

7.067575832s ago: executing program 2 (id=6926):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x2000000, &(0x7f0000000080)={[{@dioread_nolock}, {@discard}]}, 0x1, 0xb80, &(0x7f0000000c40)="$eJzs3MtrXFUYAPDv3jyaNrGTiqgtggGpFcVp2hSFrlrXooIuuuyYTErI9GEmggldpHWvLkRcFKR/guDeunAluKgLrX9BEYsU3bQuInce6dBkktjO9PTx+8GZe86c6XzfN5fOPQfmJoAn1kTxkEfsjYiTWUSp9XweEcON3kjESvN1t2+eny5aFqur7/+VRRYRt26en26/V9Y6jrYGIxFx9a0snv50fdz60vJ8pVarLrTGBxdPnztYX1p+fe505VT1VPXMkak3j0y9MTXVw1qvn/vw6xd+eefli5c/m3z3q90/ZXEsxlpznXX0ykRMrH0mnQYjotLrYIkMtOrprDMbTJgQAACbyjvWcM9GKQbizuKtFD/+mjQ5AAAAoCdWByJWAQAAgMdcZv8PAAAAj7n27wBu3Tw/3W5pf5HwYN04HhHjzfrb9zc3ZwZjpXEciaGI2PV3Fp23tWbNf3bfJopI3/1cLVr06T7kzaxciIjnNzr/WaP+8cZd3OvrzyNisgfxJ+4aP0r1H+tB/NT1A/BkunK8eSFbf/3L19Y/scH1b3CDa9e9SH39a6//bq9b/92pf6DL+u+9bcbY9++rV7vNda7/Tnz++0wRvzjeV1H/w40LEfsGN6o/W6s/61L/yW3GGJ2+fqnbXFF/UW+7Pej6Vy9H7I+N62/LNvv7RAdn52rVyeZjlxj7fzhxoFv8zvNftCJ+ey/wIBTnf1eX+rc6/+e2GWP8uT/3dpvbuv78j+Hsg0ZvuPXMJ5XFxYVDEcPZ2+ufP7x5Lu3XtN+jqP+Vlzb//79R/cV3wkrrcyj2Ahdax2J88a6Yo/sPf3vv9fdXUf/MPZ7/L7YZ45vvL33UbS51/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GvKIGIssL6/187xcjhiNiGdiV147W198bfbsx2dmirmI8RjKZ+dq1cmIKDXHWTE+1OjfGR++azwVEXsi4svSzsa4PH22NpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaMRsRYZHk5IvKI+KeU5+Vy6qwAAACAnhtPnQAAAADQd/b/AAAA8Piz/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDP9rx45VoWEStHdzZaYbg1N5Q0M6Df8tQJAMkMpE4ASGYwdQJAMvb4QLbF/EjXmR09zwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh9eBvVeuZRGxcnRnoxWGW3NDSTMD+i1PnQCQzEDqBIBkBlMnACRjjw9kW8yPdJ3Z0fNcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHh4jTValpcjIm/087xcjngqIsZjKJudq1UnI2J3RPxWGtpRjA+lThoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICeqy8tz1dqteqCjo6Ozlon9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp1JeW5yu1WnWhnjoTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAILX60vJ8pVarLvSxk7pGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADS+S8AAP//szUGGQ==")
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x401}, 0x11)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x20008000)
r2 = creat(&(0x7f0000000040)='./file1\x00', 0x173)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
process_vm_writev(0x0, &(0x7f0000000000)=[{0x0}, {0xffffffffffffffff}, {0xfffffffffffffffc}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r4}, 0x10)
io_setup(0x3, 0x0)
open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000200), &(0x7f00000003c0)}, 0x20)
sendmsg$can_j1939(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)="2086596618db6284c57d735b5e892eec2cd426c13f272f80fb4bd6de233e54b78f3575", 0x23}, 0x1, 0x0, 0x0, 0x200400c0}, 0x4000000)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r6)

7.023160427s ago: executing program 5 (id=6927):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
mmap(&(0x7f000074a000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xc299}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x16}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f40)=@newtaction={0x74, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x4, 0x0, 0x400, 0x1000}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f00000000c0)={0x2, 0x1, 0xf, 0x2, 0x111, &(0x7f0000000640)="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"})
get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x9, &(0x7f0000ffb000/0x2000)=nil, 0x2)

5.747968409s ago: executing program 0 (id=6931):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x80, 0x80, 0x28}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r2, 0x1, 0x45, &(0x7f0000000300), 0x4)
socket$inet(0x2, 0x4000000000000001, 0x0)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x4048800}, 0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
writev(r0, &(0x7f0000000200)=[{&(0x7f0000000840)="889cdb94d654ea5f515a91ae367b579cc08603c663b2a00840cd935882b9bea0f0f96bd8813c115e58c28934f79716b21a2e603028a66d0bf237a0630bc8622d4e1a5eef69eb3842285f708f87e8c99fb6660f850512745ccd28095f621df1792262dc3ef89ce6612fc949a6b4435a389a5d66ee64a96e9d24242c4ad4b67cc68a2a770c7d77b50adc0eebb136fbf613586bc30cea25eb4d70f12f84989095543ffe496e7680812577da8382047c1b9830a00017fdfc226e10d5e1c16750c307f7cc4f10d759128e5bc52de08d27572d5c89dd20a0a449a23b0c3934eb0c91ed16f055ff9032ce80912ad8a87a725c", 0xef}, {&(0x7f0000000f80)="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", 0x1000}], 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffd80, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x6}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020601080000000000000000000000040900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c0007800800124000000002050005"], 0x58}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)

5.651654318s ago: executing program 4 (id=6932):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x52}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@jqfmt_vfsold}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$eJzs3d9rW9cdAPDvla0sP5zZYXvIAsvCkmGHLZIdL4nZQ7bB2J4C27L3zLNlYyxbxpKT2ITNYX/AYIy10Kc+9aXQP6BQ8ieUQqB9L21pKW3SPhTaRkVXUuI4UuwQWUqtzweOdO7Rvfqeo4uO7rn3cBVA3zoVEacj4kG1Wj0bEcON8kwjxWY91da7f+/WTC0lUa1e/SyJSOpltdXGtrznkcZmByPir3+K+EfyZNzy+sbidLFYWG0s5ytLK/ny+sa5haXp+cJ8YXlycuLi1KWpC1PjHWnnUERc/sNH///Pa3+8/Navbrx/7ZOxfyaN8ohH7ei0etOz6WfRNBgRq3sRrEcG0xYCAPB90DzO/3lEnI3hGEiP5gAAAID9pPrbofgmiagCAAAA+1YmnQObZHKNeQBDkcnkcvU5vD+Ow5liqVz55VxpbXm2Pld2JLKZuYViYbwxV3gksklteSLNP1o+v215MiKORcT/hg+ly7mZUnG21yc/AAAAoE8c2Tb+/3K4Pv7f4uueVQ4AAADonJFeVwAAAADYc8b/AAAAsP8Z/wMAAMC+9ucrV2qp2vz/69nr62uLpevnZgvlxdzS2kxuprS6kpsvlebTe/Yt7fR+xVJp5dexvHYzXymUK/ny+sa1pdLacuXawmN/gQ0AAAB00bGf3XkviYjN3xxKU82BXlcK6IrBZ1n5w72rB9B9A72uANAzz/T7D+wr2V5XAOi5ZIfX207eebvzdQEAAPbG6E9aX/8f2PHcwGamS1UE9ojzf9C/XP+H/uX6P/SvbAyEgTz0t51uAfr81/+r1WeqEAAA0HFDaUoyuYj0PMBQZDK5XMTRdEyQTeYWioXxiPhhRLw7nP1BbXki3TLZcc4wAAAAAAAAAAAAAAAAAAAAAAAAAFBXrSZRBQAAAPa1iMzHSXo3/4jR4TND288PHEi+Gk6fI+LGK1dfujldqaxO1Mo/f1heeblRfr4XZzAAAACA7Zrj9OY4HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA66f69WzPN1M24n/4+IkZaxR+Mg+nzwchGxOEvkhjcsl0SEQMdiL95OyKOt4qf1KoVI41atIp/qMfxj3QgPvSzO7X+53etvn+ZOJU+t/7+XUx7qOfXvv/LPOz/BlrEr5Ud3WWME3ffyLeNfzvixGDr/qcZP2nT/5zeZfy//21jo91r1VcjRlv+/iSPxcpXllby5fWNcwtL0/OF+cLy5OTExalLUxemxvNzC8VC47FljP/+9M0HT2v/4TbxR3Zo/5ldtv/buzfv/aiezT7cPHkUf+x06/1/vE38TGP//6KRr70+2sxv1vNbnXz9nZNPa/9sm/bvtP/Hdtn+s3/59we7XBUA6ILy+sbidLFYWO3rzHN9GrXDoheiFS9mpva5vgDVaJn51x68c+3IvNft6kSmp90SAACwB54cAwMAAAAAAAAAAAAAAAAAAADd1o3biWW3xdxMHztx93wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM75LgAA///6fNJN")
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x80044940, &(0x7f00000010c0))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="00000a00aaaaaaa8c9aaaaaaaaaaaa4308004540005c4000e000032f90787f0000017f000001a001880b004890780300000003000000d5191003a4709d2908ffeb7cffd4ce1d171b6b1140356ac76eb6217b5dc934ebcab523aecafe010fb90cf4ae853cb97d7c9f3b3fa48f3a7d"], 0x6e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r7, 0x0, 0xffff}, 0x18)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000002000)={0x1})

5.650835879s ago: executing program 0 (id=6933):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180300000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r2)

5.289093223s ago: executing program 5 (id=6935):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x2000000, &(0x7f0000000080)={[{@dioread_nolock}, {@discard}]}, 0x1, 0xb80, &(0x7f0000000c40)="$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")
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x401}, 0x18)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x20008000)
r1 = creat(&(0x7f0000000040)='./file1\x00', 0x173)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x14, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
process_vm_writev(0x0, &(0x7f0000000000)=[{0x0}, {0xffffffffffffffff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
io_setup(0x3, 0x0)
open(0x0, 0x64042, 0x1e9)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000200), &(0x7f00000003c0)}, 0x20)
sendmsg$can_j1939(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)="2086596618db6284c57d735b5e892eec2cd426c13f272f80fb4bd6de233e54b78f3575", 0x23}, 0x1, 0x0, 0x0, 0x200400c0}, 0x4000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r3, 0x0, 0x2}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)

4.988301232s ago: executing program 2 (id=6937):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1008}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x4}, 0x18)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000780)='netlink_extack\x00', r2}, 0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_DISALLOCATE(r4, 0x5608)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xf00, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1000000000000000"], 0x5c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a20000000020a0108"], 0x3440}}, 0x0)

4.691458051s ago: executing program 8 (id=6938):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x2000000, &(0x7f0000000080)={[{@dioread_nolock}, {@discard}]}, 0x1, 0xb80, &(0x7f0000000c40)="$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")
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x401}, 0x18)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x20008000)
r1 = creat(&(0x7f0000000040)='./file1\x00', 0x173)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x14, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
process_vm_writev(0x0, &(0x7f0000000000)=[{0x0}, {0xffffffffffffffff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
io_setup(0x3, 0x0)
open(0x0, 0x64042, 0x1e9)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000200), &(0x7f00000003c0)}, 0x20)
sendmsg$can_j1939(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)="2086596618db6284c57d735b5e892eec2cd426c13f272f80fb4bd6de233e54b78f3575", 0x23}, 0x1, 0x0, 0x0, 0x200400c0}, 0x4000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r3, 0x0, 0x2}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)

3.96395967s ago: executing program 0 (id=6939):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x88034, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0xfffffffc, 0x0, 0x20000006}, 0x0, 0xc, 0xffffffffffffffff, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@nombcache}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)
pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)='Y', 0x1}], 0x1, 0x5405, 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000380)={0x3fffffffbfb, 0x5, 0x5, 0x7f})
syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6}]})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400001a679808d010aaa8000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r6, @ANYRES16=r6, @ANYRESOCT], 0xc4}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@gettclass={0x24, 0x2a, 0x100, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xfff1}, {0xfff3}, {0x1, 0x3}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8004001}, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0xfffffffffffff001}, 0x18)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r12, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000003f0001002cbd7000ffdbdf25010000003a0004"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000)

1.722607774s ago: executing program 2 (id=6940):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r1=>0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000300)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r2=>0x0, 0x1c, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000500), &(0x7f0000000640), 0x8, 0x8a, 0x8, 0x8, &(0x7f0000000680)}}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1e, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x60, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xf1ffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x6, 0x401, 0x9, 0x8000, 0x32de, 0xc255}, [@TCA_NETEM_RATE={0x14, 0x6, {0x9, 0x7fffffff, 0x0, 0x3}}]}}}]}, 0x60}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18)
syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0x3, 0x100, 0x0, 0xfffffffd}, &(0x7f0000000040), &(0x7f0000001040))
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)

1.491649747s ago: executing program 5 (id=6941):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000}, 0x44010)

1.425098163s ago: executing program 4 (id=6942):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101682)
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000200)={0x2, 0x1000, 0x1, 0x7fffffff, 0x0, 0x2})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0)
read(r2, &(0x7f0000000040)=""/148, 0xffffff96)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000240)={0xff}, 0x4)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="16000000000000000400000001", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000d13ba24615cd3fc3b74aa58e300c1617983471e9a433eec3b7f3b0670ccce370cdf97237d650b2f2bb531c85d23773ae274744a742bd05d1a85031632b69ad4eeb00629d9b7cf3041df9b921e45768a9f1f918461e68a2dae0b2acee5f0c8d7ad9fec7c34dbba0fe705c5609019700"/140, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
pipe2$9p(&(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRES16=r5, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r6}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}})
remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@jqfmt_vfsv1}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@dioread_nolock}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000007c0)="$eJzs3c1rHOUfAPDvbHb7/vs1hVKsiBR6sFK7aRJfKnioR9FiQT3XkGxDyaZbspvSxILtwV68SBFELIh3vXvwULx49K8oaKFICQp6WZnNbLJpNslmszFp9/OBSZ5nZnafeeaZ78Mz++wyAfStE+mfXMTxiPgiiTjcsi0f2cYTi/stPL45ni5J1Osf/JFEkq1r7p9k/w9mmeci4ufPIk7nVpdbnZufGiuXSzNZfqg2fW2oOjd/5sr02GRpsnR1ZHT03GujI2++8XrP6vryxb++fv/+O+c+P7nw1Q8Pj9xN4nwcyra11mNT9q7I3WrNnKjXs3NSiPNPvGy4q8J2r2SnD4CuDGRxXoiI44XDhWbUA8++TyOiDvSpZJPxv1d/Ac+I5jigeW/f9X3wU+rR24s3QKvrn1/8bCT2Ne6NDiwkK+6M0vvdwR6Un5bx4+/37qZLbOVzCIBNunU7Is7m86v7vyTr/7p3toN9nixD/wf/nfvp+OeVduOf3NL4J9qMfw62id1ubBz/uYc9KGZN6fjvrbbj36VJq8GBLPe/xpivkFy+Ui6lfdv/I+JUFPam+fXmc84tPKivta11/JcuafnNsWB2HA/zK+eYYmKsNraVOrd6dDvi+bbj32Sp/ZM27Z+ej486LONY6d6La23buP7bq/5dxEtt2395RitZf35yqHE9DDWvitX+vHPs17XKb1//X37ahqq2lbb/gfXrP5i0ztdWN1/Gt/v+Ka21rdvrf0/yYSO9J1t3Y6xWmxmO2JO8t3r9yPJrm/nm/mn9T51cv/9rd/3vj4iPO6z/naPfv9B9/bdXWv+JTbX/5hMP3v3km7XK76z9X22kTmVrOun/Oj3ArZw7AAAAAAAA2G1yEXEoklwx9mXpXK5YXPx+x9E4kCtXqrXTlyuzVyei8VvZwSjkmjPdh1u+DzGcfR+2mR95Ij8aEUci4suB/Y18cbxSntjpygMAAAAAAAAAAAAAAAAAAMAucXDp9/+x4vf/qd8GdvrogG2XX3z+N9CHNnzkfy+e9ATsShvGP/DMEv/Qv8Q/9C/xD32pMcUn/qF/iX/oX+If+pf4BwAAAAAAAAAAAAAAAAAAAAAAAAAAgJ66eOFCutQXHt8cT/MT1+dmpyrXz0yUqlPF6dnx4nhl5lpxslKZLJeK45Xpjd6vXKlcGx6J2RtDtVK1NlSdm780XZm9Wrt0ZXpssnSp5DnjAAAAAAAAAAAAAAAAAAAAsFp1bn5qrFwuzfQgUSiXS7mI6GTniB4V+tQl/t7y+6Ttdivf2XnenkQSy2vyu+KsSvQ6sdM9EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAs+zcAAP//MUwypA==")
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98)
fallocate(r7, 0x80, 0x5d, 0x1000000005)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10)

1.424562053s ago: executing program 8 (id=6943):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000000000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x40040)
bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000008c0)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}], [{@obj_user}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@appraise}, {@uid_eq}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4042, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r4, &(0x7f0000004200)='t', 0x1)
sendfile(r4, r3, 0x0, 0x3ffff)
sendfile(r4, r3, 0x0, 0x7ffff000)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xdb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6180000, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001480)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x250, 0xffffff7a, 0xffffffff, 0x250, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {0xff}, 0x16, 0x0, 0x41}, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xc, 0x2, 0x4, 'snmp_trap\x00', {0x7}}}}, {{@ip={@multicast2, @local, 0xff, 0xffffff00, 'veth0_to_hsr\x00', 'virt_wifi0\x00', {}, {}, 0x33, 0x1, 0x9c}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x6, 'system_u:object_r:tpm_device_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000800)="87eb503e303871014b7b9b89f6d8770bf70878c2981d10c976d3fffec180fda539657a1e599627d88bcf518359413e764838ba1f6ad2db65567dbfb7a7f0a4d88e146a2a5597f9774ea3378d0476be28aa8715267ac72f365b6ac54f05865bc2dca5efc7502c602eb17a14d32238c69209000624662cd8e677d4efbaf0c33329c11f535c4165a8e3b679e2a170", 0x8d)
shmget(0x0, 0x2000, 0x2c000400, &(0x7f0000fae000/0x2000)=nil)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)

1.423033623s ago: executing program 0 (id=6944):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f0000000400), &(0x7f00000005c0)=r5}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
memfd_create(0x0, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f0000000240)={[{@norecovery}, {@noload}, {@mblk_io_submit}, {@noload}, {@discard}, {@norecovery}, {@grpquota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x6, 0x67b, &(0x7f0000001300)="$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")
r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, 0x0, &(0x7f0000000840)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x18)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000580)={{{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0xe8)
quotactl_fd$Q_GETINFO(r6, 0xffffffff80000501, r9, &(0x7f00000000c0))
creat(0x0, 0x90)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
r10 = gettid()
openat$cgroup_freezer_state(r7, &(0x7f0000000200), 0x2, 0x0)
process_vm_writev(r10, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000005bc0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0x0, 0x2, 0x6, 0x7e9, 0x2000000000, 0x2000000000002, 0x3, 0x100000000003, 0x7ffd})

1.189835186s ago: executing program 5 (id=6945):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002c00)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@enum64={0x7, 0x0, 0x0, 0x13, 0x1, 0x2}, @fwd={0x8}, @typedef={0x3, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f, 0x2e, 0x2e, 0x2e, 0x5f, 0x5f, 0x5f]}}, 0x0, 0x46, 0x0, 0x1}, 0x28)
socket$key(0xf, 0x3, 0x2)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sysvipc/shm\x00', 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000580)={'vxcan1\x00'})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$eJzs3c1rHG8dAPDvbF42SauJIGh7CggaKN2YGlsFDxEPIlgo6Nk2bLahZpMt2U1pQqDpQfAiqHgQ9NKzL/UgePXlqv+EeJAW0TRYT7oys7t53d0kbXa3/fXzgck8M/PMPPPN88yzz+4MuwF8sKbTP7mIKxHxwyRisrk+iYiRLDUcsdDI93p3u5hOSdTr3/pnkuX57aWDYyXN+aXmwqcj4o/fi7iWO17qeHNeLq03U7O11Yez1c2t6w9WF5dLy6W1m3Pz8zduffHWzZN7val//2Xr8ssfff1zv14Yjk89/8GfkliIy81te7vbxbc8/AnTMd38n4yk/8IjvnbRhQ1YMugT4I2kl+ZQ4yqPKzEZQ1mqg7e9AAGAd8KTiKgDAB+Y5LTX/yFDBAD4aGl9DrC3u11sTYP9RKK//vHViBhrxN+6v9nYMty8ZzeW3Qed2EuO3BlJImLqAsqfjoif/+47v0yn6NF9SIB2dp425nu7+WP9f5L2f6OnHyHfccvnu+1Wb+w3fWy1/g/65/fp+OdLJ8d/V/cf6BnL/h4b/4zl21y7b+L06z/3osOuZ+ibTpeO/75y6Nm2g/Hf/kNrU0PNpY9lY76R5P6Dcint2z4eETMxkk+X57Ks7Z+Cmnn131edyj88/vvXj7/7i7T8dH6QI/diOB/1xnN5/8vG60uLtcWLiD2L/2nE1eF28Sf749/kSP0v7Ed6p+NRj1bNN778/Z91ypnGn8bbmk7G31v1ZxGfbVv/B3WZdH0+cTZrDrOtRtHGb/7204lO5R/Ufz6bp+W33gv0Q1r/E93jn0pT1c2tlcVyubRePX8Zf342+YdO2w63//bxZ+3/iLT9jybfztKtlvZ4sVZbn4sYTb55cv2Ng31by638afwzn2l//bdv/42+IH1PeG9/qbvhl6O/ah6qbfyZnU7x91Ya/9K56r9Lot7c59im569XhjqVf7b6n89SM801Z+n/TjnTt2jNAAAAAAAAAAAAAAAAAAAAAAAAAHB+uYi4HEmusJ/O5QqFxm94fzImcuVKtXbtfmVjbSmy38qeipFc66suJw99H+pc8/vwW8s3ji1/ISI+ERE/yY9ny4Vipbw06OABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOnS0d//f5LOCoXGtr/nB312AEDPjA36BACAvvP6DwAfnvO9/o/37DwAgP459/v/etKbEwEA+ubMr//3enseAED/uP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAj925fTud6v/Z3S6my0uPNjdWKo+uL5WqK4XVjWKhWFl/WFiuVJbLpUKxstrxQDuNWblSeTgfaxuPZ2ulam22url1d7WysVa7+2B1cbl0tzTSt8gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Oyqm1sri+VyaV2iS2K8NN45TxIRAz/D0xJpXV/kAYff0ZB3/jqSteuumWPqvWn8o13yJBdZ1vjxNYd7ifFBdE0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA74X/BwAA///YTBJy")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r4 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6)
sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r7, 0xb29, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2404c044)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="b1921d91d43adc2e000000", @ANYRES16=r7, @ANYBLOB="200029bd7000fedbdf2544000000040070000a0018000303030303030000", @ANYRES16=0x0, @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x4004084}, 0x4008080)
timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b)
ptrace$getregs(0xc, 0x0, 0x3, &(0x7f00000002c0)=""/126)
close_range(r6, r3, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

1.127668561s ago: executing program 8 (id=6946):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000000000000008"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x40040)
bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000008c0)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}], [{@obj_user}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@appraise}, {@uid_eq}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4042, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r4, &(0x7f0000004200)='t', 0x1)
sendfile(r4, r3, 0x0, 0x3ffff)
sendfile(r4, r3, 0x0, 0x7ffff000)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xdb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6180000, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001480)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x250, 0xffffff7a, 0xffffffff, 0x250, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {0xff}, 0x16, 0x0, 0x41}, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xc, 0x2, 0x4, 'snmp_trap\x00', {0x7}}}}, {{@ip={@multicast2, @local, 0xff, 0xffffff00, 'veth0_to_hsr\x00', 'virt_wifi0\x00', {}, {}, 0x33, 0x1, 0x9c}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x6, 'system_u:object_r:tpm_device_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000800)="87eb503e303871014b7b9b89f6d8770bf70878c2981d10c976d3fffec180fda539657a1e599627d88bcf518359413e764838ba1f6ad2db65567dbfb7a7f0a4d88e146a2a5597f9774ea3378d0476be28aa8715267ac72f365b6ac54f05865bc2dca5efc7502c602eb17a14d32238c69209000624662cd8e677d4efbaf0c33329c11f535c4165a8e3b679e2a170", 0x8d)
shmget(0x0, 0x2000, 0x2c000400, &(0x7f0000fae000/0x2000)=nil)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)

847.278568ms ago: executing program 2 (id=6947):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x2000000, &(0x7f0000000080)={[{@dioread_nolock}, {@discard}]}, 0x1, 0xb80, &(0x7f0000000c40)="$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")
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000121000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x401}, 0x11)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x20008000)
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x173)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
process_vm_writev(0x0, &(0x7f0000000000)=[{0x0}, {0xffffffffffffffff}, {0xfffffffffffffffc}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0xffffff5b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10)
io_setup(0x3, &(0x7f0000000340))
open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9)
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
sendmsg$can_j1939(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)="2086596618db6284c57d735b5e892eec2cd426c13f272f80fb4bd6de233e54b78f3575", 0x23}, 0x1, 0x0, 0x0, 0x200400c0}, 0x4000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r3, 0x0, 0x2}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)

731.07325ms ago: executing program 8 (id=6948):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
mmap(&(0x7f000074a000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xc299}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x16}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f40)=@newtaction={0x74, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x4, 0x0, 0x400, 0x1000}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]})
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r4, 0x4b72, &(0x7f00000000c0)={0x2, 0x1, 0xf, 0x2, 0x111, &(0x7f0000000640)="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"})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
fdatasync(r0)
prctl$PR_CAPBSET_READ(0x17, 0x19)
get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x9, &(0x7f0000ffb000/0x2000)=nil, 0x2)

632.917159ms ago: executing program 0 (id=6949):
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x41, 0xfe8ee28a1d9fac77, 0x6, 0x6, 0x2, 0x40, 0x3, 0x0, 0x6, 0x3})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f00000007c0)={{0x80}, 'port0\x00', 0x3c, 0x151625, 0xd, 0x2, 0x20107, 0x6, 0x5, 0x0, 0x4, 0x3})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2d41, 0xd2)
close(r1)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
listen(r2, 0x4)
mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADLINK(r1, 0x0, 0x0)
write$selinux_load(r1, &(0x7f00000004c0)={0xf97cff8c, 0x8, 'SE Linux', "b3a0c57c9b1528181b0e"}, 0x1a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
close(0xffffffffffffffff)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88372091cd397b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca00000000000000000000007925d0f1256330b9e2aa9a18cea8e009116f63c6c7d8f7f95bf0f6731e5eb1dcdc534f357b9f08e7a9a3aebeca145d695053b5bef004ca24e6c57ed10f01488d38b8b0b68d93e3cf630837915d518fde2115e66615786fe7b9216de958119cf762cac77ac829a02f48e72c0d2841880b2c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x80}, 0x18)
r4 = socket(0x2b, 0x80801, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"})

241.486827ms ago: executing program 2 (id=6950):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002c00)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@enum64={0x7, 0x0, 0x0, 0x13, 0x1, 0x2}, @fwd={0x8}, @typedef={0x3, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f, 0x2e, 0x2e, 0x2e, 0x5f, 0x5f, 0x5f]}}, 0x0, 0x46, 0x0, 0x1}, 0x28)
socket$key(0xf, 0x3, 0x2)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sysvipc/shm\x00', 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000580)={'vxcan1\x00'})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r4 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6)
sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r7, 0xb29, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2404c044)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="b1921d91d43adc2e000000", @ANYRES16=r7, @ANYBLOB="200029bd7000fedbdf2544000000040070000a0018000303030303030000", @ANYRES16=0x0, @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x4004084}, 0x4008080)
timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b)
ptrace$getregs(0xc, 0x0, 0x3, &(0x7f00000002c0)=""/126)
close_range(r6, r3, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r8, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

174.070693ms ago: executing program 8 (id=6951):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3a}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}, 0x1, 0x0, 0x0, 0xc110}, 0xa8)

114.098589ms ago: executing program 8 (id=6952):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000085"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8f0, &(0x7f0000002400)=<r2=>0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
io_submit(r2, 0x1, &(0x7f0000000940)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}])

0s ago: executing program 4 (id=6953):
r0 = socket$netlink(0x10, 0x3, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f00000000c0)="14a1c73255298e5e0545deac3aa74852b7290ce76f9f46215fb27fa9f38810c85858d56e87e07b2163637afc878690c009daa0442f42e01511e00dddd1019586b90c0e198baf70e1d88a14dbb0da6d44aad2e7af894519ed780888091ac2698f8390213145d2eab9510579b750b6616713ba04bc15acf8e464ed694729767b611f0a3e8f03d8955a19c541ce10c53636b59557661a013a6014542c47219a04af2c204bce0e0701e3f34dfdcaa33af2", &(0x7f0000000180)="09b731cdac1ea4f13955c83dcb2ca5321f775303cb838a57f740337ecc25d2000d3f3cd5"}}, &(0x7f0000000080))
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x70, 0x103781)
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r4=>r0, {0x9c}}, '\xe9\x1fq\x89Y\x1e\x923aK\x00'})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x15, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000001000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000001117f000010000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000002140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r5}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff})
perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x1}, 0xc004, 0x10000, 0x0, 0x8, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000002000000b}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="a6e32a0000000000000000000000000200"/31], 0x48)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0500000000000000000000e1", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10)
sendmsg$inet(r6, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x840, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x803})
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$nl_route(0x10, 0x3, 0x0)

kernel console output (not intermixed with test programs):

21.090443][T23371] hub 2-0:1.0: 8 ports detected
[  521.126967][T23373] loop4: detected capacity change from 0 to 1024
[  521.134620][T23373] EXT4-fs: inline encryption not supported
[  521.230378][T23383] loop4: detected capacity change from 0 to 1024
[  521.237742][T23383] EXT4-fs: Ignoring removed bh option
[  521.243242][T23383] EXT4-fs: inline encryption not supported
[  521.249512][T23385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6490'.
[  521.259348][T23383] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  521.270500][T23383] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  521.279991][T23383] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.6491: lblock 2 mapped to illegal pblock 2 (length 1)
[  521.294362][T23383] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.6491: lblock 0 mapped to illegal pblock 48 (length 1)
[  521.309049][T23383] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.6491: Failed to acquire dquot type 0
[  521.320749][T23383] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  521.331255][T23383] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.6491: mark_inode_dirty error
[  521.342911][T23383] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  521.353239][T23383] EXT4-fs (loop4): 1 orphan inode deleted
[  521.359743][T10338] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:18: lblock 1 mapped to illegal pblock 1 (length 1)
[  521.374502][T10338] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:18: Failed to release dquot type 0
[  521.387925][T23383] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz.4.6491: Invalid inode table block 1 in block_group 0
[  521.400763][T23383] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  521.410517][T23383] EXT4-fs error (device loop4): ext4_quota_off:7270: inode #3: comm syz.4.6491: mark_inode_dirty error
[  521.450740][T23391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6494'.
[  521.679796][T23407] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6500'.
[  521.691008][T23407] netlink: 52 bytes leftover after parsing attributes in process `syz.8.6500'.
[  521.741047][T23409] SELinux: ebitmap: truncated map
[  521.746979][T23409] SELinux: failed to load policy
[  521.750096][T23411] loop8: detected capacity change from 0 to 1024
[  521.759735][T23411] EXT4-fs: inline encryption not supported
[  521.849640][T23417] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6504'.
[  521.896107][T23420] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6505'.
[  521.910509][T23420] loop5: detected capacity change from 0 to 1024
[  521.917581][T23420] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  521.967622][T23426] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6509'.
[  522.129451][T23434] loop4: detected capacity change from 0 to 8192
[  522.248920][T23438] lo speed is unknown, defaulting to 1000
[  523.163746][T23441] FAULT_INJECTION: forcing a failure.
[  523.163746][T23441] name failslab, interval 1, probability 0, space 0, times 0
[  523.176475][T23441] CPU: 1 UID: 0 PID: 23441 Comm: syz.0.6513 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  523.176534][T23441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  523.176556][T23441] Call Trace:
[  523.176566][T23441]  <TASK>
[  523.176577][T23441]  __dump_stack+0x1d/0x30
[  523.176607][T23441]  dump_stack_lvl+0x95/0xd0
[  523.176629][T23441]  dump_stack+0x15/0x1b
[  523.176649][T23441]  should_fail_ex+0x265/0x280
[  523.176773][T23441]  should_failslab+0x8c/0xb0
[  523.176801][T23441]  kmem_cache_alloc_lru_noprof+0x6d/0x4c0
[  523.176833][T23441]  ? alloc_inode+0x9a/0x170
[  523.176863][T23441]  alloc_inode+0x9a/0x170
[  523.176949][T23441]  create_pipe_files+0x41/0x440
[  523.176975][T23441]  __do_pipe_flags+0x44/0x150
[  523.177002][T23441]  do_pipe2+0x61/0x130
[  523.177030][T23441]  ? ksys_write+0x192/0x1a0
[  523.177080][T23441]  __x64_sys_pipe2+0x30/0x40
[  523.177105][T23441]  x64_sys_call+0x1de2/0x3000
[  523.177130][T23441]  do_syscall_64+0xca/0x2b0
[  523.177178][T23441]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  523.177200][T23441] RIP: 0033:0x7feac899f749
[  523.177291][T23441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  523.177344][T23441] RSP: 002b:00007feac73bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000125
[  523.177369][T23441] RAX: ffffffffffffffda RBX: 00007feac8bf6180 RCX: 00007feac899f749
[  523.177386][T23441] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000
[  523.177402][T23441] RBP: 00007feac73bd090 R08: 0000000000000000 R09: 0000000000000000
[  523.177418][T23441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  523.177435][T23441] R13: 00007feac8bf6218 R14: 00007feac8bf6180 R15: 00007ffca52366e8
[  523.177458][T23441]  </TASK>
[  523.370084][T23441] lo speed is unknown, defaulting to 1000
[  523.443009][T23443] loop8: detected capacity change from 0 to 4096
[  523.711953][T23453] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6515'.
[  523.929187][T23469] lo speed is unknown, defaulting to 1000
[  524.054855][T23494] loop2: detected capacity change from 0 to 512
[  524.062222][T23494] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  524.076704][T23494] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.6530: invalid indirect mapped block 4294967295 (level 0)
[  524.091477][T23494] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.6530: invalid indirect mapped block 4294967295 (level 1)
[  524.108448][T23494] EXT4-fs (loop2): 1 orphan inode deleted
[  524.114390][T23494] EXT4-fs (loop2): 1 truncate cleaned up
[  524.321922][T23524] loop2: detected capacity change from 0 to 4096
[  524.365753][T23515] netlink: 'syz.8.6532': attribute type 1 has an invalid length.
[  524.373601][T23515] __nla_validate_parse: 4 callbacks suppressed
[  524.373625][T23515] netlink: 224 bytes leftover after parsing attributes in process `syz.8.6532'.
[  524.675685][T23566] loop2: detected capacity change from 0 to 1024
[  524.702598][T23566] EXT4-fs: Ignoring removed orlov option
[  524.727252][T23566] ext4: Unknown parameter 'obj_user'
[  524.765507][T23566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6537'.
[  524.912911][T23614] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  524.964752][T23618] EXT4-fs mount: 54 callbacks suppressed
[  524.964772][T23618] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  524.983606][T23614] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  524.991759][T23614] EXT4-fs (loop4): orphan cleanup on readonly fs
[  524.998996][T23614] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.6543: Freeing blocks not in datazone - block = 0, count = 4096
[  525.012658][T23614] EXT4-fs (loop4): 1 orphan inode deleted
[  525.019294][T23614] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  525.043641][T22207] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  525.097847][T23628] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6547'.
[  525.223932][T23640] set_capacity_and_notify: 2 callbacks suppressed
[  525.224007][T23640] loop4: detected capacity change from 0 to 128
[  525.237090][T23640] EXT4-fs: Ignoring removed nobh option
[  525.245850][T23640] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  525.265146][T23640] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  525.325716][T23632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6548'.
[  525.334757][T23632] bridge_slave_1: left allmulticast mode
[  525.340455][T23632] bridge_slave_1: left promiscuous mode
[  525.346305][T23632] bridge0: port 2(bridge_slave_1) entered disabled state
[  525.355135][T23632] bridge_slave_0: left allmulticast mode
[  525.360850][T23632] bridge_slave_0: left promiscuous mode
[  525.366816][T23632] bridge0: port 1(bridge_slave_0) entered disabled state
[  525.494742][T23002] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  525.504582][T22207] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  525.527090][   T29] kauditd_printk_skb: 406 callbacks suppressed
[  525.527141][   T29] audit: type=1400 audit(1766372959.895:42446): avc:  denied  { connect } for  pid=23657 comm="syz.4.6557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  525.553319][   T29] audit: type=1400 audit(1766372959.895:42447): avc:  denied  { name_connect } for  pid=23657 comm="syz.4.6557" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  525.585013][T23660] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  525.627215][   T29] audit: type=1400 audit(1766372959.945:42448): avc:  denied  { write } for  pid=23657 comm="syz.4.6557" lport=50098 faddr=::ffff:10.1.1.0 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  525.656150][T23662] loop2: detected capacity change from 0 to 512
[  525.683569][T23662] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  525.695118][T23662] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  525.747985][T23668] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6558'.
[  525.757097][T23668] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6558'.
[  525.786518][T23662] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.6556: Allocating blocks 41-42 which overlap fs metadata
[  525.812498][T23670] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6559'.
[  525.827886][T23662] Quota error (device loop2): write_blk: dquota write failed
[  525.837445][T23662] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5
[  525.859291][T23662] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  525.870746][T23662] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.6556: Failed to acquire dquot type 1
[  525.963617][T23673] loop8: detected capacity change from 0 to 1024
[  525.972486][T23662] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  525.989149][   T29] audit: type=1326 audit(1766372960.325:42449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23671 comm="syz.8.6560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35260f749 code=0x7ffc0000
[  526.012832][   T29] audit: type=1326 audit(1766372960.325:42450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23671 comm="syz.8.6560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe35260f749 code=0x7ffc0000
[  526.036605][   T29] audit: type=1326 audit(1766372960.325:42451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23671 comm="syz.8.6560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35260f749 code=0x7ffc0000
[  526.060221][   T29] audit: type=1326 audit(1766372960.325:42452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23671 comm="syz.8.6560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe35260f749 code=0x7ffc0000
[  526.076563][T23673] EXT4-fs: Ignoring removed bh option
[  526.097883][T23662] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.6556: corrupted inode contents
[  526.111824][T23673] EXT4-fs: inline encryption not supported
[  526.112114][T23662] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.6556: mark_inode_dirty error
[  526.124150][T23673] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  526.142326][T23662] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.6556: corrupted inode contents
[  526.167807][T23662] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.6556: mark_inode_dirty error
[  526.180152][T23673] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  526.191425][T23673] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 2: comm syz.8.6560: lblock 2 mapped to illegal pblock 2 (length 1)
[  526.213495][T23662] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.6556: corrupted inode contents
[  526.228721][T23673] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 48: comm syz.8.6560: lblock 0 mapped to illegal pblock 48 (length 1)
[  526.262063][T23662] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  526.287262][T23673] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.6560: Failed to acquire dquot type 0
[  526.299278][T23662] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.6556: corrupted inode contents
[  526.328302][T23673] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  526.347821][T23662] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.6556: mark_inode_dirty error
[  526.381556][T23673] EXT4-fs error (device loop8): ext4_evict_inode:253: inode #11: comm syz.8.6560: mark_inode_dirty error
[  526.405213][T23662] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[  526.424004][T23673] EXT4-fs warning (device loop8): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  526.436987][T23662] EXT4-fs (loop2): 1 truncate cleaned up
[  526.448275][T23673] EXT4-fs (loop8): 1 orphan inode deleted
[  526.454528][T23673] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  526.467214][ T2005] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1)
[  526.474328][T23662] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  526.500065][ T2005] EXT4-fs error (device loop8): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 0
[  526.521244][T23681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6563'.
[  526.530430][T23681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6563'.
[  526.574156][T23673] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  526.584261][T23673] EXT4-fs error (device loop8): __ext4_get_inode_loc:4830: comm syz.8.6560: Invalid inode table block 1 in block_group 0
[  526.603921][T23673] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  526.613514][T23673] EXT4-fs error (device loop8): ext4_quota_off:7270: inode #3: comm syz.8.6560: mark_inode_dirty error
[  526.858168][T23679] loop4: detected capacity change from 0 to 1024
[  526.858631][T23675] loop5: detected capacity change from 0 to 1024
[  526.875255][T23679] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  526.876383][T23675] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  526.876959][T23675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  526.927698][T23699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6567'.
[  526.930691][T23699] ip6gre1: entered allmulticast mode
[  527.103272][T23002] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  527.166613][T23705] 9p: Bad value for 'rfdno'
[  527.180339][T22207] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  527.231774][T23710] loop2: detected capacity change from 0 to 1024
[  527.241154][T23710] EXT4-fs: inline encryption not supported
[  527.268912][T23710] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  527.368339][T23720] hub 2-0:1.0: USB hub found
[  527.378357][T23720] hub 2-0:1.0: 8 ports detected
[  527.402728][T23002] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  527.488844][T23723] loop2: detected capacity change from 0 to 4096
[  527.517740][T23723] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  527.737982][T23731] loop8: detected capacity change from 0 to 8192
[  527.818322][T23735] macvtap1: entered promiscuous mode
[  527.823684][T23735] macvtap1: entered allmulticast mode
[  527.960624][T23002] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  528.027345][T23744] loop2: detected capacity change from 0 to 1024
[  528.034803][T23744] EXT4-fs: Ignoring removed bh option
[  528.040334][T23744] EXT4-fs: inline encryption not supported
[  528.050132][T23745] SELinux: ebitmap: truncated map
[  528.056276][T23745] SELinux: failed to load policy
[  528.090292][T23744] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  528.112080][T23744] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  528.123033][T23744] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.6584: lblock 2 mapped to illegal pblock 2 (length 1)
[  528.139059][T23744] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.6584: lblock 0 mapped to illegal pblock 48 (length 1)
[  528.155046][T23744] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.6584: Failed to acquire dquot type 0
[  528.182066][T23744] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  528.282247][T23744] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.6584: mark_inode_dirty error
[  528.324146][T23744] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  528.336490][T23744] EXT4-fs (loop2): 1 orphan inode deleted
[  528.354358][ T2158] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1)
[  528.362459][T23744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  528.389266][ T2158] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 0
[  528.428463][T23744] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  528.459839][T23744] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.6584: Invalid inode table block 1 in block_group 0
[  528.517306][T23744] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  528.537207][T23744] EXT4-fs error (device loop2): ext4_quota_off:7270: inode #3: comm syz.2.6584: mark_inode_dirty error
[  528.670924][T23757] loop8: detected capacity change from 0 to 1024
[  528.678724][T23757] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  528.704199][T23757] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  528.712378][T23757] EXT4-fs (loop8): orphan cleanup on readonly fs
[  528.719161][T23757] EXT4-fs error (device loop8): ext4_free_blocks:6728: comm syz.8.6588: Freeing blocks not in datazone - block = 0, count = 4096
[  528.732863][T23757] EXT4-fs (loop8): 1 orphan inode deleted
[  528.739336][T23757] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  528.762699][T14515] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  528.804963][T23758] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  528.900266][T23768] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  528.911308][T23768] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  528.977185][T23773] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  529.068160][ T2158] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  529.083831][T23768] JBD2: no valid journal superblock found
[  529.089610][T23768] EXT4-fs (loop8): Could not load journal inode
[  529.114218][ T2158] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28
[  529.126661][ T2158] EXT4-fs (loop2): This should not happen!! Data will be lost
[  529.126661][ T2158] 
[  529.136410][ T2158] EXT4-fs (loop2): Total free blocks count 0
[  529.142505][ T2158] EXT4-fs (loop2): Free/Dirty block details
[  529.148494][ T2158] EXT4-fs (loop2): free_blocks=2415919104
[  529.154292][ T2158] EXT4-fs (loop2): dirty_blocks=32
[  529.159456][ T2158] EXT4-fs (loop2): Block reservation details
[  529.165506][ T2158] EXT4-fs (loop2): i_reserved_data_blocks=2
[  529.225115][T23002] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  529.374822][T23780] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  529.384872][T23780] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  529.386146][T23783] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  529.404815][T23783] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  529.422942][T23784] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  529.462248][T23786] __nla_validate_parse: 7 callbacks suppressed
[  529.462266][T23786] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6599'.
[  529.478750][T23784] EXT4-fs (loop4): 1 truncate cleaned up
[  529.494409][T23784] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  529.505075][T23783] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.6595: Allocating blocks 41-42 which overlap fs metadata
[  529.509325][T23780] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.6598: Allocating blocks 41-42 which overlap fs metadata
[  529.542334][T23780] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.6598: Allocating blocks 41-42 which overlap fs metadata
[  529.591017][T23780] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.6598: Failed to acquire dquot type 1
[  529.617027][T23780] EXT4-fs error (device loop8): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  529.619649][T23783] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.6595: Failed to acquire dquot type 1
[  529.647259][T23780] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.6598: corrupted inode contents
[  529.672955][T23780] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #12: comm syz.8.6598: mark_inode_dirty error
[  529.673335][T22207] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  529.700372][T23780] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.6598: corrupted inode contents
[  529.710263][T23783] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  529.715419][T23780] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #12: comm syz.8.6598: mark_inode_dirty error
[  529.750336][T23783] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.6595: corrupted inode contents
[  529.766723][T14813] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  529.779731][T23780] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.6598: corrupted inode contents
[  529.795999][T23780] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem
[  529.806194][T23783] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.6595: mark_inode_dirty error
[  529.808218][T23780] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.6598: corrupted inode contents
[  529.835681][T23780] EXT4-fs error (device loop8): ext4_truncate:4635: inode #12: comm syz.8.6598: mark_inode_dirty error
[  529.841576][T23798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6600'.
[  529.851907][T23780] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem
[  529.858333][T23783] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.6595: corrupted inode contents
[  529.883526][T23783] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.6595: mark_inode_dirty error
[  529.887088][T23780] EXT4-fs (loop8): 1 truncate cleaned up
[  529.915460][T23780] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  529.954807][T23783] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.6595: corrupted inode contents
[  529.995494][T23783] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  530.054700][T23783] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.6595: corrupted inode contents
[  530.085645][T23783] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.6595: mark_inode_dirty error
[  530.105667][T23783] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[  530.134325][T23783] EXT4-fs (loop2): 1 truncate cleaned up
[  530.213926][T23783] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  530.299690][T14515] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  530.540429][T23812] lo speed is unknown, defaulting to 1000
[  530.766409][T23002] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  530.816308][T23812] chnl_net:caif_netlink_parms(): no params data found
[  530.832100][   T29] kauditd_printk_skb: 343 callbacks suppressed
[  530.832119][   T29] audit: type=1326 audit(1766372965.195:42783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23826 comm="syz.2.6608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4cef7f749 code=0x7ffc0000
[  530.901275][   T29] audit: type=1326 audit(1766372965.235:42784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23826 comm="syz.2.6608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4cef7f749 code=0x7ffc0000
[  530.925240][   T29] audit: type=1326 audit(1766372965.235:42785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23826 comm="syz.2.6608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4cef7f749 code=0x7ffc0000
[  530.949273][   T29] audit: type=1326 audit(1766372965.235:42786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23826 comm="syz.2.6608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4cef7f749 code=0x7ffc0000
[  530.972983][   T29] audit: type=1326 audit(1766372965.235:42787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23826 comm="syz.2.6608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff4cef7df90 code=0x7ffc0000
[  530.996793][   T29] audit: type=1326 audit(1766372965.235:42788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23826 comm="syz.2.6608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4cef7f749 code=0x7ffc0000
[  531.020590][   T29] audit: type=1326 audit(1766372965.235:42789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23826 comm="syz.2.6608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4cef7f749 code=0x7ffc0000
[  531.044423][   T29] audit: type=1326 audit(1766372965.235:42790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23826 comm="syz.2.6608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4cef7f749 code=0x7ffc0000
[  531.066492][T23838] set_capacity_and_notify: 6 callbacks suppressed
[  531.066581][T23838] loop4: detected capacity change from 0 to 1024
[  531.068114][   T29] audit: type=1326 audit(1766372965.235:42791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23826 comm="syz.2.6608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff4cef7e3aa code=0x7ffc0000
[  531.088643][T23838] EXT4-fs: Ignoring removed orlov option
[  531.104406][   T29] audit: type=1326 audit(1766372965.235:42792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23826 comm="syz.2.6608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4cef7f749 code=0x7ffc0000
[  531.121316][T23838] ext4: Unknown parameter 'obj_user'
[  531.150077][T23812] bridge0: port 1(bridge_slave_0) entered blocking state
[  531.157366][T23812] bridge0: port 1(bridge_slave_0) entered disabled state
[  531.171949][T23812] bridge_slave_0: entered allmulticast mode
[  531.180914][T23812] bridge_slave_0: entered promiscuous mode
[  531.192183][T23812] bridge0: port 2(bridge_slave_1) entered blocking state
[  531.199449][T23812] bridge0: port 2(bridge_slave_1) entered disabled state
[  531.199515][T23838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6611'.
[  531.214352][T23812] bridge_slave_1: entered allmulticast mode
[  531.222034][T23812] bridge_slave_1: entered promiscuous mode
[  531.229832][   T31] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.264944][T23812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  531.285296][T23812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  531.295672][   T31] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.317516][T23844] loop4: detected capacity change from 0 to 1024
[  531.325508][T23841] netlink: 'syz.0.6612': attribute type 1 has an invalid length.
[  531.333309][T23841] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6612'.
[  531.343492][T23844] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  531.355830][T23812] team0: Port device team_slave_0 added
[  531.362576][T23812] team0: Port device team_slave_1 added
[  531.383522][T23844] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  531.400406][T23844] EXT4-fs (loop4): orphan cleanup on readonly fs
[  531.408763][   T31] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.414259][T23844] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.6613: Freeing blocks not in datazone - block = 0, count = 4096
[  531.432323][T23844] EXT4-fs (loop4): 1 orphan inode deleted
[  531.438606][T23844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  531.452529][T23812] batman_adv: batadv0: Adding interface: batadv_slave_0
[  531.459686][T23812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  531.485669][T23812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  531.501133][T23812] batman_adv: batadv0: Adding interface: batadv_slave_1
[  531.501823][T22207] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  531.508178][T23812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  531.508210][T23812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  531.572494][T23812] hsr_slave_0: entered promiscuous mode
[  531.584660][T23812] hsr_slave_1: entered promiscuous mode
[  531.648144][T23812] debugfs: 'hsr0' already exists in 'hsr'
[  531.654070][T23812] Cannot create hsr debugfs directory
[  531.674861][   T31] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.858518][   T31] bridge_slave_1: left allmulticast mode
[  531.864268][   T31] bridge_slave_1: left promiscuous mode
[  531.869991][   T31] bridge0: port 2(bridge_slave_1) entered disabled state
[  531.925972][   T31] bridge_slave_0: left promiscuous mode
[  531.931969][   T31] bridge0: port 1(bridge_slave_0) entered disabled state
[  531.947366][T23862] loop5: detected capacity change from 0 to 1024
[  531.964924][T23862] EXT4-fs: inline encryption not supported
[  531.999346][T23862] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  532.094223][   T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  532.124664][   T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  532.151723][   T31] bond0 (unregistering): Released all slaves
[  532.296771][T23874] loop4: detected capacity change from 0 to 512
[  532.306135][T23874] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  532.363066][T14813] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  532.374800][   T31] hsr_slave_0: left promiscuous mode
[  532.380640][   T31] hsr_slave_1: left promiscuous mode
[  532.385329][T23874] EXT4-fs (loop4): 1 truncate cleaned up
[  532.393070][T23874] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  532.406189][   T31] veth1_macvtap: left promiscuous mode
[  532.411714][   T31] veth0_macvtap: left promiscuous mode
[  532.422875][   T31] veth1_vlan: left promiscuous mode
[  532.450417][T22207] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  532.498127][T23882] loop4: detected capacity change from 0 to 1024
[  532.505864][T23882] EXT4-fs: Ignoring removed orlov option
[  532.511706][T23882] ext4: Unknown parameter 'obj_user'
[  532.525995][T23882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6624'.
[  532.690104][T23887] loop5: detected capacity change from 0 to 1024
[  532.716387][T23887] EXT4-fs: Ignoring removed bh option
[  532.728796][T23812] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  532.736124][T23887] EXT4-fs: inline encryption not supported
[  532.744589][T23887] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  532.756494][T23812] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  532.765657][T23812] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  532.773550][T23887] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  532.777589][T23812] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  532.808111][T23887] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 2: comm syz.5.6625: lblock 2 mapped to illegal pblock 2 (length 1)
[  532.822905][T23887] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 48: comm syz.5.6625: lblock 0 mapped to illegal pblock 48 (length 1)
[  532.838862][T23887] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.6625: Failed to acquire dquot type 0
[  532.887767][T23887] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  532.916740][T23898] hub 2-0:1.0: USB hub found
[  532.928644][T23898] hub 2-0:1.0: 8 ports detected
[  532.943547][T23887] EXT4-fs error (device loop5): ext4_evict_inode:253: inode #11: comm syz.5.6625: mark_inode_dirty error
[  532.948068][T23812] 8021q: adding VLAN 0 to HW filter on device bond0
[  532.995379][T23812] 8021q: adding VLAN 0 to HW filter on device team0
[  532.998018][T23887] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  533.027328][T10327] bridge0: port 1(bridge_slave_0) entered blocking state
[  533.034589][T10327] bridge0: port 1(bridge_slave_0) entered forwarding state
[  533.073911][T23887] EXT4-fs (loop5): 1 orphan inode deleted
[  533.074416][T10327] bridge0: port 2(bridge_slave_1) entered blocking state
[  533.081043][T23887] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  533.086800][T10327] bridge0: port 2(bridge_slave_1) entered forwarding state
[  533.105599][T10327] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1)
[  533.141543][T10327] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:14: Failed to release dquot type 0
[  533.168286][T23887] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  533.188504][T23887] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz.5.6625: Invalid inode table block 1 in block_group 0
[  533.213981][T23887] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  533.233860][T23887] EXT4-fs error (device loop5): ext4_quota_off:7270: inode #3: comm syz.5.6625: mark_inode_dirty error
[  533.255638][T23812] 8021q: adding VLAN 0 to HW filter on device batadv0
[  533.457011][T23812] veth0_vlan: entered promiscuous mode
[  533.478031][T23812] veth1_vlan: entered promiscuous mode
[  533.535541][T23812] veth0_macvtap: entered promiscuous mode
[  533.549412][T23812] veth1_macvtap: entered promiscuous mode
[  533.563803][T23812] batman_adv: batadv0: Interface activated: batadv_slave_0
[  533.575783][T23812] batman_adv: batadv0: Interface activated: batadv_slave_1
[  533.591179][   T52] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  533.620729][   T52] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  533.653477][   T52] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  533.682791][T23933] netlink: 'syz.5.6633': attribute type 4 has an invalid length.
[  533.712106][T23935] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6605'.
[  533.721167][T23935] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6605'.
[  533.730158][T23933] serio: Serial port ttyS3
[  533.735356][   T52] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  533.801684][T23939] loop4: detected capacity change from 0 to 1024
[  533.815367][T23939] EXT4-fs: Ignoring removed bh option
[  533.827160][T23939] EXT4-fs: inline encryption not supported
[  533.845117][T23939] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  533.866856][T23939] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  533.892314][T23947] loop2: detected capacity change from 0 to 512
[  533.897897][T23939] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.6636: lblock 2 mapped to illegal pblock 2 (length 1)
[  533.915171][T23947] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  533.924924][T23947] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  533.948386][T23939] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.6636: lblock 0 mapped to illegal pblock 48 (length 1)
[  534.029013][T23939] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.6636: Failed to acquire dquot type 0
[  534.041314][T23939] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  534.051600][T23939] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.6636: mark_inode_dirty error
[  534.063272][T23939] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  534.074686][T23939] EXT4-fs (loop4): 1 orphan inode deleted
[  534.080975][T23939] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  534.114586][ T9409] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1)
[  534.130722][T23947] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.6638: Allocating blocks 41-42 which overlap fs metadata
[  534.156132][ T9409] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:13: Failed to release dquot type 0
[  534.168787][T23812] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  534.179887][T23812] CPU: 1 UID: 0 PID: 23812 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) 
[  534.179919][T23812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  534.179936][T23812] Call Trace:
[  534.179944][T23812]  <TASK>
[  534.179954][T23812]  __dump_stack+0x1d/0x30
[  534.179979][T23812]  dump_stack_lvl+0x95/0xd0
[  534.180016][T23812]  dump_stack+0x15/0x1b
[  534.180039][T23812]  dump_header+0x81/0x240
[  534.180066][T23812]  oom_kill_process+0x295/0x350
[  534.180101][T23812]  out_of_memory+0x97b/0xb80
[  534.180131][T23812]  try_charge_memcg+0x610/0xa10
[  534.180210][T23812]  charge_memcg+0x51/0xc0
[  534.180243][T23812]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  534.180279][T23812]  __read_swap_cache_async+0x17b/0x2d0
[  534.180334][T23812]  swap_cluster_readahead+0x262/0x3c0
[  534.180383][T23812]  swapin_readahead+0xde/0x820
[  534.180422][T23812]  ? perf_iterate_sb+0x62a/0x650
[  534.180480][T23812]  ? __pfx_perf_event_switch_output+0x10/0x10
[  534.180525][T23812]  ? __perf_event_task_sched_in+0xa5b/0xac0
[  534.180619][T23812]  ? __rcu_read_unlock+0x4f/0x70
[  534.180639][T23812]  ? __rcu_read_unlock+0x4f/0x70
[  534.180657][T23812]  ? __rcu_read_unlock+0x4f/0x70
[  534.180758][T23812]  ? swap_cache_get_folio+0x277/0x280
[  534.180813][T23812]  do_swap_page+0x2b4/0x21e0
[  534.180948][T23812]  ? _raw_spin_unlock+0x26/0x50
[  534.180980][T23812]  ? __schedule+0x85f/0xcd0
[  534.181060][T23812]  ? __pfx_default_wake_function+0x10/0x10
[  534.181131][T23812]  handle_mm_fault+0x9d8/0x2c60
[  534.181188][T23812]  do_user_addr_fault+0x630/0x1080
[  534.181291][T23812]  exc_page_fault+0x62/0xa0
[  534.181330][T23812]  asm_exc_page_fault+0x26/0x30
[  534.181390][T23812] RIP: 0033:0x7f0e2c131fc5
[  534.181407][T23812] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 <c3> 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74
[  534.181425][T23812] RSP: 002b:00007ffd3c83fd18 EFLAGS: 00010246
[  534.181444][T23812] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 00007f0e2c131fc3
[  534.181471][T23812] RDX: 00007ffd3c83fd30 RSI: 0000000000000000 RDI: 0000000000000000
[  534.181487][T23812] RBP: 00007ffd3c83fd9c R08: 0000000004d34df5 R09: 0000000000000000
[  534.181561][T23812] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388
[  534.181574][T23812] R13: 00000000000927c0 R14: 00000000000825dc R15: 00007ffd3c83fdf0
[  534.181596][T23812]  </TASK>
[  534.181605][T23812] memory: usage 307200kB, limit 307200kB, failcnt 7453
[  534.255433][T23947] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.6638: Allocating blocks 41-42 which overlap fs metadata
[  534.255760][T23812] memory+swap: usage 307356kB, limit 9007199254740988kB, failcnt 0
[  534.255781][T23812] kmem: usage 307152kB, limit 9007199254740988kB, failcnt 0
[  534.255797][T23812] Memory cgroup stats for /syz8:
[  534.256384][T23812] cache 0
[  534.267444][T23939] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  534.271388][T23812] rss 28672
[  534.271400][T23812] shmem 0
[  534.304748][T23947] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.6638: Failed to acquire dquot type 1
[  534.308916][T23812] mapped_file 0
[  534.308929][T23812] dirty 0
[  534.308938][T23812] writeback 28672
[  534.308948][T23812] workingset_refault_anon 19
[  534.308959][T23812] workingset_refault_file 0
[  534.308969][T23812] swap 159744
[  534.308979][T23812] swapcached 32768
[  534.309065][T23812] pgpgin 432728
[  534.309075][T23812] pgpgout 432716
[  534.309085][T23812] pgfault 384042
[  534.309094][T23812] pgmajfault 4
[  534.309179][T23812] inactive_anon 32768
[  534.309189][T23812] active_anon 0
[  534.309199][T23812] inactive_file 16384
[  534.309209][T23812] active_file 0
[  534.309218][T23812] unevictable 0
[  534.309228][T23812] hierarchical_memory_limit 314572800
[  534.309240][T23812] hierarchical_memsw_limit 9223372036854771712
[  534.309252][T23812] total_cache 0
[  534.309269][T23812] total_rss 28672
[  534.309279][T23812] total_shmem 0
[  534.367731][T23947] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, 
[  534.368099][T23812] total_mapped_file 0
[  534.368119][T23812] total_dirty 0
[  534.368129][T23812] total_writeback 28672
[  534.368140][T23812] total_workingset_refault_anon 19
[  534.368150][T23812] total_workingset_refault_file 0
[  534.368158][T23812] total_swap 159744
[  534.368167][T23812] total_swapcached 32768
[  534.368177][T23812] total_pgpgin 432728
[  534.368263][T23812] total_pgpgout 432716
[  534.368274][T23812] total_pgfault 384042
[  534.368284][T23812] total_pgmajfault 4
[  534.368294][T23812] total_inactive_anon 32768
[  534.368347][T23812] total_active_anon 0
[  534.368357][T23812] total_inactive_file 16384
[  534.368368][T23812] total_active_file 0
[  534.368378][T23812] total_unevictable 0
[  534.368389][T23812] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8
[  534.375147][T23947] inode 12: 
[  534.382679][T23812] ,task=syz.8.6639,pid=23950,uid=0
[  534.382712][T23812] Memory cgroup out of memory: Killed process 23950 (syz.8.6639) total-vm:93896kB, anon-rss:1132kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  534.711759][T23947] block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  534.735620][T23939] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz.4.6636: Invalid inode table block 1 in block_group 0
[  534.763159][T23947] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.6638: corrupted inode contents
[  534.779254][T23939] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  534.794433][T23947] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.6638: mark_inode_dirty error
[  534.825501][T23947] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.6638: corrupted inode contents
[  534.831614][T23939] EXT4-fs error (device loop4): ext4_quota_off:7270: inode #3: comm syz.4.6636: mark_inode_dirty error
[  534.870841][T23947] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.6638: mark_inode_dirty error
[  534.901351][T23947] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.6638: corrupted inode contents
[  534.915658][T23947] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  534.942089][T23947] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.6638: corrupted inode contents
[  534.957143][T23947] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.6638: mark_inode_dirty error
[  534.980780][T23947] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[  535.013298][T23960] loop5: detected capacity change from 0 to 8192
[  535.024825][T23964] hub 2-0:1.0: USB hub found
[  535.029995][T23947] EXT4-fs (loop2): 1 truncate cleaned up
[  535.037706][T23964] hub 2-0:1.0: 8 ports detected
[  535.077693][T23968] loop4: detected capacity change from 0 to 1024
[  535.088755][T23947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  535.102267][T23968] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  535.122437][T23968] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  535.144099][T23968] EXT4-fs (loop4): orphan cleanup on readonly fs
[  535.184618][T23968] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.6645: Freeing blocks not in datazone - block = 0, count = 4096
[  535.198593][T23968] EXT4-fs (loop4): 1 orphan inode deleted
[  535.226315][T23968] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  535.295989][T22207] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  535.377340][T23002] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  535.411661][T23981] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  535.480618][T23983] EXT4-fs: inline encryption not supported
[  535.528558][T23983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  535.686211][T23002] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  535.755246][T22207] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  535.828881][T23989] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  535.839008][T23989] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  535.855312][   T29] kauditd_printk_skb: 371 callbacks suppressed
[  535.855332][   T29] audit: type=1326 audit(1766372970.225:43154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23990 comm="syz.0.6653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac899f749 code=0x7ffc0000
[  535.885326][   T29] audit: type=1326 audit(1766372970.225:43155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23990 comm="syz.0.6653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7feac899f749 code=0x7ffc0000
[  535.909088][   T29] audit: type=1326 audit(1766372970.225:43156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23990 comm="syz.0.6653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac899f749 code=0x7ffc0000
[  535.932712][   T29] audit: type=1326 audit(1766372970.225:43157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23990 comm="syz.0.6653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7feac899f749 code=0x7ffc0000
[  535.956466][   T29] audit: type=1326 audit(1766372970.225:43158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23990 comm="syz.0.6653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac899f749 code=0x7ffc0000
[  535.980156][   T29] audit: type=1326 audit(1766372970.225:43159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23990 comm="syz.0.6653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feac899f749 code=0x7ffc0000
[  536.003896][   T29] audit: type=1326 audit(1766372970.225:43160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23990 comm="syz.0.6653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac899f749 code=0x7ffc0000
[  536.027681][   T29] audit: type=1326 audit(1766372970.225:43161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23990 comm="syz.0.6653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7feac89a15dc code=0x7ffc0000
[  536.051219][   T29] audit: type=1326 audit(1766372970.225:43162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23990 comm="syz.0.6653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7feac89a1514 code=0x7ffc0000
[  536.057152][T23989] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.6651: Allocating blocks 41-42 which overlap fs metadata
[  536.074838][   T29] audit: type=1326 audit(1766372970.225:43163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23990 comm="syz.0.6653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7feac89a1514 code=0x7ffc0000
[  536.137431][T23989] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.6651: Allocating blocks 41-42 which overlap fs metadata
[  536.159483][T23989] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.6651: Failed to acquire dquot type 1
[  536.172336][T23989] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  536.189588][T23989] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.6651: corrupted inode contents
[  536.204133][T23989] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.6651: mark_inode_dirty error
[  536.217731][T23989] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.6651: corrupted inode contents
[  536.247574][T23989] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.6651: mark_inode_dirty error
[  536.273063][T23989] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.6651: corrupted inode contents
[  536.288033][T23989] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  536.300845][T23989] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.6651: corrupted inode contents
[  536.301466][T24006] set_capacity_and_notify: 3 callbacks suppressed
[  536.301480][T24006] loop4: detected capacity change from 0 to 1024
[  536.302154][T24006] EXT4-fs: Ignoring removed orlov option
[  536.332337][T23989] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.6651: mark_inode_dirty error
[  536.332694][T24006] ext4: Unknown parameter 'obj_user'
[  536.351171][T24006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6657'.
[  536.364104][T23989] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[  536.376015][T23989] EXT4-fs (loop2): 1 truncate cleaned up
[  536.388338][T23989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  536.491111][T24000] loop5: detected capacity change from 0 to 1024
[  536.505715][T24000] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  536.520333][T24000] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  536.573591][T24013] loop4: detected capacity change from 0 to 1024
[  536.581900][T24013] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  536.594616][T24013] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  536.602771][T24013] EXT4-fs (loop4): orphan cleanup on readonly fs
[  536.609558][T24013] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.6659: Freeing blocks not in datazone - block = 0, count = 4096
[  536.636522][T24013] EXT4-fs (loop4): 1 orphan inode deleted
[  536.643254][T23002] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  536.653396][T24013] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  536.682651][T22207] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  536.776200][T24030] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  536.776228][T24029] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  536.827872][T24031] hub 2-0:1.0: USB hub found
[  536.832602][T24031] hub 2-0:1.0: 8 ports detected
[  536.909388][T24039] loop8: detected capacity change from 0 to 512
[  536.918250][T24039] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  536.939266][T24039] EXT4-fs (loop8): 1 truncate cleaned up
[  536.950770][T24039] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  536.989421][T23812] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  537.081327][T24048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6668'.
[  537.156348][T24047] netlink: 'syz.8.6670': attribute type 1 has an invalid length.
[  537.164241][T24047] netlink: 224 bytes leftover after parsing attributes in process `syz.8.6670'.
[  537.232078][T24052] loop8: detected capacity change from 0 to 8192
[  537.646900][T24058] loop5: detected capacity change from 0 to 1024
[  537.668520][T24058] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  537.703708][T24058] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  537.739361][T24058] EXT4-fs (loop5): orphan cleanup on readonly fs
[  537.764758][T24058] EXT4-fs error (device loop5): ext4_free_blocks:6728: comm syz.5.6674: Freeing blocks not in datazone - block = 0, count = 4096
[  537.822275][T24058] EXT4-fs (loop5): 1 orphan inode deleted
[  537.848483][T24058] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  537.883080][T24060] loop4: detected capacity change from 0 to 512
[  537.945517][T24060] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  537.962694][T14813] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  538.068549][T24060] EXT4-fs (loop4): 1 truncate cleaned up
[  538.132746][T24070] loop5: detected capacity change from 0 to 512
[  538.153697][T24060] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  538.204070][T24070] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  538.213814][T24070] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  538.265269][T24070] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.6677: Allocating blocks 41-42 which overlap fs metadata
[  538.282558][T24070] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.6677: Allocating blocks 41-42 which overlap fs metadata
[  538.306040][T24070] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.6677: Failed to acquire dquot type 1
[  538.339058][T24074] loop8: detected capacity change from 0 to 2048
[  538.359922][T24076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6681'.
[  538.369412][T24076] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6681'.
[  538.373865][T24070] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  538.380134][T24074] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  538.395042][T24070] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.6677: corrupted inode contents
[  538.427065][T24081] loop2: detected capacity change from 0 to 512
[  538.434312][T24081] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  538.445226][T24070] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #12: comm syz.5.6677: mark_inode_dirty error
[  538.459979][T24070] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.6677: corrupted inode contents
[  538.460559][T24081] EXT4-fs (loop2): 1 truncate cleaned up
[  538.478901][T24070] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #12: comm syz.5.6677: mark_inode_dirty error
[  538.539635][T22207] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  538.552148][T24070] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.6677: corrupted inode contents
[  538.567428][T24081] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  538.583636][T24070] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem
[  538.600902][T24070] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.6677: corrupted inode contents
[  538.615323][T24070] EXT4-fs error (device loop5): ext4_truncate:4635: inode #12: comm syz.5.6677: mark_inode_dirty error
[  538.633531][T24070] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem
[  538.654636][T24070] EXT4-fs (loop5): 1 truncate cleaned up
[  538.656867][T24087] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  538.920417][T24096] EXT4-fs: Ignoring removed bh option
[  538.926024][T24096] EXT4-fs: inline encryption not supported
[  538.937655][T24096] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  538.963164][T24096] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  538.974825][T24096] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 2: comm syz.5.6687: lblock 2 mapped to illegal pblock 2 (length 1)
[  538.989840][T24096] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 48: comm syz.5.6687: lblock 0 mapped to illegal pblock 48 (length 1)
[  539.004756][T24096] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.6687: Failed to acquire dquot type 0
[  539.041430][T24096] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  539.064760][T24096] EXT4-fs error (device loop5): ext4_evict_inode:253: inode #11: comm syz.5.6687: mark_inode_dirty error
[  539.076715][T24096] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  539.092805][T24096] EXT4-fs (loop5): 1 orphan inode deleted
[  539.103893][ T2158] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1)
[  539.126006][ T2158] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 0
[  539.146863][T24096] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz.5.6687: Invalid inode table block 1 in block_group 0
[  539.160387][T24096] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  539.170188][T24096] EXT4-fs error (device loop5): ext4_quota_off:7270: inode #3: comm syz.5.6687: mark_inode_dirty error
[  539.444708][T24112] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  539.467811][T24115] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6693'.
[  539.483913][T24115] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6693'.
[  539.505613][T24117] EXT4-fs: inline encryption not supported
[  539.555421][T24112] EXT4-fs (loop2): 1 truncate cleaned up
[  539.660943][T24135] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  539.682529][T24135] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  539.709851][T24135] EXT4-fs (loop8): orphan cleanup on readonly fs
[  539.717026][T24135] EXT4-fs error (device loop8): ext4_free_blocks:6728: comm syz.8.6699: Freeing blocks not in datazone - block = 0, count = 4096
[  539.782892][T24135] EXT4-fs (loop8): 1 orphan inode deleted
[  539.874441][T24165] EXT4-fs: Ignoring removed orlov option
[  539.902028][T24165] ext4: Unknown parameter 'obj_user'
[  540.217787][T24173] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  540.228436][T24173] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  540.267929][T24173] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.6703: Allocating blocks 41-42 which overlap fs metadata
[  540.282304][T24198] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  540.304543][T24198] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  540.315036][T24198] EXT4-fs (loop2): orphan cleanup on readonly fs
[  540.329712][T24173] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.6703: Failed to acquire dquot type 1
[  540.345486][T24198] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.6707: Freeing blocks not in datazone - block = 0, count = 4096
[  540.372519][T24173] EXT4-fs error (device loop8): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  540.394767][T24173] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.6703: corrupted inode contents
[  540.505842][T24198] EXT4-fs (loop2): 1 orphan inode deleted
[  540.519092][T24173] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #12: comm syz.8.6703: mark_inode_dirty error
[  540.555422][T24173] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.6703: corrupted inode contents
[  540.572197][T24173] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #12: comm syz.8.6703: mark_inode_dirty error
[  540.585536][T24233] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6708'.
[  540.586462][T24173] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.6703: corrupted inode contents
[  540.594687][T24233] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6708'.
[  540.624205][T24173] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem
[  540.636431][T24173] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.6703: corrupted inode contents
[  540.658806][T24173] EXT4-fs error (device loop8): ext4_truncate:4635: inode #12: comm syz.8.6703: mark_inode_dirty error
[  540.674709][T24235] EXT4-fs: inline encryption not supported
[  540.680692][T24173] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem
[  540.693586][T24173] EXT4-fs (loop8): 1 truncate cleaned up
[  540.801663][T24246] netlink: 'syz.0.6713': attribute type 13 has an invalid length.
[  540.832618][T24246] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  540.908341][   T29] kauditd_printk_skb: 645 callbacks suppressed
[  540.908395][   T29] audit: type=1326 audit(1766372975.275:43795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24239 comm="syz.5.6711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee330f749 code=0x7ffc0000
[  540.979210][   T29] audit: type=1326 audit(1766372975.285:43796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24239 comm="syz.5.6711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7faee330f749 code=0x7ffc0000
[  541.002934][   T29] audit: type=1326 audit(1766372975.285:43797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24239 comm="syz.5.6711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee330f749 code=0x7ffc0000
[  541.027139][   T29] audit: type=1326 audit(1766372975.285:43798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24239 comm="syz.5.6711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faee3342005 code=0x7ffc0000
[  541.128436][   T29] audit: type=1326 audit(1766372975.385:43799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24239 comm="syz.5.6711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faee3342005 code=0x7ffc0000
[  541.152326][   T29] audit: type=1326 audit(1766372975.485:43800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24239 comm="syz.5.6711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faee3342005 code=0x7ffc0000
[  541.218455][   T29] audit: type=1326 audit(1766372975.585:43801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24239 comm="syz.5.6711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faee3342005 code=0x7ffc0000
[  541.247340][T24258] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6715'.
[  541.257431][T24260] EXT4-fs: Ignoring removed orlov option
[  541.263490][T24260] ext4: Unknown parameter 'obj_user'
[  541.318436][   T29] audit: type=1326 audit(1766372975.685:43802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24239 comm="syz.5.6711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faee3342005 code=0x7ffc0000
[  541.415945][T24269] SELinux: ebitmap: truncated map
[  541.421803][T24269] SELinux: failed to load policy
[  541.427023][   T29] audit: type=1326 audit(1766372975.805:43803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24239 comm="syz.5.6711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7faee330f749 code=0x7ffc0000
[  541.520583][   T29] audit: type=1326 audit(1766372975.885:43804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24276 comm="syz.5.6724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee330f749 code=0x7ffc0000
[  541.551826][T24277] set_capacity_and_notify: 12 callbacks suppressed
[  541.551845][T24277] loop5: detected capacity change from 0 to 1024
[  541.566582][T24277] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  541.566616][T24277] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  541.568509][T24272] loop8: detected capacity change from 0 to 512
[  541.572132][T24277] JBD2: no valid journal superblock found
[  541.572148][T24277] EXT4-fs (loop5): Could not load journal inode
[  541.604705][T24272] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  541.610422][T24272] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  541.628773][T24283] __nla_validate_parse: 2 callbacks suppressed
[  541.628790][T24283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6721'.
[  541.628842][T24283] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6721'.
[  541.661639][T24272] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.6722: Allocating blocks 41-42 which overlap fs metadata
[  541.673867][T24272] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.6722: Allocating blocks 41-42 which overlap fs metadata
[  541.677221][T24272] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.6722: Failed to acquire dquot type 1
[  541.692723][T24272] EXT4-fs error (device loop8): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  541.816450][T24272] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.6722: corrupted inode contents
[  541.828862][T24272] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #12: comm syz.8.6722: mark_inode_dirty error
[  541.830752][T24272] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.6722: corrupted inode contents
[  541.831125][T24272] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #12: comm syz.8.6722: mark_inode_dirty error
[  541.832119][T24272] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.6722: corrupted inode contents
[  541.832712][T24272] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem
[  541.833440][T24272] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.6722: corrupted inode contents
[  541.847768][T24272] EXT4-fs error (device loop8): ext4_truncate:4635: inode #12: comm syz.8.6722: mark_inode_dirty error
[  541.849323][T24272] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem
[  541.851297][T24272] EXT4-fs (loop8): 1 truncate cleaned up
[  541.906411][T24293] loop4: detected capacity change from 0 to 4096
[  541.987187][T24297] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6730'.
[  542.013761][T24299] netlink: 'syz.0.6731': attribute type 13 has an invalid length.
[  542.146210][T24299] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  542.410474][T24313] SELinux: ebitmap: truncated map
[  542.416693][T24313] SELinux: failed to load policy
[  542.721250][T24326] IPv6: NLM_F_CREATE should be specified when creating new route
[  542.750148][T24315] loop4: detected capacity change from 0 to 1024
[  542.766053][T24326] loop8: detected capacity change from 0 to 1024
[  542.773128][T24326] EXT4-fs: Ignoring removed orlov option
[  542.778884][T24326] ext4: Unknown parameter 'obj_user'
[  542.796506][T24326] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6738'.
[  543.043438][T10340] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  543.076273][T24334] loop8: detected capacity change from 0 to 8192
[  543.188157][T24340] loop2: detected capacity change from 0 to 512
[  543.215094][T10340] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  543.237463][T24340] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  543.241149][T24343] loop4: detected capacity change from 0 to 512
[  543.269491][T10340] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  543.299990][T24343] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  543.311436][T24343] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  543.311972][T24340] EXT4-fs (loop2): 1 truncate cleaned up
[  543.371675][T10340] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  543.410938][T24343] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.6743: Allocating blocks 41-42 which overlap fs metadata
[  543.429982][T24335] lo speed is unknown, defaulting to 1000
[  543.466351][T24359] loop2: detected capacity change from 0 to 1024
[  543.521670][T24343] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.6743: Allocating blocks 41-42 which overlap fs metadata
[  543.541237][T24359] EXT4-fs: Ignoring removed orlov option
[  543.573233][T24359] ext4: Unknown parameter 'obj_user'
[  543.582151][T24343] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.6743: Failed to acquire dquot type 1
[  543.599244][T24343] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  543.615614][T24343] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.6743: corrupted inode contents
[  543.624019][T24359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6744'.
[  543.637561][T24343] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.6743: mark_inode_dirty error
[  543.655110][T10340] bond0 (unregistering): Released all slaves
[  543.663746][T24343] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.6743: corrupted inode contents
[  543.695693][T24343] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.6743: mark_inode_dirty error
[  543.754952][T24343] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.6743: corrupted inode contents
[  543.774024][T24343] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  543.786407][T24343] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.6743: corrupted inode contents
[  543.800472][T24343] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.6743: mark_inode_dirty error
[  543.818234][T24343] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  543.834964][T24343] EXT4-fs (loop4): 1 truncate cleaned up
[  543.847132][T24335] chnl_net:caif_netlink_parms(): no params data found
[  543.888570][T10340] hsr_slave_0: left promiscuous mode
[  543.900485][T10340] hsr_slave_1: left promiscuous mode
[  543.917524][T10340] veth1_macvtap: left promiscuous mode
[  543.929687][T10340] veth0_macvtap: left promiscuous mode
[  543.935608][T10340] veth1_vlan: left promiscuous mode
[  543.974005][T24375] loop8: detected capacity change from 0 to 8192
[  544.254607][ T3367] lo speed is unknown, defaulting to 1000
[  544.260400][ T3367] infiniband syz2: ib_query_port failed (-19)
[  544.335132][T24335] bridge0: port 1(bridge_slave_0) entered blocking state
[  544.342285][T24335] bridge0: port 1(bridge_slave_0) entered disabled state
[  544.349599][T24335] bridge_slave_0: entered allmulticast mode
[  544.356330][T24335] bridge_slave_0: entered promiscuous mode
[  544.363558][T24335] bridge0: port 2(bridge_slave_1) entered blocking state
[  544.370678][T24335] bridge0: port 2(bridge_slave_1) entered disabled state
[  544.378097][T24335] bridge_slave_1: entered allmulticast mode
[  544.384854][T24335] bridge_slave_1: entered promiscuous mode
[  544.415931][T24335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  544.431097][T24335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  544.473658][T24335] team0: Port device team_slave_0 added
[  544.483191][T24335] team0: Port device team_slave_1 added
[  544.541952][T24421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6751'.
[  544.554899][T24423] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  544.568833][T24421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6751'.
[  544.571361][T24335] batman_adv: batadv0: Adding interface: batadv_slave_0
[  544.584970][T24335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  544.611148][T24335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  544.802758][T24335] batman_adv: batadv0: Adding interface: batadv_slave_1
[  544.809829][T24335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  544.835805][T24335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  545.029608][T24335] hsr_slave_0: entered promiscuous mode
[  545.040778][T24335] hsr_slave_1: entered promiscuous mode
[  545.060199][T24335] debugfs: 'hsr0' already exists in 'hsr'
[  545.066033][T24335] Cannot create hsr debugfs directory
[  545.195859][T24507] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  545.205290][T24507] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  545.278879][T24507] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.6754: Allocating blocks 41-42 which overlap fs metadata
[  545.305504][T24507] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.6754: Allocating blocks 41-42 which overlap fs metadata
[  545.335305][T24507] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.6754: Failed to acquire dquot type 1
[  545.356924][T24519] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6758'.
[  545.360981][T24507] EXT4-fs error (device loop8): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  545.422575][T24335] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  545.430347][T24507] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.6754: corrupted inode contents
[  545.461070][T24335] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  545.479616][T24335] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  545.492933][T24521] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  545.495288][T24507] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #12: comm syz.8.6754: mark_inode_dirty error
[  545.504606][T24521] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  545.528076][T24335] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  545.581525][T24521] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.6759: Allocating blocks 41-42 which overlap fs metadata
[  545.605066][T24507] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.6754: corrupted inode contents
[  545.606179][T24521] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.6759: Allocating blocks 41-42 which overlap fs metadata
[  545.635513][T24521] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.6759: Failed to acquire dquot type 1
[  545.654438][T24507] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #12: comm syz.8.6754: mark_inode_dirty error
[  545.654580][T24521] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  545.682697][T24521] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.6759: corrupted inode contents
[  545.699508][T24521] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.6759: mark_inode_dirty error
[  545.713695][T24521] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.6759: corrupted inode contents
[  545.717454][T24335] 8021q: adding VLAN 0 to HW filter on device bond0
[  545.733623][T24521] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.6759: mark_inode_dirty error
[  545.747045][T24507] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.6754: corrupted inode contents
[  545.761097][T24521] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.6759: corrupted inode contents
[  545.769117][T24335] 8021q: adding VLAN 0 to HW filter on device team0
[  545.783571][T24521] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  545.793477][T24507] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem
[  545.805279][T24521] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.6759: corrupted inode contents
[  545.819473][T24507] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.6754: corrupted inode contents
[  545.834316][T24521] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.6759: mark_inode_dirty error
[  545.849192][T24521] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  545.850814][ T2158] bridge0: port 1(bridge_slave_0) entered blocking state
[  545.866576][ T2158] bridge0: port 1(bridge_slave_0) entered forwarding state
[  545.875051][T24507] EXT4-fs error (device loop8): ext4_truncate:4635: inode #12: comm syz.8.6754: mark_inode_dirty error
[  545.886464][ T2158] bridge0: port 2(bridge_slave_1) entered blocking state
[  545.894239][ T2158] bridge0: port 2(bridge_slave_1) entered forwarding state
[  545.895303][T24521] EXT4-fs (loop4): 1 truncate cleaned up
[  545.907591][T24507] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem
[  545.924963][T24507] EXT4-fs (loop8): 1 truncate cleaned up
[  546.077412][T24335] 8021q: adding VLAN 0 to HW filter on device batadv0
[  546.397934][   T29] kauditd_printk_skb: 194 callbacks suppressed
[  546.397954][   T29] audit: type=1326 audit(1766372980.765:43983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24568 comm="syz.4.6769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f611b7ef749 code=0x7ffc0000
[  546.434238][   T29] audit: type=1326 audit(1766372980.765:43984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24568 comm="syz.4.6769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f611b7ef749 code=0x7ffc0000
[  546.457926][   T29] audit: type=1326 audit(1766372980.765:43985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24568 comm="syz.4.6769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f611b7ef749 code=0x7ffc0000
[  546.481452][   T29] audit: type=1326 audit(1766372980.765:43986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24568 comm="syz.4.6769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f611b7ef749 code=0x7ffc0000
[  546.509975][T24335] veth0_vlan: entered promiscuous mode
[  546.533043][T24335] veth1_vlan: entered promiscuous mode
[  546.550115][T24335] veth0_macvtap: entered promiscuous mode
[  546.558889][T24335] veth1_macvtap: entered promiscuous mode
[  546.577458][T24335] batman_adv: batadv0: Interface activated: batadv_slave_0
[  546.618851][T24335] batman_adv: batadv0: Interface activated: batadv_slave_1
[  546.648913][ T2158] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  546.660642][ T2158] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  546.690148][ T2158] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  546.730516][T24587] SELinux: ebitmap: truncated map
[  546.731986][ T2158] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  546.737581][T24587] SELinux: failed to load policy
[  546.795159][   T29] audit: type=1326 audit(1766372981.155:43987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24591 comm="syz.5.6737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6444f749 code=0x7ffc0000
[  546.819115][   T29] audit: type=1326 audit(1766372981.155:43988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24591 comm="syz.5.6737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6444f749 code=0x7ffc0000
[  546.819153][   T29] audit: type=1326 audit(1766372981.155:43989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24591 comm="syz.5.6737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fda6444df90 code=0x7ffc0000
[  546.941378][T24598] set_capacity_and_notify: 3 callbacks suppressed
[  546.941432][T24598] loop2: detected capacity change from 0 to 512
[  546.990820][   T29] audit: type=1326 audit(1766372981.215:43990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24591 comm="syz.5.6737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6444f749 code=0x7ffc0000
[  547.002167][T24597] loop8: detected capacity change from 0 to 512
[  547.014559][   T29] audit: type=1326 audit(1766372981.215:43991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24591 comm="syz.5.6737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6444f749 code=0x7ffc0000
[  547.014623][   T29] audit: type=1326 audit(1766372981.215:43992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24591 comm="syz.5.6737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fda6444f749 code=0x7ffc0000
[  547.087490][T24598] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  547.097268][T24598] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  547.105960][T24597] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  547.171941][T24607] loop5: detected capacity change from 0 to 4096
[  547.173165][T24598] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.6777: Allocating blocks 41-42 which overlap fs metadata
[  547.227087][T24597] EXT4-fs (loop8): 1 truncate cleaned up
[  547.234780][T24598] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.6777: Failed to acquire dquot type 1
[  547.257052][T24598] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  547.277212][T24612] loop4: detected capacity change from 0 to 1024
[  547.278546][T24598] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.6777: corrupted inode contents
[  547.297494][T24612] EXT4-fs: inline encryption not supported
[  547.315260][T24606] netlink: 'syz.0.6782': attribute type 1 has an invalid length.
[  547.315281][T24606] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6782'.
[  547.415995][T24598] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.6777: mark_inode_dirty error
[  547.449569][T24598] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.6777: corrupted inode contents
[  547.476195][T24598] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.6777: mark_inode_dirty error
[  547.493068][T24598] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.6777: corrupted inode contents
[  547.540669][T24598] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  547.558606][T24622] loop8: detected capacity change from 0 to 8192
[  547.597568][T24598] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.6777: corrupted inode contents
[  547.676438][T24598] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.6777: mark_inode_dirty error
[  547.703435][T24631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6789'.
[  547.714552][T24629] loop5: detected capacity change from 0 to 512
[  547.747534][T24598] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[  547.776712][T24629] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  547.818476][T24598] EXT4-fs (loop2): 1 truncate cleaned up
[  547.836269][T24629] EXT4-fs (loop5): 1 truncate cleaned up
[  547.871195][T24638] loop4: detected capacity change from 0 to 4096
[  548.012057][T24640] loop8: detected capacity change from 0 to 8192
[  548.176904][T24644] netlink: 'syz.5.6794': attribute type 1 has an invalid length.
[  548.184746][T24644] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6794'.
[  548.979077][T24667] loop8: detected capacity change from 0 to 8192
[  549.005605][T24669] loop2: detected capacity change from 0 to 8192
[  549.026907][T24675] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6805'.
[  549.040982][T24675] ipvlan2: entered promiscuous mode
[  549.061830][T24675] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  549.082390][  T934] Bluetooth: hci0: Frame reassembly failed (-84)
[  549.228516][T24690] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  550.560077][T24732] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  550.591967][T24732] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  550.666648][T24737] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  550.714818][T24737] EXT4-fs (loop4): 1 truncate cleaned up
[  550.720942][T24732] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.6826: Allocating blocks 41-42 which overlap fs metadata
[  550.721460][T24732] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.6826: Allocating blocks 41-42 which overlap fs metadata
[  550.755112][T24732] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.6826: Failed to acquire dquot type 1
[  550.798397][T24732] EXT4-fs error (device loop8): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  550.815701][T24732] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.6826: corrupted inode contents
[  550.835911][T24732] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #12: comm syz.8.6826: mark_inode_dirty error
[  550.863707][T24732] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.6826: corrupted inode contents
[  550.915451][T24745] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  550.963208][T24732] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #12: comm syz.8.6826: mark_inode_dirty error
[  550.977274][T24732] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.6826: corrupted inode contents
[  550.990378][T24732] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem
[  551.000126][T24732] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.6826: corrupted inode contents
[  551.013972][T24732] EXT4-fs error (device loop8): ext4_truncate:4635: inode #12: comm syz.8.6826: mark_inode_dirty error
[  551.026146][T24732] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem
[  551.036749][T24732] EXT4-fs (loop8): 1 truncate cleaned up
[  551.124116][ T3551] Bluetooth: hci0: command 0x1003 tx timeout
[  551.130237][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  551.225397][T24749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6831'.
[  551.356337][T24756] EXT4-fs: Ignoring removed bh option
[  551.361990][T24756] EXT4-fs: inline encryption not supported
[  551.368785][T24756] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  551.380105][T24756] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  551.393269][T24756] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 2: comm syz.8.6834: lblock 2 mapped to illegal pblock 2 (length 1)
[  551.408872][T24756] __quota_error: 346 callbacks suppressed
[  551.408892][T24756] Quota error (device loop8): qtree_write_dquot: dquota write failed
[  551.422970][T24756] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 48: comm syz.8.6834: lblock 0 mapped to illegal pblock 48 (length 1)
[  551.437691][T24756] Quota error (device loop8): v2_write_file_info: Can't write info structure
[  551.447263][T24756] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.6834: Failed to acquire dquot type 0
[  551.459606][T24756] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  551.468429][   T29] audit: type=1326 audit(1766372985.825:44332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24743 comm="syz.2.6828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff4cefb2005 code=0x7ffc0000
[  551.494608][T24756] EXT4-fs error (device loop8): ext4_evict_inode:253: inode #11: comm syz.8.6834: mark_inode_dirty error
[  551.506444][T24756] EXT4-fs warning (device loop8): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  551.516943][T24756] EXT4-fs (loop8): 1 orphan inode deleted
[  551.523474][T10343] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:20: lblock 1 mapped to illegal pblock 1 (length 1)
[  551.539619][T10343] Quota error (device loop8): remove_tree: Can't read quota data block 1
[  551.549620][T10343] EXT4-fs error (device loop8): ext4_release_dquot:7022: comm kworker/u8:20: Failed to release dquot type 0
[  551.565439][T24756] EXT4-fs error (device loop8): __ext4_get_inode_loc:4830: comm syz.8.6834: Invalid inode table block 1 in block_group 0
[  551.579737][   T29] audit: type=1326 audit(1766372985.945:44333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24743 comm="syz.2.6828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff4cef7f749 code=0x7ffc0000
[  551.583191][T24756] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  551.613709][T24756] EXT4-fs error (device loop8): ext4_quota_off:7270: inode #3: comm syz.8.6834: mark_inode_dirty error
[  551.627261][   T29] audit: type=1326 audit(1766372986.005:44334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24755 comm="syz.8.6834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0e2c0fdf90 code=0x7ffc0000
[  551.653285][   T29] audit: type=1326 audit(1766372986.025:44335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24755 comm="syz.8.6834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0e2c0ff34b code=0x7ffc0000
[  551.676881][   T29] audit: type=1326 audit(1766372986.025:44336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24755 comm="syz.8.6834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0e2c0fe3aa code=0x7ffc0000
[  551.700494][   T29] audit: type=1326 audit(1766372986.025:44337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24755 comm="syz.8.6834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2c0ff749 code=0x7ffc0000
[  551.724523][   T29] audit: type=1326 audit(1766372986.025:44338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24755 comm="syz.8.6834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2c0ff749 code=0x7ffc0000
[  551.776448][T24766] netlink: 'syz.0.6838': attribute type 1 has an invalid length.
[  551.785655][T24766] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6838'.
[  551.956432][T24785] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  552.045326][T24785] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  552.055419][T24785] EXT4-fs (loop8): orphan cleanup on readonly fs
[  552.062294][T24785] EXT4-fs error (device loop8): ext4_free_blocks:6728: comm syz.8.6845: Freeing blocks not in datazone - block = 0, count = 4096
[  552.077728][T24785] EXT4-fs (loop8): 1 orphan inode deleted
[  552.251180][T24802] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  552.366825][T24804] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6852'.
[  552.379933][T24804] ipvlan2: entered promiscuous mode
[  552.395885][T24804] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  552.407726][  T934] Bluetooth: hci0: Frame reassembly failed (-84)
[  552.594449][T24807] set_capacity_and_notify: 8 callbacks suppressed
[  552.594468][T24807] loop2: detected capacity change from 0 to 1024
[  552.608056][T24807] EXT4-fs: Ignoring removed bh option
[  552.613543][T24807] EXT4-fs: inline encryption not supported
[  552.620745][T24807] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  552.632686][T24807] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  552.642525][T24807] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.6853: lblock 2 mapped to illegal pblock 2 (length 1)
[  552.656965][T24807] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.6853: lblock 0 mapped to illegal pblock 48 (length 1)
[  552.671411][T24807] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.6853: Failed to acquire dquot type 0
[  552.682980][T24807] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  552.692535][T24807] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.6853: mark_inode_dirty error
[  552.705307][T24807] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  552.715668][T24807] EXT4-fs (loop2): 1 orphan inode deleted
[  552.722290][  T934] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1)
[  552.738099][  T934] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 0
[  552.752780][T24807] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.6853: Invalid inode table block 1 in block_group 0
[  552.767370][T24807] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  552.778343][T24807] EXT4-fs error (device loop2): ext4_quota_off:7270: inode #3: comm syz.2.6853: mark_inode_dirty error
[  552.869066][T24812] netlink: 'syz.4.6855': attribute type 1 has an invalid length.
[  552.872304][T24820] netlink: 'syz.8.6858': attribute type 13 has an invalid length.
[  552.880305][T24812] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6855'.
[  552.921311][T24820] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  552.956170][T24820] loop8: detected capacity change from 0 to 1024
[  552.963231][T24820] EXT4-fs: Ignoring removed mblk_io_submit option
[  552.971293][T24824] loop2: detected capacity change from 0 to 1024
[  552.972522][T24820] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  552.980184][T24824] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  553.000920][T24824] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  553.003293][T24820] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #11: comm syz.8.6858: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  553.033201][T24824] EXT4-fs (loop2): orphan cleanup on readonly fs
[  553.041483][T24824] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.6860: Freeing blocks not in datazone - block = 0, count = 4096
[  553.056775][T24824] EXT4-fs (loop2): 1 orphan inode deleted
[  553.063750][T24820] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.6858: couldn't read orphan inode 11 (err -117)
[  553.082016][T24828] loop4: detected capacity change from 0 to 1024
[  553.082637][T24820] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.6858: Invalid block bitmap block 0 in block_group 0
[  553.102682][T24820] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.6858: Failed to acquire dquot type 0
[  553.114270][T24828] EXT4-fs: Ignoring removed orlov option
[  553.114384][T24828] ext4: Unknown parameter 'obj_user'
[  553.124961][T24828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6861'.
[  553.197030][T24837] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6864'.
[  553.273530][T24843] loop5: detected capacity change from 0 to 1024
[  553.287249][T24843] EXT4-fs: inline encryption not supported
[  553.467650][T24859] loop5: detected capacity change from 0 to 4096
[  553.630695][T24462] EXT4-fs error (device loop8): __ext4_get_inode_loc:4830: comm kworker/u8:25: Invalid inode table block 8589934593 in block_group 0
[  553.745151][T24886] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6868'.
[  553.938464][T24908] SELinux: ebitmap: truncated map
[  553.944895][T24908] SELinux: failed to load policy
[  554.470130][T24955] netlink: 'syz.2.6874': attribute type 1 has an invalid length.
[  554.478004][T24955] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6874'.
[  554.487389][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[  554.493587][ T3551] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  554.558750][T24989] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6876'.
[  554.724371][T24968] loop4: detected capacity change from 0 to 512
[  554.819372][T24968] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  554.830436][T24968] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  554.941345][T25001] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6879'.
[  554.955459][T24968] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.6875: Allocating blocks 41-42 which overlap fs metadata
[  554.997946][T24968] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.6875: Allocating blocks 41-42 which overlap fs metadata
[  555.037894][T24968] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.6875: Failed to acquire dquot type 1
[  555.096919][T24968] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  555.140848][T24968] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.6875: corrupted inode contents
[  555.180331][T24968] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.6875: mark_inode_dirty error
[  555.206511][T24968] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.6875: corrupted inode contents
[  555.223062][T24968] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.6875: mark_inode_dirty error
[  555.260666][T24968] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.6875: corrupted inode contents
[  555.295597][T24968] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  555.308124][T24968] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.6875: corrupted inode contents
[  555.332348][T24968] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.6875: mark_inode_dirty error
[  555.365271][T24968] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  555.386925][T25018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6885'.
[  555.404986][T24968] EXT4-fs (loop4): 1 truncate cleaned up
[  555.420794][T24995] loop8: detected capacity change from 0 to 1024
[  555.422726][T24968] EXT4-fs mount: 72 callbacks suppressed
[  555.423440][T24968] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  555.468868][T24995] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  555.497903][T25024] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6887'.
[  555.785267][T23812] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  555.887489][T25033] loop8: detected capacity change from 0 to 2048
[  555.932959][T25029] loop2: detected capacity change from 0 to 512
[  555.946354][T25033] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  556.002544][T25029] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  556.015152][T25029] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  556.078228][T25029] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.6889: Allocating blocks 41-42 which overlap fs metadata
[  556.139732][T22207] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  556.161006][T25043] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  556.168068][T25029] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.6889: Allocating blocks 41-42 which overlap fs metadata
[  556.183153][T25043] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 248 with max blocks 292 with error 28
[  556.183244][T25043] EXT4-fs (loop8): This should not happen!! Data will be lost
[  556.183244][T25043] 
[  556.183261][T25043] EXT4-fs (loop8): Total free blocks count 0
[  556.183275][T25043] EXT4-fs (loop8): Free/Dirty block details
[  556.183289][T25043] EXT4-fs (loop8): free_blocks=2415919104
[  556.183357][T25043] EXT4-fs (loop8): dirty_blocks=544
[  556.183373][T25043] EXT4-fs (loop8): Block reservation details
[  556.183510][T25043] EXT4-fs (loop8): i_reserved_data_blocks=34
[  556.418476][   T29] kauditd_printk_skb: 372 callbacks suppressed
[  556.418493][   T29] audit: type=1326 audit(1766372990.785:44700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25032 comm="syz.8.6891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0e2c0f65e7 code=0x7ffc0000
[  556.418758][   T29] audit: type=1326 audit(1766372990.785:44701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25032 comm="syz.8.6891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0e2c09b829 code=0x7ffc0000
[  556.418977][   T29] audit: type=1326 audit(1766372990.785:44702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25032 comm="syz.8.6891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2c0ff749 code=0x7ffc0000
[  556.428436][   T29] audit: type=1326 audit(1766372990.795:44703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25032 comm="syz.8.6891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0e2c0f65e7 code=0x7ffc0000
[  556.428983][   T29] audit: type=1326 audit(1766372990.795:44704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25032 comm="syz.8.6891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0e2c09b829 code=0x7ffc0000
[  556.429106][   T29] audit: type=1326 audit(1766372990.795:44705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25032 comm="syz.8.6891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2c0ff749 code=0x7ffc0000
[  556.438396][   T29] audit: type=1326 audit(1766372990.815:44706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25032 comm="syz.8.6891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0e2c0f65e7 code=0x7ffc0000
[  556.438853][   T29] audit: type=1326 audit(1766372990.815:44707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25032 comm="syz.8.6891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0e2c09b829 code=0x7ffc0000
[  556.438952][   T29] audit: type=1326 audit(1766372990.815:44708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25032 comm="syz.8.6891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2c0ff749 code=0x7ffc0000
[  556.448709][   T29] audit: type=1326 audit(1766372990.815:44709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25032 comm="syz.8.6891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0e2c0f65e7 code=0x7ffc0000
[  556.518388][T25029] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.6889: Failed to acquire dquot type 1
[  556.892545][T25029] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  556.946704][T25029] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.6889: corrupted inode contents
[  556.950639][T24454] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28
[  556.993026][T25054] IPv6: NLM_F_CREATE should be specified when creating new route
[  557.015550][T25029] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.6889: mark_inode_dirty error
[  557.068185][T25054] EXT4-fs: Ignoring removed orlov option
[  557.072818][T25029] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.6889: corrupted inode contents
[  557.087886][T25054] ext4: Unknown parameter 'obj_user'
[  557.141705][T25029] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.6889: mark_inode_dirty error
[  557.189293][T25029] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.6889: corrupted inode contents
[  557.242367][T25072] EXT4-fs: Ignoring removed orlov option
[  557.255700][T25029] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  557.256387][T25072] ext4: Unknown parameter 'obj_user'
[  557.289105][T25029] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.6889: corrupted inode contents
[  557.336684][T25029] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.6889: mark_inode_dirty error
[  557.376497][T25029] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[  557.492513][T25029] EXT4-fs (loop2): 1 truncate cleaned up
[  557.699533][T25029] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  558.116081][T25125] __nla_validate_parse: 4 callbacks suppressed
[  558.116103][T25125] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6904'.
[  558.282072][T25086] set_capacity_and_notify: 2 callbacks suppressed
[  558.282105][T25086] loop4: detected capacity change from 0 to 512
[  558.338455][T25133] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6906'.
[  558.500825][T25138] loop8: detected capacity change from 0 to 4096
[  558.516936][T25135] netlink: 'syz.5.6907': attribute type 1 has an invalid length.
[  558.526435][T25135] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6907'.
[  558.588673][T25086] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  558.590076][T25138] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  558.614786][T25086] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  558.672518][T25147] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6910'.
[  558.683396][T25147] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6910'.
[  558.806227][T25086] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.6903: Allocating blocks 41-42 which overlap fs metadata
[  558.849409][T25086] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.6903: Allocating blocks 41-42 which overlap fs metadata
[  558.946274][T25086] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.6903: Failed to acquire dquot type 1
[  558.947708][T23812] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  558.994654][T25086] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  559.027867][T25086] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.6903: corrupted inode contents
[  559.048096][T25086] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.6903: mark_inode_dirty error
[  559.080492][T23002] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  559.080575][T25086] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.6903: corrupted inode contents
[  559.170577][T25086] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.6903: mark_inode_dirty error
[  559.201988][T25086] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.6903: corrupted inode contents
[  559.234600][T25086] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  559.291007][T25086] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.6903: corrupted inode contents
[  559.350735][T25166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6917'.
[  559.362401][T25086] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.6903: mark_inode_dirty error
[  559.387995][T25168] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6918'.
[  559.458948][T25086] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  559.571717][T25175] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6921'.
[  559.571781][T25175] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6921'.
[  559.725882][T25174] loop2: detected capacity change from 0 to 1024
[  559.726641][T25174] EXT4-fs: Ignoring removed orlov option
[  559.726741][T25174] ext4: Unknown parameter 'obj_user'
[  559.735457][T25174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6920'.
[  559.857829][T25180] loop2: detected capacity change from 0 to 8192
[  560.196041][T25185] loop5: detected capacity change from 0 to 4096
[  560.202809][T25185] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  565.832773][T25086] EXT4-fs (loop4): 1 truncate cleaned up
[  566.316203][T25196] loop8: detected capacity change from 0 to 1024
[  566.327388][T25196] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  567.089961][T24335] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  567.120464][T25086] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  567.198295][T25202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6931'.
[  567.258355][T22207] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  567.290239][   T29] kauditd_printk_skb: 393 callbacks suppressed
[  567.290255][   T29] audit: type=1326 audit(1766373001.655:45097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25203 comm="syz.0.6933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac899f749 code=0x7ffc0000
[  567.323637][   T29] audit: type=1326 audit(1766373001.675:45098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25203 comm="syz.0.6933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac899f749 code=0x7ffc0000
[  567.348997][   T29] audit: type=1326 audit(1766373001.675:45099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25203 comm="syz.0.6933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac899f749 code=0x7ffc0000
[  567.374324][   T29] audit: type=1326 audit(1766373001.675:45100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25203 comm="syz.0.6933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac899f749 code=0x7ffc0000
[  567.374392][   T29] audit: type=1326 audit(1766373001.675:45101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25203 comm="syz.0.6933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feac899df90 code=0x7ffc0000
[  567.374444][   T29] audit: type=1326 audit(1766373001.675:45102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25203 comm="syz.0.6933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac899f749 code=0x7ffc0000
[  567.374476][   T29] audit: type=1326 audit(1766373001.675:45103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25203 comm="syz.0.6933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac899f749 code=0x7ffc0000
[  567.374508][   T29] audit: type=1326 audit(1766373001.675:45104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25203 comm="syz.0.6933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac899f749 code=0x7ffc0000
[  567.374562][   T29] audit: type=1326 audit(1766373001.675:45105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25203 comm="syz.0.6933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7feac899e3aa code=0x7ffc0000
[  567.374594][   T29] audit: type=1326 audit(1766373001.675:45106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25203 comm="syz.0.6933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac899f749 code=0x7ffc0000
[  567.402753][T23812] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  567.602247][T25208] loop2: detected capacity change from 0 to 4096
[  567.647324][T25213] loop5: detected capacity change from 0 to 4096
[  567.675339][T25208] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  567.946835][T23002] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  567.958892][T25213] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  568.034281][T25220] loop8: detected capacity change from 0 to 1024
[  568.045920][T25220] EXT4-fs: Ignoring removed orlov option
[  568.051889][T25220] ext4: Unknown parameter 'obj_user'
[  568.075863][T25222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6937'.
[  568.087170][T25222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6937'.
[  568.171679][T25220] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6936'.
[  569.836065][T25224] loop8: detected capacity change from 0 to 4096
[  571.232610][T25224] EXT4-fs: error -4 creating inode table initialization thread
[  571.242282][T25224] EXT4-fs (loop8): mount failed
[  571.447667][T24335] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  571.509667][T25240] netlink: 'syz.0.6944': attribute type 13 has an invalid length.
[  571.581765][T25244] loop8: detected capacity change from 0 to 1024
[  571.592798][T25240] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  571.620375][T25244] EXT4-fs: Ignoring removed orlov option
[  571.630108][T25244] ext4: Unknown parameter 'obj_user'
[  571.657311][T25244] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6943'.
[  571.773595][T25250] loop5: detected capacity change from 0 to 2048
[  571.857761][T25250] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  571.870319][T25252] loop8: detected capacity change from 0 to 1024
[  571.884662][T25252] EXT4-fs: Ignoring removed orlov option
[  571.903958][T25252] ext4: Unknown parameter 'obj_user'
[  571.984064][T25252] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6946'.
[  572.121588][T25261] loop2: detected capacity change from 0 to 4096
[  572.137843][T25261] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  572.173529][T25242] loop4: detected capacity change from 0 to 1024
[  572.241871][T25242] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  572.302042][   T29] kauditd_printk_skb: 283 callbacks suppressed
[  572.302119][   T29] audit: type=1326 audit(1766373006.625:45390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25249 comm="syz.5.6945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fda644465e7 code=0x7ffc0000
[  572.337258][   T29] audit: type=1326 audit(1766373006.625:45391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25249 comm="syz.5.6945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fda643eb829 code=0x7ffc0000
[  572.362645][   T29] audit: type=1326 audit(1766373006.625:45392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25249 comm="syz.5.6945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6444f749 code=0x7ffc0000
[  572.389159][   T29] audit: type=1326 audit(1766373006.625:45393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25249 comm="syz.5.6945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fda644465e7 code=0x7ffc0000
[  572.415399][   T29] audit: type=1326 audit(1766373006.625:45394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25249 comm="syz.5.6945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fda643eb829 code=0x7ffc0000
[  572.441834][   T29] audit: type=1326 audit(1766373006.625:45395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25249 comm="syz.5.6945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6444f749 code=0x7ffc0000
[  572.468346][   T29] audit: type=1326 audit(1766373006.635:45396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25249 comm="syz.5.6945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fda644465e7 code=0x7ffc0000
[  572.495183][   T29] audit: type=1326 audit(1766373006.635:45397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25249 comm="syz.5.6945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fda643eb829 code=0x7ffc0000
[  572.521484][   T29] audit: type=1326 audit(1766373006.635:45398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25249 comm="syz.5.6945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6444f749 code=0x7ffc0000
[  572.547855][   T29] audit: type=1326 audit(1766373006.645:45399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25249 comm="syz.5.6945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fda644465e7 code=0x7ffc0000
[  572.679795][T25257] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  572.699088][T23002] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  572.808494][T25274] loop2: detected capacity change from 0 to 2048
[  572.836654][T25257] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  572.851888][T25257] EXT4-fs (loop5): This should not happen!! Data will be lost
[  572.851888][T25257] 
[  572.866119][T25257] EXT4-fs (loop5): Total free blocks count 0
[  572.872312][T25257] EXT4-fs (loop5): Free/Dirty block details
[  572.880873][T25257] EXT4-fs (loop5): free_blocks=2415919104
[  572.889407][T25257] EXT4-fs (loop5): dirty_blocks=8208
[  572.897775][T25257] EXT4-fs (loop5): Block reservation details
[  572.906869][T25257] EXT4-fs (loop5): i_reserved_data_blocks=513
[  572.921486][T22207] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  572.946915][T22207] ==================================================================
[  572.948811][T25274] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  572.955082][T22207] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru
[  572.955125][T22207] 
[  572.955132][T22207] read-write to 0xffff888237c27550 of 8 bytes by task 25274 on cpu 0:
[  572.985443][T22207]  find_get_block_common+0x498/0x8e0
[  572.990823][T22207]  bdev_getblk+0x334/0x3f0
[  572.995278][T22207]  __ext4_get_inode_loc+0x303/0x930
[  573.000511][T22207]  __ext4_iget+0x2ea/0x2350
[  573.005047][T22207]  ext4_fill_super+0x291d/0x37a0
[  573.010029][T22207]  get_tree_bdev_flags+0x291/0x300
[  573.015212][T22207]  get_tree_bdev+0x1f/0x30
[  573.019669][T22207]  ext4_get_tree+0x1c/0x30
[  573.024117][T22207]  vfs_get_tree+0x57/0x1d0
[  573.028569][T22207]  do_new_mount+0x24d/0x6a0
[  573.033108][T22207]  path_mount+0x4ab/0xb80
[  573.037474][T22207]  __se_sys_mount+0x28c/0x2e0
[  573.042217][T22207]  __x64_sys_mount+0x67/0x80
[  573.046915][T22207]  x64_sys_call+0x2cca/0x3000
[  573.051645][T22207]  do_syscall_64+0xca/0x2b0
[  573.056208][T22207]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  573.062326][T22207] 
[  573.064683][T22207] read to 0xffff888237c27550 of 8 bytes by task 22207 on cpu 1:
[  573.072348][T22207]  has_bh_in_lru+0x35/0x1f0
[  573.076915][T22207]  smp_call_function_many_cond+0x2a9/0xc40
[  573.082774][T22207]  on_each_cpu_cond_mask+0x3c/0x80
[  573.087937][T22207]  invalidate_bh_lrus+0x2a/0x30
[  573.092826][T22207]  invalidate_bdev+0x42/0x70
[  573.097583][T22207]  ext4_put_super+0x624/0x7d0
[  573.102296][T22207]  generic_shutdown_super+0xe6/0x210
[  573.107633][T22207]  kill_block_super+0x2a/0x70
[  573.112361][T22207]  ext4_kill_sb+0x42/0x80
[  573.116734][T22207]  deactivate_locked_super+0x75/0x1c0
[  573.122160][T22207]  deactivate_super+0x97/0xa0
[  573.126890][T22207]  cleanup_mnt+0x2a9/0x320
[  573.131362][T22207]  __cleanup_mnt+0x19/0x20
[  573.135827][T22207]  task_work_run+0x131/0x1a0
[  573.135851][T22207]  exit_to_user_mode_loop+0x1fe/0x740
[  573.145854][T22207]  do_syscall_64+0x1e1/0x2b0
[  573.150500][T22207]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  573.156435][T22207] 
[  573.158797][T22207] value changed: 0xffff888107a114e0 -> 0xffff888119fe5a28
[  573.165935][T22207] 
[  573.168276][T22207] Reported by Kernel Concurrency Sanitizer on:
[  573.174465][T22207] CPU: 1 UID: 0 PID: 22207 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) 
[  573.184497][T22207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  573.194597][T22207] ==================================================================
[  573.241543][  T298] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  573.269128][T25281] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  573.287070][T25281] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  573.302386][T25281] EXT4-fs (loop2): This should not happen!! Data will be lost
[  573.302386][T25281] 
[  573.316333][T25281] EXT4-fs (loop2): Total free blocks count 0
[  573.322361][T25281] EXT4-fs (loop2): Free/Dirty block details
[  573.330107][T25281] EXT4-fs (loop2): free_blocks=2415919104
[  573.337245][T25281] EXT4-fs (loop2): dirty_blocks=2096
[  573.342564][T25281] EXT4-fs (loop2): Block reservation details
[  573.351301][T25281] EXT4-fs (loop2): i_reserved_data_blocks=131
[  573.391027][T25286] hub 2-0:1.0: USB hub found
[  573.398451][T25286] hub 2-0:1.0: 8 ports detected
[  573.493262][  T298] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28