last executing test programs:

11.477664541s ago: executing program 4 (id=1019):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
lstat(&(0x7f0000000080)='./bus\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000fc0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@block_validity}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@nodelalloc}, {@grpquota}, {@mblk_io_submit}, {@nodiscard}, {@bh}, {@dioread_nolock}], [{@subj_type={'subj_type', 0x3d, 'data_err=abort'}}, {@fsname={'fsname', 0x3d, '/@'}}, {@euid_eq={'euid', 0x3d, r0}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'noblock_validity'}}, {@dont_appraise}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "90c7205b89c6ba79f201fb2a7ccdec3f092308bf4d1ae199", "11da928cceb7f2257669a73e935ab02244656cfe8638fefb94440b907850c38e"}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x4, 0x6)
r1 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, 0x0, 0x0, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x5, <r3=>0x0}, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200008000000000000000000000008500000053000000180100002020692500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a3000000000540003800800024000000000080001400000000040000380140001"], 0xa8}}, 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = gettid()
process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)

11.197176444s ago: executing program 4 (id=1024):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
mkdir(0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x4, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, r4, 0x1, 0x70bd28, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x13}}}, {0x14, 0x2, @in={0x2, 0x0, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)

11.169219926s ago: executing program 4 (id=1025):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, <r2=>0xffffffffffffffff}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001006c"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x3}, 0x18)
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x1, 0x246, 0x7fffffffffffffff, 0xfffffffffffffffa, 0xffffffffffffffff, 0x0, 0x7fff, 0x9b})
flistxattr(r2, &(0x7f0000000640)=""/235, 0xeb)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") (async)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001006c"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x3}, 0x18) (async)
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) (async)
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x1, 0x246, 0x7fffffffffffffff, 0xfffffffffffffffa, 0xffffffffffffffff, 0x0, 0x7fff, 0x9b}) (async)
flistxattr(r2, &(0x7f0000000640)=""/235, 0xeb) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) (async)

10.9928687s ago: executing program 4 (id=1029):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
creat(&(0x7f0000000300)='./bus\x00', 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x110)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10)
getxattr(0x0, 0x0, 0x0, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x3, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c6e150d448000000000000be335263bdbcef549ba197fce47ddfdd753abd950e00002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8a}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="00080000000000009a3400", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000030000000300"/28], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r6}, 0x10)
r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$UHID_CREATE2(r7, &(0x7f0000000100)=ANY=[@ANYBLOB='\v\x00\x00\x00'], 0x138)

10.701704434s ago: executing program 4 (id=1034):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1500000010"], 0x48)
r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0xc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1806"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "6eee7e00"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x118}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
syz_emit_ethernet(0xe, &(0x7f00000000c0)={@multicast, @broadcast, @void, {@generic={0x8}}}, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r5, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x50}}, 0x2400c0c5)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x421, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x23}}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}}, 0x40810)

10.357244331s ago: executing program 4 (id=1039):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x1ffffe0e, &(0x7f0000000e80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005009000018110000d2e037c9c8bb7132c33f8ca5a47ac172259933c19bc38e1a0a0bcd3ce38c54deda93885116545fc4476d2898bb250e58c63b008e67f259e8047b9c636925c1fd22448b53dea13be6fe69beea3b83d41d6603231365666364f812366989707e3e311268f074770a6119edb895811c53dcd7f230c5c781c15de36aa52f630f45d55c20bd15237fa3aa97d6cac2e04209e4b95ea43ef18ae4456f80f952902d6f72a09243d9f467c6a7bc070270c1c9d312", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$sock_buf(r6, 0x1, 0x1c, &(0x7f0000000300)=""/126, &(0x7f0000000380)=0x7e)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB, @ANYRES32], 0x1c}}, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000340)=<r10=>0x0, &(0x7f0000000300)=<r11=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r10, r11, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x2000, @fd, 0x9, 0x0, 0x0, 0x2})
io_uring_enter(r9, 0x627, 0x4c1, 0x43, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r8}, 0x10)
gettid()
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe511195418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4929330142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da8c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000dd11e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15f2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f000010000000000000905ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400bee3dfc8fb24f67c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341b74abaa7c95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb232bbdb9dc33cbd7643866fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595270fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f76dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d2e959efc71f665c4d75cf2458e3322c9062ece84c99a061997a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99f0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d164118e4cbe02400000000ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a4867217373934bbd42dcb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcd62981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba495aea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000001700d6d5210d7560eb92d6a97a27602b81f76386f1535b1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294059323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946932d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1fc8df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1785eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be2f5656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fd78f9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933c2e24c7e800003c9e8095e02985f28de0bbc76d58dd92606b1ef6486c85fa3e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6968d12418a4d2a0d086d8438d415d713acebc5b014e61a543a5a391f03daca80f08f0e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e112645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c000000000000000000000000000000a1c3da144589dcaddb71cf9374843e23f992a237a9040747e0434a8a643990b4059a98411ce867d1af7e8ea89f49e6f564d4dce8a7d6939a9214a7f39e83bd247e03a09dba000000000000000000000000aaf033d47249c8444bc13844cbf1be617d82b269e5ea0c0d525603c0ec543ea581f63893ae414a6683e941fdbdff03cfc5f8744583c0aa766a65321f907927a59d75b47f06895e8471ebc2840ce5bd054df223fb09b9c739ad64cfcfd2d498b0f11056f6c40874cb977c99b6bc1a8732198a17e610082b7ce0365f271b11d4b4a3d4c7d0bb273f406ecd4b26c93151c30f5a269991402d109becb1b9bafcb2b47e940000000000e540d8b0db3774effb7469a21f96e2594b2973ebf7a1bd9ace2ed4d6eb1735f85885be5be74dc2ea5d7d499bd28271b98f187f5879b16b409a04d78175cc8d0f707c822805d7011ed4b22419186dd2b22aadf15828db2ca19d79e1bf2f7989237ee5cb2e1eb7b2bfc92d3aa95a26f060935c4fee8b2d7d0bf3c6d82d04329164bd4ee0b8060183f36762b0440d9082d7c8b06e4c2024f77e1018758d28e7ee290f32a48bfc2aa10b3dba9bff00d2410f3477a8e0df689c880dc9a677cfaa16603527c06625a3363744cea5f2d350224cc0fea76c72ca08507235c67346722f20690fde0790f040f5fd3eff75f9b291cc5e9c686ebaadbe756c6fa039ff441e427ed12578d5cb041ebf729cfaa575cc852fbdb54e60435e6d62b9d270433b220ed9ff1ff042b8d3d866231c460765"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x18, 0x7, &(0x7f0000000fc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x3}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0x6}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x3}]}, &(0x7f0000001000)='syzkaller\x00', 0xc, 0x1000, &(0x7f0000001bc0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000001080)={0x3, 0x7, 0x2, 0xffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[r0, r0, r0, 0xffffffffffffffff, r7, r7, r7, r7, r0], 0x0, 0x10, 0x80000001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e40)={&(0x7f00000011c0)='xdp_bulk_tx\x00', r12, 0x0, 0xe4b}, 0x18)
r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r13, 0xc004743e, &(0x7f0000000380)=0x2)
ioctl$PPPIOCSPASS(r13, 0x40107447, &(0x7f0000000180)={0x20, 0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
pselect6(0x40, &(0x7f0000000200)={0x7, 0x40, 0x10001, 0xd738, 0x3aa, 0xe3, 0x8, 0x9}, &(0x7f0000000340)={0x40, 0xa, 0x1310, 0x4, 0x7, 0x4, 0xfffffffffffffff9, 0x7b7}, 0x0, 0x0, 0x0)
write$nci(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="42110141"], 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)

10.336736733s ago: executing program 32 (id=1039):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x1ffffe0e, &(0x7f0000000e80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005009000018110000d2e037c9c8bb7132c33f8ca5a47ac172259933c19bc38e1a0a0bcd3ce38c54deda93885116545fc4476d2898bb250e58c63b008e67f259e8047b9c636925c1fd22448b53dea13be6fe69beea3b83d41d6603231365666364f812366989707e3e311268f074770a6119edb895811c53dcd7f230c5c781c15de36aa52f630f45d55c20bd15237fa3aa97d6cac2e04209e4b95ea43ef18ae4456f80f952902d6f72a09243d9f467c6a7bc070270c1c9d312", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$sock_buf(r6, 0x1, 0x1c, &(0x7f0000000300)=""/126, &(0x7f0000000380)=0x7e)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB, @ANYRES32], 0x1c}}, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000340)=<r10=>0x0, &(0x7f0000000300)=<r11=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r10, r11, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x2000, @fd, 0x9, 0x0, 0x0, 0x2})
io_uring_enter(r9, 0x627, 0x4c1, 0x43, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r8}, 0x10)
gettid()
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x18, 0x7, &(0x7f0000000fc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x3}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0x6}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x3}]}, &(0x7f0000001000)='syzkaller\x00', 0xc, 0x1000, &(0x7f0000001bc0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000001080)={0x3, 0x7, 0x2, 0xffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[r0, r0, r0, 0xffffffffffffffff, r7, r7, r7, r7, r0], 0x0, 0x10, 0x80000001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e40)={&(0x7f00000011c0)='xdp_bulk_tx\x00', r12, 0x0, 0xe4b}, 0x18)
r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r13, 0xc004743e, &(0x7f0000000380)=0x2)
ioctl$PPPIOCSPASS(r13, 0x40107447, &(0x7f0000000180)={0x20, 0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
pselect6(0x40, &(0x7f0000000200)={0x7, 0x40, 0x10001, 0xd738, 0x3aa, 0xe3, 0x8, 0x9}, &(0x7f0000000340)={0x40, 0xa, 0x1310, 0x4, 0x7, 0x4, 0xfffffffffffffff9, 0x7b7}, 0x0, 0x0, 0x0)
write$nci(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="42110141"], 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)

1.812253843s ago: executing program 0 (id=1211):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r0}, 0x18)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x18)
add_key(&(0x7f0000000100)='logon\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000000)="56bbee268ed90aa02a3e7c0338cb", 0xe, 0xfffffffffffffffd)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x1a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="500100001000130428bd700000000000e0000001000000000000000000000000ac1e0101000000000000000000000000000000004e2400000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x150}}, 0x804)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1)

1.737866259s ago: executing program 5 (id=1212):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001080)={0xc, {"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", 0x1000}}, 0x1006)

1.73191784s ago: executing program 0 (id=1213):
r0 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)}, {&(0x7f0000000000)="17460081ba60ccbb9d000000000000", 0xf}], 0x2}}, {{&(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="5825be06000000000000007ca2746314d1787b35", 0x14}], 0x1}}], 0x2, 0x4004040)

1.712189371s ago: executing program 0 (id=1215):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001080)={0xc, {"a2e3ad2107c752f91b25470987f70e06d038e7ff7fc6e5539b3264078b089b3b083468060890e0878f0e1ac6e70a9b3368959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31350d095d0636cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f5f71d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810930500ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab974c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc660db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d154d8a5ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21e5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) (fail_nth: 1)

1.449483923s ago: executing program 5 (id=1216):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r1=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x2}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3}, 0x9)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x80040c, &(0x7f00000004c0), 0x1, 0x5e8, &(0x7f0000001200)="$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")
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000001700)=0x4)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r6, 0x0, 0x0)
sendfile(r6, r4, 0x0, 0x3ffff)
sendfile(r6, r4, 0x0, 0x7ffff000)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000240)={0x0, 0x2, 0x8})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth1_to_batadv\x00'})

1.398326877s ago: executing program 0 (id=1217):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000000}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)
bind$vsock_stream(r4, &(0x7f0000000440), 0x10)
listen(r4, 0x5)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=@gettaction={0x18, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r6, 0x29, 0x3c, 0xfffffffffffffffe, &(0x7f0000000000))
write$UHID_INPUT(r1, &(0x7f0000001080)={0xc, {"a2e3ad2107c752f91b25470987f70e06d038e7ff7fc6e5539b3264078b089b3b083468060890e0878f0e1ac6e70a9b3368959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31350d095d0636cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f5f71d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810930500ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab974c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc660db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d154d8a5ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21e5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006)

1.397952727s ago: executing program 2 (id=1218):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3})
mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3}, 0x9)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd)
mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0xca, 0x100000000000000, 0x0)

1.382019448s ago: executing program 2 (id=1219):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r0}, 0x18)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0x3})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94)

1.325199073s ago: executing program 2 (id=1220):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
bind$tipc(r0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xfe, 0x4, 0xff, 0x6}}, 0x1c}}, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.273361707s ago: executing program 0 (id=1221):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='sys_enter\x00', r0}, 0x18)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0)

1.272728187s ago: executing program 5 (id=1222):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000004c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffd}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x1, r1}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
unshare(0x22020600)
r4 = timerfd_create(0x0, 0x0)
syz_clone3(&(0x7f0000000800)={0x44000400, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000680)=<r5=>0x0, {0x34}, &(0x7f00000006c0)=""/181, 0xb5, &(0x7f0000000780)=""/14, &(0x7f00000007c0)=[0x0], 0x1}, 0x58)
syz_clone3(&(0x7f00000008c0)={0x140100000, &(0x7f0000000080), &(0x7f00000002c0), &(0x7f00000003c0), {0x35}, &(0x7f0000000400)=""/11, 0xb, &(0x7f00000004c0)=""/171, &(0x7f0000000880)=[0x0, r5], 0x2}, 0x58)
clock_gettime(0x0, &(0x7f0000000000))
clock_gettime(0x0, &(0x7f0000000240)={<r6=>0x0, <r7=>0x0})
timerfd_settime(r4, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {r6, r7+10000000}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r8=>0x0})
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r9}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r10}, 0x10)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth0_to_hsr\x00', &(0x7f0000002fc0)=@ethtool_stats})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x3c, 0x11, 0x1, 0x2000000, 0x3, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0x9, 0x8}, {0x3}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8d0}, 0x0)

1.210858532s ago: executing program 0 (id=1225):
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff1780c206050086dd60366b0000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000002"], 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$sysfs(0xffffff9c, 0x0, 0x2000, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
socket$packet(0x11, 0xa, 0x300)
sendmmsg$sock(r1, &(0x7f000000bb40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000011)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
write(r2, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c040007031a000900", 0x33a)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x18)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000840)={'syztnl0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x52, 0x2, 0x9, 0x4, 0x20, @loopback, @loopback, 0x7800, 0x80, 0xc2, 0x3}})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syzkaller0\x00'})
r5 = socket$netlink(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

1.028088577s ago: executing program 3 (id=1226):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18)
pwritev2(r1, 0x0, 0x0, 0xe79, 0x0, 0x7)

1.027023987s ago: executing program 1 (id=1227):
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000000c0)={{0x0, 0x2, 0x20, 0x2, 0xd}, 0x4, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1c, 0xd, &(0x7f00000026c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYBLOB="27ea9bbea0e54762e4176ecf6f30819389e7d01314c4175e6a4adf2ab4dfcb417e73124590844ae711f8b520f84f4ce72d60847a74041eb2b129738c8dc5cc31559751020f5d2f1daf8d4a875ba2c1a2687ea34b8c1423323a8e8bf7027754070d00af3d5e26112c24959e0e73c434e4a029e5f9642d45f0b70b5b33338d6eee73951a8f99c2693d3fb035dce02f84f5231377ea1748d7bfa7bbfab4399cb9ef35064c6538382a5dae20f68da5b4025e6887be3d5ab9799a743c8f68abd6104bb5eeb49f70e59e2da1e4ca18749a50eb5f1fb12cc25d1d5d2a4ded9ab865917a001a14e4061662e6d2db257a0b008f35df3ea8282e51e905b1a1f15371dce3fa1a39ba86d391d063daf27b04e6dc24182152e72608cc3c9b392ef1dcc30756a41b31b686a0c32df7901929f1bc7ca0514c74c5d8ee0789766e324ab058a426e2af974d7eef60038346984d23cdab49db3734b398e8f681fc6f72ec93ecdcd7386b4c844e87f6656636faec5ea460bd7861af4cd53aaabfc3fa9d20c863386e1cc60812e56ac85f37dd6df5983bf3316de074b4457e427f4e2fee6b8b828c041841fbd6d7708a7c22a4ad0491403e565683b1914a0092cf7f3aa5a94e7f0c2d4460e365310b2ffc9355d4eab338e2f3c0fd73bc394822106f61c50b1e3c84ac0fa08ec43845cc00e8acce7b482a39afc7bb7fe4fc8d8e1529f12ae0324be2eb54d6c69a1efe9bcf83ecf74fab73933f26a6b46d9e2b463b833ea594d20659bfc94f30d00005a658f36c7c17d825239eb3b25f2f509313856eab5637287b2450b21d8ba681078f4f4b911ca26e4f5cee17f4541343ab78bd8cc1face1d343a0270c5d2f3547d30596513de425cc46d70601f3c6098139e54d0b11525a03e70a13beb73f4dc5a8591d1bbb0be1817af209c7c4b8387e9897a116150f9825d082486053176c4a2ae602edc7a75c62e442e6d97e44662eb94bdb6b12fa406099546645733eef07112bef315d8b31d12b3f1cd6e45ddc95e5120b39eb1071e40a7d16656170256fcb25f502096a1eb4ec17ad0221778db801c8ca7a3a783b4e4e328e4ce07e51d34b7ecc449e7b786e74d4053db9404f5d7773543c07c60fb8183def4155b53dd84c973dc6708be096d57451fe8005c925d230383415a16d03db79d9fcec6443567f6f95849d1d043290b5a30f1c5b4d4d2f19401ec826f134a33570851aedae6d57bdb987f3dffb5fa595223c3adf9fb20bacb929305ba05631a128b92d6c3005c4196e5eadb07e21ddec2eeafb04ce3e4e3fc0003056116bd3e92d034cac973e7ed0dc0a9ae74c72da6e35cbbb8ca5eba24aacfa1c80e61a3067c9aba1b33cd5951faf3b19e8e4966c60ea713a308299a31d5b89135a0165681cfb7d6802b4892be88fe20934a42117214b1da0b5d81997b018f3e8b22237853dabbcbf9efe866fc3f3055a739c3f33b3aac965f52e5af04372669f33537931491a03740c50f24d40a8b17aa2f98dd7544dc67d2959c009439d4a17327fb8d1a66e6adac39a25f5d0baf51bca24009ed7e591eb2c2d1c37c1feb822a031b25145f30f78be3b26fa17481f83c2ee3a78a5afdbcbe4d062d11ff193d1310060fb922a25393adfea179ad380eabdde02902cec4ebc1265614e1af413b210482066e91df7955315472342e8d1ca674b072ab558624470e75eba579ceba78cba9013017a82fae0d478e1389bdaee325d2cf13669cd71ab4476cad21ac08d73fccba0802f91a078062ae2b0291684f4eb7c6761d4c02590715d10ccfea4f1a16a74b36f91ae351cf002ff9aadd09b3525067a6c071a0125cda7c23b3f160faae4259399f91df844fc3f86df84cfe1c1048ea84e1ffe6150a23604587a93c1fc8703faedc9bf36a29914e60e55a6b425f75bc08ea89fe2588b9bfeb05af57d471872431d14c6004cff789af4068d23ab1eb6865683ac4fb80bb29a5e534fe5937b067857f6f59109cd1d0a1ed6622fc1d7d5d55d80aa2b0260a22a5fcef92247b1b97c7a19d8a30f68d4c0d3af9120c642d8d609f83a52e2a044507351b0f8cb9bee4c9b4a735fe2ee3f0c63df80cb92ec5025453db5528a92d015aa61dc269e989ece19ff8729a1b108802920b8810b95cab7cf6b1a967eb6546aa2c0696ca650bf558465116ccccef02decc7998c3e2444e2f92b4d3adaf8a24d9c94ba61715f556e4417a8dd3e0b52c7717658fee43140867e0b234e8aee9f4ce2589829e3367c9ba3cb880115d9ce2e943a83c8662d9e35460b6a650ebc20d50ef23e68d66d7c997c4b682ed0eeeb6ff1c5a57909864c25edd67abb2e97efbc1d5a95b087144fffa069f7b8a0ba58f3430fdde2df11425ab61e742eead9c6609768fd94af7aa97c33b86b6db5385672e554eab356584081620c04f4d02b9096bf8bd2416278a42ed90960f89e09aa6b9892e573d6f60493ec7716683055bf4efe07b0c1cbf3e7f25f6a76f02274ba7af92b4c8a04a128bbba58aba98f12ff23844ce2d8c92bfcb3d5b7007dbbb5d99743748ac0b7bd8b74bdf6a992541b8947cac87f2646ce47466d7c162e0f53e9ead97772fcbe9e408bd801995421a4d634e241f3ccebafd1d0a61fbbab54a5c15f65f8ed9d055fadde7063f1188262ea8b1d392c3522ead10dc6e430776501abbb72df8d738dece7e8a0864c9dfc88b126af07c5405d2f29e61efbdecfb75e2ecf40ed3c66c505cc8e1faedb485ad6cea17dd6d1ca79e31c2014655516b80fcfc4b64e1d139c0b4b3814d39ab3f9512716dddac231dbc89b5da6380c41f448b684ad4cbf7d50190efaa2755919044093f8bee87878eeed6e6c8ad21810354d5fde256027729991d93582f9958950d49f0a49e25d943bbe2d92d5830bab0263d3d2c3156da92ba20206ac0019e32df0065cf9047d466c95fa26cf31569c709327ed275b84120296f39c7412dea0c0ef79844ca5ae11855d6c5a8b6f3b4b052a24ff65aac2ff52b667914bc0a63a51a900741fdf6593edb4b5324391d0bde77290c752a6c56a5967cdca39141f1b70074f48403d310ed2d35b2bf049637a994f40229cf7f6b971adb5a7e1424a59ae56ab0117d9071fad41a1605997aff122290552ec01af37f81828522b8eda63c2d8d4ceb6f4a6f3810894b7738cf27ba2d4c118ec7353cbb827ee793420f33ae9e404d3ef330d46919018bf649a3df9d35d43e7089cdb579a3138248aff00f2f9fbbdf7371304d6fd430e0cfdee675ab1b757746f24a5a3ec7c4f8f9eda87ebc6930a936e9566d021cfc0db000cf8a7ecc85baeefde88543c7129d6add59986f23fe225e4d81d5015ea9942f6eb1301158b5a62bf893fa2b2ae1926b33708ca5df44db93c48839c2b5f6a3d585c4e61e03b3053f89aa01d4179396338fd2424d960ca5b9fd1cd0c38a0ae3b464f422e6f59e228cfc329ff9d136f233d999d851f7f84327490b4e269537e6bb7aced9f0f7fa610fa05660c7f4b1011d44ab022640cb4129c1836c222c915ff466c063f757e94579e446824d068e1354db01afef4540b6010b1b3a0fae20e0d7502e0aa9908a345b12ba9d24c5e2e285e3fe298d0920eb1bdda67554aa6615c99d005b902b9c07435443690d2387b22d098a260abe8de255f2156817c77d9e5c7ab1c7c248d27a7d01e12b6e930ca63506925fcf880c11a9768577731aaddb4b8b5f5ced4420e07961c4ab6e1ef201c4c9c6473d5a495a4550d2d6b60e040eeb9cee20b2e21c710dea9f1af3e2d56063d623f7c51f698296875e10cb33b9ff8a48f99a4b8015de1a723e3dfa32c3d225e24e0030dd8de3ede6de4af4d097dea8268d4a2af447ef9dd37901798c0f4ca3c6dd74f480fe3c5e06f9953c1348d63a3a4f8a7a4f4d416c951729039f0934f0365777646c4c6e484cf533af82b84d18ea12ab44e44869868176b355eb089ff4fbf5c9ef13409cb2eb83b4713edce77c00e3104b1d5f4fab35d125f6d63089ceb6433d891e7788768dc47b79966fffeafd30445357cf1ca98a2fd1ea96af10e06bad5f660396116dadd54a44701e02f0d8e52f95a3c77c9a772bff1a879cf68a3b9b8efca8239352aaae33809ffec1e0ab3e7263b2d28f4c90ab109e7a06fdfc931aab8ae28b525a6357a137f0f086613361a2c34bd958807e0ca1d7ded023dde3e168bd49a3742b9c473f9ca3c7f341d6126059e584b9db80e10a74d662031119b332296fd0dbb3250c3bb67030e5d167acfc78a7863ec60807ceacd0aa7b650d7d9d2186f5063e8965dab30e82be99e4583e6d038ed86b7aecee05e575ec27b2c364a23c276fb391d09c498cd1c41ac3d5e5c0ea74503d084c4ba92340f92b28030951165e88102fa2f352873525ef8e1a3b957363f16cbd10128108aac3daebac1f89940ed127c5c53e7f0a7686610f7656f0f038f123274bfa102753a4e6ef017239b68fe25941ec7faa809d65938b972bb998af66e89613bc5708522cca6ad14930f095278162f8c3d81b186378ad5bddf35d5c08543c8ec6344396258cf493312bd05c83ce06f580bc85b91cae3c40ceacdd2a1cd6ef48b55d8ea58cbc081d50baa23fc90aae57971878e54d9fff3a651446e0ddc55340001e8cd193bbf55f721be12a1cc52419d20165cf34c45ea7c91e36650f787dc65f0d77e1a7a0e8e5881bfbe67cbe49c4e1bf9dc41e13b4fcee59e92bc5432c924a2958d8748af737c966bf26d356379e885ef1f97b347bb27d599e58ca1e2758a6925cbc255b47067ea7e1e1ac3d61f1bf943a56c2aeed97f003d2fe94539e791a2988aa6a8257d8656a318deadda7dcbc39ec0ecfa5c9004d9098053b182a66e255da096b1cd7c82049302026f4ac118d52c6073c29fbae25a0000c3eb2b034e259872cf9ce250dc1e08a6fcab62a87d337534687fe722429d4f24cf7fafa050f08587b44574aca3d77cf717cc68523c8555c508537fa7a80038d318c59b5bef5111e76e1e1b9aac5479f983b401df477f00f1232c71d9822bdf539ab9ad2c6f0b1d289ac17a5c76412c1ab90abbfbd6303d46a227eb2483e6e9fb4c2fc9f5339b722a0d537c6e6265e29c4dfeb4f6849ba593daadc37f3af71ecfdeddb5e054a58086c5e88b119d3044ea4965484010cb5151a560ab485738136b94c262a50f6a50a277d757251392d2b41b126233bc2a7fb4cc42e583d9850de82caf329f385df79e63af7a8d35164ee21156bbb1eb86a8bfff9fa36125e93ad218de304bf9395fd8ae128d61a38b9afd1340478efb3edcf0d8d08447cfeb2197b92f1022497fa8af82d7600e45ddf64d5a638e679af90a6bd0fcfee7583d526365912da417bd0a7891bef0944ab7198b5b3ef527996102a82ee8f3d979e22a4a8ed77cfe429bb87349f265b4ec3f31a7807b28f5382766aee38e9587373423dde8180f3751bf2a861262b9c0303e0ae69be7054376bb29c703fd5722bfa6c3f068a322b4f87d58bedf99f3ba90f919c09c211f53106b0283d30bd2f7a370a695d1d141ae30f8396bdba3ef03ca16e67b27896eb0b10936a283a317160ab2359f085deb96d641b806fd7bc6522a35776b2d80191b25276d9f41ab5aa252cefbcb93f3dc362b01427b05b4000b4ba3f75595fefd5c454ceecbf39cfbfc71e0ab84325d37d92193b983a90e4e0aae62f40035939cebf5e84085a9ef6764d74f5e4a0eed19fc9cf8a9912d9e6980fbfb4f64d2a0624689441d8e4b3169d2fe5ab7ed667642334d21e3c2350149dfe", @ANYBLOB="0000000000000000b7080000000000007b8aa200000080000007020010f8ffffffb70300000800850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@acl}, {@barrier}, {@barrier_val}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xf8, 0x587, &(0x7f0000002100)="$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")
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket(0x10, 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28)
write$binfmt_script(r4, &(0x7f0000000780)={'#! ', './file0'}, 0xb)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
close_range(r3, r4, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0)

1.006175618s ago: executing program 3 (id=1228):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file0\x00', 0x100c085, &(0x7f0000001640)=ANY=[], 0x10, 0x7f4, &(0x7f0000000e40)="$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")
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18)
memfd_create(0x0, 0x5)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18)
syz_emit_ethernet(0x22, &(0x7f0000000340)={@broadcast, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x13, 0x14, 0x67, 0x0, 0x2, 0x32, 0x0, @empty, @broadcast}}}}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000690003050000000000000000002000000000000008"], 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x0)

891.820228ms ago: executing program 2 (id=1229):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3})
mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3}, 0x9)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd)
mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0xca, 0x100000000000000, 0x0)

891.438328ms ago: executing program 2 (id=1230):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40c0)
syz_open_dev$loop(&(0x7f0000000240), 0x400000007, 0x44842)
pipe(&(0x7f0000000440))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0)
ppoll(&(0x7f0000000280)=[{r1, 0x6200}], 0x1, 0x0, 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x4000006, 0x3, "42341f9b1000007e4f00"})
r2 = socket(0x1e, 0x5, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
listen(r2, 0x0)
r3 = socket(0x1e, 0x805, 0x0)
sendmsg$tipc(r3, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c)
accept4$inet6(r2, 0x0, 0x0, 0x0)
sendmsg$tipc(r3, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0)

813.213174ms ago: executing program 3 (id=1231):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r1=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x2}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x80040c, &(0x7f00000004c0), 0x1, 0x5e8, &(0x7f0000001200)="$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")
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000001700)=0x4)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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")
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r6, &(0x7f0000004200)='t', 0x1)
sendfile(r6, r4, 0x0, 0x3ffff)
sendfile(r6, r4, 0x0, 0x7ffff000)
r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8100)
ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f0000000240)={0x0, 0x2, 0x8})
syz_emit_ethernet(0x45, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x2, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @private}, '\x00\x00eX\x00\x00\x00'}}}}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'veth1_to_batadv\x00'})

722.805072ms ago: executing program 1 (id=1232):
perf_event_open(&(0x7f00000004c0)={0x2, 0xffffffffffffffaf, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4202e, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000000400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4)
ftruncate(0xffffffffffffffff, 0x2007ffc)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r6}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r6], 0x1c}}, 0x800)
socket$kcm(0x10, 0x2, 0x0)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009535cbff6f"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10)
r9 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
sendmsg$AUDIT_TTY_GET(r0, 0x0, 0x4810)
setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r11, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88)
writev(r10, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x4000, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="796100000000000000f37d00000033000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000054)

574.410314ms ago: executing program 1 (id=1233):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r1=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x2}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3}, 0x9)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x80040c, &(0x7f00000004c0), 0x1, 0x5e8, &(0x7f0000001200)="$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")
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000001700)=0x4)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r6, 0x0, 0x0)
sendfile(r6, r4, 0x0, 0x3ffff)
sendfile(r6, r4, 0x0, 0x7ffff000)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000240)={0x0, 0x2, 0x8})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth1_to_batadv\x00'})

573.767523ms ago: executing program 5 (id=1234):
r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200))
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800800000000000000000000000000018120004", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = dup(r3)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5}, &(0x7f0000000380), &(0x7f00000003c0)=r6}, 0x20)
fsetxattr$security_selinux(r4, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5}, &(0x7f0000000180), &(0x7f0000000300)=r6}, 0x20)
r7 = syz_open_dev$hiddev(&(0x7f0000000080), 0xffffffffffffff4b, 0x2402)
ioctl$HIDIOCAPPLICATION(r7, 0x4802, 0x4)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

449.651443ms ago: executing program 1 (id=1235):
r0 = syz_open_dev$loop(&(0x7f0000000080), 0x9, 0x1)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x2)

429.760125ms ago: executing program 5 (id=1236):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x5c, 0x30, 0xb, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0x2000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x6}, 0x18)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1200)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xb}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
read$watch_queue(r3, &(0x7f0000000140)=""/4096, 0x1000)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x11, &(0x7f0000001180)=ANY=[@ANYBLOB="180000000800000000000000fc329a0420ff99cc", @ANYRES16, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018000000010000000000000001000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], 0x0, 0xe6ab, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000001280)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000012c0)={0x5, 0x9, 0xffff, 0x800}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001300)=[r3, 0xffffffffffffffff, r3, r3, r3], &(0x7f0000001340)=[{0x2, 0x1, 0xa, 0x2}], 0x10, 0x8}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x15, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000001140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x5, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x40)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f00000008c0)=ANY=[@ANYBLOB="8c010000", @ANYRES16=0x0, @ANYBLOB="000127bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="700102804000010024000100bedd00806f72745f737461747300000000000000000000000000000000000000050003000b000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="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"], 0x18c}, 0x1, 0x0, 0x0, 0x4001}, 0x40800)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x8, &(0x7f0000002f80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14bd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d5463863df9b50db71e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c000000dd00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d77cd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484a00322563931d32c6dd8ed07fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69ea05c1d47790c9f98bbcc4573fb5e3f7bb9fe38b15d1864b2a822c84885b1d7df7f1eaad3618bc88b333e5fe5bdf5fad09572b7b0e15e2100289921517d44721c79928a69f3c195c309f2bf17eb374c69d1cc3723b8c9aed1da4a5c8fef4a3fe27341fa9250eac103e801918e3f6e6f9a27cf8422cba5a37ffe79b8667ba11ce7549ec7c7bf99588969b8fcb04dc56b77569632b2f8e4dd4cd8bd3fecc44e732a7612d20aac4c4cb38ee7abb3d666b27646b5700ede4a58630d017d5ddd4de9e863f493b11f7ebaec27acc69a4037be9abf89a1d4c04ceaf35909318223f8aecee15c13a57efe65ce86586949c2d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x40)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e)
writev(r9, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)

429.280475ms ago: executing program 1 (id=1237):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000a00)={'erspan0\x00', &(0x7f0000000940)={'gretap0\x00', 0x0, 0x9, 0x40, 0x4, 0x8, {{0x9, 0x4, 0x2, 0x6, 0x24, 0x64, 0x0, 0x6, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@timestamp={0x44, 0x10, 0x19, 0x0, 0x7, [0x8, 0x7, 0x81]}]}}}}})
ioctl$int_out(r1, 0x0, &(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004002, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@noinit_itable}, {@usrjquota}, {@grpjquota, 0x2e}], [{@subj_type={'subj_type', 0x3d, '\xe1[]*:['}}]}, 0x81, 0x46c, &(0x7f00000004c0)="$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")
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
pread64(r3, &(0x7f0000001b80)=""/4084, 0xff4, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10)
request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe)

397.279368ms ago: executing program 3 (id=1238):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x18)
add_key(&(0x7f0000000100)='logon\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000000)="56bbee268ed90aa02a3e7c0338cb", 0xe, 0xfffffffffffffffd)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x1a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="500100001000130428bd700000000000e0000001000000000000000000000000ac1e0101000000000000000000000000000000004e2400000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x150}}, 0x804)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1)

395.902988ms ago: executing program 5 (id=1239):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r1=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x2}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3}, 0x9)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x80040c, &(0x7f00000004c0), 0x1, 0x5e8, &(0x7f0000001200)="$eJzs3c9vFdUeAPDv3P6gpbzXQl7ee7iQJsZAorS0gCHGBWwNafBH3Lix0oJIgYbWaNGEkuDGxLgxxsSVC/G/UCJbVrpy4caVISFqWJp4zdzOlP6Y2x+X207T+XySS2fOmeGc4fLtOXPuOXMDqKzB9I9axMGImE4i+pP5xbzOyDIHF4579OdH59NXEvX6a78nkWRp+fFJ9rMvO7knIn78IYkDHavLnZm7cXl8amryerY/PHtlenhm7sbRS1fGL05enLw6+sLoqZMnTp4aOdbSdd0sSDt7+933+z8Ze/Obr/5KRr79ZSyJ0/FyduDS62iXwRhs/Jskq7P6TrW7sJJ0ZP9Plr7FSWeJFWJT8vevKyL+F/3REY/fvP74+JVSKwdsqXoSUQcqKhH/UFF5PyC/t195H1wrpVcCbIeHZxYGAFbHf+fC2GD0NMYG9j5KYumwThIRrY3MLbcvIu7fG7t94d7Y7diicTig2PytiPh/UfwnjfgfiJ4YaMR/bVn8p/2Cc9nPNP3VFstfOVQs/mH7LMR/z5rxH03i/60l8f92i+UPPt58p3dZ/Pe2ekkAAAAAAABQWXfPRMTzRZ//1xbn/0TB/J++iDjdhvIHV+yv/vy/9qANxQAFHp6JeKlw/m8tn/070JFt/asxH6AruXBpavJYRPw7Io5E1550f2SNMo5+euDLZnmD2fy//JWWfz+bC5jV40HnnuXnTIzPjj/pdQMRD29FPFU4/zdZbP+TgvY//X0wvcEyDjx751yzvPXjH9gq9a8jDhe2/4+fWpGs/XyO4UZ/YDjvFaz29Ieffdes/Fbj3yMm4Mml7f/eteN/IFn6vJ6ZzZdxfK6z3iyv1f5/d/J645Ez3VnaB+Ozs9dHIrqTsx1p6rL00c3XGXajPB7yeEnj/8gza4//FfX/eyNifsXfnfyxfE1x7r9/9/3arD76/1CeNP4nNtX+b35j9M7A983K31j7f6LR1h/JUoz/wYIv8jDtXp5eEI6dRVnbXV8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2A1qEbEvktrQ4natNjQU0RcR/4m9talrM7PPXbj23tWJNK/x/f+1/Jt++xf2k/z7/weW7I+u2D8eEfsj4vOO3sb+0PlrUxNlXzwAAAAAAAAAAAAAAAAAAADsEH1N1v+nfusou3bAlussuwJAaQri/6cy6gFsP+0/VJf4h+oS/1Bd4h+qq8X472p3PYDtp/2H6hL/UF3iHwAAAAAAdpX9h+7+nETE/Iu9jVeqO8szvwd2t1rZFQBK4xE/UF2m/kB1uccHknXye5qetN6Za5k+/wQnAwAAAAAAAAAAAEDlHD5o/T9UlfX/UF3W/0N15ev/D5VcD2D7uccHYp2V/IXr/9c9CwAAAAAAAAAAAABop5m5G5fHp6Ymr9t4Y2dUox0b6Tu7kYPr9frNxrEtlbVnB1zpjtrIp8LvlPqs2MjX+m3srNJ+JQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACv8EwAA//8IGSKz")
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000001700)=0x4)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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")
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r6, &(0x7f0000004200)='t', 0x1)
sendfile(r6, r4, 0x0, 0x3ffff)
sendfile(r6, r4, 0x0, 0x7ffff000)
r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8100)
ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f0000000240)={0x0, 0x2, 0x8})
syz_emit_ethernet(0x45, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x2, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @private}, '\x00\x00eX\x00\x00\x00'}}}}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)

249.6885ms ago: executing program 3 (id=1240):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmmsg$inet(r2, &(0x7f0000003500)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000008c0)}}], 0x1, 0x44004)

241.121221ms ago: executing program 1 (id=1241):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x4, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
getgroups(0x0, 0x0)

227.744672ms ago: executing program 3 (id=1242):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000)
r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000580)={0x0, 0x86f7, 0x10100, 0x3, 0x38a}, &(0x7f0000002000)=<r1=>0x0, &(0x7f0000000440)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_SYMLINKAT={0x26, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000640)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
io_uring_enter(r0, 0x48e9, 0xf2bb, 0x2, 0x0, 0x0)

0s ago: executing program 2 (id=1243):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40c0)
syz_open_dev$loop(&(0x7f0000000240), 0x400000007, 0x44842)
pipe(&(0x7f0000000440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0)
ppoll(&(0x7f0000000280)=[{r4, 0x6200}], 0x1, 0x0, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x4000006, 0x3, "42341f9b1000007e4f00"})
r5 = socket(0x1e, 0x5, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
listen(r5, 0x0)
r6 = socket(0x1e, 0x805, 0x0)
sendmsg$tipc(r6, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c)
accept4$inet6(r5, 0x0, 0x0, 0x0)
sendmsg$tipc(r6, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', <r7=>0x0, 0x4, 0x0, 0x6, 0x5, 0x30, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x8, 0x40, 0x2, 0x168}})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000017c0)={0x6, 0x7, &(0x7f0000000300)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8001}, @map_fd={0x18, 0x4, 0x1, 0x0, r2}, @jmp={0x5, 0x1, 0xa, 0x9, 0x5, 0xfffffffffffffff8, 0xfffffffffffffff3}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}], &(0x7f0000001a00)='syzkaller\x00', 0xffff, 0x5b, &(0x7f0000001640)=""/91, 0x40f00, 0x47, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000016c0)={0x2, 0x2, 0x7, 0xffff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001740)=[0xffffffffffffffff, r2, r4, 0xffffffffffffffff], &(0x7f0000001780)=[{0x1, 0x2, 0x4, 0x1}, {0x2, 0x2, 0xc, 0xb}, {0x5, 0x5, 0xe, 0x7}, {0x1, 0x5, 0x7, 0xc}], 0x10, 0x6}, 0x94)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f00000018c0), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001900)=<r10=>0x0)
sendmsg$NFC_CMD_GET_DEVICE(r8, &(0x7f00000019c0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x1c, r9, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000001a40)=ANY=[@ANYBLOB="dbdf25180040094e234e21000000000565d6000500000001000100050000000000000000000000070000000000000000000000000000f1b99f6c6f2b981946ff00001c6bb56d8a364dbb8722223e9e2b775365bf0938861ab6340b48ba601f0b951aacca81529f60fe6c293cc0f28b8b652e17cb18bdd069222ca6a6d7d585680ca76ae7fa3f53dc93421130fb7bcd8af904f552dfd0a7f8f469061d9ee2a6fea39a857ae1ca3992", @ANYRES32=r7, @ANYBLOB="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"], 0x1188}, 0x1, 0x0, 0x0, 0x24000080}, 0x40040)
r11 = syz_open_pts(r4, 0x101000)
dup3(r11, r4, 0x0)
accept4$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x80000)
splice(r4, 0x0, r3, 0x0, 0x7ffff000, 0x0)

kernel console output (not intermixed with test programs):

 error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.526: mark_inode_dirty error
[   65.575615][ T4945] bridge_slave_0: left allmulticast mode
[   65.575680][ T4941] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[   65.583460][ T4945] bridge_slave_0: left promiscuous mode
[   65.583604][ T4945] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.595930][ T4941] EXT4-fs (loop0): 1 orphan inode deleted
[   65.622537][ T2789] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1)
[   65.647864][ T2789] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:6: Failed to release dquot type 0
[   65.703387][ T4941] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #2: block 16: comm syz.0.526: lblock 0 mapped to illegal pblock 16 (length 1)
[   65.788573][ T3307] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0
[   65.806715][ T3307] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   65.835330][ T3307] EXT4-fs error (device loop0): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error
[   65.910752][ T4966] loop0: detected capacity change from 0 to 1024
[   65.931488][ T4966] EXT4-fs: Ignoring removed bh option
[   65.954894][ T4969] loop4: detected capacity change from 0 to 1024
[   65.987319][ T4966] EXT4-fs: inline encryption not supported
[   65.997756][ T4966] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   66.034086][ T4981] loop2: detected capacity change from 0 to 512
[   66.060621][ T4966] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[   66.062618][ T4981] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   66.088842][   T30] kauditd_printk_skb: 561 callbacks suppressed
[   66.088855][   T30] audit: type=1400 audit(1756570316.523:2533): avc:  denied  { name_bind } for  pid=4988 comm="syz.1.546" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   66.098981][ T4966] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.532: lblock 2 mapped to illegal pblock 2 (length 1)
[   66.136231][ T4966] Quota error (device loop0): qtree_write_dquot: dquota write failed
[   66.146640][ T4966] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.532: lblock 0 mapped to illegal pblock 48 (length 1)
[   66.168076][ T4966] Quota error (device loop0): v2_write_file_info: Can't write info structure
[   66.178942][ T4966] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.532: Failed to acquire dquot type 0
[   66.182969][   T30] audit: type=1400 audit(1756570316.603:2534): avc:  denied  { allowed } for  pid=4988 comm="syz.1.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   66.215034][   T30] audit: type=1400 audit(1756570316.603:2535): avc:  denied  { create } for  pid=4988 comm="syz.1.546" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   66.242538][   T30] audit: type=1400 audit(1756570316.603:2536): avc:  denied  { map } for  pid=4988 comm="syz.1.546" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11327 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   66.274006][   T30] audit: type=1400 audit(1756570316.603:2537): avc:  denied  { read write } for  pid=4988 comm="syz.1.546" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11327 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   66.319160][ T4966] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   66.326107][ T4981] loop2: detected capacity change from 0 to 1024
[   66.342225][ T4966] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.532: mark_inode_dirty error
[   66.358387][ T4966] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[   66.371892][ T4981] EXT4-fs: Ignoring removed bh option
[   66.378266][ T4981] EXT4-fs: inline encryption not supported
[   66.386827][ T4966] EXT4-fs (loop0): 1 orphan inode deleted
[   66.398238][ T4981] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   66.409227][   T29] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1)
[   66.418297][   T30] audit: type=1326 audit(1756570316.853:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5003 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d76e5ebe9 code=0x7ffc0000
[   66.428811][   T29] Quota error (device loop0): remove_tree: Can't read quota data block 1
[   66.463995][   T29] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 0
[   66.503338][ T4966] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #2: block 16: comm syz.0.532: lblock 0 mapped to illegal pblock 16 (length 1)
[   66.531013][   T30] audit: type=1326 audit(1756570316.913:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4999 comm="syz.3.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b25febe9 code=0x7ffc0000
[   66.546658][ T4981] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[   66.642007][ T3307] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0
[   66.642104][ T3307] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   66.642170][ T3307] EXT4-fs error (device loop0): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error
[   66.642859][ T4981] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.541: lblock 2 mapped to illegal pblock 2 (length 1)
[   66.643017][ T4981] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.541: lblock 0 mapped to illegal pblock 48 (length 1)
[   66.643172][ T4981] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.541: Failed to acquire dquot type 0
[   66.643311][ T4981] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   66.643357][ T4981] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.541: mark_inode_dirty error
[   66.643476][ T4981] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[   66.643500][ T4981] EXT4-fs (loop2): 1 orphan inode deleted
[   66.644007][   T29] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1)
[   66.644077][   T29] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 0
[   66.645112][ T4981] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz.2.541: Invalid inode table block 1 in block_group 0
[   66.645202][ T4981] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   66.645332][ T4981] EXT4-fs error (device loop2): ext4_quota_off:7221: inode #3: comm syz.2.541: mark_inode_dirty error
[   66.722546][ T4981] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.722565][ T4981] batman_adv: batadv0: Removing interface: batadv_slave_0
[   66.723166][ T4981] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.723181][ T4981] batman_adv: batadv0: Removing interface: batadv_slave_1
[   66.803732][ T5030] loop1: detected capacity change from 0 to 1024
[   67.101274][ T5049] program syz.1.559 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   67.132599][ T5038] 1ªX¹¦D: renamed from 
30ªX¹¦D (while UP)
[   67.134762][ T5038] net_ratelimit: 2 callbacks suppressed
[   67.134774][ T5038] A link change request failed with some changes committed already. Interface 
31ªX¹¦D may have been left with an inconsistent configuration, please check.
[   67.247405][ T5063] tipc: Started in network mode
[   67.247463][ T5063] tipc: Node identity ac141413, cluster identity 4711
[   67.247535][ T5063] tipc: New replicast peer: 10.1.1.2
[   67.247595][ T5063] tipc: Enabled bearer <udp:syz2>, priority 10
[   67.529043][ T5082] 1ªX¹¦D: entered promiscuous mode
[   67.534633][ T5082] 1ªX¹¦D: left allmulticast mode
[   67.537422][ T5083] 0ªX¹¦D: renamed from 
31ªX¹¦D
[   67.549714][ T5083] 0ªX¹¦D: left promiscuous mode
[   67.549732][ T5083] 0ªX¹¦D: entered allmulticast mode
[   67.551575][ T5083] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[   67.592543][ T5085] 1ªX¹¦D: renamed from 
30ªX¹¦D (while UP)
[   67.594694][ T5085] A link change request failed with some changes committed already. Interface 
31ªX¹¦D may have been left with an inconsistent configuration, please check.
[   67.743300][ T5100] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   67.986573][ T5133] loop3: detected capacity change from 0 to 1024
[   68.097163][ T5142] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   68.187415][ T5147] loop3: detected capacity change from 0 to 1024
[   68.300110][ T5158] loop2: detected capacity change from 0 to 1024
[   68.301458][ T5158] EXT4-fs: Ignoring removed mblk_io_submit option
[   68.314759][ T5161] program syz.3.602 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   68.317654][ T5158] EXT4-fs: Ignoring removed bh option
[   68.360434][ T2954] tipc: Node number set to 2886997011
[   68.406361][ T5158] ext3: Unknown parameter 'subj_type'
[   68.452028][ T5158] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[   68.544933][ T5166] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.602739][ T5166] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.694886][ T5166] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.743848][ T5176] loop3: detected capacity change from 0 to 1024
[   68.755111][ T5166] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.888329][   T59] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.900038][   T59] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.932712][   T59] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.951635][   T59] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.998868][ T5197] __nla_validate_parse: 47 callbacks suppressed
[   68.998950][ T5197] netlink: 5 bytes leftover after parsing attributes in process `syz.3.622'.
[   69.031228][ T5197] 1ªX¹¦D: renamed from 
30ªX¹¦D (while UP)
[   69.040013][ T5197] A link change request failed with some changes committed already. Interface 
31ªX¹¦D may have been left with an inconsistent configuration, please check.
[   69.214309][ T5221] loop4: detected capacity change from 0 to 1024
[   69.221504][ T5221] EXT4-fs: Ignoring removed mblk_io_submit option
[   69.228244][ T5221] EXT4-fs: Ignoring removed bh option
[   69.235789][ T5224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.629'.
[   69.256939][ T5227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.627'.
[   69.280033][ T5221] ext3: Unknown parameter 'subj_type'
[   69.318603][ T5221] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[   69.678736][ T5254] loop3: detected capacity change from 0 to 512
[   69.697209][ T5254] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   69.717768][ T5251] loop4: detected capacity change from 0 to 1024
[   69.734712][ T5254] EXT4-fs (loop3): mount failed
[   69.759690][ T5251] program syz.4.644 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   70.126069][ T5285] loop3: detected capacity change from 0 to 1024
[   70.258941][ T5303] netlink: 766 bytes leftover after parsing attributes in process `syz.0.659'.
[   70.268922][ T5305] program syz.3.656 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   70.270591][ T5306] netlink: 'syz.2.663': attribute type 7 has an invalid length.
[   70.288454][ T5306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.663'.
[   70.346761][ T5274] netlink: 28 bytes leftover after parsing attributes in process `syz.4.651'.
[   70.362148][ T5303] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.447026][ T5303] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.491197][ T5318] loop1: detected capacity change from 0 to 1024
[   70.498330][ T5318] EXT4-fs: Ignoring removed orlov option
[   70.527134][ T5318] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.667: bg 0: block 88: padding at end of block bitmap is not set
[   70.555385][ T5320] loop2: detected capacity change from 0 to 512
[   70.577048][ T5303] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.621187][ T5320] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002]
[   70.657445][ T5320] System zones: 1-12
[   70.669252][ T5331] loop1: detected capacity change from 0 to 1024
[   70.676675][ T5320] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.668: corrupted in-inode xattr: e_value size too large
[   70.692265][ T5331] EXT4-fs: Ignoring removed orlov option
[   70.698777][ T5320] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.668: couldn't read orphan inode 15 (err -117)
[   70.723334][ T5320] EXT4-fs (loop2): shut down requested (1)
[   70.732163][ T5303] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.748269][ T5331] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.672: bg 0: block 88: padding at end of block bitmap is not set
[   70.782357][ T5340] netlink: 'syz.4.675': attribute type 7 has an invalid length.
[   70.791924][ T5340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.675'.
[   70.843983][   T29] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.880535][   T29] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.903862][   T29] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.923596][ T5347] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   70.934272][   T29] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.944763][ T5350] loop3: detected capacity change from 0 to 1024
[   70.966581][ T5350] EXT4-fs: Ignoring removed mblk_io_submit option
[   70.978111][ T5350] EXT4-fs: Ignoring removed bh option
[   70.992579][ T5350] ext3: Unknown parameter 'subj_type'
[   71.020201][ T5350] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[   71.095029][   T30] kauditd_printk_skb: 333 callbacks suppressed
[   71.095042][   T30] audit: type=1400 audit(1756570321.533:2869): avc:  denied  { write } for  pid=5349 comm="syz.3.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   71.200738][   T30] audit: type=1400 audit(1756570321.573:2870): avc:  denied  { execmem } for  pid=5319 comm="syz.2.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   71.236733][ T5364] bond1: entered promiscuous mode
[   71.242433][ T5364] bond1: entered allmulticast mode
[   71.256517][ T5364] 8021q: adding VLAN 0 to HW filter on device bond1
[   71.269326][ T5364] bond1 (unregistering): Released all slaves
[   71.290050][ T5369] loop1: detected capacity change from 0 to 1024
[   71.313223][   T30] audit: type=1400 audit(1756570321.753:2871): avc:  denied  { mounton } for  pid=5367 comm="syz.1.686" path="/146/file1" dev="tmpfs" ino=796 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   71.328685][ T5369] EXT4-fs: Ignoring removed orlov option
[   71.380480][ T5371] netlink: 'syz.0.687': attribute type 7 has an invalid length.
[   71.390325][ T5371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.687'.
[   71.404143][   T30] audit: type=1400 audit(1756570321.843:2872): avc:  denied  { mount } for  pid=5367 comm="syz.1.686" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   71.436196][ T5369] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.686: bg 0: block 88: padding at end of block bitmap is not set
[   71.478289][   T30] audit: type=1400 audit(1756570321.863:2873): avc:  denied  { add_name } for  pid=5367 comm="syz.1.686" name="cgroup.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   71.508699][   T30] audit: type=1400 audit(1756570321.863:2874): avc:  denied  { create } for  pid=5367 comm="syz.1.686" name="cgroup.events" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   71.538886][   T30] audit: type=1400 audit(1756570321.873:2875): avc:  denied  { write } for  pid=5370 comm="syz.0.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   71.563640][   T30] audit: type=1400 audit(1756570321.903:2876): avc:  denied  { unmount } for  pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   71.591764][   T30] audit: type=1400 audit(1756570322.023:2877): avc:  denied  { create } for  pid=5379 comm="syz.0.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   71.632396][   T30] audit: type=1400 audit(1756570322.063:2878): avc:  denied  { watch watch_reads } for  pid=5381 comm="syz.2.691" path="/139/file0" dev="tmpfs" ino=751 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   71.665464][ T5389] FAULT_INJECTION: forcing a failure.
[   71.665464][ T5389] name failslab, interval 1, probability 0, space 0, times 0
[   71.682037][ T5389] CPU: 1 UID: 0 PID: 5389 Comm: syz.1.692 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   71.682149][ T5389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   71.682252][ T5389] Call Trace:
[   71.682258][ T5389]  <TASK>
[   71.682291][ T5389]  __dump_stack+0x1d/0x30
[   71.682312][ T5389]  dump_stack_lvl+0xe8/0x140
[   71.682329][ T5389]  dump_stack+0x15/0x1b
[   71.682390][ T5389]  should_fail_ex+0x265/0x280
[   71.682408][ T5389]  should_failslab+0x8c/0xb0
[   71.682431][ T5389]  kmem_cache_alloc_noprof+0x50/0x310
[   71.682490][ T5389]  ? security_inode_alloc+0x37/0x100
[   71.682512][ T5389]  security_inode_alloc+0x37/0x100
[   71.682534][ T5389]  inode_init_always_gfp+0x4b7/0x500
[   71.682554][ T5389]  alloc_inode+0x58/0x170
[   71.682630][ T5389]  new_inode+0x1d/0xe0
[   71.682651][ T5389]  ramfs_get_inode+0x24/0x1b0
[   71.682667][ T5389]  ramfs_mknod+0x35/0xe0
[   71.682682][ T5389]  ramfs_mkdir+0x2b/0x60
[   71.682802][ T5389]  vfs_mkdir+0x210/0x340
[   71.682821][ T5389]  do_mkdirat+0x132/0x3f0
[   71.682838][ T5389]  __x64_sys_mkdirat+0x4c/0x60
[   71.682855][ T5389]  x64_sys_call+0x2b7/0x2ff0
[   71.682934][ T5389]  do_syscall_64+0xd2/0x200
[   71.683096][ T5389]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   71.683119][ T5389]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   71.683142][ T5389]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.683159][ T5389] RIP: 0033:0x7f6d76e5ebe9
[   71.683235][ T5389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   71.683249][ T5389] RSP: 002b:00007f6d758bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[   71.683269][ T5389] RAX: ffffffffffffffda RBX: 00007f6d77095fa0 RCX: 00007f6d76e5ebe9
[   71.683282][ T5389] RDX: 0000000000000000 RSI: 0000200000002040 RDI: ffffffffffffff9c
[   71.683295][ T5389] RBP: 00007f6d758bf090 R08: 0000000000000000 R09: 0000000000000000
[   71.683305][ T5389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   71.683316][ T5389] R13: 00007f6d77096038 R14: 00007f6d77095fa0 R15: 00007ffcacc04ff8
[   71.683333][ T5389]  </TASK>
[   71.981533][ T5393] netlink: 766 bytes leftover after parsing attributes in process `syz.3.693'.
[   72.071364][ T5393] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.089611][ T5407] netlink: 'syz.4.701': attribute type 7 has an invalid length.
[   72.099209][ T5407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.701'.
[   72.122040][ T5409] 1ªX¹¦D: renamed from 
30ªX¹¦D (while UP)
[   72.131717][ T5409] A link change request failed with some changes committed already. Interface 
31ªX¹¦D may have been left with an inconsistent configuration, please check.
[   72.182027][ T5393] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.265096][ T5393] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.314779][ T5393] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.358301][ T5417] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12)
[   72.366406][ T5417] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   72.376783][ T5417] vhci_hcd vhci_hcd.0: Device attached
[   72.389189][ T5427] vhci_hcd: connection closed
[   72.389297][   T29] vhci_hcd: stop threads
[   72.400156][   T29] vhci_hcd: release socket
[   72.404845][   T29] vhci_hcd: disconnect device
[   72.436927][ T5433] netlink: 'syz.0.712': attribute type 21 has an invalid length.
[   72.457433][ T5433] netlink: 'syz.0.712': attribute type 5 has an invalid length.
[   72.465852][ T5433] netlink: 'syz.0.712': attribute type 6 has an invalid length.
[   72.479160][   T29] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.496795][   T29] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.511891][ T5435] SELinux: security_context_str_to_sid () failed with errno=-22
[   72.546360][   T29] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.566757][   T29] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.578355][ T5441] 1ªX¹¦D: renamed from 
30ªX¹¦D (while UP)
[   72.596650][ T5441] A link change request failed with some changes committed already. Interface 
31ªX¹¦D may have been left with an inconsistent configuration, please check.
[   72.622574][ T5448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   72.633792][ T5448] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   72.655605][ T5448] loop0: detected capacity change from 0 to 512
[   72.677388][ T5448] EXT4-fs: Ignoring removed bh option
[   72.684787][ T5455] FAULT_INJECTION: forcing a failure.
[   72.684787][ T5455] name failslab, interval 1, probability 0, space 0, times 0
[   72.697861][ T5455] CPU: 1 UID: 0 PID: 5455 Comm: syz.4.723 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   72.697893][ T5455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   72.697902][ T5455] Call Trace:
[   72.697908][ T5455]  <TASK>
[   72.697915][ T5455]  __dump_stack+0x1d/0x30
[   72.697933][ T5455]  dump_stack_lvl+0xe8/0x140
[   72.698010][ T5455]  dump_stack+0x15/0x1b
[   72.698023][ T5455]  should_fail_ex+0x265/0x280
[   72.698049][ T5455]  should_failslab+0x8c/0xb0
[   72.698072][ T5455]  kmem_cache_alloc_noprof+0x50/0x310
[   72.698113][ T5455]  ? prepare_creds+0x37/0x4c0
[   72.698191][ T5455]  prepare_creds+0x37/0x4c0
[   72.698210][ T5455]  __sys_setregid+0xd8/0x360
[   72.698239][ T5455]  __x64_sys_setregid+0x2d/0x40
[   72.698297][ T5455]  x64_sys_call+0x2e2e/0x2ff0
[   72.698320][ T5455]  do_syscall_64+0xd2/0x200
[   72.698419][ T5455]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   72.698442][ T5455]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   72.698502][ T5455]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.698524][ T5455] RIP: 0033:0x7f1c80dfebe9
[   72.698540][ T5455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   72.698556][ T5455] RSP: 002b:00007f1c7f867038 EFLAGS: 00000246 ORIG_RAX: 0000000000000072
[   72.698651][ T5455] RAX: ffffffffffffffda RBX: 00007f1c81035fa0 RCX: 00007f1c80dfebe9
[   72.698663][ T5455] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff
[   72.698741][ T5455] RBP: 00007f1c7f867090 R08: 0000000000000000 R09: 0000000000000000
[   72.698751][ T5455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   72.698761][ T5455] R13: 00007f1c81036038 R14: 00007f1c81035fa0 R15: 00007ffc5ba6f1a8
[   72.698778][ T5455]  </TASK>
[   72.898030][ T5448] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   72.912457][ T5457] loop1: detected capacity change from 0 to 1024
[   72.953478][ T5461] netlink: 'syz.3.724': attribute type 21 has an invalid length.
[   72.961829][ T5448] EXT4-fs (loop0): 1 truncate cleaned up
[   72.965747][ T5461] netlink: 'syz.3.724': attribute type 5 has an invalid length.
[   72.978131][ T5461] netlink: 'syz.3.724': attribute type 6 has an invalid length.
[   73.102086][ T5477] program syz.1.722 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   73.254723][ T5488] loop2: detected capacity change from 0 to 1024
[   73.264799][ T5488] EXT4-fs: Ignoring removed mblk_io_submit option
[   73.271717][ T5488] EXT4-fs: Ignoring removed bh option
[   73.290220][ T5488] ext3: Unknown parameter 'subj_type'
[   73.300862][ T5488] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[   73.339081][ T5495] loop1: detected capacity change from 0 to 1024
[   73.370846][ T5495] EXT4-fs: Ignoring removed orlov option
[   73.385221][ T5495] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.737: bg 0: block 88: padding at end of block bitmap is not set
[   73.553223][ T5499] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64528 sclass=netlink_route_socket pid=5499 comm=syz.4.738
[   73.672507][ T5520] 0ªX¹¦D: renamed from 
31ªX¹¦D (while UP)
[   73.689498][ T5520] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[   73.734875][ T5526] loop1: detected capacity change from 0 to 1024
[   73.735295][ T5526] EXT4-fs: Ignoring removed orlov option
[   73.762453][ T5526] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.749: bg 0: block 88: padding at end of block bitmap is not set
[   73.995191][ T5554] (unnamed net_device) (uninitialized): down delay (2) is not a multiple of miimon (5), value rounded to 0 ms
[   74.010050][ T5554] (unnamed net_device) (uninitialized): peer notification delay (7) is not a multiple of miimon (5), value rounded to 5 ms
[   74.084513][ T5562] loop0: detected capacity change from 0 to 1024
[   74.101506][ T5562] EXT4-fs: Ignoring removed mblk_io_submit option
[   74.109258][ T5562] EXT4-fs: Ignoring removed bh option
[   74.131315][ T5562] ext3: Unknown parameter 'subj_type'
[   74.172841][ T5562] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[   74.263567][ T5571] __nla_validate_parse: 11 callbacks suppressed
[   74.263651][ T5571] netlink: 332 bytes leftover after parsing attributes in process `syz.3.766'.
[   74.483289][ T5592] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   74.550874][ T5598] loop4: detected capacity change from 0 to 1024
[   74.594265][ T5598] EXT4-fs: Ignoring removed mblk_io_submit option
[   74.600838][ T5598] EXT4-fs: Ignoring removed bh option
[   74.645516][ T5598] ext3: Unknown parameter 'subj_type'
[   74.653585][ T5607] capability: warning: `syz.2.780' uses 32-bit capabilities (legacy support in use)
[   74.664615][ T5607] FAULT_INJECTION: forcing a failure.
[   74.664615][ T5607] name failslab, interval 1, probability 0, space 0, times 0
[   74.677773][ T5607] CPU: 0 UID: 0 PID: 5607 Comm: syz.2.780 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   74.677800][ T5607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   74.677809][ T5607] Call Trace:
[   74.677815][ T5607]  <TASK>
[   74.677822][ T5607]  __dump_stack+0x1d/0x30
[   74.677906][ T5607]  dump_stack_lvl+0xe8/0x140
[   74.677925][ T5607]  dump_stack+0x15/0x1b
[   74.677941][ T5607]  should_fail_ex+0x265/0x280
[   74.677958][ T5607]  ? pagemap_read+0x184/0x5e0
[   74.677977][ T5607]  should_failslab+0x8c/0xb0
[   74.678068][ T5607]  __kmalloc_cache_noprof+0x4c/0x320
[   74.678092][ T5607]  pagemap_read+0x184/0x5e0
[   74.678115][ T5607]  ? __pfx_pagemap_read+0x10/0x10
[   74.678214][ T5607]  vfs_read+0x1a8/0x770
[   74.678231][ T5607]  ? __fget_files+0x184/0x1c0
[   74.678251][ T5607]  ? __rcu_read_unlock+0x4f/0x70
[   74.678273][ T5607]  ? __fget_files+0x184/0x1c0
[   74.678367][ T5607]  __x64_sys_pread64+0xfd/0x150
[   74.678391][ T5607]  x64_sys_call+0x29e2/0x2ff0
[   74.678481][ T5607]  do_syscall_64+0xd2/0x200
[   74.678503][ T5607]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   74.678525][ T5607]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   74.678548][ T5607]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.678632][ T5607] RIP: 0033:0x7f80bdcbebe9
[   74.678701][ T5607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   74.678717][ T5607] RSP: 002b:00007f80bc6fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011
[   74.678733][ T5607] RAX: ffffffffffffffda RBX: 00007f80bdef6090 RCX: 00007f80bdcbebe9
[   74.678744][ T5607] RDX: 0000000000200000 RSI: 0000200000001240 RDI: 0000000000000007
[   74.678754][ T5607] RBP: 00007f80bc6fe090 R08: 0000000000000000 R09: 0000000000000000
[   74.678764][ T5607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   74.678834][ T5607] R13: 00007f80bdef6128 R14: 00007f80bdef6090 R15: 00007fff3ec9d118
[   74.678854][ T5607]  </TASK>
[   74.905924][ T5598] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[   75.026229][ T5615] loop0: detected capacity change from 0 to 1024
[   75.119003][ T5615] program syz.0.784 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   75.181666][ T5624] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   75.192369][ T5626] loop4: detected capacity change from 0 to 1024
[   75.263119][ T5630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.789'.
[   75.315090][ T5632] program syz.4.788 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   75.547391][ T5645] netlink: 9 bytes leftover after parsing attributes in process `syz.4.793'.
[   75.558236][ T5645] 1ªX¹¦D: entered promiscuous mode
[   75.565011][ T5645] 1ªX¹¦D: left allmulticast mode
[   75.572604][ T5646] netlink: 766 bytes leftover after parsing attributes in process `syz.2.792'.
[   75.572922][ T5645] netlink: 5 bytes leftover after parsing attributes in process `syz.4.793'.
[   75.595049][ T5645] 0ªX¹¦D: renamed from 
31ªX¹¦D
[   75.618490][ T5645] 0ªX¹¦D: left promiscuous mode
[   75.623659][ T5645] 0ªX¹¦D: entered allmulticast mode
[   75.631995][ T5645] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[   75.677197][ T5646] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.683425][ T5645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5645 comm=syz.4.793
[   75.743724][ T5649] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.844092][ T5646] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.892210][ T5649] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.932167][ T5646] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.993043][ T5649] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.019570][ T5661] loop4: detected capacity change from 0 to 764
[   76.028222][ T5661] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   76.031976][ T5664] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   76.058200][ T5646] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.075370][ T5661] Symlink component flag not implemented
[   76.081882][ T5661] Symlink component flag not implemented (7)
[   76.083118][ T5649] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.125742][ T5666] loop1: detected capacity change from 0 to 1024
[   76.126180][ T5674] loop4: detected capacity change from 0 to 1024
[   76.132201][   T30] kauditd_printk_skb: 379 callbacks suppressed
[   76.132216][   T30] audit: type=1400 audit(1756570326.563:3258): avc:  denied  { mount } for  pid=5665 comm="syz.1.800" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   76.175568][   T30] audit: type=1400 audit(1756570326.563:3259): avc:  denied  { add_name } for  pid=5665 comm="syz.1.800" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   76.200417][   T30] audit: type=1400 audit(1756570326.563:3260): avc:  denied  { create } for  pid=5665 comm="syz.1.800" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   76.207024][ T5678] program syz.1.800 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   76.226334][   T30] audit: type=1400 audit(1756570326.573:3261): avc:  denied  { read open } for  pid=5665 comm="syz.1.800" path="/169/bus/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   76.251755][ T5680] program syz.4.803 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   76.284105][   T30] audit: type=1400 audit(1756570326.583:3262): avc:  denied  { write } for  pid=5673 comm="syz.4.803" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   76.307736][   T30] audit: type=1400 audit(1756570326.643:3263): avc:  denied  { read } for  pid=5665 comm="syz.1.800" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   76.332046][   T30] audit: type=1400 audit(1756570326.643:3264): avc:  denied  { open } for  pid=5665 comm="syz.1.800" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   76.373986][   T59] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.400301][   T59] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.432100][   T59] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.455979][ T3302] EXT4-fs unmount: 53 callbacks suppressed
[   76.455993][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.464167][   T30] audit: type=1400 audit(1756570326.833:3265): avc:  denied  { create } for  pid=5682 comm="syz.3.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   76.472077][   T29] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.491914][   T30] audit: type=1400 audit(1756570326.893:3266): avc:  denied  { unmount } for  pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   76.536193][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.573059][ T5685] loop4: detected capacity change from 0 to 1024
[   76.580781][ T5685] EXT4-fs: Ignoring removed orlov option
[   76.587120][   T29] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.595739][   T29] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.604235][   T29] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.622131][ T5685] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.630998][   T59] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.637092][ T5685] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.806: bg 0: block 88: padding at end of block bitmap is not set
[   76.671451][   T30] audit: type=1400 audit(1756570327.113:3267): avc:  denied  { allowed } for  pid=5682 comm="syz.3.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   76.738438][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.758380][ T5701] loop2: detected capacity change from 0 to 1024
[   76.769459][ T5705] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   76.772063][ T5701] EXT4-fs: Ignoring removed orlov option
[   76.817790][ T5701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.821909][ T5713] validate_nla: 1 callbacks suppressed
[   76.821936][ T5713] netlink: 'syz.3.815': attribute type 7 has an invalid length.
[   76.846618][ T5713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.815'.
[   76.857008][ T5718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.811'.
[   76.882527][ T5701] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.813: bg 0: block 88: padding at end of block bitmap is not set
[   76.902432][ T5717] netlink: 5 bytes leftover after parsing attributes in process `syz.4.817'.
[   76.911732][ T5717] 1ªX¹¦D: renamed from 
30ªX¹¦D (while UP)
[   76.922811][ T5715] loop1: detected capacity change from 0 to 1024
[   76.924150][ T5717] A link change request failed with some changes committed already. Interface 
31ªX¹¦D may have been left with an inconsistent configuration, please check.
[   76.948779][ T5715] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.975121][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.093087][ T5731] program syz.1.816 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   77.131084][ T5733] netlink: 'syz.3.822': attribute type 7 has an invalid length.
[   77.138900][ T5733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.822'.
[   77.221686][ T5741] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   77.250577][ T5745] netlink: 56 bytes leftover after parsing attributes in process `syz.2.827'.
[   77.262056][ T5747] loop3: detected capacity change from 0 to 512
[   77.262723][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.317540][ T5747] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   77.341452][ T5747] EXT4-fs (loop3): mount failed
[   77.354060][ T5760] 1ªX¹¦D: renamed from 
30ªX¹¦D (while UP)
[   77.369486][ T5760] A link change request failed with some changes committed already. Interface 
31ªX¹¦D may have been left with an inconsistent configuration, please check.
[   77.459009][ T5772] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   77.516260][ T5774] loop1: detected capacity change from 0 to 164
[   77.534642][ T5774] vxcan1 speed is unknown, defaulting to 1000
[   77.549305][ T5774] vxcan1 speed is unknown, defaulting to 1000
[   77.562255][ T5774] vxcan1 speed is unknown, defaulting to 1000
[   77.617409][ T5774] infiniband syz0: set active
[   77.622682][ T5774] infiniband syz0: added vxcan1
[   77.630123][   T36] vxcan1 speed is unknown, defaulting to 1000
[   77.651082][ T5784] iso9660: Corrupted directory entry in block 4 of inode 1792
[   77.662158][ T5790] 0ªX¹¦D: renamed from 
31ªX¹¦D (while UP)
[   77.670556][ T5790] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[   77.687691][ T5774] RDS/IB: syz0: added
[   77.693033][ T5774] smc: adding ib device syz0 with port count 1
[   77.700222][ T5774] smc:    ib device syz0 port 1 has pnetid 
[   77.706856][   T36] vxcan1 speed is unknown, defaulting to 1000
[   77.707170][ T5788] loop3: detected capacity change from 0 to 512
[   77.715136][ T5774] vxcan1 speed is unknown, defaulting to 1000
[   77.757947][ T5774] vxcan1 speed is unknown, defaulting to 1000
[   77.782709][ T5788] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   77.793745][ T5774] vxcan1 speed is unknown, defaulting to 1000
[   77.834413][ T5788] EXT4-fs (loop3): mount failed
[   77.837551][ T5774] vxcan1 speed is unknown, defaulting to 1000
[   77.874673][ T5774] vxcan1 speed is unknown, defaulting to 1000
[   77.934334][ T5803] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   77.961572][ T5805] loop2: detected capacity change from 0 to 512
[   77.971406][ T5805] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002]
[   77.980865][ T5805] System zones: 1-12
[   77.989926][ T5805] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.852: corrupted in-inode xattr: e_value size too large
[   77.997242][ T5808] loop0: detected capacity change from 0 to 1024
[   78.006973][ T5805] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.852: couldn't read orphan inode 15 (err -117)
[   78.032904][ T5805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.047306][ T5810] loop3: detected capacity change from 0 to 1024
[   78.051803][ T5805] EXT4-fs (loop2): shut down requested (1)
[   78.062835][ T5808] EXT4-fs: Ignoring removed mblk_io_submit option
[   78.070604][ T5808] EXT4-fs: Ignoring removed bh option
[   78.079890][ T5810] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.088677][ T5808] ext3: Unknown parameter 'subj_type'
[   78.117971][ T5808] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[   78.212800][ T5819] program syz.3.853 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   78.243886][ T5816] vxcan1 speed is unknown, defaulting to 1000
[   78.418272][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.450184][ T5825] loop1: detected capacity change from 0 to 1024
[   78.459984][ T5825] EXT4-fs: Ignoring removed orlov option
[   78.483032][ T5825] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.528856][ T5835] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   78.542935][ T5825] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.859: bg 0: block 88: padding at end of block bitmap is not set
[   78.582045][ T5839] netlink: 'syz.4.864': attribute type 21 has an invalid length.
[   78.592558][ T5839] netlink: 'syz.4.864': attribute type 5 has an invalid length.
[   78.604600][ T5839] netlink: 'syz.4.864': attribute type 6 has an invalid length.
[   78.608990][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.689697][ T5848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   78.699489][ T5848] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   78.716471][ T5848] loop3: detected capacity change from 0 to 512
[   78.724988][ T5848] EXT4-fs: Ignoring removed bh option
[   78.733526][ T5848] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   78.755170][ T5848] EXT4-fs (loop3): 1 truncate cleaned up
[   78.768010][ T5848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.845180][ T5855] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.861592][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.906599][ T5859] FAULT_INJECTION: forcing a failure.
[   78.906599][ T5859] name failslab, interval 1, probability 0, space 0, times 0
[   78.921617][ T5859] CPU: 1 UID: 0 PID: 5859 Comm: syz.4.871 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   78.921654][ T5859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   78.921664][ T5859] Call Trace:
[   78.921672][ T5859]  <TASK>
[   78.921760][ T5859]  __dump_stack+0x1d/0x30
[   78.921782][ T5859]  dump_stack_lvl+0xe8/0x140
[   78.921806][ T5859]  dump_stack+0x15/0x1b
[   78.921819][ T5859]  should_fail_ex+0x265/0x280
[   78.921835][ T5859]  ? audit_log_d_path+0x8d/0x150
[   78.921861][ T5859]  should_failslab+0x8c/0xb0
[   78.921961][ T5859]  __kmalloc_cache_noprof+0x4c/0x320
[   78.921986][ T5859]  audit_log_d_path+0x8d/0x150
[   78.922008][ T5859]  audit_log_d_path_exe+0x42/0x70
[   78.922032][ T5859]  audit_log_task+0x1e9/0x250
[   78.922060][ T5859]  audit_seccomp+0x61/0x100
[   78.922080][ T5859]  ? __seccomp_filter+0x68c/0x10d0
[   78.922099][ T5859]  __seccomp_filter+0x69d/0x10d0
[   78.922160][ T5859]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   78.922186][ T5859]  ? vfs_write+0x7e8/0x960
[   78.922211][ T5859]  __secure_computing+0x82/0x150
[   78.922257][ T5859]  syscall_trace_enter+0xcf/0x1e0
[   78.922277][ T5859]  do_syscall_64+0xac/0x200
[   78.922366][ T5859]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   78.922385][ T5859]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   78.922478][ T5859]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   78.922515][ T5859] RIP: 0033:0x7f1c80dfebe9
[   78.922529][ T5859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   78.922583][ T5859] RSP: 002b:00007f1c7f867038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bf
[   78.922602][ T5859] RAX: ffffffffffffffda RBX: 00007f1c81035fa0 RCX: 00007f1c80dfebe9
[   78.922615][ T5859] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   78.922628][ T5859] RBP: 00007f1c7f867090 R08: 0000000000000000 R09: 0000000000000000
[   78.922639][ T5859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   78.922649][ T5859] R13: 00007f1c81036038 R14: 00007f1c81035fa0 R15: 00007ffc5ba6f1a8
[   78.922666][ T5859]  </TASK>
[   79.181708][ T5855] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.211265][ T5863] loop4: detected capacity change from 0 to 764
[   79.221413][ T5863] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   79.231829][ T5855] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.248064][ T5870] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   79.266433][ T5872] FAULT_INJECTION: forcing a failure.
[   79.266433][ T5872] name failslab, interval 1, probability 0, space 0, times 0
[   79.282320][ T5872] CPU: 0 UID: 0 PID: 5872 Comm: syz.4.877 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   79.282348][ T5872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   79.282360][ T5872] Call Trace:
[   79.282366][ T5872]  <TASK>
[   79.282374][ T5872]  __dump_stack+0x1d/0x30
[   79.282504][ T5872]  dump_stack_lvl+0xe8/0x140
[   79.282522][ T5872]  dump_stack+0x15/0x1b
[   79.282537][ T5872]  should_fail_ex+0x265/0x280
[   79.282556][ T5872]  ? audit_log_d_path+0x8d/0x150
[   79.282620][ T5872]  should_failslab+0x8c/0xb0
[   79.282641][ T5872]  __kmalloc_cache_noprof+0x4c/0x320
[   79.282671][ T5872]  audit_log_d_path+0x8d/0x150
[   79.282740][ T5872]  audit_log_d_path_exe+0x42/0x70
[   79.282831][ T5872]  audit_log_task+0x1e9/0x250
[   79.282856][ T5872]  audit_seccomp+0x61/0x100
[   79.282876][ T5872]  ? __seccomp_filter+0x68c/0x10d0
[   79.282895][ T5872]  __seccomp_filter+0x69d/0x10d0
[   79.282943][ T5872]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   79.282964][ T5872]  ? vfs_write+0x7e8/0x960
[   79.282982][ T5872]  ? __rcu_read_unlock+0x4f/0x70
[   79.283093][ T5872]  ? __fget_files+0x184/0x1c0
[   79.283108][ T5872]  __secure_computing+0x82/0x150
[   79.283166][ T5872]  syscall_trace_enter+0xcf/0x1e0
[   79.283249][ T5872]  do_syscall_64+0xac/0x200
[   79.283264][ T5872]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   79.283276][ T5872]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   79.283292][ T5872]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.283304][ T5872] RIP: 0033:0x7f1c80dfebe9
[   79.283314][ T5872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   79.283345][ T5872] RSP: 002b:00007f1c7f867038 EFLAGS: 00000246 ORIG_RAX: 0000000000000131
[   79.283362][ T5872] RAX: ffffffffffffffda RBX: 00007f1c81035fa0 RCX: 00007f1c80dfebe9
[   79.283373][ T5872] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000ffffffd3
[   79.283385][ T5872] RBP: 00007f1c7f867090 R08: 0000000000000000 R09: 0000000000000000
[   79.283398][ T5872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   79.283405][ T5872] R13: 00007f1c81036038 R14: 00007f1c81035fa0 R15: 00007ffc5ba6f1a8
[   79.283416][ T5872]  </TASK>
[   79.286106][ T5855] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.525840][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.525978][ T5877] wg2: entered promiscuous mode
[   79.525992][ T5877] wg2: entered allmulticast mode
[   79.599532][   T42] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.615524][   T29] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.628699][   T29] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.679739][ T5893] __nla_validate_parse: 9 callbacks suppressed
[   79.679757][ T5893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.885'.
[   79.695973][ T5893] netlink: 20 bytes leftover after parsing attributes in process `syz.4.885'.
[   79.730966][   T29] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.889779][ T5906] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.040966][ T5906] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.164292][ T5906] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.229512][ T5906] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.265995][ T5915] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   80.360812][ T5920] netlink: 44 bytes leftover after parsing attributes in process `syz.1.890'.
[   80.361234][ T5920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   80.361493][ T5920] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   80.365157][ T5920] loop1: detected capacity change from 0 to 512
[   80.402087][ T5920] EXT4-fs: Ignoring removed bh option
[   80.402618][ T5920] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   80.424703][ T5920] EXT4-fs (loop1): 1 truncate cleaned up
[   80.425058][ T5920] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.482422][ T5923] netlink: 5 bytes leftover after parsing attributes in process `syz.4.891'.
[   80.482553][ T5923] 0ªX¹¦D: renamed from 
31ªX¹¦D (while UP)
[   80.484335][ T5923] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[   80.559783][ T5926] FAULT_INJECTION: forcing a failure.
[   80.559783][ T5926] name failslab, interval 1, probability 0, space 0, times 0
[   80.573991][ T5926] CPU: 1 UID: 0 PID: 5926 Comm: syz.4.892 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   80.574015][ T5926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   80.574025][ T5926] Call Trace:
[   80.574031][ T5926]  <TASK>
[   80.574038][ T5926]  __dump_stack+0x1d/0x30
[   80.574118][ T5926]  dump_stack_lvl+0xe8/0x140
[   80.574135][ T5926]  dump_stack+0x15/0x1b
[   80.574150][ T5926]  should_fail_ex+0x265/0x280
[   80.574169][ T5926]  ? audit_log_d_path+0x8d/0x150
[   80.574201][ T5926]  should_failslab+0x8c/0xb0
[   80.574274][ T5926]  __kmalloc_cache_noprof+0x4c/0x320
[   80.574303][ T5926]  audit_log_d_path+0x8d/0x150
[   80.574338][ T5926]  audit_log_d_path_exe+0x42/0x70
[   80.574366][ T5926]  audit_log_task+0x1e9/0x250
[   80.574390][ T5926]  audit_seccomp+0x61/0x100
[   80.574408][ T5926]  ? __seccomp_filter+0x68c/0x10d0
[   80.574456][ T5926]  __seccomp_filter+0x69d/0x10d0
[   80.574478][ T5926]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   80.574504][ T5926]  ? vfs_write+0x7e8/0x960
[   80.574670][ T5926]  ? __rcu_read_unlock+0x4f/0x70
[   80.574694][ T5926]  ? __fget_files+0x184/0x1c0
[   80.574717][ T5926]  __secure_computing+0x82/0x150
[   80.574737][ T5926]  syscall_trace_enter+0xcf/0x1e0
[   80.574758][ T5926]  do_syscall_64+0xac/0x200
[   80.574809][ T5926]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   80.574910][ T5926]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   80.574931][ T5926]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.574956][ T5926] RIP: 0033:0x7f1c80dfebe9
[   80.574971][ T5926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   80.575025][ T5926] RSP: 002b:00007f1c7f867038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bf
[   80.575043][ T5926] RAX: ffffffffffffffda RBX: 00007f1c81035fa0 RCX: 00007f1c80dfebe9
[   80.575054][ T5926] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   80.575065][ T5926] RBP: 00007f1c7f867090 R08: 0000000000000000 R09: 0000000000000000
[   80.575077][ T5926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   80.575089][ T5926] R13: 00007f1c81036038 R14: 00007f1c81035fa0 R15: 00007ffc5ba6f1a8
[   80.575105][ T5926]  </TASK>
[   80.947182][ T5938] loop4: detected capacity change from 0 to 512
[   80.962034][ T5938] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002]
[   80.980870][ T5938] System zones: 1-12
[   80.990713][ T5938] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.897: corrupted in-inode xattr: e_value size too large
[   81.009464][ T5938] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.897: couldn't read orphan inode 15 (err -117)
[   81.026225][ T5938] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.061932][ T5943] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   81.146166][ T5947] loop0: detected capacity change from 0 to 1024
[   81.171809][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.200774][ T5947] EXT4-fs: Ignoring removed mblk_io_submit option
[   81.207052][ T5951] loop1: detected capacity change from 0 to 512
[   81.207801][ T5947] EXT4-fs: Ignoring removed bh option
[   81.239512][   T30] kauditd_printk_skb: 426 callbacks suppressed
[   81.239525][   T30] audit: type=1400 audit(1756570331.673:3692): avc:  denied  { create } for  pid=5952 comm="syz.3.903" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   81.250596][ T5947] ext3: Unknown parameter 'subj_type'
[   81.273525][ T5953] loop3: detected capacity change from 0 to 512
[   81.292406][ T5951] Quota error (device loop1): v2_read_file_info: Free block number 4294967294 out of range (1, 6).
[   81.316596][ T5947] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[   81.343426][ T5953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.358737][ T5951] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   81.372445][   T30] audit: type=1400 audit(1756570331.773:3693): avc:  denied  { mounton } for  pid=5952 comm="syz.3.903" path="/175/file0" dev="tmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   81.388452][ T5953] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   81.418172][ T5951] EXT4-fs (loop1): mount failed
[   81.440890][ T5953] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.460888][ T2789] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.502441][ T2789] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.515595][ T5961] netlink: 32 bytes leftover after parsing attributes in process `syz.1.904'.
[   81.523720][ T2789] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.539948][ T5953] loop3: detected capacity change from 0 to 1024
[   81.554718][ T2789] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.561892][ T5953] EXT4-fs: Ignoring removed bh option
[   81.576116][   T30] audit: type=1400 audit(1756570332.013:3694): avc:  denied  { block_suspend } for  pid=5960 comm="syz.1.904" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   81.611303][ T5961] netlink: 'syz.1.904': attribute type 1 has an invalid length.
[   81.619862][ T5953] EXT4-fs: inline encryption not supported
[   81.623412][ T5961] batadv_slave_1: entered promiscuous mode
[   81.649047][ T5961] batadv_slave_1: left promiscuous mode
[   81.656577][   T30] audit: type=1400 audit(1756570332.063:3695): avc:  denied  { connect } for  pid=5960 comm="syz.1.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   81.688195][ T5953] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   81.723793][ T5953] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[   81.757397][   T30] audit: type=1326 audit(1756570332.173:3696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5970 comm="syz.1.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d76e5ebe9 code=0x7ffc0000
[   81.783605][   T30] audit: type=1326 audit(1756570332.183:3697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5970 comm="syz.1.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d76e5ebe9 code=0x7ffc0000
[   81.813140][   T30] audit: type=1326 audit(1756570332.183:3698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5970 comm="syz.1.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d76e5ebe9 code=0x7ffc0000
[   81.843075][   T30] audit: type=1326 audit(1756570332.183:3699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5970 comm="syz.1.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d76e5ebe9 code=0x7ffc0000
[   81.871272][   T30] audit: type=1326 audit(1756570332.183:3700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5970 comm="syz.1.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d76e5ebe9 code=0x7ffc0000
[   81.902514][ T5953] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.903: lblock 2 mapped to illegal pblock 2 (length 1)
[   81.938651][ T5975] vxcan1 speed is unknown, defaulting to 1000
[   81.953464][ T5982] loop2: detected capacity change from 0 to 764
[   81.971430][ T5982] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   81.993339][ T5953] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.903: lblock 0 mapped to illegal pblock 48 (length 1)
[   82.013359][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.029877][ T5982] Symlink component flag not implemented
[   82.045740][ T5982] Symlink component flag not implemented (7)
[   82.053899][ T5953] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.903: Failed to acquire dquot type 0
[   82.069731][ T5978] vxcan1 speed is unknown, defaulting to 1000
[   82.077749][ T5953] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   82.110308][ T5953] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.903: mark_inode_dirty error
[   82.136970][ T5953] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[   82.153233][ T5985] netlink: 28 bytes leftover after parsing attributes in process `syz.1.911'.
[   82.173786][ T5953] EXT4-fs (loop3): 1 orphan inode deleted
[   82.185335][ T5953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.199757][   T29] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1)
[   82.201865][ T5995] loop0: detected capacity change from 0 to 1024
[   82.226540][ T5997] batadv_slave_1: entered promiscuous mode
[   82.233201][ T5995] EXT4-fs: Ignoring removed mblk_io_submit option
[   82.234675][ T5997] batadv_slave_1: left promiscuous mode
[   82.240520][ T5995] EXT4-fs: Ignoring removed bh option
[   82.254358][ T5995] ext3: Unknown parameter 'subj_type'
[   82.260781][   T29] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 0
[   82.284872][ T5995] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[   82.303254][ T5953] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.324892][ T5953] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz.3.903: Invalid inode table block 1 in block_group 0
[   82.333113][ T6006] loop2: detected capacity change from 0 to 512
[   82.356288][ T6006] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   82.357649][ T5953] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   82.381523][ T6006] EXT4-fs (loop2): mount failed
[   82.390923][ T5953] EXT4-fs error (device loop3): ext4_quota_off:7221: inode #3: comm syz.3.903: mark_inode_dirty error
[   82.458790][ T6011] loop2: detected capacity change from 0 to 1024
[   82.479475][ T6011] EXT4-fs: Ignoring removed orlov option
[   82.486556][ T5953] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   82.494315][ T5953] batman_adv: batadv0: Removing interface: batadv_slave_0
[   82.502878][ T5953] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   82.510578][ T5953] batman_adv: batadv0: Removing interface: batadv_slave_1
[   82.525138][ T6011] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.546031][ T6011] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.923: bg 0: block 88: padding at end of block bitmap is not set
[   82.585559][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.619448][ T6028] loop0: detected capacity change from 0 to 512
[   82.628259][ T6028] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[   82.633984][ T6030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.926'.
[   82.636714][ T6028] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #13: comm syz.0.929: iget: bad i_size value: 12154757448730
[   82.664562][ T6028] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.929: couldn't read orphan inode 13 (err -117)
[   82.686858][ T6028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.706059][ T6034] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   82.731458][ T6037] netlink: 'syz.3.932': attribute type 7 has an invalid length.
[   82.731789][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.740495][ T6037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.932'.
[   82.782961][ T6041] loop2: detected capacity change from 0 to 764
[   82.790781][ T6041] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   82.803268][ T6041] Symlink component flag not implemented
[   82.803363][ T6044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.935'.
[   82.809104][ T6041] Symlink component flag not implemented (7)
[   82.817941][ T6044] netlink: 20 bytes leftover after parsing attributes in process `syz.0.935'.
[   82.857979][ T6050] loop0: detected capacity change from 0 to 1024
[   82.865425][ T6050] EXT4-fs: Ignoring removed mblk_io_submit option
[   82.872024][ T6050] EXT4-fs: Ignoring removed bh option
[   82.872282][ T6050] ext3: Unknown parameter 'subj_type'
[   82.888300][ T6050] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[   82.950258][ T6064] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   83.029834][ T6070] 1ªX¹¦D: renamed from 
30ªX¹¦D (while UP)
[   83.036925][ T6070] A link change request failed with some changes committed already. Interface 
31ªX¹¦D may have been left with an inconsistent configuration, please check.
[   83.085071][ T6075] 1ªX¹¦D: entered promiscuous mode
[   83.090255][ T6075] 1ªX¹¦D: left allmulticast mode
[   83.100768][ T6075] 0ªX¹¦D: renamed from 
31ªX¹¦D
[   83.110243][ T6075] 0ªX¹¦D: left promiscuous mode
[   83.115517][ T6075] 0ªX¹¦D: entered allmulticast mode
[   83.126056][ T6075] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[   83.126733][ T6082] loop3: detected capacity change from 0 to 512
[   83.146100][ T6075] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6075 comm=syz.0.947
[   83.184029][ T6082] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.197079][ T6082] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   83.208189][ T6082] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.230807][ T6082] loop3: detected capacity change from 0 to 1024
[   83.241057][ T6094] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   83.245431][ T6082] EXT4-fs: Ignoring removed bh option
[   83.263444][ T6082] EXT4-fs: inline encryption not supported
[   83.270104][ T6082] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   83.284143][ T6097] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   83.303283][ T6097] loop2: detected capacity change from 0 to 512
[   83.311611][ T6082] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[   83.322861][ T6097] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.333997][ T6105] loop4: detected capacity change from 0 to 1024
[   83.335790][ T6097] ext4 filesystem being mounted at /syzcgroup/unified/syz2/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   83.350769][ T6082] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.950: lblock 2 mapped to illegal pblock 2 (length 1)
[   83.370559][ T6105] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.380008][ T6082] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.950: lblock 0 mapped to illegal pblock 48 (length 1)
[   83.413967][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.424824][ T6082] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.950: Failed to acquire dquot type 0
[   83.436960][ T6082] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   83.447117][ T6082] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.950: mark_inode_dirty error
[   83.451093][ T6082] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[   83.451132][ T6082] EXT4-fs (loop3): 1 orphan inode deleted
[   83.451490][ T6082] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.470549][ T3431] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1)
[   83.470769][ T3431] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:7: Failed to release dquot type 0
[   83.472845][ T6082] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.484592][ T6082] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz.3.950: Invalid inode table block 1 in block_group 0
[   83.485282][ T6082] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   83.485796][ T6082] EXT4-fs error (device loop3): ext4_quota_off:7221: inode #3: comm syz.3.950: mark_inode_dirty error
[   83.530666][ T6120] loop0: detected capacity change from 0 to 1024
[   83.645302][ T6120] EXT4-fs: Ignoring removed orlov option
[   83.672463][ T6120] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   83.710241][ T6120] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.963: bg 0: block 88: padding at end of block bitmap is not set
[   83.735554][ T6134] vxcan1 speed is unknown, defaulting to 1000
[   83.786800][ T6144] loop4: detected capacity change from 0 to 512
[   83.794864][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.834817][ T6144] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   83.852497][ T6144] EXT4-fs (loop4): mount failed
[   83.881897][ T6142] vxcan1 speed is unknown, defaulting to 1000
[   83.888217][ T6156] loop1: detected capacity change from 0 to 512
[   83.941095][ T6156] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   83.989620][ T6156] EXT4-fs (loop1): mount failed
[   84.010090][ T6168] loop4: detected capacity change from 0 to 764
[   84.023376][ T6168] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   84.079345][ T6174] loop3: detected capacity change from 0 to 1024
[   84.089452][ T6177] 1ªX¹¦D: renamed from 
30ªX¹¦D (while UP)
[   84.099820][ T6174] EXT4-fs: Ignoring removed orlov option
[   84.106120][ T6181] FAULT_INJECTION: forcing a failure.
[   84.106120][ T6181] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   84.122086][ T6181] CPU: 1 UID: 0 PID: 6181 Comm: syz.4.987 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   84.122118][ T6181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   84.122130][ T6181] Call Trace:
[   84.122137][ T6181]  <TASK>
[   84.122219][ T6181]  __dump_stack+0x1d/0x30
[   84.122286][ T6181]  dump_stack_lvl+0xe8/0x140
[   84.122302][ T6181]  dump_stack+0x15/0x1b
[   84.122316][ T6181]  should_fail_ex+0x265/0x280
[   84.122333][ T6181]  should_fail+0xb/0x20
[   84.122369][ T6181]  should_fail_usercopy+0x1a/0x20
[   84.122466][ T6181]  _copy_from_user+0x1c/0xb0
[   84.122492][ T6181]  ipv6_flowlabel_opt+0x95b/0x1230
[   84.122603][ T6181]  do_ipv6_setsockopt+0xb4e/0x2160
[   84.122626][ T6181]  ? kstrtoull+0x111/0x140
[   84.122645][ T6181]  ? avc_has_perm_noaudit+0x1b1/0x200
[   84.122731][ T6181]  ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0
[   84.122760][ T6181]  ipv6_setsockopt+0x59/0x130
[   84.122777][ T6181]  udpv6_setsockopt+0x99/0xb0
[   84.122823][ T6181]  sock_common_setsockopt+0x66/0x80
[   84.122847][ T6181]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   84.122874][ T6181]  __sys_setsockopt+0x184/0x200
[   84.122906][ T6181]  __x64_sys_setsockopt+0x64/0x80
[   84.122924][ T6181]  x64_sys_call+0x20ec/0x2ff0
[   84.122941][ T6181]  do_syscall_64+0xd2/0x200
[   84.123046][ T6181]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   84.123069][ T6181]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   84.123094][ T6181]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.123149][ T6181] RIP: 0033:0x7f1c80dfebe9
[   84.123162][ T6181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   84.123236][ T6181] RSP: 002b:00007f1c7f867038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   84.123262][ T6181] RAX: ffffffffffffffda RBX: 00007f1c81035fa0 RCX: 00007f1c80dfebe9
[   84.123273][ T6181] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003
[   84.123283][ T6181] RBP: 00007f1c7f867090 R08: 0000000000000029 R09: 0000000000000000
[   84.123293][ T6181] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001
[   84.123303][ T6181] R13: 00007f1c81036038 R14: 00007f1c81035fa0 R15: 00007ffc5ba6f1a8
[   84.123322][ T6181]  </TASK>
[   84.126256][ T6177] A link change request failed with some changes committed already. Interface 
31ªX¹¦D may have been left with an inconsistent configuration, please check.
[   84.171599][ T6174] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.274813][ T6189] netlink: 'syz.4.989': attribute type 7 has an invalid length.
[   84.323317][ T6174] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.984: bg 0: block 88: padding at end of block bitmap is not set
[   84.476535][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.495398][ T6196] loop4: detected capacity change from 0 to 1024
[   84.515506][ T6196] EXT4-fs: Ignoring removed orlov option
[   84.546245][ T6201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   84.562132][ T6201] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   84.586659][ T6201] loop3: detected capacity change from 0 to 512
[   84.595128][ T6196] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.631012][ T6201] EXT4-fs: Ignoring removed bh option
[   84.638097][ T6201] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   84.659504][ T6201] EXT4-fs (loop3): 1 truncate cleaned up
[   84.666195][ T6196] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.993: bg 0: block 88: padding at end of block bitmap is not set
[   84.670916][ T6201] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.702835][ T6222] loop1: detected capacity change from 0 to 512
[   84.714814][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.734837][ T6222] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   84.757332][ T6227] loop4: detected capacity change from 0 to 1024
[   84.766466][ T6222] EXT4-fs (loop1): mount failed
[   84.770055][ T6227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.801875][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.813184][ T6233] __nla_validate_parse: 11 callbacks suppressed
[   84.813200][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1004'.
[   84.831288][ T6217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.998'.
[   84.840597][ T6217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.998'.
[   84.871300][ T6238] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1006'.
[   84.880779][ T6238] 0ªX¹¦D: renamed from 
31ªX¹¦D (while UP)
[   84.889289][ T6238] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[   84.937017][ T6247] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1010'.
[   84.946420][ T6247] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1010'.
[   84.969200][ T6252] loop1: detected capacity change from 0 to 1024
[   84.973703][ T6247] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1010'.
[   84.984565][ T6252] EXT4-fs: Ignoring removed orlov option
[   84.986514][ T6247] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1010'.
[   85.015991][ T6252] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   85.022386][ T6247] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1010'.
[   85.038264][ T6247] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1010'.
[   85.053096][ T6252] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1012: bg 0: block 88: padding at end of block bitmap is not set
[   85.097895][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.137164][ T6271] loop4: detected capacity change from 0 to 512
[   85.151194][ T6266] loop1: detected capacity change from 0 to 1024
[   85.160698][ T6266] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.173919][ T6271] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   85.191446][ T6271] EXT4-fs (loop4): mount failed
[   85.211623][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.249654][ T6280] loop4: detected capacity change from 0 to 1024
[   85.256751][ T6280] EXT4-fs: Ignoring removed mblk_io_submit option
[   85.263290][ T6280] EXT4-fs: Ignoring removed bh option
[   85.268967][ T6280] ext3: Unknown parameter 'subj_type'
[   85.272665][ T6282] 9pnet_fd: Insufficient options for proto=fd
[   85.277962][ T6280] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[   85.300728][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.367847][ T6289] 1ªX¹¦D: entered promiscuous mode
[   85.375481][ T6289] 1ªX¹¦D: left allmulticast mode
[   85.385653][ T6289] 0ªX¹¦D: renamed from 
31ªX¹¦D
[   85.393672][ T6289] 0ªX¹¦D: left promiscuous mode
[   85.398749][ T6289] 0ªX¹¦D: entered allmulticast mode
[   85.408559][ T6289] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[   85.428976][ T6289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6289 comm=syz.3.1022
[   85.527017][ T6294] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   85.553335][ T6297] loop4: detected capacity change from 0 to 512
[   85.581212][ T6299] loop1: detected capacity change from 0 to 1024
[   85.590982][ T6297] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.600935][ T6299] EXT4-fs: Ignoring removed orlov option
[   85.611629][ T6297] ext4 filesystem being mounted at /222/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   85.629054][ T6299] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   85.648592][ T6299] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1026: bg 0: block 88: padding at end of block bitmap is not set
[   85.694398][ T6307] loop3: detected capacity change from 0 to 764
[   85.695523][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.712664][ T6307] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   85.727834][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.749734][ T6317] loop1: detected capacity change from 0 to 512
[   85.764276][ T6317] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   85.782114][ T6319] loop4: detected capacity change from 0 to 1024
[   85.785919][ T6317] EXT4-fs (loop1): mount failed
[   85.789256][ T6319] EXT4-fs: Ignoring removed orlov option
[   85.800542][ T6319] EXT4-fs: Ignoring removed nomblk_io_submit option
[   85.812334][ T6319] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   85.840843][ T6326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   85.853077][ T6326] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   85.870668][ T6326] loop1: detected capacity change from 0 to 512
[   85.879486][ T6326] EXT4-fs: Ignoring removed bh option
[   85.886837][ T6326] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   85.898992][ T6326] EXT4-fs (loop1): 1 truncate cleaned up
[   85.907427][ T6326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   85.910464][ T6319] loop4: detected capacity change from 1024 to 2
[   85.923177][ T6329] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[   85.953093][   T10] hid-generic 0000:0008:0001.0001: unknown main item tag 0x0
[   85.962406][   T10] hid-generic 0000:0008:0001.0001: unknown main item tag 0x0
[   85.971683][   T10] hid-generic 0000:0008:0001.0001: unknown main item tag 0x0
[   85.985652][   T10] hid-generic 0000:0008:0001.0001: hidraw0: <UNKNOWN> HID v0.80 Device [	] on ¹
[   86.014851][ T3306] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Out of memory
[   86.026132][ T3306] syz-executor: attempt to access beyond end of device
[   86.026132][ T3306] loop4: rw=145409, sector=2, nr_sectors = 2 limit=2
[   86.043343][ T3306] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[   86.052543][ T3306] EXT4-fs (loop4): I/O error while writing superblock
[   86.061505][ T3306] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error
[   86.075775][ T3306] syz-executor: attempt to access beyond end of device
[   86.075775][ T3306] loop4: rw=145409, sector=2, nr_sectors = 2 limit=2
[   86.091668][ T3306] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[   86.101624][ T3306] EXT4-fs (loop4): I/O error while writing superblock
[   86.109970][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.124200][ T3306] syz-executor: attempt to access beyond end of device
[   86.124200][ T3306] loop4: rw=145409, sector=2, nr_sectors = 2 limit=2
[   86.134965][ T6337] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[   86.140277][ T3306] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[   86.140432][ T3306] EXT4-fs (loop4): I/O error while writing superblock
[   86.140647][ T6323] kmmpd-loop4: attempt to access beyond end of device
[   86.140647][ T6323] loop4: rw=14337, sector=128, nr_sectors = 2 limit=2
[   86.182985][ T6323] Buffer I/O error on dev loop4, logical block 64, lost sync page write
[   86.201504][ T6339] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   86.232614][ T6341] 0ªX¹¦D: entered promiscuous mode
[   86.239164][ T6341] 0ªX¹¦D: left allmulticast mode
[   86.248553][ T6341] 1ªX¹¦D: renamed from 
30ªX¹¦D
[   86.256693][ T6341] 1ªX¹¦D: left promiscuous mode
[   86.264141][ T6341] 1ªX¹¦D: entered allmulticast mode
[   86.271308][ T6341] A link change request failed with some changes committed already. Interface 
31ªX¹¦D may have been left with an inconsistent configuration, please check.
[   86.293824][ T6341] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6341 comm=syz.0.1037
[   86.392648][   T30] kauditd_printk_skb: 377 callbacks suppressed
[   86.392663][   T30] audit: type=1400 audit(1756570336.833:4066): avc:  denied  { execmem } for  pid=6344 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   86.469925][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.483090][   T30] audit: type=1400 audit(1756570336.923:4067): avc:  denied  { mounton } for  pid=6348 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   86.556820][   T30] audit: type=1400 audit(1756570336.953:4068): avc:  denied  { setopt } for  pid=6350 comm="syz.2.1042" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   86.579761][   T30] audit: type=1400 audit(1756570336.963:4069): avc:  denied  { sys_module } for  pid=6348 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   86.603496][ T6348] vxcan1 speed is unknown, defaulting to 1000
[   86.606782][   T30] audit: type=1400 audit(1756570336.963:4070): avc:  denied  { create } for  pid=6353 comm="syz.1.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   86.640566][   T30] audit: type=1400 audit(1756570336.963:4071): avc:  denied  { read } for  pid=6353 comm="syz.1.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   86.640589][   T30] audit: type=1400 audit(1756570336.973:4072): avc:  denied  { create } for  pid=6356 comm="syz.2.1044" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   86.687322][   T30] audit: type=1400 audit(1756570336.983:4073): avc:  denied  { mounton } for  pid=6356 comm="syz.2.1044" path="/211/file0" dev="tmpfs" ino=1129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   86.715322][   T30] audit: type=1400 audit(1756570336.993:4074): avc:  denied  { unlink } for  pid=3309 comm="syz-executor" name="file0" dev="tmpfs" ino=1129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   86.743360][   T30] audit: type=1400 audit(1756570337.103:4075): avc:  denied  { write } for  pid=6353 comm="syz.1.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   86.800852][ T6373] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   86.813247][ T6367] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.983265][ T6374] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.009503][ T6348] chnl_net:caif_netlink_parms(): no params data found
[   87.022847][ T6367] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.044952][ T6374] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.075023][ T6367] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.115964][ T6348] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.125034][ T6348] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.135985][ T6348] bridge_slave_0: entered allmulticast mode
[   87.144400][ T6348] bridge_slave_0: entered promiscuous mode
[   87.152666][ T6374] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.165019][ T6367] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.177482][ T6348] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.185887][ T6348] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.193890][ T6348] bridge_slave_1: entered allmulticast mode
[   87.200936][ T6348] bridge_slave_1: entered promiscuous mode
[   87.216008][ T6374] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.236665][ T6348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.248919][ T6348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.275215][ T6348] team0: Port device team_slave_0 added
[   87.288857][ T6394] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.326511][   T42] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.340236][ T6348] team0: Port device team_slave_1 added
[   87.373688][ T6394] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.395448][   T42] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.417849][ T6348] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.425589][ T6348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.455508][ T6348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.469842][   T42] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.482721][ T6394] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.502824][ T6348] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.510312][ T6348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.540410][ T6348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.548579][ T6403] loop1: detected capacity change from 0 to 1024
[   87.562410][ T6401] netlink: 'syz.2.1054': attribute type 7 has an invalid length.
[   87.562882][ T6403] EXT4-fs: Ignoring removed orlov option
[   87.583072][ T6403] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   87.598071][   T42] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.613944][ T6394] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.637987][ T6403] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1055: bg 0: block 88: padding at end of block bitmap is not set
[   87.664530][ T6348] hsr_slave_0: entered promiscuous mode
[   87.672240][ T6348] hsr_slave_1: entered promiscuous mode
[   87.678643][ T6348] debugfs: 'hsr0' already exists in 'hsr'
[   87.684861][ T6348] Cannot create hsr debugfs directory
[   87.693276][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.705344][   T59] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.737732][   T59] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.786163][   T59] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.822527][   T59] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.834247][ T6414] 0ªX¹¦D: entered promiscuous mode
[   87.839584][ T6414] 0ªX¹¦D: left allmulticast mode
[   87.848699][ T6414] 1ªX¹¦D: renamed from 
30ªX¹¦D
[   87.862235][ T6414] 1ªX¹¦D: left promiscuous mode
[   87.867932][ T6414] 1ªX¹¦D: entered allmulticast mode
[   87.878858][   T59] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.880785][ T6414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6414 comm=syz.1.1057
[   87.890970][   T59] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.917595][   T59] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.942464][   T59] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.973190][ T6348] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   88.015745][ T6348] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   88.035359][ T6348] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   88.051529][ T6348] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   88.066087][ T6430] netlink: 'syz.0.1065': attribute type 7 has an invalid length.
[   88.079108][ T6428] vxcan1 speed is unknown, defaulting to 1000
[   88.084054][ T6434] loop3: detected capacity change from 0 to 1024
[   88.101980][ T6434] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.138205][ T6348] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.155451][ T6348] 8021q: adding VLAN 0 to HW filter on device team0
[   88.171893][ T6436] vxcan1 speed is unknown, defaulting to 1000
[   88.182460][ T2789] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.193048][ T2789] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.221176][ T2789] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.228432][ T2789] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.252892][ T6447] loop0: detected capacity change from 0 to 1024
[   88.264142][ T6447] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.1068: Failed to acquire dquot type 0
[   88.276539][ T6447] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[   88.293905][ T6447] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.1068: corrupted inode contents
[   88.306498][ T6447] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #13: comm syz.0.1068: mark_inode_dirty error
[   88.318179][ T6450] loop1: detected capacity change from 0 to 1024
[   88.321558][ T6450] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.325931][ T6447] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.1068: corrupted inode contents
[   88.353609][ T6447] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.1068: mark_inode_dirty error
[   88.369732][ T6447] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.1068: corrupted inode contents
[   88.394721][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.405375][ T6447] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[   88.481047][ T6447] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.1068: corrupted inode contents
[   88.494840][ T6447] EXT4-fs error (device loop0): ext4_truncate:4666: inode #13: comm syz.0.1068: mark_inode_dirty error
[   88.507214][ T6461] program syz.1.1069 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   88.525978][ T6447] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[   88.551194][ T6348] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.575972][ T6460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   88.585416][ T6447] EXT4-fs (loop0): 1 truncate cleaned up
[   88.592391][ T6460] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   88.623051][ T6447] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.641422][ T6460] loop3: detected capacity change from 0 to 512
[   88.661455][ T6460] EXT4-fs: Ignoring removed bh option
[   88.681407][ T6460] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   88.713043][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.713212][ T6460] EXT4-fs (loop3): 1 truncate cleaned up
[   88.763713][ T6480] capability: warning: `syz.0.1073' uses deprecated v2 capabilities in a way that may be insecure
[   88.846509][ T6348] veth0_vlan: entered promiscuous mode
[   88.929851][ T6348] veth1_vlan: entered promiscuous mode
[   88.947782][ T6348] veth0_macvtap: entered promiscuous mode
[   88.955890][ T6348] veth1_macvtap: entered promiscuous mode
[   88.969261][ T6348] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.988380][ T6348] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.002713][   T59] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.018333][ T6494] 0ªX¹¦D: renamed from 
31ªX¹¦D (while UP)
[   89.026837][ T6494] net_ratelimit: 2 callbacks suppressed
[   89.026888][ T6494] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[   89.051634][ T3431] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.069218][ T3431] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.088345][ T3431] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.145069][ T6511] loop1: detected capacity change from 0 to 512
[   89.162747][ T6511] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   89.194920][ T6511] loop1: detected capacity change from 0 to 1024
[   89.195071][ T6511] EXT4-fs: Ignoring removed bh option
[   89.195102][ T6511] EXT4-fs: inline encryption not supported
[   89.195652][ T6511] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   89.203341][ T6511] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[   89.204021][ T6511] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.1085: lblock 2 mapped to illegal pblock 2 (length 1)
[   89.204523][ T6511] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.1085: lblock 0 mapped to illegal pblock 48 (length 1)
[   89.204696][ T6511] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1085: Failed to acquire dquot type 0
[   89.204838][ T6511] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   89.204931][ T6511] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.1085: mark_inode_dirty error
[   89.204998][ T6511] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[   89.205086][ T6511] EXT4-fs (loop1): 1 orphan inode deleted
[   89.211947][   T29] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1)
[   89.212201][   T29] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 0
[   89.213823][ T6511] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.1085: Invalid inode table block 1 in block_group 0
[   89.214078][ T6511] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   89.214158][ T6511] EXT4-fs error (device loop1): ext4_quota_off:7221: inode #3: comm syz.1.1085: mark_inode_dirty error
[   89.332353][ T6526] FAULT_INJECTION: forcing a failure.
[   89.332353][ T6526] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   89.332381][ T6526] CPU: 1 UID: 0 PID: 6526 Comm: syz.3.1086 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   89.332480][ T6526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   89.332493][ T6526] Call Trace:
[   89.332499][ T6526]  <TASK>
[   89.332506][ T6526]  __dump_stack+0x1d/0x30
[   89.332528][ T6526]  dump_stack_lvl+0xe8/0x140
[   89.332545][ T6526]  dump_stack+0x15/0x1b
[   89.332560][ T6526]  should_fail_ex+0x265/0x280
[   89.332587][ T6526]  should_fail_alloc_page+0xf2/0x100
[   89.332665][ T6526]  __alloc_frozen_pages_noprof+0xff/0x360
[   89.332700][ T6526]  alloc_pages_mpol+0xb3/0x250
[   89.332731][ T6526]  alloc_pages_noprof+0x90/0x130
[   89.332809][ T6526]  pte_alloc_one+0x2d/0x120
[   89.332831][ T6526]  __pte_alloc+0x32/0x2b0
[   89.332865][ T6526]  handle_mm_fault+0x1c55/0x2c20
[   89.332892][ T6526]  do_user_addr_fault+0x636/0x1090
[   89.332954][ T6526]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   89.332992][ T6526]  exc_page_fault+0x62/0xa0
[   89.333056][ T6526]  asm_exc_page_fault+0x26/0x30
[   89.333073][ T6526] RIP: 0033:0x7fd1b24c0c46
[   89.333087][ T6526] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01
[   89.333131][ T6526] RSP: 002b:00007fd1b10664a0 EFLAGS: 00010246
[   89.333146][ T6526] RAX: 0000000000000001 RBX: 00007fd1b1066540 RCX: 0000000000000101
[   89.333159][ T6526] RDX: 0000000000000010 RSI: 0000000000000001 RDI: 00007fd1b10665e0
[   89.333171][ T6526] RBP: 0000000000000102 R08: 00007fd1a8c47000 R09: 0000000000000000
[   89.333184][ T6526] R10: 0000000000000000 R11: 00007fd1b1066550 R12: 0000000000000001
[   89.333196][ T6526] R13: 00007fd1b269da20 R14: 0000000000000000 R15: 00007fd1b10665e0
[   89.333216][ T6526]  </TASK>
[   89.333226][ T6526] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[   89.335731][ T6526] loop3: detected capacity change from 0 to 512
[   89.384868][ T6526] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   89.385100][ T6526] EXT4-fs (loop3): mount failed
[   89.555852][ T6535] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[   89.831655][ T6542] __nla_validate_parse: 22 callbacks suppressed
[   89.831669][ T6542] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1092'.
[   89.831746][ T6542] 1ªX¹¦D: renamed from 
30ªX¹¦D (while UP)
[   89.833306][ T6542] A link change request failed with some changes committed already. Interface 
31ªX¹¦D may have been left with an inconsistent configuration, please check.
[   90.080743][ T6561] loop0: detected capacity change from 0 to 512
[   90.092969][ T6561] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[   90.097068][ T6557] vxcan1 speed is unknown, defaulting to 1000
[   90.139884][ T6561] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #13: comm syz.0.1099: iget: bad i_size value: 12154757448730
[   90.175822][ T6561] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1099: couldn't read orphan inode 13 (err -117)
[   90.198637][ T6567] vxcan1 speed is unknown, defaulting to 1000
[   90.225623][ T6573] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1104'.
[   90.265404][ T6573] 0ªX¹¦D: renamed from gretap0 (while UP)
[   90.281850][ T6573] 0ªX¹¦D: entered allmulticast mode
[   90.287997][ T6573] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[   90.288001][ T6557] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1097'.
[   90.333751][ T6580] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1106'.
[   90.343011][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1106'.
[   90.417313][ T6592] loop5: detected capacity change from 0 to 1024
[   90.435373][ T6592] EXT4-fs: Ignoring removed mblk_io_submit option
[   90.444459][ T6592] EXT4-fs: Ignoring removed bh option
[   90.452224][ T6592] ext3: Unknown parameter 'subj_type'
[   90.470894][ T6596] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   90.494495][ T6592] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[   90.581016][ T6608] vxcan1 speed is unknown, defaulting to 1000
[   90.605039][ T6610] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1120'.
[   90.620241][ T6612] loop0: detected capacity change from 0 to 512
[   90.632681][ T6612] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[   90.636678][ T6610] 0ªX¹¦D: renamed from 
31ªX¹¦D (while UP)
[   90.655428][ T6612] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #13: comm syz.0.1121: iget: bad i_size value: 12154757448730
[   90.656853][ T6610] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[   90.690554][ T6612] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1121: couldn't read orphan inode 13 (err -117)
[   90.717770][ T6613] vxcan1 speed is unknown, defaulting to 1000
[   90.788899][ T6620] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1119'.
[   90.801871][ T6623] loop0: detected capacity change from 0 to 764
[   90.827256][ T6623] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   90.958600][ T6631] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1127'.
[   90.967910][ T6631] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1127'.
[   90.980150][ T6631] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1127'.
[   91.038187][ T6638] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   91.068955][ T6643] 0ªX¹¦D: renamed from 
31ªX¹¦D (while UP)
[   91.076651][ T6643] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[   91.118807][ T6645] vxcan1 speed is unknown, defaulting to 1000
[   91.137789][ T6653] loop0: detected capacity change from 0 to 512
[   91.170825][ T6653] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   91.190052][ T6653] EXT4-fs (loop0): mount failed
[   91.221109][ T6659] bridge_slave_1: left allmulticast mode
[   91.228676][ T6659] bridge_slave_1: left promiscuous mode
[   91.234811][ T6659] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.320022][ T6659] bridge_slave_0: left allmulticast mode
[   91.326527][ T6659] bridge_slave_0: left promiscuous mode
[   91.333575][ T6659] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.367715][ T6669] program syz.2.1138 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   91.477971][   T30] kauditd_printk_skb: 1926 callbacks suppressed
[   91.477985][   T30] audit: type=1326 audit(1756570341.903:5995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6673 comm="syz.0.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61a407ebe9 code=0x7ffc0000
[   91.497261][ T6654] vxcan1 speed is unknown, defaulting to 1000
[   91.512813][   T30] audit: type=1326 audit(1756570341.903:5996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6673 comm="syz.0.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61a407ebe9 code=0x7ffc0000
[   91.549565][   T30] audit: type=1326 audit(1756570341.903:5997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6673 comm="syz.0.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61a407ebe9 code=0x7ffc0000
[   91.579054][   T30] audit: type=1326 audit(1756570341.903:5998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6673 comm="syz.0.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61a407ebe9 code=0x7ffc0000
[   91.607047][   T30] audit: type=1326 audit(1756570341.903:5999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6673 comm="syz.0.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61a407ebe9 code=0x7ffc0000
[   91.635716][   T30] audit: type=1326 audit(1756570341.903:6000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6673 comm="syz.0.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61a407ebe9 code=0x7ffc0000
[   91.662054][   T30] audit: type=1326 audit(1756570341.903:6001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6673 comm="syz.0.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61a407ebe9 code=0x7ffc0000
[   91.687836][   T30] audit: type=1326 audit(1756570341.903:6002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6673 comm="syz.0.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61a407ebe9 code=0x7ffc0000
[   91.713741][   T30] audit: type=1326 audit(1756570341.903:6003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6673 comm="syz.0.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61a407ebe9 code=0x7ffc0000
[   91.740561][   T30] audit: type=1326 audit(1756570341.913:6004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6673 comm="syz.0.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f61a407ebe9 code=0x7ffc0000
[   91.749210][ T6678] bridge_slave_1: left allmulticast mode
[   91.774110][ T6678] bridge_slave_1: left promiscuous mode
[   91.780484][ T6678] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.830893][ T6678] bridge_slave_0: left allmulticast mode
[   91.836932][ T6678] bridge_slave_0: left promiscuous mode
[   91.842792][ T6678] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.982369][ T6676] vxcan1 speed is unknown, defaulting to 1000
[   92.024242][ T6684] 1ªX¹¦D: renamed from 
30ªX¹¦D (while UP)
[   92.094318][ T6684] A link change request failed with some changes committed already. Interface 
31ªX¹¦D may have been left with an inconsistent configuration, please check.
[   92.143037][ T6675] vxcan1 speed is unknown, defaulting to 1000
[   92.258785][ T6696] loop1: detected capacity change from 0 to 1024
[   92.293463][ T6700] loop3: detected capacity change from 0 to 764
[   92.302047][ T6700] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   92.364645][ T6709] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[   92.438594][ T6719] loop1: detected capacity change from 0 to 1024
[   92.447350][ T6715] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.469713][ T6719] EXT4-fs: Ignoring removed orlov option
[   92.496553][ T6719] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1155: bg 0: block 88: padding at end of block bitmap is not set
[   92.573602][ T6715] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.657902][ T6727] loop1: detected capacity change from 0 to 1024
[   92.675464][ T6725] loop3: detected capacity change from 0 to 512
[   92.689320][ T6731] 1ªX¹¦D: renamed from 
30ªX¹¦D (while UP)
[   92.701632][ T6725] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[   92.721590][ T6725] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #13: comm syz.3.1157: iget: bad i_size value: 12154757448730
[   92.724602][ T6731] A link change request failed with some changes committed already. Interface 
31ªX¹¦D may have been left with an inconsistent configuration, please check.
[   92.737239][ T6725] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1157: couldn't read orphan inode 13 (err -117)
[   92.772171][ T6715] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.819718][ T6743] program syz.1.1156 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   92.842505][ T6715] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.878699][ T6740] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=68 sclass=netlink_route_socket pid=6740 comm=syz.5.1160
[   92.919448][ T6745] loop3: detected capacity change from 0 to 764
[   92.940785][ T6745] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   92.941472][ T6753] loop0: detected capacity change from 0 to 1024
[   92.992679][   T59] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.041782][   T59] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.052949][   T59] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.067375][   T59] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.099776][ T6760] loop3: detected capacity change from 0 to 1024
[   93.102907][ T6757] vxcan1 speed is unknown, defaulting to 1000
[   93.114114][ T6760] EXT4-fs: Ignoring removed orlov option
[   93.128252][ T6766] loop1: detected capacity change from 0 to 164
[   93.135749][ T6766] iso9660: Unknown parameter 'À
'
[   93.144528][ T6760] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1166: bg 0: block 88: padding at end of block bitmap is not set
[   93.208661][ T6767] vxcan1 speed is unknown, defaulting to 1000
[   93.209645][ T6772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   93.226427][ T6772] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   93.252675][ T6776] 1ªX¹¦D: renamed from 
30ªX¹¦D (while UP)
[   93.260941][ T6776] A link change request failed with some changes committed already. Interface 
31ªX¹¦D may have been left with an inconsistent configuration, please check.
[   93.289788][ T6772] loop0: detected capacity change from 0 to 512
[   93.297866][ T6772] EXT4-fs: Ignoring removed bh option
[   93.305574][ T6772] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   93.329087][ T6772] EXT4-fs (loop0): 1 truncate cleaned up
[   93.342914][ T6781] netlink: 'syz.3.1173': attribute type 7 has an invalid length.
[   93.397540][ T6789] loop1: detected capacity change from 0 to 512
[   93.427411][ T6789] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   93.429400][ T6791] loop3: detected capacity change from 0 to 1024
[   93.461791][ T6789] loop1: detected capacity change from 0 to 1024
[   93.474008][ T6789] EXT4-fs: Ignoring removed bh option
[   93.479853][ T6789] EXT4-fs: inline encryption not supported
[   93.488312][ T6789] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   93.501743][ T6789] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[   93.513254][ T6789] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.1177: lblock 2 mapped to illegal pblock 2 (length 1)
[   93.528939][ T6789] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.1177: lblock 0 mapped to illegal pblock 48 (length 1)
[   93.544563][ T6789] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1177: Failed to acquire dquot type 0
[   93.558543][ T6789] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   93.612965][ T6789] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.1177: mark_inode_dirty error
[   93.629986][ T6789] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[   93.643530][ T6789] EXT4-fs (loop1): 1 orphan inode deleted
[   93.652934][ T3431] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1)
[   93.661000][ T6810] 9pnet_fd: Insufficient options for proto=fd
[   93.674521][ T3431] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:7: Failed to release dquot type 0
[   93.693298][ T6811] program syz.3.1178 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   93.707552][ T6789] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.1177: Invalid inode table block 1 in block_group 0
[   93.721100][ T6789] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   93.731845][ T6789] EXT4-fs error (device loop1): ext4_quota_off:7221: inode #3: comm syz.1.1177: mark_inode_dirty error
[   93.879048][ T6820] vxcan1 speed is unknown, defaulting to 1000
[   93.906673][ T6824] netlink: 'syz.0.1188': attribute type 7 has an invalid length.
[   93.946557][ T6821] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.012561][ T6821] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.025375][ T6820] IPv6: NLM_F_CREATE should be specified when creating new route
[   94.103847][ T6821] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.122600][ T6835] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.163692][ T6821] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.192374][ T6835] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.220486][   T59] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.233513][   T59] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.245369][ T3431] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.262396][ T6835] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.274748][ T3431] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.311968][ T6835] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.367314][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.384304][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.399210][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.412496][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.511228][ T6845] loop5: detected capacity change from 0 to 512
[   94.532116][ T6845] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   94.548535][ T6845] EXT4-fs (loop5): mount failed
[   94.621865][ T6856] netlink: 'syz.2.1199': attribute type 7 has an invalid length.
[   94.738944][ T6869] netlink: 'syz.5.1204': attribute type 21 has an invalid length.
[   94.776524][ T6874] loop5: detected capacity change from 0 to 512
[   94.787543][ T6868] vxcan1 speed is unknown, defaulting to 1000
[   94.814699][ T6874] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   94.853997][ T6874] EXT4-fs (loop5): mount failed
[   94.861152][ T6880] __nla_validate_parse: 15 callbacks suppressed
[   94.861166][ T6880] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1205'.
[   94.906997][ T6875] vxcan1 speed is unknown, defaulting to 1000
[   94.908484][ T6887] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1211'.
[   94.924092][ T6887] 0ªX¹¦D: renamed from 
31ªX¹¦D (while UP)
[   94.934042][ T6887] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[   94.953883][ T6888] netlink: 'syz.2.1210': attribute type 7 has an invalid length.
[   94.962612][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1210'.
[   95.009696][ T6894] loop1: detected capacity change from 0 to 764
[   95.027617][ T6897] FAULT_INJECTION: forcing a failure.
[   95.027617][ T6897] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   95.041981][ T6897] CPU: 1 UID: 0 PID: 6897 Comm: syz.0.1215 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   95.042010][ T6897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   95.042021][ T6897] Call Trace:
[   95.042028][ T6897]  <TASK>
[   95.042036][ T6897]  __dump_stack+0x1d/0x30
[   95.042062][ T6897]  dump_stack_lvl+0xe8/0x140
[   95.042121][ T6897]  dump_stack+0x15/0x1b
[   95.042135][ T6897]  should_fail_ex+0x265/0x280
[   95.042154][ T6897]  should_fail+0xb/0x20
[   95.042169][ T6897]  should_fail_usercopy+0x1a/0x20
[   95.042236][ T6897]  _copy_from_iter+0xd2/0xe80
[   95.042261][ T6897]  file_tty_write+0x31d/0x690
[   95.042292][ T6897]  ? __pfx_tty_write+0x10/0x10
[   95.042316][ T6897]  tty_write+0x25/0x30
[   95.042365][ T6897]  vfs_write+0x52a/0x960
[   95.042392][ T6897]  ksys_write+0xda/0x1a0
[   95.042462][ T6897]  __x64_sys_write+0x40/0x50
[   95.042479][ T6897]  x64_sys_call+0x27fe/0x2ff0
[   95.042500][ T6897]  do_syscall_64+0xd2/0x200
[   95.042526][ T6897]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   95.042601][ T6897]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   95.042641][ T6897]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.042662][ T6897] RIP: 0033:0x7f61a407ebe9
[   95.042679][ T6897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   95.042693][ T6897] RSP: 002b:00007f61a2ae7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   95.042713][ T6897] RAX: ffffffffffffffda RBX: 00007f61a42b5fa0 RCX: 00007f61a407ebe9
[   95.042733][ T6897] RDX: 0000000000001006 RSI: 0000200000001080 RDI: 0000000000000004
[   95.042747][ T6897] RBP: 00007f61a2ae7090 R08: 0000000000000000 R09: 0000000000000000
[   95.042757][ T6897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   95.042767][ T6897] R13: 00007f61a42b6038 R14: 00007f61a42b5fa0 R15: 00007ffcc5b286a8
[   95.042850][ T6897]  </TASK>
[   95.301518][ T6894] rock: directory entry would overflow storage
[   95.302600][ T6901] tc_dump_action: action bad kind
[   95.308464][ T6894] rock: sig=0x4f50, size=4, remaining=3
[   95.308487][ T6894] iso9660: Corrupted directory entry in block 6 of inode 1792
[   95.345501][ T6908] loop5: detected capacity change from 0 to 1024
[   95.371566][ T6899] Symlink component flag not implemented
[   95.382317][ T6894] Symlink component flag not implemented (129)
[   95.390452][ T6894] rock: directory entry would overflow storage
[   95.398419][ T6894] rock: sig=0x4f50, size=4, remaining=3
[   95.404030][ T6914] netlink: 'syz.2.1220': attribute type 1 has an invalid length.
[   95.405726][ T6894] iso9660: Corrupted directory entry in block 6 of inode 1792
[   95.448997][ T6914] bond1: entered promiscuous mode
[   95.455302][ T6914] 8021q: adding VLAN 0 to HW filter on device bond1
[   95.481975][ T6920] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1224'.
[   95.495917][ T6914] 8021q: adding VLAN 0 to HW filter on device bond1
[   95.504634][ T6914] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[   95.517267][ T6914] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[   95.528877][ T6927] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   95.538392][ T6927] IPv6: NLM_F_CREATE should be set when creating new route
[   95.548066][ T6927] IPv6: NLM_F_CREATE should be set when creating new route
[   95.558119][ T6927] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   95.569163][ T6914] bond1: (slave wireguard0): making interface the new active one
[   95.578387][ T6914] wireguard0: entered promiscuous mode
[   95.585742][ T6914] bond1: (slave wireguard0): Enslaving as an active interface with an up link
[   95.605096][ T6920] 0ªX¹¦D: renamed from 
31ªX¹¦D (while UP)
[   95.618611][ T6920] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[   95.649221][ T6926] vxcan1 speed is unknown, defaulting to 1000
[   95.663333][ T6927] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address
[   95.703989][ T6931] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1222'.
[   95.716617][ T6927] bond1: (slave wireguard1): Enslaving as a backup interface with an up link
[   95.746889][ T6941] loop1: detected capacity change from 0 to 1024
[   95.755967][ T6936] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.771763][ T6941] EXT4-fs: Ignoring removed orlov option
[   95.781149][ T6943] loop3: detected capacity change from 0 to 764
[   95.803265][ T6929] vxcan1 speed is unknown, defaulting to 1000
[   95.811503][ T6932] netlink: 766 bytes leftover after parsing attributes in process `syz.0.1225'.
[   95.857626][ T6943] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   95.897425][ T6936] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.935939][ T6941] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1227: bg 0: block 88: padding at end of block bitmap is not set
[   95.954904][ T6936] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.968221][ T6952] loop3: detected capacity change from 0 to 1024
[   96.006584][ T6960] netlink: 'syz.1.1232': attribute type 4 has an invalid length.
[   96.058451][ T6936] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.090419][ T6962] program syz.3.1231 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   96.188580][ T6968] hub 9-0:1.0: USB hub found
[   96.205857][ T6968] hub 9-0:1.0: 8 ports detected
[   96.223260][ T6970] loop1: detected capacity change from 0 to 1024
[   96.311027][ T6977] loop1: detected capacity change from 0 to 512
[   96.331572][ T6977] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[   96.352991][ T6977] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #13: comm syz.1.1237: iget: bad i_size value: 12154757448730
[   96.359411][ T6983] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1238'.
[   96.380120][ T6983] 0ªX¹¦D: renamed from 
31ªX¹¦D (while UP)
[   96.387620][ T6985] loop5: detected capacity change from 0 to 1024
[   96.397034][ T6977] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1237: couldn't read orphan inode 13 (err -117)
[   96.398392][ T6983] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[   96.544834][   T30] kauditd_printk_skb: 447 callbacks suppressed
[   96.544916][   T30] audit: type=1400 audit(1756570346.983:6447): avc:  denied  { read } for  pid=6979 comm="syz.5.1239" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   96.585740][ T6994] program syz.5.1239 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   96.600458][   T30] audit: type=1400 audit(1756570346.983:6448): avc:  denied  { open } for  pid=6979 comm="syz.5.1239" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   96.732329][   T30] audit: type=1400 audit(1756570347.173:6449): avc:  denied  { create } for  pid=6996 comm="syz.2.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   96.786668][ T6985] ==================================================================
[   96.800301][ T6985] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark
[   96.810413][   T30] audit: type=1400 audit(1756570347.193:6450): avc:  denied  { write } for  pid=6996 comm="syz.2.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   96.811230][ T6985] 
[   96.811239][ T6985] write to 0xffff8881198a0f94 of 4 bytes by task 6980 on cpu 1:
[   96.811255][ T6985]  xas_set_mark+0x12b/0x140
[   96.834108][   T30] audit: type=1400 audit(1756570347.193:6451): avc:  denied  { read } for  pid=6996 comm="syz.2.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   96.838038][ T6985]  __folio_start_writeback+0x1dd/0x440
[   96.847130][   T30] audit: type=1400 audit(1756570347.223:6452): avc:  denied  { allowed } for  pid=6992 comm="syz.3.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   96.855923][ T6985]  ext4_bio_write_folio+0x5ad/0x9f0
[   96.855956][ T6985]  mpage_process_page_bufs+0x4a1/0x620
[   96.855973][ T6985]  mpage_prepare_extent_to_map+0x786/0xc00
[   96.855990][ T6985]  ext4_do_writepages+0xa05/0x2750
[   96.856019][ T6985]  ext4_writepages+0x176/0x300
[   96.856035][ T6985]  do_writepages+0x1c3/0x310
[   96.856055][ T6985]  file_write_and_wait_range+0x156/0x2c0
[   96.856083][ T6985]  generic_buffers_fsync_noflush+0x45/0x120
[   96.856103][ T6985]  ext4_sync_file+0x1ab/0x690
[   96.856129][ T6985]  vfs_fsync_range+0x10d/0x130
[   96.856148][ T6985]  ext4_buffered_write_iter+0x34f/0x3c0
[   96.887032][   T30] audit: type=1400 audit(1756570347.223:6453): avc:  denied  { create } for  pid=6992 comm="syz.3.1242" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   96.893710][ T6985]  ext4_file_write_iter+0x383/0xf00
[   96.893746][ T6985]  iter_file_splice_write+0x663/0xa60
[   96.918501][   T30] audit: type=1400 audit(1756570347.223:6454): avc:  denied  { map } for  pid=6992 comm="syz.3.1242" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20080 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   96.924088][ T6985]  direct_splice_actor+0x153/0x2a0
[   96.924117][ T6985]  splice_direct_to_actor+0x30f/0x680
[   96.931095][   T30] audit: type=1400 audit(1756570347.223:6455): avc:  denied  { read write } for  pid=6992 comm="syz.3.1242" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20080 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   96.938658][ T6985]  do_splice_direct+0xda/0x150
[   97.108256][ T6985]  do_sendfile+0x380/0x650
[   97.114353][ T6985]  __x64_sys_sendfile64+0x105/0x150
[   97.121399][ T6985]  x64_sys_call+0x2bb0/0x2ff0
[   97.126809][ T6985]  do_syscall_64+0xd2/0x200
[   97.133339][ T6985]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.140139][ T6985] 
[   97.144271][ T6985] read to 0xffff8881198a0f94 of 4 bytes by task 6985 on cpu 0:
[   97.152664][ T6985]  filemap_write_and_wait_range+0xfc/0x340
[   97.159478][ T6985]  kiocb_write_and_wait+0x7a/0x110
[   97.165460][ T6985]  __iomap_dio_rw+0x52f/0x1250
[   97.172006][ T6985]  iomap_dio_rw+0x40/0x90
[   97.177324][ T6985]  ext4_file_read_iter+0x20f/0x290
[   97.183321][ T6985]  copy_splice_read+0x442/0x660
[   97.188828][ T6985]  splice_direct_to_actor+0x290/0x680
[   97.195782][ T6985]  do_splice_direct+0xda/0x150
[   97.200890][ T6985]  do_sendfile+0x380/0x650
[   97.205755][ T6985]  __x64_sys_sendfile64+0x105/0x150
[   97.211584][ T6985]  x64_sys_call+0x2bb0/0x2ff0
[   97.216837][ T6985]  do_syscall_64+0xd2/0x200
[   97.221561][ T6985]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.231710][ T6985] 
[   97.234326][ T6985] value changed: 0x0a000021 -> 0x04000021
[   97.241437][ T6985] 
[   97.244374][ T6985] Reported by Kernel Concurrency Sanitizer on:
[   97.251055][ T6985] CPU: 0 UID: 0 PID: 6985 Comm: syz.5.1239 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   97.263383][ T6985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   97.275012][ T6985] ==================================================================
[   97.431359][   T30] audit: type=1400 audit(1756570347.873:6456): avc:  denied  { create } for  pid=6996 comm="syz.2.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   98.846254][ T2789] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.858589][ T2789] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.874154][ T2789] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.885204][   T42] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.571788][ T3390] page_pool_release_retry() stalled pool shutdown: id 23, 51 inflight 60 sec