last executing test programs:

3m45.509724768s ago: executing program 3 (id=1419):
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4)
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000230000008500000050"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00\b\x00'/18, @ANYRES32=0x0, @ANYBLOB="00000000040000000000000000"], 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x2000005, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x1, 0xf0, 0x4}, 0x1}, 0x18)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$can_j1939(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000003c0)="fd42b9a7899170417b523f49b960f80b78d6dc", 0x13}, 0x1, 0x0, 0x0, 0x24008085}, 0x4000000)
sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x1}, 0x4048081)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050)

3m44.463065867s ago: executing program 3 (id=1429):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095", @ANYRES32=r0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeb5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async)
mkdir(&(0x7f0000000140)='./control\x00', 0x5) (async)
r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
accept4$vsock_stream(r2, 0x0, 0x0, 0x80800)
getpeername(r2, &(0x7f00000001c0)=@caif=@rfm, &(0x7f0000000300)=0x80) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000840)={0x24, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004001}, 0x0)
rmdir(&(0x7f0000000100)='./control\x00')

3m44.395841994s ago: executing program 3 (id=1430):
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x45bd}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

3m44.395105664s ago: executing program 3 (id=1431):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x204000, &(0x7f0000001600)={[{@debug}, {@min_batch_time={'min_batch_time', 0x3d, 0x4ad}}, {@data_err_ignore}, {@nobarrier}, {@inlinecrypt}, {@orlov}, {@nogrpid}, {@discard}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000c40)="$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")
socket(0x10, 0xa, 0x0)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000640)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000340)='\b', 0x1}], 0x1, 0x7, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48)
r4 = socket(0x10, 0x3, 0x6)
r5 = socket(0x10, 0x3, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000007c0), 0x8)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x10, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x5afe, 0x7, 0x4}}}}]}, 0x40}}, 0x20008010)
r7 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000000080))

3m42.847382752s ago: executing program 3 (id=1439):
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4)
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000230000008500000050"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00\b\x00'/18, @ANYRES32=0x0, @ANYBLOB="00000000040000000000000000"], 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x2000005, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x1, 0xf0, 0x4}, 0x1}, 0x18)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$can_j1939(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000003c0)="fd42b9a7899170417b523f49b960f80b78d6dc", 0x13}, 0x1, 0x0, 0x0, 0x24008085}, 0x4000000)
sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x1}, 0x4048081)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050)

3m42.538311052s ago: executing program 3 (id=1442):
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x14)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5, <r6=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x26)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="c5ff000600000000003b4c460008004a74", @ANYRES32=0x0, @ANYRES8=r7], 0x24}, 0x1, 0x0, 0x0, 0x20008858}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x9}, {0x0, [0x30, 0x5f, 0x5f, 0x2e, 0xfcdb08892e9ad7a1, 0x30, 0x2e]}}, &(0x7f0000000180)=""/17, 0x21, 0x11, 0x1, 0x80000001}, 0x28)
r8 = socket(0x400000000010, 0x3, 0x0)
setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
socket(0x10, 0x3, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r9}, 0x18)
r10 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0)
r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x840, 0x0)
ioctl$SNAPSHOT_S2RAM(r11, 0x330b)
r12 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0xfd, 0x3, 0x2, 0x5c, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x40, 0x4, 0x4}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r12, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0})
read$ptp(r10, &(0x7f0000000280)=""/176, 0xb0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100)
ioctl$TCSBRKP(r1, 0x5425, 0x0)

3m42.537570742s ago: executing program 32 (id=1442):
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x14)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5, <r6=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x26)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="c5ff000600000000003b4c460008004a74", @ANYRES32=0x0, @ANYRES8=r7], 0x24}, 0x1, 0x0, 0x0, 0x20008858}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x9}, {0x0, [0x30, 0x5f, 0x5f, 0x2e, 0xfcdb08892e9ad7a1, 0x30, 0x2e]}}, &(0x7f0000000180)=""/17, 0x21, 0x11, 0x1, 0x80000001}, 0x28)
r8 = socket(0x400000000010, 0x3, 0x0)
setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
socket(0x10, 0x3, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r9}, 0x18)
r10 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0)
r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x840, 0x0)
ioctl$SNAPSHOT_S2RAM(r11, 0x330b)
r12 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0xfd, 0x3, 0x2, 0x5c, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x40, 0x4, 0x4}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r12, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0})
read$ptp(r10, &(0x7f0000000280)=""/176, 0xb0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100)
ioctl$TCSBRKP(r1, 0x5425, 0x0)

2.72652828s ago: executing program 4 (id=3815):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8})
syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000500)=@known='security.selinux\x00', 0x0, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0, 0x20}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0)
syz_read_part_table(0x5c1, &(0x7f0000000a00)="$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")
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300))
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r6=>0x0)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340))
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540))
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

2.450865036s ago: executing program 2 (id=3819):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.423064809s ago: executing program 2 (id=3820):
socket$key(0xf, 0x3, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x94)
open_tree(0xffffffffffffff9c, &(0x7f0000000540)='.\x00', 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000003700"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50)
lgetxattr(0x0, &(0x7f0000000500)=@known='system.posix_acl_default\x00', 0x0, 0x0)

2.30436337s ago: executing program 2 (id=3821):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_usbip_server_init(0x2)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380))
openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x200, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5f}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b000000080000000c000000fbbfffff01"], 0x50)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x30120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x2003f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000600)=<r3=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r4, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}})
io_uring_enter(r1, 0x3516, 0xf4f5, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)

2.160625034s ago: executing program 1 (id=3824):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18)
unshare(0x2040400)
r2 = socket(0x10, 0x803, 0x0)
bind$packet(r2, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400048000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x5b, 0x0, &(0x7f0000000180)="c4fd10fc3aa9f14d3ebbfdb956f7745fd63edbfd9a4a6077fd1b72ab3d9c53b7a8df778863728d7655ddabcb7803dec80889835f00051f07e22f25b22f1686427099cf3f63f4fa3a75e785d7e099ec4a3753c360bf296c803dcd99", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x780, &(0x7f0000000040)={0x0, 0xca5, 0x1c881, 0x1, 0xd1})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='map_files\x00')
r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0db7)
fchown(r4, 0x0, 0xee01)
write$P9_RLINK(r4, &(0x7f0000000000)={0x7, 0x47, 0x1}, 0x7)
socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001ff, 0x2)
r6 = dup(r5)
getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000100)={0x0, @broadcast, @dev}, 0x0)
ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x2, 0x5, 0x0, 0x0, 0x0})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x4}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10)
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r10=>0x0})
bind$can_j1939(r9, &(0x7f00000000c0)={0x1d, r10}, 0x18)
connect$can_j1939(r9, &(0x7f0000000140)={0x1d, r10, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18)
sendmmsg(r9, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)

2.027752117s ago: executing program 0 (id=3826):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a700000008000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10)
syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000280)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], <r3=>0x0, 0xb0, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000500), &(0x7f0000000600), 0x1f, 0xc5, 0x8, 0x8, &(0x7f0000000640)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0xffffffffffffffff, 0x26, 0x0, 0x0, 0x0, 0xb12e36d}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{}, &(0x7f0000000600), &(0x7f0000000780)='%pi6   \x00'}, 0x20)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffff, 0x8}, 0xc)

1.921674897s ago: executing program 1 (id=3827):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x88}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500"], 0x7c}}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0)

1.844767044s ago: executing program 4 (id=3828):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = syz_create_resource$binfmt(&(0x7f0000000200)='./file0\x00')
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
io_setup(0x3ff, &(0x7f0000000500)=<r5=>0x0)
io_submit(r5, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x500, 0x0, 0x0, 0x5, 0x0, r3, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000001c0)='m', 0xfffffdfc}])
openat$binfmt(0xffffffffffffff9c, r2, 0x41, 0x1ff)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="f1", 0x1}], 0x1)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r8 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r9, 0x0, 0x3}, 0x18)
unshare(0x68040200)
socket(0x28, 0x80805, 0x3ff)
syz_read_part_table(0x5c2, &(0x7f0000000e00)="$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")
r10 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r10, 0x29, 0xc8, &(0x7f0000000340), 0x4)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r12}, 0x18)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0xffffffffffffffff, 0xfd5c)
io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r13})
setsockopt$MRT6_FLUSH(r10, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000dd3701043024a3ffadf1f18d00fc00000000070000", @ANYRES32=0x0, @ANYBLOB="00000000000200001800128008000100736974000c000280080002000a01010208000300", @ANYRES32=r7, @ANYBLOB], 0x40}, 0x1, 0xd, 0x0, 0x4000000}, 0x0)

1.806488248s ago: executing program 0 (id=3829):
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x14)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4, <r5=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x26)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="24000080b9a043c47b19e00e45024ed00d3127d7ad9cfc2992413e3dcd52b487ea40d0bf7548348dc5d1ea4776a2f43e9de275ef67780e18997024bdd59dd89da5137dde9193bab5f7b97e3c2490ab7b7f2b193980f4541b03014453668998c0c18eef91834e3ea100fed2a266b4788a687b127591012aaf6d5417f438b50ec14e609da1716d729febd665834d076f0a9b822e5ae9134913e26f06000000000000002a2790c811303ce73fc7b3bff7ffffffffffffffb6c22167ffb7f7090c89f005b5543a0e4b5ab0fdbc84bf2646482842a0d785ce59b74ccf31a343689cf6351c78b26d9599c339885022f5680079b6e7f0e69effeccde4ffcff99920565d6c1fa7af0e0ddba51ae6f172cbe1f564324c5421e1a5726eb7bdb8a3343e445180917d10f7e3d3930c5c497f01", @ANYRES16=r3, @ANYBLOB="c5ff000600000000003b4c460008004a74", @ANYRES32=0x0, @ANYRES8=r6], 0x24}, 0x1, 0x0, 0x0, 0x20008858}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, &(0x7f0000000180)=""/17, 0x0, 0x11, 0x1, 0x80000001}, 0x28)
r7 = socket(0x400000000010, 0x3, 0x0)
setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
socket(0x10, 0x3, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r8}, 0x18)
r9 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0)
r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x840, 0x0)
ioctl$SNAPSHOT_S2RAM(r10, 0x330b)
r11 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0xfd, 0x3, 0x2, 0x5c, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x40, 0x4, 0x4}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r11, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0})
read$ptp(r9, &(0x7f0000000280)=""/176, 0xb0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100)
ioctl$TCSBRKP(r0, 0x5425, 0x0)

1.804354288s ago: executing program 1 (id=3830):
r0 = memfd_create(&(0x7f0000000280)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw|Y\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xe2m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf0\x92\xeb&wZ\xdc\xa3\xa5\xcc\x14FZN\x98%[p\x989)]\xa69\xfc#\xb40\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3\xeam\xf3N\x8f\xc4\xef\xa0\xee\xe6n\x18\xb2\xd0\xb2\x9c\xf0\x98\x86o\x17\x90(\a\xda\xe6:k\xff\xb9h\x06\xac\x81 \x17\xb2\xae\xfb\x92\x80\xbd]\xc3\xe0c\xcf\xb8\xd3\x89\x03w\r\xce\xcc\xe9hlp\xe3\x1c_\x14\x00W', 0x2)
r1 = dup(r0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000039c0)={0x0, <r2=>0x0})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540)
r4 = getuid()
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000300)=<r5=>0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000006fc0)=ANY=[@ANYBLOB="c4000000240000022bbd7000ffdbdf25040035800800630005000000a800f3800400378011a0f0a81e06c2dac4bade597f9c825c7fb3a08a708e548ef54fdd5b8bf171144387c47ea7846916605a3dfdad90511a9d050030559c02ac305bf5b77a60ce8835e981fd31cad2a5660cfa7e6e73e98c3df4759b72940a27414801a3cd50baf8f37f8335bd1a8e43ec12f0cb22cc347811e9b9d684ad753459c000156a7d29530400458004008c800f00b900645d20f2c7ee04a8fd80720008004400", @ANYRES32=r5, @ANYBLOB], 0xc4}, {&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x10a0}, {&(0x7f00000000c0)={0x14, 0x32, 0x10, 0x70bd2a, 0x25dfdbfc, "", [@nested={0x4, 0x129}]}, 0x14}, {&(0x7f0000004640)={0x2a0, 0x23, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x28e, 0xd1, 0x0, 0x1, [@typed={0x8, 0x40, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x155, 0x4, 0x0, 0x1, [@generic="6bb5aa3f898cf17f71012064f7756e994fb3691b4433d02765924c25c011275cb1b85906d31f19d4e8fc5410635606f9131097434c69ab2826808d217d65", @generic="62b791538d7140ae789b7e270e519e8863553636117047a20cdc5ea37b058ca757b094ba532f8f68ca272a1d408e7b958f06ac354f83e4d3c305b42293ba7ebe242780026fb5ccbcd7798e324e0c1be77f14edb7aa4137a1f5c6eaad347201bfd1ade0d588037c82413e1ad35dda61660e9b", @typed={0x8, 0x140, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0x2b, 0x0, 0x0, @uid=r4}, @generic="3eb2e8505504906af200735cc4123838d60ab5db5846fa87e4d73cd3af331a86bbbd7257756e63a8063a9b09074b64c535e26074f8fe81eba32e571c38abb5a3383cd88bf73b21130e531c2c6117c1b2c0efd480bf04fc120117e962c99d6560b7b0195fe2bb8207566566b43ef3569688c37c91a4fa142c734dcb560e0d3270fb037498dbb2e7393e10f42c9004c595a3"]}, @generic="331f1a0070e46723649044f88cb4793daa76ac0184cd7917ebbe00a56f775e7837e2bc47080b9cbab85a1070cd730218b74030bdcd5bfad0d8415be27b8a5c537518c857d4780bdaa1da", @generic, @typed={0xdf, 0x67, 0x0, 0x0, @binary="d759a0e68f49180a5054395a7176842c235c92e4d9da514b6ec199b4bbebf4789e204c5877a52fc69db601a10848c22dcb70ef73691fa5873ad1621dd28aa51639010b2ccc1866357a38e5e084facc38b7e6f7511337e1c257ab6f1a2b1915d6a600d0bfa10eb4d7f8a3f99eb9d37eddcdb9e7a093a0f2b8c0c6d4929574695970ea356066f81dc9af5122424ae33a2a3d513843144e78a136c19164d974a78542612a4a071ee942f5ebbef13556206b90b444f5d550f7c3ba2831e2b9e91828bae19f6808d7b698e4fba7c4c74f3d60fc6ec5b28bc930520c91e0"}]}]}, 0x2a0}], 0x4}, 0x4)
getresgid(&(0x7f0000003a40), &(0x7f0000003a80)=<r6=>0x0, &(0x7f0000003ac0))
r7 = syz_clone(0x4084000, &(0x7f0000003b00)="45069b9bad352ba81912d432d109faf99d30d642a0da6cd83662f482bb224e9a5b9aa6c3d952452602a08c7a6fd5254eda7528f7b8696575c3e9cca53a8d5da40c57d2", 0x43, &(0x7f0000003b80), &(0x7f0000003bc0), &(0x7f0000003c00)="203aa598d7")
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000c80)='./cgroup.cpu/cgroup.procs\x00', 0x22000406, &(0x7f0000000280)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@dax_always}, {@stripe={'stripe', 0x3d, 0x1f5}}, {@grpjquota, 0x2e}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@resuid={'resuid', 0x3d, r8}}, {@jqfmt_vfsv1}, {@max_batch_time={'max_batch_time', 0x3d, 0xc506}}], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000740)="$eJzs3MtvG0UYAPBvN4++m7SURx9QQ0FEFJImLdADh4JA6gUJCQ7lGNJQlaYtaoJEq4oGhMoR8RcARyQkTlw4gYQQcAJxhTtCqlAvLRxQ0Nq7ybqxU8d5GOrfT7IzszvrmW93xx7vZB1A16pkT0nE1oj4NSIGatn6ApXan5vXL0/8df3yRBJzcy//mVTL3bh+eaIoWmy3Jc8MpRHp+0nsbVDv9MVLZ8anpiYv5PmRmbNvjkxfvPTE6bPjpyZPTZ4bO3r0yOHRp58ae3JV4sziurHnnfP7dh9/9aMXJ+bitR8+z9q7NV9fjqNmcMV1VqISc7mFpf3V50dW/Or/LdtK6aS3gw1hWXoiIjtcfdX+PxA9sXDwBuKF9+Yz33aogcCayT6bdixa2pP/Tec/v4A7UaKPQ5cqPvGz77/FYz3HH5127dnsebIa/838UVvTG2n2XXaw9o29p8n2x1ZY/9aIODH798fZIxpehwAAWF1fZ+OfxxuN/9K4p1Ruez6HMhgRByNiZ0TcFRG7IuLuiGrZeyPivmXWX7klv3j88/OmtgJrUTb+eyaf26of/6V5iWQ+t60af1/y+umpyUP5PhmKvg1ZfnSJOr55/pcPm62rlMZ/2SOrvxgL5u34o3dD/TYnx2fGVxBynWvvRuzpbRR/Mj8TkO2B3RGxp43Xz/bZ6cc+25elt29ZvP728S9hFeaZ5j6NeLR2/GfjlvgLSa2mZvOTIxtjavLQSHFWLPbjT1dfKuf7Sum6+De2FtPGdoNtIDv+mxue/3n8RTco5munl1/H1d8+aPqdZvHxT+LEbLlE7fxPS0uy878/eaWa7s+XvT0+M3NhNKI/X1C3fGxh2yJflM/iHzrQuP/vjPjnk3y7vRGRncT3R8QDEbE/b/uDEfFQRBxYIv7vn3v4jaX3UJvn/yrI4j+51PGPGEzK8/VtJHrOfPdVs/pbe/87Uk0N5Utaef9rtYEr2XcAAADwf5FW56CTdLhIly5O7YrN6dT56ZmDlXjr3MnaXPVg9KXFla6B0vXQ0fzacJEfuyV/OCJ2VP/TaFM1PzxxfmpbJwMHqvfq1PX/SNPh4dq635v90wtw51jWPFr57sAvvlz9xgDryv2a0L30f+he+j90L/0fulej/n8l4mYHmgKsM5//0L30f+he+j90L/0futLiW+KLn1tp507/hcTO4yvafM0TcwNr8sqzy9+qZ40ijfKPdjRNJBHRXhWRLl2mv4XaO5ZIb1vmWJu7ZRmJ/XliQ0S0utWVddurnX1fAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWC3/BgAA//+NJdz0")
r9 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0)
fsmount(r9, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x1000410, &(0x7f0000000140)={[{@inlinecrypt}, {@quota}, {@barrier}, {@jqfmt_vfsv0}, {@resgid}, {@inlinecrypt}, {@bh}, {@stripe={'stripe', 0x3d, 0x3}}]}, 0x6, 0x507, &(0x7f0000000680)="$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")
r10 = getpid()
r11 = getuid()
stat(&(0x7f0000003c40)='./file2\x00', &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0})
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000003d00)=<r13=>0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003ec0)=[{{&(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000200)="519ed54e8a0fafefdfbfb3be0e0ada1445c6bb1c004ab83d41eb125df5ff7aa7c9d9749b187b4e88999d57fce1", 0x2d}], 0x1, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000580)="9b0789be09023159a9e8cf04623fbb8faf85e3971a7d1c539838a8458a71c1129777e23dc24267f75cbab319ab61534be03bf460e0c5eb479b5e6fd338897c32ec3cddb8f9d1b93032ce726ed26bc9fed3cf90248c2ef5d902", 0x59}, {&(0x7f0000000600)}, {&(0x7f0000000680)="5f5bb5c60eb679cf88f47840a7ee9d611eb3d8944a72a4fc1fe7350cc27ffbf004b3a1b1ba9879bf50fc5917f51c1d624153072657ba2eb887d308a0a1af992f5d646a377a1ba82056314e3b388c48c7fd4caca1b4aafb51da", 0x59}, {&(0x7f0000000700)="230e61dcf65b3c627b32fd4a22e0397ff708d898ca54f6a3b93303ef0ec81580df60a2e011c267e34e2acfe76e585e560621b3899f2c89e4b6e3277833e9426dfb404a4cc1177d6d35cf5507eabbfdf54b2ea47519bcd9bd4d629480c57b1464f1b4f419ea855f6f48c28814efbf7beb50e6305061ca8c0c4d63f701a264bd9bd73a43715801921f2b78487443884f6dbf8fc312c5dc1e94a1f3e3150099c770eb3f9bd8b36e0a0378b92d078dc9978641e89a1679dbe9111731090c2fec69cec1c947b76328d607abd17c377802ae02cb7e3200647f74a9e5e7c699814b713248d33c", 0xe3}, {&(0x7f0000000800)="efc5783c97f91302e9a346bee3234365b8a9b6ef3717d6b4ed45da9e6f42a4f62474035777767e2b1ce732ae1e10ccd51af0208a3dd85f68a7f49bf85290d60c3f0900af327d96d8a2891bf8dcf069ab60bfe03012971a76ae4e", 0x5a}], 0x5, &(0x7f0000001140)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x2c, 0x1, 0x1, [r0, r1, r0, r1, 0xffffffffffffffff, r0, r0]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r1, r0, r0, r1, r0]}}], 0x118, 0x810}}, {{&(0x7f0000001280)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002700)=[{&(0x7f0000001300)="cac33682dbf0bc9bf581a1ec4bd878c3205ce7791ae44785", 0x18}, {&(0x7f0000001340)="42e10abbd65b1f1433b0995b51c8d82b287f9be20b6be1d9d2453f17356536ef85e9ae28c9a5c8d8adc04b79cae3aafa1c76d131ecb5b6a59a32082e18c74d8c96db33d207d8095dd6b3e6d1d98186e5fee5f9a1343514a2ed5c8f244504e40842a862959c36567fd4cb371b21518f3607c375c5fdebec8f95fded883d3f2e01aaac34b090f763e7cfa44fa9bb3f45fe77e66115379fb4f518f514bc4e34a7076a401d12ed5389b2694a043c6f9c0e463a5e118e558cdcf9c5511bf6c1d4dad88b2af01ec0a4b1e8efeed5c5aa91daac3c4853bf5e4fcb3eff8c53ad4ee0741c9b", 0xe1}, {&(0x7f0000001440)="e080cade79b7f2df320ffa279111e00b033ace8f38c259e98dfed94c104d88bc71cdfb33304d260d4d27d0e6f3b8bdf9374528364e4e4e68308f2586edb49aafd2d6e27f8311977813798fd3e5898d7d1806ccde75381cd76ae39e24c730156890077af9cac639c59943d0bd1832bdd707d302995ca64fdbc46c4429ef9596fa6496a90f71fad7addae9b5154a3e7875890524c0cd007ebfde3278ccc875b4aedd816fed1291364d3af49826c95271175ac49ac7ab3b8d3760f75883784783dfc04e339215691bdfd96c765f565e6072954542186185527bb808c1448d1adae371784c858f80a5596d94767ee915fd7cc21fee5f9f2e7cae8bb2532edca6a58715e2076b863f68c3d3eb3dce4ce7fa793fb548ce65869cdc753f7763570572c8803a46b45fb8908a209f4bdcd03a808f5b9da5492fee9cabbc12294b724fe74ff0ba7be106146c6eed91cfbe3f85f77e5b70a779a0384a86576bcafe75ab84a548db3c4eba66f4b7ccec858b6fa0a9d989eceff413af0dbe52ee24129f23ee943327e73549f502a0a39d976ca88b77a16645707b55b1120c1210d93afff967421a51ddd281197949a3892c944299a7a06494270a1f1bc04e1487802e01fd2578ef6322717a910d66b9e6dd576872e8b714d5f121eea48e60e3be75b907b8f4fca9ecc517e398a174cc483fc80703dfd8ce5d08e2837d08e2999b95202a1ec68d732606bd04eed837edd1b0ca153ebcdc27cad81f609bfcb6f87bf2a70f69f9e8ccc868b1196ac30b788386b1c26893c8555c330b067aae525ffb78d706c15840330c85953804b4473c96bf6693c50f469fbbf97a6e59c1ba4f61ae6a2e6bebd8ff264e213192177c9551925c1056b687e0166b7510134f82b5a53895d9f85d1aa7851f1f413abc5ae622d518cb5d1d25da5b5e3584985d3330c9238421423a4a7848c4f48dec2a2585a2e4bec48c777f48e630530a9df0e42c42adf4c5580237a8de8df2d059e05991e5459961bfd42c4cf1fd7e18ca6dd1d2fd10ccecfe6c4d4ebee5621cc552694999d4bff7802d7d02cdac921862587fa64414073ebbb1bd593d4a1b74b9ca43d731c25f739b3520520eeeb2f99126392f46542912981d7d2a5b5ced897c7ad6236edb48066fdc8f2d0ee0c9376be57c1339c813cc9c4b0541a2e2c38babd41be6d57962ec033d1b60216c25c4b4b340f990c59b0d384d2428a6277fbad71d95a68c30fa5228e42a8d47f4b4a7cd6e8dbc0db5e961831f37c227cbcb2da09e6f22018108cf5987b8b84dce4f0edee5786d0f6e4767b3ad0ddf553d644af1074bc5ff87620a19c196bb20c2652cd773819150a15a694832bf5b8534ebb9ff54bdd0b2cd1d956e318b2397d2a0a1dd183347b6f7e4bc4f530753342747741a6a106e6a6ab85764a0d392be3a3a142ed2657a22d4d4b95fc247cfe0a02eab91acfb09d3d957a0e55c155181486a363407deca5860c35c981425847480684307f8df200c9dbd9bfb5032521b7c4a9218dd5e949827e301fa6b857cf226c462d8dfb1c45202cf17ab74196349856540948e6eb77cf6a380b291b14267df70139deca112aa5adad9c91574ee00c5871ab68e161198343f634c11b0f2f6f90d1e6bd9e71142be7752f54b7594f633d146dbf2fd6b9bd888c9289abbc43de20654c225220f2c75020d76f94cc8d9d0abbe0bab56ac7369b5cdf5f1c0bc0941f3f7445409d324acb1b020d013d5c7fb45fe09810a630947a716f289d91043b714db5e38fe561dcec341da742e62b16aacdfd14d9bda91ef8bfb92af191c57b2c7273f5458075ee1986030de0b2e0033aacb9b76d93eb6c89eb0a21d05f3df7418c4168d99c310f1c18330c5601781f29833b0d8cadd30d98abc08489ef0387e9910e48127f769581f642e786e5328843e26ba5886f6d95a418bc869ce57ad64f91f0bd765a079db693fb6d3e3c03019d9013ad61be867d46d72f74640d04bee4f04948cb184ece13aaf40dc3ebfd3c0307904e7ed21d9568a139dfa8c1876b9bf7d1af7d9d3e4fdc58c0744fadd3162a7bb07021fb2d4c7833b5a9b22f2f0588a83dca052e3dd6dbcdeb2207e08b0bee9c166d21016880e0e35d058923aa19228e59c79a40be51117019eaa4126df92c5f2c0d7a50ec4643676eee75483a016b49de61d139a61f4f9a4bd286a39debcdf9e9ac0e6a8a8b84be193ef3a9163ebeda91f58478b0cd45e0de22e409dc67f16f6dc49d550bbf5ae10d73819943ec866b39dc1473548e931ee5ddcdb5c2a7393c8e349fb4acb3d117e2676484ef35630d0d2b6615ad031fb27e8debb50a0189a2d26eaa2bd003d380253db585841995ce0fa1af62885247068c22a995b4d958067e1f2214aaccfe2351bc55831e697220859b6ac4024a86d3688b75dd59ddcfa530c89af55c9887e781db98661bda17644a7a915c90daea14c50cf8a23b878724111f2b1eb171dd108ef62127501bedd549a4de353d4ff60048045ec896d73d804d79ae43fe46ddb409b596f7f08e6e68718e3e6d184c671ad703bb02d534bd5bf493dc9860417c2ef957ee4737bd2b424f3a3930a555a696cb1a6c5018ca8eaf72b29bb50d3b3ea5096bb3f8354da5b742edaa0f21e7f378985059bcafeeaa83801399bd824d3e5c39d76f8330ff19ad21c3b515a2b649e415d32a548819d22cb47acf418236fe19e44edd29ac4b9dcb1bbc0aeb2afc2c068c8b3f2d94bd9cc0db9c4f827020fe079b1601ad2dae6a665e808e98aa2cc3311ad891881b624bddc60e0ad869a6533369f570f0b3a97fb052a7229293133c7344c0179b77a96a3b11bc2917c9d7a219993909fd511077c07cec2779ecc52cc11e42e21e5353138e13c876fbca95f13fefe0d5d63422df1f3fcb16dc93ca9f9e3859636a0e2b0a1ee8a3795bb990701cc48922da086decfb1609b20a7f4c0f6740f1486953264931af603ba1c18648f39c444e16693b48d8670cf35a062eab488fbd8e11e1519cc1b4bd3e9645755f52670da883be1b2878e5514d3fdcd1e77a2ec07b0d7efef90359202e3f9127745313097c308346f4741248e3701ec817cc3cc848a981adaafb9fb901069a75ed398a1e14831a2b28d6acf00fa401033fe3d558cbd45456dae89afe352b5c8b34b5a88f5d70cd7e6f59092c13b7eb7958d1b145aa7b024d5c522efcc3029666a361b10a459ba50d7779dcc12eb17a00de3e3c32deced6b926e5ef9ef0c236eaf87e7d73c60077c57399197e8c7936416959cb65ce3fb403d80fd7cab073751bb21179c0bf7f34258f448989f01a26a3b53519cd3b5e618f81fe0a4128638c4c6c8e5d6228988540fb92d67d9578e1c79680f7fb1cd4eda6cb96521540f190e3e2b50e16b57ea04fca0e5fe32a56d2ac80265612108dc87b672d0cc1f9bd7158f0d0d21d17b2ca9a31384d9260d39537ce3f7d8f5994fb11e66736be0de0ab4d7d2137f0b08de72754ede949b832fe8dee7589d3cac471c4aea8fa36bd91e13f5f79cb44ebfcd37e03fcac4013d7e1a66f4a88d2d3d59aafab23c3c87d95fed9833d109e7f46b69018680e39d7fdfec27d2fecf037ea5941ce53062c439ed2680869444deffc6d312f85767e37aaef0a1c03571f0bd162c3a339a72456f61f9984d34f3c5681d933b42ab6fa6d4396a19ef6d1816c3728ae50a0f0a291b9e1d8bd4e7e23ca9c7ed95ffeda21bb0538b91d7ad14f808bfb98cf0f5b4d69600ed3077671cdd14107bcb5fb5168e1e4cc30721b0e6180b399aa5eb2b1c94ed3e742c954af88fc28eba5668d36cecc68f970b031d22a866ad903cbe09889343259de2b6a83cb95c2d043fa5d743a18140f5685fcdeb602a1df83f919ab27d00da84de04583326778dfaa4d940a47669a63c8b98e4a46525afbcc816d2cda8fa50f660982540503672c9f13bd7ca7488c6e06a5c005694800e4618ba8211f407263ebfbf73df183420572287b5305c054a2125bedc2002234534819ba83aba9942623bfc492a48fc95fd22cbc65badc326f786b4628f9a768cf2585e32789fd03ba3a135001272d1134a0182d621f641bcac006f9715ce2915595cf3f9ddaf3f1e021379afe974ff8516f31e88de7c6afa1783cc2dc3ffd9544dfcc8dc611dc66f07e51fbebcde0b4d928eed83cb1d365879c87d321eae75da87da360ce5f2258b5560f1da40ab30babd4a6a25e3df225f9e05f236590a083699bea4c62c52bb8f7e21b94138434b2e1a99248fcc57ea2aa3864466793b02fe446d75a6603f4d7e364a99bab51f91cf53cf4cf0f9dae24ecdda58701bd9a0e7902f65a7b7a97f3d9db37edc0c5e73f38495f74e1e9424f00525175cb08c5f516b42b22a20097a184019c1732be0cf5a26734c60a97839b3a957e3897668a1a68faf5e084e350db0bf2b57be498406df8d79d941cff77fbc62759f0403901766303031e49b5be4683d3394b4761595fc2751b35bdc585e2fc0c348ea9fa78b2cc04a8d90ce4dde639364b7c0f32c1d6c908fa7378235563189f75237d47f5196339d9ef8ade7bc54e34eb0606ec775637086c8d9279645b01c2d0d05d2486ae947ad401ffc79e0108f166c0f146d1a8401f873bb544a9e7e97a0d19f5a447ce5d405c44124ba955f5638d13cf53bcabd55ac40e19227cfe5893967bb621bcd220b11d9d4843c007f31848294297706a5263506a84839e975a5fd806a3c367c6b32152fa9cc1e6ea8ce0a7d4b82271959f5458256a08ab0b7a4d9fd65d8508f8b223d461a09a4c92f14417c24daadda6a98cb87297dd6fbed1b1c2cad52ca934cf848fbea36d71ebd7b22e97f1c38b16e89b7e56240a0a5058dfb10b5b6995ac97ec3faee15769bc16abd0c72329c3c884e8b11e93e9174d5e948c7475b69b80fc4eec21fd75270fad2bef765aaa6939b97b573bfefeea3695453e6c52f98dccec06380a58867b448c395ddf77ad2ce81dc65361e9b6774f7935c43300fedc26880cad5d4d91bb9a563b65e8d7d66920f74c2898f5f5b120f28d46bf0ea6a1651978bb825d4b8b224457a14a86792d68a6c7637bcb3a69c9e8523badc9e32ada063cbfb32fa03c968965e3eb9ad8865960457a5fc00b749122f1270f78685265dc66aebe395ee08e6013d93b2856920e35a6f2d3ff4ebf297096cb297fe7b946a9afd723fd2fc1398a199f8380bc5bd17e1ef971a7f5ac723e2937e9a0b7c891db03be2066cbbb9e51e4e6e3b9685f4813dca24a3674e2a44184e4783dbd443cc38ad935f1e4b423301400610cc614846899e309117560ed37072c3fbf5c10cc4cbc99a0f1bd356e09de9075cdac495042073be5cfee796750b0b7f7d9e05fe8ecb6af6046c79ca075c4b1c375c2c5a52f82801570a304c439cb6ee330dcefcc5ac12ba36761baff65dd835d9b85fce86d76064e0bb1968ce525280e6f0d27c1d38ac95343593b62bb5f232ce4ab9b6af98d787507d9882600967fe98fd296d3a9cc998c9b696179f4a014f653350427b0a074c7e0a64d3922069f9f5ce538c2cf43443b17bf46b231b8c00dc0f0520bba0a1a6bb78bc72b9952103356f8730f02c11986438ee03952d60de01c125d67e62339182901c725dbe1cb4478c261016be83e52d47307d3e8695732130b53fdb97bfd6113619395d4f2dee58db5fae418f8588666835138af559f1df33a630957cb12bdbafc0d8e3dcad9ebdf5358e13c71b62d4d399a80132187eb219db8e4d1add533595e04eb350239277a1153c1e41ba48d9aa7b2a1e02941b98daa16a", 0x1000}, {&(0x7f0000002440)="d2a9251a85034a439e6472942e8eea5805ed4770622c632f4afab9bf5359", 0x1e}, {&(0x7f0000002480)="9ba98b4a88f82242bc0c2137796eac616b363ee61767f57bfe9038e1fc2558f724c9a53f74b6f23ad049a2da07c22c20", 0x30}, {&(0x7f00000024c0)="180d34116088a4def8a22cf0f7581793f047d5689f0ebda584879bd4a0bf41250818d4dbb0bdd41e3548d20d991b810033a89e586587e8839de94e1726719903749b51ce39b0ac096b85ebc2d9193ac886aa382d719dc520dad90afea90d4ab2daf74765f91e98779030269f08c12f58f61d74f4fd5bbcc4e1d15eb8979668a5f7324be93442e9b6cb", 0x89}, {&(0x7f0000002580)="c922fdddc050799b59875ca7c6faae3c7180d8144ff456345ed9ea5cc5bc714b5f2fb94e9b90c58f115ae765365c152fed7d7bfb22ec519f782907994f02a9b503d5dee66d38e3ace800b74e1fc3797338a965b1e895a5307f6e165f195f7bc5b692b87adb9c059b034afa55e5f4b75ccf13d3c00218a98faa999fd07a3a6ba3e83a9f8bdc6b8d1b023204c216a53760268a0e4349e27aa4b259c46c3e5b0eec513941a22e70176dd8da2b0ebafee09bc42f32214b35f7038bb6ca638da4", 0xbe}, {&(0x7f0000002640)="8b442c24de95479d8d3dd8fe9fc99c3dce845ee313ab153c77be80c07c7fc57766", 0x21}, {&(0x7f0000002680)="fcfa7dd4814f89a4a1c98ad7f6c4c58657fc76b522313b271462e149b409c66414e793755a5300744ec31906faa03b6456c39bcb0fc7383f86d1bf728bba35637de2af0fbe882beb", 0x48}], 0x9, &(0x7f0000002840)=[@rights={{0x20, 0x1, 0x1, [r0, r1, r0, r1]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}, @cred={{0x1c}}], 0x58, 0x8800}}, {{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f00000028c0)="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", 0x1000}], 0x1, &(0x7f0000003d80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {r2, r4, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, r8}}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, r1, r1]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @cred={{0x1c, 0x1, 0x2, {r13, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [r0, r1, r1]}}], 0x138, 0x80080}}], 0x4, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4606ff78a3050000000000000002003e"], 0x178)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

1.718789386s ago: executing program 1 (id=3832):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3000000, &(0x7f0000000080), 0x1, 0x533, &(0x7f0000000b00)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0xaa, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x1, 0x1, 0x5, 0x20, 0xf9, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0xb, {{0xa, 0x24, 0x6, 0x0, 0x0, "dddd867c77"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0x20, 0x4}, [@acm={0x4, 0x24, 0x2, 0x8}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x10, 0x6, 0x1, 0x3, 0x7}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x6}, @mdlm_detail={0x2e, 0x24, 0x13, 0x2, "819e4a6b270d124955314b6b70487f0bb03461fcaadc9660db9104ab568f9c75487e5b1e4bd0ab8416ff"}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x100, 0xa, 0xb7, 0x1f0c, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0xff, 0x8, 0x81}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x6, 0x6, 0xda}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x9, 0x5}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x0, 0x9, 0x5, 0x10, 0x8b}, 0x38, &(0x7f0000000040)={0x5, 0xf, 0x38, 0x1, [@generic={0x33, 0x10, 0xb, "dd16defac303900b49403a6ea34304edb8ac0d719edcef1b1e9d8f4e708706521ec8e9d9c63a23a9616deb95186d175f"}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xc4c}}, {0x4a, &(0x7f0000000340)=@string={0x4a, 0x3, "6c9ffb95896a2f81c6956c505547fd00b589c978e2d9b715b8fce643fb7e32aa34bbd498cd788ce5915679c062a8f8d4f50d23e35793d4f93cbb4cec56cea7db5ca288c907833006"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x51, &(0x7f0000000440)=@string={0x51, 0x3, "2917f104d0612b4e89f9e62166389bb24053b78244d6b7cc05a27cdabde875c54ebe4b091694b56c010c64339321b425cc4d3c88fb72d1c99c2e6432294dfd2de201a91f0a9787b6738c833f7d0bc3"}}, {0xff, &(0x7f00000004c0)=@string={0xff, 0x3, "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"}}, {0x5f, &(0x7f00000005c0)=@string={0x5f, 0x3, "f2c4a3cee99ded85dd8819de12546a2a6b8ce18ff0a226d4c427e6a01570058c84117c94e8d231fa4f18f2ee2313b3fca38956336a89e7c154677ff7c00ccfd3c8cdb49901954ba5ff7d0df22d1b207caa388ce93eb4ccae7316e04d50"}}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200290000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000020000000000000ffffffffffd9ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"])

1.487273559s ago: executing program 5 (id=3835):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2006c805}, 0x20040054)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = dup(r7)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000306010200040000000000000200000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10)
r11 = socket$inet_icmp(0x2, 0x2, 0x1)
dup(r4)
setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000001000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x138)
r12 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r12, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108)
unlink(&(0x7f0000000340)='./file0\x00')
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="84400100000001000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)

1.383707888s ago: executing program 5 (id=3836):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r2 = getpgrp(0x0)
syz_pidfd_open(r2, 0x0)

1.36566199s ago: executing program 4 (id=3837):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES16=0x0, @ANYBLOB="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", @ANYRES64=r0], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@deltclass={0x24, 0x29, 0x2, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xb, 0xfff3}, {0xffff, 0x9}}}, 0x24}}, 0x74000800)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04102cbd7000fadbdf251600000008000300", @ANYRES32=r4, @ANYBLOB="0a001a0008021100000100000a00060008021100000100000a00060008021100000000000a001a0008021100000000000a00060008021100000100000a001a0008021100000100000a0006000802110000000000"], 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x48000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2002, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
socket$kcm(0x29, 0x2, 0x0)
syz_clone(0x402a2111, 0x0, 0x0, 0x0, 0x0, 0x0)
sendfile(r7, r7, 0x0, 0x40000f63a)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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")
r8 = creat(&(0x7f0000000340)='./bus\x00', 0x182)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.35679926s ago: executing program 5 (id=3838):
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000"], 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/11], 0x48)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@noquota}]}, 0x1, 0x59c, &(0x7f0000001840)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xc00)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x2000000000000113, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000840)={'vxcan1\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'syzkaller0\x00'})
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0xfff3}}}, 0x24}}, 0x0)

1.308199765s ago: executing program 0 (id=3839):
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000"], 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/11], 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@noquota}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xc00)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'syzkaller0\x00'})
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0xfff3}}}, 0x24}}, 0x0)

1.115735024s ago: executing program 1 (id=3840):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10)
syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000280)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], <r3=>0x0, 0xb0, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000500), &(0x7f0000000600), 0x1f, 0xc5, 0x8, 0x8, &(0x7f0000000640)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0xffffffffffffffff, 0x26, 0x0, 0x0, 0x0, 0xb12e36d}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{}, &(0x7f0000000600), &(0x7f0000000780)='%pi6   \x00'}, 0x20)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffff, 0x8}, 0xc)

1.115004274s ago: executing program 2 (id=3841):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00')
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20)
pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x80}, 0x0)

985.596116ms ago: executing program 2 (id=3842):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0xd, &(0x7f0000000700)=ANY=[@ANYRES16, @ANYRES32, @ANYRES64], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x3}, 0x18)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r2=>0x0})
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000080), 0x4)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=@newqdisc={0x318, 0x24, 0xd0f, 0x70bd2b, 0xfffffffc, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x2e8, 0x2, [@TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10c, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xd}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xe}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7e}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x73}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x70b}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4e96}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x3}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xf, [0x2, 0x4, 0x7, 0xf, 0xf, 0xc, 0x1, 0x9, 0x1, 0x6, 0x6, 0x6, 0xb, 0x4, 0xa, 0x4], 0x0, [0xa, 0x0, 0x3, 0x76, 0xff48, 0x9, 0x3, 0x0, 0x89a3, 0x7, 0xe1d2, 0x1, 0x9, 0x0, 0x5, 0x3ff], [0xff, 0x3, 0x9, 0x9, 0x9873, 0x4, 0x400, 0x81, 0x2, 0x2, 0x4, 0x68, 0x0, 0x9, 0x5, 0x40]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x400}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x9c, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xf74}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x10001}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7ff}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xffff}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xb6}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x10001}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xd, [0xc, 0x5, 0xc, 0xe, 0xe, 0x4, 0xd, 0xa, 0xb, 0x2, 0x10, 0x8, 0x8, 0x2, 0xe], 0x0, [0x8, 0x1ff, 0x4, 0x0, 0x0, 0x6, 0x6a, 0x5, 0xf, 0x4, 0x1, 0x400, 0x7, 0x4, 0x6, 0x1180], [0x5, 0x3, 0x0, 0x2, 0x92, 0x100, 0xfff, 0x1, 0x8, 0x6, 0x9, 0x4, 0x3ff, 0x0, 0xe4b1, 0xd]}}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xa, [0x7, 0x5, 0xc, 0xd, 0xe, 0x3, 0x5, 0xe, 0xa, 0xa, 0xe, 0x10, 0xb, 0xf, 0x5, 0x7], 0x1, [0x5, 0x1d7, 0x6, 0x6, 0x400, 0x7, 0x1, 0xff, 0x2, 0xc, 0x3ff, 0x4, 0xc3, 0x0, 0x100, 0x100], [0x0, 0x6, 0x1, 0xfff2, 0xd, 0xfffe, 0x1, 0x0, 0x81, 0x4, 0x1, 0x7, 0xfffb, 0x7, 0x2, 0xf]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x5}]}}]}, 0x318}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r4, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9})
fcntl$lock(r4, 0x5, &(0x7f0000000340)={0x1, 0x1, 0x1000000007, 0xaa})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000904000000040000004500000088140000674b8e47388292c465840f0c993a45da2bd4ba3953ac639552fc5fe95f8a", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
openat(r4, &(0x7f0000000180)='./file2\x00', 0x20242, 0x112)
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r7}, 0x10)
setitimer(0x2, 0x0, 0x0)

911.445453ms ago: executing program 1 (id=3843):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_usbip_server_init(0x2)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380))
fsmount(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b000000080000000c000000fbbfffff01"], 0x50)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x30120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x2003f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000600)=<r3=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r4, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}})
io_uring_enter(r1, 0x3516, 0xf4f5, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)

300.065822ms ago: executing program 0 (id=3844):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd70000000000000000000000000000000000003000000"], 0x34c}}, 0x0)

248.122487ms ago: executing program 4 (id=3845):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x101, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x200000000006, 0x2, 0x4, 0x7ffc0002}]})
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0)

178.103154ms ago: executing program 2 (id=3846):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0xd, &(0x7f0000000700)=ANY=[@ANYRES16, @ANYRES32, @ANYRES64], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x3}, 0x18)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r2=>0x0})
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000080), 0x4)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=@newqdisc={0x2fc, 0x24, 0xd0f, 0x70bd2b, 0xfffffffc, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x2cc, 0x2, [@TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x104, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xd}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xe}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7e}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x73}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x70b}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4e96}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x3}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xf, [0x2, 0x4, 0x7, 0xf, 0xf, 0xc, 0x1, 0x9, 0x1, 0x6, 0x6, 0x6, 0xb, 0x4, 0xa, 0x4], 0x0, [0xa, 0x0, 0x3, 0x76, 0xff48, 0x9, 0x3, 0x0, 0x89a3, 0x7, 0xe1d2, 0x1, 0x9, 0x0, 0x5, 0x3ff], [0xff, 0x3, 0x9, 0x9, 0x9873, 0x4, 0x400, 0x81, 0x2, 0x2, 0x4, 0x68, 0x0, 0x9, 0x5, 0x40]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x400}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x88, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xf74}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x10001}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x5}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7ff}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xffff}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xb6}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x10001}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xd, [0xc, 0x5, 0xc, 0xe, 0xe, 0x4, 0xd, 0xa, 0xb, 0x2, 0x10, 0x8, 0x8, 0x2, 0xe], 0x0, [0x8, 0x1ff, 0x4, 0x0, 0x0, 0x6, 0x6a, 0x5, 0xf, 0x4, 0x1, 0x400, 0x7, 0x4, 0x6, 0x1180], [0x5, 0x3, 0x0, 0x2, 0x92, 0x100, 0xfff, 0x1, 0x8, 0x6, 0x9, 0x4, 0x3ff, 0x0, 0xe4b1, 0xd]}}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xa, [0x7, 0x5, 0xc, 0xd, 0xe, 0x3, 0x5, 0xe, 0xa, 0xa, 0xe, 0x10, 0xb, 0xf, 0x5, 0x7], 0x1, [0x5, 0x1d7, 0x6, 0x6, 0x400, 0x7, 0x1, 0xff, 0x2, 0xc, 0x3ff, 0x4, 0xc3, 0x0, 0x100, 0x100], [0x0, 0x6, 0x1, 0xfff2, 0xd, 0xfffe, 0x1, 0x0, 0x81, 0x4, 0x1, 0x7, 0xfffb, 0x7, 0x2, 0xf]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x5}]}}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r4, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9})
fcntl$lock(r4, 0x5, &(0x7f0000000340)={0x1, 0x1, 0x1000000007, 0xaa})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000904000000040000004500000088140000674b8e47388292c465840f0c993a45da2bd4ba3953ac639552fc5fe95f8a", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
openat(r4, &(0x7f0000000180)='./file2\x00', 0x20242, 0x112)
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r7}, 0x10)
setitimer(0x2, 0x0, 0x0)

136.270467ms ago: executing program 0 (id=3847):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x2006c805}, 0x20040054)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = dup(r7)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000306010200040000000000000200000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10)
r11 = socket$inet_icmp(0x2, 0x2, 0x1)
dup(r4)
setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000001000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x138)
r12 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r12, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108)
unlink(&(0x7f0000000340)='./file0\x00')
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="84400100000001000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)

133.540028ms ago: executing program 4 (id=3848):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r2 = getpgrp(0x0)
syz_pidfd_open(r2, 0x0)

95.917231ms ago: executing program 5 (id=3849):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0x4000000}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000001c0)={'vcan0\x00', <r5=>0x0})
connect$can_bcm(r4, &(0x7f0000000200)={0x1d, r5}, 0xffffffffffffff43)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd9, 0xd9, 0x3, [@datasec={0x1, 0x7, 0x0, 0xf, 0x1, [{0x2, 0xd}, {0x4, 0x800, 0x6}, {0x2, 0x800, 0x5}, {0x4, 0x9, 0x3}, {0x1}, {0x1, 0xbd7, 0x9}, {0x2, 0xffffffff, 0xffffffc0}], "9b"}, @type_tag={0x6, 0x0, 0x0, 0x12, 0x5}, @enum64={0x8, 0x8, 0x0, 0x13, 0x0, 0x0, [{0x4, 0x3, 0x3dd7090e}, {0x7, 0x3ff, 0x3}, {0x5, 0x1, 0xfffffff4}, {0x10, 0x9, 0xc0}, {0xa, 0x3, 0x8c}, {0xe, 0x7, 0x7}, {0x6, 0x400, 0x1}, {0xb, 0x5, 0x2}]}]}, {0x0, [0x0]}}, &(0x7f0000000280)=""/178, 0xf7, 0xb2, 0x1, 0x1, 0x10000}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="186700000b000000000000000a0000000745f7180000000400b500020200000000090000000000000009000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', r5, 0x25, r6, 0x8, &(0x7f0000000140)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x3, 0x7f, 0x5396}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000640)=[{0x2, 0x2, 0xa, 0x6}, {0x0, 0x5, 0xb, 0x5}, {0x5, 0x3, 0xd, 0x8}, {0x2, 0x1, 0xc, 0x4}, {0x2, 0x2, 0x3}], 0x10, 0x7}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x80000003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r7}, 0x10)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
connect$inet6(r8, &(0x7f0000000180)={0xa, 0x5e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000240)='tunl0\x00', 0x10)
setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000), 0x4)

87.493632ms ago: executing program 4 (id=3850):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES16=0x0, @ANYBLOB="4928a091e3c7e4f64e198f8fcc9c6f65ff72c2cfabda6744444ea47aeb19e4c1d3bd92696df43a79e702bc43ed347805eb640636165ccf1bc297afba35e416c21493a2206865d5b0f74d4e6a84ee0d698699d43657e32493bcdc01c8c3133fc93f58f663bbb03fa1a5f317029aaf8abb1b43d6fe8ada81b93315602f5a43ce4e0d4d104a1c4afa74108fed9c9e4480baefaa3c0c4ad3c2689becf8c13cfb478cf59a181a183438fe9d4f6b1201de497a04c59230b0e101fb496892c379c7783ca78d01cba16f384bfdc0a08033b2a53be3a3b639fd3d9fb0c4d4e951c3d4789ac716c476fc4926565c402d84ad1b2fc6180f90f7dc61c1184462baaddc1ae5", @ANYRES64=r0], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@deltclass={0x24, 0x29, 0x2, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xb, 0xfff3}, {0xffff, 0x9}}}, 0x24}}, 0x74000800)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04102cbd7000fadbdf251600000008000300", @ANYRES32=r4, @ANYBLOB="0a001a0008021100000100000a00060008021100000100000a00060008021100000000000a001a0008021100000000000a00060008021100000100000a001a0008021100000100000a0006000802110000000000"], 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x48000)
close(r0)
close(0xffffffffffffffff)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2002, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
socket$kcm(0x29, 0x2, 0x0)
syz_clone(0x402a2111, 0x0, 0x0, 0x0, 0x0, 0x0)
sendfile(r6, r6, 0x0, 0x40000f63a)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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")
r7 = creat(&(0x7f0000000340)='./bus\x00', 0x182)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

26.757108ms ago: executing program 5 (id=3851):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000001000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x138)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108)

26.014048ms ago: executing program 0 (id=3852):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3000000, &(0x7f0000000080), 0x1, 0x533, &(0x7f0000000b00)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200290000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000020000000000000ffffffffffd9ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"])

0s ago: executing program 5 (id=3853):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001000000"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00')

kernel console output (not intermixed with test programs):

7 d8 64 89 01 48
[  301.386336][T15774] RSP: 002b:00007f17003c0038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[  301.386443][T15774] RAX: ffffffffffffffda RBX: 00007f1701dc6090 RCX: 00007f1701b6f749
[  301.386550][T15774] RDX: 00002000000003c0 RSI: 0000000000000010 RDI: 000000000000000a
[  301.386563][T15774] RBP: 00007f17003c0090 R08: 0000000000000000 R09: 0000000000000000
[  301.386575][T15774] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001
[  301.386587][T15774] R13: 00007f1701dc6128 R14: 00007f1701dc6090 R15: 00007ffc89453f18
[  301.386609][T15774]  </TASK>
[  301.598372][T15768] loop0: detected capacity change from 0 to 512
[  301.606056][T15768] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  301.627940][T15768] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  301.778188][T15786] loop4: detected capacity change from 0 to 1024
[  301.824536][T15786] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  301.893799][   T29] kauditd_printk_skb: 2383 callbacks suppressed
[  301.893819][   T29] audit: type=1326 audit(1766472994.660:277825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15764 comm="syz.2.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff4f1312005 code=0x7ffc0000
[  301.900907][T15786] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 3: comm syz.4.3349: lblock 3 mapped to illegal pblock 3 (length 3)
[  301.932983][   T29] audit: type=1326 audit(1766472994.660:277826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15764 comm="syz.2.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff4f1312005 code=0x7ffc0000
[  301.971624][   T29] audit: type=1326 audit(1766472994.660:277827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15764 comm="syz.2.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff4f1312005 code=0x7ffc0000
[  301.995660][   T29] audit: type=1326 audit(1766472994.660:277828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15764 comm="syz.2.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff4f1312005 code=0x7ffc0000
[  302.020165][   T29] audit: type=1326 audit(1766472994.660:277829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15764 comm="syz.2.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff4f1312005 code=0x7ffc0000
[  302.044147][   T29] audit: type=1326 audit(1766472994.660:277830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15764 comm="syz.2.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff4f1312005 code=0x7ffc0000
[  302.068925][   T29] audit: type=1326 audit(1766472994.660:277831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15764 comm="syz.2.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff4f1312005 code=0x7ffc0000
[  302.113395][T15786] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  302.126149][T15786] EXT4-fs (loop4): This should not happen!! Data will be lost
[  302.126149][T15786] 
[  302.136434][T15791] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3349: lblock 3 mapped to illegal pblock 3 (length 1)
[  302.150851][   T29] audit: type=1326 audit(1766472994.730:277832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15764 comm="syz.2.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff4f1312005 code=0x7ffc0000
[  302.163355][T15791] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3349: lblock 3 mapped to illegal pblock 3 (length 1)
[  302.175263][   T29] audit: type=1326 audit(1766472994.730:277833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15764 comm="syz.2.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff4f1312005 code=0x7ffc0000
[  302.213860][   T29] audit: type=1326 audit(1766472994.730:277834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15764 comm="syz.2.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff4f1312005 code=0x7ffc0000
[  302.253279][T15785] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3349: lblock 3 mapped to illegal pblock 3 (length 1)
[  302.273791][T15793] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  302.280421][T15793] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  302.288315][T15793] vhci_hcd vhci_hcd.0: Device attached
[  302.293462][T15791] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3349: lblock 3 mapped to illegal pblock 3 (length 1)
[  302.329567][T15785] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3349: lblock 3 mapped to illegal pblock 3 (length 1)
[  302.344384][T15785] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3349: lblock 3 mapped to illegal pblock 3 (length 1)
[  302.358899][T10441] usb 3-1: enqueue for inactive port 0
[  302.364647][T10441] usb 3-1: enqueue for inactive port 0
[  302.364982][T15799] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15799 comm=syz.0.3351
[  302.380465][T15795] vhci_hcd: connection closed
[  302.393464][   T58] vhci_hcd vhci_hcd.2: stop threads
[  302.403604][   T58] vhci_hcd vhci_hcd.2: release socket
[  302.409190][   T58] vhci_hcd vhci_hcd.2: disconnect device
[  302.416994][T15791] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3349: lblock 3 mapped to illegal pblock 3 (length 1)
[  302.433080][T10441] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  302.463043][ T3410] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  302.499393][T15785] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3349: lblock 3 mapped to illegal pblock 3 (length 1)
[  302.530113][T15800] bridge0: port 4(gretap0) entered blocking state
[  302.532996][T15791] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3349: lblock 3 mapped to illegal pblock 3 (length 1)
[  302.536855][T15800] bridge0: port 4(gretap0) entered disabled state
[  302.563317][T15803] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  302.569003][T15800] gretap0: entered allmulticast mode
[  302.569866][T15803] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  302.576419][T15800] gretap0: entered promiscuous mode
[  302.582978][T15803] vhci_hcd vhci_hcd.0: Device attached
[  302.614966][T15806] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=15806 comm=syz.0.3354
[  302.628994][T15804] vhci_hcd: connection closed
[  302.629145][   T61] vhci_hcd vhci_hcd.1: stop threads
[  302.639290][   T61] vhci_hcd vhci_hcd.1: release socket
[  302.644825][   T61] vhci_hcd vhci_hcd.1: disconnect device
[  302.840481][T15796] gretap0: left allmulticast mode
[  302.845601][T15796] gretap0: left promiscuous mode
[  302.850814][T15796] bridge0: port 4(gretap0) entered disabled state
[  302.861321][T15796] netlink: '+}[@': attribute type 13 has an invalid length.
[  302.988254][T15816] xt_hashlimit: max too large, truncated to 1048576
[  302.998568][T15815] syzkaller1: entered promiscuous mode
[  303.004151][T15815] syzkaller1: entered allmulticast mode
[  303.013349][T15816] xt_CT: You must specify a L4 protocol and not use inversions on it
[  303.062916][ T6915] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  303.075905][ T6915] EXT4-fs (loop4): This should not happen!! Data will be lost
[  303.075905][ T6915] 
[  303.086648][T15819] loop0: detected capacity change from 0 to 512
[  303.093879][T15819] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  303.108911][T15819] EXT4-fs (loop0): 1 truncate cleaned up
[  303.117841][T15822] vlan2: entered allmulticast mode
[  303.129357][T15819] EXT4-fs (loop0): resizing filesystem from 256 to 2 blocks
[  303.136845][T15819] EXT4-fs warning (device loop0): ext4_resize_fs:2042: can't shrink FS - resize aborted
[  303.187532][T15826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15826 comm=syz.5.3362
[  303.297295][T15831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3364'.
[  303.330895][T15842] loop5: detected capacity change from 0 to 512
[  303.378518][T15842] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  303.383046][T15846] netlink: 'syz.0.3368': attribute type 10 has an invalid length.
[  303.396030][T15846] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3368'.
[  303.405534][T15845] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  303.408216][T15842] ext4 filesystem being mounted at /368/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  303.412322][T15845] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  303.430821][T15845] vhci_hcd vhci_hcd.0: Device attached
[  303.489788][T15847] vhci_hcd: connection closed
[  303.490119][   T58] vhci_hcd vhci_hcd.4: stop threads
[  303.500249][   T58] vhci_hcd vhci_hcd.4: release socket
[  303.505740][   T58] vhci_hcd vhci_hcd.4: disconnect device
[  303.559760][T15846] team0: Port device geneve1 added
[  303.571248][T15859] xt_hashlimit: max too large, truncated to 1048576
[  303.602188][T13189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  303.609057][T15859] xt_CT: You must specify a L4 protocol and not use inversions on it
[  303.611149][T13189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  303.628380][T13189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  303.644519][T13189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  303.833771][T15865] syzkaller1: entered promiscuous mode
[  303.839375][T15865] syzkaller1: entered allmulticast mode
[  304.080008][T15875] loop5: detected capacity change from 0 to 512
[  304.093507][T15875] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  304.122886][T15875] EXT4-fs (loop5): 1 truncate cleaned up
[  304.155205][T15875] EXT4-fs (loop5): resizing filesystem from 256 to 2 blocks
[  304.162885][T15875] EXT4-fs warning (device loop5): ext4_resize_fs:2042: can't shrink FS - resize aborted
[  304.268614][ T3912] hid_parser_main: 6 callbacks suppressed
[  304.268633][ T3912] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4
[  304.273891][T15891] vlan2: entered allmulticast mode
[  304.274574][ T3912] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2
[  304.297586][T15891] dummy0: entered allmulticast mode
[  304.310921][T15893] loop5: detected capacity change from 0 to 164
[  304.328721][T15893] syz.5.3386: attempt to access beyond end of device
[  304.328721][T15893] loop5: rw=8912896, sector=263328, nr_sectors = 4 limit=164
[  304.343806][T15895] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  304.350349][T15895] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  304.358185][T15895] vhci_hcd vhci_hcd.0: Device attached
[  304.370434][ T3912] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0
[  304.378538][ T3912] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0
[  304.386414][ T3912] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0
[  304.394374][ T3912] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0
[  304.402218][ T3912] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0
[  304.410137][ T3912] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0
[  304.418139][ T3912] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0
[  304.425937][ T3912] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0
[  304.430832][T15891] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15891 comm=syz.4.3384
[  304.434975][T15893] syz.5.3386: attempt to access beyond end of device
[  304.434975][T15893] loop5: rw=8388608, sector=263328, nr_sectors = 4 limit=164
[  304.461465][T15896] vhci_hcd: connection closed
[  304.462443][ T6891] vhci_hcd vhci_hcd.0: stop threads
[  304.472675][ T6891] vhci_hcd vhci_hcd.0: release socket
[  304.478277][ T6891] vhci_hcd vhci_hcd.0: disconnect device
[  304.485882][ T3912] hid-generic 0000:3000000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  304.558883][T15909] vlan2: entered allmulticast mode
[  304.605030][T15913] loop4: detected capacity change from 0 to 512
[  304.633582][T15913] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  304.651235][T15909] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15909 comm=syz.1.3390
[  304.694935][T15913] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  304.709974][T15921] IPv6: Can't replace route, no match found
[  304.716454][T15921] IPv6: Can't replace route, no match found
[  304.806391][T15927] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  304.863184][T15930] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  304.917984][T15936] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  304.923498][T15934] FAULT_INJECTION: forcing a failure.
[  304.923498][T15934] name failslab, interval 1, probability 0, space 0, times 0
[  304.941695][T15934] CPU: 1 UID: 0 PID: 15934 Comm: syz.2.3397 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  304.941776][T15934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  304.941792][T15934] Call Trace:
[  304.941800][T15934]  <TASK>
[  304.941811][T15934]  __dump_stack+0x1d/0x30
[  304.941842][T15934]  dump_stack_lvl+0x95/0xd0
[  304.941867][T15934]  dump_stack+0x15/0x1b
[  304.941965][T15934]  should_fail_ex+0x265/0x280
[  304.941994][T15934]  should_failslab+0x8c/0xb0
[  304.942021][T15934]  kmem_cache_alloc_noprof+0x69/0x4b0
[  304.942044][T15934]  ? __anon_vma_prepare+0x70/0x2f0
[  304.942139][T15934]  ? __alloc_frozen_pages_noprof+0x18f/0x360
[  304.942172][T15934]  __anon_vma_prepare+0x70/0x2f0
[  304.942198][T15934]  do_wp_page+0x18ee/0x2510
[  304.942293][T15934]  ? css_rstat_updated+0xbb/0x280
[  304.942313][T15934]  ? __rcu_read_lock+0x37/0x50
[  304.942334][T15934]  handle_mm_fault+0x7b0/0x2c60
[  304.942436][T15934]  do_user_addr_fault+0x630/0x1080
[  304.942468][T15934]  ? ksys_mmap_pgoff+0xc2/0x310
[  304.942495][T15934]  exc_page_fault+0x62/0xa0
[  304.942521][T15934]  asm_exc_page_fault+0x26/0x30
[  304.942627][T15934] RIP: 0033:0x7ff4f11a0943
[  304.942642][T15934] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c
[  304.942655][T15934] RSP: 002b:00007ff4efd463f0 EFLAGS: 00010202
[  304.942698][T15934] RAX: 00000000000001c0 RBX: 00007ff4efd46490 RCX: 00007ff4e7927000
[  304.942711][T15934] RDX: 00007ff4efd46630 RSI: 0000000000000000 RDI: 00007ff4efd46530
[  304.942731][T15934] RBP: 00000000000000bd R08: 0000000000000009 R09: 00000000000001a5
[  304.942741][T15934] R10: 00000000000001d0 R11: 00007ff4efd46490 R12: 0000000000000001
[  304.942804][T15934] R13: 00007ff4f137fc40 R14: 0000000000000002 R15: 00007ff4efd46530
[  304.942824][T15934]  </TASK>
[  304.942837][T15934] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  305.155015][T15936] EXT4-fs (loop5): 1 truncate cleaned up
[  305.201189][T15934] Alternate GPT is invalid, using primary GPT.
[  305.207680][T15934]  loop2: p1 p2 p3
[  305.211579][T15934] loop2: partition table partially beyond EOD, truncated
[  305.249506][T15930] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  305.274308][T15936] EXT4-fs (loop5): resizing filesystem from 256 to 2 blocks
[  305.281784][T15936] EXT4-fs warning (device loop5): ext4_resize_fs:2042: can't shrink FS - resize aborted
[  305.425463][T15954] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8976 sclass=netlink_route_socket pid=15954 comm=syz.4.3401
[  305.475227][T15957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3401'.
[  305.627712][T15964] bridge0: port 4(gretap0) entered blocking state
[  305.634621][T15964] bridge0: port 4(gretap0) entered disabled state
[  305.657809][T15966] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3407'.
[  305.685282][T15964] gretap0: entered allmulticast mode
[  305.695506][T15964] gretap0: entered promiscuous mode
[  305.728866][T15970] netlink: 'syz.5.3405': attribute type 13 has an invalid length.
[  305.804977][T15976] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=15976 comm=syz.4.3412
[  305.871986][T15978] netlink: 'syz.1.3411': attribute type 2 has an invalid length.
[  305.989389][T15986] vlan2: entered allmulticast mode
[  306.002214][T15988] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  306.009365][T15988] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  306.017255][T15988] vhci_hcd vhci_hcd.0: Device attached
[  306.043299][T15992] netlink: 'syz.5.3417': attribute type 29 has an invalid length.
[  306.049107][T15993] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15993 comm=syz.4.3416
[  306.065102][T15992] netlink: 'syz.5.3417': attribute type 29 has an invalid length.
[  306.085081][T15989] vhci_hcd: connection closed
[  306.085280][ T7928] vhci_hcd vhci_hcd.1: stop threads
[  306.095370][ T7928] vhci_hcd vhci_hcd.1: release socket
[  306.100844][ T7928] vhci_hcd vhci_hcd.1: disconnect device
[  306.123368][T15992] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3417'.
[  306.170788][T16000] FAULT_INJECTION: forcing a failure.
[  306.170788][T16000] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  306.184044][T16000] CPU: 1 UID: 0 PID: 16000 Comm: syz.5.3419 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  306.184188][T16000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  306.184204][T16000] Call Trace:
[  306.184213][T16000]  <TASK>
[  306.184224][T16000]  __dump_stack+0x1d/0x30
[  306.184292][T16000]  dump_stack_lvl+0x95/0xd0
[  306.184324][T16000]  dump_stack+0x15/0x1b
[  306.184343][T16000]  should_fail_ex+0x265/0x280
[  306.184365][T16000]  should_fail+0xb/0x20
[  306.184386][T16000]  should_fail_usercopy+0x1a/0x20
[  306.184494][T16000]  _copy_from_iter+0xcf/0xe70
[  306.184526][T16000]  ? __alloc_skb+0x396/0x4b0
[  306.184556][T16000]  ? __alloc_skb+0x228/0x4b0
[  306.184621][T16000]  netlink_sendmsg+0x471/0x6b0
[  306.184702][T16000]  ? __pfx_netlink_sendmsg+0x10/0x10
[  306.184741][T16000]  __sock_sendmsg+0x145/0x180
[  306.184896][T16000]  ____sys_sendmsg+0x345/0x4a0
[  306.184961][T16000]  ___sys_sendmsg+0x17b/0x1d0
[  306.185007][T16000]  __sys_sendmmsg+0x178/0x300
[  306.185049][T16000]  __x64_sys_sendmmsg+0x57/0x70
[  306.185078][T16000]  x64_sys_call+0x1e28/0x3000
[  306.185185][T16000]  do_syscall_64+0xca/0x2b0
[  306.185220][T16000]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.185242][T16000] RIP: 0033:0x7f1701b6f749
[  306.185258][T16000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  306.185297][T16000] RSP: 002b:00007f17005d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  306.185348][T16000] RAX: ffffffffffffffda RBX: 00007f1701dc5fa0 RCX: 00007f1701b6f749
[  306.185365][T16000] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004
[  306.185380][T16000] RBP: 00007f17005d7090 R08: 0000000000000000 R09: 0000000000000000
[  306.185456][T16000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  306.185471][T16000] R13: 00007f1701dc6038 R14: 00007f1701dc5fa0 R15: 00007ffc89453f18
[  306.185494][T16000]  </TASK>
[  306.471386][T16004] set_capacity_and_notify: 3 callbacks suppressed
[  306.471407][T16004] loop4: detected capacity change from 0 to 512
[  306.568365][T16004] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  306.634584][T16015] loop5: detected capacity change from 0 to 512
[  306.661652][T16015] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  306.694414][T16004] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  306.710469][T16015] EXT4-fs (loop5): 1 truncate cleaned up
[  306.725957][T16015] EXT4-fs (loop5): resizing filesystem from 256 to 2 blocks
[  306.733605][T16015] EXT4-fs warning (device loop5): ext4_resize_fs:2042: can't shrink FS - resize aborted
[  306.764185][T16021] netlink: 'syz.2.3424': attribute type 13 has an invalid length.
[  306.873228][T16024] netlink: 'syz.5.3427': attribute type 2 has an invalid length.
[  306.911095][   T29] kauditd_printk_skb: 3372 callbacks suppressed
[  306.911112][   T29] audit: type=1326 audit(1766472999.670:281207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16005 comm="syz.0.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f83805f2005 code=0x7ffc0000
[  306.954770][T16029] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3428'.
[  306.974795][   T29] audit: type=1326 audit(1766472999.700:281208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16005 comm="syz.0.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f83805f2005 code=0x7ffc0000
[  306.999676][   T29] audit: type=1326 audit(1766472999.710:281209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16005 comm="syz.0.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f83805f2005 code=0x7ffc0000
[  307.023758][   T29] audit: type=1326 audit(1766472999.710:281210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16005 comm="syz.0.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f83805f2005 code=0x7ffc0000
[  307.048254][   T29] audit: type=1326 audit(1766472999.710:281211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16005 comm="syz.0.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f83805f2005 code=0x7ffc0000
[  307.065277][T16030] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3428'.
[  307.072817][   T29] audit: type=1326 audit(1766472999.710:281212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16005 comm="syz.0.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f83805f2005 code=0x7ffc0000
[  307.105706][   T29] audit: type=1326 audit(1766472999.710:281213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16005 comm="syz.0.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f83805f2005 code=0x7ffc0000
[  307.130161][   T29] audit: type=1326 audit(1766472999.710:281214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16005 comm="syz.0.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f83805f2005 code=0x7ffc0000
[  307.153937][   T29] audit: type=1326 audit(1766472999.710:281215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16005 comm="syz.0.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f83805f2005 code=0x7ffc0000
[  307.178436][   T29] audit: type=1326 audit(1766472999.710:281216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16005 comm="syz.0.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f83805f2005 code=0x7ffc0000
[  307.225189][T16027] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=16027 comm=syz.1.3426
[  307.274679][T16032] netlink: 'syz.4.3429': attribute type 29 has an invalid length.
[  307.294253][T16032] netlink: 'syz.4.3429': attribute type 29 has an invalid length.
[  307.313494][T16032] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3429'.
[  307.420134][T16050] loop1: detected capacity change from 0 to 512
[  307.445920][T16050] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  307.467318][T16050] EXT4-fs (loop1): 1 truncate cleaned up
[  307.483040][T16050] EXT4-fs (loop1): resizing filesystem from 256 to 2 blocks
[  307.490421][T16050] EXT4-fs warning (device loop1): ext4_resize_fs:2042: can't shrink FS - resize aborted
[  307.518390][T16057] loop5: detected capacity change from 0 to 512
[  307.542358][T16060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3439'.
[  307.556573][T16057] EXT4-fs: dax option not supported
[  307.578986][T16053] loop5: detected capacity change from 0 to 512
[  307.609610][T16053] EXT4-fs: inline encryption not supported
[  307.632489][T16053] EXT4-fs: inline encryption not supported
[  307.638636][T16053] EXT4-fs: Ignoring removed bh option
[  307.645526][T16053] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  307.654844][T16064] xt_hashlimit: max too large, truncated to 1048576
[  307.666120][T16064] xt_CT: You must specify a L4 protocol and not use inversions on it
[  307.666946][T16053] ext4 filesystem being mounted at /391/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  307.752348][T16072] netlink: 'syz.4.3440': attribute type 13 has an invalid length.
[  307.769507][T16071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3443'.
[  307.779703][T16071] batman_adv: batadv0: Removing interface: batadv_slave_1
[  307.860428][T16072] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.867862][T16072] bridge0: port 1(bridge_slave_0) entered disabled state
[  307.922750][T16072] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  307.991785][  T959] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  308.014711][  T959] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  308.024415][  T959] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  308.036110][  T959] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  308.135765][T16084] vlan2: entered allmulticast mode
[  308.199991][T16084] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16084 comm=syz.1.3446
[  308.215092][ T3410] hid-generic 0000:3000000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  308.236365][T16093] loop0: detected capacity change from 0 to 164
[  308.257645][T16091] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=16091 comm=syz.4.3448
[  308.285578][T16095] loop2: detected capacity change from 0 to 512
[  308.380331][T16095] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2807: inode #11: comm syz.2.3450: corrupted xattr block 95: invalid header
[  308.397044][T16095] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.3450: bg 0: block 7: invalid block bitmap
[  308.410192][T16095] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  308.430358][T16100] loop1: detected capacity change from 0 to 512
[  308.444972][T16095] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2971: inode #11: comm syz.2.3450: corrupted xattr block 95: invalid header
[  308.459120][T16095] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117)
[  308.468412][T16095] EXT4-fs (loop2): 1 orphan inode deleted
[  308.475255][T16095] EXT4-fs mount: 26 callbacks suppressed
[  308.475268][T16095] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  308.526884][T16102] FAULT_INJECTION: forcing a failure.
[  308.526884][T16102] name failslab, interval 1, probability 0, space 0, times 0
[  308.539874][T16102] CPU: 1 UID: 0 PID: 16102 Comm: syz.0.3451 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  308.539948][T16102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  308.539960][T16102] Call Trace:
[  308.539968][T16102]  <TASK>
[  308.539977][T16102]  __dump_stack+0x1d/0x30
[  308.540007][T16102]  dump_stack_lvl+0x95/0xd0
[  308.540066][T16102]  dump_stack+0x15/0x1b
[  308.540085][T16102]  should_fail_ex+0x265/0x280
[  308.540107][T16102]  should_failslab+0x8c/0xb0
[  308.540133][T16102]  kmem_cache_alloc_lru_noprof+0x6d/0x4c0
[  308.540160][T16102]  ? __d_alloc+0x37/0x340
[  308.540245][T16102]  __d_alloc+0x37/0x340
[  308.540321][T16102]  ? selinux_inode_permission+0x6be/0x7c0
[  308.540352][T16102]  d_alloc_parallel+0x54/0xcd0
[  308.540378][T16102]  ? security_inode_permission+0x4a/0xb0
[  308.540443][T16102]  ? lockref_get_not_dead+0x120/0x1c0
[  308.540470][T16102]  ? __rcu_read_unlock+0x4f/0x70
[  308.540550][T16102]  __lookup_slow+0x8c/0x250
[  308.540579][T16102]  lookup_slow+0x3c/0x60
[  308.540610][T16102]  path_lookupat+0x2f7/0x500
[  308.540638][T16102]  filename_lookup+0x147/0x340
[  308.540727][T16102]  user_path_at+0x3e/0x130
[  308.540757][T16102]  do_fchmodat+0x9c/0x180
[  308.540791][T16102]  __x64_sys_chmod+0x38/0x50
[  308.540823][T16102]  x64_sys_call+0x2aaf/0x3000
[  308.540846][T16102]  do_syscall_64+0xca/0x2b0
[  308.540943][T16102]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.540964][T16102] RIP: 0033:0x7f83805bf749
[  308.540980][T16102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  308.540999][T16102] RSP: 002b:00007f837efdd038 EFLAGS: 00000246 ORIG_RAX: 000000000000005a
[  308.541113][T16102] RAX: ffffffffffffffda RBX: 00007f8380816180 RCX: 00007f83805bf749
[  308.541126][T16102] RDX: 0000000000000000 RSI: 0000000000000171 RDI: 0000200000000640
[  308.541218][T16102] RBP: 00007f837efdd090 R08: 0000000000000000 R09: 0000000000000000
[  308.541299][T16102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  308.541314][T16102] R13: 00007f8380816218 R14: 00007f8380816180 R15: 00007fff3d7f6cf8
[  308.541336][T16102]  </TASK>
[  308.587005][T16106] loop4: detected capacity change from 0 to 512
[  308.593434][T16100] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  308.612486][T16106] EXT4-fs: dax option not supported
[  308.663438][T16095] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3450'.
[  308.735793][T16106] loop4: detected capacity change from 0 to 512
[  308.747915][T16109] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  308.805392][T16106] EXT4-fs: inline encryption not supported
[  308.811411][T16106] EXT4-fs: inline encryption not supported
[  308.817360][T16106] EXT4-fs: Ignoring removed bh option
[  308.823691][T16095] netem: change failed
[  308.833593][T16106] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  308.967942][T16100] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  308.983091][T16106] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  309.008311][T16106] ext4 filesystem being mounted at /75/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  309.041314][T16100] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  309.068683][T14873] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  309.080740][T16109] EXT4-fs (loop5): 1 truncate cleaned up
[  309.092565][T16109] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  309.137942][T16109] EXT4-fs (loop5): resizing filesystem from 256 to 2 blocks
[  309.145334][T16109] EXT4-fs warning (device loop5): ext4_resize_fs:2042: can't shrink FS - resize aborted
[  309.156415][T14086] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  309.181664][T16122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3454'.
[  309.183707][ T7956] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  309.359918][T13922] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  309.452250][T16137] netlink: 'syz.0.3459': attribute type 2 has an invalid length.
[  309.597850][ T3410] hid_parser_main: 22 callbacks suppressed
[  309.597873][ T3410] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x4
[  309.611867][ T3410] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x2
[  309.619939][ T3410] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0
[  309.628194][ T3410] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0
[  309.636053][ T3410] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0
[  309.643927][ T3410] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0
[  309.652196][ T3410] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0
[  309.660146][ T3410] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0
[  309.667913][ T3410] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0
[  309.675612][ T3410] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0
[  309.683928][ T3410] hid-generic 0000:3000000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  309.903321][T16159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8976 sclass=netlink_route_socket pid=16159 comm=syz.2.3468
[  310.154951][T16173] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  310.161661][T16173] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  310.169308][T16173] vhci_hcd vhci_hcd.0: Device attached
[  310.191300][ T3424] hid-generic 0000:3000000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  310.307985][ T3912] hid-generic 0000:3000000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  310.355797][ T3424] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  310.380346][T16190] syz.5.3479: attempt to access beyond end of device
[  310.380346][T16190] loop5: rw=8912896, sector=263328, nr_sectors = 4 limit=164
[  310.382755][T16175] vhci_hcd: connection closed
[  310.411404][ T7928] vhci_hcd vhci_hcd.4: stop threads
[  310.418251][T16195] EXT4-fs: dax option not supported
[  310.421444][ T7928] vhci_hcd vhci_hcd.4: release socket
[  310.432021][ T7928] vhci_hcd vhci_hcd.4: disconnect device
[  310.437891][ T3424] usb 9-1: new full-speed USB device number 18 using vhci_hcd
[  310.445567][T16195] EXT4-fs: inline encryption not supported
[  310.447964][ T3424] usb 9-1: enqueue for inactive port 0
[  310.452746][T16195] EXT4-fs: inline encryption not supported
[  310.464253][T16195] EXT4-fs: Ignoring removed bh option
[  310.468318][ T3424] usb 9-1: enqueue for inactive port 0
[  310.469880][T16190] syz.5.3479: attempt to access beyond end of device
[  310.469880][T16190] loop5: rw=8388608, sector=263328, nr_sectors = 4 limit=164
[  310.482921][ T3424] usb 9-1: enqueue for inactive port 0
[  310.507633][T16195] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  310.526175][T16201] __nla_validate_parse: 5 callbacks suppressed
[  310.526195][T16201] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3482'.
[  310.543882][T16195] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  310.549997][T16201] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3482'.
[  310.571327][T16195] ext4 filesystem being mounted at /44/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  310.581787][ T3424] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  310.598144][T15262] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.692125][T16211] veth1_to_bond: entered promiscuous mode
[  310.703470][T16211] veth1_to_bond: entered allmulticast mode
[  310.727456][T16211] IPv6: NLM_F_CREATE should be specified when creating new route
[  310.741279][T16210] veth1_to_bond: left allmulticast mode
[  310.747165][T16210] veth1_to_bond: left promiscuous mode
[  310.755007][T16217] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3487'.
[  310.783546][ T3912] hid-generic 0000:3000000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  310.846677][T16229] FAULT_INJECTION: forcing a failure.
[  310.846677][T16229] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  310.860126][T16229] CPU: 0 UID: 0 PID: 16229 Comm: syz.0.3492 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  310.860186][T16229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  310.860195][T16229] Call Trace:
[  310.860200][T16229]  <TASK>
[  310.860206][T16229]  __dump_stack+0x1d/0x30
[  310.860227][T16229]  dump_stack_lvl+0x95/0xd0
[  310.860250][T16229]  dump_stack+0x15/0x1b
[  310.860351][T16229]  should_fail_ex+0x265/0x280
[  310.860427][T16229]  should_fail_alloc_page+0xf2/0x100
[  310.860452][T16229]  __alloc_frozen_pages_noprof+0x109/0x360
[  310.860539][T16229]  alloc_pages_mpol+0xb3/0x260
[  310.860569][T16229]  vma_alloc_folio_noprof+0x1aa/0x300
[  310.860601][T16229]  handle_mm_fault+0xef5/0x2c60
[  310.860646][T16229]  ? mt_find+0x21b/0x330
[  310.860699][T16229]  do_user_addr_fault+0x3fe/0x1080
[  310.860737][T16229]  exc_page_fault+0x62/0xa0
[  310.860772][T16229]  asm_exc_page_fault+0x26/0x30
[  310.860806][T16229] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  310.860834][T16229] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 e9 7f 17 02 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[  310.860854][T16229] RSP: 0018:ffffc90001aef918 EFLAGS: 00050202
[  310.860874][T16229] RAX: ffff88813a3e4c90 RBX: ffffc90001aefe18 RCX: 0000000000000157
[  310.860889][T16229] RDX: 0000000000000000 RSI: ffff88811ba3f4f1 RDI: 0000200000001000
[  310.860984][T16229] RBP: 0000000000000197 R08: 00000000000000cf R09: 0000000000000000
[  310.861020][T16229] R10: 000188811ba3f4b1 R11: 000188811ba3f647 R12: ffffc90001aefe00
[  310.861034][T16229] R13: 00000000000004b1 R14: 0000000000000753 R15: ffff88811ba3f4b1
[  310.861056][T16229]  _copy_to_iter+0x40c/0xe70
[  310.861148][T16229]  ? _raw_spin_unlock_irqrestore+0x2b/0x60
[  310.861176][T16229]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  310.861210][T16229]  __skb_datagram_iter+0xc6/0x690
[  310.861301][T16229]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  310.861335][T16229]  skb_copy_datagram_iter+0x3d/0x110
[  310.861393][T16229]  netlink_recvmsg+0x1a8/0x550
[  310.861462][T16229]  ? __pfx_netlink_recvmsg+0x10/0x10
[  310.861497][T16229]  sock_recvmsg+0x139/0x170
[  310.861540][T16229]  ____sys_recvmsg+0xf5/0x280
[  310.861580][T16229]  ___sys_recvmsg+0x11f/0x370
[  310.861716][T16229]  do_recvmmsg+0x1ef/0x540
[  310.861770][T16229]  ? get_timespec64+0xc9/0x100
[  310.861795][T16229]  __x64_sys_recvmmsg+0xfb/0x170
[  310.861830][T16229]  x64_sys_call+0x2b75/0x3000
[  310.861857][T16229]  do_syscall_64+0xca/0x2b0
[  310.861932][T16229]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.861957][T16229] RIP: 0033:0x7f83805bf749
[  310.861974][T16229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  310.861994][T16229] RSP: 002b:00007f837f01f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  310.862091][T16229] RAX: ffffffffffffffda RBX: 00007f8380815fa0 RCX: 00007f83805bf749
[  310.862105][T16229] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003
[  310.862120][T16229] RBP: 00007f837f01f090 R08: 0000200000003700 R09: 0000000000000000
[  310.862134][T16229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  310.862147][T16229] R13: 00007f8380816038 R14: 00007f8380815fa0 R15: 00007fff3d7f6cf8
[  310.862169][T16229]  </TASK>
[  311.251599][T16238] FAULT_INJECTION: forcing a failure.
[  311.251599][T16238] name failslab, interval 1, probability 0, space 0, times 0
[  311.264388][T16238] CPU: 0 UID: 0 PID: 16238 Comm: syz.0.3495 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  311.264421][T16238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  311.264442][T16238] Call Trace:
[  311.264517][T16238]  <TASK>
[  311.264527][T16238]  __dump_stack+0x1d/0x30
[  311.264599][T16238]  dump_stack_lvl+0x95/0xd0
[  311.264626][T16238]  dump_stack+0x15/0x1b
[  311.264650][T16238]  should_fail_ex+0x265/0x280
[  311.264675][T16238]  should_failslab+0x8c/0xb0
[  311.264778][T16238]  kmem_cache_alloc_node_noprof+0x6b/0x4c0
[  311.264807][T16238]  ? __alloc_skb+0x2ff/0x4b0
[  311.264836][T16238]  __alloc_skb+0x2ff/0x4b0
[  311.264927][T16238]  ? __alloc_skb+0x228/0x4b0
[  311.264956][T16238]  audit_log_start+0x3a0/0x720
[  311.264982][T16238]  ? kstrtouint+0x76/0xc0
[  311.265031][T16238]  audit_seccomp+0x48/0x100
[  311.265064][T16238]  ? __seccomp_filter+0x832/0x1260
[  311.265097][T16238]  __seccomp_filter+0x843/0x1260
[  311.265131][T16238]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  311.265166][T16238]  ? vfs_write+0x7e8/0x960
[  311.265189][T16238]  ? __rcu_read_unlock+0x4f/0x70
[  311.265279][T16238]  ? __fget_files+0x184/0x1c0
[  311.265311][T16238]  __secure_computing+0x82/0x150
[  311.265440][T16238]  syscall_trace_enter+0xcf/0x1e0
[  311.265465][T16238]  do_syscall_64+0xa4/0x2b0
[  311.265499][T16238]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.265522][T16238] RIP: 0033:0x7f83805bf749
[  311.265567][T16238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  311.265666][T16238] RSP: 002b:00007f837f01f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  311.265689][T16238] RAX: ffffffffffffffda RBX: 00007f8380815fa0 RCX: 00007f83805bf749
[  311.265705][T16238] RDX: 0000000000000094 RSI: 0000200000000240 RDI: 0000000000000005
[  311.265722][T16238] RBP: 00007f837f01f090 R08: 0000000000000000 R09: 0000000000000000
[  311.265737][T16238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  311.265752][T16238] R13: 00007f8380816038 R14: 00007f8380815fa0 R15: 00007fff3d7f6cf8
[  311.265775][T16238]  </TASK>
[  311.270899][T16240] gretap0: left allmulticast mode
[  311.447311][T16246] netlink: 'syz.5.3493': attribute type 13 has an invalid length.
[  311.454702][T16240] gretap0: left promiscuous mode
[  311.499196][T16244] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3498'.
[  311.500190][T16240] bridge0: port 4(gretap0) entered disabled state
[  311.598863][T16251] set_capacity_and_notify: 5 callbacks suppressed
[  311.598943][T16251] loop0: detected capacity change from 0 to 512
[  311.618597][T16249] loop4: detected capacity change from 0 to 1024
[  311.640911][T16251] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  311.677525][T16249] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  311.690247][T16258] syzkaller1: entered allmulticast mode
[  311.693413][T16249] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  311.718587][T16249] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 3: comm syz.4.3499: lblock 3 mapped to illegal pblock 3 (length 3)
[  311.737340][T16251] EXT4-fs (loop0): 1 orphan inode deleted
[  311.743539][T16251] EXT4-fs (loop0): 1 truncate cleaned up
[  311.749866][T16251] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  311.763318][T16249] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  311.763588][T16263] xt_hashlimit: max too large, truncated to 1048576
[  311.775796][T16249] EXT4-fs (loop4): This should not happen!! Data will be lost
[  311.775796][T16249] 
[  311.782602][T16249] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3499: lblock 3 mapped to illegal pblock 3 (length 1)
[  311.813630][T16263] xt_CT: You must specify a L4 protocol and not use inversions on it
[  311.824139][T16251] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.0.3500: path /54/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0
[  311.859667][T16249] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3499: lblock 3 mapped to illegal pblock 3 (length 1)
[  311.863678][T16251] EXT4-fs (loop0): Remounting filesystem read-only
[  311.884916][T16248] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3499: lblock 3 mapped to illegal pblock 3 (length 1)
[  311.912818][T16249] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3499: lblock 3 mapped to illegal pblock 3 (length 1)
[  311.927260][   T29] kauditd_printk_skb: 2157 callbacks suppressed
[  311.927276][   T29] audit: type=1326 audit(1766473004.690:283370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16250 comm="syz.0.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83805bf749 code=0x7ffc0000
[  311.963171][ T3424] IPVS: starting estimator thread 0...
[  311.973375][   T29] audit: type=1326 audit(1766473004.690:283371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16250 comm="syz.0.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f83805bf749 code=0x7ffc0000
[  311.997167][   T29] audit: type=1326 audit(1766473004.690:283372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16250 comm="syz.0.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83805bf749 code=0x7ffc0000
[  312.021472][   T29] audit: type=1326 audit(1766473004.690:283373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16250 comm="syz.0.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f83805bf749 code=0x7ffc0000
[  312.045548][   T29] audit: type=1326 audit(1766473004.690:283374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16250 comm="syz.0.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83805bf749 code=0x7ffc0000
[  312.046194][T16249] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3499: lblock 3 mapped to illegal pblock 3 (length 1)
[  312.069485][   T29] audit: type=1326 audit(1766473004.690:283375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16250 comm="syz.0.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f83805bf749 code=0x7ffc0000
[  312.069519][   T29] audit: type=1326 audit(1766473004.690:283376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16250 comm="syz.0.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83805bf749 code=0x7ffc0000
[  312.087518][T16264] IPVS: using max 2304 ests per chain, 115200 per kthread
[  312.107361][   T29] audit: type=1326 audit(1766473004.690:283377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16250 comm="syz.0.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f83805bf749 code=0x7ffc0000
[  312.107453][   T29] audit: type=1326 audit(1766473004.690:283378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16250 comm="syz.0.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83805bf749 code=0x7ffc0000
[  312.186268][   T29] audit: type=1326 audit(1766473004.690:283379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16250 comm="syz.0.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f83805bf749 code=0x7ffc0000
[  312.223009][T16268] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  312.229651][T16268] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  312.237377][T16268] vhci_hcd vhci_hcd.0: Device attached
[  312.283610][T16248] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3499: lblock 3 mapped to illegal pblock 3 (length 1)
[  312.294614][T16273] loop5: detected capacity change from 0 to 512
[  312.298825][T16249] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3499: lblock 3 mapped to illegal pblock 3 (length 1)
[  312.318902][T15262] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.319042][T16273] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  312.329377][T16270] vhci_hcd: connection closed
[  312.338311][T16248] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3499: lblock 3 mapped to illegal pblock 3 (length 1)
[  312.358839][ T6902] vhci_hcd vhci_hcd.2: stop threads
[  312.359945][T16273] EXT4-fs (loop5): 1 truncate cleaned up
[  312.364232][ T6902] vhci_hcd vhci_hcd.2: release socket
[  312.364326][ T6902] vhci_hcd vhci_hcd.2: disconnect device
[  312.375841][T16273] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  312.413287][T16249] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3499: lblock 3 mapped to illegal pblock 3 (length 1)
[  312.427632][ T3424] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  312.438708][T16273] EXT4-fs (loop5): resizing filesystem from 256 to 2 blocks
[  312.446503][T16273] EXT4-fs warning (device loop5): ext4_resize_fs:2042: can't shrink FS - resize aborted
[  312.496960][ T7956] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.748328][T16297] netlink: 'syz.5.3512': attribute type 13 has an invalid length.
[  312.802756][T16301] netlink: 'syz.1.3515': attribute type 10 has an invalid length.
[  312.817148][T16301] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3515'.
[  312.835758][ T6902] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  312.848622][ T6902] EXT4-fs (loop4): This should not happen!! Data will be lost
[  312.848622][ T6902] 
[  312.867230][T14873] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  312.875519][T16301] team0: Port device geneve1 added
[  312.885547][ T3410] hid-generic 0000:3000000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  312.888278][ T6904] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  312.926252][ T6904] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  312.935043][T16305] loop0: detected capacity change from 0 to 164
[  312.952035][ T6904] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  312.957925][T16309] loop4: detected capacity change from 0 to 512
[  312.984553][T16309] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  312.998598][ T6904] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  313.020762][T16309] EXT4-fs (loop4): 1 truncate cleaned up
[  313.027874][T16314] loop1: detected capacity change from 0 to 512
[  313.049838][T16309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  313.050580][ T3423] hid-generic 0000:3000000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  313.073976][T16314] EXT4-fs (loop1): 1 orphan inode deleted
[  313.080222][T16314] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  313.109650][T16314] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  313.123827][T16314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  313.132595][T16314] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  313.148111][T16309] EXT4-fs (loop4): resizing filesystem from 256 to 2 blocks
[  313.155657][T16309] EXT4-fs warning (device loop4): ext4_resize_fs:2042: can't shrink FS - resize aborted
[  313.166912][T16329] xt_hashlimit: max too large, truncated to 1048576
[  313.173191][T16327] loop0: detected capacity change from 0 to 1024
[  313.178540][T16329] xt_CT: You must specify a L4 protocol and not use inversions on it
[  313.205468][T14873] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.214188][T16327] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  313.227375][T16327] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  313.264074][T16338] loop4: detected capacity change from 0 to 1024
[  313.265595][T16327] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: block 3: comm syz.0.3524: lblock 3 mapped to illegal pblock 3 (length 3)
[  313.295649][T16327] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  313.308112][T16327] EXT4-fs (loop0): This should not happen!! Data will be lost
[  313.308112][T16327] 
[  313.317915][T16343] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  313.324575][T16343] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  313.332410][T16343] vhci_hcd vhci_hcd.0: Device attached
[  313.332624][T16347] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.3524: lblock 3 mapped to illegal pblock 3 (length 1)
[  313.340327][T16338] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  313.353063][T16347] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.3524: lblock 3 mapped to illegal pblock 3 (length 1)
[  313.389264][T16338] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  313.400024][T16326] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.3524: lblock 3 mapped to illegal pblock 3 (length 1)
[  313.414584][T16326] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.3524: lblock 3 mapped to illegal pblock 3 (length 1)
[  313.434549][T16347] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.3524: lblock 3 mapped to illegal pblock 3 (length 1)
[  313.456578][T16338] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 3: comm syz.4.3527: lblock 3 mapped to illegal pblock 3 (length 3)
[  313.475359][T16326] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.3524: lblock 3 mapped to illegal pblock 3 (length 1)
[  313.548428][T16338] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  313.561117][T16338] EXT4-fs (loop4): This should not happen!! Data will be lost
[  313.561117][T16338] 
[  313.563232][T16347] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.3524: lblock 3 mapped to illegal pblock 3 (length 1)
[  313.572742][T16345] vhci_hcd: connection closed
[  313.586058][  T959] vhci_hcd vhci_hcd.2: stop threads
[  313.590990][T16338] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3527: lblock 3 mapped to illegal pblock 3 (length 1)
[  313.596116][  T959] vhci_hcd vhci_hcd.2: release socket
[  313.610546][T16338] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3527: lblock 3 mapped to illegal pblock 3 (length 1)
[  313.615723][  T959] vhci_hcd vhci_hcd.2: disconnect device
[  313.630430][T16338] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3527: lblock 3 mapped to illegal pblock 3 (length 1)
[  313.646482][T16326] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.3524: lblock 3 mapped to illegal pblock 3 (length 1)
[  313.664238][T16347] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.3524: lblock 3 mapped to illegal pblock 3 (length 1)
[  313.673070][ T3424] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  313.698443][T16337] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3527: lblock 3 mapped to illegal pblock 3 (length 1)
[  313.713111][T13922] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.722560][T16338] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3527: lblock 3 mapped to illegal pblock 3 (length 1)
[  313.737249][T16337] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3527: lblock 3 mapped to illegal pblock 3 (length 1)
[  313.752047][T16338] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3527: lblock 3 mapped to illegal pblock 3 (length 1)
[  313.766634][T16337] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3527: lblock 3 mapped to illegal pblock 3 (length 1)
[  313.781582][T16338] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3527: lblock 3 mapped to illegal pblock 3 (length 1)
[  313.793596][T16350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3530'.
[  313.850324][T16350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3530'.
[  314.012521][T16356] bridge0: port 4(gretap0) entered blocking state
[  314.019217][T16356] bridge0: port 4(gretap0) entered disabled state
[  314.035465][T16356] gretap0: entered allmulticast mode
[  314.047138][T16356] gretap0: entered promiscuous mode
[  314.058105][T16356] netlink: 'syz.5.3532': attribute type 13 has an invalid length.
[  314.189468][  T959] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  314.202026][  T959] EXT4-fs (loop0): This should not happen!! Data will be lost
[  314.202026][  T959] 
[  314.219093][T16366] xt_hashlimit: max too large, truncated to 1048576
[  314.228875][T16366] xt_CT: You must specify a L4 protocol and not use inversions on it
[  314.247818][T15262] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  314.267759][T16370] xt_hashlimit: max too large, truncated to 1048576
[  314.276191][T16370] xt_CT: You must specify a L4 protocol and not use inversions on it
[  314.278002][T16373] vlan2: entered allmulticast mode
[  314.297394][  T946] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  314.309921][  T946] EXT4-fs (loop4): This should not happen!! Data will be lost
[  314.309921][  T946] 
[  314.321421][T14873] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  314.346701][T16378] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16378 comm=syz.5.3538
[  314.348521][T16376] vlan2: entered allmulticast mode
[  314.377714][T16383] bridge0: port 3(macvtap1) entered blocking state
[  314.384366][T16383] bridge0: port 3(macvtap1) entered disabled state
[  314.386359][T16386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16386 comm=syz.1.3543
[  314.391651][T16383] macvtap1: entered allmulticast mode
[  314.409649][T16383] bridge0: entered allmulticast mode
[  314.423953][T16383] macvtap1: left allmulticast mode
[  314.429212][T16383] bridge0: left allmulticast mode
[  314.473553][T16373] loop5: detected capacity change from 0 to 512
[  314.547469][T16373] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  314.574040][T16401] netlink: 'syz.2.3546': attribute type 1 has an invalid length.
[  314.582076][T16401] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3546'.
[  314.592341][T16373] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  314.613472][T16395] loop1: detected capacity change from 0 to 512
[  314.613925][T16408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3547'.
[  314.630065][T16409] bridge0: port 3(gretap0) entered blocking state
[  314.636750][T16409] bridge0: port 3(gretap0) entered disabled state
[  314.644259][T16395] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  314.653741][T16373] ext4 filesystem being mounted at /410/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  314.653800][T16409] gretap0: entered allmulticast mode
[  314.688198][T16409] gretap0: entered promiscuous mode
[  314.696373][T16395] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  314.709194][T16395] ext4 filesystem being mounted at /155/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  314.733954][T16409] netlink: 'syz.4.3548': attribute type 13 has an invalid length.
[  314.797254][T16418] xt_hashlimit: max too large, truncated to 1048576
[  314.823158][T16418] xt_CT: You must specify a L4 protocol and not use inversions on it
[  314.905737][T13922] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.997889][ T3423] hid_parser_main: 86 callbacks suppressed
[  314.998005][ T3423] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x4
[  315.012982][ T3423] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x2
[  315.033763][ T3423] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  315.041682][ T3423] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  315.049385][ T3423] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  315.057337][ T3423] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  315.065379][ T3423] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  315.073084][ T3423] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  315.080827][ T3423] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  315.088719][ T3423] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  315.099915][ T3423] hid-generic 0000:3000000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  315.214636][ T7956] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  315.309764][T16442] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[  315.316504][T16442] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  315.324224][T16442] vhci_hcd vhci_hcd.0: Device attached
[  315.444364][T16443] vhci_hcd: connection closed
[  315.444628][ T6904] vhci_hcd vhci_hcd.5: stop threads
[  315.454737][ T6904] vhci_hcd vhci_hcd.5: release socket
[  315.460576][ T6904] vhci_hcd vhci_hcd.5: disconnect device
[  315.471284][T16449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=16449 comm=syz.2.3562
[  315.503038][ T3410] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  315.558590][T16451] IPv6: Can't replace route, no match found
[  315.564821][T16451] IPv6: Can't replace route, no match found
[  315.598262][T16455] EXT4-fs: Ignoring removed nomblk_io_submit option
[  315.607180][T16455] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  315.618937][T16457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3566'.
[  315.667268][T16457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3566'.
[  315.783899][T16455] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #11: comm syz.0.3565: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  315.850340][T16455] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3565: couldn't read orphan inode 11 (err -117)
[  315.890067][T16455] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  315.920385][T16466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3568'.
[  315.942405][T16467] vlan2: entered allmulticast mode
[  315.964116][T16455] FAULT_INJECTION: forcing a failure.
[  315.964116][T16455] name failslab, interval 1, probability 0, space 0, times 0
[  315.965570][ T3912] hid-generic 0000:3000000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  315.976821][T16455] CPU: 1 UID: 0 PID: 16455 Comm: syz.0.3565 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  315.976850][T16455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  315.976863][T16455] Call Trace:
[  315.976871][T16455]  <TASK>
[  315.976881][T16455]  __dump_stack+0x1d/0x30
[  315.976907][T16455]  dump_stack_lvl+0x95/0xd0
[  315.976983][T16455]  dump_stack+0x15/0x1b
[  315.977003][T16455]  should_fail_ex+0x265/0x280
[  315.977027][T16455]  should_failslab+0x8c/0xb0
[  315.977051][T16455]  kmem_cache_alloc_noprof+0x69/0x4b0
[  315.977125][T16455]  ? alloc_empty_file+0x76/0x200
[  315.977153][T16455]  alloc_empty_file+0x76/0x200
[  315.977260][T16455]  path_openat+0x63/0x23b0
[  315.977291][T16455]  ? _parse_integer_limit+0x170/0x190
[  315.977314][T16455]  ? _parse_integer+0x27/0x40
[  315.977334][T16455]  ? kstrtoull+0x111/0x140
[  315.977433][T16455]  ? kstrtouint+0x76/0xc0
[  315.977455][T16455]  do_filp_open+0x109/0x230
[  315.977571][T16455]  do_sys_openat2+0xa6/0x150
[  315.977643][T16455]  __x64_sys_creat+0x65/0x90
[  315.977697][T16455]  x64_sys_call+0x2f1c/0x3000
[  315.977722][T16455]  do_syscall_64+0xca/0x2b0
[  315.977756][T16455]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  315.977778][T16455] RIP: 0033:0x7f83805bf749
[  315.977818][T16455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  315.977841][T16455] RSP: 002b:00007f837f01f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  315.977865][T16455] RAX: ffffffffffffffda RBX: 00007f8380815fa0 RCX: 00007f83805bf749
[  315.977879][T16455] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040
[  315.977892][T16455] RBP: 00007f837f01f090 R08: 0000000000000000 R09: 0000000000000000
[  315.977905][T16455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  315.977918][T16455] R13: 00007f8380816038 R14: 00007f8380815fa0 R15: 00007fff3d7f6cf8
[  315.977938][T16455]  </TASK>
[  316.075264][T16473] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16473 comm=syz.4.3569
[  316.202569][T15262] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  316.225049][T16479] IPv6: Can't replace route, no match found
[  316.261053][T16479] IPv6: Can't replace route, no match found
[  316.300166][ T3390] hid-generic 0000:3000000:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  316.345831][ T3390] hid-generic 0000:3000000:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  316.360293][T16467] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  316.383280][ T3423] hid-generic 0000:3000000:0000.0010: hidraw1: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  316.387401][T16496] vlan2: entered allmulticast mode
[  316.409116][T16467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  316.473419][T16508] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16508 comm=syz.2.3582
[  316.546553][T16511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3585'.
[  316.559845][T16467] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  316.636904][T16496] set_capacity_and_notify: 6 callbacks suppressed
[  316.636920][T16496] loop2: detected capacity change from 0 to 512
[  316.689089][T16496] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  316.720097][T16522] vlan2: entered allmulticast mode
[  316.748981][T16496] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  316.787945][T16522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16522 comm=syz.1.3588
[  316.811827][T16496] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  316.936678][   T29] kauditd_printk_skb: 1045 callbacks suppressed
[  316.936695][   T29] audit: type=1326 audit(1766473009.700:284425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16493 comm="syz.5.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1701ba2005 code=0x7ffc0000
[  316.992634][T14873] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.007335][T16529] loop1: detected capacity change from 0 to 512
[  317.221397][T16529] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  317.233072][   T29] audit: type=1326 audit(1766473009.730:284426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16493 comm="syz.5.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1701ba2005 code=0x7ffc0000
[  317.256816][   T29] audit: type=1326 audit(1766473009.730:284427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16493 comm="syz.5.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1701ba2005 code=0x7ffc0000
[  317.280705][   T29] audit: type=1326 audit(1766473009.730:284428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16493 comm="syz.5.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1701ba2005 code=0x7ffc0000
[  317.304660][   T29] audit: type=1326 audit(1766473009.730:284429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16493 comm="syz.5.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1701ba2005 code=0x7ffc0000
[  317.328729][   T29] audit: type=1326 audit(1766473009.740:284430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16493 comm="syz.5.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1701ba2005 code=0x7ffc0000
[  317.353397][   T29] audit: type=1326 audit(1766473009.740:284431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16493 comm="syz.5.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1701ba2005 code=0x7ffc0000
[  317.377646][   T29] audit: type=1326 audit(1766473009.740:284432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16493 comm="syz.5.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1701ba2005 code=0x7ffc0000
[  317.401473][   T29] audit: type=1326 audit(1766473009.740:284433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16493 comm="syz.5.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1701ba2005 code=0x7ffc0000
[  317.406856][T16537] loop0: detected capacity change from 0 to 512
[  317.425486][   T29] audit: type=1326 audit(1766473009.890:284434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16493 comm="syz.5.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1701ba2005 code=0x7ffc0000
[  317.467878][T14086] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.484539][T16529] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  317.554109][T16537] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  317.567190][T16537] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  317.605012][T16529] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  317.634943][T16537] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.3592: corrupted inode contents
[  317.652900][T16546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8976 sclass=netlink_route_socket pid=16546 comm=syz.4.3590
[  317.678672][T16537] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #2: comm syz.0.3592: mark_inode_dirty error
[  317.705991][T16534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3590'.
[  317.715630][T16537] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.3592: corrupted inode contents
[  317.738634][T16550] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.3592: corrupted inode contents
[  317.752254][ T3423] hid-generic 0000:3000000:0000.0011: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  317.785452][T16550] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #2: comm syz.0.3592: mark_inode_dirty error
[  317.799827][T16550] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.3592: corrupted inode contents
[  317.811873][T16550] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.3592: mark_inode_dirty error
[  317.823573][T16550] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.3592: corrupted inode contents
[  317.842149][T16550] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #2: comm syz.0.3592: mark_inode_dirty error
[  317.854917][T16555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3596'.
[  317.869824][T16555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3596'.
[  317.903149][T16537] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.3592: corrupted inode contents
[  318.095066][T15262] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  318.150210][T16561] vlan2: entered allmulticast mode
[  318.191763][T13922] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  318.241626][T16564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16564 comm=syz.4.3599
[  318.268718][T16571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3602'.
[  318.413492][T16573] loop4: detected capacity change from 0 to 512
[  318.429166][T16575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=16575 comm=syz.1.3601
[  318.444777][T16573] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  318.489990][T16573] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  318.647476][T16573] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  318.722272][T16587] loop1: detected capacity change from 0 to 512
[  318.759359][T16587] EXT4-fs: dax option not supported
[  318.806205][T16587] loop1: detected capacity change from 0 to 512
[  318.828126][T16587] EXT4-fs: inline encryption not supported
[  318.849564][T16587] EXT4-fs: inline encryption not supported
[  318.855795][T16587] EXT4-fs: Ignoring removed bh option
[  318.895239][T16587] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  318.964653][T16587] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  319.018743][T16587] ext4 filesystem being mounted at /168/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  319.134507][T16595] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  319.141164][T16595] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  319.148814][T16595] vhci_hcd vhci_hcd.0: Device attached
[  319.207379][T13922] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.222499][T14873] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.247300][T16596] vhci_hcd: connection closed
[  319.247571][   T61] vhci_hcd vhci_hcd.2: stop threads
[  319.257822][   T61] vhci_hcd vhci_hcd.2: release socket
[  319.263346][   T61] vhci_hcd vhci_hcd.2: disconnect device
[  319.474039][T16607] netlink: 'syz.1.3610': attribute type 13 has an invalid length.
[  319.507167][ T6904] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  319.516861][ T6904] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  319.534571][T16613] capability: warning: `syz.5.3614' uses deprecated v2 capabilities in a way that may be insecure
[  319.639866][ T6904] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  319.658409][T16615] loop4: detected capacity change from 0 to 1024
[  319.665080][ T6904] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  319.736268][T16615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  319.759046][T16620] loop5: detected capacity change from 0 to 2048
[  319.791942][T16624] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  319.798513][T16624] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  319.806154][T16624] vhci_hcd vhci_hcd.0: Device attached
[  319.852813][T16620] Alternate GPT is invalid, using primary GPT.
[  319.859252][T16620]  loop5: p1 p2 p3
[  319.863189][T16620] loop5: partition table partially beyond EOD, truncated
[  319.901340][T16615] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  319.942615][T16615] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 3: comm syz.4.3615: lblock 3 mapped to illegal pblock 3 (length 3)
[  319.960207][T16625] vhci_hcd: connection closed
[  319.960357][  T946] vhci_hcd vhci_hcd.2: stop threads
[  319.970432][  T946] vhci_hcd vhci_hcd.2: release socket
[  319.976079][  T946] vhci_hcd vhci_hcd.2: disconnect device
[  320.003148][T10441] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  320.025823][T16615] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  320.038201][T16615] EXT4-fs (loop4): This should not happen!! Data will be lost
[  320.038201][T16615] 
[  320.076604][T16637] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3615: lblock 3 mapped to illegal pblock 3 (length 1)
[  320.110722][T16643] vlan2: entered allmulticast mode
[  320.117719][T16614] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3615: lblock 3 mapped to illegal pblock 3 (length 1)
[  320.147420][T16648] vlan2: entered allmulticast mode
[  320.161478][T16647] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16647 comm=syz.0.3621
[  320.174878][T16637] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3615: lblock 3 mapped to illegal pblock 3 (length 1)
[  320.219846][T16614] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3615: lblock 3 mapped to illegal pblock 3 (length 1)
[  320.220807][T16651] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16651 comm=syz.1.3623
[  320.297445][T16637] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3615: lblock 3 mapped to illegal pblock 3 (length 1)
[  320.316045][T16654] loop0: detected capacity change from 0 to 512
[  320.340144][T16654] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  320.382464][T16614] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3615: lblock 3 mapped to illegal pblock 3 (length 1)
[  320.383269][T16654] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  320.432869][T16614] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3615: lblock 3 mapped to illegal pblock 3 (length 1)
[  320.450673][T16658] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[  320.457367][T16658] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  320.463112][T16614] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3615: lblock 3 mapped to illegal pblock 3 (length 1)
[  320.465415][T16658] vhci_hcd vhci_hcd.0: Device attached
[  320.503257][T16637] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3615: lblock 3 mapped to illegal pblock 3 (length 1)
[  320.544310][T16661] loop1: detected capacity change from 0 to 512
[  320.550776][T16659] vhci_hcd: connection closed
[  320.550958][   T61] vhci_hcd vhci_hcd.5: stop threads
[  320.561264][   T61] vhci_hcd vhci_hcd.5: release socket
[  320.566787][   T61] vhci_hcd vhci_hcd.5: disconnect device
[  320.583265][T16661] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  320.603428][T16654] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  320.647729][T16661] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  320.732579][T16661] ext4 filesystem being mounted at /175/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  321.039469][ T7926] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  321.051828][ T7926] EXT4-fs (loop4): This should not happen!! Data will be lost
[  321.051828][ T7926] 
[  321.108176][T14873] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  321.148759][T15262] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  321.328600][T16684] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3632'.
[  321.368899][T10441] hid_parser_main: 86 callbacks suppressed
[  321.368918][T10441] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x4
[  321.382596][T10441] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x2
[  321.420993][T10441] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0
[  321.428937][T10441] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0
[  321.436843][T10441] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0
[  321.444539][T10441] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0
[  321.452334][T10441] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0
[  321.460201][T10441] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0
[  321.467972][T10441] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0
[  321.475723][T10441] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0
[  321.497276][T16693] FAULT_INJECTION: forcing a failure.
[  321.497276][T16693] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  321.510730][T16693] CPU: 0 UID: 0 PID: 16693 Comm: syz.2.3636 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  321.510764][T16693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  321.510795][T16693] Call Trace:
[  321.510802][T16693]  <TASK>
[  321.510812][T16693]  __dump_stack+0x1d/0x30
[  321.510842][T16693]  dump_stack_lvl+0x95/0xd0
[  321.510941][T16693]  dump_stack+0x15/0x1b
[  321.510966][T16693]  should_fail_ex+0x265/0x280
[  321.510996][T16693]  should_fail+0xb/0x20
[  321.511019][T16693]  should_fail_usercopy+0x1a/0x20
[  321.511042][T16693]  _copy_from_user+0x1c/0xb0
[  321.511197][T16693]  memdup_user+0x5e/0xd0
[  321.511216][T16693]  __se_sys_kexec_load+0x109/0x160
[  321.511324][T16693]  __x64_sys_kexec_load+0x55/0x70
[  321.511346][T16693]  x64_sys_call+0x2e77/0x3000
[  321.511517][T16693]  do_syscall_64+0xca/0x2b0
[  321.511557][T16693]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  321.511579][T16693] RIP: 0033:0x7ff4f12df749
[  321.511614][T16693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  321.511690][T16693] RSP: 002b:00007ff4efd47038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6
[  321.511712][T16693] RAX: ffffffffffffffda RBX: 00007ff4f1535fa0 RCX: 00007ff4f12df749
[  321.511771][T16693] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000003e00
[  321.511786][T16693] RBP: 00007ff4efd47090 R08: 0000000000000000 R09: 0000000000000000
[  321.511801][T16693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  321.511817][T16693] R13: 00007ff4f1536038 R14: 00007ff4f1535fa0 R15: 00007ffc28de4e28
[  321.511836][T16693]  </TASK>
[  321.577446][T10441] hid-generic 0000:3000000:0000.0012: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  321.725079][T13922] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  321.758786][T16700] vlan2: entered allmulticast mode
[  321.787034][T16705] loop5: detected capacity change from 0 to 1024
[  321.834456][T16705] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  321.850810][T16707] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16707 comm=syz.2.3640
[  321.881890][T16715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3639'.
[  321.891086][T16705] ext4 filesystem being mounted at /428/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  321.987744][T16705] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 3: comm syz.5.3642: lblock 3 mapped to illegal pblock 3 (length 3)
[  322.034897][T16705] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  322.047447][T16705] EXT4-fs (loop5): This should not happen!! Data will be lost
[  322.047447][T16705] 
[  322.113433][T16721] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.3642: lblock 3 mapped to illegal pblock 3 (length 1)
[  322.146926][T16717] netlink: 'syz.4.3644': attribute type 10 has an invalid length.
[  322.152900][T16720] loop2: detected capacity change from 0 to 512
[  322.155651][T16717] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3644'.
[  322.164528][T16704] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.3642: lblock 3 mapped to illegal pblock 3 (length 1)
[  322.194966][T16724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3645'.
[  322.212793][T16720] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  322.226741][T16721] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.3642: lblock 3 mapped to illegal pblock 3 (length 1)
[  322.227330][   T29] kauditd_printk_skb: 1410 callbacks suppressed
[  322.227347][   T29] audit: type=1326 audit(1766473014.990:285845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16723 comm="syz.0.3645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83805bf749 code=0x7ffc0000
[  322.271162][   T29] audit: type=1326 audit(1766473015.010:285846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16723 comm="syz.0.3645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f83805bf749 code=0x7ffc0000
[  322.295109][   T29] audit: type=1326 audit(1766473015.010:285847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16723 comm="syz.0.3645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83805bf749 code=0x7ffc0000
[  322.309875][T16704] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.3642: lblock 3 mapped to illegal pblock 3 (length 1)
[  322.319118][   T29] audit: type=1326 audit(1766473015.010:285848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16723 comm="syz.0.3645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f83805bf749 code=0x7ffc0000
[  322.357394][   T29] audit: type=1326 audit(1766473015.010:285849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16723 comm="syz.0.3645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83805bf749 code=0x7ffc0000
[  322.359834][T16717] team0: Port device geneve1 added
[  322.381236][   T29] audit: type=1326 audit(1766473015.010:285850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16723 comm="syz.0.3645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83805bf749 code=0x7ffc0000
[  322.455568][T16720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  322.464888][T16721] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.3642: lblock 3 mapped to illegal pblock 3 (length 1)
[  322.478584][T16720] ext4 filesystem being mounted at /155/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  322.496363][  T946] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  322.509562][  T946] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  322.528398][  T946] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  322.533227][T16704] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.3642: lblock 3 mapped to illegal pblock 3 (length 1)
[  322.544402][  T946] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  322.584954][   T29] audit: type=1400 audit(1766473015.350:285851): avc:  denied  { compute_member } for  pid=16731 comm="syz.4.3647" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  322.613126][T16721] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.3642: lblock 3 mapped to illegal pblock 3 (length 1)
[  322.664562][T16704] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.3642: lblock 3 mapped to illegal pblock 3 (length 1)
[  322.700386][   T29] audit: type=1326 audit(1766473015.460:285852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16729 comm="syz.0.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83805bf749 code=0x7ffc0000
[  322.713278][T16721] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.3642: lblock 3 mapped to illegal pblock 3 (length 1)
[  322.801562][T16738] loop1: detected capacity change from 0 to 164
[  322.888853][   T29] audit: type=1326 audit(1766473015.460:285853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16729 comm="syz.0.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83805bf749 code=0x7ffc0000
[  322.912990][   T29] audit: type=1326 audit(1766473015.460:285854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16729 comm="syz.0.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83805bf749 code=0x7ffc0000
[  322.960382][T14086] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  323.237236][T16743] loop2: detected capacity change from 0 to 2048
[  323.319718][T16743] Alternate GPT is invalid, using primary GPT.
[  323.326225][T16743]  loop2: p1 p2 p3
[  323.329963][T16743] loop2: partition table partially beyond EOD, truncated
[  323.361848][ T7926] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  323.374450][ T7926] EXT4-fs (loop5): This should not happen!! Data will be lost
[  323.374450][ T7926] 
[  323.386034][ T7956] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  323.468744][T16754] netlink: 'syz.5.3654': attribute type 1 has an invalid length.
[  323.469056][T16758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3656'.
[  323.476776][T16754] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3654'.
[  323.761543][T16767] loop4: detected capacity change from 0 to 4096
[  323.775187][T16767] EXT4-fs: Ignoring removed nomblk_io_submit option
[  323.784225][T16767] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  323.797329][T16779] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8976 sclass=netlink_route_socket pid=16779 comm=syz.1.3660
[  323.812009][T16780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3661'.
[  323.844289][T16776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3660'.
[  323.875149][T16785] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=16785 comm=syz.1.3662
[  323.894368][T14873] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  324.026941][T16793] loop1: detected capacity change from 0 to 512
[  324.050050][T16794] loop2: detected capacity change from 0 to 2048
[  324.066968][T16793] EXT4-fs (loop1): 1 orphan inode deleted
[  324.083832][T16796] netlink: 'syz.4.3667': attribute type 1 has an invalid length.
[  324.091688][T16796] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3667'.
[  324.101268][T16793] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  324.143310][T16793] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  324.155141][T16794] Alternate GPT is invalid, using primary GPT.
[  324.161482][T16794]  loop2: p1 p2 p3
[  324.165327][T16794] loop2: partition table partially beyond EOD, truncated
[  324.183425][T16793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  324.199285][T16793] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  324.356753][T16811] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3669'.
[  324.534263][T16818] rdma_rxe: rxe_newlink: failed to add bond0
[  324.678001][T16824] loop0: detected capacity change from 0 to 512
[  324.684939][T16824] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  324.696973][T16824] EXT4-fs (loop0): 1 truncate cleaned up
[  324.703073][T16824] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  324.726642][T13922] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  324.738021][T15262] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  324.773557][T16832] loop1: detected capacity change from 0 to 512
[  324.780619][T16832] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  324.845107][T16832] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  324.880679][T16832] ext4 filesystem being mounted at /187/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  324.939451][T16849] loop5: detected capacity change from 0 to 2048
[  324.955440][T16853] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=16853 comm=syz.2.3687
[  325.026100][T16858] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma?
[  325.041562][T16849] Alternate GPT is invalid, using primary GPT.
[  325.048038][T16849]  loop5: p1 p2 p3
[  325.051857][T16849] loop5: partition table partially beyond EOD, truncated
[  325.152393][T13922] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  325.187292][T16869] IPv6: Can't replace route, no match found
[  325.193758][T16869] IPv6: Can't replace route, no match found
[  325.363559][T16912] IPv6: Can't replace route, no match found
[  325.369732][T16912] IPv6: Can't replace route, no match found
[  325.494434][T16924] Alternate GPT is invalid, using primary GPT.
[  325.500811][T16924]  loop4: p1 p2 p3
[  325.504942][T16924] loop4: partition table partially beyond EOD, truncated
[  326.044194][T16937] netlink: 'syz.0.3714': attribute type 1 has an invalid length.
[  326.071259][T16940] EXT4-fs: dax option not supported
[  326.080049][T16940] EXT4-fs: inline encryption not supported
[  326.086174][T16940] EXT4-fs: inline encryption not supported
[  326.092080][T16940] EXT4-fs: Ignoring removed bh option
[  326.098099][T16940] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  326.109252][T16940] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  326.122663][T16940] ext4 filesystem being mounted at /190/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  326.150356][T13922] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.188347][T16945] vlan2: entered allmulticast mode
[  326.276238][T16956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16956 comm=syz.1.3716
[  326.333769][T16969] __nla_validate_parse: 8 callbacks suppressed
[  326.333789][T16969] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3722'.
[  326.386929][T16974] vfat: Unknown parameter '00000000000000000000'
[  326.425185][T16978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3727'.
[  326.449000][T16976] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  326.471811][T16978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3727'.
[  326.491552][T16976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  326.523433][T16976] ext4 filesystem being mounted at /191/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  326.835606][T16985] ip6t_srh: unknown srh match flags  4000
[  327.226269][T16987] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3729'.
[  327.320628][   T29] kauditd_printk_skb: 2777 callbacks suppressed
[  327.320656][   T29] audit: type=1326 audit(1766473020.080:288632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16986 comm="syz.5.3729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1701b6f749 code=0x7ffc0000
[  327.514969][T13922] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.590944][   T29] audit: type=1326 audit(1766473020.110:288633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16986 comm="syz.5.3729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1701b6f749 code=0x7ffc0000
[  327.614892][   T29] audit: type=1326 audit(1766473020.110:288634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16986 comm="syz.5.3729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1701b6f749 code=0x7ffc0000
[  327.639422][   T29] audit: type=1326 audit(1766473020.110:288635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16986 comm="syz.5.3729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1701b6f749 code=0x7ffc0000
[  327.663463][   T29] audit: type=1326 audit(1766473020.110:288636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16986 comm="syz.5.3729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1701b6f749 code=0x7ffc0000
[  327.687289][   T29] audit: type=1326 audit(1766473020.110:288637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16986 comm="syz.5.3729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f1701b6f749 code=0x7ffc0000
[  327.711257][   T29] audit: type=1326 audit(1766473020.110:288638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16986 comm="syz.5.3729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1701b6f749 code=0x7ffc0000
[  327.735634][   T29] audit: type=1326 audit(1766473020.120:288639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16986 comm="syz.5.3729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1701b6f749 code=0x7ffc0000
[  327.759864][   T29] audit: type=1400 audit(1766473020.300:288640): avc:  denied  { connect } for  pid=16993 comm="syz.5.3733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  327.779974][   T29] audit: type=1400 audit(1766473020.300:288641): avc:  denied  { name_connect } for  pid=16993 comm="syz.5.3733" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  327.815641][T16996] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3734'.
[  328.038811][T17004] vlan2: entered allmulticast mode
[  328.098200][T16998] set_capacity_and_notify: 6 callbacks suppressed
[  328.098219][T16998] loop0: detected capacity change from 0 to 2048
[  328.134912][T17010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8976 sclass=netlink_route_socket pid=17010 comm=syz.5.3738
[  328.148086][T17011] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17011 comm=syz.2.3736
[  328.185242][T17006] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3738'.
[  328.234011][T16998] Alternate GPT is invalid, using primary GPT.
[  328.240335][T16998]  loop0: p1 p2 p3
[  328.244117][T16998] loop0: partition table partially beyond EOD, truncated
[  328.397362][T17021] xt_hashlimit: max too large, truncated to 1048576
[  328.413042][T17021] xt_CT: You must specify a L4 protocol and not use inversions on it
[  328.454771][T17027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3743'.
[  328.505008][T17032] loop4: detected capacity change from 0 to 1024
[  328.556751][T17029] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  328.610173][T17032] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  328.658716][T17032] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 3: comm syz.4.3745: lblock 3 mapped to illegal pblock 3 (length 3)
[  328.685561][T17041] FAULT_INJECTION: forcing a failure.
[  328.685561][T17041] name failslab, interval 1, probability 0, space 0, times 0
[  328.698937][T17041] CPU: 0 UID: 0 PID: 17041 Comm: syz.5.3746 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  328.698972][T17041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  328.698984][T17041] Call Trace:
[  328.698991][T17041]  <TASK>
[  328.699000][T17041]  __dump_stack+0x1d/0x30
[  328.699133][T17041]  dump_stack_lvl+0x95/0xd0
[  328.699153][T17041]  dump_stack+0x15/0x1b
[  328.699175][T17041]  should_fail_ex+0x265/0x280
[  328.699203][T17041]  should_failslab+0x8c/0xb0
[  328.699234][T17041]  __kmalloc_cache_noprof+0x65/0x4c0
[  328.699257][T17041]  ? limit_mt_check+0x159/0x2e0
[  328.699279][T17041]  limit_mt_check+0x159/0x2e0
[  328.699332][T17041]  xt_check_match+0x2ad/0x4f0
[  328.699374][T17041]  ? mutex_unlock+0x4f/0x90
[  328.699400][T17041]  ? xt_find_match+0x1d1/0x210
[  328.699433][T17041]  ? xt_find_match+0x1b5/0x210
[  328.699520][T17041]  translate_table+0xb4b/0x1070
[  328.699598][T17041]  ? _copy_from_user+0x89/0xb0
[  328.699625][T17041]  do_ip6t_set_ctl+0x678/0x840
[  328.699666][T17041]  nf_setsockopt+0x199/0x1b0
[  328.699745][T17041]  ipv6_setsockopt+0x11a/0x130
[  328.699768][T17041]  udpv6_setsockopt+0x99/0xb0
[  328.699845][T17041]  sock_common_setsockopt+0x69/0x80
[  328.699917][T17041]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  328.699937][T17041]  __sys_setsockopt+0x184/0x200
[  328.699963][T17041]  __x64_sys_setsockopt+0x64/0x80
[  328.699990][T17041]  x64_sys_call+0x21d5/0x3000
[  328.700068][T17041]  do_syscall_64+0xca/0x2b0
[  328.700139][T17041]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.700165][T17041] RIP: 0033:0x7f1701b6f749
[  328.700182][T17041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  328.700238][T17041] RSP: 002b:00007f17005d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  328.700259][T17041] RAX: ffffffffffffffda RBX: 00007f1701dc5fa0 RCX: 00007f1701b6f749
[  328.700276][T17041] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003
[  328.700291][T17041] RBP: 00007f17005d7090 R08: 00000000000004a8 R09: 0000000000000000
[  328.700307][T17041] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001
[  328.700319][T17041] R13: 00007f1701dc6038 R14: 00007f1701dc5fa0 R15: 00007ffc89453f18
[  328.700344][T17041]  </TASK>
[  328.703174][T17032] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  328.853243][T17047] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[  328.857031][T17032] EXT4-fs (loop4): This should not happen!! Data will be lost
[  328.857031][T17032] 
[  328.876744][T17047] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  328.966196][T17047] vhci_hcd vhci_hcd.0: Device attached
[  329.013938][T17044] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3745: lblock 3 mapped to illegal pblock 3 (length 1)
[  329.055930][T17031] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3745: lblock 3 mapped to illegal pblock 3 (length 1)
[  329.090565][T17044] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3745: lblock 3 mapped to illegal pblock 3 (length 1)
[  329.105741][T17053] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=17053 comm=syz.0.3749
[  329.163225][T17031] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3745: lblock 3 mapped to illegal pblock 3 (length 1)
[  329.190097][T17044] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3745: lblock 3 mapped to illegal pblock 3 (length 1)
[  329.209626][T17031] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3745: lblock 3 mapped to illegal pblock 3 (length 1)
[  329.223844][ T3423] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  329.230861][T17044] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3745: lblock 3 mapped to illegal pblock 3 (length 1)
[  329.273254][T17031] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3745: lblock 3 mapped to illegal pblock 3 (length 1)
[  329.285951][ T3423] usb 11-1: new full-speed USB device number 9 using vhci_hcd
[  329.299095][T17049] vhci_hcd: connection closed
[  329.303153][  T946] vhci_hcd vhci_hcd.5: stop threads
[  329.313181][  T946] vhci_hcd vhci_hcd.5: release socket
[  329.318683][  T946] vhci_hcd vhci_hcd.5: disconnect device
[  329.325117][T17055] IPv6: Can't replace route, no match found
[  329.331269][T17055] IPv6: Can't replace route, no match found
[  329.344428][T17037] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  329.378150][ T3423] usb 11-1: enqueue for inactive port 0
[  329.391103][ T3423] usb 11-1: enqueue for inactive port 0
[  329.397153][ T3423] usb 11-1: enqueue for inactive port 0
[  329.468415][T17061] loop0: detected capacity change from 0 to 2048
[  329.524083][T17061] Alternate GPT is invalid, using primary GPT.
[  329.530372][T17061]  loop0: p1 p2 p3
[  329.534173][T17061] loop0: partition table partially beyond EOD, truncated
[  329.546314][ T3423] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  329.617959][T17072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3756'.
[  329.638759][T17070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3755'.
[  329.923123][T17082] bridge0: port 3(gretap0) entered blocking state
[  329.929715][T17082] bridge0: port 3(gretap0) entered disabled state
[  329.951807][  T959] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  329.964431][  T959] EXT4-fs (loop4): This should not happen!! Data will be lost
[  329.964431][  T959] 
[  329.978447][T17081] loop5: detected capacity change from 0 to 136
[  329.991174][T17082] gretap0: entered allmulticast mode
[  329.997480][T17082] gretap0: entered promiscuous mode
[  330.195923][T17108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3769'.
[  330.246768][T17111] gretap0: left allmulticast mode
[  330.251863][T17111] gretap0: left promiscuous mode
[  330.257378][T17111] bridge0: port 3(gretap0) entered disabled state
[  330.307450][T17116] netlink: 'syz.4.3768': attribute type 13 has an invalid length.
[  330.378090][T17122] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8976 sclass=netlink_route_socket pid=17122 comm=syz.0.3772
[  330.391185][ T7928] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  330.400253][T17119] gretap0: left allmulticast mode
[  330.405398][T17119] gretap0: left promiscuous mode
[  330.410537][T17119] bridge0: port 3(gretap0) entered disabled state
[  330.432256][T17119] netlink: 'syz.1.3770': attribute type 13 has an invalid length.
[  330.445247][ T7928] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  330.506547][ T7928] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  330.588932][T17127] netlink: 'syz.2.3774': attribute type 1 has an invalid length.
[  330.600214][ T7928] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  330.626414][T17130] xt_hashlimit: max too large, truncated to 1048576
[  330.643955][T17130] xt_CT: You must specify a L4 protocol and not use inversions on it
[  330.766641][T17144] netlink: 'syz.4.3782': attribute type 10 has an invalid length.
[  330.795621][T17148] bridge0: port 3(gretap0) entered blocking state
[  330.802158][T17148] bridge0: port 3(gretap0) entered disabled state
[  330.832261][T17149] loop0: detected capacity change from 0 to 2048
[  330.862714][T17148] gretap0: entered allmulticast mode
[  330.883943][T17148] gretap0: entered promiscuous mode
[  330.974700][T17149] Alternate GPT is invalid, using primary GPT.
[  330.981104][T17149]  loop0: p1 p2 p3
[  330.985071][T17149] loop0: partition table partially beyond EOD, truncated
[  330.996117][T17155] loop5: detected capacity change from 0 to 512
[  331.014043][T17155] EXT4-fs: dax option not supported
[  331.024801][T17152] rdma_rxe: rxe_newlink: failed to add bond0
[  331.082482][T17155] loop5: detected capacity change from 0 to 512
[  331.117061][T17155] EXT4-fs: inline encryption not supported
[  331.128216][T17155] EXT4-fs: inline encryption not supported
[  331.134245][T17155] EXT4-fs: Ignoring removed bh option
[  331.141920][T17172] netlink: 'syz.1.3788': attribute type 1 has an invalid length.
[  331.159985][T17155] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  331.205598][T17155] ext4 filesystem being mounted at /458/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  331.208122][T17186] xt_hashlimit: max too large, truncated to 1048576
[  331.226027][T17186] xt_CT: You must specify a L4 protocol and not use inversions on it
[  331.406695][T17201] loop2: detected capacity change from 0 to 2048
[  331.484236][T17206] __nla_validate_parse: 7 callbacks suppressed
[  331.484334][T17206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3799'.
[  331.612293][T17213] loop2: detected capacity change from 0 to 512
[  331.622760][T17213] EXT4-fs: dax option not supported
[  331.637927][T17213] loop2: detected capacity change from 0 to 512
[  331.651411][T17213] EXT4-fs: inline encryption not supported
[  331.661965][T17213] EXT4-fs: inline encryption not supported
[  331.667890][T17213] EXT4-fs: Ignoring removed bh option
[  331.679811][T17224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3805'.
[  331.689170][T17213] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  331.702384][T17226] vlan2: entered allmulticast mode
[  331.710167][T17213] ext4 filesystem being mounted at /185/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  331.710767][T17222] EXT4-fs (loop0): 1 orphan inode deleted
[  331.734659][T17222] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  331.752727][T17222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  331.761356][T17222] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  331.771543][T17237] FAULT_INJECTION: forcing a failure.
[  331.771543][T17237] name failslab, interval 1, probability 0, space 0, times 0
[  331.784371][T17237] CPU: 1 UID: 0 PID: 17237 Comm: syz.2.3811 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  331.784398][T17237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  331.784406][T17237] Call Trace:
[  331.784489][T17237]  <TASK>
[  331.784495][T17237]  __dump_stack+0x1d/0x30
[  331.784513][T17237]  dump_stack_lvl+0x95/0xd0
[  331.784528][T17237]  dump_stack+0x15/0x1b
[  331.784541][T17237]  should_fail_ex+0x265/0x280
[  331.784600][T17237]  should_failslab+0x8c/0xb0
[  331.784615][T17237]  kmem_cache_alloc_lru_noprof+0x6d/0x4c0
[  331.784631][T17237]  ? __d_alloc+0x37/0x340
[  331.784652][T17237]  __d_alloc+0x37/0x340
[  331.784692][T17237]  ? mpol_shared_policy_init+0xbd/0x4c0
[  331.784714][T17237]  d_alloc_pseudo+0x1e/0x80
[  331.784872][T17237]  alloc_file_pseudo+0x71/0x160
[  331.784892][T17237]  __shmem_file_setup+0x1de/0x210
[  331.785004][T17237]  shmem_file_setup+0x3b/0x50
[  331.785016][T17237]  __se_sys_memfd_create+0x2f7/0x6b0
[  331.785033][T17237]  __x64_sys_memfd_create+0x31/0x40
[  331.785076][T17237]  x64_sys_call+0x28cb/0x3000
[  331.785089][T17237]  do_syscall_64+0xca/0x2b0
[  331.785106][T17237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.785118][T17237] RIP: 0033:0x7ff4f12df749
[  331.785186][T17237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  331.785221][T17237] RSP: 002b:00007ff4efd46d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  331.785232][T17237] RAX: ffffffffffffffda RBX: 00000000000005c1 RCX: 00007ff4f12df749
[  331.785239][T17237] RDX: 00007ff4efd46dec RSI: 0000000000000000 RDI: 00007ff4f1364960
[  331.785246][T17237] RBP: 0000200000000a00 R08: 00007ff4efd46b07 R09: 0000000000000000
[  331.785253][T17237] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001
[  331.785260][T17237] R13: 00007ff4efd46dec R14: 00007ff4efd46df0 R15: 00007ffc28de4e28
[  331.785270][T17237]  </TASK>
[  331.785369][T17226] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17226 comm=syz.5.3809
[  331.821732][T17232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  331.834439][T17239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3812'.
[  331.873255][T17232] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  332.108717][T17248] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  332.135913][T17248] ext4 filesystem being mounted at /189/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  332.153359][T17226] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  332.218302][T17251] Alternate GPT is invalid, using primary GPT.
[  332.224800][T17251]  loop4: p1 p2 p3
[  332.228562][T17251] loop4: partition table partially beyond EOD, truncated
[  332.269143][T17226] ext4 filesystem being mounted at /466/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  332.391564][T17264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3820'.
[  332.414083][   T29] kauditd_printk_skb: 195 callbacks suppressed
[  332.414101][   T29] audit: type=1326 audit(1766473025.180:288837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17263 comm="syz.2.3820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f12df749 code=0x7ffc0000
[  332.452984][   T29] audit: type=1326 audit(1766473025.180:288838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17263 comm="syz.2.3820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4f12df749 code=0x7ffc0000
[  332.476876][   T29] audit: type=1326 audit(1766473025.180:288839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17263 comm="syz.2.3820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f12df749 code=0x7ffc0000
[  332.500639][   T29] audit: type=1326 audit(1766473025.180:288840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17263 comm="syz.2.3820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7ff4f12df749 code=0x7ffc0000
[  332.524975][   T29] audit: type=1326 audit(1766473025.180:288841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17263 comm="syz.2.3820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f12df749 code=0x7ffc0000
[  332.548690][   T29] audit: type=1326 audit(1766473025.180:288842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17263 comm="syz.2.3820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f12df749 code=0x7ffc0000
[  332.573205][T17269] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  332.579843][T17269] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  332.587681][T17269] vhci_hcd vhci_hcd.0: Device attached
[  332.670726][   T29] audit: type=1326 audit(1766473025.430:288843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17278 comm="syz.0.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83805bf749 code=0x7ffc0000
[  332.694900][   T29] audit: type=1326 audit(1766473025.430:288844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17278 comm="syz.0.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83805bf749 code=0x7ffc0000
[  332.718874][   T29] audit: type=1326 audit(1766473025.430:288845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17278 comm="syz.0.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83805bf749 code=0x7ffc0000
[  332.742988][   T29] audit: type=1326 audit(1766473025.430:288846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17278 comm="syz.0.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83805bf749 code=0x7ffc0000
[  332.784186][ T3423] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  332.824091][T17281] netlink: 'syz.0.3826': attribute type 10 has an invalid length.
[  332.836810][T17281] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3826'.
[  332.852994][ T3423] usb 5-1: new full-speed USB device number 14 using vhci_hcd
[  332.894678][T17286] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3825'.
[  332.900089][  T946] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  332.912828][  T946] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  332.921875][T17287] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3827'.
[  332.931051][  T946] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  332.963817][  T946] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  333.087979][T17298] EXT4-fs: dax option not supported
[  333.101868][T17298] EXT4-fs: inline encryption not supported
[  333.107986][T17298] EXT4-fs: inline encryption not supported
[  333.113894][T17298] EXT4-fs: Ignoring removed bh option
[  333.126231][T17270] vhci_hcd: connection reset by peer
[  333.133788][T17304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  333.142510][  T959] vhci_hcd vhci_hcd.2: stop threads
[  333.143669][T17304] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  333.147816][  T959] vhci_hcd vhci_hcd.2: release socket
[  333.161078][  T959] vhci_hcd vhci_hcd.2: disconnect device
[  333.177696][T17298] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  333.189641][T17305] set_capacity_and_notify: 6 callbacks suppressed
[  333.189660][T17305] loop4: detected capacity change from 0 to 2048
[  333.193054][T17296] rdma_rxe: rxe_newlink: failed to add bond0
[  333.224598][T17298] ext4 filesystem being mounted at /468/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  333.253116][T17305]  loop4: p1 p3 p4
[  333.255617][T17309] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3833'.
[  333.266738][T17305] loop4: p4 size 589824 extends beyond EOD, truncated
[  333.323464][T17290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14301 sclass=netlink_route_socket pid=17290 comm=syz.4.3828
[  333.342291][T17315] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  333.458758][T17319] vlan2: entered allmulticast mode
[  333.481795][T17321] loop5: detected capacity change from 0 to 1024
[  333.517847][T17321] ext4 filesystem being mounted at /473/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  333.528726][T17323] loop0: detected capacity change from 0 to 1024
[  333.540058][T17319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17319 comm=syz.4.3837
[  333.542416][T17321] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 3: comm syz.5.3838: lblock 3 mapped to illegal pblock 3 (length 3)
[  333.583024][T17321] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  333.595488][T17321] EXT4-fs (loop5): This should not happen!! Data will be lost
[  333.595488][T17321] 
[  333.606530][T17323] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  333.625717][T17323] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: block 3: comm syz.0.3839: lblock 3 mapped to illegal pblock 3 (length 3)
[  333.643508][T17331] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.3838: lblock 3 mapped to illegal pblock 3 (length 1)
[  333.726925][T17323] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  333.739737][T17323] EXT4-fs (loop0): This should not happen!! Data will be lost
[  333.739737][T17323] 
[  333.757846][T17332] loop4: detected capacity change from 0 to 512
[  333.772781][T17320] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.3838: lblock 3 mapped to illegal pblock 3 (length 1)
[  333.788554][T17337] netlink: 'syz.1.3840': attribute type 10 has an invalid length.
[  333.793541][T17331] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.3838: lblock 3 mapped to illegal pblock 3 (length 1)
[  333.798564][T17337] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3840'.
[  333.813199][T17320] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.3838: lblock 3 mapped to illegal pblock 3 (length 1)
[  333.822795][T17333] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.3839: lblock 3 mapped to illegal pblock 3 (length 1)
[  333.850480][T17320] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.3838: lblock 3 mapped to illegal pblock 3 (length 1)
[  333.865087][T17331] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.3838: lblock 3 mapped to illegal pblock 3 (length 1)
[  333.899637][T17339] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.3839: lblock 3 mapped to illegal pblock 3 (length 1)
[  333.914085][T17332] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  333.922863][T17322] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.3839: lblock 3 mapped to illegal pblock 3 (length 1)
[  333.937403][T17346] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  333.943965][T17346] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  333.951597][T17346] vhci_hcd vhci_hcd.0: Device attached
[  333.957535][T17320] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.3838: lblock 3 mapped to illegal pblock 3 (length 1)
[  333.971823][T17333] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.3839: lblock 3 mapped to illegal pblock 3 (length 1)
[  333.986494][T17339] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.3839: lblock 3 mapped to illegal pblock 3 (length 1)
[  334.000791][T17331] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.3838: lblock 3 mapped to illegal pblock 3 (length 1)
[  334.015152][T17322] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.3839: lblock 3 mapped to illegal pblock 3 (length 1)
[  334.065013][T17332] ext4 filesystem being mounted at /136/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  334.076415][T17320] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.3838: lblock 3 mapped to illegal pblock 3 (length 1)
[  334.100587][T17333] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.3839: lblock 3 mapped to illegal pblock 3 (length 1)
[  334.162494][T17322] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.3839: lblock 3 mapped to illegal pblock 3 (length 1)
[  334.176638][ T3912] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  334.195084][T17322] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.3839: lblock 3 mapped to illegal pblock 3 (length 1)
[  334.262186][ T3912] usb 3-1: new full-speed USB device number 9 using vhci_hcd
[  334.496244][T17348] vhci_hcd: connection reset by peer
[  334.508391][ T6891] vhci_hcd vhci_hcd.1: stop threads
[  334.508822][ T7926] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  334.513684][ T6891] vhci_hcd vhci_hcd.1: release socket
[  334.513708][ T6891] vhci_hcd vhci_hcd.1: disconnect device
[  334.537425][ T7926] EXT4-fs (loop0): This should not happen!! Data will be lost
[  334.537425][ T7926] 
[  334.589868][T17355] netlink: 'syz.0.3844': attribute type 29 has an invalid length.
[  334.600187][T17355] netlink: 'syz.0.3844': attribute type 29 has an invalid length.
[  334.611889][T17355] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3844'.
[  334.688975][ T6891] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  334.701628][ T6891] EXT4-fs (loop5): This should not happen!! Data will be lost
[  334.701628][ T6891] 
[  334.730387][T17366] tc_dump_action: action bad kind
[  334.748331][T17369] vlan2: entered allmulticast mode
[  334.793404][T17374] loop0: detected capacity change from 0 to 512
[  334.820757][    T2] ==================================================================
[  334.828982][    T2] BUG: KCSAN: data-race in copy_process / free_pid
[  334.835502][    T2] 
[  334.837848][    T2] read-write to 0xffffffff86860008 of 4 bytes by task 17379 on cpu 1:
[  334.845999][    T2]  free_pid+0xb9/0x1d0
[  334.850081][    T2]  free_pids+0x9e/0xb0
[  334.854153][    T2]  release_task+0x9a7/0xb60
[  334.858660][    T2]  do_exit+0xd4d/0x1590
[  334.862814][    T2]  do_group_exit+0xff/0x140
[  334.867320][    T2]  get_signal+0xe58/0xf70
[  334.871740][    T2]  arch_do_signal_or_restart+0x96/0x450
[  334.877295][    T2]  exit_to_user_mode_loop+0x6a/0x740
[  334.882846][    T2]  do_syscall_64+0x1e1/0x2b0
[  334.887538][    T2]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.893449][    T2] 
[  334.895880][    T2] read to 0xffffffff86860008 of 4 bytes by task 2 on cpu 0:
[  334.903344][    T2]  copy_process+0x16d4/0x1ef0
[  334.908122][    T2]  kernel_clone+0x16c/0x5c0
[  334.912633][    T2]  kernel_thread+0xad/0xe0
[  334.917070][    T2]  kthreadd+0x26c/0x340
[  334.921239][    T2]  ret_from_fork+0x149/0x290
[  334.925855][    T2]  ret_from_fork_asm+0x1a/0x30
[  334.930630][    T2] 
[  334.932956][    T2] value changed: 0x80000126 -> 0x80000125
[  334.938772][    T2] 
[  334.941096][    T2] Reported by Kernel Concurrency Sanitizer on:
[  334.947254][    T2] CPU: 0 UID: 0 PID: 2 Comm: kthreadd Not tainted syzkaller #0 PREEMPT(voluntary) 
[  334.956724][    T2] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  334.966869][    T2] ==================================================================
[  334.977124][T17374] EXT4-fs (loop0): 1 orphan inode deleted
[  334.983789][T17374] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  335.010605][T17369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17369 comm=syz.4.3850
[  335.255288][T17369] loop4: detected capacity change from 0 to 512
[  335.270157][T17369] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  335.309143][T17369] ext4 filesystem being mounted at /139/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  337.952996][ T3423] usb 5-1: enqueue for inactive port 0
[  337.958715][ T3423] usb 5-1: enqueue for inactive port 0
[  338.033046][ T3423] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  339.313035][ T3912] usb 3-1: enqueue for inactive port 0
[  339.318819][ T3912] usb 3-1: enqueue for inactive port 0
[  339.393027][ T3912] vhci_hcd vhci_hcd.1: vhci_device speed not set